aws-sdk-backup 1.32.0 → 1.36.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 5e452030ece598d63e2dd733fb79dd0f4e7489c04faa1a1b7ef6123e3b7f8d37
-  data.tar.gz: 2e38cdc13acec8e44266ac7143e3d48f1b52c08c9335d7cdf1b70c8244039692
+  metadata.gz: 10bb84f9468a8735f8721e768d572880b4e96b8c68404a17a71bc34728c19cbb
+  data.tar.gz: dd366fd8344518266a47ee450e9423ef74a4dcdf4c4200eae3ba6ffd8dd06646
 SHA512:
-  metadata.gz: 95be955be95007405eb52c8a50f5e48c2c171263b2b018e2359d2151d524609a0d68f74069fe28fa2edafd06296c5f84de6ec78bfa61ab3c43fd225a3a5a3386
-  data.tar.gz: f6a10bbf5e65930c97be0152b727c3d5f8138b2a96c678b9f3d7885ed6a11c4044672c13280a767a0b3a33e40ca6629378ee6184ce87507bc22c986a438d8f3c
+  metadata.gz: 56638f7b04994e1fcef15278573b95d132bbf87d4e443b2d82c7b63796353f6354b2a19c1506f7837d3f6332080a2cc55cc16f77d6165d56364c1a68eabeeac3
+  data.tar.gz: 175a48beea07e61da7bb3d22705e27c07ed497896f0779629c7662b090c63490a47ac92907362a1f32e8f7f19828d04a0e43acb0cb5fba4ac0b209cbe48e8247

data/CHANGELOG.md

@@ -1,6 +1,26 @@
 Unreleased Changes
 ------------------
 
+1.36.0 (2021-11-04)
+------------------
+
+* Feature - Code Generated Changes, see `./build_tools` or `aws-sdk-core`'s CHANGELOG.md for details.
+
+1.35.0 (2021-10-18)
+------------------
+
+* Feature - Code Generated Changes, see `./build_tools` or `aws-sdk-core`'s CHANGELOG.md for details.
+
+1.34.0 (2021-10-07)
+------------------
+
+* Feature - Launch of AWS Backup Vault Lock, which protects your backups from malicious and accidental actions, works with existing backup policies, and helps you meet compliance requirements.
+
+1.33.0 (2021-10-05)
+------------------
+
+* Feature - AWS Backup Audit Manager framework report.
+
 1.32.0 (2021-09-01)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.32.0
+1.36.0

data/lib/aws-sdk-backup/client.rb

@@ -275,6 +275,15 @@ module Aws::Backup
     #     ** Please note ** When response stubbing is enabled, no HTTP
     #     requests are made, and retries are disabled.
     #
+    #   @option options [Boolean] :use_dualstack_endpoint
+    #     When set to `true`, dualstack enabled endpoints (with `.aws` TLD)
+    #     will be used if available.
+    #
+    #   @option options [Boolean] :use_fips_endpoint
+    #     When set to `true`, fips compatible endpoints will be used if available.
+    #     When a `fips` region is used, the region is normalized and this config
+    #     is set to `true`.
+    #
     #   @option options [Boolean] :validate_params (true)
     #     When `true`, request parameters are validated before
     #     sending the request.
@@ -570,8 +579,7 @@ module Aws::Backup
     # collection of controls that you can use to evaluate your backup
     # practices. By using pre-built customizable controls to define your
     # policies, you can evaluate whether your backup practices comply with
-    # your policies. To get insights into the compliance status of your
-    # frameworks, you can set up automatic daily reports.
+    # your policies and which resources are not yet in compliance.
     #
     # @option params [required, String] :framework_name
     #   The unique name of the framework. The name must be between 1 and 256
@@ -672,11 +680,16 @@ module Aws::Backup
     #   Identifies the report template for the report. Reports are built using
     #   a report template. The report templates are:
     #
-    #   `BACKUP_JOB_REPORT | COPY_JOB_REPORT | RESTORE_JOB_REPORT`
+    #   `RESOURCE_COMPLIANCE_REPORT | CONTROL_COMPLIANCE_REPORT |
+    #   BACKUP_JOB_REPORT | COPY_JOB_REPORT | RESTORE_JOB_REPORT`
+    #
+    #   If the report template is `RESOURCE_COMPLIANCE_REPORT` or
+    #   `CONTROL_COMPLIANCE_REPORT`, this API resource also describes the
+    #   report coverage by Amazon Web Services Regions and frameworks.
     #
     # @option params [Hash<String,String>] :report_plan_tags
-    #   Metadata that you can assign to help organize the frameworks that you
-    #   create. Each tag is a key-value pair.
+    #   Metadata that you can assign to help organize the report plans that
+    #   you create. Each tag is a key-value pair.
     #
     # @option params [String] :idempotency_token
     #   A customer-chosen string that you can use to distinguish between
@@ -691,6 +704,7 @@ module Aws::Backup
     #
     #   * {Types::CreateReportPlanOutput#report_plan_name #report_plan_name} => String
     #   * {Types::CreateReportPlanOutput#report_plan_arn #report_plan_arn} => String
+    #   * {Types::CreateReportPlanOutput#creation_time #creation_time} => Time
     #
     # @example Request syntax with placeholder values
     #
@@ -704,6 +718,8 @@ module Aws::Backup
     #     },
     #     report_setting: { # required
     #       report_template: "string", # required
+    #       framework_arns: ["string"],
+    #       number_of_frameworks: 1,
     #     },
     #     report_plan_tags: {
     #       "string" => "string",
@@ -715,6 +731,7 @@ module Aws::Backup
     #
     #   resp.report_plan_name #=> String
     #   resp.report_plan_arn #=> String
+    #   resp.creation_time #=> Time
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/backup-2018-11-15/CreateReportPlan AWS API Documentation
     #
@@ -842,6 +859,38 @@ module Aws::Backup
       req.send_request(options)
     end
 
