aws-sdk-elasticache 1.81.0 → 1.83.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 7a3248b4a28fd0f6d813e45406cc65f094137dc22cb1f3ae19218211b14a8153
-  data.tar.gz: 1d6a9ff4e6bb0fd8e2b9b4c93bfd5c46a21a910e51b71c541fa3ae05e9053137
+  metadata.gz: 7a274cf9b5fc1780590760adc3e88911c6d38d7d518c22978fa3c4895cbed364
+  data.tar.gz: 8e99e8b801256bad515ab16d04a9dabc381abbac228062f14a6dd20b13b37670
 SHA512:
-  metadata.gz: '005383495c0cf2c1fc49ca0dd29c42e9ec1fdc008fbfa236be0b7433bbf8f667075fa722259afc6d1815255f7d89da7ddfc0c0a03d86e71f13cb6fb7ec6c8544'
-  data.tar.gz: 92ae3a7e5a7301191d69afe36397b8402dcada2081d5d2ae2b50f5faf57259354c375ed2654b50d0d91b3f84b3272993f808f3544aa26f51ef580df249231251
+  metadata.gz: ba8f186a974005a19271a1d42cb11ef1c628603211a015d29a316d5eb6346dfb59fee07906e8febd8050714ba99f65ff7287d1b1d27bc3817af205abf6f996e7
+  data.tar.gz: 744303915ecdcc83b5423d08780bd520292e4836e1df69d37be51e3f3f993d57aa8f0af6449cebd4ed54cd47de53ede0644ae8de97fbeff496e3fe2530aa7846

data/CHANGELOG.md

@@ -1,6 +1,16 @@
 Unreleased Changes
 ------------------
 
+1.83.0 (2022-12-28)
+------------------
+
+* Feature - This release allows you to modify the encryption in transit setting, for existing Redis clusters. You can now change the TLS configuration of your Redis clusters without the need to re-build or re-provision the clusters or impact application availability.
+
+1.82.0 (2022-11-16)
+------------------
+
+* Feature - for Redis now supports AWS Identity and Access Management authentication access to Redis clusters starting with redis-engine version 7.0
+
 1.81.0 (2022-11-07)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.81.0
+1.83.0

