aws-sdk-rds 1.167.0 → 1.169.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 39a0d108d1cda7c15ce3b21bf946107bcca2d88f90f8ca079829ea35e79b9a0f
-  data.tar.gz: 49712d309dcd6306dd0fef656440203283e227bbfe05ed5594d3fbebedfedd60
+  metadata.gz: '007828413d550e542a9231e5f1c1b8bd7703ed39746a592f9e4a1ecae82fd9ec'
+  data.tar.gz: 152def6c5d84666dafc5c8afc8d1f6e082f8e63e21cb91d2e0a93055bef72ad2
 SHA512:
-  metadata.gz: 99504dd8a38c4a41daf1e123e0366702f6adf92dd3377ec811ac653161e2728a148e241f868fd11f45fed7353272d051e98673ff6eaea1f4bc2f2b9a66de3aad
-  data.tar.gz: 6d275c364e548869a11c42ee03b15396e659c0af3add7aa58c799a9bc906916440ecf1fb88b2c987f0ad2eeff06e33e8bf405657ab3ac86728cfc962023d8c77
+  metadata.gz: 23fddabaaf5f7afb7261883a92100baf451e0245b3ffe984d82a189ef0af22b1fe331fd7932fc241125be1dae727d0f88e9a8eb751046b86755329cd034dbe47
+  data.tar.gz: 2379cf2151701435f060396aaf50810188a94e8354bb32c0f457ace31aae031291cc9d54873e60fcf6b78ff5919a0a8bf5f12dce69358a63563dfea0136aeaba

data/CHANGELOG.md

@@ -1,6 +1,16 @@
 Unreleased Changes
 ------------------
 
+1.169.0 (2023-01-05)
+------------------
+
+* Feature - This release adds support for specifying which certificate authority (CA) to use for a DB instance's server certificate during DB instance creation, as well as other CA enhancements.
+
+1.168.0 (2022-12-28)
+------------------
+
+* Feature - This release adds support for Custom Engine Version (CEV) on RDS Custom SQL Server.
+
 1.167.0 (2022-12-22)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.167.0
+1.169.0

