aws-sdk-directconnect 1.40.0 → 1.41.0

data/lib/aws-sdk-directconnect/client_api.rb

@@ -26,9 +26,12 @@ module Aws::DirectConnect
     AmazonAddress = Shapes::StringShape.new(name: 'AmazonAddress')
     AssociateConnectionWithLagRequest = Shapes::StructureShape.new(name: 'AssociateConnectionWithLagRequest')
     AssociateHostedConnectionRequest = Shapes::StructureShape.new(name: 'AssociateHostedConnectionRequest')
+    AssociateMacSecKeyRequest = Shapes::StructureShape.new(name: 'AssociateMacSecKeyRequest')
+    AssociateMacSecKeyResponse = Shapes::StructureShape.new(name: 'AssociateMacSecKeyResponse')
     AssociateVirtualInterfaceRequest = Shapes::StructureShape.new(name: 'AssociateVirtualInterfaceRequest')
     AssociatedGateway = Shapes::StructureShape.new(name: 'AssociatedGateway')
     AssociatedGatewayId = Shapes::StringShape.new(name: 'AssociatedGatewayId')
+    AvailableMacSecPortSpeeds = Shapes::ListShape.new(name: 'AvailableMacSecPortSpeeds')
     AvailablePortSpeeds = Shapes::ListShape.new(name: 'AvailablePortSpeeds')
     AwsDevice = Shapes::StringShape.new(name: 'AwsDevice')
     AwsDeviceV2 = Shapes::StringShape.new(name: 'AwsDeviceV2')
@@ -42,6 +45,8 @@ module Aws::DirectConnect
     Bandwidth = Shapes::StringShape.new(name: 'Bandwidth')
     BooleanFlag = Shapes::BooleanShape.new(name: 'BooleanFlag')
     CIDR = Shapes::StringShape.new(name: 'CIDR')
+    Cak = Shapes::StringShape.new(name: 'Cak')
+    Ckn = Shapes::StringShape.new(name: 'Ckn')
     ConfirmConnectionRequest = Shapes::StructureShape.new(name: 'ConfirmConnectionRequest')
     ConfirmConnectionResponse = Shapes::StructureShape.new(name: 'ConfirmConnectionResponse')
     ConfirmPrivateVirtualInterfaceRequest = Shapes::StructureShape.new(name: 'ConfirmPrivateVirtualInterfaceRequest')
@@ -128,7 +133,10 @@ module Aws::DirectConnect
     DirectConnectGatewayState = Shapes::StringShape.new(name: 'DirectConnectGatewayState')
     DirectConnectServerException = Shapes::StructureShape.new(name: 'DirectConnectServerException')
     DisassociateConnectionFromLagRequest = Shapes::StructureShape.new(name: 'DisassociateConnectionFromLagRequest')
+    DisassociateMacSecKeyRequest = Shapes::StructureShape.new(name: 'DisassociateMacSecKeyRequest')
+    DisassociateMacSecKeyResponse = Shapes::StructureShape.new(name: 'DisassociateMacSecKeyResponse')
     DuplicateTagKeysException = Shapes::StructureShape.new(name: 'DuplicateTagKeysException')
+    EncryptionMode = Shapes::StringShape.new(name: 'EncryptionMode')
     EndTime = Shapes::TimestampShape.new(name: 'EndTime')
     ErrorMessage = Shapes::StringShape.new(name: 'ErrorMessage')
     FailureTestHistoryStatus = Shapes::StringShape.new(name: 'FailureTestHistoryStatus')
@@ -162,6 +170,9 @@ module Aws::DirectConnect
     Locations = Shapes::StructureShape.new(name: 'Locations')
     LongAsn = Shapes::IntegerShape.new(name: 'LongAsn')
     MTU = Shapes::IntegerShape.new(name: 'MTU')
+    MacSecCapable = Shapes::BooleanShape.new(name: 'MacSecCapable')
+    MacSecKey = Shapes::StructureShape.new(name: 'MacSecKey')
+    MacSecKeyList = Shapes::ListShape.new(name: 'MacSecKeyList')
     MaxResultSetSize = Shapes::IntegerShape.new(name: 'MaxResultSetSize')
     NewBGPPeer = Shapes::StructureShape.new(name: 'NewBGPPeer')
     NewPrivateVirtualInterface = Shapes::StructureShape.new(name: 'NewPrivateVirtualInterface')
@@ -173,10 +184,12 @@ module Aws::DirectConnect
     OwnerAccount = Shapes::StringShape.new(name: 'OwnerAccount')
     PaginationToken = Shapes::StringShape.new(name: 'PaginationToken')
     PartnerName = Shapes::StringShape.new(name: 'PartnerName')
+    PortEncryptionStatus = Shapes::StringShape.new(name: 'PortEncryptionStatus')
     PortSpeed = Shapes::StringShape.new(name: 'PortSpeed')
     ProviderList = Shapes::ListShape.new(name: 'ProviderList')
     ProviderName = Shapes::StringShape.new(name: 'ProviderName')
     Region = Shapes::StringShape.new(name: 'Region')
+    RequestMACSec = Shapes::BooleanShape.new(name: 'RequestMACSec')
     ResourceArn = Shapes::StringShape.new(name: 'ResourceArn')
     ResourceArnList = Shapes::ListShape.new(name: 'ResourceArnList')
     ResourceTag = Shapes::StructureShape.new(name: 'ResourceTag')
@@ -184,9 +197,12 @@ module Aws::DirectConnect
     RouteFilterPrefix = Shapes::StructureShape.new(name: 'RouteFilterPrefix')
     RouteFilterPrefixList = Shapes::ListShape.new(name: 'RouteFilterPrefixList')
     RouterConfig = Shapes::StringShape.new(name: 'RouterConfig')
+    SecretARN = Shapes::StringShape.new(name: 'SecretARN')
     StartBgpFailoverTestRequest = Shapes::StructureShape.new(name: 'StartBgpFailoverTestRequest')
     StartBgpFailoverTestResponse = Shapes::StructureShape.new(name: 'StartBgpFailoverTestResponse')
+    StartOnDate = Shapes::StringShape.new(name: 'StartOnDate')
     StartTime = Shapes::TimestampShape.new(name: 'StartTime')
+    State = Shapes::StringShape.new(name: 'State')
     StateChangeError = Shapes::StringShape.new(name: 'StateChangeError')
     StopBgpFailoverTestRequest = Shapes::StructureShape.new(name: 'StopBgpFailoverTestRequest')
     StopBgpFailoverTestResponse = Shapes::StructureShape.new(name: 'StopBgpFailoverTestResponse')
@@ -202,6 +218,7 @@ module Aws::DirectConnect
     TooManyTagsException = Shapes::StructureShape.new(name: 'TooManyTagsException')
     UntagResourceRequest = Shapes::StructureShape.new(name: 'UntagResourceRequest')
     UntagResourceResponse = Shapes::StructureShape.new(name: 'UntagResourceResponse')
+    UpdateConnectionRequest = Shapes::StructureShape.new(name: 'UpdateConnectionRequest')
     UpdateDirectConnectGatewayAssociationRequest = Shapes::StructureShape.new(name: 'UpdateDirectConnectGatewayAssociationRequest')
     UpdateDirectConnectGatewayAssociationResult = Shapes::StructureShape.new(name: 'UpdateDirectConnectGatewayAssociationResult')
     UpdateLagRequest = Shapes::StructureShape.new(name: 'UpdateLagRequest')
@@ -274,6 +291,16 @@ module Aws::DirectConnect
     AssociateHostedConnectionRequest.add_member(:parent_connection_id, Shapes::ShapeRef.new(shape: ConnectionId, required: true, location_name: "parentConnectionId"))
     AssociateHostedConnectionRequest.struct_class = Types::AssociateHostedConnectionRequest
 
