aws-sdk-backup 1.89.0 → 1.91.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 16f2e6faf6c67f03d4357868390b16157def8069d0d108bf4c62efaed9b46fc9
-  data.tar.gz: ba2fe8687a03d75be3ef2aef63e3306bb99de26cb2eac92fb58c80ba0fdbf2d2
+  metadata.gz: 64260d0f1a1efc7f6034c10d80e4cd037bd2f2339640820ec114cac6e651f6ba
+  data.tar.gz: b0b38163a59d624345beaaa50794976fc206d63e46cc3d4b931a68b3541245a5
 SHA512:
-  metadata.gz: c6d50e69b8636ffe837884fd74bb45bf05ade6d9712ef58a7f245d9703c0f879ebadb7388846e353b33ff3d417819ae755ad78d594cbe81433e5761c10296d68
-  data.tar.gz: 402cb8380cf482d64ca78659c492eb17c6ce592209e58082fcbeb4c7697d36eec74a9ff3424e54384cdea488ed38cf1e5a09b7be761d563070ee778c1e06fc3e
+  metadata.gz: f4f3512461a80df0543abe3b50770382dca7eefd873cc06bd81b89ec2eea2188da22e0747f4bd6092b734d6cbc22995acdf65c55cd72d9750c51206cee88bef8
+  data.tar.gz: b6f5b5470c66a4d8045600573ad1d183020aa978ad79051ef4c92e4a69bd070cf30001445b32823d33c93b37b0dcc61d403f3154cdb53e6fa9f6c886e5e13138

data/CHANGELOG.md

@@ -1,6 +1,16 @@
 Unreleased Changes
 ------------------
 
+1.91.0 (2025-07-21)
+------------------
+
+* Feature - Code Generated Changes, see `./build_tools` or `aws-sdk-core`'s CHANGELOG.md for details.
+
+1.90.0 (2025-06-17)
+------------------
+
+* Feature - AWS Backup is adding support for integration of its logically air-gapped vaults with the AWS Organizations Multi-party approval capability.
+
 1.89.0 (2025-06-02)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.89.0
+1.91.0

data/lib/aws-sdk-backup/client.rb

@@ -95,7 +95,7 @@ module Aws::Backup
     #     class name or an instance of a plugin class.
     #
     #   @option options [required, Aws::CredentialProvider] :credentials
-    #     Your AWS credentials. This can be an instance of any one of the
+    #     Your AWS credentials used for authentication. This can be an instance of any one of the
     #     following classes:
     #
     #     * `Aws::Credentials` - Used for configuring static, non-refreshing
@@ -128,18 +128,23 @@ module Aws::Backup
     #     locations will be searched for credentials:
     #
     #     * `Aws.config[:credentials]`
+    #
     #     * The `:access_key_id`, `:secret_access_key`, `:session_token`, and
     #       `:account_id` options.
-    #     * ENV['AWS_ACCESS_KEY_ID'], ENV['AWS_SECRET_ACCESS_KEY'],
-    #       ENV['AWS_SESSION_TOKEN'], and ENV['AWS_ACCOUNT_ID']
+    #
+    #     * `ENV['AWS_ACCESS_KEY_ID']`, `ENV['AWS_SECRET_ACCESS_KEY']`,
+    #       `ENV['AWS_SESSION_TOKEN']`, and `ENV['AWS_ACCOUNT_ID']`.
+    #
     #     * `~/.aws/credentials`
+    #
     #     * `~/.aws/config`
+    #
     #     * EC2/ECS IMDS instance profile - When used by default, the timeouts
     #       are very aggressive. Construct and pass an instance of
     #       `Aws::InstanceProfileCredentials` or `Aws::ECSCredentials` to
     #       enable retries and extended timeouts. Instance profile credential
-    #       fetching can be disabled by setting ENV['AWS_EC2_METADATA_DISABLED']
-    #       to true.
+    #       fetching can be disabled by setting `ENV['AWS_EC2_METADATA_DISABLED']`
+    #       to `true`.