data/lib/aws-sdk-rds/client.rb

@@ -1918,54 +1918,7 @@ module Aws::RDS
       req.send_request(options)
     end
 
-    # Creates a custom DB engine version (CEV). A CEV is a binary volume
-    # snapshot of a database engine and specific AMI. The supported engines
-    # are the following:
-    #
-    # * Oracle Database 12.1 Enterprise Edition with the January 2021 or
-    #   later RU/RUR
-    #
-    # * Oracle Database 19c Enterprise Edition with the January 2021 or
-    #   later RU/RUR
-    #
-    # Amazon RDS, which is a fully managed service, supplies the Amazon
-    # Machine Image (AMI) and database software. The Amazon RDS database
-    # software is preinstalled, so you need only select a DB engine and
-    # version, and create your database. With Amazon RDS Custom for Oracle,
-    # you upload your database installation files in Amazon S3.
-    #
-    # When you create a custom engine version, you specify the files in a
-    # JSON document called a CEV manifest. This document describes
-    # installation .zip files stored in Amazon S3. RDS Custom creates your
-    # CEV from the installation files that you provided. This service model
-    # is called Bring Your Own Media (BYOM).
-    #
-    # Creation takes approximately two hours. If creation fails, RDS Custom
-    # issues `RDS-EVENT-0196` with the message `Creation failed for custom
-    # engine version`, and includes details about the failure. For example,
-    # the event prints missing files.
-    #
-    # After you create the CEV, it is available for use. You can create
-    # multiple CEVs, and create multiple RDS Custom instances from any CEV.
-    # You can also change the status of a CEV to make it available or
-    # inactive.
-    #
-    # <note markdown="1"> The MediaImport service that imports files from Amazon S3 to create
-    # CEVs isn't integrated with Amazon Web Services CloudTrail. If you
-    # turn on data logging for Amazon RDS in CloudTrail, calls to the
-    # `CreateCustomDbEngineVersion` event aren't logged. However, you might
-    # see calls from the API gateway that accesses your Amazon S3 bucket.
-    # These calls originate from the MediaImport service for the
-    # `CreateCustomDbEngineVersion` event.
-    #
-    #  </note>
-    #
-    # For more information, see [ Creating a CEV][1] in the *Amazon RDS User
-    # Guide*.
-    #
-    #
-    #
-    # [1]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/custom-cev.html#custom-cev.create
+    # Creates a custom DB engine version (CEV).
     #
     # @option params [required, String] :engine
     #   The database engine to use for your custom engine version (CEV). The
@@ -1978,7 +1931,7 @@ module Aws::RDS
     #   combination of `Engine` and `EngineVersion` is unique per customer per
     #   Region.
     #
-    # @option params [required, String] :database_installation_files_s3_bucket_name
+    # @option params [String] :database_installation_files_s3_bucket_name
     #   The name of an Amazon S3 bucket that contains database installation
     #   files for your CEV. For example, a valid bucket name is
     #   `my-custom-installation-files`.
@@ -1988,7 +1941,11 @@ module Aws::RDS
     #   for your CEV. For example, a valid bucket name is `123456789012/cev1`.
     #   If this setting isn't specified, no prefix is assumed.
     #
-    # @option params [required, String] :kms_key_id
+    # @option params [String] :image_id
+    #   The ID of the AMI. An AMI ID is required to create a CEV for RDS
+    #   Custom for SQL Server.
+    #
+    # @option params [String] :kms_key_id
     #   The Amazon Web Services KMS key identifier for an encrypted CEV. A
     #   symmetric encryption KMS key is required for RDS Custom, but optional
     #   for Amazon RDS.
@@ -2010,7 +1967,7 @@ module Aws::RDS
     # @option params [String] :description
     #   An optional description of your CEV.
     #
-    # @option params [required, String] :manifest
+    # @option params [String] :manifest
     #   The CEV manifest, which is a JSON document that describes the
     #   installation .zip files stored in Amazon S3. Specify the name/value
     #   pairs in a file or a quoted string. RDS Custom applies the patches in
@@ -2062,6 +2019,8 @@ module Aws::RDS
     #   * {Types::DBEngineVersion#db_engine_description #db_engine_description} => String
     #   * {Types::DBEngineVersion#db_engine_version_description #db_engine_version_description} => String
     #   * {Types::DBEngineVersion#default_character_set #default_character_set} => Types::CharacterSet
+    #   * {Types::DBEngineVersion#image #image} => Types::CustomDBEngineVersionAMI
+    #   * {Types::DBEngineVersion#db_engine_media_type #db_engine_media_type} => String
     #   * {Types::DBEngineVersion#supported_character_sets #supported_character_sets} => Array&lt;Types::CharacterSet&gt;
     #   * {Types::DBEngineVersion#supported_nchar_character_sets #supported_nchar_character_sets} => Array&lt;Types::CharacterSet&gt;
     #   * {Types::DBEngineVersion#valid_upgrade_target #valid_upgrade_target} => Array&lt;Types::UpgradeTarget&gt;
@@ -2083,17 +2042,20 @@ module Aws::RDS
     #   * {Types::DBEngineVersion#tag_list #tag_list} => Array&lt;Types::Tag&gt;
     #   * {Types::DBEngineVersion#supports_babelfish #supports_babelfish} => Boolean
     #   * {Types::DBEngineVersion#custom_db_engine_version_manifest #custom_db_engine_version_manifest} => String
+    #   * {Types::DBEngineVersion#supports_certificate_rotation_without_restart #supports_certificate_rotation_without_restart} => Boolean
+    #   * {Types::DBEngineVersion#supported_ca_certificate_identifiers #supported_ca_certificate_identifiers} => Array&lt;String&gt;
     #
     # @example Request syntax with placeholder values
     #
     #   resp = client.create_custom_db_engine_version({
     #     engine: "CustomEngineName", # required
     #     engine_version: "CustomEngineVersion", # required
-    #     database_installation_files_s3_bucket_name: "BucketName", # required
+    #     database_installation_files_s3_bucket_name: "BucketName",
     #     database_installation_files_s3_prefix: "String255",
-    #     kms_key_id: "KmsKeyIdOrArn", # required
+    #     image_id: "String255",
+    #     kms_key_id: "KmsKeyIdOrArn",
     #     description: "Description",
-    #     manifest: "CustomDBEngineVersionManifest", # required
+    #     manifest: "CustomDBEngineVersionManifest",
     #     tags: [
     #       {
     #         key: "String",
@@ -2111,6 +2073,9 @@ module Aws::RDS
     #   resp.db_engine_version_description #=> String
     #   resp.default_character_set.character_set_name #=> String
     #   resp.default_character_set.character_set_description #=> String
+    #   resp.image.image_id #=> String
+    #   resp.image.status #=> String
+    #   resp.db_engine_media_type #=> String
     #   resp.supported_character_sets #=> Array
     #   resp.supported_character_sets[0].character_set_name #=> String
     #   resp.supported_character_sets[0].character_set_description #=> String
@@ -2152,6 +2117,9 @@ module Aws::RDS
     #   resp.tag_list[0].value #=> String
     #   resp.supports_babelfish #=> Boolean
     #   resp.custom_db_engine_version_manifest #=> String
+    #   resp.supports_certificate_rotation_without_restart #=> Boolean
+    #   resp.supported_ca_certificate_identifiers #=> Array
+    #   resp.supported_ca_certificate_identifiers[0] #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/rds-2014-10-31/CreateCustomDBEngineVersion AWS API Documentation
     #
@@ -4766,6 +4734,22 @@ module Aws::RDS
     #   Amazon Web Services account has a different default KMS key for each
     #   Amazon Web Services Region.
     #
+    # @option params [String] :ca_certificate_identifier
+    #   Specifies the CA certificate identifier to use for the DB instance’s
+    #   server certificate.
+    #
+    #   This setting doesn't apply to RDS Custom.
+    #
+    #   For more information, see [Using SSL/TLS to encrypt a connection to a
+    #   DB instance][1] in the *Amazon RDS User Guide* and [ Using SSL/TLS to
+    #   encrypt a connection to a DB cluster][2] in the *Amazon Aurora User
+    #   Guide*.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.SSL.html
+    #   [2]: https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/UsingWithRDS.SSL.html
+    #
     # @return [Types::CreateDBInstanceResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::CreateDBInstanceResult#db_instance #db_instance} => Types::DBInstance
@@ -4857,6 +4841,7 @@ module Aws::RDS
     #     storage_throughput: 1,
     #     manage_master_user_password: false,
     #     master_user_secret_kms_key_id: "String",
+    #     ca_certificate_identifier: "String",
     #   })
     #
     # @example Response structure
@@ -5007,6 +4992,8 @@ module Aws::RDS
     #   resp.db_instance.master_user_secret.secret_arn #=> String
     #   resp.db_instance.master_user_secret.secret_status #=> String
     #   resp.db_instance.master_user_secret.kms_key_id #=> String
+    #   resp.db_instance.certificate_details.ca_identifier #=> String
+    #   resp.db_instance.certificate_details.valid_till #=> Time
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/rds-2014-10-31/CreateDBInstance AWS API Documentation
     #
@@ -5832,6 +5819,8 @@ module Aws::RDS
     #   resp.db_instance.master_user_secret.secret_arn #=> String
     #   resp.db_instance.master_user_secret.secret_status #=> String
     #   resp.db_instance.master_user_secret.kms_key_id #=> String
+    #   resp.db_instance.certificate_details.ca_identifier #=> String
+    #   resp.db_instance.certificate_details.valid_till #=> Time
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/rds-2014-10-31/CreateDBInstanceReadReplica AWS API Documentation
     #
@@ -7027,6 +7016,8 @@ module Aws::RDS
     #   * {Types::DBEngineVersion#db_engine_description #db_engine_description} => String
     #   * {Types::DBEngineVersion#db_engine_version_description #db_engine_version_description} => String
     #   * {Types::DBEngineVersion#default_character_set #default_character_set} => Types::CharacterSet
+    #   * {Types::DBEngineVersion#image #image} => Types::CustomDBEngineVersionAMI
+    #   * {Types::DBEngineVersion#db_engine_media_type #db_engine_media_type} => String
     #   * {Types::DBEngineVersion#supported_character_sets #supported_character_sets} => Array&lt;Types::CharacterSet&gt;
     #   * {Types::DBEngineVersion#supported_nchar_character_sets #supported_nchar_character_sets} => Array&lt;Types::CharacterSet&gt;
     #   * {Types::DBEngineVersion#valid_upgrade_target #valid_upgrade_target} => Array&lt;Types::UpgradeTarget&gt;
@@ -7048,6 +7039,8 @@ module Aws::RDS
     #   * {Types::DBEngineVersion#tag_list #tag_list} => Array&lt;Types::Tag&gt;
     #   * {Types::DBEngineVersion#supports_babelfish #supports_babelfish} => Boolean
     #   * {Types::DBEngineVersion#custom_db_engine_version_manifest #custom_db_engine_version_manifest} => String
+    #   * {Types::DBEngineVersion#supports_certificate_rotation_without_restart #supports_certificate_rotation_without_restart} => Boolean
+    #   * {Types::DBEngineVersion#supported_ca_certificate_identifiers #supported_ca_certificate_identifiers} => Array&lt;String&gt;
     #
     # @example Request syntax with placeholder values
     #
@@ -7065,6 +7058,9 @@ module Aws::RDS
     #   resp.db_engine_version_description #=> String
     #   resp.default_character_set.character_set_name #=> String
     #   resp.default_character_set.character_set_description #=> String
+    #   resp.image.image_id #=> String
+    #   resp.image.status #=> String
+    #   resp.db_engine_media_type #=> String
     #   resp.supported_character_sets #=> Array
     #   resp.supported_character_sets[0].character_set_name #=> String
     #   resp.supported_character_sets[0].character_set_description #=> String
@@ -7106,6 +7102,9 @@ module Aws::RDS
     #   resp.tag_list[0].value #=> String
     #   resp.supports_babelfish #=> Boolean
     #   resp.custom_db_engine_version_manifest #=> String
+    #   resp.supports_certificate_rotation_without_restart #=> Boolean
+    #   resp.supported_ca_certificate_identifiers #=> Array
+    #   resp.supported_ca_certificate_identifiers[0] #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/rds-2014-10-31/DeleteCustomDBEngineVersion AWS API Documentation
     #
@@ -7787,6 +7786,8 @@ module Aws::RDS
     #   resp.db_instance.master_user_secret.secret_arn #=> String
     #   resp.db_instance.master_user_secret.secret_status #=> String
     #   resp.db_instance.master_user_secret.kms_key_id #=> String
+    #   resp.db_instance.certificate_details.ca_identifier #=> String
+    #   resp.db_instance.certificate_details.valid_till #=> Time
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/rds-2014-10-31/DeleteDBInstance AWS API Documentation