+    AssociateMacSecKeyRequest.add_member(:connection_id, Shapes::ShapeRef.new(shape: ConnectionId, required: true, location_name: "connectionId"))
+    AssociateMacSecKeyRequest.add_member(:secret_arn, Shapes::ShapeRef.new(shape: SecretARN, location_name: "secretARN"))
+    AssociateMacSecKeyRequest.add_member(:ckn, Shapes::ShapeRef.new(shape: Ckn, location_name: "ckn"))
+    AssociateMacSecKeyRequest.add_member(:cak, Shapes::ShapeRef.new(shape: Cak, location_name: "cak"))
+    AssociateMacSecKeyRequest.struct_class = Types::AssociateMacSecKeyRequest
+
+    AssociateMacSecKeyResponse.add_member(:connection_id, Shapes::ShapeRef.new(shape: ConnectionId, location_name: "connectionId"))
+    AssociateMacSecKeyResponse.add_member(:mac_sec_keys, Shapes::ShapeRef.new(shape: MacSecKeyList, location_name: "macSecKeys"))
+    AssociateMacSecKeyResponse.struct_class = Types::AssociateMacSecKeyResponse
+
     AssociateVirtualInterfaceRequest.add_member(:virtual_interface_id, Shapes::ShapeRef.new(shape: VirtualInterfaceId, required: true, location_name: "virtualInterfaceId"))
     AssociateVirtualInterfaceRequest.add_member(:connection_id, Shapes::ShapeRef.new(shape: ConnectionId, required: true, location_name: "connectionId"))
     AssociateVirtualInterfaceRequest.struct_class = Types::AssociateVirtualInterfaceRequest
@@ -284,6 +311,8 @@ module Aws::DirectConnect
     AssociatedGateway.add_member(:region, Shapes::ShapeRef.new(shape: Region, location_name: "region"))
     AssociatedGateway.struct_class = Types::AssociatedGateway
 
