aws-sdk-rds 1.166.0 → 1.168.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -1918,54 +1918,7 @@ module Aws::RDS
1918
1918
  req.send_request(options)
1919
1919
  end
1920
1920
 
1921
- # Creates a custom DB engine version (CEV). A CEV is a binary volume
1922
- # snapshot of a database engine and specific AMI. The supported engines
1923
- # are the following:
1924
- #
1925
- # * Oracle Database 12.1 Enterprise Edition with the January 2021 or
1926
- # later RU/RUR
1927
- #
1928
- # * Oracle Database 19c Enterprise Edition with the January 2021 or
1929
- # later RU/RUR
1930
- #
1931
- # Amazon RDS, which is a fully managed service, supplies the Amazon
1932
- # Machine Image (AMI) and database software. The Amazon RDS database
1933
- # software is preinstalled, so you need only select a DB engine and
1934
- # version, and create your database. With Amazon RDS Custom for Oracle,
1935
- # you upload your database installation files in Amazon S3.
1936
- #
1937
- # When you create a custom engine version, you specify the files in a
1938
- # JSON document called a CEV manifest. This document describes
1939
- # installation .zip files stored in Amazon S3. RDS Custom creates your
1940
- # CEV from the installation files that you provided. This service model
1941
- # is called Bring Your Own Media (BYOM).
1942
- #
1943
- # Creation takes approximately two hours. If creation fails, RDS Custom
1944
- # issues `RDS-EVENT-0196` with the message `Creation failed for custom
1945
- # engine version`, and includes details about the failure. For example,
1946
- # the event prints missing files.
1947
- #
1948
- # After you create the CEV, it is available for use. You can create
1949
- # multiple CEVs, and create multiple RDS Custom instances from any CEV.
1950
- # You can also change the status of a CEV to make it available or
1951
- # inactive.
1952
- #
1953
- # <note markdown="1"> The MediaImport service that imports files from Amazon S3 to create
1954
- # CEVs isn't integrated with Amazon Web Services CloudTrail. If you
1955
- # turn on data logging for Amazon RDS in CloudTrail, calls to the
1956
- # `CreateCustomDbEngineVersion` event aren't logged. However, you might
1957
- # see calls from the API gateway that accesses your Amazon S3 bucket.
1958
- # These calls originate from the MediaImport service for the
1959
- # `CreateCustomDbEngineVersion` event.
1960
- #
1961
- # </note>
1962
- #
1963
- # For more information, see [ Creating a CEV][1] in the *Amazon RDS User
1964
- # Guide*.
1965
- #
1966
- #
1967
- #
1968
- # [1]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/custom-cev.html#custom-cev.create
1921
+ # Creates a custom DB engine version (CEV).
1969
1922
  #
1970
1923
  # @option params [required, String] :engine
1971
1924
  # The database engine to use for your custom engine version (CEV). The
@@ -1978,7 +1931,7 @@ module Aws::RDS
1978
1931
  # combination of `Engine` and `EngineVersion` is unique per customer per
1979
1932
  # Region.
1980
1933
  #
1981
- # @option params [required, String] :database_installation_files_s3_bucket_name
1934
+ # @option params [String] :database_installation_files_s3_bucket_name
1982
1935
  # The name of an Amazon S3 bucket that contains database installation
1983
1936
  # files for your CEV. For example, a valid bucket name is
1984
1937
  # `my-custom-installation-files`.
@@ -1988,7 +1941,11 @@ module Aws::RDS
1988
1941
  # for your CEV. For example, a valid bucket name is `123456789012/cev1`.
1989
1942
  # If this setting isn't specified, no prefix is assumed.
1990
1943
  #
1991
- # @option params [required, String] :kms_key_id
1944
+ # @option params [String] :image_id
1945
+ # The ID of the AMI. An AMI ID is required to create a CEV for RDS
1946
+ # Custom for SQL Server.
1947
+ #
1948
+ # @option params [String] :kms_key_id
1992
1949
  # The Amazon Web Services KMS key identifier for an encrypted CEV. A
1993
1950
  # symmetric encryption KMS key is required for RDS Custom, but optional
1994
1951
  # for Amazon RDS.
@@ -2010,7 +1967,7 @@ module Aws::RDS
2010
1967
  # @option params [String] :description
2011
1968
  # An optional description of your CEV.
2012
1969
  #
2013
- # @option params [required, String] :manifest
1970
+ # @option params [String] :manifest
2014
1971
  # The CEV manifest, which is a JSON document that describes the
2015
1972
  # installation .zip files stored in Amazon S3. Specify the name/value
2016
1973
  # pairs in a file or a quoted string. RDS Custom applies the patches in
@@ -2062,6 +2019,8 @@ module Aws::RDS
2062
2019
  # * {Types::DBEngineVersion#db_engine_description #db_engine_description} => String
2063
2020
  # * {Types::DBEngineVersion#db_engine_version_description #db_engine_version_description} => String
2064
2021
  # * {Types::DBEngineVersion#default_character_set #default_character_set} => Types::CharacterSet
2022
+ # * {Types::DBEngineVersion#image #image} => Types::CustomDBEngineVersionAMI
2023
+ # * {Types::DBEngineVersion#db_engine_media_type #db_engine_media_type} => String
2065
2024
  # * {Types::DBEngineVersion#supported_character_sets #supported_character_sets} => Array&lt;Types::CharacterSet&gt;
2066
2025
  # * {Types::DBEngineVersion#supported_nchar_character_sets #supported_nchar_character_sets} => Array&lt;Types::CharacterSet&gt;
2067
2026
  # * {Types::DBEngineVersion#valid_upgrade_target #valid_upgrade_target} => Array&lt;Types::UpgradeTarget&gt;
@@ -2089,11 +2048,12 @@ module Aws::RDS
2089
2048
  # resp = client.create_custom_db_engine_version({
2090
2049
  # engine: "CustomEngineName", # required
2091
2050
  # engine_version: "CustomEngineVersion", # required
2092
- # database_installation_files_s3_bucket_name: "BucketName", # required
2051
+ # database_installation_files_s3_bucket_name: "BucketName",
2093
2052
  # database_installation_files_s3_prefix: "String255",
2094
- # kms_key_id: "KmsKeyIdOrArn", # required
2053
+ # image_id: "String255",
2054
+ # kms_key_id: "KmsKeyIdOrArn",
2095
2055
  # description: "Description",
2096
- # manifest: "CustomDBEngineVersionManifest", # required
2056
+ # manifest: "CustomDBEngineVersionManifest",
2097
2057
  # tags: [
2098
2058
  # {
2099
2059
  # key: "String",
@@ -2111,6 +2071,9 @@ module Aws::RDS
2111
2071
  # resp.db_engine_version_description #=> String
2112
2072
  # resp.default_character_set.character_set_name #=> String
2113
2073
  # resp.default_character_set.character_set_description #=> String
2074
+ # resp.image.image_id #=> String
2075
+ # resp.image.status #=> String
2076
+ # resp.db_engine_media_type #=> String
2114
2077
  # resp.supported_character_sets #=> Array
2115
2078
  # resp.supported_character_sets[0].character_set_name #=> String
2116
2079
  # resp.supported_character_sets[0].character_set_description #=> String
@@ -2382,7 +2345,11 @@ module Aws::RDS
2382
2345
  # The password for the master database user. This password can contain
2383
2346
  # any printable ASCII character except "/", """, or "@".
2384
2347
  #
2385
- # Constraints: Must contain from 8 to 41 characters.
