aws-sdk-firehose 1.29.1 → 1.34.0

data/lib/aws-sdk-firehose/resource.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 # WARNING ABOUT GENERATED CODE
 #
 # This file is generated. See the contributing guide for more information:

data/lib/aws-sdk-firehose/types.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 # WARNING ABOUT GENERATED CODE
 #
 # This file is generated. See the contributing guide for more information:
@@ -47,6 +49,7 @@ module Aws::Firehose
     class BufferingHints < Struct.new(
       :size_in_m_bs,
       :interval_in_seconds)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -82,6 +85,7 @@ module Aws::Firehose
       :enabled,
       :log_group_name,
       :log_stream_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -96,6 +100,7 @@ module Aws::Firehose
     #
     class ConcurrentModificationException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -155,6 +160,7 @@ module Aws::Firehose
       :data_table_name,
       :data_table_columns,
       :copy_options)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -493,6 +499,72 @@ module Aws::Firehose
     #             log_stream_name: "LogStreamName",
     #           },
     #         },
+    #         http_endpoint_destination_configuration: {
+    #           endpoint_configuration: { # required
+    #             url: "HttpEndpointUrl", # required
+    #             name: "HttpEndpointName",
+    #             access_key: "HttpEndpointAccessKey",
+    #           },
+    #           buffering_hints: {
+    #             size_in_m_bs: 1,
+    #             interval_in_seconds: 1,
+    #           },
+    #           cloud_watch_logging_options: {
+    #             enabled: false,
+    #             log_group_name: "LogGroupName",
+    #             log_stream_name: "LogStreamName",
+    #           },
+    #           request_configuration: {
+    #             content_encoding: "NONE", # accepts NONE, GZIP
+    #             common_attributes: [
+    #               {
+    #                 attribute_name: "HttpEndpointAttributeName", # required
+    #                 attribute_value: "HttpEndpointAttributeValue", # required
+    #               },
+    #             ],
+    #           },
+    #           processing_configuration: {
+    #             enabled: false,
+    #             processors: [
+    #               {
+    #                 type: "Lambda", # required, accepts Lambda
+    #                 parameters: [
+    #                   {
+    #                     parameter_name: "LambdaArn", # required, accepts LambdaArn, NumberOfRetries, RoleArn, BufferSizeInMBs, BufferIntervalInSeconds
+    #                     parameter_value: "ProcessorParameterValue", # required
+    #                   },
+    #                 ],
+    #               },
+    #             ],
+    #           },
+    #           role_arn: "RoleARN",
+    #           retry_options: {
+    #             duration_in_seconds: 1,
+    #           },
+    #           s3_backup_mode: "FailedDataOnly", # accepts FailedDataOnly, AllData
+    #           s3_configuration: { # required
+    #             role_arn: "RoleARN", # required
+    #             bucket_arn: "BucketARN", # required
+    #             prefix: "Prefix",
+    #             error_output_prefix: "ErrorOutputPrefix",
+    #             buffering_hints: {
+    #               size_in_m_bs: 1,
+    #               interval_in_seconds: 1,
+    #             },
+    #             compression_format: "UNCOMPRESSED", # accepts UNCOMPRESSED, GZIP, ZIP, Snappy, HADOOP_SNAPPY
+    #             encryption_configuration: {
+    #               no_encryption_config: "NoEncryption", # accepts NoEncryption
+    #               kms_encryption_config: {
+    #                 awskms_key_arn: "AWSKMSKeyARN", # required
+    #               },
+    #             },
+    #             cloud_watch_logging_options: {
+    #               enabled: false,
+    #               log_group_name: "LogGroupName",
+    #               log_stream_name: "LogStreamName",
+    #             },
+    #           },
+    #         },
     #         tags: [
     #           {
     #             key: "TagKey", # required
@@ -553,6 +625,11 @@ module Aws::Firehose
     #   The destination in Splunk. You can specify only one destination.
     #   @return [Types::SplunkDestinationConfiguration]
     #
+    # @!attribute [rw] http_endpoint_destination_configuration
+    #   Enables configuring Kinesis Firehose to deliver data to any HTTP
+    #   endpoint destination. You can specify only one destination.
+    #   @return [Types::HttpEndpointDestinationConfiguration]
+    #
     # @!attribute [rw] tags
     #   A set of tags to assign to the delivery stream. A tag is a key-value
     #   pair that you can define and assign to AWS resources. Tags are
@@ -581,7 +658,9 @@ module Aws::Firehose
       :redshift_destination_configuration,
       :elasticsearch_destination_configuration,
       :splunk_destination_configuration,
+      :http_endpoint_destination_configuration,
       :tags)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -593,6 +672,7 @@ module Aws::Firehose
     #
     class CreateDeliveryStreamOutput < Struct.new(
       :delivery_stream_arn)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -690,6 +770,7 @@ module Aws::Firehose
       :input_format_configuration,
       :output_format_configuration,
       :enabled)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -727,6 +808,7 @@ module Aws::Firehose
     class DeleteDeliveryStreamInput < Struct.new(
       :delivery_stream_name,
       :allow_force_delete)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -822,6 +904,7 @@ module Aws::Firehose
       :source,
       :destinations,
       :has_more_destinations)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -871,6 +954,7 @@ module Aws::Firehose
       :key_type,
       :status,
       :failure_description)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -929,6 +1013,7 @@ module Aws::Firehose
     class DeliveryStreamEncryptionConfigurationInput < Struct.new(
       :key_arn,
       :key_type)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -962,6 +1047,7 @@ module Aws::Firehose
       :delivery_stream_name,
       :limit,
       :exclusive_start_destination_id)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -973,6 +1059,7 @@ module Aws::Firehose
     #
     class DescribeDeliveryStreamOutput < Struct.new(
       :delivery_stream_description)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1026,6 +1113,7 @@ module Aws::Firehose
     class Deserializer < Struct.new(
       :open_x_json_ser_de,
       :hive_json_ser_de)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1055,6 +1143,10 @@ module Aws::Firehose
     #   The destination in Splunk.
     #   @return [Types::SplunkDestinationDescription]
     #
+    # @!attribute [rw] http_endpoint_destination_description
+    #   Describes the specified HTTP endpoint destination.
