aws-sdk-rds 1.297.0 → 1.300.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 2f610d902befdbc0860cc109493997b8921ee88837623e6c8aafb83cf124a821
-  data.tar.gz: a7c75d589cb8d2e21e3fc59f2e614d203f78fd5d9e17d6219ddf1fea8396930c
+  metadata.gz: ba691e6f8db3ec6bdfe008d703882a13176d8b750f07ec110362416ce5be8aac
+  data.tar.gz: b2f481ab45004a9ee1ca10a4ef265d2fdc33aa100d8dca63c745dcd5d9f1a8d8
 SHA512:
-  metadata.gz: 00a70e84be3e0d10ff932cabac3e7990dca0cfad8ae9aadff3f9e4e45106907def055d19c94ac291b4484399ebdf2af7337ad513fe9657b74100b3dedcfa6002
-  data.tar.gz: e0ba542d4a085f9c0d2ed07dfd514ec00820989e551ff5cdcafff88f32578c21670c5e2baa40a744a413f51def0fefe8acc6ce7db22a8910b15323fda0c60c55
+  metadata.gz: c7641a5e12bb48869734d56b17cb6ba4fe0540ff2d6e3c412d65e6ff8d97f7986d023aaa7718175ef377d66beb27e15dc3d5a602c3c4b4d2bd951cdf4b4c792c
+  data.tar.gz: 0745bb9f498a526378b73d4d5377c57e8bab29466ab44a9bcc77be1ae4c57783263c3cfe5d13a0e7c82deaffcd4d10a832e56597f9e6b5f061600e490ffe998e

data/CHANGELOG.md

@@ -1,6 +1,21 @@
 Unreleased Changes
 ------------------
 
+1.300.0 (2025-11-21)
+------------------
+
+* Feature - Add support for Upgrade Rollout Order
+
+1.299.0 (2025-11-20)
+------------------
+
+* Feature - Add support for VPC Encryption Controls.
+
+1.298.0 (2025-11-13)
+------------------
+
+* Feature - Updated endpoint and service metadata
+
 1.297.0 (2025-10-21)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.297.0
+1.300.0

data/lib/aws-sdk-rds/client.rb

@@ -3261,40 +3261,31 @@ module Aws::RDS
     # @option params [Boolean] :publicly_accessible
     #   Specifies whether the DB cluster is publicly accessible.
     #
+    #   Valid for Cluster Type: Multi-AZ DB clusters only
+    #
     #   When the DB cluster is publicly accessible and you connect from
-    #   outside of the DB cluster's virtual private cloud (VPC), its Domain
-    #   Name System (DNS) endpoint resolves to the public IP address. When you
+    #   outside of the DB cluster's virtual private cloud (VPC), its domain
+    #   name system (DNS) endpoint resolves to the public IP address. When you
     #   connect from within the same VPC as the DB cluster, the endpoint
     #   resolves to the private IP address. Access to the DB cluster is
-    #   ultimately controlled by the security group it uses. That public
-    #   access isn't permitted if the security group assigned to the DB
-    #   cluster doesn't permit it.
+    #   controlled by its security group settings.
     #
     #   When the DB cluster isn't publicly accessible, it is an internal DB
     #   cluster with a DNS name that resolves to a private IP address.
     #
-    #   Valid for Cluster Type: Multi-AZ DB clusters only
-    #
-    #   Default: The default behavior varies depending on whether
-    #   `DBSubnetGroupName` is specified.
-    #
-    #   If `DBSubnetGroupName` isn't specified, and `PubliclyAccessible`
-    #   isn't specified, the following applies:
-    #
-    #   * If the default VPC in the target Region doesn’t have an internet
-    #     gateway attached to it, the DB cluster is private.
+    #   The default behavior when `PubliclyAccessible` is not specified
+    #   depends on whether a `DBSubnetGroup` is specified.
     #
-    #   * If the default VPC in the target Region has an internet gateway
-    #     attached to it, the DB cluster is public.
+    #   If `DBSubnetGroup` isn't specified, `PubliclyAccessible` defaults to
+    #   `true`.
     #
-    #   If `DBSubnetGroupName` is specified, and `PubliclyAccessible` isn't
-    #   specified, the following applies:
+    #   If `DBSubnetGroup` is specified, `PubliclyAccessible` defaults to
+    #   `false` unless the value of `DBSubnetGroup` is `default`, in which
+    #   case `PubliclyAccessible` defaults to `true`.
     #
-    #   * If the subnets are part of a VPC that doesn’t have an internet
-    #     gateway attached to it, the DB cluster is private.
