aws-sdk-backup 1.98.0 → 1.99.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: d331a313bf0fbecf490bf41c6ea5bfc9625da040d0ada8d311d7485551e8d4a8
-  data.tar.gz: 77c40fd851abc94a733531ac7f2e68d0bd4420b016abb1905cdf73d74e0fcbed
+  metadata.gz: 3cd036bcb74a3777ac2da7e64b3f9aa56a8112cec7eed2dd7b134cd4b3ea0cc4
+  data.tar.gz: e9cd388ba132e6d8eabf8f9d2801bfbb7c70f7c43187c51efb4f75d0eab183db
 SHA512:
-  metadata.gz: 2a2905ece3c8c67cb664af4a1a3d9dad450e77b6ec433dbe301f70fe455358faf992add1888d5635552650ac5cdee64f961e8d4ef11e20c40300d22e451d9eb2
-  data.tar.gz: c1846ea4b41884218930e98b15d95cb74a29eccc5c17f5f372926eacaec47c8bf70a324cb63a8c1265275c9c84cce4036cb4a1ab6fdc3577c5b1f5aa17b379cd
+  metadata.gz: 6e55a311a04306e04ac1a01a43c755374cad25298c51d5c5d48c6c49c1294d27ad41a3dc944f9f1f438fad742c1e975b8a26834bdeeee3bfbd856bb0029b1d58
+  data.tar.gz: cd816cded7d09446bb09fefa7482825d4221d4a1bc8f154f2b943c2f49f1a19a1d89b8d01fed42cb5d457b7f9b61e1bcec47ebdc9dbacf589782c80a0975f141

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.99.0 (2025-11-06)
+------------------
+
+* Feature - AWS Backup now supports customer-managed keys (CMK) for logically air-gapped vaults, enabling customers to maintain full control over their encryption key lifecycle. This feature helps organizations meet specific internal governance requirements or external regulatory compliance standards.
+
 1.98.0 (2025-10-21)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.98.0
+1.99.0