+    #   @return [Types::HttpEndpointDestinationDescription]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/firehose-2015-08-04/DestinationDescription AWS API Documentation
     #
     class DestinationDescription < Struct.new(
@@ -1063,7 +1155,9 @@ module Aws::Firehose
       :extended_s3_destination_description,
       :redshift_destination_description,
       :elasticsearch_destination_description,
-      :splunk_destination_description)
+      :splunk_destination_description,
+      :http_endpoint_destination_description)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1099,6 +1193,7 @@ module Aws::Firehose
     class ElasticsearchBufferingHints < Struct.new(
       :interval_in_seconds,
       :size_in_m_bs)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1248,6 +1343,9 @@ module Aws::Firehose
     #   information, see [Amazon S3 Backup for the Amazon ES
     #   Destination][1]. Default value is `FailedDocumentsOnly`.
     #
+    #   You can't change this backup mode after you create the delivery
+    #   stream.
+    #
     #
     #
     #   [1]: https://docs.aws.amazon.com/firehose/latest/dev/basic-deliver.html#es-s3-backup
@@ -1285,6 +1383,7 @@ module Aws::Firehose
       :processing_configuration,
       :cloud_watch_logging_options,
       :vpc_configuration)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1376,6 +1475,7 @@ module Aws::Firehose
       :processing_configuration,
       :cloud_watch_logging_options,
       :vpc_configuration_description)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1538,6 +1638,7 @@ module Aws::Firehose
       :s3_update,
       :processing_configuration,
       :cloud_watch_logging_options)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1563,6 +1664,7 @@ module Aws::Firehose
     #
     class ElasticsearchRetryOptions < Struct.new(
       :duration_in_seconds)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1592,6 +1694,7 @@ module Aws::Firehose
     class EncryptionConfiguration < Struct.new(
       :no_encryption_config,
       :kms_encryption_config)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1772,7 +1875,10 @@ module Aws::Firehose
     #   @return [Types::ProcessingConfiguration]
     #
     # @!attribute [rw] s3_backup_mode
-    #   The Amazon S3 backup mode.
+    #   The Amazon S3 backup mode. After you create a delivery stream, you
+    #   can update it to enable Amazon S3 backup if it is disabled. If
+    #   backup is enabled, you can't update the delivery stream to disable
+    #   it.
     #   @return [String]
     #
     # @!attribute [rw] s3_backup_configuration
@@ -1800,6 +1906,7 @@ module Aws::Firehose
       :s3_backup_mode,
       :s3_backup_configuration,
       :data_format_conversion_configuration)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1896,6 +2003,7 @@ module Aws::Firehose
       :s3_backup_mode,
       :s3_backup_description,
       :data_format_conversion_configuration)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2076,7 +2184,9 @@ module Aws::Firehose
     #   @return [Types::ProcessingConfiguration]
     #
     # @!attribute [rw] s3_backup_mode
-    #   Enables or disables Amazon S3 backup mode.
+    #   You can update a delivery stream to enable Amazon S3 backup if it is
+    #   disabled. If backup is enabled, you can't update the delivery
+    #   stream to disable it.
     #   @return [String]
     #
     # @!attribute [rw] s3_backup_update
@@ -2104,6 +2214,7 @@ module Aws::Firehose
       :s3_backup_mode,
       :s3_backup_update,
       :data_format_conversion_configuration)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2124,6 +2235,7 @@ module Aws::Firehose
     class FailureDescription < Struct.new(
       :type,
       :details)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2160,6 +2272,543 @@ module Aws::Firehose
     #
     class HiveJsonSerDe < Struct.new(
       :timestamp_formats)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # Describes the buffering options that can be applied before data is
+    # delivered to the HTTP endpoint destination. Kinesis Data Firehose
+    # treats these options as hints, and it might choose to use more optimal
+    # values. The `SizeInMBs` and `IntervalInSeconds` parameters are
+    # optional. However, if specify a value for one of them, you must also
+    # provide a value for the other.
+    #
+    # @note When making an API call, you may pass HttpEndpointBufferingHints
+    #   data as a hash:
+    #
+    #       {
+    #         size_in_m_bs: 1,
+    #         interval_in_seconds: 1,
+    #       }
+    #
+    # @!attribute [rw] size_in_m_bs
+    #   Buffer incoming data to the specified size, in MBs, before
+    #   delivering it to the destination. The default value is 5.
+    #
+    #   We recommend setting this parameter to a value greater than the
+    #   amount of data you typically ingest into the delivery stream in 10
+    #   seconds. For example, if you typically ingest data at 1 MB/sec, the
+    #   value should be 10 MB or higher.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] interval_in_seconds
+    #   Buffer incoming data for the specified period of time, in seconds,
+    #   before delivering it to the destination. The default value is 300 (5
+    #   minutes).
+    #   @return [Integer]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/firehose-2015-08-04/HttpEndpointBufferingHints AWS API Documentation
+    #
+    class HttpEndpointBufferingHints < Struct.new(
+      :size_in_m_bs,
+      :interval_in_seconds)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # Describes the metadata that's delivered to the specified HTTP
+    # endpoint destination.
+    #
+    # @note When making an API call, you may pass HttpEndpointCommonAttribute
+    #   data as a hash:
+    #
+    #       {
+    #         attribute_name: "HttpEndpointAttributeName", # required
+    #         attribute_value: "HttpEndpointAttributeValue", # required
+    #       }
+    #
+    # @!attribute [rw] attribute_name
+    #   The name of the HTTP endpoint common attribute.
+    #   @return [String]
+    #
+    # @!attribute [rw] attribute_value
+    #   The value of the HTTP endpoint common attribute.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/firehose-2015-08-04/HttpEndpointCommonAttribute AWS API Documentation
+    #
+    class HttpEndpointCommonAttribute < Struct.new(
+      :attribute_name,
+      :attribute_value)
+      SENSITIVE = [:attribute_name, :attribute_value]
+      include Aws::Structure
+    end
+
+    # Describes the configuration of the HTTP endpoint to which Kinesis
+    # Firehose delivers data.