-    #
-    #   * If the subnets are part of a VPC that has an internet gateway
-    #     attached to it, the DB cluster is public.
+    #   If `PubliclyAccessible` is true and the VPC that the `DBSubnetGroup`
+    #   is in doesn't have an internet gateway attached to it, Amazon RDS
+    #   returns an error.
     #
     # @option params [Boolean] :auto_minor_version_upgrade
     #   Specifies whether minor engine upgrades are applied automatically to
@@ -3852,7 +3843,7 @@ module Aws::RDS
     #     performance_insights_kms_key_id: "String",
     #     performance_insights_retention_period: 1,
     #     enable_limitless_database: false,
-    #     cluster_scalability_type: "standard", # accepts standard, limitless, scaleout
+    #     cluster_scalability_type: "standard", # accepts standard, limitless
     #     db_system_id: "String",
     #     manage_master_user_password: false,
     #     enable_local_write_forwarding: false,
@@ -3892,6 +3883,7 @@ module Aws::RDS
     #   resp.db_cluster.db_cluster_option_group_memberships[0].status #=> String
     #   resp.db_cluster.preferred_backup_window #=> String
     #   resp.db_cluster.preferred_maintenance_window #=> String
+    #   resp.db_cluster.upgrade_rollout_order #=> String, one of "first", "second", "last"
     #   resp.db_cluster.replication_source_identifier #=> String
     #   resp.db_cluster.read_replica_identifiers #=> Array
     #   resp.db_cluster.read_replica_identifiers[0] #=> String
@@ -4003,7 +3995,7 @@ module Aws::RDS
     #   resp.db_cluster.aws_backup_recovery_point_arn #=> String
     #   resp.db_cluster.limitless_database.status #=> String, one of "active", "not-in-use", "enabled", "disabled", "enabling", "disabling", "modifying-max-capacity", "error"
     #   resp.db_cluster.limitless_database.min_required_acu #=> Float
-    #   resp.db_cluster.cluster_scalability_type #=> String, one of "standard", "limitless", "scaleout"
+    #   resp.db_cluster.cluster_scalability_type #=> String, one of "standard", "limitless"
     #   resp.db_cluster.certificate_details.ca_identifier #=> String
     #   resp.db_cluster.certificate_details.valid_till #=> Time
     #   resp.db_cluster.engine_lifecycle_support #=> String
@@ -5197,37 +5189,28 @@ module Aws::RDS
     #   Specifies whether the DB instance is publicly accessible.
     #
     #   When the DB instance is publicly accessible and you connect from
-    #   outside of the DB instance's virtual private cloud (VPC), its Domain
-    #   Name System (DNS) endpoint resolves to the public IP address. When you
+    #   outside of the DB instance's virtual private cloud (VPC), its domain
+    #   name system (DNS) endpoint resolves to the public IP address. When you
     #   connect from within the same VPC as the DB instance, the endpoint
     #   resolves to the private IP address. Access to the DB instance is
-    #   ultimately controlled by the security group it uses. That public
-    #   access is not permitted if the security group assigned to the DB
-    #   instance doesn't permit it.
+    #   controlled by its security group settings.
     #
     #   When the DB instance isn't publicly accessible, it is an internal DB
     #   instance with a DNS name that resolves to a private IP address.
     #
-    #   Default: The default behavior varies depending on whether
-    #   `DBSubnetGroupName` is specified.
+    #   The default behavior when `PubliclyAccessible` is not specified
+    #   depends on whether a `DBSubnetGroup` is specified.
     #
-    #   If `DBSubnetGroupName` isn't specified, and `PubliclyAccessible`
-    #   isn't specified, the following applies:
+    #   If `DBSubnetGroup` isn't specified, `PubliclyAccessible` defaults to
+    #   `false` for Aurora instances and `true` for non-Aurora instances.
     #
-    #   * If the default VPC in the target Region doesn’t have an internet
-    #     gateway attached to it, the DB instance is private.
+    #   If `DBSubnetGroup` is specified, `PubliclyAccessible` defaults to
+    #   `false` unless the value of `DBSubnetGroup` is `default`, in which
+    #   case `PubliclyAccessible` defaults to `true`.
     #
-    #   * If the default VPC in the target Region has an internet gateway
-    #     attached to it, the DB instance is public.
-    #
-    #   If `DBSubnetGroupName` is specified, and `PubliclyAccessible` isn't
-    #   specified, the following applies:
-    #
-    #   * If the subnets are part of a VPC that doesn’t have an internet
-    #     gateway attached to it, the DB instance is private.