+    # Deletes Backup Vault Lock from a backup vault specified by a backup
+    # vault name.
+    #
+    # If the Vault Lock configuration is immutable, then you cannot delete
+    # Vault Lock using API operations, and you will receive an
+    # `InvalidRequestException` if you attempt to do so. For more
+    # information, see [Vault Lock][1] in the *Backup Developer Guide*.
+    #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com/aws-backup/latest/devguide/vault-lock.html
+    #
+    # @option params [required, String] :backup_vault_name
+    #   The name of the backup vault from which to delete Backup Vault Lock.
+    #
+    # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.delete_backup_vault_lock_configuration({
+    #     backup_vault_name: "BackupVaultName", # required
+    #   })
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/backup-2018-11-15/DeleteBackupVaultLockConfiguration AWS API Documentation
+    #
+    # @overload delete_backup_vault_lock_configuration(params = {})
+    # @param [Hash] params ({})
+    def delete_backup_vault_lock_configuration(params = {}, options = {})
+      req = build_request(:delete_backup_vault_lock_configuration, params)
+      req.send_request(options)
+    end
+
     # Deletes event notifications for the specified backup vault.
     #
     # @option params [required, String] :backup_vault_name
@@ -1032,6 +1081,10 @@ module Aws::Backup
     #   * {Types::DescribeBackupVaultOutput#creation_date #creation_date} => Time
     #   * {Types::DescribeBackupVaultOutput#creator_request_id #creator_request_id} => String
     #   * {Types::DescribeBackupVaultOutput#number_of_recovery_points #number_of_recovery_points} => Integer
+    #   * {Types::DescribeBackupVaultOutput#locked #locked} => Boolean
+    #   * {Types::DescribeBackupVaultOutput#min_retention_days #min_retention_days} => Integer
+    #   * {Types::DescribeBackupVaultOutput#max_retention_days #max_retention_days} => Integer
+    #   * {Types::DescribeBackupVaultOutput#lock_date #lock_date} => Time
     #
     # @example Request syntax with placeholder values
     #
@@ -1047,6 +1100,10 @@ module Aws::Backup
     #   resp.creation_date #=> Time
     #   resp.creator_request_id #=> String
     #   resp.number_of_recovery_points #=> Integer
+    #   resp.locked #=> Boolean
+    #   resp.min_retention_days #=> Integer
+    #   resp.max_retention_days #=> Integer
+    #   resp.lock_date #=> Time
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/backup-2018-11-15/DescribeBackupVault AWS API Documentation
     #
@@ -1379,6 +1436,9 @@ module Aws::Backup
     #   resp.report_plan.report_plan_name #=> String
     #   resp.report_plan.report_plan_description #=> String
     #   resp.report_plan.report_setting.report_template #=> String
+    #   resp.report_plan.report_setting.framework_arns #=> Array
+    #   resp.report_plan.report_setting.framework_arns[0] #=> String
+    #   resp.report_plan.report_setting.number_of_frameworks #=> Integer
     #   resp.report_plan.report_delivery_channel.s3_bucket_name #=> String
     #   resp.report_plan.report_delivery_channel.s3_key_prefix #=> String
     #   resp.report_plan.report_delivery_channel.formats #=> Array
@@ -2231,6 +2291,10 @@ module Aws::Backup
     #   resp.backup_vault_list[0].encryption_key_arn #=> String
     #   resp.backup_vault_list[0].creator_request_id #=> String
     #   resp.backup_vault_list[0].number_of_recovery_points #=> Integer
+    #   resp.backup_vault_list[0].locked #=> Boolean
+    #   resp.backup_vault_list[0].min_retention_days #=> Integer
+    #   resp.backup_vault_list[0].max_retention_days #=> Integer
+    #   resp.backup_vault_list[0].lock_date #=> Time
     #   resp.next_token #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/backup-2018-11-15/ListBackupVaults AWS API Documentation
@@ -2701,6 +2765,9 @@ module Aws::Backup
     #   resp.report_plans[0].report_plan_name #=> String
     #   resp.report_plans[0].report_plan_description #=> String
     #   resp.report_plans[0].report_setting.report_template #=> String
+    #   resp.report_plans[0].report_setting.framework_arns #=> Array
+    #   resp.report_plans[0].report_setting.framework_arns[0] #=> String
+    #   resp.report_plans[0].report_setting.number_of_frameworks #=> Integer
     #   resp.report_plans[0].report_delivery_channel.s3_bucket_name #=> String
     #   resp.report_plans[0].report_delivery_channel.s3_key_prefix #=> String
     #   resp.report_plans[0].report_delivery_channel.formats #=> Array
@@ -2872,6 +2939,97 @@ module Aws::Backup
       req.send_request(options)
     end
 