2348
+ # Constraints:
2349
+ #
2350
+ # * Must contain from 8 to 41 characters.
2351
+ #
2352
+ # * Can't be specified if `ManageMasterUserPassword` is turned on.
2386
2353
  #
2387
2354
  # Valid for: Aurora DB clusters and Multi-AZ DB clusters
2388
2355
  #
@@ -2950,6 +2917,54 @@ module Aws::RDS
2950
2917
  # @option params [String] :db_system_id
2951
2918
  # Reserved for future use.
2952
2919
  #
2920
+ # @option params [Boolean] :manage_master_user_password
2921
+ # A value that indicates whether to manage the master user password with
2922
+ # Amazon Web Services Secrets Manager.
2923
+ #
2924
+ # For more information, see [Password management with Amazon Web
2925
+ # Services Secrets Manager][1] in the *Amazon RDS User Guide* and
2926
+ # [Password management with Amazon Web Services Secrets Manager][2] in
2927
+ # the *Amazon Aurora User Guide.*
2928
+ #
2929
+ # Constraints:
2930
+ #
2931
+ # * Can't manage the master user password with Amazon Web Services
2932
+ # Secrets Manager if `MasterUserPassword` is specified.
2933
+ #
2934
+ # ^
2935
+ #
2936
+ # Valid for: Aurora DB clusters and Multi-AZ DB clusters
2937
+ #
2938
+ #
2939
+ #
2940
+ # [1]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/rds-secrets-manager.html
2941
+ # [2]: https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/rds-secrets-manager.html
2942
+ #
2943
+ # @option params [String] :master_user_secret_kms_key_id
2944
+ # The Amazon Web Services KMS key identifier to encrypt a secret that is
2945
+ # automatically generated and managed in Amazon Web Services Secrets
2946
+ # Manager.
2947
+ #
2948
+ # This setting is valid only if the master user password is managed by
2949
+ # RDS in Amazon Web Services Secrets Manager for the DB cluster.
2950
+ #
2951
+ # The Amazon Web Services KMS key identifier is the key ARN, key ID,
2952
+ # alias ARN, or alias name for the KMS key. To use a KMS key in a
2953
+ # different Amazon Web Services account, specify the key ARN or alias
2954
+ # ARN.
2955
+ #
2956
+ # If you don't specify `MasterUserSecretKmsKeyId`, then the
2957
+ # `aws/secretsmanager` KMS key is used to encrypt the secret. If the
2958
+ # secret is in a different Amazon Web Services account, then you can't
2959
+ # use the `aws/secretsmanager` KMS key to encrypt the secret, and you
2960
+ # must use a customer managed KMS key.
2961
+ #
2962
+ # There is a default KMS key for your Amazon Web Services account. Your
2963
+ # Amazon Web Services account has a different default KMS key for each
2964
+ # Amazon Web Services Region.
2965
+ #
2966
+ # Valid for: Aurora DB clusters and Multi-AZ DB clusters
2967
+ #
2953
2968
  # @option params [String] :source_region
2954
2969
  # The source region of the snapshot. This is only needed when the
2955
2970
  # shapshot is encrypted and in a different region.
@@ -3050,6 +3065,8 @@ module Aws::RDS
3050
3065
  # },
3051
3066
  # network_type: "String",
3052
3067
  # db_system_id: "String",
3068
+ # manage_master_user_password: false,
3069
+ # master_user_secret_kms_key_id: "String",
3053
3070
  # source_region: "String",
3054
3071
  # })
3055
3072
  #
@@ -3162,6 +3179,9 @@ module Aws::RDS
3162
3179
  # resp.db_cluster.serverless_v2_scaling_configuration.max_capacity #=> Float
3163
3180
  # resp.db_cluster.network_type #=> String
3164
3181
  # resp.db_cluster.db_system_id #=> String
3182
+ # resp.db_cluster.master_user_secret.secret_arn #=> String
3183
+ # resp.db_cluster.master_user_secret.secret_status #=> String
3184
+ # resp.db_cluster.master_user_secret.kms_key_id #=> String
3165
3185
  #
3166
3186
  # @see http://docs.aws.amazon.com/goto/WebAPI/rds-2014-10-31/CreateDBCluster AWS API Documentation
3167
3187
  #
@@ -3878,6 +3898,9 @@ module Aws::RDS
3878
3898
  # Not applicable. The password for the master user is managed by the DB
3879
3899
  # cluster.
3880
3900
  #
3901
+ # Constraints: Can't be specified if `ManageMasterUserPassword` is
3902
+ # turned on.
3903
+ #
3881
3904
  # **MariaDB**
3882
3905
  #
3883
3906
  # Constraints: Must contain from 8 to 41 characters.
@@ -4665,6 +4688,47 @@ module Aws::RDS
4665
4688
  #
4666
4689
  # This setting doesn't apply to RDS Custom or Amazon Aurora.
4667
4690
  #
4691
+ # @option params [Boolean] :manage_master_user_password
4692
+ # A value that indicates whether to manage the master user password with
4693
+ # Amazon Web Services Secrets Manager.
4694
+ #
4695
+ # For more information, see [Password management with Amazon Web
4696
+ # Services Secrets Manager][1] in the *Amazon RDS User Guide.*
4697
+ #
4698
+ # Constraints:
4699
+ #
4700
+ # * Can't manage the master user password with Amazon Web Services
4701
+ # Secrets Manager if `MasterUserPassword` is specified.
4702
+ #
4703
+ # ^
4704
+ #
4705
+ #
4706
+ #
4707
+ # [1]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/rds-secrets-manager.html
4708
+ #
4709
+ # @option params [String] :master_user_secret_kms_key_id
4710
+ # The Amazon Web Services KMS key identifier to encrypt a secret that is
4711
+ # automatically generated and managed in Amazon Web Services Secrets
4712
+ # Manager.
4713
+ #
4714
+ # This setting is valid only if the master user password is managed by
4715
+ # RDS in Amazon Web Services Secrets Manager for the DB instance.
4716
+ #
4717
+ # The Amazon Web Services KMS key identifier is the key ARN, key ID,
4718
+ # alias ARN, or alias name for the KMS key. To use a KMS key in a
4719
+ # different Amazon Web Services account, specify the key ARN or alias
4720
+ # ARN.
4721
+ #
4722
+ # If you don't specify `MasterUserSecretKmsKeyId`, then the
4723
+ # `aws/secretsmanager` KMS key is used to encrypt the secret. If the
4724
+ # secret is in a different Amazon Web Services account, then you can't
4725
+ # use the `aws/secretsmanager` KMS key to encrypt the secret, and you
4726
+ # must use a customer managed KMS key.
4727
+ #
4728
+ # There is a default KMS key for your Amazon Web Services account. Your
4729
+ # Amazon Web Services account has a different default KMS key for each
4730
+ # Amazon Web Services Region.