     #
     #   @option options [required, String] :region
     #     The AWS region to connect to.  The configured `:region` is
@@ -167,6 +172,11 @@ module Aws::Backup
     #     When false, the request will raise a `RetryCapacityNotAvailableError` and will
     #     not retry instead of sleeping.
     #
+    #   @option options [Array<String>] :auth_scheme_preference
+    #     A list of preferred authentication schemes to use when making a request. Supported values are:
+    #     `sigv4`, `sigv4a`, `httpBearerAuth`, and `noAuth`. When set using `ENV['AWS_AUTH_SCHEME_PREFERENCE']` or in
+    #     shared config as `auth_scheme_preference`, the value should be a comma-separated list.
+    #
     #   @option options [Boolean] :client_side_monitoring (false)
     #     When `true`, client-side metrics will be collected for all API requests from
     #     this client.
@@ -253,8 +263,8 @@ module Aws::Backup
     #     4 times. Used in `standard` and `adaptive` retry modes.
     #
     #   @option options [String] :profile ("default")
-    #     Used when loading credentials from the shared credentials file
-    #     at HOME/.aws/credentials.  When not specified, 'default' is used.
+    #     Used when loading credentials from the shared credentials file at `HOME/.aws/credentials`.
+    #     When not specified, 'default' is used.
     #
     #   @option options [String] :request_checksum_calculation ("when_supported")
     #     Determines when a checksum will be calculated for request payloads. Values are:
@@ -367,7 +377,7 @@ module Aws::Backup
     #     `Aws::Telemetry::OTelProvider` for telemetry provider.
     #
     #   @option options [Aws::TokenProvider] :token_provider
-    #     A Bearer Token Provider. This can be an instance of any one of the
+    #     Your Bearer token used for authentication. This can be an instance of any one of the
     #     following classes:
     #
     #     * `Aws::StaticTokenProvider` - Used for configuring static, non-refreshing
@@ -469,6 +479,38 @@ module Aws::Backup
 
     # @!group API Operations
 
+    # Associates an MPA approval team with a backup vault.
+    #
+    # @option params [required, String] :backup_vault_name
+    #   The name of the backup vault to associate with the MPA approval team.
+    #
+    # @option params [required, String] :mpa_approval_team_arn
+    #   The Amazon Resource Name (ARN) of the MPA approval team to associate
+    #   with the backup vault.
+    #
+    # @option params [String] :requester_comment
+    #   A comment provided by the requester explaining the association
+    #   request.
+    #
+    # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.associate_backup_vault_mpa_approval_team({
+    #     backup_vault_name: "BackupVaultName", # required
+    #     mpa_approval_team_arn: "ARN", # required
+    #     requester_comment: "RequesterComment",
+    #   })
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/backup-2018-11-15/AssociateBackupVaultMpaApprovalTeam AWS API Documentation
+    #
+    # @overload associate_backup_vault_mpa_approval_team(params = {})
+    # @param [Hash] params ({})
+    def associate_backup_vault_mpa_approval_team(params = {}, options = {})
+      req = build_request(:associate_backup_vault_mpa_approval_team, params)
+      req.send_request(options)
+    end
+
     # Removes the specified legal hold on a recovery point. This action can
     # only be performed by a user with sufficient permissions.
     #
@@ -523,6 +565,9 @@ module Aws::Backup
     #   If used, this parameter must contain 1 to 50 alphanumeric or '-\_.'
     #   characters.
     #
+    #   **A suitable default value is auto-generated.** You should normally
+    #   not need to pass this option.**
+    #
     # @return [Types::CreateBackupPlanOutput] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::CreateBackupPlanOutput#backup_plan_id #backup_plan_id} => String
@@ -627,6 +672,9 @@ module Aws::Backup
     #   If used, this parameter must contain 1 to 50 alphanumeric or '-\_.'
     #   characters.
     #
+    #   **A suitable default value is auto-generated.** You should normally
+    #   not need to pass this option.**
+    #
     # @return [Types::CreateBackupSelectionOutput] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::CreateBackupSelectionOutput#selection_id #selection_id} => String
@@ -725,6 +773,9 @@ module Aws::Backup
     #   If used, this parameter must contain 1 to 50 alphanumeric or '-\_.'
     #   characters.
     #
+    #   **A suitable default value is auto-generated.** You should normally
+    #   not need to pass this option.**
+    #
     # @return [Types::CreateBackupVaultOutput] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::CreateBackupVaultOutput#backup_vault_name #backup_vault_name} => String