-    #
-    #   * If the subnets are part of a VPC that has an internet gateway
-    #     attached to it, the DB instance is public.
+    #   If `PubliclyAccessible` is true and the VPC that the `DBSubnetGroup`
+    #   is in doesn't have an internet gateway attached to it, Amazon RDS
+    #   returns an error.
     #
     # @option params [Array<Types::Tag>] :tags
     #   Tags to assign to the DB instance.
@@ -6022,6 +6005,7 @@ module Aws::RDS
     #   resp.db_instance.db_subnet_group.supported_network_types #=> Array
     #   resp.db_instance.db_subnet_group.supported_network_types[0] #=> String
     #   resp.db_instance.preferred_maintenance_window #=> String
+    #   resp.db_instance.upgrade_rollout_order #=> String, one of "first", "second", "last"
     #   resp.db_instance.pending_modified_values.db_instance_class #=> String
     #   resp.db_instance.pending_modified_values.allocated_storage #=> Integer
     #   resp.db_instance.pending_modified_values.master_user_password #=> String
@@ -7034,6 +7018,7 @@ module Aws::RDS
     #   resp.db_instance.db_subnet_group.supported_network_types #=> Array
     #   resp.db_instance.db_subnet_group.supported_network_types[0] #=> String
     #   resp.db_instance.preferred_maintenance_window #=> String
+    #   resp.db_instance.upgrade_rollout_order #=> String, one of "first", "second", "last"
     #   resp.db_instance.pending_modified_values.db_instance_class #=> String
     #   resp.db_instance.pending_modified_values.allocated_storage #=> Integer
     #   resp.db_instance.pending_modified_values.master_user_password #=> String
@@ -9478,6 +9463,7 @@ module Aws::RDS
     #   resp.db_cluster.db_cluster_option_group_memberships[0].status #=> String
     #   resp.db_cluster.preferred_backup_window #=> String
     #   resp.db_cluster.preferred_maintenance_window #=> String
+    #   resp.db_cluster.upgrade_rollout_order #=> String, one of "first", "second", "last"
     #   resp.db_cluster.replication_source_identifier #=> String
     #   resp.db_cluster.read_replica_identifiers #=> Array
     #   resp.db_cluster.read_replica_identifiers[0] #=> String
@@ -9589,7 +9575,7 @@ module Aws::RDS
     #   resp.db_cluster.aws_backup_recovery_point_arn #=> String
     #   resp.db_cluster.limitless_database.status #=> String, one of "active", "not-in-use", "enabled", "disabled", "enabling", "disabling", "modifying-max-capacity", "error"
     #   resp.db_cluster.limitless_database.min_required_acu #=> Float
-    #   resp.db_cluster.cluster_scalability_type #=> String, one of "standard", "limitless", "scaleout"
+    #   resp.db_cluster.cluster_scalability_type #=> String, one of "standard", "limitless"
     #   resp.db_cluster.certificate_details.ca_identifier #=> String
     #   resp.db_cluster.certificate_details.valid_till #=> Time
     #   resp.db_cluster.engine_lifecycle_support #=> String
@@ -10071,6 +10057,7 @@ module Aws::RDS
     #   resp.db_instance.db_subnet_group.supported_network_types #=> Array
     #   resp.db_instance.db_subnet_group.supported_network_types[0] #=> String
     #   resp.db_instance.preferred_maintenance_window #=> String
+    #   resp.db_instance.upgrade_rollout_order #=> String, one of "first", "second", "last"
     #   resp.db_instance.pending_modified_values.db_instance_class #=> String
     #   resp.db_instance.pending_modified_values.allocated_storage #=> Integer
     #   resp.db_instance.pending_modified_values.master_user_password #=> String
@@ -12937,6 +12924,7 @@ module Aws::RDS
     #   resp.db_clusters[0].db_cluster_option_group_memberships[0].status #=> String
     #   resp.db_clusters[0].preferred_backup_window #=> String
     #   resp.db_clusters[0].preferred_maintenance_window #=> String
+    #   resp.db_clusters[0].upgrade_rollout_order #=> String, one of "first", "second", "last"
     #   resp.db_clusters[0].replication_source_identifier #=> String
     #   resp.db_clusters[0].read_replica_identifiers #=> Array
     #   resp.db_clusters[0].read_replica_identifiers[0] #=> String
@@ -13048,7 +13036,7 @@ module Aws::RDS