+    AvailableMacSecPortSpeeds.member = Shapes::ShapeRef.new(shape: PortSpeed)
+
     AvailablePortSpeeds.member = Shapes::ShapeRef.new(shape: PortSpeed)
 
     BGPPeer.add_member(:bgp_peer_id, Shapes::ShapeRef.new(shape: BGPPeerId, location_name: "bgpPeerId"))
@@ -345,6 +374,10 @@ module Aws::DirectConnect
     Connection.add_member(:has_logical_redundancy, Shapes::ShapeRef.new(shape: HasLogicalRedundancy, location_name: "hasLogicalRedundancy"))
     Connection.add_member(:tags, Shapes::ShapeRef.new(shape: TagList, location_name: "tags"))
     Connection.add_member(:provider_name, Shapes::ShapeRef.new(shape: ProviderName, location_name: "providerName"))
+    Connection.add_member(:mac_sec_capable, Shapes::ShapeRef.new(shape: MacSecCapable, location_name: "macSecCapable"))
+    Connection.add_member(:port_encryption_status, Shapes::ShapeRef.new(shape: PortEncryptionStatus, location_name: "portEncryptionStatus"))
+    Connection.add_member(:encryption_mode, Shapes::ShapeRef.new(shape: EncryptionMode, location_name: "encryptionMode"))
+    Connection.add_member(:mac_sec_keys, Shapes::ShapeRef.new(shape: MacSecKeyList, location_name: "macSecKeys"))
     Connection.struct_class = Types::Connection
 
     ConnectionList.member = Shapes::ShapeRef.new(shape: Connection)
@@ -365,6 +398,7 @@ module Aws::DirectConnect
     CreateConnectionRequest.add_member(:lag_id, Shapes::ShapeRef.new(shape: LagId, location_name: "lagId"))
     CreateConnectionRequest.add_member(:tags, Shapes::ShapeRef.new(shape: TagList, location_name: "tags"))
     CreateConnectionRequest.add_member(:provider_name, Shapes::ShapeRef.new(shape: ProviderName, location_name: "providerName"))
+    CreateConnectionRequest.add_member(:request_mac_sec, Shapes::ShapeRef.new(shape: RequestMACSec, location_name: "requestMACSec"))
     CreateConnectionRequest.struct_class = Types::CreateConnectionRequest
 
     CreateDirectConnectGatewayAssociationProposalRequest.add_member(:direct_connect_gateway_id, Shapes::ShapeRef.new(shape: DirectConnectGatewayId, required: true, location_name: "directConnectGatewayId"))
@@ -409,6 +443,7 @@ module Aws::DirectConnect
     CreateLagRequest.add_member(:tags, Shapes::ShapeRef.new(shape: TagList, location_name: "tags"))
     CreateLagRequest.add_member(:child_connection_tags, Shapes::ShapeRef.new(shape: TagList, location_name: "childConnectionTags"))
     CreateLagRequest.add_member(:provider_name, Shapes::ShapeRef.new(shape: ProviderName, location_name: "providerName"))
+    CreateLagRequest.add_member(:request_mac_sec, Shapes::ShapeRef.new(shape: RequestMACSec, location_name: "requestMACSec"))
     CreateLagRequest.struct_class = Types::CreateLagRequest
 
     CreatePrivateVirtualInterfaceRequest.add_member(:connection_id, Shapes::ShapeRef.new(shape: ConnectionId, required: true, location_name: "connectionId"))
@@ -617,6 +652,14 @@ module Aws::DirectConnect
     DisassociateConnectionFromLagRequest.add_member(:lag_id, Shapes::ShapeRef.new(shape: LagId, required: true, location_name: "lagId"))
     DisassociateConnectionFromLagRequest.struct_class = Types::DisassociateConnectionFromLagRequest
 
+    DisassociateMacSecKeyRequest.add_member(:connection_id, Shapes::ShapeRef.new(shape: ConnectionId, required: true, location_name: "connectionId"))
+    DisassociateMacSecKeyRequest.add_member(:secret_arn, Shapes::ShapeRef.new(shape: SecretARN, required: true, location_name: "secretARN"))
+    DisassociateMacSecKeyRequest.struct_class = Types::DisassociateMacSecKeyRequest
+
+    DisassociateMacSecKeyResponse.add_member(:connection_id, Shapes::ShapeRef.new(shape: ConnectionId, location_name: "connectionId"))
+    DisassociateMacSecKeyResponse.add_member(:mac_sec_keys, Shapes::ShapeRef.new(shape: MacSecKeyList, location_name: "macSecKeys"))
+    DisassociateMacSecKeyResponse.struct_class = Types::DisassociateMacSecKeyResponse
+
     DuplicateTagKeysException.struct_class = Types::DuplicateTagKeysException
 