+    #
+    # @note When making an API call, you may pass HttpEndpointConfiguration
+    #   data as a hash:
+    #
+    #       {
+    #         url: "HttpEndpointUrl", # required
+    #         name: "HttpEndpointName",
+    #         access_key: "HttpEndpointAccessKey",
+    #       }
+    #
+    # @!attribute [rw] url
+    #   The URL of the HTTP endpoint selected as the destination.
+    #   @return [String]
+    #
+    # @!attribute [rw] name
+    #   The name of the HTTP endpoint selected as the destination.
+    #   @return [String]
+    #
+    # @!attribute [rw] access_key
+    #   The access key required for Kinesis Firehose to authenticate with
+    #   the HTTP endpoint selected as the destination.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/firehose-2015-08-04/HttpEndpointConfiguration AWS API Documentation
+    #
+    class HttpEndpointConfiguration < Struct.new(
+      :url,
+      :name,
+      :access_key)
+      SENSITIVE = [:url, :access_key]
+      include Aws::Structure
+    end
+
+    # Describes the HTTP endpoint selected as the destination.
+    #
+    # @!attribute [rw] url
+    #   The URL of the HTTP endpoint selected as the destination.
+    #   @return [String]
+    #
+    # @!attribute [rw] name
+    #   The name of the HTTP endpoint selected as the destination.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/firehose-2015-08-04/HttpEndpointDescription AWS API Documentation
+    #
+    class HttpEndpointDescription < Struct.new(
+      :url,
+      :name)
+      SENSITIVE = [:url]
+      include Aws::Structure
+    end
+
+    # Describes the configuration of the HTTP endpoint destination.
+    #
+    # @note When making an API call, you may pass HttpEndpointDestinationConfiguration
+    #   data as a hash:
+    #
+    #       {
+    #         endpoint_configuration: { # required
+    #           url: "HttpEndpointUrl", # required
+    #           name: "HttpEndpointName",
+    #           access_key: "HttpEndpointAccessKey",
+    #         },
+    #         buffering_hints: {
+    #           size_in_m_bs: 1,
+    #           interval_in_seconds: 1,
+    #         },
+    #         cloud_watch_logging_options: {
+    #           enabled: false,
+    #           log_group_name: "LogGroupName",
+    #           log_stream_name: "LogStreamName",
+    #         },
+    #         request_configuration: {
+    #           content_encoding: "NONE", # accepts NONE, GZIP
+    #           common_attributes: [
+    #             {
+    #               attribute_name: "HttpEndpointAttributeName", # required
+    #               attribute_value: "HttpEndpointAttributeValue", # required
+    #             },
+    #           ],
+    #         },
+    #         processing_configuration: {
+    #           enabled: false,
+    #           processors: [
+    #             {
+    #               type: "Lambda", # required, accepts Lambda
+    #               parameters: [
+    #                 {
+    #                   parameter_name: "LambdaArn", # required, accepts LambdaArn, NumberOfRetries, RoleArn, BufferSizeInMBs, BufferIntervalInSeconds
+    #                   parameter_value: "ProcessorParameterValue", # required
+    #                 },
+    #               ],
+    #             },
+    #           ],
+    #         },
+    #         role_arn: "RoleARN",
+    #         retry_options: {
+    #           duration_in_seconds: 1,
+    #         },
+    #         s3_backup_mode: "FailedDataOnly", # accepts FailedDataOnly, AllData
+    #         s3_configuration: { # required
+    #           role_arn: "RoleARN", # required
+    #           bucket_arn: "BucketARN", # required
+    #           prefix: "Prefix",
+    #           error_output_prefix: "ErrorOutputPrefix",
+    #           buffering_hints: {
+    #             size_in_m_bs: 1,
+    #             interval_in_seconds: 1,
+    #           },
+    #           compression_format: "UNCOMPRESSED", # accepts UNCOMPRESSED, GZIP, ZIP, Snappy, HADOOP_SNAPPY
+    #           encryption_configuration: {
+    #             no_encryption_config: "NoEncryption", # accepts NoEncryption
+    #             kms_encryption_config: {
+    #               awskms_key_arn: "AWSKMSKeyARN", # required
+    #             },
+    #           },
+    #           cloud_watch_logging_options: {
+    #             enabled: false,
+    #             log_group_name: "LogGroupName",
+    #             log_stream_name: "LogStreamName",
+    #           },
+    #         },
+    #       }
+    #
+    # @!attribute [rw] endpoint_configuration
+    #   The configuration of the HTTP endpoint selected as the destination.
+    #   @return [Types::HttpEndpointConfiguration]
+    #
+    # @!attribute [rw] buffering_hints
+    #   The buffering options that can be used before data is delivered to
+    #   the specified destination. Kinesis Data Firehose treats these
+    #   options as hints, and it might choose to use more optimal values.
+    #   The `SizeInMBs` and `IntervalInSeconds` parameters are optional.
+    #   However, if you specify a value for one of them, you must also
+    #   provide a value for the other.
+    #   @return [Types::HttpEndpointBufferingHints]
+    #
+    # @!attribute [rw] cloud_watch_logging_options
+    #   Describes the Amazon CloudWatch logging options for your delivery
+    #   stream.
+    #   @return [Types::CloudWatchLoggingOptions]
+    #
+    # @!attribute [rw] request_configuration
+    #   The configuration of the requeste sent to the HTTP endpoint
+    #   specified as the destination.
+    #   @return [Types::HttpEndpointRequestConfiguration]
+    #
+    # @!attribute [rw] processing_configuration
+    #   Describes a data processing configuration.
+    #   @return [Types::ProcessingConfiguration]
+    #
+    # @!attribute [rw] role_arn
+    #   Kinesis Data Firehose uses this IAM role for all the permissions
+    #   that the delivery stream needs.
+    #   @return [String]
+    #
+    # @!attribute [rw] retry_options
+    #   Describes the retry behavior in case Kinesis Data Firehose is unable
+    #   to deliver data to the specified HTTP endpoint destination, or if it
+    #   doesn't receive a valid acknowledgment of receipt from the
+    #   specified HTTP endpoint destination.