+    # Applies Backup Vault Lock to a backup vault, preventing attempts to
+    # delete any recovery point stored in or created in a backup vault.
+    # Vault Lock also prevents attempts to update the lifecycle policy that
+    # controls the retention period of any recovery point currently stored
+    # in a backup vault. If specified, Vault Lock enforces a minimum and
+    # maximum retention period for future backup and copy jobs that target a
+    # backup vault.
+    #
+    # @option params [required, String] :backup_vault_name
+    #   The Backup Vault Lock configuration that specifies the name of the
+    #   backup vault it protects.
+    #
+    # @option params [Integer] :min_retention_days
+    #   The Backup Vault Lock configuration that specifies the minimum
+    #   retention period that the vault retains its recovery points. This
+    #   setting can be useful if, for example, your organization's policies
+    #   require you to retain certain data for at least seven years (2555
+    #   days).
+    #
+    #   If this parameter is not specified, Vault Lock will not enforce a
+    #   minimum retention period.
+    #
+    #   If this parameter is specified, any backup or copy job to the vault
+    #   must have a lifecycle policy with a retention period equal to or
+    #   longer than the minimum retention period. If the job's retention
+    #   period is shorter than that minimum retention period, then the vault
+    #   fails that backup or copy job, and you should either modify your
+    #   lifecycle settings or use a different vault. Recovery points already
+    #   saved in the vault prior to Vault Lock are not affected.
+    #
+    # @option params [Integer] :max_retention_days
+    #   The Backup Vault Lock configuration that specifies the maximum
+    #   retention period that the vault retains its recovery points. This
+    #   setting can be useful if, for example, your organization's policies
+    #   require you to destroy certain data after retaining it for four years
+    #   (1460 days).
+    #
+    #   If this parameter is not included, Vault Lock does not enforce a
+    #   maximum retention period on the recovery points in the vault. If this
+    #   parameter is included without a value, Vault Lock will not enforce a
+    #   maximum retention period.
+    #
+    #   If this parameter is specified, any backup or copy job to the vault
+    #   must have a lifecycle policy with a retention period equal to or
+    #   shorter than the maximum retention period. If the job's retention
+    #   period is longer than that maximum retention period, then the vault
+    #   fails the backup or copy job, and you should either modify your
+    #   lifecycle settings or use a different vault. Recovery points already
+    #   saved in the vault prior to Vault Lock are not affected.
+    #
+    # @option params [Integer] :changeable_for_days
+    #   The Backup Vault Lock configuration that specifies the number of days
+    #   before the lock date. For example, setting `ChangeableForDays` to 30
+    #   on Jan. 1, 2022 at 8pm UTC will set the lock date to Jan. 31, 2022 at
+    #   8pm UTC.
+    #
+    #   Backup enforces a 72-hour cooling-off period before Vault Lock takes
+    #   effect and becomes immutable. Therefore, you must set
+    #   `ChangeableForDays` to 3 or greater.
+    #
+    #   Before the lock date, you can delete Vault Lock from the vault using
+    #   `DeleteBackupVaultLockConfiguration` or change the Vault Lock
+    #   configuration using `PutBackupVaultLockConfiguration`. On and after
+    #   the lock date, the Vault Lock becomes immutable and cannot be changed
+    #   or deleted.
+    #
+    #   If this parameter is not specified, you can delete Vault Lock from the
+    #   vault using `DeleteBackupVaultLockConfiguration` or change the Vault
+    #   Lock configuration using `PutBackupVaultLockConfiguration` at any
+    #   time.
+    #
+    # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.put_backup_vault_lock_configuration({
+    #     backup_vault_name: "BackupVaultName", # required
+    #     min_retention_days: 1,
+    #     max_retention_days: 1,
+    #     changeable_for_days: 1,
+    #   })
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/backup-2018-11-15/PutBackupVaultLockConfiguration AWS API Documentation
+    #
+    # @overload put_backup_vault_lock_configuration(params = {})
+    # @param [Hash] params ({})
+    def put_backup_vault_lock_configuration(params = {}, options = {})
+      req = build_request(:put_backup_vault_lock_configuration, params)
+      req.send_request(options)
+    end
+
     # Turns on notifications on a backup vault for the specified topic and
     # events.
     #
@@ -3640,7 +3798,12 @@ module Aws::Backup
     #   Identifies the report template for the report. Reports are built using
     #   a report template. The report templates are:
     #
-    #   `BACKUP_JOB_REPORT | COPY_JOB_REPORT | RESTORE_JOB_REPORT`
+    #   `RESOURCE_COMPLIANCE_REPORT | CONTROL_COMPLIANCE_REPORT |
+    #   BACKUP_JOB_REPORT | COPY_JOB_REPORT | RESTORE_JOB_REPORT`
+    #
+    #   If the report template is `RESOURCE_COMPLIANCE_REPORT` or
+    #   `CONTROL_COMPLIANCE_REPORT`, this API resource also describes the
+    #   report coverage by Amazon Web Services Regions and frameworks.
     #
     # @option params [String] :idempotency_token
     #   A customer-chosen string that you can use to distinguish between
@@ -3669,6 +3832,8 @@ module Aws::Backup
     #     },
     #     report_setting: {
     #       report_template: "string", # required
+    #       framework_arns: ["string"],
+    #       number_of_frameworks: 1,
     #     },
     #     idempotency_token: "string",
     #   })
@@ -3701,7 +3866,7 @@ module Aws::Backup
         params: params,
         config: config)
       context[:gem_name] = 'aws-sdk-backup'
-      context[:gem_version] = '1.32.0'
+      context[:gem_version] = '1.36.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-backup/client_api.rb

