aws-sdk-mailmanager 1.40.0 → 1.41.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ce28a6e96e8f71d0c481bad0f0d3efbef197db21e1dd40ca02b344f344763a84
-  data.tar.gz: d4d8a16f1aa7077f41b65022fedf6b0fb5b3321f6d69d85dc0f66ebe2eaca6ae
+  metadata.gz: 964536ba8007e5e8c4e12d372d4c324debafaee2c8be29045edccf5f7000821a
+  data.tar.gz: 4d4a8aaa612f803e6bfa89f2b7cba1fcc3faeb4c13221244917f68ea8723d564
 SHA512:
-  metadata.gz: 187e03b182b0ad1677246d6c6b0630cf54c09f85d69fc3c94d6cdb171860684a77d392c14c0c53250274c7ea5c7451170f8aab68f6e79c1c219bb978c1a04bc9
-  data.tar.gz: e5431b212f7419c8c849d97eda4325b3b9ba2b1be805b3696a480e551fd0039f4ac38dcf0383e48f3440d1db9f36a1357536808af307a25b4769209480b6bcb9
+  metadata.gz: 6ec4e3d0020b1ebf9a78cebb60f2d1942f3c4b34d8bb4109bde62482589fc96ad1e5fb5661052413ecaed505ab587fc729d009eb83e31baa8e03c3206e1a3fb1
+  data.tar.gz: 231b1124d523da6a1a89a48e6bfa3121b5cd28e4ab35d484525fe38824f7babbf54651231d0a6e1dec54bc854168bd4e61a952c1c982de9ef2d03a73f2926629

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.41.0 (2026-03-31)
+------------------
+
+* Feature - Amazon SES Mail Manager now supports optional TLS policy for accepting unencrypted connections and mTLS authentication for ingress endpoints with configurable trust stores. Two new rule actions are available, Bounce for sending non-delivery reports and Lambda invocation for custom email processing.
+
 1.40.0 (2026-03-18)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.40.0
+1.41.0