@@ -853,6 +904,9 @@ module Aws::Backup
     #   identical calls. Retrying a successful request with the same
     #   idempotency token results in a success message with no action taken.
     #
+    #   **A suitable default value is auto-generated.** You should normally
+    #   not need to pass this option.**
+    #
     # @option params [Types::RecoveryPointSelection] :recovery_point_selection
     #   The criteria to assign a set of resources, such as resource types or
     #   backup vaults.
@@ -941,6 +995,9 @@ module Aws::Backup
     #   This parameter is optional. If used, this parameter must contain 1 to
     #   50 alphanumeric or '-\_.' characters.
     #
+    #   **A suitable default value is auto-generated.** You should normally
+    #   not need to pass this option.**
+    #
     # @option params [required, Integer] :min_retention_days
     #   This setting specifies the minimum retention period that the vault
     #   retains its recovery points.
@@ -1075,6 +1132,66 @@ module Aws::Backup
       req.send_request(options)
     end
 
+    # Creates a restore access backup vault that provides temporary access
+    # to recovery points in a logically air-gapped backup vault, subject to
+    # MPA approval.
+    #
+    # @option params [required, String] :source_backup_vault_arn
+    #   The ARN of the source backup vault containing the recovery points to
+    #   which temporary access is requested.
+    #
+    # @option params [String] :backup_vault_name
+    #   The name of the backup vault to associate with an MPA approval team.
+    #
+    # @option params [Hash<String,String>] :backup_vault_tags
+    #   Optional tags to assign to the restore access backup vault.
+    #
+    # @option params [String] :creator_request_id
+    #   A unique string that identifies the request and allows failed requests
+    #   to be retried without the risk of executing the operation twice.
+    #
+    #   **A suitable default value is auto-generated.** You should normally
+    #   not need to pass this option.**
+    #
+    # @option params [String] :requester_comment
+    #   A comment explaining the reason for requesting restore access to the
+    #   backup vault.
+    #
+    # @return [Types::CreateRestoreAccessBackupVaultOutput] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::CreateRestoreAccessBackupVaultOutput#restore_access_backup_vault_arn #restore_access_backup_vault_arn} => String
+    #   * {Types::CreateRestoreAccessBackupVaultOutput#vault_state #vault_state} => String
+    #   * {Types::CreateRestoreAccessBackupVaultOutput#restore_access_backup_vault_name #restore_access_backup_vault_name} => String
+    #   * {Types::CreateRestoreAccessBackupVaultOutput#creation_date #creation_date} => Time
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.create_restore_access_backup_vault({
+    #     source_backup_vault_arn: "ARN", # required
+    #     backup_vault_name: "BackupVaultName",
+    #     backup_vault_tags: {
+    #       "TagKey" => "TagValue",
+    #     },
+    #     creator_request_id: "string",
+    #     requester_comment: "RequesterComment",
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.restore_access_backup_vault_arn #=> String
+    #   resp.vault_state #=> String, one of "CREATING", "AVAILABLE", "FAILED"
+    #   resp.restore_access_backup_vault_name #=> String
+    #   resp.creation_date #=> Time
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/backup-2018-11-15/CreateRestoreAccessBackupVault AWS API Documentation
+    #
+    # @overload create_restore_access_backup_vault(params = {})
+    # @param [Hash] params ({})
+    def create_restore_access_backup_vault(params = {}, options = {})
+      req = build_request(:create_restore_access_backup_vault, params)
+      req.send_request(options)
