feat(client-emr-serverless): Added support for enabling disk encryption using customer managed AWS KMS keys to CreateApplication, UpdateApplication and StartJobRun APIs.

awstools · awstools · commit 9d932c38fdfa · 2026-01-06T19:12:12.000Z
diff --git a/clients/client-emr-serverless/src/commands/CreateApplicationCommand.ts b/clients/client-emr-serverless/src/commands/CreateApplicationCommand.ts
@@ -127,6 +127,12 @@ export interface CreateApplicationCommandOutput extends CreateApplicationRespons
  *       remoteWriteUrl: "STRING_VALUE",
  *     },
  *   },
+ *   diskEncryptionConfiguration: { // DiskEncryptionConfiguration
+ *     encryptionContext: { // EncryptionContext
+ *       "<keys>": "STRING_VALUE",
+ *     },
+ *     encryptionKeyArn: "STRING_VALUE",
+ *   },
  *   interactiveConfiguration: { // InteractiveConfiguration
  *     studioEnabled: true || false,
  *     livyEndpointEnabled: true || false,
diff --git a/clients/client-emr-serverless/src/commands/GetApplicationCommand.ts b/clients/client-emr-serverless/src/commands/GetApplicationCommand.ts
@@ -140,6 +140,12 @@ export interface GetApplicationCommandOutput extends GetApplicationResponse, __M
  * //         remoteWriteUrl: "STRING_VALUE",
  * //       },
  * //     },
+ * //     diskEncryptionConfiguration: { // DiskEncryptionConfiguration
+ * //       encryptionContext: { // EncryptionContext
+ * //         "<keys>": "STRING_VALUE",
+ * //       },
+ * //       encryptionKeyArn: "STRING_VALUE",
+ * //     },
  * //     interactiveConfiguration: { // InteractiveConfiguration
  * //       studioEnabled: true || false,
  * //       livyEndpointEnabled: true || false,
diff --git a/clients/client-emr-serverless/src/commands/GetJobRunCommand.ts b/clients/client-emr-serverless/src/commands/GetJobRunCommand.ts
@@ -104,6 +104,12 @@ export interface GetJobRunCommandOutput extends GetJobRunResponse, __MetadataBea
  * //           remoteWriteUrl: "STRING_VALUE",
  * //         },
  * //       },
+ * //       diskEncryptionConfiguration: { // DiskEncryptionConfiguration
+ * //         encryptionContext: { // EncryptionContext
+ * //           "<keys>": "STRING_VALUE",
+ * //         },
+ * //         encryptionKeyArn: "STRING_VALUE",
+ * //       },
  * //     },
  * //     jobDriver: { // JobDriver Union: only one key present
  * //       sparkSubmit: { // SparkSubmit
diff --git a/clients/client-emr-serverless/src/commands/StartJobRunCommand.ts b/clients/client-emr-serverless/src/commands/StartJobRunCommand.ts
@@ -102,6 +102,12 @@ export interface StartJobRunCommandOutput extends StartJobRunResponse, __Metadat
  *         remoteWriteUrl: "STRING_VALUE",
  *       },
  *     },
+ *     diskEncryptionConfiguration: { // DiskEncryptionConfiguration
+ *       encryptionContext: { // EncryptionContext
+ *         "<keys>": "STRING_VALUE",
+ *       },
+ *       encryptionKeyArn: "STRING_VALUE",
+ *     },
  *   },
  *   tags: { // TagMap
  *     "<keys>": "STRING_VALUE",
diff --git a/clients/client-emr-serverless/src/commands/UpdateApplicationCommand.ts b/clients/client-emr-serverless/src/commands/UpdateApplicationCommand.ts
@@ -127,6 +127,12 @@ export interface UpdateApplicationCommandOutput extends UpdateApplicationRespons
  *       remoteWriteUrl: "STRING_VALUE",
  *     },
  *   },
+ *   diskEncryptionConfiguration: { // DiskEncryptionConfiguration
+ *     encryptionContext: { // EncryptionContext
+ *       "<keys>": "STRING_VALUE",
+ *     },
+ *     encryptionKeyArn: "STRING_VALUE",
+ *   },
  *   schedulerConfiguration: { // SchedulerConfiguration
  *     queueTimeoutMinutes: Number("int"),
  *     maxConcurrentRuns: Number("int"),
@@ -240,6 +246,12 @@ export interface UpdateApplicationCommandOutput extends UpdateApplicationRespons