     Interconnect.add_member(:interconnect_id, Shapes::ShapeRef.new(shape: InterconnectId, location_name: "interconnectId"))
@@ -657,6 +700,9 @@ module Aws::DirectConnect
     Lag.add_member(:has_logical_redundancy, Shapes::ShapeRef.new(shape: HasLogicalRedundancy, location_name: "hasLogicalRedundancy"))
     Lag.add_member(:tags, Shapes::ShapeRef.new(shape: TagList, location_name: "tags"))
     Lag.add_member(:provider_name, Shapes::ShapeRef.new(shape: ProviderName, location_name: "providerName"))
+    Lag.add_member(:mac_sec_capable, Shapes::ShapeRef.new(shape: MacSecCapable, location_name: "macSecCapable"))
+    Lag.add_member(:encryption_mode, Shapes::ShapeRef.new(shape: EncryptionMode, location_name: "encryptionMode"))
+    Lag.add_member(:mac_sec_keys, Shapes::ShapeRef.new(shape: MacSecKeyList, location_name: "macSecKeys"))
     Lag.struct_class = Types::Lag
 
     LagList.member = Shapes::ShapeRef.new(shape: Lag)
@@ -685,6 +731,7 @@ module Aws::DirectConnect
     Location.add_member(:region, Shapes::ShapeRef.new(shape: Region, location_name: "region"))
     Location.add_member(:available_port_speeds, Shapes::ShapeRef.new(shape: AvailablePortSpeeds, location_name: "availablePortSpeeds"))
     Location.add_member(:available_providers, Shapes::ShapeRef.new(shape: ProviderList, location_name: "availableProviders"))
+    Location.add_member(:available_mac_sec_port_speeds, Shapes::ShapeRef.new(shape: AvailableMacSecPortSpeeds, location_name: "availableMacSecPortSpeeds"))
     Location.struct_class = Types::Location
 
     LocationList.member = Shapes::ShapeRef.new(shape: Location)
@@ -692,6 +739,14 @@ module Aws::DirectConnect
     Locations.add_member(:locations, Shapes::ShapeRef.new(shape: LocationList, location_name: "locations"))
     Locations.struct_class = Types::Locations
 
+    MacSecKey.add_member(:secret_arn, Shapes::ShapeRef.new(shape: SecretARN, location_name: "secretARN"))
+    MacSecKey.add_member(:ckn, Shapes::ShapeRef.new(shape: Ckn, location_name: "ckn"))
+    MacSecKey.add_member(:state, Shapes::ShapeRef.new(shape: State, location_name: "state"))
+    MacSecKey.add_member(:start_on, Shapes::ShapeRef.new(shape: StartOnDate, location_name: "startOn"))
+    MacSecKey.struct_class = Types::MacSecKey
+
+    MacSecKeyList.member = Shapes::ShapeRef.new(shape: MacSecKey)
+
     NewBGPPeer.add_member(:asn, Shapes::ShapeRef.new(shape: ASN, location_name: "asn"))
     NewBGPPeer.add_member(:auth_key, Shapes::ShapeRef.new(shape: BGPAuthKey, location_name: "authKey"))
     NewBGPPeer.add_member(:address_family, Shapes::ShapeRef.new(shape: AddressFamily, location_name: "addressFamily"))
@@ -819,6 +874,11 @@ module Aws::DirectConnect
 
     UntagResourceResponse.struct_class = Types::UntagResourceResponse
 
+    UpdateConnectionRequest.add_member(:connection_id, Shapes::ShapeRef.new(shape: ConnectionId, required: true, location_name: "connectionId"))
+    UpdateConnectionRequest.add_member(:connection_name, Shapes::ShapeRef.new(shape: ConnectionName, location_name: "connectionName"))
+    UpdateConnectionRequest.add_member(:encryption_mode, Shapes::ShapeRef.new(shape: EncryptionMode, location_name: "encryptionMode"))
+    UpdateConnectionRequest.struct_class = Types::UpdateConnectionRequest
+
     UpdateDirectConnectGatewayAssociationRequest.add_member(:association_id, Shapes::ShapeRef.new(shape: DirectConnectGatewayAssociationId, location_name: "associationId"))
     UpdateDirectConnectGatewayAssociationRequest.add_member(:add_allowed_prefixes_to_direct_connect_gateway, Shapes::ShapeRef.new(shape: RouteFilterPrefixList, location_name: "addAllowedPrefixesToDirectConnectGateway"))
     UpdateDirectConnectGatewayAssociationRequest.add_member(:remove_allowed_prefixes_to_direct_connect_gateway, Shapes::ShapeRef.new(shape: RouteFilterPrefixList, location_name: "removeAllowedPrefixesToDirectConnectGateway"))
@@ -830,6 +890,7 @@ module Aws::DirectConnect
     UpdateLagRequest.add_member(:lag_id, Shapes::ShapeRef.new(shape: LagId, required: true, location_name: "lagId"))
     UpdateLagRequest.add_member(:lag_name, Shapes::ShapeRef.new(shape: LagName, location_name: "lagName"))
     UpdateLagRequest.add_member(:minimum_links, Shapes::ShapeRef.new(shape: Count, location_name: "minimumLinks"))
+    UpdateLagRequest.add_member(:encryption_mode, Shapes::ShapeRef.new(shape: EncryptionMode, location_name: "encryptionMode"))
     UpdateLagRequest.struct_class = Types::UpdateLagRequest
 