data/lib/aws-sdk-elasticache/client.rb

@@ -685,6 +685,8 @@ module Aws::ElastiCache
     #   resp.replication_group.pending_modified_values.log_delivery_configurations[0].destination_details.cloud_watch_logs_details.log_group #=> String
     #   resp.replication_group.pending_modified_values.log_delivery_configurations[0].destination_details.kinesis_firehose_details.delivery_stream #=> String
     #   resp.replication_group.pending_modified_values.log_delivery_configurations[0].log_format #=> String, one of "text", "json"
+    #   resp.replication_group.pending_modified_values.transit_encryption_enabled #=> Boolean
+    #   resp.replication_group.pending_modified_values.transit_encryption_mode #=> String, one of "preferred", "required"
     #   resp.replication_group.member_clusters #=> Array
     #   resp.replication_group.member_clusters[0] #=> String
     #   resp.replication_group.node_groups #=> Array
@@ -735,6 +737,7 @@ module Aws::ElastiCache
     #   resp.replication_group.auto_minor_version_upgrade #=> Boolean
     #   resp.replication_group.network_type #=> String, one of "ipv4", "ipv6", "dual_stack"
     #   resp.replication_group.ip_discovery #=> String, one of "ipv4", "ipv6"
+    #   resp.replication_group.transit_encryption_mode #=> String, one of "preferred", "required"
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/elasticache-2015-02-02/CompleteMigration AWS API Documentation
     #
@@ -1331,10 +1334,7 @@ module Aws::ElastiCache
     #   Specifies the destination, format and type of the logs.
     #
     # @option params [Boolean] :transit_encryption_enabled
-    #   A flag that enables in-transit encryption when set to true. You cannot
-    #   modify the value of TransitEncryptionEnabled after the cluster is
-    #   created. To enable in-transit encryption on a cluster you must set
-    #   `TransitEncryptionEnabled` to true when you create a cluster.
+    #   A flag that enables in-transit encryption when set to true.
     #
     #   Only available when creating a cache cluster in an Amazon VPC using
     #   Memcached version 1.6.12 or later.
@@ -1533,6 +1533,8 @@ module Aws::ElastiCache
     #   resp.cache_cluster.pending_modified_values.log_delivery_configurations[0].destination_details.cloud_watch_logs_details.log_group #=> String
     #   resp.cache_cluster.pending_modified_values.log_delivery_configurations[0].destination_details.kinesis_firehose_details.delivery_stream #=> String
     #   resp.cache_cluster.pending_modified_values.log_delivery_configurations[0].log_format #=> String, one of "text", "json"
+    #   resp.cache_cluster.pending_modified_values.transit_encryption_enabled #=> Boolean
+    #   resp.cache_cluster.pending_modified_values.transit_encryption_mode #=> String, one of "preferred", "required"
     #   resp.cache_cluster.notification_configuration.topic_arn #=> String
     #   resp.cache_cluster.notification_configuration.topic_status #=> String
     #   resp.cache_cluster.cache_security_groups #=> Array
@@ -1576,6 +1578,7 @@ module Aws::ElastiCache
     #   resp.cache_cluster.log_delivery_configurations[0].message #=> String
     #   resp.cache_cluster.network_type #=> String, one of "ipv4", "ipv6", "dual_stack"
     #   resp.cache_cluster.ip_discovery #=> String, one of "ipv4", "ipv6"
+    #   resp.cache_cluster.transit_encryption_mode #=> String, one of "preferred", "required"
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/elasticache-2015-02-02/CreateCacheCluster AWS API Documentation
     #
@@ -2217,7 +2220,7 @@ module Aws::ElastiCache
     #
     # @option params [String] :engine
     #   The name of the cache engine to be used for the clusters in this
-    #   replication group. Must be Redis.
+    #   replication group. The value must be set to `Redis`.
     #
     # @option params [String] :engine_version
     #   The version number of the cache engine to be used for the clusters in
@@ -2391,11 +2394,6 @@ module Aws::ElastiCache
     # @option params [Boolean] :transit_encryption_enabled
     #   A flag that enables in-transit encryption when set to `true`.
     #
-    #   You cannot modify the value of `TransitEncryptionEnabled` after the
-    #   cluster is created. To enable in-transit encryption on a cluster you
-    #   must set `TransitEncryptionEnabled` to `true` when you create a
-    #   cluster.
-    #
     #   This parameter is valid only if the `Engine` parameter is `redis`, the
     #   `EngineVersion` parameter is `3.2.6`, `4.x` or later, and the cluster
     #   is being created in an Amazon VPC.
@@ -2461,6 +2459,21 @@ module Aws::ElastiCache
     #
     #   [1]: https://aws.amazon.com/ec2/nitro/
     #
+    # @option params [String] :transit_encryption_mode
+    #   A setting that allows you to migrate your clients to use in-transit
+    #   encryption, with no downtime.
+    #
+    #   When setting `TransitEncryptionEnabled` to `true`, you can set your
+    #   `TransitEncryptionMode` to `preferred` in the same request, to allow
+    #   both encrypted and unencrypted connections at the same time. Once you
+    #   migrate all your Redis clients to use encrypted connections you can
+    #   modify the value to `required` to allow encrypted connections only.
+    #
+    #   Setting `TransitEncryptionMode` to `required` is a two-step process
+    #   that requires you to first set the `TransitEncryptionMode` to
+    #   `preferred` first, after that you can set `TransitEncryptionMode` to
+    #   `required`.
+    #
     # @return [Types::CreateReplicationGroupResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::CreateReplicationGroupResult#replication_group #replication_group} => Types::ReplicationGroup
@@ -2625,6 +2638,7 @@ module Aws::ElastiCache
     #     data_tiering_enabled: false,
     #     network_type: "ipv4", # accepts ipv4, ipv6, dual_stack
     #     ip_discovery: "ipv4", # accepts ipv4, ipv6
+    #     transit_encryption_mode: "preferred", # accepts preferred, required
     #   })
     #
     # @example Response structure
@@ -2648,6 +2662,8 @@ module Aws::ElastiCache
     #   resp.replication_group.pending_modified_values.log_delivery_configurations[0].destination_details.cloud_watch_logs_details.log_group #=> String
     #   resp.replication_group.pending_modified_values.log_delivery_configurations[0].destination_details.kinesis_firehose_details.delivery_stream #=> String
     #   resp.replication_group.pending_modified_values.log_delivery_configurations[0].log_format #=> String, one of "text", "json"
+    #   resp.replication_group.pending_modified_values.transit_encryption_enabled #=> Boolean
+    #   resp.replication_group.pending_modified_values.transit_encryption_mode #=> String, one of "preferred", "required"
     #   resp.replication_group.member_clusters #=> Array
     #   resp.replication_group.member_clusters[0] #=> String
     #   resp.replication_group.node_groups #=> Array
@@ -2698,6 +2714,7 @@ module Aws::ElastiCache
     #   resp.replication_group.auto_minor_version_upgrade #=> Boolean
     #   resp.replication_group.network_type #=> String, one of "ipv4", "ipv6", "dual_stack"
     #   resp.replication_group.ip_discovery #=> String, one of "ipv4", "ipv6"
+    #   resp.replication_group.transit_encryption_mode #=> String, one of "preferred", "required"
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/elasticache-2015-02-02/CreateReplicationGroup AWS API Documentation
     #
@@ -2964,6 +2981,9 @@ module Aws::ElastiCache
     #   pair. A tag key must be accompanied by a tag value, although null is
     #   accepted.
     #