  * //         remoteWriteUrl: "STRING_VALUE",
  * //       },
  * //     },
+ * //     diskEncryptionConfiguration: { // DiskEncryptionConfiguration
+ * //       encryptionContext: { // EncryptionContext
+ * //         "<keys>": "STRING_VALUE",
+ * //       },
+ * //       encryptionKeyArn: "STRING_VALUE",
+ * //     },
  * //     interactiveConfiguration: { // InteractiveConfiguration
  * //       studioEnabled: true || false,
  * //       livyEndpointEnabled: true || false,
diff --git a/clients/client-emr-serverless/src/models/models_0.ts b/clients/client-emr-serverless/src/models/models_0.ts
@@ -31,6 +31,24 @@ export interface AutoStopConfig {
   idleTimeoutMinutes?: number | undefined;
 }
 
+/**
+ * <p>The configuration object that allows encrypting local disks.</p>
+ * @public
+ */
+export interface DiskEncryptionConfiguration {
+  /**
+   * <p>Specifies the optional encryption context that will be used when encrypting the data. An encryption context is a collection of non-secret key-value pairs that represent additional authenticated data. </p>
+   * @public
+   */
+  encryptionContext?: Record<string, string> | undefined;
+
+  /**
+   * <p>The KMS key ARN to encrypt local disks.</p>
+   * @public
+   */
+  encryptionKeyArn?: string | undefined;
+}
+
 /**
  * <p>The IAM Identity Center Configuration accepts the Identity Center instance parameter required to enable trusted identity propagation. This configuration allows identity propagation between integrated services and the Identity Center instance.</p>
  * @public
@@ -1401,6 +1419,12 @@ export interface Application {
    */
   monitoringConfiguration?: MonitoringConfiguration | undefined;
 
+  /**
+   * <p>The configuration object that allows encrypting local disks.</p>
+   * @public
+   */
+  diskEncryptionConfiguration?: DiskEncryptionConfiguration | undefined;
+
   /**
    * <p>The interactive configuration object that enables the interactive use cases for an application.</p>
    * @public
@@ -1442,6 +1466,12 @@ export interface ConfigurationOverrides {
    * @public
    */
   monitoringConfiguration?: MonitoringConfiguration | undefined;
+
+  /**
+   * <p>The override configuration to encrypt local disks.</p>
+   * @public
+   */
+  diskEncryptionConfiguration?: DiskEncryptionConfiguration | undefined;
 }
 
 /**
@@ -1538,6 +1568,12 @@ export interface CreateApplicationRequest {
    */
   monitoringConfiguration?: MonitoringConfiguration | undefined;
 
+  /**
+   * <p>The configuration object that allows encrypting local disks.</p>
+   * @public
+   */
+  diskEncryptionConfiguration?: DiskEncryptionConfiguration | undefined;
+
   /**
    * <p>The interactive configuration object that enables the interactive use cases to use when running an application.</p>
    * @public
@@ -1651,6 +1687,12 @@ export interface UpdateApplicationRequest {
    */
   monitoringConfiguration?: MonitoringConfiguration | undefined;
 
+  /**
+   * <p>The configuration object that allows encrypting local disks.</p>
+   * @public
+   */
+  diskEncryptionConfiguration?: DiskEncryptionConfiguration | undefined;
+
   /**
    * <p>The scheduler configuration for batch and streaming jobs running on this application. Supported with release labels emr-7.0.0 and above.</p>
    * @public
diff --git a/clients/client-emr-serverless/src/schemas/schemas_0.ts b/clients/client-emr-serverless/src/schemas/schemas_0.ts
@@ -17,6 +17,7 @@ const _CWLC = "CloudWatchLoggingConfiguration";
 const _DA = "DeleteApplication";
 const _DAR = "DeleteApplicationRequest";
 const _DARe = "DeleteApplicationResponse";
+const _DEC = "DiskEncryptionConfiguration";
 const _EPA = "EntryPointArgument";
 const _EPAn = "EntryPointArguments";
 const _EPP = "EntryPointPath";
@@ -126,9 +127,11 @@ const _cl = "client";