     UpdateVirtualInterfaceAttributesRequest.add_member(:virtual_interface_id, Shapes::ShapeRef.new(shape: VirtualInterfaceId, required: true, location_name: "virtualInterfaceId"))
@@ -995,6 +1056,16 @@ module Aws::DirectConnect
         o.errors << Shapes::ShapeRef.new(shape: DirectConnectClientException)
       end)
 
+      api.add_operation(:associate_mac_sec_key, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "AssociateMacSecKey"
+        o.http_method = "POST"
+        o.http_request_uri = "/"
+        o.input = Shapes::ShapeRef.new(shape: AssociateMacSecKeyRequest)
+        o.output = Shapes::ShapeRef.new(shape: AssociateMacSecKeyResponse)
+        o.errors << Shapes::ShapeRef.new(shape: DirectConnectServerException)
+        o.errors << Shapes::ShapeRef.new(shape: DirectConnectClientException)
+      end)
+
       api.add_operation(:associate_virtual_interface, Seahorse::Model::Operation.new.tap do |o|
         o.name = "AssociateVirtualInterface"
         o.http_method = "POST"
@@ -1410,6 +1481,16 @@ module Aws::DirectConnect
         o.errors << Shapes::ShapeRef.new(shape: DirectConnectClientException)
       end)
 
+      api.add_operation(:disassociate_mac_sec_key, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "DisassociateMacSecKey"
+        o.http_method = "POST"
+        o.http_request_uri = "/"
+        o.input = Shapes::ShapeRef.new(shape: DisassociateMacSecKeyRequest)
+        o.output = Shapes::ShapeRef.new(shape: DisassociateMacSecKeyResponse)
+        o.errors << Shapes::ShapeRef.new(shape: DirectConnectServerException)
+        o.errors << Shapes::ShapeRef.new(shape: DirectConnectClientException)
+      end)
+
       api.add_operation(:list_virtual_interface_test_history, Seahorse::Model::Operation.new.tap do |o|
         o.name = "ListVirtualInterfaceTestHistory"
         o.http_method = "POST"
@@ -1462,6 +1543,16 @@ module Aws::DirectConnect
         o.errors << Shapes::ShapeRef.new(shape: DirectConnectClientException)
       end)
 
+      api.add_operation(:update_connection, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "UpdateConnection"
+        o.http_method = "POST"
+        o.http_request_uri = "/"
+        o.input = Shapes::ShapeRef.new(shape: UpdateConnectionRequest)
+        o.output = Shapes::ShapeRef.new(shape: Connection)
+        o.errors << Shapes::ShapeRef.new(shape: DirectConnectServerException)
+        o.errors << Shapes::ShapeRef.new(shape: DirectConnectClientException)
+      end)
+
       api.add_operation(:update_direct_connect_gateway_association, Seahorse::Model::Operation.new.tap do |o|
         o.name = "UpdateDirectConnectGatewayAssociation"
         o.http_method = "POST"

data/lib/aws-sdk-directconnect/customizations.rb

@@ -2,7 +2,7 @@
 # WARNING ABOUT GENERATED CODE
 #
 # This file is generated. See the contributing for info on making contributions:
-# https://github.com/aws/aws-sdk-ruby/blob/master/CONTRIBUTING.md
+# https://github.com/aws/aws-sdk-ruby/blob/version-3/CONTRIBUTING.md
 #
 # WARNING ABOUT GENERATED CODE
 

data/lib/aws-sdk-directconnect/types.rb

@@ -387,6 +387,89 @@ module Aws::DirectConnect
       include Aws::Structure
     end
 