data/lib/aws-sdk-mailmanager/client.rb

@@ -769,6 +769,10 @@ module Aws::MailManager
     #   you to create an IPv4-only, Dual-Stack, or PrivateLink type of ingress
     #   point. If not specified, the default network type is IPv4-only.
     #
+    # @option params [String] :tls_policy
+    #   The Transport Layer Security (TLS) policy for the ingress point. The
+    #   FIPS value is only valid in US and Canada regions.
+    #
     # @option params [Array<Types::Tag>] :tags
     #   The tags used to organize, track, or control access for the resource.
     #   For example, \{ "tags": \{"key1":"value1", "key2":"value2"}
@@ -850,12 +854,19 @@ module Aws::MailManager
     #   resp = client.create_ingress_point({
     #     client_token: "IdempotencyToken",
     #     ingress_point_name: "IngressPointName", # required
-    #     type: "OPEN", # required, accepts OPEN, AUTH
+    #     type: "OPEN", # required, accepts OPEN, AUTH, MTLS
     #     rule_set_id: "RuleSetId", # required
     #     traffic_policy_id: "TrafficPolicyId", # required
     #     ingress_point_configuration: {
     #       smtp_password: "SmtpPassword",
     #       secret_arn: "SecretArn",
+    #       tls_auth_configuration: {
+    #         trust_store: {
+    #           ca_content: "CAContent", # required
+    #           crl_content: "CrlContent",
+    #           kms_key_arn: "KmsKeyArn",
+    #         },
+    #       },
     #     },
     #     network_configuration: {
     #       public_network_configuration: {
@@ -865,6 +876,7 @@ module Aws::MailManager
     #         vpc_endpoint_id: "VpcEndpointId", # required
     #       },
     #     },
+    #     tls_policy: "REQUIRED", # accepts REQUIRED, OPTIONAL, FIPS
     #     tags: [
     #       {
     #         key: "TagKey", # required
@@ -1007,6 +1019,7 @@ module Aws::MailManager
     #                   analyzer: "AnalyzerArn", # required
     #                   result_field: "ResultField", # required
     #                 },
+    #                 client_certificate_attribute: "CN", # accepts CN, SAN_RFC822_NAME, SAN_DNS_NAME, SAN_DIRECTORY_NAME, SAN_UNIFORM_RESOURCE_IDENTIFIER, SAN_IP_ADDRESS, SAN_REGISTERED_ID, SERIAL_NUMBER
     #               },
     #               operator: "EQUALS", # required, accepts EQUALS, NOT_EQUALS, STARTS_WITH, ENDS_WITH, CONTAINS
     #               values: ["RuleStringValue"], # required
@@ -1066,6 +1079,7 @@ module Aws::MailManager
     #                   analyzer: "AnalyzerArn", # required
     #                   result_field: "ResultField", # required
     #                 },
+    #                 client_certificate_attribute: "CN", # accepts CN, SAN_RFC822_NAME, SAN_DNS_NAME, SAN_DIRECTORY_NAME, SAN_UNIFORM_RESOURCE_IDENTIFIER, SAN_IP_ADDRESS, SAN_REGISTERED_ID, SERIAL_NUMBER
     #               },
     #               operator: "EQUALS", # required, accepts EQUALS, NOT_EQUALS, STARTS_WITH, ENDS_WITH, CONTAINS
     #               values: ["RuleStringValue"], # required
@@ -1150,6 +1164,22 @@ module Aws::MailManager
     #               encoding: "UTF-8", # accepts UTF-8, BASE64
     #               payload_type: "HEADERS", # accepts HEADERS, CONTENT
     #             },
+    #             bounce: {
+    #               action_failure_policy: "CONTINUE", # accepts CONTINUE, DROP
+    #               role_arn: "IamRoleArn", # required
+    #               sender: "EmailAddress", # required
+    #               status_code: "StatusCode", # required
+    #               smtp_reply_code: "SmtpReplyCode", # required
+    #               diagnostic_message: "DiagnosticMessage", # required
+    #               message: "BounceMessage",
+    #             },
+    #             invoke_lambda: {
+    #               action_failure_policy: "CONTINUE", # accepts CONTINUE, DROP
+    #               function_arn: "LambdaFunctionArn", # required
+    #               invocation_type: "EVENT", # required, accepts EVENT, REQUEST_RESPONSE
+    #               role_arn: "IamRoleArn", # required
+    #               retry_time_minutes: 1,
+    #             },
     #           },
     #         ],
     #       },
@@ -1993,6 +2023,10 @@ module Aws::MailManager
     # @option params [required, String] :ingress_point_id
     #   The identifier of an ingress endpoint.
     #
+    # @option params [String] :include_trust_store_contents
+    #   Whether to include the trust store contents in the response. Use
+    #   INCLUDE to retrieve trust store certificate and CRL contents.
+    #
     # @return [Types::GetIngressPointResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::GetIngressPointResponse#ingress_point_id #ingress_point_id} => String
@@ -2005,6 +2039,7 @@ module Aws::MailManager
     #   * {Types::GetIngressPointResponse#traffic_policy_id #traffic_policy_id} => String
     #   * {Types::GetIngressPointResponse#ingress_point_auth_configuration #ingress_point_auth_configuration} => Types::IngressPointAuthConfiguration
     #   * {Types::GetIngressPointResponse#network_configuration #network_configuration} => Types::NetworkConfiguration
+    #   * {Types::GetIngressPointResponse#tls_policy #tls_policy} => String
     #   * {Types::GetIngressPointResponse#created_timestamp #created_timestamp} => Time
     #   * {Types::GetIngressPointResponse#last_updated_timestamp #last_updated_timestamp} => Time
     #
@@ -2048,6 +2083,7 @@ module Aws::MailManager
     #
     #   resp = client.get_ingress_point({
     #     ingress_point_id: "IngressPointId", # required
+    #     include_trust_store_contents: "EXCLUDE", # accepts EXCLUDE, INCLUDE
     #   })
     #
     # @example Response structure
@@ -2055,8 +2091,8 @@ module Aws::MailManager
     #   resp.ingress_point_id #=> String
     #   resp.ingress_point_name #=> String
     #   resp.ingress_point_arn #=> String
-    #   resp.status #=> String, one of "PROVISIONING", "DEPROVISIONING", "UPDATING", "ACTIVE", "CLOSED", "FAILED"
-    #   resp.type #=> String, one of "OPEN", "AUTH"
+    #   resp.status #=> String, one of "PROVISIONING", "DEPROVISIONING", "UPDATING", "ACTIVE", "CLOSED", "FAILED", "ASSOCIATED_VPC_ENDPOINT_DOES_NOT_EXIST"
+    #   resp.type #=> String, one of "OPEN", "AUTH", "MTLS"
     #   resp.a_record #=> String
     #   resp.rule_set_id #=> String
     #   resp.traffic_policy_id #=> String
@@ -2064,8 +2100,12 @@ module Aws::MailManager
     #   resp.ingress_point_auth_configuration.ingress_point_password_configuration.previous_smtp_password_version #=> String
     #   resp.ingress_point_auth_configuration.ingress_point_password_configuration.previous_smtp_password_expiry_timestamp #=> Time
     #   resp.ingress_point_auth_configuration.secret_arn #=> String
+    #   resp.ingress_point_auth_configuration.tls_auth_configuration.trust_store.ca_content #=> String
+    #   resp.ingress_point_auth_configuration.tls_auth_configuration.trust_store.crl_content #=> String
+    #   resp.ingress_point_auth_configuration.tls_auth_configuration.trust_store.kms_key_arn #=> String
     #   resp.network_configuration.public_network_configuration.ip_type #=> String, one of "IPV4", "DUAL_STACK"
     #   resp.network_configuration.private_network_configuration.vpc_endpoint_id #=> String
+    #   resp.tls_policy #=> String, one of "REQUIRED", "OPTIONAL", "FIPS"
     #   resp.created_timestamp #=> Time
     #   resp.last_updated_timestamp #=> Time
     #
@@ -2196,6 +2236,7 @@ module Aws::MailManager
     #   resp.rules[0].conditions[0].string_expression.evaluate.mime_header_attribute #=> String
     #   resp.rules[0].conditions[0].string_expression.evaluate.analysis.analyzer #=> String
     #   resp.rules[0].conditions[0].string_expression.evaluate.analysis.result_field #=> String
+    #   resp.rules[0].conditions[0].string_expression.evaluate.client_certificate_attribute #=> String, one of "CN", "SAN_RFC822_NAME", "SAN_DNS_NAME", "SAN_DIRECTORY_NAME", "SAN_UNIFORM_RESOURCE_IDENTIFIER", "SAN_IP_ADDRESS", "SAN_REGISTERED_ID", "SERIAL_NUMBER"
     #   resp.rules[0].conditions[0].string_expression.operator #=> String, one of "EQUALS", "NOT_EQUALS", "STARTS_WITH", "ENDS_WITH", "CONTAINS"
     #   resp.rules[0].conditions[0].string_expression.values #=> Array
     #   resp.rules[0].conditions[0].string_expression.values[0] #=> String
@@ -2227,6 +2268,7 @@ module Aws::MailManager
     #   resp.rules[0].unless[0].string_expression.evaluate.mime_header_attribute #=> String
     #   resp.rules[0].unless[0].string_expression.evaluate.analysis.analyzer #=> String
     #   resp.rules[0].unless[0].string_expression.evaluate.analysis.result_field #=> String
+    #   resp.rules[0].unless[0].string_expression.evaluate.client_certificate_attribute #=> String, one of "CN", "SAN_RFC822_NAME", "SAN_DNS_NAME", "SAN_DIRECTORY_NAME", "SAN_UNIFORM_RESOURCE_IDENTIFIER", "SAN_IP_ADDRESS", "SAN_REGISTERED_ID", "SERIAL_NUMBER"
     #   resp.rules[0].unless[0].string_expression.operator #=> String, one of "EQUALS", "NOT_EQUALS", "STARTS_WITH", "ENDS_WITH", "CONTAINS"
     #   resp.rules[0].unless[0].string_expression.values #=> Array
     #   resp.rules[0].unless[0].string_expression.values[0] #=> String
@@ -2275,6 +2317,18 @@ module Aws::MailManager
     #   resp.rules[0].actions[0].publish_to_sns.role_arn #=> String
     #   resp.rules[0].actions[0].publish_to_sns.encoding #=> String, one of "UTF-8", "BASE64"
     #   resp.rules[0].actions[0].publish_to_sns.payload_type #=> String, one of "HEADERS", "CONTENT"
+    #   resp.rules[0].actions[0].bounce.action_failure_policy #=> String, one of "CONTINUE", "DROP"
+    #   resp.rules[0].actions[0].bounce.role_arn #=> String
+    #   resp.rules[0].actions[0].bounce.sender #=> String
+    #   resp.rules[0].actions[0].bounce.status_code #=> String
+    #   resp.rules[0].actions[0].bounce.smtp_reply_code #=> String
+    #   resp.rules[0].actions[0].bounce.diagnostic_message #=> String
+    #   resp.rules[0].actions[0].bounce.message #=> String
+    #   resp.rules[0].actions[0].invoke_lambda.action_failure_policy #=> String, one of "CONTINUE", "DROP"
+    #   resp.rules[0].actions[0].invoke_lambda.function_arn #=> String
+    #   resp.rules[0].actions[0].invoke_lambda.invocation_type #=> String, one of "EVENT", "REQUEST_RESPONSE"
+    #   resp.rules[0].actions[0].invoke_lambda.role_arn #=> String
+    #   resp.rules[0].actions[0].invoke_lambda.retry_time_minutes #=> Integer
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/mailmanager-2023-10-17/GetRuleSet AWS API Documentation
     #
@@ -2800,8 +2854,8 @@ module Aws::MailManager
     #   resp.ingress_points #=> Array
     #   resp.ingress_points[0].ingress_point_name #=> String
     #   resp.ingress_points[0].ingress_point_id #=> String
-    #   resp.ingress_points[0].status #=> String, one of "PROVISIONING", "DEPROVISIONING", "UPDATING", "ACTIVE", "CLOSED", "FAILED"
-    #   resp.ingress_points[0].type #=> String, one of "OPEN", "AUTH"
+    #   resp.ingress_points[0].status #=> String, one of "PROVISIONING", "DEPROVISIONING", "UPDATING", "ACTIVE", "CLOSED", "FAILED", "ASSOCIATED_VPC_ENDPOINT_DOES_NOT_EXIST"
+    #   resp.ingress_points[0].type #=> String, one of "OPEN", "AUTH", "MTLS"
     #   resp.ingress_points[0].a_record #=> String
     #   resp.next_token #=> String
     #
@@ -3471,6 +3525,11 @@ module Aws::MailManager
     #   If you choose an Authenticated ingress endpoint, you must configure
     #   either an SMTP password or a secret ARN.
     #
+    # @option params [String] :tls_policy
+    #   The Transport Layer Security (TLS) policy for the ingress point. Valid
+    #   values are REQUIRED, OPTIONAL. Only ingress endpoints using REQUIRED
+    #   or OPTIONAL as TlsPolicy can be updated.
+    #
     # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
     #
     #
@@ -3534,7 +3593,15 @@ module Aws::MailManager
     #     ingress_point_configuration: {
     #       smtp_password: "SmtpPassword",
     #       secret_arn: "SecretArn",
+    #       tls_auth_configuration: {
+    #         trust_store: {
+    #           ca_content: "CAContent", # required
+    #           crl_content: "CrlContent",
+    #           kms_key_arn: "KmsKeyArn",
+    #         },
+    #       },
     #     },
+    #     tls_policy: "REQUIRED", # accepts REQUIRED, OPTIONAL, FIPS
     #   })
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/mailmanager-2023-10-17/UpdateIngressPoint AWS API Documentation
@@ -3635,6 +3702,7 @@ module Aws::MailManager
     #                   analyzer: "AnalyzerArn", # required
     #                   result_field: "ResultField", # required
     #                 },
+    #                 client_certificate_attribute: "CN", # accepts CN, SAN_RFC822_NAME, SAN_DNS_NAME, SAN_DIRECTORY_NAME, SAN_UNIFORM_RESOURCE_IDENTIFIER, SAN_IP_ADDRESS, SAN_REGISTERED_ID, SERIAL_NUMBER
     #               },
     #               operator: "EQUALS", # required, accepts EQUALS, NOT_EQUALS, STARTS_WITH, ENDS_WITH, CONTAINS
     #               values: ["RuleStringValue"], # required
@@ -3694,6 +3762,7 @@ module Aws::MailManager
     #                   analyzer: "AnalyzerArn", # required
     #                   result_field: "ResultField", # required
     #                 },
+    #                 client_certificate_attribute: "CN", # accepts CN, SAN_RFC822_NAME, SAN_DNS_NAME, SAN_DIRECTORY_NAME, SAN_UNIFORM_RESOURCE_IDENTIFIER, SAN_IP_ADDRESS, SAN_REGISTERED_ID, SERIAL_NUMBER
     #               },
     #               operator: "EQUALS", # required, accepts EQUALS, NOT_EQUALS, STARTS_WITH, ENDS_WITH, CONTAINS
     #               values: ["RuleStringValue"], # required
@@ -3778,6 +3847,22 @@ module Aws::MailManager
     #               encoding: "UTF-8", # accepts UTF-8, BASE64
     #               payload_type: "HEADERS", # accepts HEADERS, CONTENT
     #             },
+    #             bounce: {
+    #               action_failure_policy: "CONTINUE", # accepts CONTINUE, DROP
+    #               role_arn: "IamRoleArn", # required
+    #               sender: "EmailAddress", # required
+    #               status_code: "StatusCode", # required
+    #               smtp_reply_code: "SmtpReplyCode", # required
+    #               diagnostic_message: "DiagnosticMessage", # required
+    #               message: "BounceMessage",
+    #             },
+    #             invoke_lambda: {
+    #               action_failure_policy: "CONTINUE", # accepts CONTINUE, DROP
+    #               function_arn: "LambdaFunctionArn", # required
+    #               invocation_type: "EVENT", # required, accepts EVENT, REQUEST_RESPONSE
+    #               role_arn: "IamRoleArn", # required
+    #               retry_time_minutes: 1,
+    #             },
     #           },
     #         ],
     #       },
@@ -3957,7 +4042,7 @@ module Aws::MailManager
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-mailmanager'
-      context[:gem_version] = '1.40.0'
+      context[:gem_version] = '1.41.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-mailmanager/client_api.rb