     #
@@ -8528,6 +8529,16 @@ module Aws::RDS
     # Lists the set of CA certificates provided by Amazon RDS for this
     # Amazon Web Services account.
     #
+    # For more information, see [Using SSL/TLS to encrypt a connection to a
+    # DB instance][1] in the *Amazon RDS User Guide* and [ Using SSL/TLS to
+    # encrypt a connection to a DB cluster][2] in the *Amazon Aurora User
+    # Guide*.
+    #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.SSL.html
+    # [2]: https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/UsingWithRDS.SSL.html
+    #
     # @option params [String] :certificate_identifier
     #   The user-supplied certificate identifier. If this parameter is
     #   specified, information for only the identified certificate is
@@ -9733,6 +9744,9 @@ module Aws::RDS
     #   resp.db_engine_versions[0].db_engine_version_description #=> String
     #   resp.db_engine_versions[0].default_character_set.character_set_name #=> String
     #   resp.db_engine_versions[0].default_character_set.character_set_description #=> String
+    #   resp.db_engine_versions[0].image.image_id #=> String
+    #   resp.db_engine_versions[0].image.status #=> String
+    #   resp.db_engine_versions[0].db_engine_media_type #=> String
     #   resp.db_engine_versions[0].supported_character_sets #=> Array
     #   resp.db_engine_versions[0].supported_character_sets[0].character_set_name #=> String
     #   resp.db_engine_versions[0].supported_character_sets[0].character_set_description #=> String
@@ -9774,6 +9788,9 @@ module Aws::RDS
     #   resp.db_engine_versions[0].tag_list[0].value #=> String
     #   resp.db_engine_versions[0].supports_babelfish #=> Boolean
     #   resp.db_engine_versions[0].custom_db_engine_version_manifest #=> String
+    #   resp.db_engine_versions[0].supports_certificate_rotation_without_restart #=> Boolean
+    #   resp.db_engine_versions[0].supported_ca_certificate_identifiers #=> Array
+    #   resp.db_engine_versions[0].supported_ca_certificate_identifiers[0] #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/rds-2014-10-31/DescribeDBEngineVersions AWS API Documentation
     #
@@ -10159,6 +10176,8 @@ module Aws::RDS
     #   resp.db_instances[0].master_user_secret.secret_arn #=> String
     #   resp.db_instances[0].master_user_secret.secret_status #=> String
     #   resp.db_instances[0].master_user_secret.kms_key_id #=> String
+    #   resp.db_instances[0].certificate_details.ca_identifier #=> String
+    #   resp.db_instances[0].certificate_details.valid_till #=> Time
     #
     #
     # The following waiters are defined for this operation (see {Client#wait_until} for detailed usage):
@@ -13837,6 +13856,8 @@ module Aws::RDS
     #   * {Types::DBEngineVersion#db_engine_description #db_engine_description} => String
     #   * {Types::DBEngineVersion#db_engine_version_description #db_engine_version_description} => String
     #   * {Types::DBEngineVersion#default_character_set #default_character_set} => Types::CharacterSet
+    #   * {Types::DBEngineVersion#image #image} => Types::CustomDBEngineVersionAMI
+    #   * {Types::DBEngineVersion#db_engine_media_type #db_engine_media_type} => String
     #   * {Types::DBEngineVersion#supported_character_sets #supported_character_sets} => Array&lt;Types::CharacterSet&gt;
     #   * {Types::DBEngineVersion#supported_nchar_character_sets #supported_nchar_character_sets} => Array&lt;Types::CharacterSet&gt;
     #   * {Types::DBEngineVersion#valid_upgrade_target #valid_upgrade_target} => Array&lt;Types::UpgradeTarget&gt;
@@ -13858,6 +13879,8 @@ module Aws::RDS
     #   * {Types::DBEngineVersion#tag_list #tag_list} => Array&lt;Types::Tag&gt;
     #   * {Types::DBEngineVersion#supports_babelfish #supports_babelfish} => Boolean
     #   * {Types::DBEngineVersion#custom_db_engine_version_manifest #custom_db_engine_version_manifest} => String
+    #   * {Types::DBEngineVersion#supports_certificate_rotation_without_restart #supports_certificate_rotation_without_restart} => Boolean
+    #   * {Types::DBEngineVersion#supported_ca_certificate_identifiers #supported_ca_certificate_identifiers} => Array&lt;String&gt;
     #
     # @example Request syntax with placeholder values
     #
@@ -13877,6 +13900,9 @@ module Aws::RDS
     #   resp.db_engine_version_description #=> String
     #   resp.default_character_set.character_set_name #=> String
     #   resp.default_character_set.character_set_description #=> String
+    #   resp.image.image_id #=> String
+    #   resp.image.status #=> String
+    #   resp.db_engine_media_type #=> String
     #   resp.supported_character_sets #=> Array
     #   resp.supported_character_sets[0].character_set_name #=> String
     #   resp.supported_character_sets[0].character_set_description #=> String
@@ -13918,6 +13944,9 @@ module Aws::RDS
     #   resp.tag_list[0].value #=> String
     #   resp.supports_babelfish #=> Boolean
     #   resp.custom_db_engine_version_manifest #=> String
+    #   resp.supports_certificate_rotation_without_restart #=> Boolean
+    #   resp.supported_ca_certificate_identifiers #=> Array
+    #   resp.supported_ca_certificate_identifiers[0] #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/rds-2014-10-31/ModifyCustomDBEngineVersion AWS API Documentation
     #
@@ -13967,7 +13996,7 @@ module Aws::RDS
     #
     #   Example: `my-cluster2`
     #
-    #   Valid for: Aurora DB clusters only
+    #   Valid for: Aurora DB clusters and Multi-AZ DB clusters
     #
     # @option params [Boolean] :apply_immediately
     #   A value that indicates whether the modifications in this request and
@@ -15522,10 +15551,21 @@ module Aws::RDS
     #   This setting doesn't apply to RDS Custom.
     #
     # @option params [String] :ca_certificate_identifier
-    #   Specifies the certificate to associate with the DB instance.
+    #   Specifies the CA certificate identifier to use for the DB instance’s
+    #   server certificate.
     #
     #   This setting doesn't apply to RDS Custom.
     #
+    #   For more information, see [Using SSL/TLS to encrypt a connection to a
+    #   DB instance][1] in the *Amazon RDS User Guide* and [ Using SSL/TLS to
+    #   encrypt a connection to a DB cluster][2] in the *Amazon Aurora User
+    #   Guide*.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.SSL.html
+    #   [2]: https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/UsingWithRDS.SSL.html
+    #
     # @option params [String] :domain
     #   The Active Directory directory ID to move the DB instance to. Specify
     #   `none` to remove the instance from its current domain. You must create
@@ -16232,6 +16272,8 @@ module Aws::RDS
     #   resp.db_instance.master_user_secret.secret_arn #=> String
     #   resp.db_instance.master_user_secret.secret_status #=> String
     #   resp.db_instance.master_user_secret.kms_key_id #=> String
+    #   resp.db_instance.certificate_details.ca_identifier #=> String
+    #   resp.db_instance.certificate_details.valid_till #=> Time
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/rds-2014-10-31/ModifyDBInstance AWS API Documentation
     #
@@ -17475,6 +17517,8 @@ module Aws::RDS
     #   resp.db_instance.master_user_secret.secret_arn #=> String
     #   resp.db_instance.master_user_secret.secret_status #=> String
     #   resp.db_instance.master_user_secret.kms_key_id #=> String
+    #   resp.db_instance.certificate_details.ca_identifier #=> String
+    #   resp.db_instance.certificate_details.valid_till #=> Time
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/rds-2014-10-31/PromoteReadReplica AWS API Documentation
     #
@@ -18094,6 +18138,8 @@ module Aws::RDS
     #   resp.db_instance.master_user_secret.secret_arn #=> String
     #   resp.db_instance.master_user_secret.secret_status #=> String
     #   resp.db_instance.master_user_secret.kms_key_id #=> String
+    #   resp.db_instance.certificate_details.ca_identifier #=> String
+    #   resp.db_instance.certificate_details.valid_till #=> Time
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/rds-2014-10-31/RebootDBInstance AWS API Documentation
     #
@@ -21189,6 +21235,8 @@ module Aws::RDS
     #   resp.db_instance.master_user_secret.secret_arn #=> String
     #   resp.db_instance.master_user_secret.secret_status #=> String
     #   resp.db_instance.master_user_secret.kms_key_id #=> String
+    #   resp.db_instance.certificate_details.ca_identifier #=> String
+    #   resp.db_instance.certificate_details.valid_till #=> Time
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/rds-2014-10-31/RestoreDBInstanceFromDBSnapshot AWS API Documentation
     #
@@ -21913,6 +21961,8 @@ module Aws::RDS
     #   resp.db_instance.master_user_secret.secret_arn #=> String
     #   resp.db_instance.master_user_secret.secret_status #=> String
     #   resp.db_instance.master_user_secret.kms_key_id #=> String
+    #   resp.db_instance.certificate_details.ca_identifier #=> String
+    #   resp.db_instance.certificate_details.valid_till #=> Time
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/rds-2014-10-31/RestoreDBInstanceFromS3 AWS API Documentation
     #
@@ -22664,6 +22714,8 @@ module Aws::RDS
     #   resp.db_instance.master_user_secret.secret_arn #=> String
     #   resp.db_instance.master_user_secret.secret_status #=> String
     #   resp.db_instance.master_user_secret.kms_key_id #=> String
+    #   resp.db_instance.certificate_details.ca_identifier #=> String
+    #   resp.db_instance.certificate_details.valid_till #=> Time
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/rds-2014-10-31/RestoreDBInstanceToPointInTime AWS API Documentation
     #
@@ -23177,6 +23229,8 @@ module Aws::RDS
     #   resp.db_instance.master_user_secret.secret_arn #=> String
     #   resp.db_instance.master_user_secret.secret_status #=> String
     #   resp.db_instance.master_user_secret.kms_key_id #=> String
+    #   resp.db_instance.certificate_details.ca_identifier #=> String
+    #   resp.db_instance.certificate_details.valid_till #=> Time
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/rds-2014-10-31/StartDBInstance AWS API Documentation
     #
@@ -23329,27 +23383,27 @@ module Aws::RDS
     #   The ID of the Amazon Web Services KMS key to use to encrypt the
     #   snapshot exported to Amazon S3. The Amazon Web Services KMS key
     #   identifier is the key ARN, key ID, alias ARN, or alias name for the
-    #   KMS key. The caller of this operation must be authorized to execute
-    #   the following operations. These can be set in the Amazon Web Services
-    #   KMS key policy:
+    #   KMS key. The caller of this operation must be authorized to run the
+    #   following operations. These can be set in the Amazon Web Services KMS
+    #   key policy:
     #
-    #   * GrantOperation.Encrypt
+    #   * kms:Encrypt
     #
-    #   * GrantOperation.Decrypt
+    #   * kms:Decrypt
     #
-    #   * GrantOperation.GenerateDataKey
+    #   * kms:GenerateDataKey
     #
-    #   * GrantOperation.GenerateDataKeyWithoutPlaintext
+    #   * kms:GenerateDataKeyWithoutPlaintext
     #
-    #   * GrantOperation.ReEncryptFrom
+    #   * kms:ReEncryptFrom
     #
-    #   * GrantOperation.ReEncryptTo
+    #   * kms:ReEncryptTo
     #
-    #   * GrantOperation.CreateGrant
+    #   * kms:CreateGrant
     #
-    #   * GrantOperation.DescribeKey
+    #   * kms:DescribeKey
     #
-    #   * GrantOperation.RetireGrant
+    #   * kms:RetireGrant
     #
     # @option params [String] :s3_prefix
     #   The Amazon S3 bucket prefix to use as the file name and path of the
@@ -23819,6 +23873,8 @@ module Aws::RDS
     #   resp.db_instance.master_user_secret.secret_arn #=> String
     #   resp.db_instance.master_user_secret.secret_status #=> String
     #   resp.db_instance.master_user_secret.kms_key_id #=> String
+    #   resp.db_instance.certificate_details.ca_identifier #=> String
+    #   resp.db_instance.certificate_details.valid_till #=> Time
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/rds-2014-10-31/StopDBInstance AWS API Documentation
     #
@@ -24144,6 +24200,8 @@ module Aws::RDS
     #   resp.db_instance.master_user_secret.secret_arn #=> String
     #   resp.db_instance.master_user_secret.secret_status #=> String
     #   resp.db_instance.master_user_secret.kms_key_id #=> String
+    #   resp.db_instance.certificate_details.ca_identifier #=> String
+    #   resp.db_instance.certificate_details.valid_till #=> Time
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/rds-2014-10-31/SwitchoverReadReplica AWS API Documentation
     #
@@ -24167,7 +24225,7 @@ module Aws::RDS
         params: params,
         config: config)
       context[:gem_name] = 'aws-sdk-rds'
-      context[:gem_version] = '1.167.0'
+      context[:gem_version] = '1.169.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-rds/client_api.rb