+    #   @return [Types::HttpEndpointRetryOptions]
+    #
+    # @!attribute [rw] s3_backup_mode
+    #   Describes the S3 bucket backup options for the data that Kinesis
+    #   Data Firehose delivers to the HTTP endpoint destination. You can
+    #   back up all documents (`AllData`) or only the documents that Kinesis
+    #   Data Firehose could not deliver to the specified HTTP endpoint
+    #   destination (`FailedDataOnly`).
+    #   @return [String]
+    #
+    # @!attribute [rw] s3_configuration
+    #   Describes the configuration of a destination in Amazon S3.
+    #   @return [Types::S3DestinationConfiguration]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/firehose-2015-08-04/HttpEndpointDestinationConfiguration AWS API Documentation
+    #
+    class HttpEndpointDestinationConfiguration < Struct.new(
+      :endpoint_configuration,
+      :buffering_hints,
+      :cloud_watch_logging_options,
+      :request_configuration,
+      :processing_configuration,
+      :role_arn,
+      :retry_options,
+      :s3_backup_mode,
+      :s3_configuration)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # Describes the HTTP endpoint destination.
+    #
+    # @!attribute [rw] endpoint_configuration
+    #   The configuration of the specified HTTP endpoint destination.
+    #   @return [Types::HttpEndpointDescription]
+    #
+    # @!attribute [rw] buffering_hints
+    #   Describes buffering options that can be applied to the data before
+    #   it is delivered to the HTTPS endpoint destination. Kinesis Data
+    #   Firehose teats these options as hints, and it might choose to use
+    #   more optimal values. The `SizeInMBs` and `IntervalInSeconds`
+    #   parameters are optional. However, if specify a value for one of
+    #   them, you must also provide a value for the other.
+    #   @return [Types::HttpEndpointBufferingHints]
+    #
+    # @!attribute [rw] cloud_watch_logging_options
+    #   Describes the Amazon CloudWatch logging options for your delivery
+    #   stream.
+    #   @return [Types::CloudWatchLoggingOptions]
+    #
+    # @!attribute [rw] request_configuration
+    #   The configuration of request sent to the HTTP endpoint specified as
+    #   the destination.
+    #   @return [Types::HttpEndpointRequestConfiguration]
+    #
+    # @!attribute [rw] processing_configuration
+    #   Describes a data processing configuration.
+    #   @return [Types::ProcessingConfiguration]
+    #
+    # @!attribute [rw] role_arn
+    #   Kinesis Data Firehose uses this IAM role for all the permissions
+    #   that the delivery stream needs.
+    #   @return [String]
+    #
+    # @!attribute [rw] retry_options
+    #   Describes the retry behavior in case Kinesis Data Firehose is unable
+    #   to deliver data to the specified HTTP endpoint destination, or if it
+    #   doesn't receive a valid acknowledgment of receipt from the
+    #   specified HTTP endpoint destination.
+    #   @return [Types::HttpEndpointRetryOptions]
+    #
+    # @!attribute [rw] s3_backup_mode
+    #   Describes the S3 bucket backup options for the data that Kinesis
+    #   Firehose delivers to the HTTP endpoint destination. You can back up
+    #   all documents (`AllData`) or only the documents that Kinesis Data
+    #   Firehose could not deliver to the specified HTTP endpoint
+    #   destination (`FailedDataOnly`).
+    #   @return [String]
+    #
+    # @!attribute [rw] s3_destination_description
+    #   Describes a destination in Amazon S3.
+    #   @return [Types::S3DestinationDescription]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/firehose-2015-08-04/HttpEndpointDestinationDescription AWS API Documentation
+    #
+    class HttpEndpointDestinationDescription < Struct.new(
+      :endpoint_configuration,
+      :buffering_hints,
+      :cloud_watch_logging_options,
+      :request_configuration,
+      :processing_configuration,
+      :role_arn,
+      :retry_options,
+      :s3_backup_mode,
+      :s3_destination_description)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # Updates the specified HTTP endpoint destination.
+    #
+    # @note When making an API call, you may pass HttpEndpointDestinationUpdate
+    #   data as a hash:
+    #
+    #       {
+    #         endpoint_configuration: {
+    #           url: "HttpEndpointUrl", # required
+    #           name: "HttpEndpointName",
+    #           access_key: "HttpEndpointAccessKey",
+    #         },
+    #         buffering_hints: {
+    #           size_in_m_bs: 1,
+    #           interval_in_seconds: 1,
+    #         },
+    #         cloud_watch_logging_options: {
+    #           enabled: false,
+    #           log_group_name: "LogGroupName",
+    #           log_stream_name: "LogStreamName",
+    #         },
+    #         request_configuration: {
+    #           content_encoding: "NONE", # accepts NONE, GZIP
+    #           common_attributes: [
+    #             {
+    #               attribute_name: "HttpEndpointAttributeName", # required
+    #               attribute_value: "HttpEndpointAttributeValue", # required
+    #             },
+    #           ],
+    #         },
+    #         processing_configuration: {
+    #           enabled: false,
+    #           processors: [
+    #             {
+    #               type: "Lambda", # required, accepts Lambda
+    #               parameters: [
+    #                 {
+    #                   parameter_name: "LambdaArn", # required, accepts LambdaArn, NumberOfRetries, RoleArn, BufferSizeInMBs, BufferIntervalInSeconds
+    #                   parameter_value: "ProcessorParameterValue", # required
+    #                 },
+    #               ],
+    #             },
+    #           ],
+    #         },
+    #         role_arn: "RoleARN",
+    #         retry_options: {
+    #           duration_in_seconds: 1,
+    #         },
+    #         s3_backup_mode: "FailedDataOnly", # accepts FailedDataOnly, AllData
+    #         s3_update: {
+    #           role_arn: "RoleARN",
+    #           bucket_arn: "BucketARN",
+    #           prefix: "Prefix",
+    #           error_output_prefix: "ErrorOutputPrefix",
+    #           buffering_hints: {
+    #             size_in_m_bs: 1,
+    #             interval_in_seconds: 1,
+    #           },
+    #           compression_format: "UNCOMPRESSED", # accepts UNCOMPRESSED, GZIP, ZIP, Snappy, HADOOP_SNAPPY
+    #           encryption_configuration: {
+    #             no_encryption_config: "NoEncryption", # accepts NoEncryption
+    #             kms_encryption_config: {
+    #               awskms_key_arn: "AWSKMSKeyARN", # required
+    #             },
+    #           },
+    #           cloud_watch_logging_options: {
+    #             enabled: false,
+    #             log_group_name: "LogGroupName",
+    #             log_stream_name: "LogStreamName",
+    #           },
+    #         },
+    #       }
+    #
+    # @!attribute [rw] endpoint_configuration
+    #   Describes the configuration of the HTTP endpoint destination.