@@ -79,6 +79,7 @@ module Aws::Backup
     DeleteBackupSelectionInput = Shapes::StructureShape.new(name: 'DeleteBackupSelectionInput')
     DeleteBackupVaultAccessPolicyInput = Shapes::StructureShape.new(name: 'DeleteBackupVaultAccessPolicyInput')
     DeleteBackupVaultInput = Shapes::StructureShape.new(name: 'DeleteBackupVaultInput')
+    DeleteBackupVaultLockConfigurationInput = Shapes::StructureShape.new(name: 'DeleteBackupVaultLockConfigurationInput')
     DeleteBackupVaultNotificationsInput = Shapes::StructureShape.new(name: 'DeleteBackupVaultNotificationsInput')
     DeleteFrameworkInput = Shapes::StructureShape.new(name: 'DeleteFrameworkInput')
     DeleteRecoveryPointInput = Shapes::StructureShape.new(name: 'DeleteRecoveryPointInput')
@@ -185,6 +186,7 @@ module Aws::Backup
     ProtectedResource = Shapes::StructureShape.new(name: 'ProtectedResource')
     ProtectedResourcesList = Shapes::ListShape.new(name: 'ProtectedResourcesList')
     PutBackupVaultAccessPolicyInput = Shapes::StructureShape.new(name: 'PutBackupVaultAccessPolicyInput')
+    PutBackupVaultLockConfigurationInput = Shapes::StructureShape.new(name: 'PutBackupVaultLockConfigurationInput')
     PutBackupVaultNotificationsInput = Shapes::StructureShape.new(name: 'PutBackupVaultNotificationsInput')
     RecoveryPointByBackupVault = Shapes::StructureShape.new(name: 'RecoveryPointByBackupVault')
     RecoveryPointByBackupVaultList = Shapes::ListShape.new(name: 'RecoveryPointByBackupVaultList')
@@ -373,6 +375,10 @@ module Aws::Backup
     BackupVaultListMember.add_member(:encryption_key_arn, Shapes::ShapeRef.new(shape: ARN, location_name: "EncryptionKeyArn"))
     BackupVaultListMember.add_member(:creator_request_id, Shapes::ShapeRef.new(shape: string, location_name: "CreatorRequestId"))
     BackupVaultListMember.add_member(:number_of_recovery_points, Shapes::ShapeRef.new(shape: long, location_name: "NumberOfRecoveryPoints"))
+    BackupVaultListMember.add_member(:locked, Shapes::ShapeRef.new(shape: Boolean, location_name: "Locked"))
+    BackupVaultListMember.add_member(:min_retention_days, Shapes::ShapeRef.new(shape: Long, location_name: "MinRetentionDays"))
+    BackupVaultListMember.add_member(:max_retention_days, Shapes::ShapeRef.new(shape: Long, location_name: "MaxRetentionDays"))
+    BackupVaultListMember.add_member(:lock_date, Shapes::ShapeRef.new(shape: timestamp, location_name: "LockDate"))
     BackupVaultListMember.struct_class = Types::BackupVaultListMember
 
     CalculatedLifecycle.add_member(:move_to_cold_storage_at, Shapes::ShapeRef.new(shape: timestamp, location_name: "MoveToColdStorageAt"))
@@ -482,6 +488,7 @@ module Aws::Backup
 
     CreateReportPlanOutput.add_member(:report_plan_name, Shapes::ShapeRef.new(shape: ReportPlanName, location_name: "ReportPlanName"))
     CreateReportPlanOutput.add_member(:report_plan_arn, Shapes::ShapeRef.new(shape: ARN, location_name: "ReportPlanArn"))
+    CreateReportPlanOutput.add_member(:creation_time, Shapes::ShapeRef.new(shape: timestamp, location_name: "CreationTime"))
     CreateReportPlanOutput.struct_class = Types::CreateReportPlanOutput
 
     DeleteBackupPlanInput.add_member(:backup_plan_id, Shapes::ShapeRef.new(shape: string, required: true, location: "uri", location_name: "backupPlanId"))
@@ -503,6 +510,9 @@ module Aws::Backup
     DeleteBackupVaultInput.add_member(:backup_vault_name, Shapes::ShapeRef.new(shape: string, required: true, location: "uri", location_name: "backupVaultName"))
     DeleteBackupVaultInput.struct_class = Types::DeleteBackupVaultInput
 
+    DeleteBackupVaultLockConfigurationInput.add_member(:backup_vault_name, Shapes::ShapeRef.new(shape: BackupVaultName, required: true, location: "uri", location_name: "backupVaultName"))
+    DeleteBackupVaultLockConfigurationInput.struct_class = Types::DeleteBackupVaultLockConfigurationInput
+
     DeleteBackupVaultNotificationsInput.add_member(:backup_vault_name, Shapes::ShapeRef.new(shape: BackupVaultName, required: true, location: "uri", location_name: "backupVaultName"))
     DeleteBackupVaultNotificationsInput.struct_class = Types::DeleteBackupVaultNotificationsInput
 
@@ -556,6 +566,10 @@ module Aws::Backup
     DescribeBackupVaultOutput.add_member(:creation_date, Shapes::ShapeRef.new(shape: timestamp, location_name: "CreationDate"))
     DescribeBackupVaultOutput.add_member(:creator_request_id, Shapes::ShapeRef.new(shape: string, location_name: "CreatorRequestId"))
     DescribeBackupVaultOutput.add_member(:number_of_recovery_points, Shapes::ShapeRef.new(shape: long, location_name: "NumberOfRecoveryPoints"))
+    DescribeBackupVaultOutput.add_member(:locked, Shapes::ShapeRef.new(shape: Boolean, location_name: "Locked"))
+    DescribeBackupVaultOutput.add_member(:min_retention_days, Shapes::ShapeRef.new(shape: Long, location_name: "MinRetentionDays"))
+    DescribeBackupVaultOutput.add_member(:max_retention_days, Shapes::ShapeRef.new(shape: Long, location_name: "MaxRetentionDays"))
+    DescribeBackupVaultOutput.add_member(:lock_date, Shapes::ShapeRef.new(shape: timestamp, location_name: "LockDate"))
     DescribeBackupVaultOutput.struct_class = Types::DescribeBackupVaultOutput
 
     DescribeCopyJobInput.add_member(:copy_job_id, Shapes::ShapeRef.new(shape: string, required: true, location: "uri", location_name: "copyJobId"))
@@ -953,6 +967,12 @@ module Aws::Backup
     PutBackupVaultAccessPolicyInput.add_member(:policy, Shapes::ShapeRef.new(shape: IAMPolicy, location_name: "Policy"))
     PutBackupVaultAccessPolicyInput.struct_class = Types::PutBackupVaultAccessPolicyInput
 