@@ -60,8 +60,10 @@ module Aws::RDS
     Boolean = Shapes::BooleanShape.new(name: 'Boolean')
     BooleanOptional = Shapes::BooleanShape.new(name: 'BooleanOptional')
     BucketName = Shapes::StringShape.new(name: 'BucketName')
+    CACertificateIdentifiersList = Shapes::ListShape.new(name: 'CACertificateIdentifiersList')
     CancelExportTaskMessage = Shapes::StructureShape.new(name: 'CancelExportTaskMessage')
     Certificate = Shapes::StructureShape.new(name: 'Certificate')
+    CertificateDetails = Shapes::StructureShape.new(name: 'CertificateDetails')
     CertificateList = Shapes::ListShape.new(name: 'CertificateList')
     CertificateMessage = Shapes::StructureShape.new(name: 'CertificateMessage')
     CertificateNotFoundFault = Shapes::StructureShape.new(name: 'CertificateNotFoundFault')
@@ -114,6 +116,7 @@ module Aws::RDS
     CreateOptionGroupMessage = Shapes::StructureShape.new(name: 'CreateOptionGroupMessage')
     CreateOptionGroupResult = Shapes::StructureShape.new(name: 'CreateOptionGroupResult')
     CustomAvailabilityZoneNotFoundFault = Shapes::StructureShape.new(name: 'CustomAvailabilityZoneNotFoundFault')
+    CustomDBEngineVersionAMI = Shapes::StructureShape.new(name: 'CustomDBEngineVersionAMI')
     CustomDBEngineVersionAlreadyExistsFault = Shapes::StructureShape.new(name: 'CustomDBEngineVersionAlreadyExistsFault')
     CustomDBEngineVersionManifest = Shapes::StringShape.new(name: 'CustomDBEngineVersionManifest')
     CustomDBEngineVersionNotFoundFault = Shapes::StructureShape.new(name: 'CustomDBEngineVersionNotFoundFault')
@@ -337,6 +340,7 @@ module Aws::RDS
     DownloadDBLogFilePortionMessage = Shapes::StructureShape.new(name: 'DownloadDBLogFilePortionMessage')
     EC2SecurityGroup = Shapes::StructureShape.new(name: 'EC2SecurityGroup')
     EC2SecurityGroupList = Shapes::ListShape.new(name: 'EC2SecurityGroupList')
+    Ec2ImagePropertiesNotSupportedFault = Shapes::StructureShape.new(name: 'Ec2ImagePropertiesNotSupportedFault')
     Endpoint = Shapes::StructureShape.new(name: 'Endpoint')
     EngineDefaults = Shapes::StructureShape.new(name: 'EngineDefaults')
     EngineFamily = Shapes::StringShape.new(name: 'EngineFamily')
@@ -749,6 +753,8 @@ module Aws::RDS
 