+    #   @return [Types::HttpEndpointConfiguration]
+    #
+    # @!attribute [rw] buffering_hints
+    #   Describes buffering options that can be applied to the data before
+    #   it is delivered to the HTTPS endpoint destination. Kinesis Data
+    #   Firehose teats these options as hints, and it might choose to use
+    #   more optimal values. The `SizeInMBs` and `IntervalInSeconds`
+    #   parameters are optional. However, if specify a value for one of
+    #   them, you must also provide a value for the other.
+    #   @return [Types::HttpEndpointBufferingHints]
+    #
+    # @!attribute [rw] cloud_watch_logging_options
+    #   Describes the Amazon CloudWatch logging options for your delivery
+    #   stream.
+    #   @return [Types::CloudWatchLoggingOptions]
+    #
+    # @!attribute [rw] request_configuration
+    #   The configuration of the request sent to the HTTP endpoint specified
+    #   as the destination.
+    #   @return [Types::HttpEndpointRequestConfiguration]
+    #
+    # @!attribute [rw] processing_configuration
+    #   Describes a data processing configuration.
+    #   @return [Types::ProcessingConfiguration]
+    #
+    # @!attribute [rw] role_arn
+    #   Kinesis Data Firehose uses this IAM role for all the permissions
+    #   that the delivery stream needs.
+    #   @return [String]
+    #
+    # @!attribute [rw] retry_options
+    #   Describes the retry behavior in case Kinesis Data Firehose is unable
+    #   to deliver data to the specified HTTP endpoint destination, or if it
+    #   doesn't receive a valid acknowledgment of receipt from the
+    #   specified HTTP endpoint destination.
+    #   @return [Types::HttpEndpointRetryOptions]
+    #
+    # @!attribute [rw] s3_backup_mode
+    #   Describes the S3 bucket backup options for the data that Kinesis
+    #   Firehose delivers to the HTTP endpoint destination. You can back up
+    #   all documents (`AllData`) or only the documents that Kinesis Data
+    #   Firehose could not deliver to the specified HTTP endpoint
+    #   destination (`FailedDataOnly`).
+    #   @return [String]
+    #
+    # @!attribute [rw] s3_update
+    #   Describes an update for a destination in Amazon S3.
+    #   @return [Types::S3DestinationUpdate]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/firehose-2015-08-04/HttpEndpointDestinationUpdate AWS API Documentation
+    #
+    class HttpEndpointDestinationUpdate < Struct.new(
+      :endpoint_configuration,
+      :buffering_hints,
+      :cloud_watch_logging_options,
+      :request_configuration,
+      :processing_configuration,
+      :role_arn,
+      :retry_options,
+      :s3_backup_mode,
+      :s3_update)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # The configuration of the HTTP endpoint request.
+    #
+    # @note When making an API call, you may pass HttpEndpointRequestConfiguration
+    #   data as a hash:
+    #
+    #       {
+    #         content_encoding: "NONE", # accepts NONE, GZIP
+    #         common_attributes: [
+    #           {
+    #             attribute_name: "HttpEndpointAttributeName", # required
+    #             attribute_value: "HttpEndpointAttributeValue", # required
+    #           },
+    #         ],
+    #       }
+    #
+    # @!attribute [rw] content_encoding
+    #   Kinesis Data Firehose uses the content encoding to compress the body
+    #   of a request before sending the request to the destination. For more
+    #   information, see [Content-Encoding][1] in MDN Web Docs, the official
+    #   Mozilla documentation.
+    #
+    #
+    #
+    #   [1]: https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/Content-Encoding
+    #   @return [String]
+    #
+    # @!attribute [rw] common_attributes
+    #   Describes the metadata sent to the HTTP endpoint destination.
+    #   @return [Array<Types::HttpEndpointCommonAttribute>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/firehose-2015-08-04/HttpEndpointRequestConfiguration AWS API Documentation
+    #
+    class HttpEndpointRequestConfiguration < Struct.new(
+      :content_encoding,
+      :common_attributes)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # Describes the retry behavior in case Kinesis Data Firehose is unable
+    # to deliver data to the specified HTTP endpoint destination, or if it
+    # doesn't receive a valid acknowledgment of receipt from the specified
+    # HTTP endpoint destination.
+    #
+    # @note When making an API call, you may pass HttpEndpointRetryOptions
+    #   data as a hash:
+    #
+    #       {
+    #         duration_in_seconds: 1,
+    #       }
+    #
+    # @!attribute [rw] duration_in_seconds
+    #   The total amount of time that Kinesis Data Firehose spends on
+    #   retries. This duration starts after the initial attempt to send data
+    #   to the custom destination via HTTPS endpoint fails. It doesn't
+    #   include the periods during which Kinesis Data Firehose waits for
+    #   acknowledgment from the specified destination after each attempt.