data/lib/aws-sdk-backup/client.rb

@@ -1005,6 +1005,12 @@ module Aws::Backup
     #   The maximum retention period that the vault retains its recovery
     #   points.
     #
+    # @option params [String] :encryption_key_arn
+    #   The ARN of the customer-managed KMS key to use for encrypting the
+    #   logically air-gapped backup vault. If not specified, the vault will be
+    #   encrypted with an Amazon Web Services-owned key managed by Amazon Web
+    #   Services Backup.
+    #
     # @return [Types::CreateLogicallyAirGappedBackupVaultOutput] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::CreateLogicallyAirGappedBackupVaultOutput#backup_vault_name #backup_vault_name} => String
@@ -1022,6 +1028,7 @@ module Aws::Backup
     #     creator_request_id: "string",
     #     min_retention_days: 1, # required
     #     max_retention_days: 1, # required
+    #     encryption_key_arn: "ARN",
     #   })
     #
     # @example Response structure
@@ -1810,6 +1817,7 @@ module Aws::Backup
     #   * {Types::DescribeBackupVaultOutput#mpa_approval_team_arn #mpa_approval_team_arn} => String
     #   * {Types::DescribeBackupVaultOutput#mpa_session_arn #mpa_session_arn} => String
     #   * {Types::DescribeBackupVaultOutput#latest_mpa_approval_team_update #latest_mpa_approval_team_update} => Types::LatestMpaApprovalTeamUpdate
+    #   * {Types::DescribeBackupVaultOutput#encryption_key_type #encryption_key_type} => String
     #
     # @example Request syntax with placeholder values
     #
@@ -1840,6 +1848,7 @@ module Aws::Backup
     #   resp.latest_mpa_approval_team_update.status_message #=> String
     #   resp.latest_mpa_approval_team_update.initiation_date #=> Time
     #   resp.latest_mpa_approval_team_update.expiry_date #=> Time
+    #   resp.encryption_key_type #=> String, one of "AWS_OWNED_KMS_KEY", "CUSTOMER_MANAGED_KMS_KEY"
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/backup-2018-11-15/DescribeBackupVault AWS API Documentation
     #
@@ -2082,6 +2091,7 @@ module Aws::Backup
     #   * {Types::DescribeRecoveryPointOutput#vault_type #vault_type} => String
     #   * {Types::DescribeRecoveryPointOutput#index_status #index_status} => String
     #   * {Types::DescribeRecoveryPointOutput#index_status_message #index_status_message} => String
+    #   * {Types::DescribeRecoveryPointOutput#encryption_key_type #encryption_key_type} => String
     #
     # @example Request syntax with placeholder values
     #
@@ -2130,6 +2140,7 @@ module Aws::Backup
     #   resp.vault_type #=> String, one of "BACKUP_VAULT", "LOGICALLY_AIR_GAPPED_BACKUP_VAULT", "RESTORE_ACCESS_BACKUP_VAULT"
     #   resp.index_status #=> String, one of "PENDING", "ACTIVE", "FAILED", "DELETING"
     #   resp.index_status_message #=> String
+    #   resp.encryption_key_type #=> String, one of "AWS_OWNED_KMS_KEY", "CUSTOMER_MANAGED_KMS_KEY"
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/backup-2018-11-15/DescribeRecoveryPoint AWS API Documentation
     #
@@ -3718,6 +3729,7 @@ module Aws::Backup
     #   resp.backup_vault_list[0].min_retention_days #=> Integer
     #   resp.backup_vault_list[0].max_retention_days #=> Integer
     #   resp.backup_vault_list[0].lock_date #=> Time
+    #   resp.backup_vault_list[0].encryption_key_type #=> String, one of "AWS_OWNED_KMS_KEY", "CUSTOMER_MANAGED_KMS_KEY"
     #   resp.next_token #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/backup-2018-11-15/ListBackupVaults AWS API Documentation
@@ -4454,6 +4466,7 @@ module Aws::Backup
     #   resp.recovery_points[0].vault_type #=> String, one of "BACKUP_VAULT", "LOGICALLY_AIR_GAPPED_BACKUP_VAULT", "RESTORE_ACCESS_BACKUP_VAULT"
     #   resp.recovery_points[0].index_status #=> String, one of "PENDING", "ACTIVE", "FAILED", "DELETING"
     #   resp.recovery_points[0].index_status_message #=> String
+    #   resp.recovery_points[0].encryption_key_type #=> String, one of "AWS_OWNED_KMS_KEY", "CUSTOMER_MANAGED_KMS_KEY"
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/backup-2018-11-15/ListRecoveryPointsByBackupVault AWS API Documentation
     #
@@ -4581,6 +4594,7 @@ module Aws::Backup
     #   resp.recovery_points[0].vault_type #=> String, one of "BACKUP_VAULT", "LOGICALLY_AIR_GAPPED_BACKUP_VAULT", "RESTORE_ACCESS_BACKUP_VAULT"
     #   resp.recovery_points[0].index_status #=> String, one of "PENDING", "ACTIVE", "FAILED", "DELETING"
     #   resp.recovery_points[0].index_status_message #=> String
+    #   resp.recovery_points[0].encryption_key_type #=> String, one of "AWS_OWNED_KMS_KEY", "CUSTOMER_MANAGED_KMS_KEY"
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/backup-2018-11-15/ListRecoveryPointsByResource AWS API Documentation
     #
@@ -6683,7 +6697,7 @@ module Aws::Backup
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-backup'
-      context[:gem_version] = '1.98.0'
+      context[:gem_version] = '1.99.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-backup/client_api.rb

@@ -139,6 +139,7 @@ module Aws::Backup
     DisassociateBackupVaultMpaApprovalTeamInput = Shapes::StructureShape.new(name: 'DisassociateBackupVaultMpaApprovalTeamInput')
     DisassociateRecoveryPointFromParentInput = Shapes::StructureShape.new(name: 'DisassociateRecoveryPointFromParentInput')
     DisassociateRecoveryPointInput = Shapes::StructureShape.new(name: 'DisassociateRecoveryPointInput')
+    EncryptionKeyType = Shapes::StringShape.new(name: 'EncryptionKeyType')
     ExportBackupPlanTemplateInput = Shapes::StructureShape.new(name: 'ExportBackupPlanTemplateInput')
     ExportBackupPlanTemplateOutput = Shapes::StructureShape.new(name: 'ExportBackupPlanTemplateOutput')
     FormatList = Shapes::ListShape.new(name: 'FormatList')
@@ -549,6 +550,7 @@ module Aws::Backup
     BackupVaultListMember.add_member(:min_retention_days, Shapes::ShapeRef.new(shape: Long, location_name: "MinRetentionDays"))
     BackupVaultListMember.add_member(:max_retention_days, Shapes::ShapeRef.new(shape: Long, location_name: "MaxRetentionDays"))
     BackupVaultListMember.add_member(:lock_date, Shapes::ShapeRef.new(shape: timestamp, location_name: "LockDate"))
+    BackupVaultListMember.add_member(:encryption_key_type, Shapes::ShapeRef.new(shape: EncryptionKeyType, location_name: "EncryptionKeyType"))
     BackupVaultListMember.struct_class = Types::BackupVaultListMember
 