+    # @option params [Types::AuthenticationMode] :authentication_mode
+    #   Specifies how to authenticate the user.
+    #
     # @return [Types::User] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::User#user_id #user_id} => String
@@ -2991,6 +3011,10 @@ module Aws::ElastiCache
     #         value: "String",
     #       },
     #     ],
+    #     authentication_mode: {
+    #       type: "password", # accepts password, no-password-required, iam
+    #       passwords: ["String"],
+    #     },
     #   })
     #
     # @example Response structure
@@ -3003,7 +3027,7 @@ module Aws::ElastiCache
     #   resp.access_string #=> String
     #   resp.user_group_ids #=> Array
     #   resp.user_group_ids[0] #=> String
-    #   resp.authentication.type #=> String, one of "password", "no-password"
+    #   resp.authentication.type #=> String, one of "password", "no-password", "iam"
     #   resp.authentication.password_count #=> Integer
     #   resp.arn #=> String
     #
@@ -3244,6 +3268,8 @@ module Aws::ElastiCache
     #   resp.replication_group.pending_modified_values.log_delivery_configurations[0].destination_details.cloud_watch_logs_details.log_group #=> String
     #   resp.replication_group.pending_modified_values.log_delivery_configurations[0].destination_details.kinesis_firehose_details.delivery_stream #=> String
     #   resp.replication_group.pending_modified_values.log_delivery_configurations[0].log_format #=> String, one of "text", "json"
+    #   resp.replication_group.pending_modified_values.transit_encryption_enabled #=> Boolean
+    #   resp.replication_group.pending_modified_values.transit_encryption_mode #=> String, one of "preferred", "required"
     #   resp.replication_group.member_clusters #=> Array
     #   resp.replication_group.member_clusters[0] #=> String
     #   resp.replication_group.node_groups #=> Array
@@ -3294,6 +3320,7 @@ module Aws::ElastiCache
     #   resp.replication_group.auto_minor_version_upgrade #=> Boolean
     #   resp.replication_group.network_type #=> String, one of "ipv4", "ipv6", "dual_stack"
     #   resp.replication_group.ip_discovery #=> String, one of "ipv4", "ipv6"
+    #   resp.replication_group.transit_encryption_mode #=> String, one of "preferred", "required"
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/elasticache-2015-02-02/DecreaseReplicaCount AWS API Documentation
     #
@@ -3414,6 +3441,8 @@ module Aws::ElastiCache
     #   resp.cache_cluster.pending_modified_values.log_delivery_configurations[0].destination_details.cloud_watch_logs_details.log_group #=> String
     #   resp.cache_cluster.pending_modified_values.log_delivery_configurations[0].destination_details.kinesis_firehose_details.delivery_stream #=> String
     #   resp.cache_cluster.pending_modified_values.log_delivery_configurations[0].log_format #=> String, one of "text", "json"
+    #   resp.cache_cluster.pending_modified_values.transit_encryption_enabled #=> Boolean
+    #   resp.cache_cluster.pending_modified_values.transit_encryption_mode #=> String, one of "preferred", "required"
     #   resp.cache_cluster.notification_configuration.topic_arn #=> String
     #   resp.cache_cluster.notification_configuration.topic_status #=> String
     #   resp.cache_cluster.cache_security_groups #=> Array
@@ -3457,6 +3486,7 @@ module Aws::ElastiCache
     #   resp.cache_cluster.log_delivery_configurations[0].message #=> String
     #   resp.cache_cluster.network_type #=> String, one of "ipv4", "ipv6", "dual_stack"
     #   resp.cache_cluster.ip_discovery #=> String, one of "ipv4", "ipv6"
+    #   resp.cache_cluster.transit_encryption_mode #=> String, one of "preferred", "required"
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/elasticache-2015-02-02/DeleteCacheCluster AWS API Documentation
     #
@@ -3738,6 +3768,8 @@ module Aws::ElastiCache
     #   resp.replication_group.pending_modified_values.log_delivery_configurations[0].destination_details.cloud_watch_logs_details.log_group #=> String
     #   resp.replication_group.pending_modified_values.log_delivery_configurations[0].destination_details.kinesis_firehose_details.delivery_stream #=> String
     #   resp.replication_group.pending_modified_values.log_delivery_configurations[0].log_format #=> String, one of "text", "json"
+    #   resp.replication_group.pending_modified_values.transit_encryption_enabled #=> Boolean
+    #   resp.replication_group.pending_modified_values.transit_encryption_mode #=> String, one of "preferred", "required"
     #   resp.replication_group.member_clusters #=> Array
     #   resp.replication_group.member_clusters[0] #=> String
     #   resp.replication_group.node_groups #=> Array
@@ -3788,6 +3820,7 @@ module Aws::ElastiCache
     #   resp.replication_group.auto_minor_version_upgrade #=> Boolean
     #   resp.replication_group.network_type #=> String, one of "ipv4", "ipv6", "dual_stack"
     #   resp.replication_group.ip_discovery #=> String, one of "ipv4", "ipv6"
+    #   resp.replication_group.transit_encryption_mode #=> String, one of "preferred", "required"
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/elasticache-2015-02-02/DeleteReplicationGroup AWS API Documentation
     #
@@ -3955,7 +3988,7 @@ module Aws::ElastiCache
     #   resp.access_string #=> String
     #   resp.user_group_ids #=> Array
     #   resp.user_group_ids[0] #=> String
-    #   resp.authentication.type #=> String, one of "password", "no-password"
+    #   resp.authentication.type #=> String, one of "password", "no-password", "iam"
     #   resp.authentication.password_count #=> Integer
     #   resp.arn #=> String
     #
@@ -4233,6 +4266,8 @@ module Aws::ElastiCache
     #   resp.cache_clusters[0].pending_modified_values.log_delivery_configurations[0].destination_details.cloud_watch_logs_details.log_group #=> String
     #   resp.cache_clusters[0].pending_modified_values.log_delivery_configurations[0].destination_details.kinesis_firehose_details.delivery_stream #=> String
     #   resp.cache_clusters[0].pending_modified_values.log_delivery_configurations[0].log_format #=> String, one of "text", "json"
+    #   resp.cache_clusters[0].pending_modified_values.transit_encryption_enabled #=> Boolean
+    #   resp.cache_clusters[0].pending_modified_values.transit_encryption_mode #=> String, one of "preferred", "required"
     #   resp.cache_clusters[0].notification_configuration.topic_arn #=> String
     #   resp.cache_clusters[0].notification_configuration.topic_status #=> String
     #   resp.cache_clusters[0].cache_security_groups #=> Array
@@ -4276,6 +4311,7 @@ module Aws::ElastiCache
     #   resp.cache_clusters[0].log_delivery_configurations[0].message #=> String
     #   resp.cache_clusters[0].network_type #=> String, one of "ipv4", "ipv6", "dual_stack"
     #   resp.cache_clusters[0].ip_discovery #=> String, one of "ipv4", "ipv6"
+    #   resp.cache_clusters[0].transit_encryption_mode #=> String, one of "preferred", "required"
     #
     #
     # The following waiters are defined for this operation (see {Client#wait_until} for detailed usage):
@@ -4308,7 +4344,7 @@ module Aws::ElastiCache
     #
     #   Valid values are: `memcached1.4` \| `memcached1.5` \| `memcached1.6`
     #   \| `redis2.6` \| `redis2.8` \| `redis3.2` \| `redis4.0` \| `redis5.0`
-    #   \| `redis6.x` \| `redis6.2`
+    #   \| `redis6.x` \| `redis6.2` \| `redis7`
     #
     #   Constraints:
     #
@@ -5295,7 +5331,7 @@ module Aws::ElastiCache
     #
     #   Valid values are: `memcached1.4` \| `memcached1.5` \| `memcached1.6`
     #   \| `redis2.6` \| `redis2.8` \| `redis3.2` \| `redis4.0` \| `redis5.0`
-    #   \| `redis6.x` \| `redis6.2`