     BlueGreenDeploymentTaskList.member = Shapes::ShapeRef.new(shape: BlueGreenDeploymentTask)
 
+    CACertificateIdentifiersList.member = Shapes::ShapeRef.new(shape: String)
+
     CancelExportTaskMessage.add_member(:export_task_identifier, Shapes::ShapeRef.new(shape: String, required: true, location_name: "ExportTaskIdentifier"))
     CancelExportTaskMessage.struct_class = Types::CancelExportTaskMessage
 
@@ -762,6 +768,10 @@ module Aws::RDS
     Certificate.add_member(:customer_override_valid_till, Shapes::ShapeRef.new(shape: TStamp, location_name: "CustomerOverrideValidTill"))
     Certificate.struct_class = Types::Certificate
 
+    CertificateDetails.add_member(:ca_identifier, Shapes::ShapeRef.new(shape: String, location_name: "CAIdentifier"))
+    CertificateDetails.add_member(:valid_till, Shapes::ShapeRef.new(shape: TStamp, location_name: "ValidTill"))
+    CertificateDetails.struct_class = Types::CertificateDetails
+
     CertificateList.member = Shapes::ShapeRef.new(shape: Certificate, location_name: "Certificate")
 
     CertificateMessage.add_member(:certificates, Shapes::ShapeRef.new(shape: CertificateList, location_name: "Certificates"))
@@ -869,11 +879,12 @@ module Aws::RDS
 
     CreateCustomDBEngineVersionMessage.add_member(:engine, Shapes::ShapeRef.new(shape: CustomEngineName, required: true, location_name: "Engine"))
     CreateCustomDBEngineVersionMessage.add_member(:engine_version, Shapes::ShapeRef.new(shape: CustomEngineVersion, required: true, location_name: "EngineVersion"))
-    CreateCustomDBEngineVersionMessage.add_member(:database_installation_files_s3_bucket_name, Shapes::ShapeRef.new(shape: BucketName, required: true, location_name: "DatabaseInstallationFilesS3BucketName"))
+    CreateCustomDBEngineVersionMessage.add_member(:database_installation_files_s3_bucket_name, Shapes::ShapeRef.new(shape: BucketName, location_name: "DatabaseInstallationFilesS3BucketName"))
     CreateCustomDBEngineVersionMessage.add_member(:database_installation_files_s3_prefix, Shapes::ShapeRef.new(shape: String255, location_name: "DatabaseInstallationFilesS3Prefix"))
-    CreateCustomDBEngineVersionMessage.add_member(:kms_key_id, Shapes::ShapeRef.new(shape: KmsKeyIdOrArn, required: true, location_name: "KMSKeyId"))
+    CreateCustomDBEngineVersionMessage.add_member(:image_id, Shapes::ShapeRef.new(shape: String255, location_name: "ImageId"))
+    CreateCustomDBEngineVersionMessage.add_member(:kms_key_id, Shapes::ShapeRef.new(shape: KmsKeyIdOrArn, location_name: "KMSKeyId"))
     CreateCustomDBEngineVersionMessage.add_member(:description, Shapes::ShapeRef.new(shape: Description, location_name: "Description"))
-    CreateCustomDBEngineVersionMessage.add_member(:manifest, Shapes::ShapeRef.new(shape: CustomDBEngineVersionManifest, required: true, location_name: "Manifest"))
+    CreateCustomDBEngineVersionMessage.add_member(:manifest, Shapes::ShapeRef.new(shape: CustomDBEngineVersionManifest, location_name: "Manifest"))
     CreateCustomDBEngineVersionMessage.add_member(:tags, Shapes::ShapeRef.new(shape: TagList, location_name: "Tags"))
     CreateCustomDBEngineVersionMessage.struct_class = Types::CreateCustomDBEngineVersionMessage
 
@@ -1011,6 +1022,7 @@ module Aws::RDS
     CreateDBInstanceMessage.add_member(:storage_throughput, Shapes::ShapeRef.new(shape: IntegerOptional, location_name: "StorageThroughput"))
     CreateDBInstanceMessage.add_member(:manage_master_user_password, Shapes::ShapeRef.new(shape: BooleanOptional, location_name: "ManageMasterUserPassword"))
     CreateDBInstanceMessage.add_member(:master_user_secret_kms_key_id, Shapes::ShapeRef.new(shape: String, location_name: "MasterUserSecretKmsKeyId"))
+    CreateDBInstanceMessage.add_member(:ca_certificate_identifier, Shapes::ShapeRef.new(shape: String, location_name: "CACertificateIdentifier"))
     CreateDBInstanceMessage.struct_class = Types::CreateDBInstanceMessage
 
     CreateDBInstanceReadReplicaMessage.add_member(:db_instance_identifier, Shapes::ShapeRef.new(shape: String, required: true, location_name: "DBInstanceIdentifier"))
@@ -1154,6 +1166,10 @@ module Aws::RDS
 
     CustomAvailabilityZoneNotFoundFault.struct_class = Types::CustomAvailabilityZoneNotFoundFault
 
+    CustomDBEngineVersionAMI.add_member(:image_id, Shapes::ShapeRef.new(shape: String, location_name: "ImageId"))
+    CustomDBEngineVersionAMI.add_member(:status, Shapes::ShapeRef.new(shape: String, location_name: "Status"))
+    CustomDBEngineVersionAMI.struct_class = Types::CustomDBEngineVersionAMI
+
     CustomDBEngineVersionAlreadyExistsFault.struct_class = Types::CustomDBEngineVersionAlreadyExistsFault
 
     CustomDBEngineVersionNotFoundFault.struct_class = Types::CustomDBEngineVersionNotFoundFault
@@ -1391,6 +1407,8 @@ module Aws::RDS
     DBEngineVersion.add_member(:db_engine_description, Shapes::ShapeRef.new(shape: String, location_name: "DBEngineDescription"))
     DBEngineVersion.add_member(:db_engine_version_description, Shapes::ShapeRef.new(shape: String, location_name: "DBEngineVersionDescription"))
     DBEngineVersion.add_member(:default_character_set, Shapes::ShapeRef.new(shape: CharacterSet, location_name: "DefaultCharacterSet"))
+    DBEngineVersion.add_member(:image, Shapes::ShapeRef.new(shape: CustomDBEngineVersionAMI, location_name: "Image"))
+    DBEngineVersion.add_member(:db_engine_media_type, Shapes::ShapeRef.new(shape: String, location_name: "DBEngineMediaType"))
     DBEngineVersion.add_member(:supported_character_sets, Shapes::ShapeRef.new(shape: SupportedCharacterSetsList, location_name: "SupportedCharacterSets"))
     DBEngineVersion.add_member(:supported_nchar_character_sets, Shapes::ShapeRef.new(shape: SupportedCharacterSetsList, location_name: "SupportedNcharCharacterSets"))
     DBEngineVersion.add_member(:valid_upgrade_target, Shapes::ShapeRef.new(shape: ValidUpgradeTargetList, location_name: "ValidUpgradeTarget"))
@@ -1412,6 +1430,8 @@ module Aws::RDS
     DBEngineVersion.add_member(:tag_list, Shapes::ShapeRef.new(shape: TagList, location_name: "TagList"))
     DBEngineVersion.add_member(:supports_babelfish, Shapes::ShapeRef.new(shape: Boolean, location_name: "SupportsBabelfish"))
     DBEngineVersion.add_member(:custom_db_engine_version_manifest, Shapes::ShapeRef.new(shape: CustomDBEngineVersionManifest, location_name: "CustomDBEngineVersionManifest"))
+    DBEngineVersion.add_member(:supports_certificate_rotation_without_restart, Shapes::ShapeRef.new(shape: BooleanOptional, location_name: "SupportsCertificateRotationWithoutRestart"))
+    DBEngineVersion.add_member(:supported_ca_certificate_identifiers, Shapes::ShapeRef.new(shape: CACertificateIdentifiersList, location_name: "SupportedCACertificateIdentifiers"))
     DBEngineVersion.struct_class = Types::DBEngineVersion
 