+    end
+
     # Creates a restore testing plan.
     #
     # The first of two steps to create a restore testing plan. After this
@@ -1676,6 +1793,10 @@ module Aws::Backup
     #   * {Types::DescribeBackupVaultOutput#min_retention_days #min_retention_days} => Integer
     #   * {Types::DescribeBackupVaultOutput#max_retention_days #max_retention_days} => Integer
     #   * {Types::DescribeBackupVaultOutput#lock_date #lock_date} => Time
+    #   * {Types::DescribeBackupVaultOutput#source_backup_vault_arn #source_backup_vault_arn} => String
+    #   * {Types::DescribeBackupVaultOutput#mpa_approval_team_arn #mpa_approval_team_arn} => String
+    #   * {Types::DescribeBackupVaultOutput#mpa_session_arn #mpa_session_arn} => String
+    #   * {Types::DescribeBackupVaultOutput#latest_mpa_approval_team_update #latest_mpa_approval_team_update} => Types::LatestMpaApprovalTeamUpdate
     #
     # @example Request syntax with placeholder values
     #
@@ -1688,7 +1809,7 @@ module Aws::Backup
     #
     #   resp.backup_vault_name #=> String
     #   resp.backup_vault_arn #=> String
-    #   resp.vault_type #=> String, one of "BACKUP_VAULT", "LOGICALLY_AIR_GAPPED_BACKUP_VAULT"
+    #   resp.vault_type #=> String, one of "BACKUP_VAULT", "LOGICALLY_AIR_GAPPED_BACKUP_VAULT", "RESTORE_ACCESS_BACKUP_VAULT"
     #   resp.vault_state #=> String, one of "CREATING", "AVAILABLE", "FAILED"
     #   resp.encryption_key_arn #=> String
     #   resp.creation_date #=> Time
@@ -1698,6 +1819,14 @@ module Aws::Backup
     #   resp.min_retention_days #=> Integer
     #   resp.max_retention_days #=> Integer
     #   resp.lock_date #=> Time
+    #   resp.source_backup_vault_arn #=> String
+    #   resp.mpa_approval_team_arn #=> String
+    #   resp.mpa_session_arn #=> String
+    #   resp.latest_mpa_approval_team_update.mpa_session_arn #=> String
+    #   resp.latest_mpa_approval_team_update.status #=> String, one of "PENDING", "APPROVED", "FAILED"
+    #   resp.latest_mpa_approval_team_update.status_message #=> String
+    #   resp.latest_mpa_approval_team_update.initiation_date #=> Time
+    #   resp.latest_mpa_approval_team_update.expiry_date #=> Time
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/backup-2018-11-15/DescribeBackupVault AWS API Documentation
     #
@@ -1914,6 +2043,7 @@ module Aws::Backup
     #   * {Types::DescribeRecoveryPointOutput#status #status} => String
     #   * {Types::DescribeRecoveryPointOutput#status_message #status_message} => String
     #   * {Types::DescribeRecoveryPointOutput#creation_date #creation_date} => Time
+    #   * {Types::DescribeRecoveryPointOutput#initiation_date #initiation_date} => Time
     #   * {Types::DescribeRecoveryPointOutput#completion_date #completion_date} => Time
     #   * {Types::DescribeRecoveryPointOutput#backup_size_in_bytes #backup_size_in_bytes} => Integer
     #   * {Types::DescribeRecoveryPointOutput#calculated_lifecycle #calculated_lifecycle} => Types::CalculatedLifecycle
@@ -1954,6 +2084,7 @@ module Aws::Backup
     #   resp.status #=> String, one of "COMPLETED", "PARTIAL", "DELETING", "EXPIRED", "AVAILABLE", "STOPPED", "CREATING"
     #   resp.status_message #=> String
     #   resp.creation_date #=> Time
+    #   resp.initiation_date #=> Time
     #   resp.completion_date #=> Time
     #   resp.backup_size_in_bytes #=> Integer
     #   resp.calculated_lifecycle.move_to_cold_storage_at #=> Time
@@ -1969,7 +2100,7 @@ module Aws::Backup
     #   resp.composite_member_identifier #=> String
     #   resp.is_parent #=> Boolean
     #   resp.resource_name #=> String
-    #   resp.vault_type #=> String, one of "BACKUP_VAULT", "LOGICALLY_AIR_GAPPED_BACKUP_VAULT"
+    #   resp.vault_type #=> String, one of "BACKUP_VAULT", "LOGICALLY_AIR_GAPPED_BACKUP_VAULT", "RESTORE_ACCESS_BACKUP_VAULT"
     #   resp.index_status #=> String, one of "PENDING", "ACTIVE", "FAILED", "DELETING"
     #   resp.index_status_message #=> String
     #
@@ -2163,6 +2294,35 @@ module Aws::Backup
       req.send_request(options)
     end
 
+    # Removes the association between an MPA approval team and a backup
+    # vault, disabling the MPA approval workflow for restore operations.
+    #
+    # @option params [required, String] :backup_vault_name
+    #   The name of the backup vault from which to disassociate the MPA
+    #   approval team.
+    #
+    # @option params [String] :requester_comment
+    #   An optional comment explaining the reason for disassociating the MPA
+    #   approval team from the backup vault.