@@ -60,6 +60,9 @@ module Aws::MailManager
     ArchivedMessageId = Shapes::StringShape.new(name: 'ArchivedMessageId')
     ArchivesList = Shapes::ListShape.new(name: 'ArchivesList')
     Boolean = Shapes::BooleanShape.new(name: 'Boolean')
+    BounceAction = Shapes::StructureShape.new(name: 'BounceAction')
+    BounceMessage = Shapes::StringShape.new(name: 'BounceMessage')
+    CAContent = Shapes::StringShape.new(name: 'CAContent')
     ConflictException = Shapes::StructureShape.new(name: 'ConflictException')
     CreateAddonInstanceRequest = Shapes::StructureShape.new(name: 'CreateAddonInstanceRequest')
     CreateAddonInstanceResponse = Shapes::StructureShape.new(name: 'CreateAddonInstanceResponse')
@@ -79,6 +82,7 @@ module Aws::MailManager
     CreateRuleSetResponse = Shapes::StructureShape.new(name: 'CreateRuleSetResponse')
     CreateTrafficPolicyRequest = Shapes::StructureShape.new(name: 'CreateTrafficPolicyRequest')
     CreateTrafficPolicyResponse = Shapes::StructureShape.new(name: 'CreateTrafficPolicyResponse')
+    CrlContent = Shapes::StringShape.new(name: 'CrlContent')
     DeleteAddonInstanceRequest = Shapes::StructureShape.new(name: 'DeleteAddonInstanceRequest')
     DeleteAddonInstanceResponse = Shapes::StructureShape.new(name: 'DeleteAddonInstanceResponse')
     DeleteAddonSubscriptionRequest = Shapes::StructureShape.new(name: 'DeleteAddonSubscriptionRequest')
@@ -99,6 +103,7 @@ module Aws::MailManager
     DeliverToQBusinessAction = Shapes::StructureShape.new(name: 'DeliverToQBusinessAction')
     DeregisterMemberFromAddressListRequest = Shapes::StructureShape.new(name: 'DeregisterMemberFromAddressListRequest')
     DeregisterMemberFromAddressListResponse = Shapes::StructureShape.new(name: 'DeregisterMemberFromAddressListResponse')
+    DiagnosticMessage = Shapes::StringShape.new(name: 'DiagnosticMessage')
     Double = Shapes::FloatShape.new(name: 'Double')
     DropAction = Shapes::StructureShape.new(name: 'DropAction')
     EmailAddress = Shapes::StringShape.new(name: 'EmailAddress')
@@ -188,6 +193,7 @@ module Aws::MailManager
     IngressTlsProtocolOperator = Shapes::StringShape.new(name: 'IngressTlsProtocolOperator')
     IngressTlsProtocolToEvaluate = Shapes::UnionShape.new(name: 'IngressTlsProtocolToEvaluate')
     Integer = Shapes::IntegerShape.new(name: 'Integer')
+    InvokeLambdaAction = Shapes::StructureShape.new(name: 'InvokeLambdaAction')
     IpType = Shapes::StringShape.new(name: 'IpType')
     Ipv4Cidr = Shapes::StringShape.new(name: 'Ipv4Cidr')
     Ipv4Cidrs = Shapes::ListShape.new(name: 'Ipv4Cidrs')
@@ -198,6 +204,9 @@ module Aws::MailManager
     JobName = Shapes::StringShape.new(name: 'JobName')
     KmsKeyArn = Shapes::StringShape.new(name: 'KmsKeyArn')
     KmsKeyId = Shapes::StringShape.new(name: 'KmsKeyId')
+    LambdaFunctionArn = Shapes::StringShape.new(name: 'LambdaFunctionArn')
+    LambdaInvocationType = Shapes::StringShape.new(name: 'LambdaInvocationType')
+    LambdaRetryTimeMinutes = Shapes::IntegerShape.new(name: 'LambdaRetryTimeMinutes')
     ListAddonInstancesRequest = Shapes::StructureShape.new(name: 'ListAddonInstancesRequest')
     ListAddonInstancesResponse = Shapes::StructureShape.new(name: 'ListAddonInstancesResponse')
     ListAddonSubscriptionsRequest = Shapes::StructureShape.new(name: 'ListAddonSubscriptionsRequest')
@@ -270,6 +279,7 @@ module Aws::MailManager
     RuleBooleanExpression = Shapes::StructureShape.new(name: 'RuleBooleanExpression')
     RuleBooleanOperator = Shapes::StringShape.new(name: 'RuleBooleanOperator')
     RuleBooleanToEvaluate = Shapes::UnionShape.new(name: 'RuleBooleanToEvaluate')
+    RuleClientCertificateAttribute = Shapes::StringShape.new(name: 'RuleClientCertificateAttribute')
     RuleCondition = Shapes::UnionShape.new(name: 'RuleCondition')
     RuleConditions = Shapes::ListShape.new(name: 'RuleConditions')
     RuleDmarcExpression = Shapes::StructureShape.new(name: 'RuleDmarcExpression')
@@ -325,6 +335,7 @@ module Aws::MailManager
     SenderIpAddress = Shapes::StringShape.new(name: 'SenderIpAddress')
     ServiceQuotaExceededException = Shapes::StructureShape.new(name: 'ServiceQuotaExceededException')
     SmtpPassword = Shapes::StringShape.new(name: 'SmtpPassword')
+    SmtpReplyCode = Shapes::StringShape.new(name: 'SmtpReplyCode')
     SnsAction = Shapes::StructureShape.new(name: 'SnsAction')
     SnsNotificationEncoding = Shapes::StringShape.new(name: 'SnsNotificationEncoding')
     SnsNotificationPayloadType = Shapes::StringShape.new(name: 'SnsNotificationPayloadType')
@@ -335,6 +346,7 @@ module Aws::MailManager
     StartArchiveExportResponse = Shapes::StructureShape.new(name: 'StartArchiveExportResponse')
     StartArchiveSearchRequest = Shapes::StructureShape.new(name: 'StartArchiveSearchRequest')
     StartArchiveSearchResponse = Shapes::StructureShape.new(name: 'StartArchiveSearchResponse')
+    StatusCode = Shapes::StringShape.new(name: 'StatusCode')
     StopAddressListImportJobRequest = Shapes::StructureShape.new(name: 'StopAddressListImportJobRequest')
     StopAddressListImportJobResponse = Shapes::StructureShape.new(name: 'StopAddressListImportJobResponse')
     StopArchiveExportRequest = Shapes::StructureShape.new(name: 'StopArchiveExportRequest')
@@ -355,11 +367,15 @@ module Aws::MailManager
     TaggableResourceArn = Shapes::StringShape.new(name: 'TaggableResourceArn')
     ThrottlingException = Shapes::StructureShape.new(name: 'ThrottlingException')
     Timestamp = Shapes::TimestampShape.new(name: 'Timestamp')
+    TlsAuthConfiguration = Shapes::StructureShape.new(name: 'TlsAuthConfiguration')
+    TlsPolicy = Shapes::StringShape.new(name: 'TlsPolicy')
     TrafficPolicy = Shapes::StructureShape.new(name: 'TrafficPolicy')
     TrafficPolicyArn = Shapes::StringShape.new(name: 'TrafficPolicyArn')
     TrafficPolicyId = Shapes::StringShape.new(name: 'TrafficPolicyId')
     TrafficPolicyList = Shapes::ListShape.new(name: 'TrafficPolicyList')
     TrafficPolicyName = Shapes::StringShape.new(name: 'TrafficPolicyName')
+    TrustStore = Shapes::StructureShape.new(name: 'TrustStore')
+    TrustStoreResponseOption = Shapes::StringShape.new(name: 'TrustStoreResponseOption')
     UntagResourceRequest = Shapes::StructureShape.new(name: 'UntagResourceRequest')
     UntagResourceResponse = Shapes::StructureShape.new(name: 'UntagResourceResponse')
     UpdateArchiveRequest = Shapes::StructureShape.new(name: 'UpdateArchiveRequest')
@@ -468,6 +484,15 @@ module Aws::MailManager
 
     ArchivesList.member = Shapes::ShapeRef.new(shape: Archive)
 