     #   resp.db_clusters[0].aws_backup_recovery_point_arn #=> String
     #   resp.db_clusters[0].limitless_database.status #=> String, one of "active", "not-in-use", "enabled", "disabled", "enabling", "disabling", "modifying-max-capacity", "error"
     #   resp.db_clusters[0].limitless_database.min_required_acu #=> Float
-    #   resp.db_clusters[0].cluster_scalability_type #=> String, one of "standard", "limitless", "scaleout"
+    #   resp.db_clusters[0].cluster_scalability_type #=> String, one of "standard", "limitless"
     #   resp.db_clusters[0].certificate_details.ca_identifier #=> String
     #   resp.db_clusters[0].certificate_details.valid_till #=> Time
     #   resp.db_clusters[0].engine_lifecycle_support #=> String
@@ -13671,6 +13659,7 @@ module Aws::RDS
     #   resp.db_instances[0].db_subnet_group.supported_network_types #=> Array
     #   resp.db_instances[0].db_subnet_group.supported_network_types[0] #=> String
     #   resp.db_instances[0].preferred_maintenance_window #=> String
+    #   resp.db_instances[0].upgrade_rollout_order #=> String, one of "first", "second", "last"
     #   resp.db_instances[0].pending_modified_values.db_instance_class #=> String
     #   resp.db_instances[0].pending_modified_values.allocated_storage #=> Integer
     #   resp.db_instances[0].pending_modified_values.master_user_password #=> String
@@ -18380,6 +18369,7 @@ module Aws::RDS
     #   resp.db_cluster.db_cluster_option_group_memberships[0].status #=> String
     #   resp.db_cluster.preferred_backup_window #=> String
     #   resp.db_cluster.preferred_maintenance_window #=> String
+    #   resp.db_cluster.upgrade_rollout_order #=> String, one of "first", "second", "last"
     #   resp.db_cluster.replication_source_identifier #=> String
     #   resp.db_cluster.read_replica_identifiers #=> Array
     #   resp.db_cluster.read_replica_identifiers[0] #=> String
@@ -18491,7 +18481,7 @@ module Aws::RDS
     #   resp.db_cluster.aws_backup_recovery_point_arn #=> String
     #   resp.db_cluster.limitless_database.status #=> String, one of "active", "not-in-use", "enabled", "disabled", "enabling", "disabling", "modifying-max-capacity", "error"
     #   resp.db_cluster.limitless_database.min_required_acu #=> Float
-    #   resp.db_cluster.cluster_scalability_type #=> String, one of "standard", "limitless", "scaleout"
+    #   resp.db_cluster.cluster_scalability_type #=> String, one of "standard", "limitless"
     #   resp.db_cluster.certificate_details.ca_identifier #=> String
     #   resp.db_cluster.certificate_details.valid_till #=> Time
     #   resp.db_cluster.engine_lifecycle_support #=> String
@@ -20126,6 +20116,7 @@ module Aws::RDS
     #   resp.db_cluster.db_cluster_option_group_memberships[0].status #=> String
     #   resp.db_cluster.preferred_backup_window #=> String
     #   resp.db_cluster.preferred_maintenance_window #=> String
+    #   resp.db_cluster.upgrade_rollout_order #=> String, one of "first", "second", "last"
     #   resp.db_cluster.replication_source_identifier #=> String
     #   resp.db_cluster.read_replica_identifiers #=> Array
     #   resp.db_cluster.read_replica_identifiers[0] #=> String
@@ -20237,7 +20228,7 @@ module Aws::RDS
     #   resp.db_cluster.aws_backup_recovery_point_arn #=> String
     #   resp.db_cluster.limitless_database.status #=> String, one of "active", "not-in-use", "enabled", "disabled", "enabling", "disabling", "modifying-max-capacity", "error"
     #   resp.db_cluster.limitless_database.min_required_acu #=> Float
-    #   resp.db_cluster.cluster_scalability_type #=> String, one of "standard", "limitless", "scaleout"
+    #   resp.db_cluster.cluster_scalability_type #=> String, one of "standard", "limitless"
     #   resp.db_cluster.certificate_details.ca_identifier #=> String
     #   resp.db_cluster.certificate_details.valid_till #=> Time
     #   resp.db_cluster.engine_lifecycle_support #=> String
@@ -21177,7 +21168,7 @@ module Aws::RDS
     #
     #   * Must be in the distinguished name format.
     #
-    #   * Can't be longer than 64 characters.