+    # @note When making an API call, you may pass AssociateMacSecKeyRequest
+    #   data as a hash:
+    #
+    #       {
+    #         connection_id: "ConnectionId", # required
+    #         secret_arn: "SecretARN",
+    #         ckn: "Ckn",
+    #         cak: "Cak",
+    #       }
+    #
+    # @!attribute [rw] connection_id
+    #   The ID of the dedicated connection (dxcon-xxxx), or the ID of the
+    #   LAG (dxlag-xxxx).
+    #
+    #   You can use DescribeConnections or DescribeLags to retrieve
+    #   connection ID.
+    #   @return [String]
+    #
+    # @!attribute [rw] secret_arn
+    #   The Amazon Resource Name (ARN) of the MAC Security (MACsec) secret
+    #   key to associate with the dedicated connection.
+    #
+    #   You can use DescribeConnections or DescribeLags to retrieve the MAC
+    #   Security (MACsec) secret key.
+    #
+    #   If you use this request parameter, you do not use the `ckn` and
+    #   `cak` request parameters.
+    #   @return [String]
+    #
+    # @!attribute [rw] ckn
+    #   The MAC Security (MACsec) CKN to associate with the dedicated
+    #   connection.
+    #
+    #   You can create the CKN/CAK pair using an industry standard tool.
+    #
+    #   The valid values are 64 hexadecimal characters (0-9, A-E).
+    #
+    #   If you use this request parameter, you must use the `cak` request
+    #   parameter and not use the `secretARN` request parameter.
+    #   @return [String]
+    #
+    # @!attribute [rw] cak
+    #   The MAC Security (MACsec) CAK to associate with the dedicated
+    #   connection.
+    #
+    #   You can create the CKN/CAK pair using an industry standard tool.
+    #
+    #   The valid values are 64 hexadecimal characters (0-9, A-E).
+    #
+    #   If you use this request parameter, you must use the `ckn` request
+    #   parameter and not use the `secretARN` request parameter.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/directconnect-2012-10-25/AssociateMacSecKeyRequest AWS API Documentation
+    #
+    class AssociateMacSecKeyRequest < Struct.new(
+      :connection_id,
+      :secret_arn,
+      :ckn,
+      :cak)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] connection_id
+    #   The ID of the dedicated connection (dxcon-xxxx), or the ID of the
+    #   LAG (dxlag-xxxx).
+    #   @return [String]
+    #
+    # @!attribute [rw] mac_sec_keys
+    #   The MAC Security (MACsec) security keys associated with the
+    #   dedicated connection.
+    #   @return [Array<Types::MacSecKey>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/directconnect-2012-10-25/AssociateMacSecKeyResponse AWS API Documentation
+    #
+    class AssociateMacSecKeyResponse < Struct.new(
+      :connection_id,
+      :mac_sec_keys)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @note When making an API call, you may pass AssociateVirtualInterfaceRequest
     #   data as a hash:
     #
@@ -884,6 +967,29 @@ module Aws::DirectConnect
     #   The name of the service provider associated with the connection.
     #   @return [String]
     #
+    # @!attribute [rw] mac_sec_capable
+    #   Indicates whether the connection supports MAC Security (MACsec).
+    #   @return [Boolean]
+    #
+    # @!attribute [rw] port_encryption_status
+    #   The MAC Security (MACsec) port link status of the connection.
+    #
+    #   The valid values are `Encryption Up`, which means that there is an
+    #   active Connection Key Name, or `Encryption Down`.
+    #   @return [String]
+    #
+    # @!attribute [rw] encryption_mode
+    #   The MAC Security (MACsec) connection encryption mode.
+    #
+    #   The valid values are `no_encrypt`, `should_encrypt`, and
+    #   `must_encrypt`.
+    #   @return [String]
+    #
+    # @!attribute [rw] mac_sec_keys
+    #   The MAC Security (MACsec) security keys associated with the
+    #   connection.
+    #   @return [Array<Types::MacSecKey>]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/directconnect-2012-10-25/Connection AWS API Documentation
     #
     class Connection < Struct.new(
@@ -903,7 +1009,11 @@ module Aws::DirectConnect
       :aws_device_v2,
       :has_logical_redundancy,
       :tags,
-      :provider_name)
+      :provider_name,
+      :mac_sec_capable,
+      :port_encryption_status,
+      :encryption_mode,
+      :mac_sec_keys)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -978,6 +1088,7 @@ module Aws::DirectConnect
     #           },
     #         ],
     #         provider_name: "ProviderName",
+    #         request_mac_sec: false,
     #       }
     #
     # @!attribute [rw] location
@@ -1005,6 +1116,19 @@ module Aws::DirectConnect
     #   connection.
     #   @return [String]
     #
+    # @!attribute [rw] request_mac_sec
+    #   Indicates whether you want the connection to support MAC Security
+    #   (MACsec).
+    #
+    #   MAC Security (MACsec) is only available on dedicated connections.
+    #   For information about MAC Security (MACsec) prerequisties, see
+    #   [MACsec prerequisties][1] in the *AWS Direct Connect User Guide*.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/directconnect/latest/UserGuide/direct-connect-mac-sec-getting-started.html#mac-sec-prerequisites
+    #   @return [Boolean]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/directconnect-2012-10-25/CreateConnectionRequest AWS API Documentation
     #
     class CreateConnectionRequest < Struct.new(
@@ -1013,7 +1137,8 @@ module Aws::DirectConnect
       :connection_name,
       :lag_id,
       :tags,
-      :provider_name)
+      :provider_name,
+      :request_mac_sec)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -1261,6 +1386,7 @@ module Aws::DirectConnect
     #           },
     #         ],
     #         provider_name: "ProviderName",
+    #         request_mac_sec: false,
     #       }
     #
     # @!attribute [rw] number_of_connections
@@ -1297,6 +1423,21 @@ module Aws::DirectConnect
     #   The name of the service provider associated with the LAG.
     #   @return [String]
     #
+    # @!attribute [rw] request_mac_sec
+    #   Indicates whether the connection will support MAC Security (MACsec).
+    #
+    #   <note markdown="1"> All connections in the LAG must be capable of supporting MAC
+    #   Security (MACsec). For information about MAC Security (MACsec)
+    #   prerequisties, see [MACsec prerequisties][1] in the *AWS Direct
+    #   Connect User Guide*.
+    #
+    #    </note>
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/directconnect/latest/UserGuide/direct-connect-mac-sec-getting-started.html#mac-sec-prerequisites
+    #   @return [Boolean]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/directconnect-2012-10-25/CreateLagRequest AWS API Documentation
     #
     class CreateLagRequest < Struct.new(
@@ -1307,7 +1448,8 @@ module Aws::DirectConnect
       :connection_id,
       :tags,
       :child_connection_tags,
-      :provider_name)
+      :provider_name,
+      :request_mac_sec)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -2583,6 +2725,58 @@ module Aws::DirectConnect
       include Aws::Structure
     end
 