+    #   \| `redis6.x` \| `redis6.2` \| `redis7`
     #
     # @option params [Integer] :max_records
     #   The maximum number of records to include in the response. If more
@@ -6362,6 +6398,8 @@ module Aws::ElastiCache
     #   resp.replication_groups[0].pending_modified_values.log_delivery_configurations[0].destination_details.cloud_watch_logs_details.log_group #=> String
     #   resp.replication_groups[0].pending_modified_values.log_delivery_configurations[0].destination_details.kinesis_firehose_details.delivery_stream #=> String
     #   resp.replication_groups[0].pending_modified_values.log_delivery_configurations[0].log_format #=> String, one of "text", "json"
+    #   resp.replication_groups[0].pending_modified_values.transit_encryption_enabled #=> Boolean
+    #   resp.replication_groups[0].pending_modified_values.transit_encryption_mode #=> String, one of "preferred", "required"
     #   resp.replication_groups[0].member_clusters #=> Array
     #   resp.replication_groups[0].member_clusters[0] #=> String
     #   resp.replication_groups[0].node_groups #=> Array
@@ -6412,6 +6450,7 @@ module Aws::ElastiCache
     #   resp.replication_groups[0].auto_minor_version_upgrade #=> Boolean
     #   resp.replication_groups[0].network_type #=> String, one of "ipv4", "ipv6", "dual_stack"
     #   resp.replication_groups[0].ip_discovery #=> String, one of "ipv4", "ipv6"
+    #   resp.replication_groups[0].transit_encryption_mode #=> String, one of "preferred", "required"
     #
     #
     # The following waiters are defined for this operation (see {Client#wait_until} for detailed usage):
@@ -7612,7 +7651,7 @@ module Aws::ElastiCache
     #   resp.users[0].access_string #=> String
     #   resp.users[0].user_group_ids #=> Array
     #   resp.users[0].user_group_ids[0] #=> String
-    #   resp.users[0].authentication.type #=> String, one of "password", "no-password"
+    #   resp.users[0].authentication.type #=> String, one of "password", "no-password", "iam"
     #   resp.users[0].authentication.password_count #=> Integer
     #   resp.users[0].arn #=> String
     #   resp.marker #=> String
@@ -7884,6 +7923,8 @@ module Aws::ElastiCache
     #   resp.replication_group.pending_modified_values.log_delivery_configurations[0].destination_details.cloud_watch_logs_details.log_group #=> String
     #   resp.replication_group.pending_modified_values.log_delivery_configurations[0].destination_details.kinesis_firehose_details.delivery_stream #=> String
     #   resp.replication_group.pending_modified_values.log_delivery_configurations[0].log_format #=> String, one of "text", "json"
+    #   resp.replication_group.pending_modified_values.transit_encryption_enabled #=> Boolean
+    #   resp.replication_group.pending_modified_values.transit_encryption_mode #=> String, one of "preferred", "required"
     #   resp.replication_group.member_clusters #=> Array
     #   resp.replication_group.member_clusters[0] #=> String
     #   resp.replication_group.node_groups #=> Array
@@ -7934,6 +7975,7 @@ module Aws::ElastiCache
     #   resp.replication_group.auto_minor_version_upgrade #=> Boolean
     #   resp.replication_group.network_type #=> String, one of "ipv4", "ipv6", "dual_stack"
     #   resp.replication_group.ip_discovery #=> String, one of "ipv4", "ipv6"
+    #   resp.replication_group.transit_encryption_mode #=> String, one of "preferred", "required"
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/elasticache-2015-02-02/IncreaseReplicaCount AWS API Documentation
     #
@@ -8546,6 +8588,8 @@ module Aws::ElastiCache
     #   resp.cache_cluster.pending_modified_values.log_delivery_configurations[0].destination_details.cloud_watch_logs_details.log_group #=> String
     #   resp.cache_cluster.pending_modified_values.log_delivery_configurations[0].destination_details.kinesis_firehose_details.delivery_stream #=> String
     #   resp.cache_cluster.pending_modified_values.log_delivery_configurations[0].log_format #=> String, one of "text", "json"
+    #   resp.cache_cluster.pending_modified_values.transit_encryption_enabled #=> Boolean
+    #   resp.cache_cluster.pending_modified_values.transit_encryption_mode #=> String, one of "preferred", "required"
     #   resp.cache_cluster.notification_configuration.topic_arn #=> String
     #   resp.cache_cluster.notification_configuration.topic_status #=> String
     #   resp.cache_cluster.cache_security_groups #=> Array
@@ -8589,6 +8633,7 @@ module Aws::ElastiCache
     #   resp.cache_cluster.log_delivery_configurations[0].message #=> String
     #   resp.cache_cluster.network_type #=> String, one of "ipv4", "ipv6", "dual_stack"
     #   resp.cache_cluster.ip_discovery #=> String, one of "ipv4", "ipv6"
+    #   resp.cache_cluster.transit_encryption_mode #=> String, one of "preferred", "required"
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/elasticache-2015-02-02/ModifyCacheCluster AWS API Documentation
     #
@@ -9075,6 +9120,27 @@ module Aws::ElastiCache
     #
     #   [1]: https://aws.amazon.com/ec2/nitro/
     #
+    # @option params [Boolean] :transit_encryption_enabled
+    #   A flag that enables in-transit encryption when set to true. If you are
+    #   enabling in-transit encryption for an existing cluster, you must also
+    #   set `TransitEncryptionMode` to `preferred`.
+    #
+    # @option params [String] :transit_encryption_mode
+    #   A setting that allows you to migrate your clients to use in-transit
+    #   encryption, with no downtime.
+    #
+    #   You must set `TransitEncryptionEnabled` to `true`, for your existing
+    #   cluster, and set `TransitEncryptionMode` to `preferred` in the same
+    #   request to allow both encrypted and unencrypted connections at the
+    #   same time. Once you migrate all your Redis clients to use encrypted
+    #   connections you can set the value to `required` to allow encrypted
+    #   connections only.
+    #
+    #   Setting `TransitEncryptionMode` to `required` is a two-step process
+    #   that requires you to first set the `TransitEncryptionMode` to
+    #   `preferred` first, after that you can set `TransitEncryptionMode` to
+    #   `required`.
+    #
     # @return [Types::ModifyReplicationGroupResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::ModifyReplicationGroupResult#replication_group #replication_group} => Types::ReplicationGroup
@@ -9194,6 +9260,8 @@ module Aws::ElastiCache
     #       },
     #     ],
     #     ip_discovery: "ipv4", # accepts ipv4, ipv6
+    #     transit_encryption_enabled: false,
+    #     transit_encryption_mode: "preferred", # accepts preferred, required
     #   })
     #
     # @example Response structure
@@ -9217,6 +9285,8 @@ module Aws::ElastiCache
     #   resp.replication_group.pending_modified_values.log_delivery_configurations[0].destination_details.cloud_watch_logs_details.log_group #=> String
     #   resp.replication_group.pending_modified_values.log_delivery_configurations[0].destination_details.kinesis_firehose_details.delivery_stream #=> String
     #   resp.replication_group.pending_modified_values.log_delivery_configurations[0].log_format #=> String, one of "text", "json"
+    #   resp.replication_group.pending_modified_values.transit_encryption_enabled #=> Boolean
+    #   resp.replication_group.pending_modified_values.transit_encryption_mode #=> String, one of "preferred", "required"
     #   resp.replication_group.member_clusters #=> Array
     #   resp.replication_group.member_clusters[0] #=> String
     #   resp.replication_group.node_groups #=> Array
@@ -9267,6 +9337,7 @@ module Aws::ElastiCache