+    #   ^
     #
     #   Example:
     #   `OU=mymanagedADtestOU,DC=mymanagedADtest,DC=mymanagedAD,DC=mydomain`
@@ -21931,6 +21922,7 @@ module Aws::RDS
     #   resp.db_instance.db_subnet_group.supported_network_types #=> Array
     #   resp.db_instance.db_subnet_group.supported_network_types[0] #=> String
     #   resp.db_instance.preferred_maintenance_window #=> String
+    #   resp.db_instance.upgrade_rollout_order #=> String, one of "first", "second", "last"
     #   resp.db_instance.pending_modified_values.db_instance_class #=> String
     #   resp.db_instance.pending_modified_values.allocated_storage #=> Integer
     #   resp.db_instance.pending_modified_values.master_user_password #=> String
@@ -23880,6 +23872,7 @@ module Aws::RDS
     #   resp.db_instance.db_subnet_group.supported_network_types #=> Array
     #   resp.db_instance.db_subnet_group.supported_network_types[0] #=> String
     #   resp.db_instance.preferred_maintenance_window #=> String
+    #   resp.db_instance.upgrade_rollout_order #=> String, one of "first", "second", "last"
     #   resp.db_instance.pending_modified_values.db_instance_class #=> String
     #   resp.db_instance.pending_modified_values.allocated_storage #=> Integer
     #   resp.db_instance.pending_modified_values.master_user_password #=> String
@@ -24069,6 +24062,7 @@ module Aws::RDS
     #   resp.db_cluster.db_cluster_option_group_memberships[0].status #=> String
     #   resp.db_cluster.preferred_backup_window #=> String
     #   resp.db_cluster.preferred_maintenance_window #=> String
+    #   resp.db_cluster.upgrade_rollout_order #=> String, one of "first", "second", "last"
     #   resp.db_cluster.replication_source_identifier #=> String
     #   resp.db_cluster.read_replica_identifiers #=> Array
     #   resp.db_cluster.read_replica_identifiers[0] #=> String
@@ -24180,7 +24174,7 @@ module Aws::RDS
     #   resp.db_cluster.aws_backup_recovery_point_arn #=> String
     #   resp.db_cluster.limitless_database.status #=> String, one of "active", "not-in-use", "enabled", "disabled", "enabling", "disabling", "modifying-max-capacity", "error"
     #   resp.db_cluster.limitless_database.min_required_acu #=> Float
-    #   resp.db_cluster.cluster_scalability_type #=> String, one of "standard", "limitless", "scaleout"
+    #   resp.db_cluster.cluster_scalability_type #=> String, one of "standard", "limitless"
     #   resp.db_cluster.certificate_details.ca_identifier #=> String
     #   resp.db_cluster.certificate_details.valid_till #=> Time
     #   resp.db_cluster.engine_lifecycle_support #=> String
@@ -24374,6 +24368,7 @@ module Aws::RDS
     #   resp.db_cluster.db_cluster_option_group_memberships[0].status #=> String
     #   resp.db_cluster.preferred_backup_window #=> String
     #   resp.db_cluster.preferred_maintenance_window #=> String
+    #   resp.db_cluster.upgrade_rollout_order #=> String, one of "first", "second", "last"
     #   resp.db_cluster.replication_source_identifier #=> String
     #   resp.db_cluster.read_replica_identifiers #=> Array
     #   resp.db_cluster.read_replica_identifiers[0] #=> String
@@ -24485,7 +24480,7 @@ module Aws::RDS
     #   resp.db_cluster.aws_backup_recovery_point_arn #=> String
     #   resp.db_cluster.limitless_database.status #=> String, one of "active", "not-in-use", "enabled", "disabled", "enabling", "disabling", "modifying-max-capacity", "error"
     #   resp.db_cluster.limitless_database.min_required_acu #=> Float
-    #   resp.db_cluster.cluster_scalability_type #=> String, one of "standard", "limitless", "scaleout"
+    #   resp.db_cluster.cluster_scalability_type #=> String, one of "standard", "limitless"
     #   resp.db_cluster.certificate_details.ca_identifier #=> String
     #   resp.db_cluster.certificate_details.valid_till #=> Time
     #   resp.db_cluster.engine_lifecycle_support #=> String
@@ -24610,6 +24605,7 @@ module Aws::RDS
     #   resp.db_instance.db_subnet_group.supported_network_types #=> Array
     #   resp.db_instance.db_subnet_group.supported_network_types[0] #=> String
     #   resp.db_instance.preferred_maintenance_window #=> String
+    #   resp.db_instance.upgrade_rollout_order #=> String, one of "first", "second", "last"