4731
+ #
4668
4732
  # @return [Types::CreateDBInstanceResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
4669
4733
  #
4670
4734
  # * {Types::CreateDBInstanceResult#db_instance #db_instance} => Types::DBInstance
@@ -4754,6 +4818,8 @@ module Aws::RDS
4754
4818
  # backup_target: "String",
4755
4819
  # network_type: "String",
4756
4820
  # storage_throughput: 1,
4821
+ # manage_master_user_password: false,
4822
+ # master_user_secret_kms_key_id: "String",
4757
4823
  # })
4758
4824
  #
4759
4825
  # @example Response structure
@@ -4901,6 +4967,9 @@ module Aws::RDS
4901
4967
  # resp.db_instance.activity_stream_policy_status #=> String, one of "locked", "unlocked", "locking-policy", "unlocking-policy"
4902
4968
  # resp.db_instance.storage_throughput #=> Integer
4903
4969
  # resp.db_instance.db_system_id #=> String
4970
+ # resp.db_instance.master_user_secret.secret_arn #=> String
4971
+ # resp.db_instance.master_user_secret.secret_status #=> String
4972
+ # resp.db_instance.master_user_secret.kms_key_id #=> String
4904
4973
  #
4905
4974
  # @see http://docs.aws.amazon.com/goto/WebAPI/rds-2014-10-31/CreateDBInstance AWS API Documentation
4906
4975
  #
@@ -5723,6 +5792,9 @@ module Aws::RDS
5723
5792
  # resp.db_instance.activity_stream_policy_status #=> String, one of "locked", "unlocked", "locking-policy", "unlocking-policy"
5724
5793
  # resp.db_instance.storage_throughput #=> Integer
5725
5794
  # resp.db_instance.db_system_id #=> String
5795
+ # resp.db_instance.master_user_secret.secret_arn #=> String
5796
+ # resp.db_instance.master_user_secret.secret_status #=> String
5797
+ # resp.db_instance.master_user_secret.kms_key_id #=> String
5726
5798
  #
5727
5799
  # @see http://docs.aws.amazon.com/goto/WebAPI/rds-2014-10-31/CreateDBInstanceReadReplica AWS API Documentation
5728
5800
  #
@@ -6918,6 +6990,8 @@ module Aws::RDS
6918
6990
  # * {Types::DBEngineVersion#db_engine_description #db_engine_description} => String
6919
6991
  # * {Types::DBEngineVersion#db_engine_version_description #db_engine_version_description} => String
6920
6992
  # * {Types::DBEngineVersion#default_character_set #default_character_set} => Types::CharacterSet
6993
+ # * {Types::DBEngineVersion#image #image} => Types::CustomDBEngineVersionAMI
6994
+ # * {Types::DBEngineVersion#db_engine_media_type #db_engine_media_type} => String
6921
6995
  # * {Types::DBEngineVersion#supported_character_sets #supported_character_sets} => Array&lt;Types::CharacterSet&gt;
6922
6996
  # * {Types::DBEngineVersion#supported_nchar_character_sets #supported_nchar_character_sets} => Array&lt;Types::CharacterSet&gt;
6923
6997
  # * {Types::DBEngineVersion#valid_upgrade_target #valid_upgrade_target} => Array&lt;Types::UpgradeTarget&gt;
@@ -6956,6 +7030,9 @@ module Aws::RDS
6956
7030
  # resp.db_engine_version_description #=> String
6957
7031
  # resp.default_character_set.character_set_name #=> String
6958
7032
  # resp.default_character_set.character_set_description #=> String
7033
+ # resp.image.image_id #=> String
7034
+ # resp.image.status #=> String
7035
+ # resp.db_engine_media_type #=> String
6959
7036
  # resp.supported_character_sets #=> Array
6960
7037
  # resp.supported_character_sets[0].character_set_name #=> String
6961
7038
  # resp.supported_character_sets[0].character_set_description #=> String
@@ -7202,6 +7279,9 @@ module Aws::RDS
7202
7279
  # resp.db_cluster.serverless_v2_scaling_configuration.max_capacity #=> Float
7203
7280
  # resp.db_cluster.network_type #=> String
7204
7281
  # resp.db_cluster.db_system_id #=> String
7282
+ # resp.db_cluster.master_user_secret.secret_arn #=> String
7283
+ # resp.db_cluster.master_user_secret.secret_status #=> String
7284
+ # resp.db_cluster.master_user_secret.kms_key_id #=> String
7205
7285
  #
7206
7286
  # @see http://docs.aws.amazon.com/goto/WebAPI/rds-2014-10-31/DeleteDBCluster AWS API Documentation
7207
7287
  #
@@ -7672,6 +7752,9 @@ module Aws::RDS
7672
7752
  # resp.db_instance.activity_stream_policy_status #=> String, one of "locked", "unlocked", "locking-policy", "unlocking-policy"
7673
7753
  # resp.db_instance.storage_throughput #=> Integer
7674
7754
  # resp.db_instance.db_system_id #=> String
7755
+ # resp.db_instance.master_user_secret.secret_arn #=> String
7756
+ # resp.db_instance.master_user_secret.secret_status #=> String
7757
+ # resp.db_instance.master_user_secret.kms_key_id #=> String
7675
7758
  #
7676
7759
  # @see http://docs.aws.amazon.com/goto/WebAPI/rds-2014-10-31/DeleteDBInstance AWS API Documentation
7677
7760
  #
@@ -9407,6 +9490,9 @@ module Aws::RDS
9407
9490
  # resp.db_clusters[0].serverless_v2_scaling_configuration.max_capacity #=> Float
9408
9491
  # resp.db_clusters[0].network_type #=> String
9409
9492
  # resp.db_clusters[0].db_system_id #=> String
9493
+ # resp.db_clusters[0].master_user_secret.secret_arn #=> String
9494
+ # resp.db_clusters[0].master_user_secret.secret_status #=> String
9495
+ # resp.db_clusters[0].master_user_secret.kms_key_id #=> String
9410
9496
  #
9411
9497
  #
9412
9498
  # The following waiters are defined for this operation (see {Client#wait_until} for detailed usage):
@@ -9615,6 +9701,9 @@ module Aws::RDS
9615
9701
  # resp.db_engine_versions[0].db_engine_version_description #=> String
9616
9702
  # resp.db_engine_versions[0].default_character_set.character_set_name #=> String
9617
9703
  # resp.db_engine_versions[0].default_character_set.character_set_description #=> String
9704
+ # resp.db_engine_versions[0].image.image_id #=> String
9705
+ # resp.db_engine_versions[0].image.status #=> String
9706
+ # resp.db_engine_versions[0].db_engine_media_type #=> String
9618
9707
  # resp.db_engine_versions[0].supported_character_sets #=> Array
9619
9708
  # resp.db_engine_versions[0].supported_character_sets[0].character_set_name #=> String
9620
9709
  # resp.db_engine_versions[0].supported_character_sets[0].character_set_description #=> String
@@ -10038,6 +10127,9 @@ module Aws::RDS
10038
10127
  # resp.db_instances[0].activity_stream_policy_status #=> String, one of "locked", "unlocked", "locking-policy", "unlocking-policy"
10039
10128
  # resp.db_instances[0].storage_throughput #=> Integer
10040
10129
  # resp.db_instances[0].db_system_id #=> String
10130
+ # resp.db_instances[0].master_user_secret.secret_arn #=> String
10131
+ # resp.db_instances[0].master_user_secret.secret_status #=> String
10132
+ # resp.db_instances[0].master_user_secret.kms_key_id #=> String
10041