     #   resp.replication_group.auto_minor_version_upgrade #=> Boolean
     #   resp.replication_group.network_type #=> String, one of "ipv4", "ipv6", "dual_stack"
     #   resp.replication_group.ip_discovery #=> String, one of "ipv4", "ipv6"
+    #   resp.replication_group.transit_encryption_mode #=> String, one of "preferred", "required"
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/elasticache-2015-02-02/ModifyReplicationGroup AWS API Documentation
     #
@@ -9364,6 +9435,8 @@ module Aws::ElastiCache
     #   resp.replication_group.pending_modified_values.log_delivery_configurations[0].destination_details.cloud_watch_logs_details.log_group #=> String
     #   resp.replication_group.pending_modified_values.log_delivery_configurations[0].destination_details.kinesis_firehose_details.delivery_stream #=> String
     #   resp.replication_group.pending_modified_values.log_delivery_configurations[0].log_format #=> String, one of "text", "json"
+    #   resp.replication_group.pending_modified_values.transit_encryption_enabled #=> Boolean
+    #   resp.replication_group.pending_modified_values.transit_encryption_mode #=> String, one of "preferred", "required"
     #   resp.replication_group.member_clusters #=> Array
     #   resp.replication_group.member_clusters[0] #=> String
     #   resp.replication_group.node_groups #=> Array
@@ -9414,6 +9487,7 @@ module Aws::ElastiCache
     #   resp.replication_group.auto_minor_version_upgrade #=> Boolean
     #   resp.replication_group.network_type #=> String, one of "ipv4", "ipv6", "dual_stack"
     #   resp.replication_group.ip_discovery #=> String, one of "ipv4", "ipv6"
+    #   resp.replication_group.transit_encryption_mode #=> String, one of "preferred", "required"
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/elasticache-2015-02-02/ModifyReplicationGroupShardConfiguration AWS API Documentation
     #
@@ -9441,6 +9515,9 @@ module Aws::ElastiCache
     # @option params [Boolean] :no_password_required
     #   Indicates no password is required for the user.
     #
+    # @option params [Types::AuthenticationMode] :authentication_mode
+    #   Specifies how to authenticate the user.
+    #
     # @return [Types::User] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::User#user_id #user_id} => String
@@ -9461,6 +9538,10 @@ module Aws::ElastiCache
     #     append_access_string: "AccessString",
     #     passwords: ["String"],
     #     no_password_required: false,
+    #     authentication_mode: {
+    #       type: "password", # accepts password, no-password-required, iam
+    #       passwords: ["String"],
+    #     },
     #   })
     #
     # @example Response structure
@@ -9473,7 +9554,7 @@ module Aws::ElastiCache
     #   resp.access_string #=> String
     #   resp.user_group_ids #=> Array
     #   resp.user_group_ids[0] #=> String
-    #   resp.authentication.type #=> String, one of "password", "no-password"
+    #   resp.authentication.type #=> String, one of "password", "no-password", "iam"
     #   resp.authentication.password_count #=> Integer
     #   resp.arn #=> String
     #
@@ -9798,6 +9879,8 @@ module Aws::ElastiCache
     #   resp.cache_cluster.pending_modified_values.log_delivery_configurations[0].destination_details.cloud_watch_logs_details.log_group #=> String
     #   resp.cache_cluster.pending_modified_values.log_delivery_configurations[0].destination_details.kinesis_firehose_details.delivery_stream #=> String
     #   resp.cache_cluster.pending_modified_values.log_delivery_configurations[0].log_format #=> String, one of "text", "json"
+    #   resp.cache_cluster.pending_modified_values.transit_encryption_enabled #=> Boolean
+    #   resp.cache_cluster.pending_modified_values.transit_encryption_mode #=> String, one of "preferred", "required"
     #   resp.cache_cluster.notification_configuration.topic_arn #=> String
     #   resp.cache_cluster.notification_configuration.topic_status #=> String
     #   resp.cache_cluster.cache_security_groups #=> Array
@@ -9841,6 +9924,7 @@ module Aws::ElastiCache
     #   resp.cache_cluster.log_delivery_configurations[0].message #=> String
     #   resp.cache_cluster.network_type #=> String, one of "ipv4", "ipv6", "dual_stack"
     #   resp.cache_cluster.ip_discovery #=> String, one of "ipv4", "ipv6"
+    #   resp.cache_cluster.transit_encryption_mode #=> String, one of "preferred", "required"
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/elasticache-2015-02-02/RebootCacheCluster AWS API Documentation
     #
@@ -10118,6 +10202,8 @@ module Aws::ElastiCache
     #   resp.replication_group.pending_modified_values.log_delivery_configurations[0].destination_details.cloud_watch_logs_details.log_group #=> String
     #   resp.replication_group.pending_modified_values.log_delivery_configurations[0].destination_details.kinesis_firehose_details.delivery_stream #=> String
     #   resp.replication_group.pending_modified_values.log_delivery_configurations[0].log_format #=> String, one of "text", "json"
+    #   resp.replication_group.pending_modified_values.transit_encryption_enabled #=> Boolean
+    #   resp.replication_group.pending_modified_values.transit_encryption_mode #=> String, one of "preferred", "required"
     #   resp.replication_group.member_clusters #=> Array
     #   resp.replication_group.member_clusters[0] #=> String
     #   resp.replication_group.node_groups #=> Array
@@ -10168,6 +10254,7 @@ module Aws::ElastiCache
     #   resp.replication_group.auto_minor_version_upgrade #=> Boolean
     #   resp.replication_group.network_type #=> String, one of "ipv4", "ipv6", "dual_stack"
     #   resp.replication_group.ip_discovery #=> String, one of "ipv4", "ipv6"
+    #   resp.replication_group.transit_encryption_mode #=> String, one of "preferred", "required"
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/elasticache-2015-02-02/StartMigration AWS API Documentation
     #
@@ -10279,6 +10366,8 @@ module Aws::ElastiCache
     #   resp.replication_group.pending_modified_values.log_delivery_configurations[0].destination_details.cloud_watch_logs_details.log_group #=> String
     #   resp.replication_group.pending_modified_values.log_delivery_configurations[0].destination_details.kinesis_firehose_details.delivery_stream #=> String
     #   resp.replication_group.pending_modified_values.log_delivery_configurations[0].log_format #=> String, one of "text", "json"
+    #   resp.replication_group.pending_modified_values.transit_encryption_enabled #=> Boolean
+    #   resp.replication_group.pending_modified_values.transit_encryption_mode #=> String, one of "preferred", "required"
     #   resp.replication_group.member_clusters #=> Array
     #   resp.replication_group.member_clusters[0] #=> String
     #   resp.replication_group.node_groups #=> Array
@@ -10329,6 +10418,7 @@ module Aws::ElastiCache
     #   resp.replication_group.auto_minor_version_upgrade #=> Boolean
     #   resp.replication_group.network_type #=> String, one of "ipv4", "ipv6", "dual_stack"
     #   resp.replication_group.ip_discovery #=> String, one of "ipv4", "ipv6"
+    #   resp.replication_group.transit_encryption_mode #=> String, one of "preferred", "required"
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/elasticache-2015-02-02/TestFailover AWS API Documentation
     #
@@ -10352,7 +10442,7 @@ module Aws::ElastiCache
         params: params,
         config: config)
       context[:gem_name] = 'aws-sdk-elasticache'
-      context[:gem_version] = '1.81.0'
+      context[:gem_version] = '1.83.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-elasticache/client_api.rb