     #   resp.db_instance.pending_modified_values.db_instance_class #=> String
     #   resp.db_instance.pending_modified_values.allocated_storage #=> Integer
     #   resp.db_instance.pending_modified_values.master_user_password #=> String
@@ -25978,6 +25974,7 @@ module Aws::RDS
     #   resp.db_cluster.db_cluster_option_group_memberships[0].status #=> String
     #   resp.db_cluster.preferred_backup_window #=> String
     #   resp.db_cluster.preferred_maintenance_window #=> String
+    #   resp.db_cluster.upgrade_rollout_order #=> String, one of "first", "second", "last"
     #   resp.db_cluster.replication_source_identifier #=> String
     #   resp.db_cluster.read_replica_identifiers #=> Array
     #   resp.db_cluster.read_replica_identifiers[0] #=> String
@@ -26089,7 +26086,7 @@ module Aws::RDS
     #   resp.db_cluster.aws_backup_recovery_point_arn #=> String
     #   resp.db_cluster.limitless_database.status #=> String, one of "active", "not-in-use", "enabled", "disabled", "enabling", "disabling", "modifying-max-capacity", "error"
     #   resp.db_cluster.limitless_database.min_required_acu #=> Float
-    #   resp.db_cluster.cluster_scalability_type #=> String, one of "standard", "limitless", "scaleout"
+    #   resp.db_cluster.cluster_scalability_type #=> String, one of "standard", "limitless"
     #   resp.db_cluster.certificate_details.ca_identifier #=> String
     #   resp.db_cluster.certificate_details.valid_till #=> Time
     #   resp.db_cluster.engine_lifecycle_support #=> String
@@ -26804,6 +26801,7 @@ module Aws::RDS
     #   resp.db_cluster.db_cluster_option_group_memberships[0].status #=> String
     #   resp.db_cluster.preferred_backup_window #=> String
     #   resp.db_cluster.preferred_maintenance_window #=> String
+    #   resp.db_cluster.upgrade_rollout_order #=> String, one of "first", "second", "last"
     #   resp.db_cluster.replication_source_identifier #=> String
     #   resp.db_cluster.read_replica_identifiers #=> Array
     #   resp.db_cluster.read_replica_identifiers[0] #=> String
@@ -26915,7 +26913,7 @@ module Aws::RDS
     #   resp.db_cluster.aws_backup_recovery_point_arn #=> String
     #   resp.db_cluster.limitless_database.status #=> String, one of "active", "not-in-use", "enabled", "disabled", "enabling", "disabling", "modifying-max-capacity", "error"
     #   resp.db_cluster.limitless_database.min_required_acu #=> Float
-    #   resp.db_cluster.cluster_scalability_type #=> String, one of "standard", "limitless", "scaleout"
+    #   resp.db_cluster.cluster_scalability_type #=> String, one of "standard", "limitless"
     #   resp.db_cluster.certificate_details.ca_identifier #=> String
     #   resp.db_cluster.certificate_details.valid_till #=> Time
     #   resp.db_cluster.engine_lifecycle_support #=> String
@@ -27613,6 +27611,7 @@ module Aws::RDS
     #   resp.db_cluster.db_cluster_option_group_memberships[0].status #=> String
     #   resp.db_cluster.preferred_backup_window #=> String
     #   resp.db_cluster.preferred_maintenance_window #=> String
+    #   resp.db_cluster.upgrade_rollout_order #=> String, one of "first", "second", "last"
     #   resp.db_cluster.replication_source_identifier #=> String
     #   resp.db_cluster.read_replica_identifiers #=> Array
     #   resp.db_cluster.read_replica_identifiers[0] #=> String
@@ -27724,7 +27723,7 @@ module Aws::RDS
     #   resp.db_cluster.aws_backup_recovery_point_arn #=> String
     #   resp.db_cluster.limitless_database.status #=> String, one of "active", "not-in-use", "enabled", "disabled", "enabling", "disabling", "modifying-max-capacity", "error"
     #   resp.db_cluster.limitless_database.min_required_acu #=> Float
-    #   resp.db_cluster.cluster_scalability_type #=> String, one of "standard", "limitless", "scaleout"
+    #   resp.db_cluster.cluster_scalability_type #=> String, one of "standard", "limitless"
     #   resp.db_cluster.certificate_details.ca_identifier #=> String
     #   resp.db_cluster.certificate_details.valid_till #=> Time
     #   resp.db_cluster.engine_lifecycle_support #=> String
@@ -28546,6 +28545,7 @@ module Aws::RDS
     #   resp.db_instance.db_subnet_group.supported_network_types #=> Array
     #   resp.db_instance.db_subnet_group.supported_network_types[0] #=> String