+    BounceAction.add_member(:action_failure_policy, Shapes::ShapeRef.new(shape: ActionFailurePolicy, location_name: "ActionFailurePolicy"))
+    BounceAction.add_member(:role_arn, Shapes::ShapeRef.new(shape: IamRoleArn, required: true, location_name: "RoleArn"))
+    BounceAction.add_member(:sender, Shapes::ShapeRef.new(shape: EmailAddress, required: true, location_name: "Sender"))
+    BounceAction.add_member(:status_code, Shapes::ShapeRef.new(shape: StatusCode, required: true, location_name: "StatusCode"))
+    BounceAction.add_member(:smtp_reply_code, Shapes::ShapeRef.new(shape: SmtpReplyCode, required: true, location_name: "SmtpReplyCode"))
+    BounceAction.add_member(:diagnostic_message, Shapes::ShapeRef.new(shape: DiagnosticMessage, required: true, location_name: "DiagnosticMessage"))
+    BounceAction.add_member(:message, Shapes::ShapeRef.new(shape: BounceMessage, location_name: "Message"))
+    BounceAction.struct_class = Types::BounceAction
+
     ConflictException.add_member(:message, Shapes::ShapeRef.new(shape: ErrorMessage, location_name: "Message"))
     ConflictException.struct_class = Types::ConflictException
 
@@ -522,6 +547,7 @@ module Aws::MailManager
     CreateIngressPointRequest.add_member(:traffic_policy_id, Shapes::ShapeRef.new(shape: TrafficPolicyId, required: true, location_name: "TrafficPolicyId"))
     CreateIngressPointRequest.add_member(:ingress_point_configuration, Shapes::ShapeRef.new(shape: IngressPointConfiguration, location_name: "IngressPointConfiguration"))
     CreateIngressPointRequest.add_member(:network_configuration, Shapes::ShapeRef.new(shape: NetworkConfiguration, location_name: "NetworkConfiguration"))
+    CreateIngressPointRequest.add_member(:tls_policy, Shapes::ShapeRef.new(shape: TlsPolicy, location_name: "TlsPolicy"))
     CreateIngressPointRequest.add_member(:tags, Shapes::ShapeRef.new(shape: TagList, location_name: "Tags"))
     CreateIngressPointRequest.struct_class = Types::CreateIngressPointRequest
 
@@ -744,6 +770,7 @@ module Aws::MailManager
     GetArchiveSearchResultsResponse.struct_class = Types::GetArchiveSearchResultsResponse
 
     GetIngressPointRequest.add_member(:ingress_point_id, Shapes::ShapeRef.new(shape: IngressPointId, required: true, location_name: "IngressPointId"))
+    GetIngressPointRequest.add_member(:include_trust_store_contents, Shapes::ShapeRef.new(shape: TrustStoreResponseOption, location_name: "IncludeTrustStoreContents"))
     GetIngressPointRequest.struct_class = Types::GetIngressPointRequest
 
     GetIngressPointResponse.add_member(:ingress_point_id, Shapes::ShapeRef.new(shape: IngressPointId, required: true, location_name: "IngressPointId"))
@@ -756,6 +783,7 @@ module Aws::MailManager
     GetIngressPointResponse.add_member(:traffic_policy_id, Shapes::ShapeRef.new(shape: TrafficPolicyId, location_name: "TrafficPolicyId"))
     GetIngressPointResponse.add_member(:ingress_point_auth_configuration, Shapes::ShapeRef.new(shape: IngressPointAuthConfiguration, location_name: "IngressPointAuthConfiguration"))
     GetIngressPointResponse.add_member(:network_configuration, Shapes::ShapeRef.new(shape: NetworkConfiguration, location_name: "NetworkConfiguration"))
+    GetIngressPointResponse.add_member(:tls_policy, Shapes::ShapeRef.new(shape: TlsPolicy, location_name: "TlsPolicy"))
     GetIngressPointResponse.add_member(:created_timestamp, Shapes::ShapeRef.new(shape: Timestamp, location_name: "CreatedTimestamp"))
     GetIngressPointResponse.add_member(:last_updated_timestamp, Shapes::ShapeRef.new(shape: Timestamp, location_name: "LastUpdatedTimestamp"))
     GetIngressPointResponse.struct_class = Types::GetIngressPointResponse
@@ -877,13 +905,16 @@ module Aws::MailManager
 
     IngressPointAuthConfiguration.add_member(:ingress_point_password_configuration, Shapes::ShapeRef.new(shape: IngressPointPasswordConfiguration, location_name: "IngressPointPasswordConfiguration"))
     IngressPointAuthConfiguration.add_member(:secret_arn, Shapes::ShapeRef.new(shape: SecretArn, location_name: "SecretArn"))
+    IngressPointAuthConfiguration.add_member(:tls_auth_configuration, Shapes::ShapeRef.new(shape: TlsAuthConfiguration, location_name: "TlsAuthConfiguration"))
     IngressPointAuthConfiguration.struct_class = Types::IngressPointAuthConfiguration
 
     IngressPointConfiguration.add_member(:smtp_password, Shapes::ShapeRef.new(shape: SmtpPassword, location_name: "SmtpPassword"))
     IngressPointConfiguration.add_member(:secret_arn, Shapes::ShapeRef.new(shape: SecretArn, location_name: "SecretArn"))
+    IngressPointConfiguration.add_member(:tls_auth_configuration, Shapes::ShapeRef.new(shape: TlsAuthConfiguration, location_name: "TlsAuthConfiguration"))
     IngressPointConfiguration.add_member(:unknown, Shapes::ShapeRef.new(shape: nil, location_name: 'unknown'))
     IngressPointConfiguration.add_member_subclass(:smtp_password, Types::IngressPointConfiguration::SmtpPassword)
     IngressPointConfiguration.add_member_subclass(:secret_arn, Types::IngressPointConfiguration::SecretArn)
+    IngressPointConfiguration.add_member_subclass(:tls_auth_configuration, Types::IngressPointConfiguration::TlsAuthConfiguration)
     IngressPointConfiguration.add_member_subclass(:unknown, Types::IngressPointConfiguration::Unknown)
     IngressPointConfiguration.struct_class = Types::IngressPointConfiguration
 
@@ -918,6 +949,13 @@ module Aws::MailManager
     IngressTlsProtocolToEvaluate.add_member_subclass(:unknown, Types::IngressTlsProtocolToEvaluate::Unknown)
     IngressTlsProtocolToEvaluate.struct_class = Types::IngressTlsProtocolToEvaluate
 
+    InvokeLambdaAction.add_member(:action_failure_policy, Shapes::ShapeRef.new(shape: ActionFailurePolicy, location_name: "ActionFailurePolicy"))
+    InvokeLambdaAction.add_member(:function_arn, Shapes::ShapeRef.new(shape: LambdaFunctionArn, required: true, location_name: "FunctionArn"))
+    InvokeLambdaAction.add_member(:invocation_type, Shapes::ShapeRef.new(shape: LambdaInvocationType, required: true, location_name: "InvocationType"))
+    InvokeLambdaAction.add_member(:role_arn, Shapes::ShapeRef.new(shape: IamRoleArn, required: true, location_name: "RoleArn"))
+    InvokeLambdaAction.add_member(:retry_time_minutes, Shapes::ShapeRef.new(shape: LambdaRetryTimeMinutes, location_name: "RetryTimeMinutes"))
+    InvokeLambdaAction.struct_class = Types::InvokeLambdaAction
+
     Ipv4Cidrs.member = Shapes::ShapeRef.new(shape: Ipv4Cidr)
 
     Ipv6Cidrs.member = Shapes::ShapeRef.new(shape: Ipv6Cidr)
@@ -1160,6 +1198,8 @@ module Aws::MailManager
     RuleAction.add_member(:deliver_to_mailbox, Shapes::ShapeRef.new(shape: DeliverToMailboxAction, location_name: "DeliverToMailbox"))
     RuleAction.add_member(:deliver_to_q_business, Shapes::ShapeRef.new(shape: DeliverToQBusinessAction, location_name: "DeliverToQBusiness"))
     RuleAction.add_member(:publish_to_sns, Shapes::ShapeRef.new(shape: SnsAction, location_name: "PublishToSns"))
+    RuleAction.add_member(:bounce, Shapes::ShapeRef.new(shape: BounceAction, location_name: "Bounce"))
+    RuleAction.add_member(:invoke_lambda, Shapes::ShapeRef.new(shape: InvokeLambdaAction, location_name: "InvokeLambda"))
     RuleAction.add_member(:unknown, Shapes::ShapeRef.new(shape: nil, location_name: 'unknown'))
     RuleAction.add_member_subclass(:drop, Types::RuleAction::Drop)
     RuleAction.add_member_subclass(:relay, Types::RuleAction::Relay)
@@ -1171,6 +1211,8 @@ module Aws::MailManager
     RuleAction.add_member_subclass(:deliver_to_mailbox, Types::RuleAction::DeliverToMailbox)
     RuleAction.add_member_subclass(:deliver_to_q_business, Types::RuleAction::DeliverToQBusiness)
     RuleAction.add_member_subclass(:publish_to_sns, Types::RuleAction::PublishToSns)
+    RuleAction.add_member_subclass(:bounce, Types::RuleAction::Bounce)
+    RuleAction.add_member_subclass(:invoke_lambda, Types::RuleAction::InvokeLambda)
     RuleAction.add_member_subclass(:unknown, Types::RuleAction::Unknown)
     RuleAction.struct_class = Types::RuleAction
 