+    PutBackupVaultLockConfigurationInput.add_member(:backup_vault_name, Shapes::ShapeRef.new(shape: BackupVaultName, required: true, location: "uri", location_name: "backupVaultName"))
+    PutBackupVaultLockConfigurationInput.add_member(:min_retention_days, Shapes::ShapeRef.new(shape: Long, location_name: "MinRetentionDays"))
+    PutBackupVaultLockConfigurationInput.add_member(:max_retention_days, Shapes::ShapeRef.new(shape: Long, location_name: "MaxRetentionDays"))
+    PutBackupVaultLockConfigurationInput.add_member(:changeable_for_days, Shapes::ShapeRef.new(shape: Long, location_name: "ChangeableForDays"))
+    PutBackupVaultLockConfigurationInput.struct_class = Types::PutBackupVaultLockConfigurationInput
+
     PutBackupVaultNotificationsInput.add_member(:backup_vault_name, Shapes::ShapeRef.new(shape: BackupVaultName, required: true, location: "uri", location_name: "backupVaultName"))
     PutBackupVaultNotificationsInput.add_member(:sns_topic_arn, Shapes::ShapeRef.new(shape: ARN, required: true, location_name: "SNSTopicArn"))
     PutBackupVaultNotificationsInput.add_member(:backup_vault_events, Shapes::ShapeRef.new(shape: BackupVaultEvents, required: true, location_name: "BackupVaultEvents"))
@@ -1032,6 +1052,8 @@ module Aws::Backup
     ReportPlanList.member = Shapes::ShapeRef.new(shape: ReportPlan)
 
     ReportSetting.add_member(:report_template, Shapes::ShapeRef.new(shape: string, required: true, location_name: "ReportTemplate"))
+    ReportSetting.add_member(:framework_arns, Shapes::ShapeRef.new(shape: stringList, location_name: "FrameworkArns"))
+    ReportSetting.add_member(:number_of_frameworks, Shapes::ShapeRef.new(shape: integer, location_name: "NumberOfFrameworks"))
     ReportSetting.struct_class = Types::ReportSetting
 
     ResourceArns.member = Shapes::ShapeRef.new(shape: ARN)
@@ -1321,6 +1343,19 @@ module Aws::Backup
         o.errors << Shapes::ShapeRef.new(shape: ServiceUnavailableException)
       end)
 
+      api.add_operation(:delete_backup_vault_lock_configuration, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "DeleteBackupVaultLockConfiguration"
+        o.http_method = "DELETE"
+        o.http_request_uri = "/backup-vaults/{backupVaultName}/vault-lock"
+        o.input = Shapes::ShapeRef.new(shape: DeleteBackupVaultLockConfigurationInput)
+        o.output = Shapes::ShapeRef.new(shape: Shapes::StructureShape.new(struct_class: Aws::EmptyStructure))
+        o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: InvalidParameterValueException)
+        o.errors << Shapes::ShapeRef.new(shape: MissingParameterValueException)
+        o.errors << Shapes::ShapeRef.new(shape: InvalidRequestException)
+        o.errors << Shapes::ShapeRef.new(shape: ServiceUnavailableException)
+      end)
+
       api.add_operation(:delete_backup_vault_notifications, Seahorse::Model::Operation.new.tap do |o|
         o.name = "DeleteBackupVaultNotifications"
         o.http_method = "DELETE"
@@ -1891,6 +1926,19 @@ module Aws::Backup
         o.errors << Shapes::ShapeRef.new(shape: ServiceUnavailableException)
       end)
 
+      api.add_operation(:put_backup_vault_lock_configuration, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "PutBackupVaultLockConfiguration"
+        o.http_method = "PUT"
+        o.http_request_uri = "/backup-vaults/{backupVaultName}/vault-lock"
+        o.input = Shapes::ShapeRef.new(shape: PutBackupVaultLockConfigurationInput)
+        o.output = Shapes::ShapeRef.new(shape: Shapes::StructureShape.new(struct_class: Aws::EmptyStructure))
+        o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: InvalidParameterValueException)
+        o.errors << Shapes::ShapeRef.new(shape: MissingParameterValueException)
+        o.errors << Shapes::ShapeRef.new(shape: InvalidRequestException)
+        o.errors << Shapes::ShapeRef.new(shape: ServiceUnavailableException)
+      end)
+
       api.add_operation(:put_backup_vault_notifications, Seahorse::Model::Operation.new.tap do |o|
         o.name = "PutBackupVaultNotifications"
         o.http_method = "PUT"
@@ -2011,6 +2059,7 @@ module Aws::Backup
         o.http_request_uri = "/audit/frameworks/{frameworkName}"
         o.input = Shapes::ShapeRef.new(shape: UpdateFrameworkInput)
         o.output = Shapes::ShapeRef.new(shape: UpdateFrameworkOutput)
+        o.errors << Shapes::ShapeRef.new(shape: AlreadyExistsException)
         o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
         o.errors << Shapes::ShapeRef.new(shape: LimitExceededException)
         o.errors << Shapes::ShapeRef.new(shape: InvalidParameterValueException)