     #   resp.db_instance.preferred_maintenance_window #=> String
+    #   resp.db_instance.upgrade_rollout_order #=> String, one of "first", "second", "last"
     #   resp.db_instance.pending_modified_values.db_instance_class #=> String
     #   resp.db_instance.pending_modified_values.allocated_storage #=> Integer
     #   resp.db_instance.pending_modified_values.master_user_password #=> String
@@ -29364,6 +29364,7 @@ module Aws::RDS
     #   resp.db_instance.db_subnet_group.supported_network_types #=> Array
     #   resp.db_instance.db_subnet_group.supported_network_types[0] #=> String
     #   resp.db_instance.preferred_maintenance_window #=> String
+    #   resp.db_instance.upgrade_rollout_order #=> String, one of "first", "second", "last"
     #   resp.db_instance.pending_modified_values.db_instance_class #=> String
     #   resp.db_instance.pending_modified_values.allocated_storage #=> Integer
     #   resp.db_instance.pending_modified_values.master_user_password #=> String
@@ -30375,6 +30376,7 @@ module Aws::RDS
     #   resp.db_instance.db_subnet_group.supported_network_types #=> Array
     #   resp.db_instance.db_subnet_group.supported_network_types[0] #=> String
     #   resp.db_instance.preferred_maintenance_window #=> String
+    #   resp.db_instance.upgrade_rollout_order #=> String, one of "first", "second", "last"
     #   resp.db_instance.pending_modified_values.db_instance_class #=> String
     #   resp.db_instance.pending_modified_values.allocated_storage #=> Integer
     #   resp.db_instance.pending_modified_values.master_user_password #=> String
@@ -30792,6 +30794,7 @@ module Aws::RDS
     #   resp.db_cluster.db_cluster_option_group_memberships[0].status #=> String
     #   resp.db_cluster.preferred_backup_window #=> String
     #   resp.db_cluster.preferred_maintenance_window #=> String
+    #   resp.db_cluster.upgrade_rollout_order #=> String, one of "first", "second", "last"
     #   resp.db_cluster.replication_source_identifier #=> String
     #   resp.db_cluster.read_replica_identifiers #=> Array
     #   resp.db_cluster.read_replica_identifiers[0] #=> String
@@ -30903,7 +30906,7 @@ module Aws::RDS
     #   resp.db_cluster.aws_backup_recovery_point_arn #=> String
     #   resp.db_cluster.limitless_database.status #=> String, one of "active", "not-in-use", "enabled", "disabled", "enabling", "disabling", "modifying-max-capacity", "error"
     #   resp.db_cluster.limitless_database.min_required_acu #=> Float
-    #   resp.db_cluster.cluster_scalability_type #=> String, one of "standard", "limitless", "scaleout"
+    #   resp.db_cluster.cluster_scalability_type #=> String, one of "standard", "limitless"
     #   resp.db_cluster.certificate_details.ca_identifier #=> String
     #   resp.db_cluster.certificate_details.valid_till #=> Time
     #   resp.db_cluster.engine_lifecycle_support #=> String
@@ -31000,6 +31003,7 @@ module Aws::RDS
     #   resp.db_instance.db_subnet_group.supported_network_types #=> Array
     #   resp.db_instance.db_subnet_group.supported_network_types[0] #=> String
     #   resp.db_instance.preferred_maintenance_window #=> String
+    #   resp.db_instance.upgrade_rollout_order #=> String, one of "first", "second", "last"
     #   resp.db_instance.pending_modified_values.db_instance_class #=> String
     #   resp.db_instance.pending_modified_values.allocated_storage #=> Integer
     #   resp.db_instance.pending_modified_values.master_user_password #=> String
@@ -31628,6 +31632,7 @@ module Aws::RDS
     #   resp.db_cluster.db_cluster_option_group_memberships[0].status #=> String
     #   resp.db_cluster.preferred_backup_window #=> String
     #   resp.db_cluster.preferred_maintenance_window #=> String
+    #   resp.db_cluster.upgrade_rollout_order #=> String, one of "first", "second", "last"
     #   resp.db_cluster.replication_source_identifier #=> String
     #   resp.db_cluster.read_replica_identifiers #=> Array
     #   resp.db_cluster.read_replica_identifiers[0] #=> String
@@ -31739,7 +31744,7 @@ module Aws::RDS
     #   resp.db_cluster.aws_backup_recovery_point_arn #=> String
     #   resp.db_cluster.limitless_database.status #=> String, one of "active", "not-in-use", "enabled", "disabled", "enabling", "disabling", "modifying-max-capacity", "error"