     DBEngineVersionList.member = Shapes::ShapeRef.new(shape: DBEngineVersion, location_name: "DBEngineVersion")
@@ -1499,6 +1519,7 @@ module Aws::RDS
     DBInstance.add_member(:storage_throughput, Shapes::ShapeRef.new(shape: IntegerOptional, location_name: "StorageThroughput"))
     DBInstance.add_member(:db_system_id, Shapes::ShapeRef.new(shape: String, location_name: "DBSystemId"))
     DBInstance.add_member(:master_user_secret, Shapes::ShapeRef.new(shape: MasterUserSecret, location_name: "MasterUserSecret"))
+    DBInstance.add_member(:certificate_details, Shapes::ShapeRef.new(shape: CertificateDetails, location_name: "CertificateDetails"))
     DBInstance.struct_class = Types::DBInstance
 
     DBInstanceAlreadyExistsFault.struct_class = Types::DBInstanceAlreadyExistsFault
@@ -2249,6 +2270,8 @@ module Aws::RDS
 
     EC2SecurityGroupList.member = Shapes::ShapeRef.new(shape: EC2SecurityGroup, location_name: "EC2SecurityGroup")
 
+    Ec2ImagePropertiesNotSupportedFault.struct_class = Types::Ec2ImagePropertiesNotSupportedFault
+
     Endpoint.add_member(:address, Shapes::ShapeRef.new(shape: String, location_name: "Address"))
     Endpoint.add_member(:port, Shapes::ShapeRef.new(shape: Integer, location_name: "Port"))
     Endpoint.add_member(:hosted_zone_id, Shapes::ShapeRef.new(shape: String, location_name: "HostedZoneId"))
@@ -3824,6 +3847,7 @@ module Aws::RDS
         o.output = Shapes::ShapeRef.new(shape: DBEngineVersion)
         o.errors << Shapes::ShapeRef.new(shape: CustomDBEngineVersionAlreadyExistsFault)
         o.errors << Shapes::ShapeRef.new(shape: CustomDBEngineVersionQuotaExceededFault)
+        o.errors << Shapes::ShapeRef.new(shape: Ec2ImagePropertiesNotSupportedFault)
         o.errors << Shapes::ShapeRef.new(shape: KMSKeyNotAccessibleFault)
       end)
 
@@ -3916,6 +3940,7 @@ module Aws::RDS
         o.errors << Shapes::ShapeRef.new(shape: DomainNotFoundFault)
         o.errors << Shapes::ShapeRef.new(shape: BackupPolicyNotFoundFault)
         o.errors << Shapes::ShapeRef.new(shape: NetworkTypeNotSupported)
+        o.errors << Shapes::ShapeRef.new(shape: CertificateNotFoundFault)
       end)
 
       api.add_operation(:create_db_instance_read_replica, Seahorse::Model::Operation.new.tap do |o|

data/lib/aws-sdk-rds/db_cluster.rb

@@ -1822,7 +1822,7 @@ module Aws::RDS
     #
     #   Example: `my-cluster2`
     #
-    #   Valid for: Aurora DB clusters only
+    #   Valid for: Aurora DB clusters and Multi-AZ DB clusters
     # @option options [Boolean] :apply_immediately
     #   A value that indicates whether the modifications in this request and
     #   any pending modifications are asynchronously applied as soon as

data/lib/aws-sdk-rds/db_engine_version.rb

@@ -70,6 +70,19 @@ module Aws::RDS
       data[:default_character_set]
     end
 
+    # The EC2 image
+    # @return [Types::CustomDBEngineVersionAMI]
+    def image
+      data[:image]
+    end
+
+    # A value that indicates the source media provider of the AMI based on
+    # the usage operation. Applicable for RDS Custom for SQL Server.
+    # @return [String]
+    def db_engine_media_type
+      data[:db_engine_media_type]
+    end
+
     # A list of the character sets supported by this engine for the
     # `CharacterSetName` parameter of the `CreateDBInstance` operation.
     # @return [Array<Types::CharacterSet>]
@@ -241,6 +254,29 @@ module Aws::RDS
       data[:custom_db_engine_version_manifest]
     end
 
+    # A value that indicates whether the engine version supports rotating
+    # the server certificate without rebooting the DB instance.
+    # @return [Boolean]
+    def supports_certificate_rotation_without_restart
+      data[:supports_certificate_rotation_without_restart]
+    end
+
+    # A list of the supported CA certificate identifiers.
+    #
+    # For more information, see [Using SSL/TLS to encrypt a connection to a
+    # DB instance][1] in the *Amazon RDS User Guide* and [ Using SSL/TLS to
+    # encrypt a connection to a DB cluster][2] in the *Amazon Aurora User
+    # Guide*.
+    #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.SSL.html
+    # [2]: https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/UsingWithRDS.SSL.html
+    # @return [Array<String>]
+    def supported_ca_certificate_identifiers
+      data[:supported_ca_certificate_identifiers]
+    end
+
     # @!endgroup
 
     # @return [Client]

data/lib/aws-sdk-rds/db_instance.rb

@@ -375,6 +375,16 @@ module Aws::RDS
     end
 
     # The identifier of the CA certificate for this DB instance.
+    #
+    # For more information, see [Using SSL/TLS to encrypt a connection to a
+    # DB instance][1] in the *Amazon RDS User Guide* and [ Using SSL/TLS to
+    # encrypt a connection to a DB cluster][2] in the *Amazon Aurora User
+    # Guide*.
+    #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.SSL.html
+    # [2]: https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/UsingWithRDS.SSL.html
     # @return [String]
     def ca_certificate_identifier
       data[:ca_certificate_identifier]
@@ -755,6 +765,12 @@ module Aws::RDS
       data[:master_user_secret]
     end
 
+    # The details of the DB instance's server certificate.
+    # @return [Types::CertificateDetails]
+    def certificate_details
+      data[:certificate_details]
+    end
+
     # @!endgroup
 
     # @return [Client]
@@ -955,6 +971,7 @@ module Aws::RDS
     #     storage_throughput: 1,
     #     manage_master_user_password: false,
     #     master_user_secret_kms_key_id: "String",
+    #     ca_certificate_identifier: "String",
     #   })
     # @param [Hash] options ({})
     # @option options [String] :db_name
@@ -2039,6 +2056,21 @@ module Aws::RDS
     #   There is a default KMS key for your Amazon Web Services account. Your
     #   Amazon Web Services account has a different default KMS key for each
     #   Amazon Web Services Region.
+    # @option options [String] :ca_certificate_identifier
+    #   Specifies the CA certificate identifier to use for the DB instance’s
+    #   server certificate.
+    #
+    #   This setting doesn't apply to RDS Custom.
+    #
+    #   For more information, see [Using SSL/TLS to encrypt a connection to a
+    #   DB instance][1] in the *Amazon RDS User Guide* and [ Using SSL/TLS to
+    #   encrypt a connection to a DB cluster][2] in the *Amazon Aurora User
+    #   Guide*.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.SSL.html
+    #   [2]: https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/UsingWithRDS.SSL.html
     # @return [DBInstance]
     def create(options = {})
       options = options.merge(db_instance_identifier: @id)
@@ -3187,9 +3219,20 @@ module Aws::RDS
     #
     #   This setting doesn't apply to RDS Custom.
     # @option options [String] :ca_certificate_identifier
-    #   Specifies the certificate to associate with the DB instance.
+    #   Specifies the CA certificate identifier to use for the DB instance’s
+    #   server certificate.
     #
     #   This setting doesn't apply to RDS Custom.
+    #
+    #   For more information, see [Using SSL/TLS to encrypt a connection to a
+    #   DB instance][1] in the *Amazon RDS User Guide* and [ Using SSL/TLS to
+    #   encrypt a connection to a DB cluster][2] in the *Amazon Aurora User
+    #   Guide*.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.SSL.html
+    #   [2]: https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/UsingWithRDS.SSL.html
     # @option options [String] :domain
     #   The Active Directory directory ID to move the DB instance to. Specify
     #   `none` to remove the instance from its current domain. You must create

data/lib/aws-sdk-rds/errors.rb

@@ -85,6 +85,7 @@ module Aws::RDS
   # * {DBSubnetQuotaExceededFault}
   # * {DBUpgradeDependencyFailureFault}
   # * {DomainNotFoundFault}
+  # * {Ec2ImagePropertiesNotSupportedFault}
   # * {EventSubscriptionQuotaExceededFault}
   # * {ExportTaskAlreadyExistsFault}
   # * {ExportTaskNotFoundFault}
@@ -737,6 +738,16 @@ module Aws::RDS
       end
     end
 