@@ -1261,10 +1303,12 @@ module Aws::MailManager
     RuleStringToEvaluate.add_member(:attribute, Shapes::ShapeRef.new(shape: RuleStringEmailAttribute, location_name: "Attribute"))
     RuleStringToEvaluate.add_member(:mime_header_attribute, Shapes::ShapeRef.new(shape: MimeHeaderAttribute, location_name: "MimeHeaderAttribute"))
     RuleStringToEvaluate.add_member(:analysis, Shapes::ShapeRef.new(shape: Analysis, location_name: "Analysis"))
+    RuleStringToEvaluate.add_member(:client_certificate_attribute, Shapes::ShapeRef.new(shape: RuleClientCertificateAttribute, location_name: "ClientCertificateAttribute"))
     RuleStringToEvaluate.add_member(:unknown, Shapes::ShapeRef.new(shape: nil, location_name: 'unknown'))
     RuleStringToEvaluate.add_member_subclass(:attribute, Types::RuleStringToEvaluate::Attribute)
     RuleStringToEvaluate.add_member_subclass(:mime_header_attribute, Types::RuleStringToEvaluate::MimeHeaderAttribute)
     RuleStringToEvaluate.add_member_subclass(:analysis, Types::RuleStringToEvaluate::Analysis)
+    RuleStringToEvaluate.add_member_subclass(:client_certificate_attribute, Types::RuleStringToEvaluate::ClientCertificateAttribute)
     RuleStringToEvaluate.add_member_subclass(:unknown, Types::RuleStringToEvaluate::Unknown)
     RuleStringToEvaluate.struct_class = Types::RuleStringToEvaluate
 
@@ -1390,6 +1434,9 @@ module Aws::MailManager
     ThrottlingException.add_member(:message, Shapes::ShapeRef.new(shape: ErrorMessage, location_name: "Message"))
     ThrottlingException.struct_class = Types::ThrottlingException
 
+    TlsAuthConfiguration.add_member(:trust_store, Shapes::ShapeRef.new(shape: TrustStore, location_name: "TrustStore"))
+    TlsAuthConfiguration.struct_class = Types::TlsAuthConfiguration
+
     TrafficPolicy.add_member(:traffic_policy_name, Shapes::ShapeRef.new(shape: TrafficPolicyName, required: true, location_name: "TrafficPolicyName"))
     TrafficPolicy.add_member(:traffic_policy_id, Shapes::ShapeRef.new(shape: TrafficPolicyId, required: true, location_name: "TrafficPolicyId"))
     TrafficPolicy.add_member(:default_action, Shapes::ShapeRef.new(shape: AcceptAction, required: true, location_name: "DefaultAction"))
@@ -1397,6 +1444,11 @@ module Aws::MailManager
 
     TrafficPolicyList.member = Shapes::ShapeRef.new(shape: TrafficPolicy)
 
+    TrustStore.add_member(:ca_content, Shapes::ShapeRef.new(shape: CAContent, required: true, location_name: "CAContent"))
+    TrustStore.add_member(:crl_content, Shapes::ShapeRef.new(shape: CrlContent, location_name: "CrlContent"))
+    TrustStore.add_member(:kms_key_arn, Shapes::ShapeRef.new(shape: KmsKeyArn, location_name: "KmsKeyArn"))
+    TrustStore.struct_class = Types::TrustStore
+
     UntagResourceRequest.add_member(:resource_arn, Shapes::ShapeRef.new(shape: TaggableResourceArn, required: true, location_name: "ResourceArn"))
     UntagResourceRequest.add_member(:tag_keys, Shapes::ShapeRef.new(shape: TagKeyList, required: true, location_name: "TagKeys"))
     UntagResourceRequest.struct_class = Types::UntagResourceRequest
@@ -1416,6 +1468,7 @@ module Aws::MailManager
     UpdateIngressPointRequest.add_member(:rule_set_id, Shapes::ShapeRef.new(shape: RuleSetId, location_name: "RuleSetId"))
     UpdateIngressPointRequest.add_member(:traffic_policy_id, Shapes::ShapeRef.new(shape: TrafficPolicyId, location_name: "TrafficPolicyId"))
     UpdateIngressPointRequest.add_member(:ingress_point_configuration, Shapes::ShapeRef.new(shape: IngressPointConfiguration, location_name: "IngressPointConfiguration"))
+    UpdateIngressPointRequest.add_member(:tls_policy, Shapes::ShapeRef.new(shape: TlsPolicy, location_name: "TlsPolicy"))
     UpdateIngressPointRequest.struct_class = Types::UpdateIngressPointRequest
 
     UpdateIngressPointResponse.struct_class = Types::UpdateIngressPointResponse
@@ -1490,6 +1543,7 @@ module Aws::MailManager
         o.errors << Shapes::ShapeRef.new(shape: ValidationException)
         o.errors << Shapes::ShapeRef.new(shape: ServiceQuotaExceededException)
         o.errors << Shapes::ShapeRef.new(shape: ConflictException)
+        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
       end)
 
       api.add_operation(:create_address_list, Seahorse::Model::Operation.new.tap do |o|
@@ -1600,6 +1654,7 @@ module Aws::MailManager
         o.http_request_uri = "/"
         o.input = Shapes::ShapeRef.new(shape: DeleteAddressListRequest)
         o.output = Shapes::ShapeRef.new(shape: DeleteAddressListResponse)
+        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
         o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
         o.errors << Shapes::ShapeRef.new(shape: ConflictException)
         o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
@@ -1668,6 +1723,7 @@ module Aws::MailManager
         o.output = Shapes::ShapeRef.new(shape: DeregisterMemberFromAddressListResponse)
         o.errors << Shapes::ShapeRef.new(shape: ValidationException)
         o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
+        o.errors << Shapes::ShapeRef.new(shape: ConflictException)
         o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
         o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
       end)
@@ -2051,6 +2107,7 @@ module Aws::MailManager
         o.errors << Shapes::ShapeRef.new(shape: ValidationException)
         o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
         o.errors << Shapes::ShapeRef.new(shape: ServiceQuotaExceededException)
+        o.errors << Shapes::ShapeRef.new(shape: ConflictException)
         o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
         o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
       end)

data/lib/aws-sdk-mailmanager/types.rb

@@ -399,6 +399,57 @@ module Aws::MailManager
       class Unknown < ArchiveStringToEvaluate; end
     end
 