+    # @note When making an API call, you may pass DisassociateMacSecKeyRequest
+    #   data as a hash:
+    #
+    #       {
+    #         connection_id: "ConnectionId", # required
+    #         secret_arn: "SecretARN", # required
+    #       }
+    #
+    # @!attribute [rw] connection_id
+    #   The ID of the dedicated connection (dxcon-xxxx), or the ID of the
+    #   LAG (dxlag-xxxx).
+    #
+    #   You can use DescribeConnections or DescribeLags to retrieve
+    #   connection ID.
+    #   @return [String]
+    #
+    # @!attribute [rw] secret_arn
+    #   The Amazon Resource Name (ARN) of the MAC Security (MACsec) secret
+    #   key.
+    #
+    #   You can use DescribeConnections to retrieve the ARN of the MAC
+    #   Security (MACsec) secret key.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/directconnect-2012-10-25/DisassociateMacSecKeyRequest AWS API Documentation
+    #
+    class DisassociateMacSecKeyRequest < Struct.new(
+      :connection_id,
+      :secret_arn)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] connection_id
+    #   The ID of the dedicated connection (dxcon-xxxx), or the ID of the
+    #   LAG (dxlag-xxxx).
+    #   @return [String]
+    #
+    # @!attribute [rw] mac_sec_keys
+    #   The MAC Security (MACsec) security keys no longer associated with
+    #   the dedicated connection.
+    #   @return [Array<Types::MacSecKey>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/directconnect-2012-10-25/DisassociateMacSecKeyResponse AWS API Documentation
+    #
+    class DisassociateMacSecKeyResponse < Struct.new(
+      :connection_id,
+      :mac_sec_keys)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # A tag key was specified more than once.
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/directconnect-2012-10-25/DuplicateTagKeysException AWS API Documentation
@@ -2793,6 +2987,21 @@ module Aws::DirectConnect
     #   The name of the service provider associated with the LAG.
     #   @return [String]
     #
+    # @!attribute [rw] mac_sec_capable
+    #   Indicates whether the LAG supports MAC Security (MACsec).
+    #   @return [Boolean]
+    #
+    # @!attribute [rw] encryption_mode
+    #   The LAG MAC Security (MACsec) encryption mode.
+    #
+    #   The valid values are `no_encrypt`, `should_encrypt`, and
+    #   `must_encrypt`.
+    #   @return [String]
+    #
+    # @!attribute [rw] mac_sec_keys
+    #   The MAC Security (MACsec) security keys associated with the LAG.
+    #   @return [Array<Types::MacSecKey>]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/directconnect-2012-10-25/Lag AWS API Documentation
     #
     class Lag < Struct.new(
@@ -2812,7 +3021,10 @@ module Aws::DirectConnect
       :jumbo_frame_capable,
       :has_logical_redundancy,
       :tags,
-      :provider_name)
+      :provider_name,
+      :mac_sec_capable,
+      :encryption_mode,
+      :mac_sec_keys)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -2946,6 +3158,10 @@ module Aws::DirectConnect
     #   The name of the service provider for the location.
     #   @return [Array<String>]
     #
+    # @!attribute [rw] available_mac_sec_port_speeds
+    #   The available MAC Security (MACsec) port speeds for the location.
+    #   @return [Array<String>]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/directconnect-2012-10-25/Location AWS API Documentation
     #
     class Location < Struct.new(
@@ -2953,7 +3169,8 @@ module Aws::DirectConnect
       :location_name,
       :region,
       :available_port_speeds,
-      :available_providers)
+      :available_providers,
+      :available_mac_sec_port_speeds)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -2970,6 +3187,51 @@ module Aws::DirectConnect
       include Aws::Structure
     end
 