+    class Ec2ImagePropertiesNotSupportedFault < ServiceError
+
+      # @param [Seahorse::Client::RequestContext] context
+      # @param [String] message
+      # @param [Aws::RDS::Types::Ec2ImagePropertiesNotSupportedFault] data
+      def initialize(context, message, data = Aws::EmptyStructure.new)
+        super(context, message, data)
+      end
+    end
+
     class EventSubscriptionQuotaExceededFault < ServiceError
 
       # @param [Seahorse::Client::RequestContext] context

data/lib/aws-sdk-rds/resource.rb

@@ -1050,6 +1050,7 @@ module Aws::RDS
     #     storage_throughput: 1,
     #     manage_master_user_password: false,
     #     master_user_secret_kms_key_id: "String",
+    #     ca_certificate_identifier: "String",
     #   })
     # @param [Hash] options ({})
     # @option options [String] :db_name
@@ -2147,6 +2148,21 @@ module Aws::RDS
     #   There is a default KMS key for your Amazon Web Services account. Your
     #   Amazon Web Services account has a different default KMS key for each
     #   Amazon Web Services Region.
+    # @option options [String] :ca_certificate_identifier
+    #   Specifies the CA certificate identifier to use for the DB instance’s
+    #   server certificate.
+    #
+    #   This setting doesn't apply to RDS Custom.
+    #
+    #   For more information, see [Using SSL/TLS to encrypt a connection to a
+    #   DB instance][1] in the *Amazon RDS User Guide* and [ Using SSL/TLS to
+    #   encrypt a connection to a DB cluster][2] in the *Amazon Aurora User
+    #   Guide*.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.SSL.html
+    #   [2]: https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/UsingWithRDS.SSL.html
     # @return [DBInstance]
     def create_db_instance(options = {})
       resp = @client.create_db_instance(options)

data/lib/aws-sdk-rds/types.rb

@@ -704,6 +704,16 @@ module Aws::RDS
 
     # A CA certificate for an Amazon Web Services account.
     #
+    # For more information, see [Using SSL/TLS to encrypt a connection to a
+    # DB instance][1] in the *Amazon RDS User Guide* and [ Using SSL/TLS to
+    # encrypt a connection to a DB cluster][2] in the *Amazon Aurora User
+    # Guide*.
+    #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.SSL.html
+    # [2]: https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/UsingWithRDS.SSL.html
+    #
     # @!attribute [rw] certificate_identifier
     #   The unique key that identifies a certificate.
     #   @return [String]
@@ -752,6 +762,36 @@ module Aws::RDS
       include Aws::Structure
     end
 
+    # Returns the details of the DB instance’s server certificate.
+    #
+    # For more information, see [Using SSL/TLS to encrypt a connection to a
+    # DB instance][1] in the *Amazon RDS User Guide* and [ Using SSL/TLS to
+    # encrypt a connection to a DB cluster][2] in the *Amazon Aurora User
+    # Guide*.
+    #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.SSL.html
+    # [2]: https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/UsingWithRDS.SSL.html
+    #
+    # @!attribute [rw] ca_identifier
+    #   The CA identifier of the CA certificate used for the DB instance's
+    #   server certificate.
+    #   @return [String]
+    #
+    # @!attribute [rw] valid_till
+    #   The expiration date of the DB instance’s server certificate.
+    #   @return [Time]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/rds-2014-10-31/CertificateDetails AWS API Documentation
+    #
+    class CertificateDetails < Struct.new(
+      :ca_identifier,
+      :valid_till)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # Data returned by the **DescribeCertificates** action.
     #
     # @!attribute [rw] certificates
@@ -1753,6 +1793,11 @@ module Aws::RDS
     #   assumed.
     #   @return [String]
     #
+    # @!attribute [rw] image_id
+    #   The ID of the AMI. An AMI ID is required to create a CEV for RDS
+    #   Custom for SQL Server.
+    #   @return [String]
+    #
     # @!attribute [rw] kms_key_id
     #   The Amazon Web Services KMS key identifier for an encrypted CEV. A
     #   symmetric encryption KMS key is required for RDS Custom, but
@@ -1831,6 +1876,7 @@ module Aws::RDS
       :engine_version,
       :database_installation_files_s3_bucket_name,
       :database_installation_files_s3_prefix,
+      :image_id,
       :kms_key_id,
       :description,
       :manifest,
@@ -4229,6 +4275,23 @@ module Aws::RDS
     #   each Amazon Web Services Region.
     #   @return [String]
     #
+    # @!attribute [rw] ca_certificate_identifier
+    #   Specifies the CA certificate identifier to use for the DB instance’s
+    #   server certificate.
+    #
+    #   This setting doesn't apply to RDS Custom.
+    #
+    #   For more information, see [Using SSL/TLS to encrypt a connection to
+    #   a DB instance][1] in the *Amazon RDS User Guide* and [ Using SSL/TLS
+    #   to encrypt a connection to a DB cluster][2] in the *Amazon Aurora
+    #   User Guide*.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.SSL.html
+    #   [2]: https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/UsingWithRDS.SSL.html
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/rds-2014-10-31/CreateDBInstanceMessage AWS API Documentation
     #
     class CreateDBInstanceMessage < Struct.new(
@@ -4285,7 +4348,8 @@ module Aws::RDS
       :network_type,
       :storage_throughput,
       :manage_master_user_password,
-      :master_user_secret_kms_key_id)
+      :master_user_secret_kms_key_id,
+      :ca_certificate_identifier)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -5669,6 +5733,25 @@ module Aws::RDS
     #
     class CustomAvailabilityZoneNotFoundFault < Aws::EmptyStructure; end
 