10133
  #
10042
10134
  #
10043
10135
  # The following waiters are defined for this operation (see {Client#wait_until} for detailed usage):
@@ -13246,6 +13338,9 @@ module Aws::RDS
13246
13338
  # resp.db_cluster.serverless_v2_scaling_configuration.max_capacity #=> Float
13247
13339
  # resp.db_cluster.network_type #=> String
13248
13340
  # resp.db_cluster.db_system_id #=> String
13341
+ # resp.db_cluster.master_user_secret.secret_arn #=> String
13342
+ # resp.db_cluster.master_user_secret.secret_status #=> String
13343
+ # resp.db_cluster.master_user_secret.kms_key_id #=> String
13249
13344
  #
13250
13345
  # @see http://docs.aws.amazon.com/goto/WebAPI/rds-2014-10-31/FailoverDBCluster AWS API Documentation
13251
13346
  #
@@ -13713,6 +13808,8 @@ module Aws::RDS
13713
13808
  # * {Types::DBEngineVersion#db_engine_description #db_engine_description} => String
13714
13809
  # * {Types::DBEngineVersion#db_engine_version_description #db_engine_version_description} => String
13715
13810
  # * {Types::DBEngineVersion#default_character_set #default_character_set} => Types::CharacterSet
13811
+ # * {Types::DBEngineVersion#image #image} => Types::CustomDBEngineVersionAMI
13812
+ # * {Types::DBEngineVersion#db_engine_media_type #db_engine_media_type} => String
13716
13813
  # * {Types::DBEngineVersion#supported_character_sets #supported_character_sets} => Array&lt;Types::CharacterSet&gt;
13717
13814
  # * {Types::DBEngineVersion#supported_nchar_character_sets #supported_nchar_character_sets} => Array&lt;Types::CharacterSet&gt;
13718
13815
  # * {Types::DBEngineVersion#valid_upgrade_target #valid_upgrade_target} => Array&lt;Types::UpgradeTarget&gt;
@@ -13753,6 +13850,9 @@ module Aws::RDS
13753
13850
  # resp.db_engine_version_description #=> String
13754
13851
  # resp.default_character_set.character_set_name #=> String
13755
13852
  # resp.default_character_set.character_set_description #=> String
13853
+ # resp.image.image_id #=> String
13854
+ # resp.image.status #=> String
13855
+ # resp.db_engine_media_type #=> String
13756
13856
  # resp.supported_character_sets #=> Array
13757
13857
  # resp.supported_character_sets[0].character_set_name #=> String
13758
13858
  # resp.supported_character_sets[0].character_set_description #=> String
@@ -13902,7 +14002,11 @@ module Aws::RDS
13902
14002
  # The new password for the master database user. This password can
13903
14003
  # contain any printable ASCII character except "/", """, or "@".
13904
14004
  #
13905
- # Constraints: Must contain from 8 to 41 characters.
14005
+ # Constraints:
14006
+ #
14007
+ # * Must contain from 8 to 41 characters.
14008
+ #
14009
+ # * Can't be specified if `ManageMasterUserPassword` is turned on.
13906
14010
  #
13907
14011
  # Valid for: Aurora DB clusters and Multi-AZ DB clusters
13908
14012
  #
@@ -14343,6 +14447,96 @@ module Aws::RDS
14343
14447
  #
14344
14448
  # [1]: https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/USER_VPC.WorkingWithRDSInstanceinaVPC.html
14345
14449
  #
14450
+ # @option params [Boolean] :manage_master_user_password
14451
+ # A value that indicates whether to manage the master user password with
14452
+ # Amazon Web Services Secrets Manager.
14453
+ #
14454
+ # If the DB cluster doesn't manage the master user password with Amazon
14455
+ # Web Services Secrets Manager, you can turn on this management. In this
14456
+ # case, you can't specify `MasterUserPassword`.
14457
+ #
14458
+ # If the DB cluster already manages the master user password with Amazon
14459
+ # Web Services Secrets Manager, and you specify that the master user
14460
+ # password is not managed with Amazon Web Services Secrets Manager, then
14461
+ # you must specify `MasterUserPassword`. In this case, RDS deletes the
14462
+ # secret and uses the new password for the master user specified by
14463
+ # `MasterUserPassword`.
14464
+ #
14465
+ # For more information, see [Password management with Amazon Web
14466
+ # Services Secrets Manager][1] in the *Amazon RDS User Guide* and
14467
+ # [Password management with Amazon Web Services Secrets Manager][2] in
14468
+ # the *Amazon Aurora User Guide.*
14469
+ #
14470
+ # Valid for: Aurora DB clusters and Multi-AZ DB clusters
14471
+ #
14472
+ #
14473
+ #
14474
+ # [1]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/rds-secrets-manager.html
14475
+ # [2]: https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/rds-secrets-manager.html
14476
+ #
14477
+ # @option params [Boolean] :rotate_master_user_password
14478
+ # A value that indicates whether to rotate the secret managed by Amazon
14479
+ # Web Services Secrets Manager for the master user password.
14480
+ #
14481
+ # This setting is valid only if the master user password is managed by
14482
+ # RDS in Amazon Web Services Secrets Manager for the DB cluster. The
14483
+ # secret value contains the updated password.
14484
+ #
14485
+ # For more information, see [Password management with Amazon Web
14486
+ # Services Secrets Manager][1] in the *Amazon RDS User Guide* and
14487
+ # [Password management with Amazon Web Services Secrets Manager][2] in
14488
+ # the *Amazon Aurora User Guide.*
14489
+ #
14490
+ # Constraints:
14491
+ #
14492
+ # * You must apply the change immediately when rotating the master user
14493
+ # password.
14494
+ #
14495
+ # ^
14496
+ #
14497
+ # Valid for: Aurora DB clusters and Multi-AZ DB clusters
14498
+ #
14499
+ #
14500
+ #
14501
+ # [1]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/rds-secrets-manager.html
14502
+ # [2]: https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/rds-secrets-manager.html
14503
+ #
14504
+ # @option params [String] :master_user_secret_kms_key_id
14505
+ # The Amazon Web Services KMS key identifier to encrypt a secret that is
14506
+ # automatically generated and managed in Amazon Web Services Secrets
14507
+ # Manager.
14508
+ #
14509
+ # This setting is valid only if both of the following conditions are
14510
+ # met:
14511
+ #
14512
+ # * The DB cluster doesn't manage the master user password in Amazon
14513
+ # Web Services Secrets Manager.
14514
+ #
14515
+ # If the DB cluster already manages the master user password in Amazon
14516
+ # Web Services Secrets Manager, you can't change the KMS key that is
14517
+ # used to encrypt the secret.
14518
+ #
14519
+ # * You are turning on `ManageMasterUserPassword` to manage the master
14520
+ # user password in Amazon Web Services Secrets Manager.