+    #   @return [Integer]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/firehose-2015-08-04/HttpEndpointRetryOptions AWS API Documentation
+    #
+    class HttpEndpointRetryOptions < Struct.new(
+      :duration_in_seconds)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2195,6 +2844,7 @@ module Aws::Firehose
     #
     class InputFormatConfiguration < Struct.new(
       :deserializer)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2208,6 +2858,7 @@ module Aws::Firehose
     #
     class InvalidArgumentException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2228,6 +2879,7 @@ module Aws::Firehose
     class InvalidKMSResourceException < Struct.new(
       :code,
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2255,6 +2907,7 @@ module Aws::Firehose
     #
     class KMSEncryptionConfig < Struct.new(
       :awskms_key_arn)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2293,6 +2946,7 @@ module Aws::Firehose
     class KinesisStreamSourceConfiguration < Struct.new(
       :kinesis_stream_arn,
       :role_arn)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2330,6 +2984,7 @@ module Aws::Firehose
       :kinesis_stream_arn,
       :role_arn,
       :delivery_start_timestamp)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2343,6 +2998,7 @@ module Aws::Firehose
     #
     class LimitExceededException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2386,6 +3042,7 @@ module Aws::Firehose
       :limit,
       :delivery_stream_type,
       :exclusive_start_delivery_stream_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2402,6 +3059,7 @@ module Aws::Firehose
     class ListDeliveryStreamsOutput < Struct.new(
       :delivery_stream_names,
       :has_more_delivery_streams)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2437,6 +3095,7 @@ module Aws::Firehose
       :delivery_stream_name,
       :exclusive_start_tag_key,
       :limit)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2457,6 +3116,7 @@ module Aws::Firehose
     class ListTagsForDeliveryStreamOutput < Struct.new(
       :tags,
       :has_more_tags)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2508,6 +3168,7 @@ module Aws::Firehose
       :convert_dots_in_json_keys_to_underscores,
       :case_insensitive,
       :column_to_json_key_mappings)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2615,6 +3276,7 @@ module Aws::Firehose
       :bloom_filter_false_positive_probability,
       :dictionary_key_threshold,
       :format_version)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2660,6 +3322,7 @@ module Aws::Firehose
     #
     class OutputFormatConfiguration < Struct.new(
       :serializer)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2727,6 +3390,7 @@ module Aws::Firehose
       :enable_dictionary_compression,
       :max_padding_bytes,
       :writer_version)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2763,6 +3427,7 @@ module Aws::Firehose
     class ProcessingConfiguration < Struct.new(
       :enabled,
       :processors)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2794,6 +3459,7 @@ module Aws::Firehose
     class Processor < Struct.new(
       :type,
       :parameters)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2820,6 +3486,7 @@ module Aws::Firehose
     class ProcessorParameter < Struct.new(
       :parameter_name,
       :parameter_value)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2848,6 +3515,7 @@ module Aws::Firehose
     class PutRecordBatchInput < Struct.new(
       :delivery_stream_name,
       :records)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2874,6 +3542,7 @@ module Aws::Firehose
       :failed_put_count,
       :encrypted,
       :request_responses)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2901,6 +3570,7 @@ module Aws::Firehose
       :record_id,
       :error_code,
       :error_message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2927,6 +3597,7 @@ module Aws::Firehose
     class PutRecordInput < Struct.new(
       :delivery_stream_name,
       :record)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2944,6 +3615,7 @@ module Aws::Firehose
     class PutRecordOutput < Struct.new(
       :record_id,
       :encrypted)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2966,6 +3638,7 @@ module Aws::Firehose
     #
     class Record < Struct.new(
       :data)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3101,7 +3774,10 @@ module Aws::Firehose
     #   @return [Types::ProcessingConfiguration]
     #
     # @!attribute [rw] s3_backup_mode
-    #   The Amazon S3 backup mode.
+    #   The Amazon S3 backup mode. After you create a delivery stream, you
+    #   can update it to enable Amazon S3 backup if it is disabled. If
+    #   backup is enabled, you can't update the delivery stream to disable
+    #   it.
     #   @return [String]
     #
     # @!attribute [rw] s3_backup_configuration
@@ -3126,6 +3802,7 @@ module Aws::Firehose
       :s3_backup_mode,
       :s3_backup_configuration,
       :cloud_watch_logging_options)
+      SENSITIVE = [:username, :password]
       include Aws::Structure
     end
 
@@ -3192,6 +3869,7 @@ module Aws::Firehose
       :s3_backup_mode,
       :s3_backup_description,
       :cloud_watch_logging_options)
+      SENSITIVE = [:username]
       include Aws::Structure
     end
 
@@ -3325,7 +4003,9 @@ module Aws::Firehose
     #   @return [Types::ProcessingConfiguration]
     #
     # @!attribute [rw] s3_backup_mode
-    #   The Amazon S3 backup mode.
+    #   You can update a delivery stream to enable Amazon S3 backup if it is
+    #   disabled. If backup is enabled, you can't update the delivery
+    #   stream to disable it.
     #   @return [String]
     #
     # @!attribute [rw] s3_backup_update
@@ -3350,6 +4030,7 @@ module Aws::Firehose
       :s3_backup_mode,
       :s3_backup_update,
       :cloud_watch_logging_options)
+      SENSITIVE = [:username, :password]
       include Aws::Structure
     end
 
@@ -3376,6 +4057,7 @@ module Aws::Firehose
     #
     class RedshiftRetryOptions < Struct.new(
       :duration_in_seconds)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3389,6 +4071,7 @@ module Aws::Firehose
     #
     class ResourceInUseException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3402,6 +4085,7 @@ module Aws::Firehose
     #
     class ResourceNotFoundException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3507,6 +4191,7 @@ module Aws::Firehose
       :compression_format,
       :encryption_configuration,
       :cloud_watch_logging_options)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3582,6 +4267,7 @@ module Aws::Firehose
       :compression_format,
       :encryption_configuration,
       :cloud_watch_logging_options)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3687,6 +4373,7 @@ module Aws::Firehose
       :compression_format,
       :encryption_configuration,
       :cloud_watch_logging_options)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3748,6 +4435,7 @@ module Aws::Firehose
       :table_name,
       :region,
       :version_id)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3811,6 +4499,7 @@ module Aws::Firehose
     class Serializer < Struct.new(
       :parquet_ser_de,
       :orc_ser_de)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3832,6 +4521,7 @@ module Aws::Firehose
     #
     class ServiceUnavailableException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3847,6 +4537,7 @@ module Aws::Firehose
     #
     class SourceDescription < Struct.new(
       :kinesis_stream_source_description)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3936,11 +4627,15 @@ module Aws::Firehose
     #
     # @!attribute [rw] s3_backup_mode
     #   Defines how documents should be delivered to Amazon S3. When set to
-    #   `FailedDocumentsOnly`, Kinesis Data Firehose writes any data that
-    #   could not be indexed to the configured Amazon S3 destination. When
-    #   set to `AllDocuments`, Kinesis Data Firehose delivers all incoming
-    #   records to Amazon S3, and also writes failed documents to Amazon S3.