data/lib/aws-sdk-backup/types.rb

@@ -285,8 +285,7 @@ module Aws::Backup
 
     # Contains an optional backup plan display name and an array of
     # `BackupRule` objects, each of which specifies a backup rule. Each rule
-    # in a backup plan is a separate scheduled task and can back up a
-    # different selection of Amazon Web Services resources.
+    # in a backup plan is a separate scheduled task.
     #
     # @note When making an API call, you may pass BackupPlanInput
     #   data as a hash:
@@ -774,6 +773,56 @@ module Aws::Backup
     #   The number of recovery points that are stored in a backup vault.
     #   @return [Integer]
     #
+    # @!attribute [rw] locked
+    #   A Boolean value that indicates whether Backup Vault Lock applies to
+    #   the selected backup vault. If `true`, Vault Lock prevents delete and
+    #   update operations on the recovery points in the selected vault.
+    #   @return [Boolean]
+    #
+    # @!attribute [rw] min_retention_days
+    #   The Backup Vault Lock setting that specifies the minimum retention
+    #   period that the vault retains its recovery points. If this parameter
+    #   is not specified, Vault Lock does not enforce a minimum retention
+    #   period.
+    #
+    #   If specified, any backup or copy job to the vault must have a
+    #   lifecycle policy with a retention period equal to or longer than the
+    #   minimum retention period. If the job's retention period is shorter
+    #   than that minimum retention period, then the vault fails the backup
+    #   or copy job, and you should either modify your lifecycle settings or
+    #   use a different vault. Recovery points already stored in the vault
+    #   prior to Vault Lock are not affected.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] max_retention_days
+    #   The Backup Vault Lock setting that specifies the maximum retention
+    #   period that the vault retains its recovery points. If this parameter
+    #   is not specified, Vault Lock does not enforce a maximum retention
+    #   period on the recovery points in the vault (allowing indefinite
+    #   storage).
+    #
+    #   If specified, any backup or copy job to the vault must have a
+    #   lifecycle policy with a retention period equal to or shorter than
+    #   the maximum retention period. If the job's retention period is
+    #   longer than that maximum retention period, then the vault fails the
+    #   backup or copy job, and you should either modify your lifecycle
+    #   settings or use a different vault. Recovery points already stored in
+    #   the vault prior to Vault Lock are not affected.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] lock_date
+    #   The date and time when Backup Vault Lock configuration becomes
+    #   immutable, meaning it cannot be changed or deleted.
+    #
+    #   If you applied Vault Lock to your vault without specifying a lock
+    #   date, you can change your Vault Lock settings, or delete Vault Lock
+    #   from the vault entirely, at any time.
+    #
+    #   This value is in Unix format, Coordinated Universal Time (UTC), and
+    #   accurate to milliseconds. For example, the value 1516925490.087
+    #   represents Friday, January 26, 2018 12:11:30.087 AM.
+    #   @return [Time]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/backup-2018-11-15/BackupVaultListMember AWS API Documentation
     #
     class BackupVaultListMember < Struct.new(
@@ -782,7 +831,11 @@ module Aws::Backup
       :creation_date,
       :encryption_key_arn,
       :creator_request_id,
-      :number_of_recovery_points)
+      :number_of_recovery_points,
+      :locked,
+      :min_retention_days,
+      :max_retention_days,
+      :lock_date)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -941,8 +994,8 @@ module Aws::Backup
     #       }
     #
     # @!attribute [rw] compliance_resource_ids
-    #   Describes whether the control scope includes a specific resource
-    #   identified by its unique Amazon Resource Name (ARN).
+    #   The ID of the only Amazon Web Services resource that you want your
+    #   control scope to contain.
     #   @return [Array<String>]
     #
     # @!attribute [rw] compliance_resource_types
@@ -1484,6 +1537,8 @@ module Aws::Backup
     #         },
     #         report_setting: { # required
     #           report_template: "string", # required
+    #           framework_arns: ["string"],
+    #           number_of_frameworks: 1,
     #         },
     #         report_plan_tags: {
     #           "string" => "string",
@@ -1512,11 +1567,16 @@ module Aws::Backup
     #   Identifies the report template for the report. Reports are built
     #   using a report template. The report templates are:
     #
-    #   `BACKUP_JOB_REPORT | COPY_JOB_REPORT | RESTORE_JOB_REPORT`
+    #   `RESOURCE_COMPLIANCE_REPORT | CONTROL_COMPLIANCE_REPORT |
+    #   BACKUP_JOB_REPORT | COPY_JOB_REPORT | RESTORE_JOB_REPORT`
+    #
+    #   If the report template is `RESOURCE_COMPLIANCE_REPORT` or
+    #   `CONTROL_COMPLIANCE_REPORT`, this API resource also describes the
+    #   report coverage by Amazon Web Services Regions and frameworks.
     #   @return [Types::ReportSetting]
     #
     # @!attribute [rw] report_plan_tags
-    #   Metadata that you can assign to help organize the frameworks that
+    #   Metadata that you can assign to help organize the report plans that
     #   you create. Each tag is a key-value pair.
     #   @return [Hash<String,String>]
     #
@@ -1552,11 +1612,19 @@ module Aws::Backup
     #   The format of the ARN depends on the resource type.
     #   @return [String]
     #
+    # @!attribute [rw] creation_time
+    #   The date and time a backup vault is created, in Unix format and
+    #   Coordinated Universal Time (UTC). The value of `CreationTime` is
+    #   accurate to milliseconds. For example, the value 1516925490.087
+    #   represents Friday, January 26, 2018 12:11:30.087 AM.
+    #   @return [Time]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/backup-2018-11-15/CreateReportPlanOutput AWS API Documentation
     #
     class CreateReportPlanOutput < Struct.new(
       :report_plan_name,
-      :report_plan_arn)
+      :report_plan_arn,
+      :creation_time)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -1683,6 +1751,25 @@ module Aws::Backup
       include Aws::Structure
     end
 