 const _co = "configurations";
 const _cp = "cpu";
 const _d = "disk";
+const _dEC = "diskEncryptionConfiguration";
 const _dT = "diskType";
 const _e = "enabled";
 const _eA = "endedAt";
+const _eC = "encryptionContext";
 const _eIP = "executionIamPolicy";
 const _eKA = "encryptionKeyArn";
 const _eP = "entryPoint";
@@ -250,8 +253,8 @@ var Query: StaticSimpleSchema = [0, n0, _Q, 8, 0];
 var SparkSubmitParameters: StaticSimpleSchema = [0, n0, _SSP, 8, 0];
 export var Application$: StaticStructureSchema = [3, n0, _A,
   0,
-  [_aI, _n, _a, _rL, _t, _s, _sD, _iC, _mC, _cA, _uA, _ta, _aSC, _aSCu, _nC, _ar, _iCm, _wTS, _rC, _mCo, _iCn, _sC, _iCC, _jLCAC],
-  [0, 0, 0, 0, 0, 0, 0, () => InitialCapacityConfigMap, () => MaximumAllowedResources$, 4, 4, 128 | 0, () => AutoStartConfig$, () => AutoStopConfig$, () => NetworkConfiguration$, 0, () => ImageConfiguration$, () => WorkerTypeSpecificationMap, [() => ConfigurationList, 0], () => MonitoringConfiguration$, () => InteractiveConfiguration$, () => SchedulerConfiguration$, () => IdentityCenterConfiguration$, () => JobLevelCostAllocationConfiguration$]
+  [_aI, _n, _a, _rL, _t, _s, _sD, _iC, _mC, _cA, _uA, _ta, _aSC, _aSCu, _nC, _ar, _iCm, _wTS, _rC, _mCo, _dEC, _iCn, _sC, _iCC, _jLCAC],
+  [0, 0, 0, 0, 0, 0, 0, () => InitialCapacityConfigMap, () => MaximumAllowedResources$, 4, 4, 128 | 0, () => AutoStartConfig$, () => AutoStopConfig$, () => NetworkConfiguration$, 0, () => ImageConfiguration$, () => WorkerTypeSpecificationMap, [() => ConfigurationList, 0], () => MonitoringConfiguration$, () => DiskEncryptionConfiguration$, () => InteractiveConfiguration$, () => SchedulerConfiguration$, () => IdentityCenterConfiguration$, () => JobLevelCostAllocationConfiguration$]
 ];
 export var ApplicationSummary$: StaticStructureSchema = [3, n0, _AS,
   0,
@@ -290,8 +293,8 @@ export var Configuration$: StaticStructureSchema = [3, n0, _C,
 ];
 export var ConfigurationOverrides$: StaticStructureSchema = [3, n0, _CO,
   0,
-  [_aC, _mCo],
-  [[() => ConfigurationList, 0], () => MonitoringConfiguration$]
+  [_aC, _mCo, _dEC],
+  [[() => ConfigurationList, 0], () => MonitoringConfiguration$, () => DiskEncryptionConfiguration$]
 ];
 export var ConflictException$: StaticErrorSchema = [-3, n0, _CE,
   { [_er]: _cl, [_hE]: 409 },
@@ -301,8 +304,8 @@ export var ConflictException$: StaticErrorSchema = [-3, n0, _CE,
 TypeRegistry.for(n0).registerError(ConflictException$, ConflictException);
 export var CreateApplicationRequest$: StaticStructureSchema = [3, n0, _CAR,
   0,
-  [_n, _rL, _t, _cT, _iC, _mC, _ta, _aSC, _aSCu, _nC, _ar, _iCm, _wTS, _rC, _mCo, _iCn, _sC, _iCC, _jLCAC],
-  [0, 0, 0, [0, 4], () => InitialCapacityConfigMap, () => MaximumAllowedResources$, 128 | 0, () => AutoStartConfig$, () => AutoStopConfig$, () => NetworkConfiguration$, 0, () => ImageConfigurationInput$, () => WorkerTypeSpecificationInputMap, [() => ConfigurationList, 0], () => MonitoringConfiguration$, () => InteractiveConfiguration$, () => SchedulerConfiguration$, () => IdentityCenterConfigurationInput$, () => JobLevelCostAllocationConfiguration$]
+  [_n, _rL, _t, _cT, _iC, _mC, _ta, _aSC, _aSCu, _nC, _ar, _iCm, _wTS, _rC, _mCo, _dEC, _iCn, _sC, _iCC, _jLCAC],
+  [0, 0, 0, [0, 4], () => InitialCapacityConfigMap, () => MaximumAllowedResources$, 128 | 0, () => AutoStartConfig$, () => AutoStopConfig$, () => NetworkConfiguration$, 0, () => ImageConfigurationInput$, () => WorkerTypeSpecificationInputMap, [() => ConfigurationList, 0], () => MonitoringConfiguration$, () => DiskEncryptionConfiguration$, () => InteractiveConfiguration$, () => SchedulerConfiguration$, () => IdentityCenterConfigurationInput$, () => JobLevelCostAllocationConfiguration$]
 ];