+    # The action to send a bounce response for the email. When executed,
+    # this action generates a non-delivery report (bounce) back to the
+    # sender.
+    #
+    # @!attribute [rw] action_failure_policy
+    #   A policy that states what to do in the case of failure. The action
+    #   will fail if there are configuration errors. For example, the caller
+    #   does not have the permissions to call the SendBounce API.
+    #   @return [String]
+    #
+    # @!attribute [rw] role_arn
+    #   The Amazon Resource Name (ARN) of the IAM role to use to send the
+    #   bounce message.
+    #   @return [String]
+    #
+    # @!attribute [rw] sender
+    #   The sender email address of the bounce message.
+    #   @return [String]
+    #
+    # @!attribute [rw] status_code
+    #   The enhanced status code for the bounce, in the format of x.y.z
+    #   (e.g. 5.1.1).
+    #   @return [String]
+    #
+    # @!attribute [rw] smtp_reply_code
+    #   The SMTP reply code for the bounce, as defined by RFC 5321.
+    #   @return [String]
+    #
+    # @!attribute [rw] diagnostic_message
+    #   The diagnostic message included in the Diagnostic-Code header of the
+    #   bounce.
+    #   @return [String]
+    #
+    # @!attribute [rw] message
+    #   The human-readable text to include in the bounce message.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/mailmanager-2023-10-17/BounceAction AWS API Documentation
+    #
+    class BounceAction < Struct.new(
+      :action_failure_policy,
+      :role_arn,
+      :sender,
+      :status_code,
+      :smtp_reply_code,
+      :diagnostic_message,
+      :message)
+      SENSITIVE = [:sender, :diagnostic_message, :message]
+      include Aws::Structure
+    end
+
     # The request configuration has conflicts. For details, see the
     # accompanying error message.
     #
@@ -678,6 +729,11 @@ module Aws::MailManager
     #   IPv4-only.
     #   @return [Types::NetworkConfiguration]
     #
+    # @!attribute [rw] tls_policy
+    #   The Transport Layer Security (TLS) policy for the ingress point. The
+    #   FIPS value is only valid in US and Canada regions.
+    #   @return [String]
+    #
     # @!attribute [rw] tags
     #   The tags used to organize, track, or control access for the
     #   resource. For example, \{ "tags": \{"key1":"value1",
@@ -694,6 +750,7 @@ module Aws::MailManager
       :traffic_policy_id,
       :ingress_point_configuration,
       :network_configuration,
+      :tls_policy,
       :tags)
       SENSITIVE = []
       include Aws::Structure
@@ -1688,10 +1745,16 @@ module Aws::MailManager
     #   The identifier of an ingress endpoint.
     #   @return [String]
     #
+    # @!attribute [rw] include_trust_store_contents
+    #   Whether to include the trust store contents in the response. Use
+    #   INCLUDE to retrieve trust store certificate and CRL contents.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/mailmanager-2023-10-17/GetIngressPointRequest AWS API Documentation
     #
     class GetIngressPointRequest < Struct.new(
-      :ingress_point_id)
+      :ingress_point_id,
+      :include_trust_store_contents)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -1740,6 +1803,11 @@ module Aws::MailManager
     #   The network configuration for the ingress point.
     #   @return [Types::NetworkConfiguration]
     #
+    # @!attribute [rw] tls_policy
+    #   The selected Transport Layer Security (TLS) policy of the ingress
+    #   point.
+    #   @return [String]
+    #
     # @!attribute [rw] created_timestamp
     #   The timestamp of when the ingress endpoint was created.
     #   @return [Time]
@@ -1761,6 +1829,7 @@ module Aws::MailManager
       :traffic_policy_id,
       :ingress_point_auth_configuration,
       :network_configuration,
+      :tls_policy,
       :created_timestamp,
       :last_updated_timestamp)
       SENSITIVE = []
@@ -2300,11 +2369,17 @@ module Aws::MailManager
     #   the ingress endpoint resource.
     #   @return [String]
     #
+    # @!attribute [rw] tls_auth_configuration
+    #   The mutual TLS authentication configuration for the ingress endpoint
+    #   resource.
+    #   @return [Types::TlsAuthConfiguration]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/mailmanager-2023-10-17/IngressPointAuthConfiguration AWS API Documentation
     #
     class IngressPointAuthConfiguration < Struct.new(
       :ingress_point_password_configuration,
-      :secret_arn)
+      :secret_arn,
+      :tls_auth_configuration)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -2321,11 +2396,17 @@ module Aws::MailManager
     #   The SecretsManager::Secret ARN of the ingress endpoint resource.
     #   @return [String]
     #
+    # @!attribute [rw] tls_auth_configuration
+    #   The mutual TLS authentication configuration of the ingress endpoint
+    #   resource.
+    #   @return [Types::TlsAuthConfiguration]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/mailmanager-2023-10-17/IngressPointConfiguration AWS API Documentation
     #
     class IngressPointConfiguration < Struct.new(
       :smtp_password,
       :secret_arn,
+      :tls_auth_configuration,
       :unknown)
       SENSITIVE = [:smtp_password]
       include Aws::Structure
@@ -2333,6 +2414,7 @@ module Aws::MailManager
 
       class SmtpPassword < IngressPointConfiguration; end
       class SecretArn < IngressPointConfiguration; end
+      class TlsAuthConfiguration < IngressPointConfiguration; end
       class Unknown < IngressPointConfiguration; end
     end
 
@@ -2469,6 +2551,48 @@ module Aws::MailManager
       class Unknown < IngressTlsProtocolToEvaluate; end
     end
 
+    # The action to invoke an Amazon Web Services Lambda function for
+    # processing the email.
+    #
+    # @!attribute [rw] action_failure_policy
+    #   A policy that states what to do in the case of failure. The action
+    #   will fail if there are configuration errors. For example, the Amazon
+    #   Web Services Lambda function no longer exists.
+    #   @return [String]
+    #
+    # @!attribute [rw] function_arn
+    #   The Amazon Resource Name (ARN) of the Lambda function to invoke.
+    #   @return [String]
+    #
+    # @!attribute [rw] invocation_type
+    #   The invocation type of the Lambda function. Use EVENT for
+    #   asynchronous invocation or REQUEST\_RESPONSE for synchronous
+    #   invocation.
+    #   @return [String]
+    #
+    # @!attribute [rw] role_arn
+    #   The Amazon Resource Name (ARN) of the IAM role to use to invoke the
+    #   Lambda function.
+    #   @return [String]
+    #
+    # @!attribute [rw] retry_time_minutes
+    #   The maximum time in minutes that the email processing can be retried
+    #   if the Lambda invocation fails. The maximum value is 2160 minutes
+    #   (36 hours).
+    #   @return [Integer]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/mailmanager-2023-10-17/InvokeLambdaAction AWS API Documentation
+    #
+    class InvokeLambdaAction < Struct.new(
+      :action_failure_policy,
+      :function_arn,
+      :invocation_type,
+      :role_arn,
+      :retry_time_minutes)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @!attribute [rw] next_token
     #   If you received a pagination token from a previous call to this API,
     #   you can provide it here to continue paginating through the next page
@@ -3597,6 +3721,15 @@ module Aws::MailManager
     #   This action publishes the email content to an Amazon SNS topic.
     #   @return [Types::SnsAction]
     #
+    # @!attribute [rw] bounce
+    #   This action sends a bounce response for the email.
+    #   @return [Types::BounceAction]
+    #
+    # @!attribute [rw] invoke_lambda
+    #   This action invokes an Amazon Web Services Lambda function to
+    #   process the email.
+    #   @return [Types::InvokeLambdaAction]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/mailmanager-2023-10-17/RuleAction AWS API Documentation
     #
     class RuleAction < Struct.new(
@@ -3610,6 +3743,8 @@ module Aws::MailManager
       :deliver_to_mailbox,
       :deliver_to_q_business,
       :publish_to_sns,
+      :bounce,
+      :invoke_lambda,
       :unknown)
       SENSITIVE = []
       include Aws::Structure
@@ -3625,6 +3760,8 @@ module Aws::MailManager
       class DeliverToMailbox < RuleAction; end
       class DeliverToQBusiness < RuleAction; end
       class PublishToSns < RuleAction; end
+      class Bounce < RuleAction; end
+      class InvokeLambda < RuleAction; end
       class Unknown < RuleAction; end
     end
 
@@ -3943,7 +4080,7 @@ module Aws::MailManager
       :evaluate,
       :operator,
       :values)
-      SENSITIVE = []
+      SENSITIVE = [:values]
       include Aws::Structure
     end
 
@@ -3967,12 +4104,18 @@ module Aws::MailManager
     #   condition expression.
     #   @return [Types::Analysis]
     #
+    # @!attribute [rw] client_certificate_attribute
+    #   The client certificate attribute to evaluate in a string condition
+    #   expression.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/mailmanager-2023-10-17/RuleStringToEvaluate AWS API Documentation
     #
     class RuleStringToEvaluate < Struct.new(
       :attribute,
       :mime_header_attribute,
       :analysis,
+      :client_certificate_attribute,
       :unknown)
       SENSITIVE = []
       include Aws::Structure
@@ -3981,6 +4124,7 @@ module Aws::MailManager
       class Attribute < RuleStringToEvaluate; end
       class MimeHeaderAttribute < RuleStringToEvaluate; end
       class Analysis < RuleStringToEvaluate; end
+      class ClientCertificateAttribute < RuleStringToEvaluate; end
       class Unknown < RuleStringToEvaluate; end
     end
 
@@ -4490,6 +4634,20 @@ module Aws::MailManager
       include Aws::Structure
     end
 
+    # The mutual TLS authentication configuration for an ingress endpoint.
+    #
+    # @!attribute [rw] trust_store
+    #   The trust store configuration for mutual TLS authentication.
+    #   @return [Types::TrustStore]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/mailmanager-2023-10-17/TlsAuthConfiguration AWS API Documentation
+    #
+    class TlsAuthConfiguration < Struct.new(
+      :trust_store)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # The structure of a traffic policy resource which is a container for
     # policy statements.
     #
@@ -4517,6 +4675,36 @@ module Aws::MailManager
       include Aws::Structure
     end
 