+    # A value that indicates the AMI information.
+    #
+    # @!attribute [rw] image_id
+    #   A value that indicates the ID of the AMI.
+    #   @return [String]
+    #
+    # @!attribute [rw] status
+    #   A value that indicates the status of a custom engine version (CEV).
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/rds-2014-10-31/CustomDBEngineVersionAMI AWS API Documentation
+    #
+    class CustomDBEngineVersionAMI < Struct.new(
+      :image_id,
+      :status)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # A CEV with the specified name already exists.
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/rds-2014-10-31/CustomDBEngineVersionAlreadyExistsFault AWS API Documentation
@@ -7088,6 +7171,15 @@ module Aws::RDS
     #   isn't specified.
     #   @return [Types::CharacterSet]
     #
+    # @!attribute [rw] image
+    #   The EC2 image
+    #   @return [Types::CustomDBEngineVersionAMI]
+    #
+    # @!attribute [rw] db_engine_media_type
+    #   A value that indicates the source media provider of the AMI based on
+    #   the usage operation. Applicable for RDS Custom for SQL Server.
+    #   @return [String]
+    #
     # @!attribute [rw] supported_character_sets
     #   A list of the character sets supported by this engine for the
     #   `CharacterSetName` parameter of the `CreateDBInstance` operation.
@@ -7220,6 +7312,25 @@ module Aws::RDS
     #   [1]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/custom-cev.preparing.html#custom-cev.preparing.manifest.fields
     #   @return [String]
     #
+    # @!attribute [rw] supports_certificate_rotation_without_restart
+    #   A value that indicates whether the engine version supports rotating
+    #   the server certificate without rebooting the DB instance.
+    #   @return [Boolean]
+    #
+    # @!attribute [rw] supported_ca_certificate_identifiers
+    #   A list of the supported CA certificate identifiers.
+    #
+    #   For more information, see [Using SSL/TLS to encrypt a connection to
+    #   a DB instance][1] in the *Amazon RDS User Guide* and [ Using SSL/TLS
+    #   to encrypt a connection to a DB cluster][2] in the *Amazon Aurora
+    #   User Guide*.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.SSL.html
+    #   [2]: https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/UsingWithRDS.SSL.html
+    #   @return [Array<String>]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/rds-2014-10-31/DBEngineVersion AWS API Documentation
     #
     class DBEngineVersion < Struct.new(
@@ -7229,6 +7340,8 @@ module Aws::RDS
       :db_engine_description,
       :db_engine_version_description,
       :default_character_set,
+      :image,
+      :db_engine_media_type,
       :supported_character_sets,
       :supported_nchar_character_sets,
       :valid_upgrade_target,
@@ -7249,7 +7362,9 @@ module Aws::RDS
       :create_time,
       :tag_list,
       :supports_babelfish,
-      :custom_db_engine_version_manifest)
+      :custom_db_engine_version_manifest,
+      :supports_certificate_rotation_without_restart,
+      :supported_ca_certificate_identifiers)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -7552,6 +7667,16 @@ module Aws::RDS
     #
     # @!attribute [rw] ca_certificate_identifier
     #   The identifier of the CA certificate for this DB instance.
+    #
+    #   For more information, see [Using SSL/TLS to encrypt a connection to
+    #   a DB instance][1] in the *Amazon RDS User Guide* and [ Using SSL/TLS
+    #   to encrypt a connection to a DB cluster][2] in the *Amazon Aurora
+    #   User Guide*.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.SSL.html
+    #   [2]: https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/UsingWithRDS.SSL.html
     #   @return [String]
     #
     # @!attribute [rw] domain_memberships
@@ -7858,6 +7983,10 @@ module Aws::RDS
     #   [1]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/rds-secrets-manager.html
     #   @return [Types::MasterUserSecret]
     #
+    # @!attribute [rw] certificate_details
+    #   The details of the DB instance's server certificate.
+    #   @return [Types::CertificateDetails]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/rds-2014-10-31/DBInstance AWS API Documentation
     #
     class DBInstance < Struct.new(
@@ -7939,7 +8068,8 @@ module Aws::RDS
       :activity_stream_policy_status,
       :storage_throughput,
       :db_system_id,
-      :master_user_secret)
+      :master_user_secret,
+      :certificate_details)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -12826,6 +12956,12 @@ module Aws::RDS
       include Aws::Structure
     end
 
+    # The AMI configuration prerequisite has not been met.
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/rds-2014-10-31/Ec2ImagePropertiesNotSupportedFault AWS API Documentation
+    #
+    class Ec2ImagePropertiesNotSupportedFault < Aws::EmptyStructure; end
+
     # This data type represents the information you need to connect to an
     # Amazon RDS DB instance. This data type is used as a response element
     # in the following actions:
@@ -14029,6 +14165,16 @@ module Aws::RDS
 
     # @!attribute [rw] certificate
     #   A CA certificate for an Amazon Web Services account.
+    #
+    #   For more information, see [Using SSL/TLS to encrypt a connection to
+    #   a DB instance][1] in the *Amazon RDS User Guide* and [ Using SSL/TLS
+    #   to encrypt a connection to a DB cluster][2] in the *Amazon Aurora
+    #   User Guide*.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.SSL.html
+    #   [2]: https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/UsingWithRDS.SSL.html
     #   @return [Types::Certificate]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/rds-2014-10-31/ModifyCertificatesResult AWS API Documentation
@@ -14200,7 +14346,7 @@ module Aws::RDS
     #
     #   Example: `my-cluster2`
     #
-    #   Valid for: Aurora DB clusters only
+    #   Valid for: Aurora DB clusters and Multi-AZ DB clusters
     #   @return [String]
     #
     # @!attribute [rw] apply_immediately
@@ -15505,9 +15651,20 @@ module Aws::RDS
     #   @return [String]
     #
     # @!attribute [rw] ca_certificate_identifier
-    #   Specifies the certificate to associate with the DB instance.
+    #   Specifies the CA certificate identifier to use for the DB instance’s
+    #   server certificate.
     #
     #   This setting doesn't apply to RDS Custom.
+    #
+    #   For more information, see [Using SSL/TLS to encrypt a connection to
+    #   a DB instance][1] in the *Amazon RDS User Guide* and [ Using SSL/TLS
+    #   to encrypt a connection to a DB cluster][2] in the *Amazon Aurora
+    #   User Guide*.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.SSL.html
+    #   [2]: https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/UsingWithRDS.SSL.html
     #   @return [String]
     #
     # @!attribute [rw] domain
@@ -17689,6 +17846,16 @@ module Aws::RDS
     #
     # @!attribute [rw] ca_certificate_identifier
     #   The identifier of the CA certificate for the DB instance.
+    #
+    #   For more information, see [Using SSL/TLS to encrypt a connection to
+    #   a DB instance][1] in the *Amazon RDS User Guide* and [ Using SSL/TLS
+    #   to encrypt a connection to a DB cluster][2] in the *Amazon Aurora
+    #   User Guide*.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.SSL.html
+    #   [2]: https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/UsingWithRDS.SSL.html
     #   @return [String]
     #
     # @!attribute [rw] db_subnet_group_name
@@ -22581,27 +22748,27 @@ module Aws::RDS
     #   The ID of the Amazon Web Services KMS key to use to encrypt the
     #   snapshot exported to Amazon S3. The Amazon Web Services KMS key
     #   identifier is the key ARN, key ID, alias ARN, or alias name for the
-    #   KMS key. The caller of this operation must be authorized to execute
-    #   the following operations. These can be set in the Amazon Web
-    #   Services KMS key policy:
+    #   KMS key. The caller of this operation must be authorized to run the
+    #   following operations. These can be set in the Amazon Web Services
+    #   KMS key policy:
     #
-    #   * GrantOperation.Encrypt
+    #   * kms:Encrypt
     #
-    #   * GrantOperation.Decrypt
+    #   * kms:Decrypt
     #
-    #   * GrantOperation.GenerateDataKey
+    #   * kms:GenerateDataKey
     #
-    #   * GrantOperation.GenerateDataKeyWithoutPlaintext
+    #   * kms:GenerateDataKeyWithoutPlaintext
     #
-    #   * GrantOperation.ReEncryptFrom
+    #   * kms:ReEncryptFrom
     #
-    #   * GrantOperation.ReEncryptTo
+    #   * kms:ReEncryptTo
     #
-    #   * GrantOperation.CreateGrant
+    #   * kms:CreateGrant
     #
-    #   * GrantOperation.DescribeKey
+    #   * kms:DescribeKey
     #
-    #   * GrantOperation.RetireGrant
+    #   * kms:RetireGrant
     #   @return [String]
     #
     # @!attribute [rw] s3_prefix

data/lib/aws-sdk-rds.rb

@@ -78,6 +78,6 @@ require_relative 'aws-sdk-rds/customizations'
 # @!group service
 module Aws::RDS
 
-  GEM_VERSION = '1.167.0'
+  GEM_VERSION = '1.169.0'
 
 end

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-rds
 version: !ruby/object:Gem::Version
-  version: 1.167.0
+  version: 1.169.0
 platform: ruby
 authors:
 - Amazon Web Services
 autorequire: 
 bindir: bin
 cert_chain: []
-date: 2022-12-22 00:00:00.000000000 Z
+date: 2023-01-05 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: aws-sigv4