-    #   Default value is `FailedDocumentsOnly`.
+    #   `FailedEventsOnly`, Kinesis Data Firehose writes any data that could
+    #   not be indexed to the configured Amazon S3 destination. When set to
+    #   `AllEvents`, Kinesis Data Firehose delivers all incoming records to
+    #   Amazon S3, and also writes failed documents to Amazon S3. The
+    #   default value is `FailedEventsOnly`.
+    #
+    #   You can update this backup mode from `FailedEventsOnly` to
+    #   `AllEvents`. You can't update it from `AllEvents` to
+    #   `FailedEventsOnly`.
     #   @return [String]
     #
     # @!attribute [rw] s3_configuration
@@ -3967,6 +4662,7 @@ module Aws::Firehose
       :s3_configuration,
       :processing_configuration,
       :cloud_watch_logging_options)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4032,6 +4728,7 @@ module Aws::Firehose
       :s3_destination_description,
       :processing_configuration,
       :cloud_watch_logging_options)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4120,12 +4817,16 @@ module Aws::Firehose
     #   @return [Types::SplunkRetryOptions]
     #
     # @!attribute [rw] s3_backup_mode
-    #   Defines how documents should be delivered to Amazon S3. When set to
-    #   `FailedDocumentsOnly`, Kinesis Data Firehose writes any data that
-    #   could not be indexed to the configured Amazon S3 destination. When
-    #   set to `AllDocuments`, Kinesis Data Firehose delivers all incoming
-    #   records to Amazon S3, and also writes failed documents to Amazon S3.
-    #   Default value is `FailedDocumentsOnly`.
+    #   Specifies how you want Kinesis Data Firehose to back up documents to
+    #   Amazon S3. When set to `FailedDocumentsOnly`, Kinesis Data Firehose
+    #   writes any data that could not be indexed to the configured Amazon
+    #   S3 destination. When set to `AllEvents`, Kinesis Data Firehose
+    #   delivers all incoming records to Amazon S3, and also writes failed
+    #   documents to Amazon S3. The default value is `FailedEventsOnly`.
+    #
+    #   You can update this backup mode from `FailedEventsOnly` to
+    #   `AllEvents`. You can't update it from `AllEvents` to
+    #   `FailedEventsOnly`.
     #   @return [String]
     #
     # @!attribute [rw] s3_update
@@ -4152,6 +4853,7 @@ module Aws::Firehose
       :s3_update,
       :processing_configuration,
       :cloud_watch_logging_options)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4178,6 +4880,7 @@ module Aws::Firehose
     #
     class SplunkRetryOptions < Struct.new(
       :duration_in_seconds)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4207,6 +4910,7 @@ module Aws::Firehose
     class StartDeliveryStreamEncryptionInput < Struct.new(
       :delivery_stream_name,
       :delivery_stream_encryption_configuration_input)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4230,6 +4934,7 @@ module Aws::Firehose
     #
     class StopDeliveryStreamEncryptionInput < Struct.new(
       :delivery_stream_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4265,6 +4970,7 @@ module Aws::Firehose
     class Tag < Struct.new(
       :key,
       :value)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4294,6 +5000,7 @@ module Aws::Firehose
     class TagDeliveryStreamInput < Struct.new(
       :delivery_stream_name,
       :tags)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4323,6 +5030,7 @@ module Aws::Firehose
     class UntagDeliveryStreamInput < Struct.new(
       :delivery_stream_name,
       :tag_keys)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4652,6 +5360,72 @@ module Aws::Firehose
     #             log_stream_name: "LogStreamName",
     #           },
     #         },
+    #         http_endpoint_destination_update: {
+    #           endpoint_configuration: {
+    #             url: "HttpEndpointUrl", # required
+    #             name: "HttpEndpointName",
+    #             access_key: "HttpEndpointAccessKey",
+    #           },
+    #           buffering_hints: {
+    #             size_in_m_bs: 1,
+    #             interval_in_seconds: 1,
+    #           },
+    #           cloud_watch_logging_options: {
+    #             enabled: false,
+    #             log_group_name: "LogGroupName",
+    #             log_stream_name: "LogStreamName",
+    #           },
+    #           request_configuration: {
+    #             content_encoding: "NONE", # accepts NONE, GZIP
+    #             common_attributes: [
+    #               {
+    #                 attribute_name: "HttpEndpointAttributeName", # required
+    #                 attribute_value: "HttpEndpointAttributeValue", # required
+    #               },
+    #             ],
+    #           },
+    #           processing_configuration: {
+    #             enabled: false,
+    #             processors: [
+    #               {
+    #                 type: "Lambda", # required, accepts Lambda
+    #                 parameters: [
+    #                   {
+    #                     parameter_name: "LambdaArn", # required, accepts LambdaArn, NumberOfRetries, RoleArn, BufferSizeInMBs, BufferIntervalInSeconds
+    #                     parameter_value: "ProcessorParameterValue", # required
+    #                   },
+    #                 ],
+    #               },
+    #             ],
+    #           },
+    #           role_arn: "RoleARN",
+    #           retry_options: {
+    #             duration_in_seconds: 1,
+    #           },
+    #           s3_backup_mode: "FailedDataOnly", # accepts FailedDataOnly, AllData
+    #           s3_update: {
+    #             role_arn: "RoleARN",
+    #             bucket_arn: "BucketARN",
+    #             prefix: "Prefix",
+    #             error_output_prefix: "ErrorOutputPrefix",
+    #             buffering_hints: {
+    #               size_in_m_bs: 1,
+    #               interval_in_seconds: 1,
+    #             },
+    #             compression_format: "UNCOMPRESSED", # accepts UNCOMPRESSED, GZIP, ZIP, Snappy, HADOOP_SNAPPY
+    #             encryption_configuration: {
+    #               no_encryption_config: "NoEncryption", # accepts NoEncryption
+    #               kms_encryption_config: {
+    #                 awskms_key_arn: "AWSKMSKeyARN", # required
+    #               },
+    #             },
+    #             cloud_watch_logging_options: {
+    #               enabled: false,
+    #               log_group_name: "LogGroupName",
+    #               log_stream_name: "LogStreamName",
+    #             },
+    #           },
+    #         },
     #       }
     #
     # @!attribute [rw] delivery_stream_name
@@ -4692,6 +5466,10 @@ module Aws::Firehose
     #   Describes an update for a destination in Splunk.
     #   @return [Types::SplunkDestinationUpdate]
     #
+    # @!attribute [rw] http_endpoint_destination_update
+    #   Describes an update to the specified HTTP endpoint destination.