+    # Information about the MAC Security (MACsec) secret key.
+    #
+    # @!attribute [rw] secret_arn
+    #   The Amazon Resource Name (ARN) of the MAC Security (MACsec) secret
+    #   key.
+    #   @return [String]
+    #
+    # @!attribute [rw] ckn
+    #   The Connection Key Name (CKN) for the MAC Security secret key.
+    #   @return [String]
+    #
+    # @!attribute [rw] state
+    #   The state of the MAC Security (MACsec) secret key.
+    #
+    #   The possible values are:
+    #
+    #   * `associating`\: The MAC Security (MACsec) secret key is being
+    #     validated and not yet associated with the connection or LAG.
+    #
+    #   * `associated`\: The MAC Security (MACsec) secret key is validated
+    #     and associated with the connection or LAG.
+    #
+    #   * `disassociating`\: The MAC Security (MACsec) secret key is being
+    #     disassociated from the connection or LAG
+    #
+    #   * `disassociated`\: The MAC Security (MACsec) secret key is no
+    #     longer associated with the connection or LAG.
+    #   @return [String]
+    #
+    # @!attribute [rw] start_on
+    #   The date that the MAC Security (MACsec) secret key takes effect. The
+    #   value is displayed in UTC format.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/directconnect-2012-10-25/MacSecKey AWS API Documentation
+    #
+    class MacSecKey < Struct.new(
+      :secret_arn,
+      :ckn,
+      :state,
+      :start_on)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # Information about a new BGP peer.
     #
     # @note When making an API call, you may pass NewBGPPeer
@@ -3757,6 +4019,42 @@ module Aws::DirectConnect
     #
     class UntagResourceResponse < Aws::EmptyStructure; end
 
+    # @note When making an API call, you may pass UpdateConnectionRequest
+    #   data as a hash:
+    #
+    #       {
+    #         connection_id: "ConnectionId", # required
+    #         connection_name: "ConnectionName",
+    #         encryption_mode: "EncryptionMode",
+    #       }
+    #
+    # @!attribute [rw] connection_id
+    #   The ID of the dedicated connection.
+    #
+    #   You can use DescribeConnections to retrieve the connection ID.
+    #   @return [String]
+    #
+    # @!attribute [rw] connection_name
+    #   The name of the connection.
+    #   @return [String]
+    #
+    # @!attribute [rw] encryption_mode
+    #   The connection MAC Security (MACsec) encryption mode.
+    #
+    #   The valid values are `no_encrypt`, `should_encrypt`, and
+    #   `must_encrypt`.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/directconnect-2012-10-25/UpdateConnectionRequest AWS API Documentation
+    #
+    class UpdateConnectionRequest < Struct.new(
+      :connection_id,
+      :connection_name,
+      :encryption_mode)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @note When making an API call, you may pass UpdateDirectConnectGatewayAssociationRequest
     #   data as a hash:
     #
@@ -3817,6 +4115,7 @@ module Aws::DirectConnect
     #         lag_id: "LagId", # required
     #         lag_name: "LagName",
     #         minimum_links: 1,
+    #         encryption_mode: "EncryptionMode",
     #       }
     #
     # @!attribute [rw] lag_id
@@ -3832,12 +4131,19 @@ module Aws::DirectConnect
     #   for the LAG itself to be operational.
     #   @return [Integer]
     #
+    # @!attribute [rw] encryption_mode
+    #   The LAG MAC Security (MACsec) encryption mode.
+    #
+    #   AWS applies the value to all connections which are part of the LAG.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/directconnect-2012-10-25/UpdateLagRequest AWS API Documentation
     #
     class UpdateLagRequest < Struct.new(
       :lag_id,
       :lag_name,
-      :minimum_links)
+      :minimum_links,
+      :encryption_mode)
       SENSITIVE = []
       include Aws::Structure
     end