14521
+ #
14522
+ # If you are turning on `ManageMasterUserPassword` and don't specify
14523
+ # `MasterUserSecretKmsKeyId`, then the `aws/secretsmanager` KMS key is
14524
+ # used to encrypt the secret. If the secret is in a different Amazon
14525
+ # Web Services account, then you can't use the `aws/secretsmanager`
14526
+ # KMS key to encrypt the secret, and you must use a customer managed
14527
+ # KMS key.
14528
+ #
14529
+ # The Amazon Web Services KMS key identifier is the key ARN, key ID,
14530
+ # alias ARN, or alias name for the KMS key. To use a KMS key in a
14531
+ # different Amazon Web Services account, specify the key ARN or alias
14532
+ # ARN.
14533
+ #
14534
+ # There is a default KMS key for your Amazon Web Services account. Your
14535
+ # Amazon Web Services account has a different default KMS key for each
14536
+ # Amazon Web Services Region.
14537
+ #
14538
+ # Valid for: Aurora DB clusters and Multi-AZ DB clusters
14539
+ #
14346
14540
  # @return [Types::ModifyDBClusterResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
14347
14541
  #
14348
14542
  # * {Types::ModifyDBClusterResult#db_cluster #db_cluster} => Types::DBCluster
@@ -14419,6 +14613,9 @@ module Aws::RDS
14419
14613
  # max_capacity: 1.0,
14420
14614
  # },
14421
14615
  # network_type: "String",
14616
+ # manage_master_user_password: false,
14617
+ # rotate_master_user_password: false,
14618
+ # master_user_secret_kms_key_id: "String",
14422
14619
  # })
14423
14620
  #
14424
14621
  # @example Response structure
@@ -14530,6 +14727,9 @@ module Aws::RDS
14530
14727
  # resp.db_cluster.serverless_v2_scaling_configuration.max_capacity #=> Float
14531
14728
  # resp.db_cluster.network_type #=> String
14532
14729
  # resp.db_cluster.db_system_id #=> String
14730
+ # resp.db_cluster.master_user_secret.secret_arn #=> String
14731
+ # resp.db_cluster.master_user_secret.secret_status #=> String
14732
+ # resp.db_cluster.master_user_secret.kms_key_id #=> String
14533
14733
  #
14534
14734
  # @see http://docs.aws.amazon.com/goto/WebAPI/rds-2014-10-31/ModifyDBCluster AWS API Documentation
14535
14735
  #
@@ -14986,6 +15186,9 @@ module Aws::RDS
14986
15186
  #
14987
15187
  # Default: Uses existing setting
14988
15188
  #
15189
+ # Constraints: Can't be specified if `ManageMasterUserPassword` is
15190
+ # turned on.
15191
+ #
14989
15192
  # **MariaDB**
14990
15193
  #
14991
15194
  # Constraints: Must contain from 8 to 41 characters.
@@ -15681,6 +15884,91 @@ module Aws::RDS
15681
15884
  #
15682
15885
  # This setting doesn't apply to RDS Custom or Amazon Aurora.
15683
15886
  #
15887
+ # @option params [Boolean] :manage_master_user_password
15888
+ # A value that indicates whether to manage the master user password with
15889
+ # Amazon Web Services Secrets Manager.
15890
+ #
15891
+ # If the DB cluster doesn't manage the master user password with Amazon
15892
+ # Web Services Secrets Manager, you can turn on this management. In this
15893
+ # case, you can't specify `MasterUserPassword`.
15894
+ #
15895
+ # If the DB cluster already manages the master user password with Amazon
15896
+ # Web Services Secrets Manager, and you specify that the master user
15897
+ # password is not managed with Amazon Web Services Secrets Manager, then
15898
+ # you must specify `MasterUserPassword`. In this case, RDS deletes the
15899
+ # secret and uses the new password for the master user specified by
15900
+ # `MasterUserPassword`.
15901
+ #
15902
+ # For more information, see [Password management with Amazon Web
15903
+ # Services Secrets Manager][1] in the *Amazon RDS User Guide.*
15904
+ #
15905
+ # Constraints:
15906
+ #
15907
+ # * Can't manage the master user password with Amazon Web Services
15908
+ # Secrets Manager if `MasterUserPassword` is specified.
15909
+ #
15910
+ # ^
15911
+ #
15912
+ #
15913
+ #
15914
+ # [1]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/rds-secrets-manager.html
15915
+ #
15916
+ # @option params [Boolean] :rotate_master_user_password
15917
+ # A value that indicates whether to rotate the secret managed by Amazon
15918
+ # Web Services Secrets Manager for the master user password.
15919
+ #
15920
+ # This setting is valid only if the master user password is managed by
15921
+ # RDS in Amazon Web Services Secrets Manager for the DB cluster. The
15922
+ # secret value contains the updated password.
15923
+ #
15924
+ # For more information, see [Password management with Amazon Web
15925
+ # Services Secrets Manager][1] in the *Amazon RDS User Guide.*
15926
+ #
15927
+ # Constraints:
15928
+ #
15929
+ # * You must apply the change immediately when rotating the master user
15930
+ # password.
15931
+ #
15932
+ # ^
15933
+ #
15934
+ #
15935
+ #
15936
+ # [1]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/rds-secrets-manager.html
15937
+ #
15938
+ # @option params [String] :master_user_secret_kms_key_id
15939
+ # The Amazon Web Services KMS key identifier to encrypt a secret that is
15940
+ # automatically generated and managed in Amazon Web Services Secrets
15941
+ # Manager.
15942
+ #
15943
+ # This setting is valid only if both of the following conditions are
15944
+ # met:
15945
+ #
15946
+ # * The DB instance doesn't manage the master user password in Amazon
15947
+ # Web Services Secrets Manager.
15948
+ #
15949
+ # If the DB instance already manages the master user password in
15950
+ # Amazon Web Services Secrets Manager, you can't change the KMS key
15951
+ # used to encrypt the secret.
15952
+ #
15953
+ # * You are turning on `ManageMasterUserPassword` to manage the master
15954
+ # user password in Amazon Web Services Secrets Manager.
15955
+ #
15956
+ # If you are turning on `ManageMasterUserPassword` and don't specify
15957
+ # `MasterUserSecretKmsKeyId`, then the `aws/secretsmanager` KMS key is
15958
+ # used to encrypt the secret. If the secret is in a different Amazon
15959
+ # Web Services account, then you can't use the `aws/secretsmanager`
15960
+ # KMS key to encrypt the secret, and you must use a customer managed
15961
+ # KMS key.
15962
+ #
15963
+ # The Amazon Web Services KMS key identifier is the key ARN, key ID,
15964
+ # alias ARN, or alias name for the KMS key. To use a KMS key in a
15965
+ # different Amazon Web Services account, specify the key ARN or alias
15966
+ # ARN.
15967
+ #
15968
+ # There is a default KMS key for your Amazon Web Services account. Your
15969
+ # Amazon Web Services account has a different default KMS key for each
15970
+ # Amazon Web Services Region.