     CalculatedLifecycle.add_member(:move_to_cold_storage_at, Shapes::ShapeRef.new(shape: timestamp, location_name: "MoveToColdStorageAt"))
@@ -714,6 +716,7 @@ module Aws::Backup
     CreateLogicallyAirGappedBackupVaultInput.add_member(:creator_request_id, Shapes::ShapeRef.new(shape: string, location_name: "CreatorRequestId", metadata: {"idempotencyToken" => true}))
     CreateLogicallyAirGappedBackupVaultInput.add_member(:min_retention_days, Shapes::ShapeRef.new(shape: Long, required: true, location_name: "MinRetentionDays"))
     CreateLogicallyAirGappedBackupVaultInput.add_member(:max_retention_days, Shapes::ShapeRef.new(shape: Long, required: true, location_name: "MaxRetentionDays"))
+    CreateLogicallyAirGappedBackupVaultInput.add_member(:encryption_key_arn, Shapes::ShapeRef.new(shape: ARN, location_name: "EncryptionKeyArn"))
     CreateLogicallyAirGappedBackupVaultInput.struct_class = Types::CreateLogicallyAirGappedBackupVaultInput
 
     CreateLogicallyAirGappedBackupVaultOutput.add_member(:backup_vault_name, Shapes::ShapeRef.new(shape: BackupVaultName, location_name: "BackupVaultName"))
@@ -878,6 +881,7 @@ module Aws::Backup
     DescribeBackupVaultOutput.add_member(:mpa_approval_team_arn, Shapes::ShapeRef.new(shape: ARN, location_name: "MpaApprovalTeamArn"))
     DescribeBackupVaultOutput.add_member(:mpa_session_arn, Shapes::ShapeRef.new(shape: ARN, location_name: "MpaSessionArn"))
     DescribeBackupVaultOutput.add_member(:latest_mpa_approval_team_update, Shapes::ShapeRef.new(shape: LatestMpaApprovalTeamUpdate, location_name: "LatestMpaApprovalTeamUpdate"))
+    DescribeBackupVaultOutput.add_member(:encryption_key_type, Shapes::ShapeRef.new(shape: EncryptionKeyType, location_name: "EncryptionKeyType"))
     DescribeBackupVaultOutput.struct_class = Types::DescribeBackupVaultOutput
 
     DescribeCopyJobInput.add_member(:copy_job_id, Shapes::ShapeRef.new(shape: string, required: true, location: "uri", location_name: "copyJobId"))
@@ -951,6 +955,7 @@ module Aws::Backup
     DescribeRecoveryPointOutput.add_member(:vault_type, Shapes::ShapeRef.new(shape: VaultType, location_name: "VaultType"))
     DescribeRecoveryPointOutput.add_member(:index_status, Shapes::ShapeRef.new(shape: IndexStatus, location_name: "IndexStatus"))
     DescribeRecoveryPointOutput.add_member(:index_status_message, Shapes::ShapeRef.new(shape: string, location_name: "IndexStatusMessage"))
+    DescribeRecoveryPointOutput.add_member(:encryption_key_type, Shapes::ShapeRef.new(shape: EncryptionKeyType, location_name: "EncryptionKeyType"))
     DescribeRecoveryPointOutput.struct_class = Types::DescribeRecoveryPointOutput
 
     DescribeRegionSettingsInput.struct_class = Types::DescribeRegionSettingsInput
@@ -1604,6 +1609,7 @@ module Aws::Backup
     RecoveryPointByBackupVault.add_member(:vault_type, Shapes::ShapeRef.new(shape: VaultType, location_name: "VaultType"))
     RecoveryPointByBackupVault.add_member(:index_status, Shapes::ShapeRef.new(shape: IndexStatus, location_name: "IndexStatus"))
     RecoveryPointByBackupVault.add_member(:index_status_message, Shapes::ShapeRef.new(shape: string, location_name: "IndexStatusMessage"))
+    RecoveryPointByBackupVault.add_member(:encryption_key_type, Shapes::ShapeRef.new(shape: EncryptionKeyType, location_name: "EncryptionKeyType"))
     RecoveryPointByBackupVault.struct_class = Types::RecoveryPointByBackupVault
 