+    #
+    # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.disassociate_backup_vault_mpa_approval_team({
+    #     backup_vault_name: "BackupVaultName", # required
+    #     requester_comment: "RequesterComment",
+    #   })
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/backup-2018-11-15/DisassociateBackupVaultMpaApprovalTeam AWS API Documentation
+    #
+    # @overload disassociate_backup_vault_mpa_approval_team(params = {})
+    # @param [Hash] params ({})
+    def disassociate_backup_vault_mpa_approval_team(params = {}, options = {})
+      req = build_request(:disassociate_backup_vault_mpa_approval_team, params)
+      req.send_request(options)
+    end
+
     # Deletes the specified continuous backup recovery point from Backup and
     # releases control of that continuous backup to the source service, such
     # as Amazon RDS. The source service will continue to create and retain
@@ -2570,7 +2730,7 @@ module Aws::Backup
     #   resp.backup_vault_arn #=> String
     #   resp.sns_topic_arn #=> String
     #   resp.backup_vault_events #=> Array
-    #   resp.backup_vault_events[0] #=> String, one of "BACKUP_JOB_STARTED", "BACKUP_JOB_COMPLETED", "BACKUP_JOB_SUCCESSFUL", "BACKUP_JOB_FAILED", "BACKUP_JOB_EXPIRED", "RESTORE_JOB_STARTED", "RESTORE_JOB_COMPLETED", "RESTORE_JOB_SUCCESSFUL", "RESTORE_JOB_FAILED", "COPY_JOB_STARTED", "COPY_JOB_SUCCESSFUL", "COPY_JOB_FAILED", "RECOVERY_POINT_MODIFIED", "BACKUP_PLAN_CREATED", "BACKUP_PLAN_MODIFIED", "S3_BACKUP_OBJECT_FAILED", "S3_RESTORE_OBJECT_FAILED", "RECOVERY_POINT_INDEX_COMPLETED", "RECOVERY_POINT_INDEX_DELETED", "RECOVERY_POINT_INDEXING_FAILED"
+    #   resp.backup_vault_events[0] #=> String, one of "BACKUP_JOB_STARTED", "BACKUP_JOB_COMPLETED", "BACKUP_JOB_SUCCESSFUL", "BACKUP_JOB_FAILED", "BACKUP_JOB_EXPIRED", "RESTORE_JOB_STARTED", "RESTORE_JOB_COMPLETED", "RESTORE_JOB_SUCCESSFUL", "RESTORE_JOB_FAILED", "COPY_JOB_STARTED", "COPY_JOB_SUCCESSFUL", "COPY_JOB_FAILED", "RECOVERY_POINT_MODIFIED", "BACKUP_PLAN_CREATED", "BACKUP_PLAN_MODIFIED", "S3_BACKUP_OBJECT_FAILED", "S3_RESTORE_OBJECT_FAILED", "CONTINUOUS_BACKUP_INTERRUPTED", "RECOVERY_POINT_INDEX_COMPLETED", "RECOVERY_POINT_INDEX_DELETED", "RECOVERY_POINT_INDEXING_FAILED"
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/backup-2018-11-15/GetBackupVaultNotifications AWS API Documentation
     #
@@ -3484,7 +3644,7 @@ module Aws::Backup
     # @example Request syntax with placeholder values
     #
     #   resp = client.list_backup_vaults({
-    #     by_vault_type: "BACKUP_VAULT", # accepts BACKUP_VAULT, LOGICALLY_AIR_GAPPED_BACKUP_VAULT
+    #     by_vault_type: "BACKUP_VAULT", # accepts BACKUP_VAULT, LOGICALLY_AIR_GAPPED_BACKUP_VAULT, RESTORE_ACCESS_BACKUP_VAULT
     #     by_shared: false,
     #     next_token: "string",
     #     max_results: 1,
@@ -3495,7 +3655,7 @@ module Aws::Backup
     #   resp.backup_vault_list #=> Array
     #   resp.backup_vault_list[0].backup_vault_name #=> String
     #   resp.backup_vault_list[0].backup_vault_arn #=> String
-    #   resp.backup_vault_list[0].vault_type #=> String, one of "BACKUP_VAULT", "LOGICALLY_AIR_GAPPED_BACKUP_VAULT"
+    #   resp.backup_vault_list[0].vault_type #=> String, one of "BACKUP_VAULT", "LOGICALLY_AIR_GAPPED_BACKUP_VAULT", "RESTORE_ACCESS_BACKUP_VAULT"