+    #   @return [Types::HttpEndpointDestinationUpdate]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/firehose-2015-08-04/UpdateDestinationInput AWS API Documentation
     #
     class UpdateDestinationInput < Struct.new(
@@ -4702,7 +5480,9 @@ module Aws::Firehose
       :extended_s3_destination_update,
       :redshift_destination_update,
       :elasticsearch_destination_update,
-      :splunk_destination_update)
+      :splunk_destination_update,
+      :http_endpoint_destination_update)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4746,12 +5526,51 @@ module Aws::Firehose
     #
     # @!attribute [rw] role_arn
     #   The ARN of the IAM role that you want the delivery stream to use to
-    #   create endpoints in the destination VPC.
+    #   create endpoints in the destination VPC. You can use your existing
+    #   Kinesis Data Firehose delivery role or you can specify a new role.
+    #   In either case, make sure that the role trusts the Kinesis Data
+    #   Firehose service principal and that it grants the following
+    #   permissions:
+    #
+    #   * `ec2:DescribeVpcs`
+    #
+    #   * `ec2:DescribeVpcAttribute`
+    #
+    #   * `ec2:DescribeSubnets`
+    #
+    #   * `ec2:DescribeSecurityGroups`
+    #
+    #   * `ec2:DescribeNetworkInterfaces`
+    #
+    #   * `ec2:CreateNetworkInterface`
+    #
+    #   * `ec2:CreateNetworkInterfacePermission`
+    #
+    #   * `ec2:DeleteNetworkInterface`
+    #
+    #   If you revoke these permissions after you create the delivery
+    #   stream, Kinesis Data Firehose can't scale out by creating more ENIs
+    #   when necessary. You might therefore see a degradation in
+    #   performance.
     #   @return [String]
     #
     # @!attribute [rw] security_group_ids
     #   The IDs of the security groups that you want Kinesis Data Firehose
     #   to use when it creates ENIs in the VPC of the Amazon ES destination.
+    #   You can use the same security group that the Amazon ES domain uses
+    #   or different ones. If you specify different security groups here,
+    #   ensure that they allow outbound HTTPS traffic to the Amazon ES
+    #   domain's security group. Also ensure that the Amazon ES domain's
+    #   security group allows HTTPS traffic from the security groups
+    #   specified here. If you use the same security group for both your
+    #   delivery stream and the Amazon ES domain, make sure the security
+    #   group inbound rule allows HTTPS traffic. For more information about
+    #   security group rules, see [Security group rules][1] in the Amazon
+    #   VPC documentation.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/vpc/latest/userguide/VPC_SecurityGroups.html#SecurityGroupRules
     #   @return [Array<String>]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/firehose-2015-08-04/VpcConfiguration AWS API Documentation
@@ -4760,6 +5579,7 @@ module Aws::Firehose
       :subnet_ids,
       :role_arn,
       :security_group_ids)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4789,13 +5609,50 @@ module Aws::Firehose
     #   @return [Array<String>]
     #
     # @!attribute [rw] role_arn
-    #   The ARN of the IAM role that you want the delivery stream uses to
-    #   create endpoints in the destination VPC.
+    #   The ARN of the IAM role that the delivery stream uses to create
+    #   endpoints in the destination VPC. You can use your existing Kinesis
+    #   Data Firehose delivery role or you can specify a new role. In either
+    #   case, make sure that the role trusts the Kinesis Data Firehose
+    #   service principal and that it grants the following permissions:
+    #
+    #   * `ec2:DescribeVpcs`
+    #
+    #   * `ec2:DescribeVpcAttribute`
+    #
+    #   * `ec2:DescribeSubnets`
+    #
+    #   * `ec2:DescribeSecurityGroups`
+    #
+    #   * `ec2:DescribeNetworkInterfaces`
+    #
+    #   * `ec2:CreateNetworkInterface`
+    #
+    #   * `ec2:CreateNetworkInterfacePermission`
+    #
+    #   * `ec2:DeleteNetworkInterface`
+    #
+    #   If you revoke these permissions after you create the delivery
+    #   stream, Kinesis Data Firehose can't scale out by creating more ENIs
+    #   when necessary. You might therefore see a degradation in
+    #   performance.
     #   @return [String]
     #
     # @!attribute [rw] security_group_ids
     #   The IDs of the security groups that Kinesis Data Firehose uses when
-    #   it creates ENIs in the VPC of the Amazon ES destination.
+    #   it creates ENIs in the VPC of the Amazon ES destination. You can use
+    #   the same security group that the Amazon ES domain uses or different
+    #   ones. If you specify different security groups, ensure that they
+    #   allow outbound HTTPS traffic to the Amazon ES domain's security
+    #   group. Also ensure that the Amazon ES domain's security group
+    #   allows HTTPS traffic from the security groups specified here. If you
+    #   use the same security group for both your delivery stream and the
+    #   Amazon ES domain, make sure the security group inbound rule allows
+    #   HTTPS traffic. For more information about security group rules, see
+    #   [Security group rules][1] in the Amazon VPC documentation.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/vpc/latest/userguide/VPC_SecurityGroups.html#SecurityGroupRules
     #   @return [Array<String>]
     #
     # @!attribute [rw] vpc_id
@@ -4809,6 +5666,7 @@ module Aws::Firehose
       :role_arn,
       :security_group_ids,
       :vpc_id)
+      SENSITIVE = []
       include Aws::Structure
     end