15971
+ #
15684
15972
  # @return [Types::ModifyDBInstanceResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
15685
15973
  #
15686
15974
  # * {Types::ModifyDBInstanceResult#db_instance #db_instance} => Types::DBInstance
@@ -15767,6 +16055,9 @@ module Aws::RDS
15767
16055
  # resume_full_automation_mode_minutes: 1,
15768
16056
  # network_type: "String",
15769
16057
  # storage_throughput: 1,
16058
+ # manage_master_user_password: false,
16059
+ # rotate_master_user_password: false,
16060
+ # master_user_secret_kms_key_id: "String",
15770
16061
  # })
15771
16062
  #
15772
16063
  # @example Response structure
@@ -15914,6 +16205,9 @@ module Aws::RDS
15914
16205
  # resp.db_instance.activity_stream_policy_status #=> String, one of "locked", "unlocked", "locking-policy", "unlocking-policy"
15915
16206
  # resp.db_instance.storage_throughput #=> Integer
15916
16207
  # resp.db_instance.db_system_id #=> String
16208
+ # resp.db_instance.master_user_secret.secret_arn #=> String
16209
+ # resp.db_instance.master_user_secret.secret_status #=> String
16210
+ # resp.db_instance.master_user_secret.kms_key_id #=> String
15917
16211
  #
15918
16212
  # @see http://docs.aws.amazon.com/goto/WebAPI/rds-2014-10-31/ModifyDBInstance AWS API Documentation
15919
16213
  #
@@ -17154,6 +17448,9 @@ module Aws::RDS
17154
17448
  # resp.db_instance.activity_stream_policy_status #=> String, one of "locked", "unlocked", "locking-policy", "unlocking-policy"
17155
17449
  # resp.db_instance.storage_throughput #=> Integer
17156
17450
  # resp.db_instance.db_system_id #=> String
17451
+ # resp.db_instance.master_user_secret.secret_arn #=> String
17452
+ # resp.db_instance.master_user_secret.secret_status #=> String
17453
+ # resp.db_instance.master_user_secret.kms_key_id #=> String
17157
17454
  #
17158
17455
  # @see http://docs.aws.amazon.com/goto/WebAPI/rds-2014-10-31/PromoteReadReplica AWS API Documentation
17159
17456
  #
@@ -17297,6 +17594,9 @@ module Aws::RDS
17297
17594
  # resp.db_cluster.serverless_v2_scaling_configuration.max_capacity #=> Float
17298
17595
  # resp.db_cluster.network_type #=> String
17299
17596
  # resp.db_cluster.db_system_id #=> String
17597
+ # resp.db_cluster.master_user_secret.secret_arn #=> String
17598
+ # resp.db_cluster.master_user_secret.secret_status #=> String
17599
+ # resp.db_cluster.master_user_secret.kms_key_id #=> String
17300
17600
  #
17301
17601
  # @see http://docs.aws.amazon.com/goto/WebAPI/rds-2014-10-31/PromoteReadReplicaDBCluster AWS API Documentation
17302
17602
  #
@@ -17544,6 +17844,9 @@ module Aws::RDS
17544
17844
  # resp.db_cluster.serverless_v2_scaling_configuration.max_capacity #=> Float
17545
17845
  # resp.db_cluster.network_type #=> String
17546
17846
  # resp.db_cluster.db_system_id #=> String
17847
+ # resp.db_cluster.master_user_secret.secret_arn #=> String
17848
+ # resp.db_cluster.master_user_secret.secret_status #=> String
17849
+ # resp.db_cluster.master_user_secret.kms_key_id #=> String
17547
17850
  #
17548
17851
  # @see http://docs.aws.amazon.com/goto/WebAPI/rds-2014-10-31/RebootDBCluster AWS API Documentation
17549
17852
  #
@@ -17764,6 +18067,9 @@ module Aws::RDS
17764
18067
  # resp.db_instance.activity_stream_policy_status #=> String, one of "locked", "unlocked", "locking-policy", "unlocking-policy"
17765
18068
  # resp.db_instance.storage_throughput #=> Integer
17766
18069
  # resp.db_instance.db_system_id #=> String
18070
+ # resp.db_instance.master_user_secret.secret_arn #=> String
18071
+ # resp.db_instance.master_user_secret.secret_status #=> String
18072
+ # resp.db_instance.master_user_secret.kms_key_id #=> String
17767
18073
  #
17768
18074
  # @see http://docs.aws.amazon.com/goto/WebAPI/rds-2014-10-31/RebootDBInstance AWS API Documentation
17769
18075
  #
@@ -18409,11 +18715,15 @@ module Aws::RDS
18409
18715
  #
18410
18716
  # * Can't be a reserved word for the chosen database engine.
18411
18717
  #
18412
- # @option params [required, String] :master_user_password
18718
+ # @option params [String] :master_user_password
18413
18719
  # The password for the master database user. This password can contain
18414
18720
  # any printable ASCII character except "/", """, or "@".
18415
18721
  #
18416
- # Constraints: Must contain from 8 to 41 characters.
18722
+ # Constraints:
18723
+ #
18724
+ # * Must contain from 8 to 41 characters.
18725
+ #
18726
+ # * Can't be specified if `ManageMasterUserPassword` is turned on.
18417
18727
  #
18418
18728
  # @option params [String] :option_group_name
18419
18729
  # A value that indicates that the restored DB cluster should be
@@ -18629,6 +18939,50 @@ module Aws::RDS
18629
18939
  #
18630
18940
  # [1]: https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/USER_VPC.WorkingWithRDSInstanceinaVPC.html
18631
18941
  #
18942
+ # @option params [Boolean] :manage_master_user_password
18943
+ # A value that indicates whether to manage the master user password with
18944
+ # Amazon Web Services Secrets Manager.
18945
+ #
18946
+ # For more information, see [Password management with Amazon Web
18947
+ # Services Secrets Manager][1] in the *Amazon RDS User Guide* and
18948
+ # [Password management with Amazon Web Services Secrets Manager][2] in
18949
+ # the *Amazon Aurora User Guide.*
18950
+ #
18951
+ # Constraints:
18952
+ #
18953
+ # * Can't manage the master user password with Amazon Web Services
18954
+ # Secrets Manager if `MasterUserPassword` is specified.
18955
+ #
18956
+ # ^
18957
+ #
18958
+ #
18959
+ #
18960
+ # [1]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/rds-secrets-manager.html
18961
+ # [2]: https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/rds-secrets-manager.html
18962
+ #
18963
+ # @option params [String] :master_user_secret_kms_key_id
18964
+ # The Amazon Web Services KMS key identifier to encrypt a secret that is
18965
+ # automatically generated and managed in Amazon Web Services Secrets
18966
+ # Manager.
18967
+ #
18968
+ # This setting is valid only if the master user password is managed by
18969
+ # RDS in Amazon Web Services Secrets Manager for the DB cluster.
18970
+ #
18971
+ # The Amazon Web Services KMS key identifier is the key ARN, key ID,
18972
+ # alias ARN, or alias name for the KMS key. To use a KMS key in a
18973
+ # different Amazon Web Services account, specify the key ARN or alias
18974
+ # ARN.