     #   resp.backup_vault_list[0].vault_state #=> String, one of "CREATING", "AVAILABLE", "FAILED"
     #   resp.backup_vault_list[0].creation_date #=> Time
     #   resp.backup_vault_list[0].encryption_key_arn #=> String
@@ -4209,6 +4369,7 @@ module Aws::Backup
     #   resp.recovery_points[0].status #=> String, one of "COMPLETED", "PARTIAL", "DELETING", "EXPIRED", "AVAILABLE", "STOPPED", "CREATING"
     #   resp.recovery_points[0].status_message #=> String
     #   resp.recovery_points[0].creation_date #=> Time
+    #   resp.recovery_points[0].initiation_date #=> Time
     #   resp.recovery_points[0].completion_date #=> Time
     #   resp.recovery_points[0].backup_size_in_bytes #=> Integer
     #   resp.recovery_points[0].calculated_lifecycle.move_to_cold_storage_at #=> Time
@@ -4223,7 +4384,7 @@ module Aws::Backup
     #   resp.recovery_points[0].composite_member_identifier #=> String
     #   resp.recovery_points[0].is_parent #=> Boolean
     #   resp.recovery_points[0].resource_name #=> String
-    #   resp.recovery_points[0].vault_type #=> String, one of "BACKUP_VAULT", "LOGICALLY_AIR_GAPPED_BACKUP_VAULT"
+    #   resp.recovery_points[0].vault_type #=> String, one of "BACKUP_VAULT", "LOGICALLY_AIR_GAPPED_BACKUP_VAULT", "RESTORE_ACCESS_BACKUP_VAULT"
     #   resp.recovery_points[0].index_status #=> String, one of "PENDING", "ACTIVE", "FAILED", "DELETING"
     #   resp.recovery_points[0].index_status_message #=> String
     #
@@ -4350,7 +4511,7 @@ module Aws::Backup
     #   resp.recovery_points[0].is_parent #=> Boolean
     #   resp.recovery_points[0].parent_recovery_point_arn #=> String
     #   resp.recovery_points[0].resource_name #=> String
-    #   resp.recovery_points[0].vault_type #=> String, one of "BACKUP_VAULT", "LOGICALLY_AIR_GAPPED_BACKUP_VAULT"
+    #   resp.recovery_points[0].vault_type #=> String, one of "BACKUP_VAULT", "LOGICALLY_AIR_GAPPED_BACKUP_VAULT", "RESTORE_ACCESS_BACKUP_VAULT"
     #   resp.recovery_points[0].index_status #=> String, one of "PENDING", "ACTIVE", "FAILED", "DELETING"
     #   resp.recovery_points[0].index_status_message #=> String
     #
@@ -4498,6 +4659,58 @@ module Aws::Backup
       req.send_request(options)
     end
 
+    # Returns a list of restore access backup vaults associated with a
+    # specified backup vault.
+    #
+    # @option params [required, String] :backup_vault_name
+    #   The name of the backup vault for which to list associated restore
+    #   access backup vaults.
+    #
+    # @option params [String] :next_token
+    #   The pagination token from a previous request to retrieve the next set
+    #   of results.
+    #
+    # @option params [Integer] :max_results
+    #   The maximum number of items to return in the response.
+    #
+    # @return [Types::ListRestoreAccessBackupVaultsOutput] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::ListRestoreAccessBackupVaultsOutput#next_token #next_token} => String
+    #   * {Types::ListRestoreAccessBackupVaultsOutput#restore_access_backup_vaults #restore_access_backup_vaults} => Array&lt;Types::RestoreAccessBackupVaultListMember&gt;
+    #
+    # The returned {Seahorse::Client::Response response} is a pageable response and is Enumerable. For details on usage see {Aws::PageableResponse PageableResponse}.