     RecoveryPointByBackupVaultList.member = Shapes::ShapeRef.new(shape: RecoveryPointByBackupVault)
@@ -1621,6 +1627,7 @@ module Aws::Backup
     RecoveryPointByResource.add_member(:vault_type, Shapes::ShapeRef.new(shape: VaultType, location_name: "VaultType"))
     RecoveryPointByResource.add_member(:index_status, Shapes::ShapeRef.new(shape: IndexStatus, location_name: "IndexStatus"))
     RecoveryPointByResource.add_member(:index_status_message, Shapes::ShapeRef.new(shape: string, location_name: "IndexStatusMessage"))
+    RecoveryPointByResource.add_member(:encryption_key_type, Shapes::ShapeRef.new(shape: EncryptionKeyType, location_name: "EncryptionKeyType"))
     RecoveryPointByResource.struct_class = Types::RecoveryPointByResource
 
     RecoveryPointByResourceList.member = Shapes::ShapeRef.new(shape: RecoveryPointByResource)

data/lib/aws-sdk-backup/types.rb

@@ -1129,6 +1129,12 @@ module Aws::Backup
     #   represents Friday, January 26, 2018 12:11:30.087 AM.
     #   @return [Time]
     #
+    # @!attribute [rw] encryption_key_type
+    #   The type of encryption key used for the backup vault. Valid values
+    #   are CUSTOMER\_MANAGED\_KMS\_KEY for customer-managed keys or Amazon
+    #   Web Services\_OWNED\_KMS\_KEY for Amazon Web Services-owned keys.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/backup-2018-11-15/BackupVaultListMember AWS API Documentation
     #
     class BackupVaultListMember < Struct.new(
@@ -1143,7 +1149,8 @@ module Aws::Backup
       :locked,
       :min_retention_days,
       :max_retention_days,
-      :lock_date)
+      :lock_date,
+      :encryption_key_type)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -2109,6 +2116,13 @@ module Aws::Backup
     #   points.
     #   @return [Integer]
     #
+    # @!attribute [rw] encryption_key_arn
+    #   The ARN of the customer-managed KMS key to use for encrypting the
+    #   logically air-gapped backup vault. If not specified, the vault will
+    #   be encrypted with an Amazon Web Services-owned key managed by Amazon
+    #   Web Services Backup.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/backup-2018-11-15/CreateLogicallyAirGappedBackupVaultInput AWS API Documentation
     #
     class CreateLogicallyAirGappedBackupVaultInput < Struct.new(
@@ -2116,7 +2130,8 @@ module Aws::Backup
       :backup_vault_tags,
       :creator_request_id,
       :min_retention_days,
-      :max_retention_days)
+      :max_retention_days,
+      :encryption_key_arn)
       SENSITIVE = [:backup_vault_tags]
       include Aws::Structure
     end
@@ -2423,6 +2438,9 @@ module Aws::Backup
     # @!attribute [rw] restore_testing_selection_name
     #   The name of the restore testing selection for the related restore
     #   testing plan.
+    #
+    #   The name cannot be changed after creation. The name consists of only
+    #   alphanumeric characters and underscores. Maximum length is 50.
     #   @return [String]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/backup-2018-11-15/CreateRestoreTestingSelectionOutput AWS API Documentation
@@ -3117,6 +3135,12 @@ module Aws::Backup
     #   association for this backup vault.
     #   @return [Types::LatestMpaApprovalTeamUpdate]
     #
+    # @!attribute [rw] encryption_key_type
+    #   The type of encryption key used for the backup vault. Valid values
+    #   are CUSTOMER\_MANAGED\_KMS\_KEY for customer-managed keys or Amazon
+    #   Web Services\_OWNED\_KMS\_KEY for Amazon Web Services-owned keys.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/backup-2018-11-15/DescribeBackupVaultOutput AWS API Documentation
     #
     class DescribeBackupVaultOutput < Struct.new(
@@ -3135,7 +3159,8 @@ module Aws::Backup
       :source_backup_vault_arn,
       :mpa_approval_team_arn,
       :mpa_session_arn,
-      :latest_mpa_approval_team_update)
+      :latest_mpa_approval_team_update,
+      :encryption_key_type)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -3597,6 +3622,12 @@ module Aws::Backup
     #   a backup index associated with the recovery point.
     #   @return [String]
     #
+    # @!attribute [rw] encryption_key_type
+    #   The type of encryption key used for the recovery point. Valid values
+    #   are CUSTOMER\_MANAGED\_KMS\_KEY for customer-managed keys or Amazon