+    # @note When making an API call, you may pass DeleteBackupVaultLockConfigurationInput
+    #   data as a hash:
+    #
+    #       {
+    #         backup_vault_name: "BackupVaultName", # required
+    #       }
+    #
+    # @!attribute [rw] backup_vault_name
+    #   The name of the backup vault from which to delete Backup Vault Lock.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/backup-2018-11-15/DeleteBackupVaultLockConfigurationInput AWS API Documentation
+    #
+    class DeleteBackupVaultLockConfigurationInput < Struct.new(
+      :backup_vault_name)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @note When making an API call, you may pass DeleteBackupVaultNotificationsInput
     #   data as a hash:
     #
@@ -2019,6 +2106,57 @@ module Aws::Backup
     #   The number of recovery points that are stored in a backup vault.
     #   @return [Integer]
     #
+    # @!attribute [rw] locked
+    #   A Boolean that indicates whether Backup Vault Lock is currently
+    #   protecting the backup vault. `True` means that Vault Lock causes
+    #   delete or update operations on the recovery points stored in the
+    #   vault to fail.
+    #   @return [Boolean]
+    #
+    # @!attribute [rw] min_retention_days
+    #   The Backup Vault Lock setting that specifies the minimum retention
+    #   period that the vault retains its recovery points. If this parameter
+    #   is not specified, Vault Lock does not enforce a minimum retention
+    #   period.
+    #
+    #   If specified, any backup or copy job to the vault must have a
+    #   lifecycle policy with a retention period equal to or longer than the
+    #   minimum retention period. If the job's retention period is shorter
+    #   than that minimum retention period, then the vault fails the backup
+    #   or copy job, and you should either modify your lifecycle settings or
+    #   use a different vault. Recovery points already stored in the vault
+    #   prior to Vault Lock are not affected.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] max_retention_days
+    #   The Backup Vault Lock setting that specifies the maximum retention
+    #   period that the vault retains its recovery points. If this parameter
+    #   is not specified, Vault Lock does not enforce a maximum retention
+    #   period on the recovery points in the vault (allowing indefinite
+    #   storage).
+    #
+    #   If specified, any backup or copy job to the vault must have a
+    #   lifecycle policy with a retention period equal to or shorter than
+    #   the maximum retention period. If the job's retention period is
+    #   longer than that maximum retention period, then the vault fails the
+    #   backup or copy job, and you should either modify your lifecycle
+    #   settings or use a different vault. Recovery points already stored in
+    #   the vault prior to Vault Lock are not affected.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] lock_date
+    #   The date and time when Backup Vault Lock configuration cannot be
+    #   changed or deleted.
+    #
+    #   If you applied Vault Lock to your vault without specifying a lock
+    #   date, you can change any of your Vault Lock settings, or delete
+    #   Vault Lock from the vault entirely, at any time.
+    #
+    #   This value is in Unix format, Coordinated Universal Time (UTC), and
+    #   accurate to milliseconds. For example, the value 1516925490.087
+    #   represents Friday, January 26, 2018 12:11:30.087 AM.
+    #   @return [Time]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/backup-2018-11-15/DescribeBackupVaultOutput AWS API Documentation
     #
     class DescribeBackupVaultOutput < Struct.new(
@@ -2027,7 +2165,11 @@ module Aws::Backup
       :encryption_key_arn,
       :creation_date,
       :creator_request_id,
-      :number_of_recovery_points)
+      :number_of_recovery_points,
+      :locked,
+      :min_retention_days,
+      :max_retention_days,
+      :lock_date)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -3169,6 +3311,8 @@ module Aws::Backup
     #   Contains a string with the supported Amazon Web Services resource
     #   types:
     #
+    #   * `Aurora` for Amazon Aurora
+    #
     #   * `DynamoDB` for Amazon DynamoDB
     #
     #   * `EBS` for Amazon Elastic Block Store
@@ -3177,9 +3321,9 @@ module Aws::Backup
     #
     #   * `EFS` for Amazon Elastic File System
     #
-    #   * `RDS` for Amazon Relational Database Service
+    #   * `FSX` for Amazon FSx
     #
-    #   * `Aurora` for Amazon Aurora
+    #   * `RDS` for Amazon Relational Database Service
     #
     #   * `Storage Gateway` for Storage Gateway
     #   @return [Array<String>]
@@ -4437,6 +4581,94 @@ module Aws::Backup
       include Aws::Structure
     end
 