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.list_restore_access_backup_vaults({
+    #     backup_vault_name: "BackupVaultName", # required
+    #     next_token: "string",
+    #     max_results: 1,
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.next_token #=> String
+    #   resp.restore_access_backup_vaults #=> Array
+    #   resp.restore_access_backup_vaults[0].restore_access_backup_vault_arn #=> String
+    #   resp.restore_access_backup_vaults[0].creation_date #=> Time
+    #   resp.restore_access_backup_vaults[0].approval_date #=> Time
+    #   resp.restore_access_backup_vaults[0].vault_state #=> String, one of "CREATING", "AVAILABLE", "FAILED"
+    #   resp.restore_access_backup_vaults[0].latest_revoke_request.mpa_session_arn #=> String
+    #   resp.restore_access_backup_vaults[0].latest_revoke_request.status #=> String, one of "PENDING", "FAILED"
+    #   resp.restore_access_backup_vaults[0].latest_revoke_request.status_message #=> String
+    #   resp.restore_access_backup_vaults[0].latest_revoke_request.initiation_date #=> Time
+    #   resp.restore_access_backup_vaults[0].latest_revoke_request.expiry_date #=> Time
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/backup-2018-11-15/ListRestoreAccessBackupVaults AWS API Documentation
+    #
+    # @overload list_restore_access_backup_vaults(params = {})
+    # @param [Hash] params ({})
+    def list_restore_access_backup_vaults(params = {}, options = {})
+      req = build_request(:list_restore_access_backup_vaults, params)
+      req.send_request(options)
+    end
+
     # This request obtains a summary of restore jobs created or running
     # within the the most recent 30 days. You can include parameters
     # AccountID, State, ResourceType, AggregationPeriod, MaxResults, or
@@ -5135,36 +5348,13 @@ module Aws::Backup
     #
     # @option params [required, Array<String>] :backup_vault_events
     #   An array of events that indicate the status of jobs to back up
-    #   resources to the backup vault.
+    #   resources to the backup vault. For the list of supported events,
+    #   common use cases, and code samples, see [Notification options with
+    #   Backup][1].
     #
-    #   For common use cases and code samples, see [Using Amazon SNS to track
-    #   Backup events][1].
     #
-    #   The following events are supported:
     #
-    #   * `BACKUP_JOB_STARTED` \| `BACKUP_JOB_COMPLETED` \|
-    #     `BACKUP_JOB_FAILED`
-    #
-    #   * `COPY_JOB_STARTED` \| `COPY_JOB_SUCCESSFUL` \| `COPY_JOB_FAILED`
-    #
-    #   * `RESTORE_JOB_STARTED` \| `RESTORE_JOB_COMPLETED` \|
-    #     `RECOVERY_POINT_MODIFIED`
-    #
-    #   * `S3_BACKUP_OBJECT_FAILED` \| `S3_RESTORE_OBJECT_FAILED`
-    #
-    #   * `RECOVERY_POINT_INDEX_COMPLETED` \| `RECOVERY_POINT_INDEX_DELETED`
-    #     \| `RECOVERY_POINT_INDEXING_FAILED`
-    #
-    #   <note markdown="1"> The list below includes both supported events and deprecated events
-    #   that are no longer in use (for reference). Deprecated events do not
-    #   return statuses or notifications. Refer to the list above for the
-    #   supported events.