 export var CreateApplicationResponse$: StaticStructureSchema = [3, n0, _CARr,
   0,
@@ -319,6 +322,11 @@ export var DeleteApplicationResponse$: StaticStructureSchema = [3, n0, _DARe,
   [],
   []
 ];
+export var DiskEncryptionConfiguration$: StaticStructureSchema = [3, n0, _DEC,
+  0,
+  [_eC, _eKA],
+  [128 | 0, 0]
+];
 export var GetApplicationRequest$: StaticStructureSchema = [3, n0, _GAR,
   0,
   [_aI],
@@ -574,8 +582,8 @@ export var UntagResourceResponse$: StaticStructureSchema = [3, n0, _URRn,
 ];
 export var UpdateApplicationRequest$: StaticStructureSchema = [3, n0, _UAR,
   0,
-  [_aI, _cT, _iC, _mC, _aSC, _aSCu, _nC, _ar, _iCm, _wTS, _iCn, _rL, _rC, _mCo, _sC, _iCC, _jLCAC],
-  [[0, 1], [0, 4], () => InitialCapacityConfigMap, () => MaximumAllowedResources$, () => AutoStartConfig$, () => AutoStopConfig$, () => NetworkConfiguration$, 0, () => ImageConfigurationInput$, () => WorkerTypeSpecificationInputMap, () => InteractiveConfiguration$, 0, [() => ConfigurationList, 0], () => MonitoringConfiguration$, () => SchedulerConfiguration$, () => IdentityCenterConfigurationInput$, () => JobLevelCostAllocationConfiguration$]
+  [_aI, _cT, _iC, _mC, _aSC, _aSCu, _nC, _ar, _iCm, _wTS, _iCn, _rL, _rC, _mCo, _dEC, _sC, _iCC, _jLCAC],
+  [[0, 1], [0, 4], () => InitialCapacityConfigMap, () => MaximumAllowedResources$, () => AutoStartConfig$, () => AutoStopConfig$, () => NetworkConfiguration$, 0, () => ImageConfigurationInput$, () => WorkerTypeSpecificationInputMap, () => InteractiveConfiguration$, 0, [() => ConfigurationList, 0], () => MonitoringConfiguration$, () => DiskEncryptionConfiguration$, () => SchedulerConfiguration$, () => IdentityCenterConfigurationInput$, () => JobLevelCostAllocationConfiguration$]
 ];
 export var UpdateApplicationResponse$: StaticStructureSchema = [3, n0, _UARp,
   0,
@@ -629,6 +637,7 @@ var PolicyArnList = 64 | 0;
 var SecurityGroupIds = 64 | 0;
 var SubnetIds = 64 | 0;
 var TagKeyList = 64 | 0;
+var EncryptionContext = 128 | 0;
 var InitialCapacityConfigMap: StaticMapSchema = [2, n0, _ICCM,
   0, 0, () => InitialCapacityConfig$
 ];
diff --git a/clients/client-emr-serverless/test/index-objects.spec.mjs b/clients/client-emr-serverless/test/index-objects.spec.mjs
@@ -22,6 +22,7 @@ import {
   DeleteApplicationCommand,
   DeleteApplicationRequest$,
   DeleteApplicationResponse$,
+  DiskEncryptionConfiguration$,
   EMRServerless,
   EMRServerlessClient,
   EMRServerlessServiceException,
@@ -169,6 +170,7 @@ assert(typeof CreateApplicationRequest$ === "object");
 assert(typeof CreateApplicationResponse$ === "object");
 assert(typeof DeleteApplicationRequest$ === "object");
 assert(typeof DeleteApplicationResponse$ === "object");
+assert(typeof DiskEncryptionConfiguration$ === "object");
 assert(typeof GetApplicationRequest$ === "object");
 assert(typeof GetApplicationResponse$ === "object");
 assert(typeof GetDashboardForJobRunRequest$ === "object");
diff --git a/clients/client-emr-serverless/test/index-types.ts b/clients/client-emr-serverless/test/index-types.ts
@@ -67,6 +67,7 @@ export type {
   CreateApplicationResponse,
   DeleteApplicationRequest,
   DeleteApplicationResponse,
+  DiskEncryptionConfiguration,
   GetApplicationRequest,
   GetApplicationResponse,
   GetDashboardForJobRunRequest,
diff --git a/codegen/sdk-codegen/aws-models/emr-serverless.json b/codegen/sdk-codegen/aws-models/emr-serverless.json
@@ -129,6 +129,12 @@
         "monitoringConfiguration": {
           "target": "com.amazonaws.emrserverless#MonitoringConfiguration"
         },
+        "diskEncryptionConfiguration": {
+          "target": "com.amazonaws.emrserverless#DiskEncryptionConfiguration",
+          "traits": {
+            "smithy.api#documentation": "<p>The configuration object that allows encrypting local disks.</p>"