+    #   Web Services\_OWNED\_KMS\_KEY for Amazon Web Services-owned keys.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/backup-2018-11-15/DescribeRecoveryPointOutput AWS API Documentation
     #
     class DescribeRecoveryPointOutput < Struct.new(
@@ -3626,7 +3657,8 @@ module Aws::Backup
       :resource_name,
       :vault_type,
       :index_status,
-      :index_status_message)
+      :index_status_message,
+      :encryption_key_type)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -7472,6 +7504,12 @@ module Aws::Backup
     #   a backup index associated with the recovery point.
     #   @return [String]
     #
+    # @!attribute [rw] encryption_key_type
+    #   The type of encryption key used for the recovery point. Valid values
+    #   are CUSTOMER\_MANAGED\_KMS\_KEY for customer-managed keys or Amazon
+    #   Web Services\_OWNED\_KMS\_KEY for Amazon Web Services-owned keys.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/backup-2018-11-15/RecoveryPointByBackupVault AWS API Documentation
     #
     class RecoveryPointByBackupVault < Struct.new(
@@ -7500,7 +7538,8 @@ module Aws::Backup
       :resource_name,
       :vault_type,
       :index_status,
-      :index_status_message)
+      :index_status_message,
+      :encryption_key_type)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -7579,6 +7618,12 @@ module Aws::Backup
     #   a backup index associated with the recovery point.
     #   @return [String]
     #
+    # @!attribute [rw] encryption_key_type
+    #   The type of encryption key used for the recovery point. Valid values
+    #   are CUSTOMER\_MANAGED\_KMS\_KEY for customer-managed keys or Amazon
+    #   Web Services\_OWNED\_KMS\_KEY for Amazon Web Services-owned keys.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/backup-2018-11-15/RecoveryPointByResource AWS API Documentation
     #
     class RecoveryPointByResource < Struct.new(
@@ -7594,7 +7639,8 @@ module Aws::Backup
       :resource_name,
       :vault_type,
       :index_status,
-      :index_status_message)
+      :index_status_message,
+      :encryption_key_type)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -8680,6 +8726,9 @@ module Aws::Backup
     # @!attribute [rw] restore_testing_selection_name
     #   The unique name of the restore testing selection that belongs to the
     #   related restore testing plan.
+    #
+    #   The name consists of only alphanumeric characters and underscores.
+    #   Maximum length is 50.
     #   @return [String]
     #
     # @!attribute [rw] validation_window_hours
@@ -8765,6 +8814,9 @@ module Aws::Backup
     # @!attribute [rw] restore_testing_selection_name
     #   The unique name of the restore testing selection that belongs to the
     #   related restore testing plan.
+    #
+    #   The name consists of only alphanumeric characters and underscores.
+    #   Maximum length is 50.
     #   @return [String]
     #
     # @!attribute [rw] validation_window_hours
@@ -8821,6 +8873,9 @@ module Aws::Backup
     #
     # @!attribute [rw] restore_testing_selection_name
     #   Unique name of a restore testing selection.
+    #
+    #   The name consists of only alphanumeric characters and underscores.
+    #   Maximum length is 50.
     #   @return [String]
     #
     # @!attribute [rw] validation_window_hours

data/lib/aws-sdk-backup.rb

@@ -54,7 +54,7 @@ module Aws::Backup
   autoload :EndpointProvider, 'aws-sdk-backup/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-backup/endpoints'
 
-  GEM_VERSION = '1.98.0'
+  GEM_VERSION = '1.99.0'
 
 end
 

data/sig/client.rbs

@@ -290,7 +290,8 @@ module Aws
                                                       ?backup_vault_tags: Hash[::String, ::String],
                                                       ?creator_request_id: ::String,
                                                       min_retention_days: ::Integer,
-                                                      max_retention_days: ::Integer
+                                                      max_retention_days: ::Integer,
+                                                      ?encryption_key_arn: ::String
                                                     ) -> _CreateLogicallyAirGappedBackupVaultResponseSuccess
                                                   | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _CreateLogicallyAirGappedBackupVaultResponseSuccess
 