+    # The trust store used for mutual TLS authentication. It contains the
+    # certificate authority (CA) certificates and optional certificate
+    # revocation list (CRL).
+    #
+    # @!attribute [rw] ca_content
+    #   The PEM-encoded certificate authority (CA) certificates bundle for
+    #   the trust store.
+    #   @return [String]
+    #
+    # @!attribute [rw] crl_content
+    #   The PEM-encoded certificate revocation lists (CRLs) for the trust
+    #   store. There can be one CRL per certificate authority (CA) in the
+    #   trust store.
+    #   @return [String]
+    #
+    # @!attribute [rw] kms_key_arn
+    #   The Amazon Resource Name (ARN) of the KMS key used to encrypt the
+    #   trust store contents.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/mailmanager-2023-10-17/TrustStore AWS API Documentation
+    #
+    class TrustStore < Struct.new(
+      :ca_content,
+      :crl_content,
+      :kms_key_arn)
+      SENSITIVE = [:ca_content, :crl_content]
+      include Aws::Structure
+    end
+
     # @!attribute [rw] resource_arn
     #   The Amazon Resource Name (ARN) of the resource that you want to
     #   untag.
@@ -4600,6 +4788,12 @@ module Aws::MailManager
     #   either an SMTP password or a secret ARN.
     #   @return [Types::IngressPointConfiguration]
     #
+    # @!attribute [rw] tls_policy
+    #   The Transport Layer Security (TLS) policy for the ingress point.
+    #   Valid values are REQUIRED, OPTIONAL. Only ingress endpoints using
+    #   REQUIRED or OPTIONAL as TlsPolicy can be updated.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/mailmanager-2023-10-17/UpdateIngressPointRequest AWS API Documentation
     #
     class UpdateIngressPointRequest < Struct.new(
@@ -4608,7 +4802,8 @@ module Aws::MailManager
       :status_to_update,
       :rule_set_id,
       :traffic_policy_id,
-      :ingress_point_configuration)
+      :ingress_point_configuration,
+      :tls_policy)
       SENSITIVE = []
       include Aws::Structure
     end

data/lib/aws-sdk-mailmanager.rb

@@ -55,7 +55,7 @@ module Aws::MailManager
   autoload :EndpointProvider, 'aws-sdk-mailmanager/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-mailmanager/endpoints'
 
-  GEM_VERSION = '1.40.0'
+  GEM_VERSION = '1.41.0'
 
 end
 

data/sig/client.rbs

@@ -175,12 +175,19 @@ module Aws
       def create_ingress_point: (
                                   ?client_token: ::String,
                                   ingress_point_name: ::String,
-                                  type: ("OPEN" | "AUTH"),
+                                  type: ("OPEN" | "AUTH" | "MTLS"),
                                   rule_set_id: ::String,
                                   traffic_policy_id: ::String,
                                   ?ingress_point_configuration: {
                                     smtp_password: ::String?,
-                                    secret_arn: ::String?
+                                    secret_arn: ::String?,
+                                    tls_auth_configuration: {
+                                      trust_store: {
+                                        ca_content: ::String,
+                                        crl_content: ::String?,
+                                        kms_key_arn: ::String?
+                                      }?
+                                    }?
                                   },
                                   ?network_configuration: {
                                     public_network_configuration: {
@@ -190,6 +197,7 @@ module Aws
                                       vpc_endpoint_id: ::String
                                     }?
                                   },
+                                  ?tls_policy: ("REQUIRED" | "OPTIONAL" | "FIPS"),
                                   ?tags: Array[
                                     {
                                       key: ::String,
@@ -257,7 +265,8 @@ module Aws
                                          analysis: {
                                            analyzer: ::String,
                                            result_field: ::String
-                                         }?
+                                         }?,
+                                         client_certificate_attribute: ("CN" | "SAN_RFC822_NAME" | "SAN_DNS_NAME" | "SAN_DIRECTORY_NAME" | "SAN_UNIFORM_RESOURCE_IDENTIFIER" | "SAN_IP_ADDRESS" | "SAN_REGISTERED_ID" | "SERIAL_NUMBER")?
                                        },
                                        operator: ("EQUALS" | "NOT_EQUALS" | "STARTS_WITH" | "ENDS_WITH" | "CONTAINS"),
                                        values: Array[::String]
@@ -316,7 +325,8 @@ module Aws
                                          analysis: {
                                            analyzer: ::String,
                                            result_field: ::String
-                                         }?
+                                         }?,
+                                         client_certificate_attribute: ("CN" | "SAN_RFC822_NAME" | "SAN_DNS_NAME" | "SAN_DIRECTORY_NAME" | "SAN_UNIFORM_RESOURCE_IDENTIFIER" | "SAN_IP_ADDRESS" | "SAN_REGISTERED_ID" | "SERIAL_NUMBER")?
                                        },
                                        operator: ("EQUALS" | "NOT_EQUALS" | "STARTS_WITH" | "ENDS_WITH" | "CONTAINS"),
                                        values: Array[::String]
@@ -400,6 +410,22 @@ module Aws
                                        role_arn: ::String,
                                        encoding: ("UTF-8" | "BASE64")?,
                                        payload_type: ("HEADERS" | "CONTENT")?
+                                     }?,
+                                     bounce: {
+                                       action_failure_policy: ("CONTINUE" | "DROP")?,
+                                       role_arn: ::String,
+                                       sender: ::String,
+                                       status_code: ::String,
+                                       smtp_reply_code: ::String,
+                                       diagnostic_message: ::String,
+                                       message: ::String?
+                                     }?,
+                                     invoke_lambda: {
+                                       action_failure_policy: ("CONTINUE" | "DROP")?,
+                                       function_arn: ::String,
+                                       invocation_type: ("EVENT" | "REQUEST_RESPONSE"),
+                                       role_arn: ::String,
+                                       retry_time_minutes: ::Integer?
                                      }?
                                    },
                                  ]
@@ -713,19 +739,21 @@ module Aws
         def ingress_point_id: () -> ::String
         def ingress_point_name: () -> ::String
         def ingress_point_arn: () -> ::String
-        def status: () -> ("PROVISIONING" | "DEPROVISIONING" | "UPDATING" | "ACTIVE" | "CLOSED" | "FAILED")
-        def type: () -> ("OPEN" | "AUTH")
+        def status: () -> ("PROVISIONING" | "DEPROVISIONING" | "UPDATING" | "ACTIVE" | "CLOSED" | "FAILED" | "ASSOCIATED_VPC_ENDPOINT_DOES_NOT_EXIST")
+        def type: () -> ("OPEN" | "AUTH" | "MTLS")
         def a_record: () -> ::String
         def rule_set_id: () -> ::String
         def traffic_policy_id: () -> ::String
         def ingress_point_auth_configuration: () -> Types::IngressPointAuthConfiguration
         def network_configuration: () -> Types::NetworkConfiguration
+        def tls_policy: () -> ("REQUIRED" | "OPTIONAL" | "FIPS")
         def created_timestamp: () -> ::Time
         def last_updated_timestamp: () -> ::Time
       end
       # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/MailManager/Client.html#get_ingress_point-instance_method
       def get_ingress_point: (
-                               ingress_point_id: ::String
+                               ingress_point_id: ::String,
+                               ?include_trust_store_contents: ("EXCLUDE" | "INCLUDE")
                              ) -> _GetIngressPointResponseSuccess
                            | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _GetIngressPointResponseSuccess
 
@@ -1151,8 +1179,16 @@ module Aws
                                   ?traffic_policy_id: ::String,
                                   ?ingress_point_configuration: {
                                     smtp_password: ::String?,
-                                    secret_arn: ::String?
-                                  }
+                                    secret_arn: ::String?,
+                                    tls_auth_configuration: {
+                                      trust_store: {
+                                        ca_content: ::String,
+                                        crl_content: ::String?,
+                                        kms_key_arn: ::String?
+                                      }?
+                                    }?
+                                  },
+                                  ?tls_policy: ("REQUIRED" | "OPTIONAL" | "FIPS")
                                 ) -> _UpdateIngressPointResponseSuccess
                               | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _UpdateIngressPointResponseSuccess
 
@@ -1206,7 +1242,8 @@ module Aws
                                          analysis: {
                                            analyzer: ::String,
                                            result_field: ::String
-                                         }?
+                                         }?,
+                                         client_certificate_attribute: ("CN" | "SAN_RFC822_NAME" | "SAN_DNS_NAME" | "SAN_DIRECTORY_NAME" | "SAN_UNIFORM_RESOURCE_IDENTIFIER" | "SAN_IP_ADDRESS" | "SAN_REGISTERED_ID" | "SERIAL_NUMBER")?
                                        },
                                        operator: ("EQUALS" | "NOT_EQUALS" | "STARTS_WITH" | "ENDS_WITH" | "CONTAINS"),
                                        values: Array[::String]
@@ -1265,7 +1302,8 @@ module Aws
                                          analysis: {
                                            analyzer: ::String,
                                            result_field: ::String
-                                         }?
+                                         }?,
+                                         client_certificate_attribute: ("CN" | "SAN_RFC822_NAME" | "SAN_DNS_NAME" | "SAN_DIRECTORY_NAME" | "SAN_UNIFORM_RESOURCE_IDENTIFIER" | "SAN_IP_ADDRESS" | "SAN_REGISTERED_ID" | "SERIAL_NUMBER")?
                                        },
                                        operator: ("EQUALS" | "NOT_EQUALS" | "STARTS_WITH" | "ENDS_WITH" | "CONTAINS"),
                                        values: Array[::String]
@@ -1349,6 +1387,22 @@ module Aws
                                        role_arn: ::String,
                                        encoding: ("UTF-8" | "BASE64")?,
                                        payload_type: ("HEADERS" | "CONTENT")?
+                                     }?,
+                                     bounce: {
+                                       action_failure_policy: ("CONTINUE" | "DROP")?,
+                                       role_arn: ::String,
+                                       sender: ::String,
+                                       status_code: ::String,
+                                       smtp_reply_code: ::String,
+                                       diagnostic_message: ::String,
+                                       message: ::String?
+                                     }?,
+                                     invoke_lambda: {
+                                       action_failure_policy: ("CONTINUE" | "DROP")?,
+                                       function_arn: ::String,
+                                       invocation_type: ("EVENT" | "REQUEST_RESPONSE"),
+                                       role_arn: ::String,
+                                       retry_time_minutes: ::Integer?
                                      }?
                                    },
                                  ]