@@ -22,6 +22,7 @@ module Aws::ElastiCache
     AuthTokenUpdateStatus = Shapes::StringShape.new(name: 'AuthTokenUpdateStatus')
     AuthTokenUpdateStrategyType = Shapes::StringShape.new(name: 'AuthTokenUpdateStrategyType')
     Authentication = Shapes::StructureShape.new(name: 'Authentication')
+    AuthenticationMode = Shapes::StructureShape.new(name: 'AuthenticationMode')
     AuthenticationType = Shapes::StringShape.new(name: 'AuthenticationType')
     AuthorizationAlreadyExistsFault = Shapes::StructureShape.new(name: 'AuthorizationAlreadyExistsFault')
     AuthorizationNotFoundFault = Shapes::StructureShape.new(name: 'AuthorizationNotFoundFault')
@@ -183,6 +184,7 @@ module Aws::ElastiCache
     IncreaseNodeGroupsInGlobalReplicationGroupResult = Shapes::StructureShape.new(name: 'IncreaseNodeGroupsInGlobalReplicationGroupResult')
     IncreaseReplicaCountMessage = Shapes::StructureShape.new(name: 'IncreaseReplicaCountMessage')
     IncreaseReplicaCountResult = Shapes::StructureShape.new(name: 'IncreaseReplicaCountResult')
+    InputAuthenticationType = Shapes::StringShape.new(name: 'InputAuthenticationType')
     InsufficientCacheClusterCapacityFault = Shapes::StructureShape.new(name: 'InsufficientCacheClusterCapacityFault')
     Integer = Shapes::IntegerShape.new(name: 'Integer')
     IntegerOptional = Shapes::IntegerShape.new(name: 'IntegerOptional')
@@ -346,6 +348,7 @@ module Aws::ElastiCache
     TestFailoverNotAvailableFault = Shapes::StructureShape.new(name: 'TestFailoverNotAvailableFault')
     TestFailoverResult = Shapes::StructureShape.new(name: 'TestFailoverResult')
     TimeRangeFilter = Shapes::StructureShape.new(name: 'TimeRangeFilter')
+    TransitEncryptionMode = Shapes::StringShape.new(name: 'TransitEncryptionMode')
     UGReplicationGroupIdList = Shapes::ListShape.new(name: 'UGReplicationGroupIdList')
     UnprocessedUpdateAction = Shapes::StructureShape.new(name: 'UnprocessedUpdateAction')
     UnprocessedUpdateActionList = Shapes::ListShape.new(name: 'UnprocessedUpdateActionList')
@@ -389,6 +392,10 @@ module Aws::ElastiCache
     Authentication.add_member(:password_count, Shapes::ShapeRef.new(shape: IntegerOptional, location_name: "PasswordCount"))
     Authentication.struct_class = Types::Authentication
 