@@ -536,6 +537,7 @@ module Aws
         def mpa_approval_team_arn: () -> ::String
         def mpa_session_arn: () -> ::String
         def latest_mpa_approval_team_update: () -> Types::LatestMpaApprovalTeamUpdate
+        def encryption_key_type: () -> ("AWS_OWNED_KMS_KEY" | "CUSTOMER_MANAGED_KMS_KEY")
       end
       # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/Backup/Client.html#describe_backup_vault-instance_method
       def describe_backup_vault: (
@@ -628,6 +630,7 @@ module Aws
         def vault_type: () -> ("BACKUP_VAULT" | "LOGICALLY_AIR_GAPPED_BACKUP_VAULT" | "RESTORE_ACCESS_BACKUP_VAULT")
         def index_status: () -> ("PENDING" | "ACTIVE" | "FAILED" | "DELETING")
         def index_status_message: () -> ::String
+        def encryption_key_type: () -> ("AWS_OWNED_KMS_KEY" | "CUSTOMER_MANAGED_KMS_KEY")
       end
       # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/Backup/Client.html#describe_recovery_point-instance_method
       def describe_recovery_point: (

data/sig/types.rbs

@@ -174,6 +174,7 @@ module Aws::Backup
       attr_accessor min_retention_days: ::Integer
       attr_accessor max_retention_days: ::Integer
       attr_accessor lock_date: ::Time
+      attr_accessor encryption_key_type: ("AWS_OWNED_KMS_KEY" | "CUSTOMER_MANAGED_KMS_KEY")
       SENSITIVE: []
     end
 
@@ -369,6 +370,7 @@ module Aws::Backup
       attr_accessor creator_request_id: ::String
       attr_accessor min_retention_days: ::Integer
       attr_accessor max_retention_days: ::Integer
+      attr_accessor encryption_key_arn: ::String
       SENSITIVE: [:backup_vault_tags]
     end
 
@@ -587,6 +589,7 @@ module Aws::Backup
       attr_accessor mpa_approval_team_arn: ::String
       attr_accessor mpa_session_arn: ::String
       attr_accessor latest_mpa_approval_team_update: Types::LatestMpaApprovalTeamUpdate
+      attr_accessor encryption_key_type: ("AWS_OWNED_KMS_KEY" | "CUSTOMER_MANAGED_KMS_KEY")
       SENSITIVE: []
     end
 
@@ -679,6 +682,7 @@ module Aws::Backup
       attr_accessor vault_type: ("BACKUP_VAULT" | "LOGICALLY_AIR_GAPPED_BACKUP_VAULT" | "RESTORE_ACCESS_BACKUP_VAULT")
       attr_accessor index_status: ("PENDING" | "ACTIVE" | "FAILED" | "DELETING")
       attr_accessor index_status_message: ::String
+      attr_accessor encryption_key_type: ("AWS_OWNED_KMS_KEY" | "CUSTOMER_MANAGED_KMS_KEY")
       SENSITIVE: []
     end
 
@@ -1533,6 +1537,7 @@ module Aws::Backup
       attr_accessor vault_type: ("BACKUP_VAULT" | "LOGICALLY_AIR_GAPPED_BACKUP_VAULT" | "RESTORE_ACCESS_BACKUP_VAULT")
       attr_accessor index_status: ("PENDING" | "ACTIVE" | "FAILED" | "DELETING")
       attr_accessor index_status_message: ::String
+      attr_accessor encryption_key_type: ("AWS_OWNED_KMS_KEY" | "CUSTOMER_MANAGED_KMS_KEY")
       SENSITIVE: []
     end
 
@@ -1550,6 +1555,7 @@ module Aws::Backup
       attr_accessor vault_type: ("BACKUP_VAULT" | "LOGICALLY_AIR_GAPPED_BACKUP_VAULT" | "RESTORE_ACCESS_BACKUP_VAULT")
       attr_accessor index_status: ("PENDING" | "ACTIVE" | "FAILED" | "DELETING")
       attr_accessor index_status_message: ::String
+      attr_accessor encryption_key_type: ("AWS_OWNED_KMS_KEY" | "CUSTOMER_MANAGED_KMS_KEY")
       SENSITIVE: []
     end
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-backup
 version: !ruby/object:Gem::Version
-  version: 1.98.0
+  version: 1.99.0
 platform: ruby
 authors:
 - Amazon Web Services