data/sig/types.rbs

@@ -136,6 +136,17 @@ module Aws::MailManager
       end
     end
 
+    class BounceAction
+      attr_accessor action_failure_policy: ("CONTINUE" | "DROP")
+      attr_accessor role_arn: ::String
+      attr_accessor sender: ::String
+      attr_accessor status_code: ::String
+      attr_accessor smtp_reply_code: ::String
+      attr_accessor diagnostic_message: ::String
+      attr_accessor message: ::String
+      SENSITIVE: [:sender, :diagnostic_message, :message]
+    end
+
     class ConflictException
       attr_accessor message: ::String
       SENSITIVE: []
@@ -208,11 +219,12 @@ module Aws::MailManager
     class CreateIngressPointRequest
       attr_accessor client_token: ::String
       attr_accessor ingress_point_name: ::String
-      attr_accessor type: ("OPEN" | "AUTH")
+      attr_accessor type: ("OPEN" | "AUTH" | "MTLS")
       attr_accessor rule_set_id: ::String
       attr_accessor traffic_policy_id: ::String
       attr_accessor ingress_point_configuration: Types::IngressPointConfiguration
       attr_accessor network_configuration: Types::NetworkConfiguration
+      attr_accessor tls_policy: ("REQUIRED" | "OPTIONAL" | "FIPS")
       attr_accessor tags: ::Array[Types::Tag]
       SENSITIVE: []
     end
@@ -530,6 +542,7 @@ module Aws::MailManager
 
     class GetIngressPointRequest
       attr_accessor ingress_point_id: ::String
+      attr_accessor include_trust_store_contents: ("EXCLUDE" | "INCLUDE")
       SENSITIVE: []
     end
 
@@ -537,13 +550,14 @@ module Aws::MailManager
       attr_accessor ingress_point_id: ::String
       attr_accessor ingress_point_name: ::String
       attr_accessor ingress_point_arn: ::String
-      attr_accessor status: ("PROVISIONING" | "DEPROVISIONING" | "UPDATING" | "ACTIVE" | "CLOSED" | "FAILED")
-      attr_accessor type: ("OPEN" | "AUTH")
+      attr_accessor status: ("PROVISIONING" | "DEPROVISIONING" | "UPDATING" | "ACTIVE" | "CLOSED" | "FAILED" | "ASSOCIATED_VPC_ENDPOINT_DOES_NOT_EXIST")
+      attr_accessor type: ("OPEN" | "AUTH" | "MTLS")
       attr_accessor a_record: ::String
       attr_accessor rule_set_id: ::String
       attr_accessor traffic_policy_id: ::String
       attr_accessor ingress_point_auth_configuration: Types::IngressPointAuthConfiguration
       attr_accessor network_configuration: Types::NetworkConfiguration
+      attr_accessor tls_policy: ("REQUIRED" | "OPTIONAL" | "FIPS")
       attr_accessor created_timestamp: ::Time
       attr_accessor last_updated_timestamp: ::Time
       SENSITIVE: []
@@ -702,8 +716,8 @@ module Aws::MailManager
     class IngressPoint
       attr_accessor ingress_point_name: ::String
       attr_accessor ingress_point_id: ::String
-      attr_accessor status: ("PROVISIONING" | "DEPROVISIONING" | "UPDATING" | "ACTIVE" | "CLOSED" | "FAILED")
-      attr_accessor type: ("OPEN" | "AUTH")
+      attr_accessor status: ("PROVISIONING" | "DEPROVISIONING" | "UPDATING" | "ACTIVE" | "CLOSED" | "FAILED" | "ASSOCIATED_VPC_ENDPOINT_DOES_NOT_EXIST")
+      attr_accessor type: ("OPEN" | "AUTH" | "MTLS")
       attr_accessor a_record: ::String
       SENSITIVE: []
     end
@@ -711,12 +725,14 @@ module Aws::MailManager
     class IngressPointAuthConfiguration
       attr_accessor ingress_point_password_configuration: Types::IngressPointPasswordConfiguration
       attr_accessor secret_arn: ::String
+      attr_accessor tls_auth_configuration: Types::TlsAuthConfiguration
       SENSITIVE: []
     end
 
     class IngressPointConfiguration
       attr_accessor smtp_password: ::String
       attr_accessor secret_arn: ::String
+      attr_accessor tls_auth_configuration: Types::TlsAuthConfiguration
       attr_accessor unknown: untyped
       SENSITIVE: [:smtp_password]
 
@@ -724,6 +740,8 @@ module Aws::MailManager
       end
       class SecretArn < IngressPointConfiguration
       end
+      class TlsAuthConfiguration < IngressPointConfiguration
+      end
       class Unknown < IngressPointConfiguration
       end
     end
@@ -774,6 +792,15 @@ module Aws::MailManager
       end
     end
 
+    class InvokeLambdaAction
+      attr_accessor action_failure_policy: ("CONTINUE" | "DROP")
+      attr_accessor function_arn: ::String
+      attr_accessor invocation_type: ("EVENT" | "REQUEST_RESPONSE")
+      attr_accessor role_arn: ::String
+      attr_accessor retry_time_minutes: ::Integer
+      SENSITIVE: []
+    end
+
     class ListAddonInstancesRequest
       attr_accessor next_token: ::String
       attr_accessor page_size: ::Integer
@@ -1102,6 +1129,8 @@ module Aws::MailManager
       attr_accessor deliver_to_mailbox: Types::DeliverToMailboxAction
       attr_accessor deliver_to_q_business: Types::DeliverToQBusinessAction
       attr_accessor publish_to_sns: Types::SnsAction
+      attr_accessor bounce: Types::BounceAction
+      attr_accessor invoke_lambda: Types::InvokeLambdaAction
       attr_accessor unknown: untyped
       SENSITIVE: []
 
@@ -1125,6 +1154,10 @@ module Aws::MailManager
       end
       class PublishToSns < RuleAction
       end
+      class Bounce < RuleAction
+      end
+      class InvokeLambda < RuleAction
+      end
       class Unknown < RuleAction
       end
     end
@@ -1244,6 +1277,7 @@ module Aws::MailManager
       attr_accessor attribute: ("MAIL_FROM" | "HELO" | "RECIPIENT" | "SENDER" | "FROM" | "SUBJECT" | "TO" | "CC")
       attr_accessor mime_header_attribute: ::String
       attr_accessor analysis: Types::Analysis
+      attr_accessor client_certificate_attribute: ("CN" | "SAN_RFC822_NAME" | "SAN_DNS_NAME" | "SAN_DIRECTORY_NAME" | "SAN_UNIFORM_RESOURCE_IDENTIFIER" | "SAN_IP_ADDRESS" | "SAN_REGISTERED_ID" | "SERIAL_NUMBER")
       attr_accessor unknown: untyped
       SENSITIVE: []
 
@@ -1253,6 +1287,8 @@ module Aws::MailManager
       end
       class Analysis < RuleStringToEvaluate
       end
+      class ClientCertificateAttribute < RuleStringToEvaluate
+      end
       class Unknown < RuleStringToEvaluate
       end
     end
@@ -1414,6 +1450,11 @@ module Aws::MailManager
       SENSITIVE: []
     end
 
+    class TlsAuthConfiguration
+      attr_accessor trust_store: Types::TrustStore
+      SENSITIVE: []
+    end
+
     class TrafficPolicy
       attr_accessor traffic_policy_name: ::String
       attr_accessor traffic_policy_id: ::String
@@ -1421,6 +1462,13 @@ module Aws::MailManager
       SENSITIVE: []
     end
 
+    class TrustStore
+      attr_accessor ca_content: ::String
+      attr_accessor crl_content: ::String
+      attr_accessor kms_key_arn: ::String
+      SENSITIVE: [:ca_content, :crl_content]
+    end
+
     class UntagResourceRequest
       attr_accessor resource_arn: ::String
       attr_accessor tag_keys: ::Array[::String]
@@ -1447,6 +1495,7 @@ module Aws::MailManager
       attr_accessor rule_set_id: ::String
       attr_accessor traffic_policy_id: ::String
       attr_accessor ingress_point_configuration: Types::IngressPointConfiguration
+      attr_accessor tls_policy: ("REQUIRED" | "OPTIONAL" | "FIPS")
       SENSITIVE: []
     end
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-mailmanager
 version: !ruby/object:Gem::Version
-  version: 1.40.0
+  version: 1.41.0
 platform: ruby
 authors:
 - Amazon Web Services