+    AuthenticationMode.add_member(:type, Shapes::ShapeRef.new(shape: InputAuthenticationType, location_name: "Type"))
+    AuthenticationMode.add_member(:passwords, Shapes::ShapeRef.new(shape: PasswordListInput, location_name: "Passwords"))
+    AuthenticationMode.struct_class = Types::AuthenticationMode
+
     AuthorizationAlreadyExistsFault.struct_class = Types::AuthorizationAlreadyExistsFault
 
     AuthorizationNotFoundFault.struct_class = Types::AuthorizationNotFoundFault
@@ -448,6 +455,7 @@ module Aws::ElastiCache
     CacheCluster.add_member(:log_delivery_configurations, Shapes::ShapeRef.new(shape: LogDeliveryConfigurationList, location_name: "LogDeliveryConfigurations"))
     CacheCluster.add_member(:network_type, Shapes::ShapeRef.new(shape: NetworkType, location_name: "NetworkType"))
     CacheCluster.add_member(:ip_discovery, Shapes::ShapeRef.new(shape: IpDiscovery, location_name: "IpDiscovery"))
+    CacheCluster.add_member(:transit_encryption_mode, Shapes::ShapeRef.new(shape: TransitEncryptionMode, location_name: "TransitEncryptionMode"))
     CacheCluster.struct_class = Types::CacheCluster
 
     CacheClusterAlreadyExistsFault.struct_class = Types::CacheClusterAlreadyExistsFault
@@ -738,6 +746,7 @@ module Aws::ElastiCache
     CreateReplicationGroupMessage.add_member(:data_tiering_enabled, Shapes::ShapeRef.new(shape: BooleanOptional, location_name: "DataTieringEnabled"))
     CreateReplicationGroupMessage.add_member(:network_type, Shapes::ShapeRef.new(shape: NetworkType, location_name: "NetworkType"))
     CreateReplicationGroupMessage.add_member(:ip_discovery, Shapes::ShapeRef.new(shape: IpDiscovery, location_name: "IpDiscovery"))
+    CreateReplicationGroupMessage.add_member(:transit_encryption_mode, Shapes::ShapeRef.new(shape: TransitEncryptionMode, location_name: "TransitEncryptionMode"))
     CreateReplicationGroupMessage.struct_class = Types::CreateReplicationGroupMessage
 
     CreateReplicationGroupResult.add_member(:replication_group, Shapes::ShapeRef.new(shape: ReplicationGroup, location_name: "ReplicationGroup"))
@@ -766,6 +775,7 @@ module Aws::ElastiCache
     CreateUserMessage.add_member(:access_string, Shapes::ShapeRef.new(shape: AccessString, required: true, location_name: "AccessString"))
     CreateUserMessage.add_member(:no_password_required, Shapes::ShapeRef.new(shape: BooleanOptional, location_name: "NoPasswordRequired"))
     CreateUserMessage.add_member(:tags, Shapes::ShapeRef.new(shape: TagList, location_name: "Tags"))
+    CreateUserMessage.add_member(:authentication_mode, Shapes::ShapeRef.new(shape: AuthenticationMode, location_name: "AuthenticationMode"))
     CreateUserMessage.struct_class = Types::CreateUserMessage
 