-    #
-    #    </note>
-    #
-    #
-    #
-    #   [1]: https://docs.aws.amazon.com/aws-backup/latest/devguide/sns-notifications.html
+    #   [1]: https://docs.aws.amazon.com/aws-backup/latest/devguide/backup-notifications.html
     #
     # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
     #
@@ -5173,7 +5363,7 @@ module Aws::Backup
     #   resp = client.put_backup_vault_notifications({
     #     backup_vault_name: "BackupVaultName", # required
     #     sns_topic_arn: "ARN", # required
-    #     backup_vault_events: ["BACKUP_JOB_STARTED"], # required, accepts BACKUP_JOB_STARTED, BACKUP_JOB_COMPLETED, BACKUP_JOB_SUCCESSFUL, BACKUP_JOB_FAILED, BACKUP_JOB_EXPIRED, RESTORE_JOB_STARTED, RESTORE_JOB_COMPLETED, RESTORE_JOB_SUCCESSFUL, RESTORE_JOB_FAILED, COPY_JOB_STARTED, COPY_JOB_SUCCESSFUL, COPY_JOB_FAILED, RECOVERY_POINT_MODIFIED, BACKUP_PLAN_CREATED, BACKUP_PLAN_MODIFIED, S3_BACKUP_OBJECT_FAILED, S3_RESTORE_OBJECT_FAILED, RECOVERY_POINT_INDEX_COMPLETED, RECOVERY_POINT_INDEX_DELETED, RECOVERY_POINT_INDEXING_FAILED
+    #     backup_vault_events: ["BACKUP_JOB_STARTED"], # required, accepts BACKUP_JOB_STARTED, BACKUP_JOB_COMPLETED, BACKUP_JOB_SUCCESSFUL, BACKUP_JOB_FAILED, BACKUP_JOB_EXPIRED, RESTORE_JOB_STARTED, RESTORE_JOB_COMPLETED, RESTORE_JOB_SUCCESSFUL, RESTORE_JOB_FAILED, COPY_JOB_STARTED, COPY_JOB_SUCCESSFUL, COPY_JOB_FAILED, RECOVERY_POINT_MODIFIED, BACKUP_PLAN_CREATED, BACKUP_PLAN_MODIFIED, S3_BACKUP_OBJECT_FAILED, S3_RESTORE_OBJECT_FAILED, CONTINUOUS_BACKUP_INTERRUPTED, RECOVERY_POINT_INDEX_COMPLETED, RECOVERY_POINT_INDEX_DELETED, RECOVERY_POINT_INDEXING_FAILED
     #   })
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/backup-2018-11-15/PutBackupVaultNotifications AWS API Documentation
@@ -5218,6 +5408,40 @@ module Aws::Backup
       req.send_request(options)
     end
 
+    # Revokes access to a restore access backup vault, removing the ability
+    # to restore from its recovery points and permanently deleting the
+    # vault.
+    #
+    # @option params [required, String] :backup_vault_name
+    #   The name of the source backup vault associated with the restore access
+    #   backup vault to be revoked.
+    #
+    # @option params [required, String] :restore_access_backup_vault_arn
+    #   The ARN of the restore access backup vault to revoke.
+    #
+    # @option params [String] :requester_comment
+    #   A comment explaining the reason for revoking access to the restore
+    #   access backup vault.
+    #
+    # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.revoke_restore_access_backup_vault({
+    #     backup_vault_name: "BackupVaultName", # required
+    #     restore_access_backup_vault_arn: "ARN", # required
+    #     requester_comment: "RequesterComment",
+    #   })
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/backup-2018-11-15/RevokeRestoreAccessBackupVault AWS API Documentation
+    #
+    # @overload revoke_restore_access_backup_vault(params = {})
+    # @param [Hash] params ({})
+    def revoke_restore_access_backup_vault(params = {}, options = {})
+      req = build_request(:revoke_restore_access_backup_vault, params)
+      req.send_request(options)
+    end
+
     # Starts an on-demand backup job for the specified resource.
     #
     # @option params [required, String] :backup_vault_name
@@ -5239,6 +5463,9 @@ module Aws::Backup
     #   request with the same idempotency token results in a success message
     #   with no action taken.
     #
+    #   **A suitable default value is auto-generated.** You should normally
+    #   not need to pass this option.**
+    #
     # @option params [Integer] :start_window_minutes
     #   A value in minutes after a backup is scheduled before a job will be
     #   canceled if it doesn't start successfully. This value is optional,
@@ -5392,6 +5619,9 @@ module Aws::Backup
     #   request with the same idempotency token results in a success message
     #   with no action taken.
     #
+    #   **A suitable default value is auto-generated.** You should normally
+    #   not need to pass this option.**
+    #
     # @option params [Types::Lifecycle] :lifecycle
     #   Specifies the time period, in days, before a recovery point
     #   transitions to cold storage or is deleted.
@@ -5567,6 +5797,9 @@ module Aws::Backup
     #   request with the same idempotency token results in a success message
     #   with no action taken.
     #
+    #   **A suitable default value is auto-generated.** You should normally
+    #   not need to pass this option.**
+    #
     # @option params [String] :resource_type
     #   Starts a job to restore a recovery point for one of the following
     #   resources:
@@ -6366,7 +6599,7 @@ module Aws::Backup
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-backup'
-      context[:gem_version] = '1.89.0'
+      context[:gem_version] = '1.91.0'
       Seahorse::Client::Request.new(handlers, context)
     end