18975
+ #
18976
+ # If you don't specify `MasterUserSecretKmsKeyId`, then the
18977
+ # `aws/secretsmanager` KMS key is used to encrypt the secret. If the
18978
+ # secret is in a different Amazon Web Services account, then you can't
18979
+ # use the `aws/secretsmanager` KMS key to encrypt the secret, and you
18980
+ # must use a customer managed KMS key.
18981
+ #
18982
+ # There is a default KMS key for your Amazon Web Services account. Your
18983
+ # Amazon Web Services account has a different default KMS key for each
18984
+ # Amazon Web Services Region.
18985
+ #
18632
18986
  # @return [Types::RestoreDBClusterFromS3Result] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
18633
18987
  #
18634
18988
  # * {Types::RestoreDBClusterFromS3Result#db_cluster #db_cluster} => Types::DBCluster
@@ -18648,7 +19002,7 @@ module Aws::RDS
18648
19002
  # engine_version: "String",
18649
19003
  # port: 1,
18650
19004
  # master_username: "String", # required
18651
- # master_user_password: "String", # required
19005
+ # master_user_password: "String",
18652
19006
  # option_group_name: "String",
18653
19007
  # preferred_backup_window: "String",
18654
19008
  # preferred_maintenance_window: "String",
@@ -18677,6 +19031,8 @@ module Aws::RDS
18677
19031
  # max_capacity: 1.0,
18678
19032
  # },
18679
19033
  # network_type: "String",
19034
+ # manage_master_user_password: false,
19035
+ # master_user_secret_kms_key_id: "String",
18680
19036
  # })
18681
19037
  #
18682
19038
  # @example Response structure
@@ -18788,6 +19144,9 @@ module Aws::RDS
18788
19144
  # resp.db_cluster.serverless_v2_scaling_configuration.max_capacity #=> Float
18789
19145
  # resp.db_cluster.network_type #=> String
18790
19146
  # resp.db_cluster.db_system_id #=> String
19147
+ # resp.db_cluster.master_user_secret.secret_arn #=> String
19148
+ # resp.db_cluster.master_user_secret.secret_status #=> String
19149
+ # resp.db_cluster.master_user_secret.kms_key_id #=> String
18791
19150
  #
18792
19151
  # @see http://docs.aws.amazon.com/goto/WebAPI/rds-2014-10-31/RestoreDBClusterFromS3 AWS API Documentation
18793
19152
  #
@@ -19426,6 +19785,9 @@ module Aws::RDS
19426
19785
  # resp.db_cluster.serverless_v2_scaling_configuration.max_capacity #=> Float
19427
19786
  # resp.db_cluster.network_type #=> String
19428
19787
  # resp.db_cluster.db_system_id #=> String
19788
+ # resp.db_cluster.master_user_secret.secret_arn #=> String
19789
+ # resp.db_cluster.master_user_secret.secret_status #=> String
19790
+ # resp.db_cluster.master_user_secret.kms_key_id #=> String
19429
19791
  #
19430
19792
  # @see http://docs.aws.amazon.com/goto/WebAPI/rds-2014-10-31/RestoreDBClusterFromSnapshot AWS API Documentation
19431
19793
  #
@@ -20033,6 +20395,9 @@ module Aws::RDS
20033
20395
  # resp.db_cluster.serverless_v2_scaling_configuration.max_capacity #=> Float
20034
20396
  # resp.db_cluster.network_type #=> String
20035
20397
  # resp.db_cluster.db_system_id #=> String
20398
+ # resp.db_cluster.master_user_secret.secret_arn #=> String
20399
+ # resp.db_cluster.master_user_secret.secret_status #=> String
20400
+ # resp.db_cluster.master_user_secret.kms_key_id #=> String
20036
20401
  #
20037
20402
  # @see http://docs.aws.amazon.com/goto/WebAPI/rds-2014-10-31/RestoreDBClusterToPointInTime AWS API Documentation
20038
20403
  #
@@ -20797,6 +21162,9 @@ module Aws::RDS
20797
21162
  # resp.db_instance.activity_stream_policy_status #=> String, one of "locked", "unlocked", "locking-policy", "unlocking-policy"
20798
21163
  # resp.db_instance.storage_throughput #=> Integer
20799
21164
  # resp.db_instance.db_system_id #=> String
21165
+ # resp.db_instance.master_user_secret.secret_arn #=> String
21166
+ # resp.db_instance.master_user_secret.secret_status #=> String
21167
+ # resp.db_instance.master_user_secret.kms_key_id #=> String
20800
21168
  #
20801
21169
  # @see http://docs.aws.amazon.com/goto/WebAPI/rds-2014-10-31/RestoreDBInstanceFromDBSnapshot AWS API Documentation
20802
21170
  #
@@ -20882,8 +21250,29 @@ module Aws::RDS
20882
21250
  # The password for the master user. The password can include any
20883
21251
  # printable ASCII character except "/", """, or "@".
20884
21252
  #
21253
+ # Constraints: Can't be specified if `ManageMasterUserPassword` is
21254
+ # turned on.
21255
+ #
21256
+ # **MariaDB**
21257
+ #
21258
+ # Constraints: Must contain from 8 to 41 characters.
21259
+ #
21260
+ # **Microsoft SQL Server**
21261
+ #
21262
+ # Constraints: Must contain from 8 to 128 characters.
21263
+ #
21264
+ # **MySQL**
21265
+ #
20885
21266
  # Constraints: Must contain from 8 to 41 characters.
20886
21267
  #
21268
+ # **Oracle**
21269
+ #
21270
+ # Constraints: Must contain from 8 to 30 characters.
21271
+ #
21272
+ # **PostgreSQL**
21273
+ #
21274
+ # Constraints: Must contain from 8 to 128 characters.
21275
+ #
20887
21276
  # @option params [Array<String>] :db_security_groups
20888
21277
  # A list of DB security groups to associate with this DB instance.
20889
21278
  #
@@ -21244,6 +21633,47 @@ module Aws::RDS
21244
21633
  #
21245
21634
  # This setting doesn't apply to RDS Custom or Amazon Aurora.
21246
21635
  #
21636
+ # @option params [Boolean] :manage_master_user_password
21637
+ # A value that indicates whether to manage the master user password with
21638
+ # Amazon Web Services Secrets Manager.
21639
+ #
21640
+ # For more information, see [Password management with Amazon Web
21641
+ # Services Secrets Manager][1] in the *Amazon RDS User Guide.*
21642
+ #
21643
+ # Constraints:
21644
+ #
21645
+ # * Can't manage the master user password with Amazon Web Services
21646
+ # Secrets Manager if `MasterUserPassword` is specified.
21647
+ #
21648
+ # ^
21649
+ #
21650
+ #
21651
+ #
21652
+ # [1]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/rds-secrets-manager.html
21653
+ #
21654
+ # @option params [String] :master_user_secret_kms_key_id
21655
+ # The Amazon Web Services KMS key identifier to encrypt a secret that is
21656
+ # automatically generated and managed in Amazon Web Services Secrets
21657
+ # Manager.
21658
+ #
21659
+ # This setting is valid only if the master user password is managed by
21660
+ # RDS in Amazon Web Services Secrets Manager for the DB instance.
21661
+ #
21662
+ # The Amazon Web Services KMS key identifier is the key ARN, key ID,
21663
+ # alias ARN, or alias name for the KMS key. To use a KMS key in a
21664
+ # different Amazon Web Services account, specify the key ARN or alias
21665
+ # ARN.