     CustomerNodeEndpoint.add_member(:address, Shapes::ShapeRef.new(shape: String, location_name: "Address"))
@@ -1237,6 +1247,8 @@ module Aws::ElastiCache
     ModifyReplicationGroupMessage.add_member(:remove_user_groups, Shapes::ShapeRef.new(shape: BooleanOptional, location_name: "RemoveUserGroups"))
     ModifyReplicationGroupMessage.add_member(:log_delivery_configurations, Shapes::ShapeRef.new(shape: LogDeliveryConfigurationRequestList, location_name: "LogDeliveryConfigurations"))
     ModifyReplicationGroupMessage.add_member(:ip_discovery, Shapes::ShapeRef.new(shape: IpDiscovery, location_name: "IpDiscovery"))
+    ModifyReplicationGroupMessage.add_member(:transit_encryption_enabled, Shapes::ShapeRef.new(shape: BooleanOptional, location_name: "TransitEncryptionEnabled"))
+    ModifyReplicationGroupMessage.add_member(:transit_encryption_mode, Shapes::ShapeRef.new(shape: TransitEncryptionMode, location_name: "TransitEncryptionMode"))
     ModifyReplicationGroupMessage.struct_class = Types::ModifyReplicationGroupMessage
 
     ModifyReplicationGroupResult.add_member(:replication_group, Shapes::ShapeRef.new(shape: ReplicationGroup, location_name: "ReplicationGroup"))
@@ -1263,6 +1275,7 @@ module Aws::ElastiCache
     ModifyUserMessage.add_member(:append_access_string, Shapes::ShapeRef.new(shape: AccessString, location_name: "AppendAccessString"))
     ModifyUserMessage.add_member(:passwords, Shapes::ShapeRef.new(shape: PasswordListInput, location_name: "Passwords"))
     ModifyUserMessage.add_member(:no_password_required, Shapes::ShapeRef.new(shape: BooleanOptional, location_name: "NoPasswordRequired"))
+    ModifyUserMessage.add_member(:authentication_mode, Shapes::ShapeRef.new(shape: AuthenticationMode, location_name: "AuthenticationMode"))
     ModifyUserMessage.struct_class = Types::ModifyUserMessage
 
     NetworkTypeList.member = Shapes::ShapeRef.new(shape: NetworkType)
@@ -1385,6 +1398,8 @@ module Aws::ElastiCache
     PendingModifiedValues.add_member(:cache_node_type, Shapes::ShapeRef.new(shape: String, location_name: "CacheNodeType"))
     PendingModifiedValues.add_member(:auth_token_status, Shapes::ShapeRef.new(shape: AuthTokenUpdateStatus, location_name: "AuthTokenStatus"))
     PendingModifiedValues.add_member(:log_delivery_configurations, Shapes::ShapeRef.new(shape: PendingLogDeliveryConfigurationList, location_name: "LogDeliveryConfigurations"))
+    PendingModifiedValues.add_member(:transit_encryption_enabled, Shapes::ShapeRef.new(shape: BooleanOptional, location_name: "TransitEncryptionEnabled"))
+    PendingModifiedValues.add_member(:transit_encryption_mode, Shapes::ShapeRef.new(shape: TransitEncryptionMode, location_name: "TransitEncryptionMode"))
     PendingModifiedValues.struct_class = Types::PendingModifiedValues
 
     PreferredAvailabilityZoneList.member = Shapes::ShapeRef.new(shape: String, location_name: "PreferredAvailabilityZone")
@@ -1472,6 +1487,7 @@ module Aws::ElastiCache
     ReplicationGroup.add_member(:auto_minor_version_upgrade, Shapes::ShapeRef.new(shape: Boolean, location_name: "AutoMinorVersionUpgrade"))
     ReplicationGroup.add_member(:network_type, Shapes::ShapeRef.new(shape: NetworkType, location_name: "NetworkType"))
     ReplicationGroup.add_member(:ip_discovery, Shapes::ShapeRef.new(shape: IpDiscovery, location_name: "IpDiscovery"))
+    ReplicationGroup.add_member(:transit_encryption_mode, Shapes::ShapeRef.new(shape: TransitEncryptionMode, location_name: "TransitEncryptionMode"))
     ReplicationGroup.struct_class = Types::ReplicationGroup
 
     ReplicationGroupAlreadyExistsFault.struct_class = Types::ReplicationGroupAlreadyExistsFault
@@ -1498,6 +1514,8 @@ module Aws::ElastiCache
     ReplicationGroupPendingModifiedValues.add_member(:auth_token_status, Shapes::ShapeRef.new(shape: AuthTokenUpdateStatus, location_name: "AuthTokenStatus"))
     ReplicationGroupPendingModifiedValues.add_member(:user_groups, Shapes::ShapeRef.new(shape: UserGroupsUpdateStatus, location_name: "UserGroups"))
     ReplicationGroupPendingModifiedValues.add_member(:log_delivery_configurations, Shapes::ShapeRef.new(shape: PendingLogDeliveryConfigurationList, location_name: "LogDeliveryConfigurations"))
+    ReplicationGroupPendingModifiedValues.add_member(:transit_encryption_enabled, Shapes::ShapeRef.new(shape: BooleanOptional, location_name: "TransitEncryptionEnabled"))
+    ReplicationGroupPendingModifiedValues.add_member(:transit_encryption_mode, Shapes::ShapeRef.new(shape: TransitEncryptionMode, location_name: "TransitEncryptionMode"))
     ReplicationGroupPendingModifiedValues.struct_class = Types::ReplicationGroupPendingModifiedValues
 
     ReservedCacheNode.add_member(:reserved_cache_node_id, Shapes::ShapeRef.new(shape: String, location_name: "ReservedCacheNodeId"))

data/lib/aws-sdk-elasticache/endpoint_parameters.rb

@@ -50,6 +50,9 @@ module Aws::ElastiCache
 
     def initialize(options = {})
       self[:region] = options[:region]
+      if self[:region].nil?
+        raise ArgumentError, "Missing required EndpointParameter: :region"
+      end
       self[:use_dual_stack] = options[:use_dual_stack]
       self[:use_dual_stack] = false if self[:use_dual_stack].nil?
       if self[:use_dual_stack].nil?