+          }
+        },
         "interactiveConfiguration": {
           "target": "com.amazonaws.emrserverless#InteractiveConfiguration",
           "traits": {
@@ -1296,6 +1302,12 @@
           "traits": {
             "smithy.api#documentation": "<p>The override configurations for monitoring.</p>"
           }
+        },
+        "diskEncryptionConfiguration": {
+          "target": "com.amazonaws.emrserverless#DiskEncryptionConfiguration",
+          "traits": {
+            "smithy.api#documentation": "<p>The override configuration to encrypt local disks.</p>"
+          }
         }
       },
       "traits": {
@@ -1476,6 +1488,12 @@
             "smithy.api#documentation": "<p>The configuration setting for monitoring.</p>"
           }
         },
+        "diskEncryptionConfiguration": {
+          "target": "com.amazonaws.emrserverless#DiskEncryptionConfiguration",
+          "traits": {
+            "smithy.api#documentation": "<p>The configuration object that allows encrypting local disks.</p>"
+          }
+        },
         "interactiveConfiguration": {
           "target": "com.amazonaws.emrserverless#InteractiveConfiguration",
           "traits": {
@@ -1577,6 +1595,26 @@
       "type": "structure",
       "members": {}
     },
+    "com.amazonaws.emrserverless#DiskEncryptionConfiguration": {
+      "type": "structure",
+      "members": {
+        "encryptionContext": {
+          "target": "com.amazonaws.emrserverless#EncryptionContext",
+          "traits": {
+            "smithy.api#documentation": "<p>Specifies the optional encryption context that will be used when encrypting the data. An encryption context is a collection of non-secret key-value pairs that represent additional authenticated data. </p>"
+          }
+        },
+        "encryptionKeyArn": {
+          "target": "com.amazonaws.emrserverless#EncryptionKeyArn",
+          "traits": {
+            "smithy.api#documentation": "<p>The KMS key ARN to encrypt local disks.</p>"
+          }
+        }
+      },
+      "traits": {
+        "smithy.api#documentation": "<p>The configuration object that allows encrypting local disks.</p>"
+      }
+    },
     "com.amazonaws.emrserverless#DiskSize": {
       "type": "string",
       "traits": {
@@ -1603,6 +1641,38 @@
         }
       }
     },
+    "com.amazonaws.emrserverless#EncryptionContext": {
+      "type": "map",
+      "key": {
+        "target": "com.amazonaws.emrserverless#EncryptionContextKey"
+      },
+      "value": {
+        "target": "com.amazonaws.emrserverless#EncryptionContextValue"
+      },
+      "traits": {
+        "smithy.api#length": {
+          "max": 8
+        }
+      }
+    },
+    "com.amazonaws.emrserverless#EncryptionContextKey": {
+      "type": "string",
+      "traits": {
+        "smithy.api#length": {
+          "min": 1,
+          "max": 128
+        }
+      }
+    },
+    "com.amazonaws.emrserverless#EncryptionContextValue": {
+      "type": "string",
+      "traits": {
+        "smithy.api#length": {
+          "min": 1,
+          "max": 384
+        }
+      }
+    },
     "com.amazonaws.emrserverless#EncryptionKeyArn": {
       "type": "string",
       "traits": {
@@ -4081,6 +4151,12 @@
             "smithy.api#documentation": "<p>The configuration setting for monitoring.</p>"
           }
         },
+        "diskEncryptionConfiguration": {
+          "target": "com.amazonaws.emrserverless#DiskEncryptionConfiguration",
+          "traits": {
+            "smithy.api#documentation": "<p>The configuration object that allows encrypting local disks.</p>"
+          }
+        },
         "schedulerConfiguration": {
           "target": "com.amazonaws.emrserverless#SchedulerConfiguration",
           "traits": {