21666
+ #
21667
+ # If you don't specify `MasterUserSecretKmsKeyId`, then the
21668
+ # `aws/secretsmanager` KMS key is used to encrypt the secret. If the
21669
+ # secret is in a different Amazon Web Services account, then you can't
21670
+ # use the `aws/secretsmanager` KMS key to encrypt the secret, and you
21671
+ # must use a customer managed KMS key.
21672
+ #
21673
+ # There is a default KMS key for your Amazon Web Services account. Your
21674
+ # Amazon Web Services account has a different default KMS key for each
21675
+ # Amazon Web Services Region.
21676
+ #
21247
21677
  # @return [Types::RestoreDBInstanceFromS3Result] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
21248
21678
  #
21249
21679
  # * {Types::RestoreDBInstanceFromS3Result#db_instance #db_instance} => Types::DBInstance
@@ -21307,6 +21737,8 @@ module Aws::RDS
21307
21737
  # max_allocated_storage: 1,
21308
21738
  # network_type: "String",
21309
21739
  # storage_throughput: 1,
21740
+ # manage_master_user_password: false,
21741
+ # master_user_secret_kms_key_id: "String",
21310
21742
  # })
21311
21743
  #
21312
21744
  # @example Response structure
@@ -21454,6 +21886,9 @@ module Aws::RDS
21454
21886
  # resp.db_instance.activity_stream_policy_status #=> String, one of "locked", "unlocked", "locking-policy", "unlocking-policy"
21455
21887
  # resp.db_instance.storage_throughput #=> Integer
21456
21888
  # resp.db_instance.db_system_id #=> String
21889
+ # resp.db_instance.master_user_secret.secret_arn #=> String
21890
+ # resp.db_instance.master_user_secret.secret_status #=> String
21891
+ # resp.db_instance.master_user_secret.kms_key_id #=> String
21457
21892
  #
21458
21893
  # @see http://docs.aws.amazon.com/goto/WebAPI/rds-2014-10-31/RestoreDBInstanceFromS3 AWS API Documentation
21459
21894
  #
@@ -22202,6 +22637,9 @@ module Aws::RDS
22202
22637
  # resp.db_instance.activity_stream_policy_status #=> String, one of "locked", "unlocked", "locking-policy", "unlocking-policy"
22203
22638
  # resp.db_instance.storage_throughput #=> Integer
22204
22639
  # resp.db_instance.db_system_id #=> String
22640
+ # resp.db_instance.master_user_secret.secret_arn #=> String
22641
+ # resp.db_instance.master_user_secret.secret_status #=> String
22642
+ # resp.db_instance.master_user_secret.kms_key_id #=> String
22205
22643
  #
22206
22644
  # @see http://docs.aws.amazon.com/goto/WebAPI/rds-2014-10-31/RestoreDBInstanceToPointInTime AWS API Documentation
22207
22645
  #
@@ -22525,6 +22963,9 @@ module Aws::RDS
22525
22963
  # resp.db_cluster.serverless_v2_scaling_configuration.max_capacity #=> Float
22526
22964
  # resp.db_cluster.network_type #=> String
22527
22965
  # resp.db_cluster.db_system_id #=> String
22966
+ # resp.db_cluster.master_user_secret.secret_arn #=> String
22967
+ # resp.db_cluster.master_user_secret.secret_status #=> String
22968
+ # resp.db_cluster.master_user_secret.kms_key_id #=> String
22528
22969
  #
22529
22970
  # @see http://docs.aws.amazon.com/goto/WebAPI/rds-2014-10-31/StartDBCluster AWS API Documentation
22530
22971
  #
@@ -22709,6 +23150,9 @@ module Aws::RDS
22709
23150
  # resp.db_instance.activity_stream_policy_status #=> String, one of "locked", "unlocked", "locking-policy", "unlocking-policy"
22710
23151
  # resp.db_instance.storage_throughput #=> Integer
22711
23152
  # resp.db_instance.db_system_id #=> String
23153
+ # resp.db_instance.master_user_secret.secret_arn #=> String
23154
+ # resp.db_instance.master_user_secret.secret_status #=> String
23155
+ # resp.db_instance.master_user_secret.kms_key_id #=> String
22712
23156
  #
22713
23157
  # @see http://docs.aws.amazon.com/goto/WebAPI/rds-2014-10-31/StartDBInstance AWS API Documentation
22714
23158
  #
@@ -23154,6 +23598,9 @@ module Aws::RDS
23154
23598
  # resp.db_cluster.serverless_v2_scaling_configuration.max_capacity #=> Float
23155
23599
  # resp.db_cluster.network_type #=> String
23156
23600
  # resp.db_cluster.db_system_id #=> String
23601
+ # resp.db_cluster.master_user_secret.secret_arn #=> String
23602
+ # resp.db_cluster.master_user_secret.secret_status #=> String
23603
+ # resp.db_cluster.master_user_secret.kms_key_id #=> String
23157
23604
  #
23158
23605
  # @see http://docs.aws.amazon.com/goto/WebAPI/rds-2014-10-31/StopDBCluster AWS API Documentation
23159
23606
  #
@@ -23345,6 +23792,9 @@ module Aws::RDS
23345
23792
  # resp.db_instance.activity_stream_policy_status #=> String, one of "locked", "unlocked", "locking-policy", "unlocking-policy"
23346
23793
  # resp.db_instance.storage_throughput #=> Integer
23347
23794
  # resp.db_instance.db_system_id #=> String
23795
+ # resp.db_instance.master_user_secret.secret_arn #=> String
23796
+ # resp.db_instance.master_user_secret.secret_status #=> String
23797
+ # resp.db_instance.master_user_secret.kms_key_id #=> String
23348
23798
  #
23349
23799
  # @see http://docs.aws.amazon.com/goto/WebAPI/rds-2014-10-31/StopDBInstance AWS API Documentation
23350
23800
  #
@@ -23667,6 +24117,9 @@ module Aws::RDS
23667
24117
  # resp.db_instance.activity_stream_policy_status #=> String, one of "locked", "unlocked", "locking-policy", "unlocking-policy"
23668
24118
  # resp.db_instance.storage_throughput #=> Integer
23669
24119
  # resp.db_instance.db_system_id #=> String
24120
+ # resp.db_instance.master_user_secret.secret_arn #=> String
24121
+ # resp.db_instance.master_user_secret.secret_status #=> String
24122
+ # resp.db_instance.master_user_secret.kms_key_id #=> String
23670
24123
  #
23671
24124
  # @see http://docs.aws.amazon.com/goto/WebAPI/rds-2014-10-31/SwitchoverReadReplica AWS API Documentation
23672
24125
  #
@@ -23690,7 +24143,7 @@ module Aws::RDS
23690
24143
  params: params,
23691
24144
  config: config)
23692
24145
  context[:gem_name] = 'aws-sdk-rds'
23693
- context[:gem_version] = '1.166.0'
24146
+ context[:gem_version] = '1.168.0'
23694
24147
  Seahorse::Client::Request.new(handlers, context)
23695
24148
  end
23696
24149