+    # @note When making an API call, you may pass PutBackupVaultLockConfigurationInput
+    #   data as a hash:
+    #
+    #       {
+    #         backup_vault_name: "BackupVaultName", # required
+    #         min_retention_days: 1,
+    #         max_retention_days: 1,
+    #         changeable_for_days: 1,
+    #       }
+    #
+    # @!attribute [rw] backup_vault_name
+    #   The Backup Vault Lock configuration that specifies the name of the
+    #   backup vault it protects.
+    #   @return [String]
+    #
+    # @!attribute [rw] min_retention_days
+    #   The Backup Vault Lock configuration that specifies the minimum
+    #   retention period that the vault retains its recovery points. This
+    #   setting can be useful if, for example, your organization's policies
+    #   require you to retain certain data for at least seven years (2555
+    #   days).
+    #
+    #   If this parameter is not specified, Vault Lock will not enforce a
+    #   minimum retention period.
+    #
+    #   If this parameter is specified, any backup or copy job to the vault
+    #   must have a lifecycle policy with a retention period equal to or
+    #   longer than the minimum retention period. If the job's retention
+    #   period is shorter than that minimum retention period, then the vault
+    #   fails that backup or copy job, and you should either modify your
+    #   lifecycle settings or use a different vault. Recovery points already
+    #   saved in the vault prior to Vault Lock are not affected.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] max_retention_days
+    #   The Backup Vault Lock configuration that specifies the maximum
+    #   retention period that the vault retains its recovery points. This
+    #   setting can be useful if, for example, your organization's policies
+    #   require you to destroy certain data after retaining it for four
+    #   years (1460 days).
+    #
+    #   If this parameter is not included, Vault Lock does not enforce a
+    #   maximum retention period on the recovery points in the vault. If
+    #   this parameter is included without a value, Vault Lock will not
+    #   enforce a maximum retention period.
+    #
+    #   If this parameter is specified, any backup or copy job to the vault
+    #   must have a lifecycle policy with a retention period equal to or
+    #   shorter than the maximum retention period. If the job's retention
+    #   period is longer than that maximum retention period, then the vault
+    #   fails the backup or copy job, and you should either modify your
+    #   lifecycle settings or use a different vault. Recovery points already
+    #   saved in the vault prior to Vault Lock are not affected.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] changeable_for_days
+    #   The Backup Vault Lock configuration that specifies the number of
+    #   days before the lock date. For example, setting `ChangeableForDays`
+    #   to 30 on Jan. 1, 2022 at 8pm UTC will set the lock date to Jan. 31,
+    #   2022 at 8pm UTC.
+    #
+    #   Backup enforces a 72-hour cooling-off period before Vault Lock takes
+    #   effect and becomes immutable. Therefore, you must set
+    #   `ChangeableForDays` to 3 or greater.
+    #
+    #   Before the lock date, you can delete Vault Lock from the vault using
+    #   `DeleteBackupVaultLockConfiguration` or change the Vault Lock
+    #   configuration using `PutBackupVaultLockConfiguration`. On and after
+    #   the lock date, the Vault Lock becomes immutable and cannot be
+    #   changed or deleted.
+    #
+    #   If this parameter is not specified, you can delete Vault Lock from
+    #   the vault using `DeleteBackupVaultLockConfiguration` or change the
+    #   Vault Lock configuration using `PutBackupVaultLockConfiguration` at
+    #   any time.
+    #   @return [Integer]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/backup-2018-11-15/PutBackupVaultLockConfigurationInput AWS API Documentation
+    #
+    class PutBackupVaultLockConfigurationInput < Struct.new(
+      :backup_vault_name,
+      :min_retention_days,
+      :max_retention_days,
+      :changeable_for_days)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @note When making an API call, you may pass PutBackupVaultNotificationsInput
     #   data as a hash:
     #
@@ -4801,7 +5033,8 @@ module Aws::Backup
     #   Identifies the report template for the report. Reports are built
     #   using a report template. The report templates are:
     #
-    #   `BACKUP_JOB_REPORT | COPY_JOB_REPORT | RESTORE_JOB_REPORT`
+    #   `RESOURCE_COMPLIANCE_REPORT | CONTROL_COMPLIANCE_REPORT |
+    #   BACKUP_JOB_REPORT | COPY_JOB_REPORT | RESTORE_JOB_REPORT`
     #   @return [String]
     #
     # @!attribute [rw] creation_time
@@ -4874,7 +5107,12 @@ module Aws::Backup
     #   Identifies the report template for the report. Reports are built
     #   using a report template. The report templates are:
     #
-    #   `BACKUP_JOB_REPORT | COPY_JOB_REPORT | RESTORE_JOB_REPORT`
+    #   `RESOURCE_COMPLIANCE_REPORT | CONTROL_COMPLIANCE_REPORT |
+    #   BACKUP_JOB_REPORT | COPY_JOB_REPORT | RESTORE_JOB_REPORT`
+    #
+    #   If the report template is `RESOURCE_COMPLIANCE_REPORT` or
+    #   `CONTROL_COMPLIANCE_REPORT`, this API resource also describes the
+    #   report coverage by Amazon Web Services Regions and frameworks.
     #   @return [Types::ReportSetting]
     #
     # @!attribute [rw] report_delivery_channel
@@ -4936,19 +5174,32 @@ module Aws::Backup
     #
     #       {
     #         report_template: "string", # required
+    #         framework_arns: ["string"],
+    #         number_of_frameworks: 1,
     #       }
     #
     # @!attribute [rw] report_template
     #   Identifies the report template for the report. Reports are built
     #   using a report template. The report templates are:
     #
-    #   `BACKUP_JOB_REPORT | COPY_JOB_REPORT | RESTORE_JOB_REPORT`
+    #   `RESOURCE_COMPLIANCE_REPORT | CONTROL_COMPLIANCE_REPORT |
+    #   BACKUP_JOB_REPORT | COPY_JOB_REPORT | RESTORE_JOB_REPORT`
     #   @return [String]
     #
+    # @!attribute [rw] framework_arns
+    #   The Amazon Resource Names (ARNs) of the frameworks a report covers.
+    #   @return [Array<String>]
+    #
+    # @!attribute [rw] number_of_frameworks
+    #   The number of frameworks a report covers.
+    #   @return [Integer]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/backup-2018-11-15/ReportSetting AWS API Documentation
     #
     class ReportSetting < Struct.new(
-      :report_template)
+      :report_template,
+      :framework_arns,
+      :number_of_frameworks)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -5899,6 +6150,8 @@ module Aws::Backup
     #         },
     #         report_setting: {
     #           report_template: "string", # required
+    #           framework_arns: ["string"],
+    #           number_of_frameworks: 1,
     #         },
     #         idempotency_token: "string",
     #       }
@@ -5924,7 +6177,12 @@ module Aws::Backup
     #   Identifies the report template for the report. Reports are built
     #   using a report template. The report templates are:
     #
-    #   `BACKUP_JOB_REPORT | COPY_JOB_REPORT | RESTORE_JOB_REPORT`
+    #   `RESOURCE_COMPLIANCE_REPORT | CONTROL_COMPLIANCE_REPORT |
+    #   BACKUP_JOB_REPORT | COPY_JOB_REPORT | RESTORE_JOB_REPORT`
+    #
+    #   If the report template is `RESOURCE_COMPLIANCE_REPORT` or
+    #   `CONTROL_COMPLIANCE_REPORT`, this API resource also describes the
+    #   report coverage by Amazon Web Services Regions and frameworks.
     #   @return [Types::ReportSetting]
     #
     # @!attribute [rw] idempotency_token

data/lib/aws-sdk-backup.rb

@@ -48,6 +48,6 @@ require_relative 'aws-sdk-backup/customizations'
 # @!group service
 module Aws::Backup
 
-  GEM_VERSION = '1.32.0'
+  GEM_VERSION = '1.36.0'
 
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-backup
 version: !ruby/object:Gem::Version
-  version: 1.32.0
+  version: 1.36.0
 platform: ruby
 authors:
 - Amazon Web Services
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2021-09-01 00:00:00.000000000 Z
+date: 2021-11-04 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sdk-core
@@ -19,7 +19,7 @@ dependencies:
         version: '3'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.120.0
+        version: 3.122.0
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -29,7 +29,7 @@ dependencies:
         version: '3'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.120.0
+        version: 3.122.0
 - !ruby/object:Gem::Dependency
   name: aws-sigv4
   requirement: !ruby/object:Gem::Requirement