     #   resp.db_cluster.limitless_database.min_required_acu #=> Float
-    #   resp.db_cluster.cluster_scalability_type #=> String, one of "standard", "limitless", "scaleout"
+    #   resp.db_cluster.cluster_scalability_type #=> String, one of "standard", "limitless"
     #   resp.db_cluster.certificate_details.ca_identifier #=> String
     #   resp.db_cluster.certificate_details.valid_till #=> Time
     #   resp.db_cluster.engine_lifecycle_support #=> String
@@ -31844,6 +31849,7 @@ module Aws::RDS
     #   resp.db_instance.db_subnet_group.supported_network_types #=> Array
     #   resp.db_instance.db_subnet_group.supported_network_types[0] #=> String
     #   resp.db_instance.preferred_maintenance_window #=> String
+    #   resp.db_instance.upgrade_rollout_order #=> String, one of "first", "second", "last"
     #   resp.db_instance.pending_modified_values.db_instance_class #=> String
     #   resp.db_instance.pending_modified_values.allocated_storage #=> Integer
     #   resp.db_instance.pending_modified_values.master_user_password #=> String
@@ -32451,6 +32457,7 @@ module Aws::RDS
     #   resp.db_instance.db_subnet_group.supported_network_types #=> Array
     #   resp.db_instance.db_subnet_group.supported_network_types[0] #=> String
     #   resp.db_instance.preferred_maintenance_window #=> String
+    #   resp.db_instance.upgrade_rollout_order #=> String, one of "first", "second", "last"
     #   resp.db_instance.pending_modified_values.db_instance_class #=> String
     #   resp.db_instance.pending_modified_values.allocated_storage #=> Integer
     #   resp.db_instance.pending_modified_values.master_user_password #=> String
@@ -32605,7 +32612,7 @@ module Aws::RDS
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-rds'
-      context[:gem_version] = '1.297.0'
+      context[:gem_version] = '1.300.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-rds/client_api.rb

@@ -767,6 +767,7 @@ module Aws::RDS
     TenantDatabasesMessage = Shapes::StructureShape.new(name: 'TenantDatabasesMessage')
     Timezone = Shapes::StructureShape.new(name: 'Timezone')
     UnsupportedDBEngineVersionFault = Shapes::StructureShape.new(name: 'UnsupportedDBEngineVersionFault', error: {"code" => "UnsupportedDBEngineVersion", "httpStatusCode" => 400, "senderFault" => true})
+    UpgradeRolloutOrder = Shapes::StringShape.new(name: 'UpgradeRolloutOrder')
     UpgradeTarget = Shapes::StructureShape.new(name: 'UpgradeTarget')
     UserAuthConfig = Shapes::StructureShape.new(name: 'UserAuthConfig')
     UserAuthConfigInfo = Shapes::StructureShape.new(name: 'UserAuthConfigInfo')
@@ -776,6 +777,7 @@ module Aws::RDS
     ValidStorageOptions = Shapes::StructureShape.new(name: 'ValidStorageOptions')
     ValidStorageOptionsList = Shapes::ListShape.new(name: 'ValidStorageOptionsList')
     ValidUpgradeTargetList = Shapes::ListShape.new(name: 'ValidUpgradeTargetList')
+    VpcEncryptionControlViolationException = Shapes::StructureShape.new(name: 'VpcEncryptionControlViolationException', error: {"code" => "VpcEncryptionControlViolationException", "httpStatusCode" => 400, "senderFault" => true})
     VpcSecurityGroupIdList = Shapes::ListShape.new(name: 'VpcSecurityGroupIdList')
     VpcSecurityGroupMembership = Shapes::StructureShape.new(name: 'VpcSecurityGroupMembership')
     VpcSecurityGroupMembershipList = Shapes::ListShape.new(name: 'VpcSecurityGroupMembershipList')
@@ -1423,6 +1425,7 @@ module Aws::RDS
     DBCluster.add_member(:db_cluster_option_group_memberships, Shapes::ShapeRef.new(shape: DBClusterOptionGroupMemberships, location_name: "DBClusterOptionGroupMemberships"))
     DBCluster.add_member(:preferred_backup_window, Shapes::ShapeRef.new(shape: String, location_name: "PreferredBackupWindow"))
     DBCluster.add_member(:preferred_maintenance_window, Shapes::ShapeRef.new(shape: String, location_name: "PreferredMaintenanceWindow"))
+    DBCluster.add_member(:upgrade_rollout_order, Shapes::ShapeRef.new(shape: UpgradeRolloutOrder, location_name: "UpgradeRolloutOrder"))
     DBCluster.add_member(:replication_source_identifier, Shapes::ShapeRef.new(shape: String, location_name: "ReplicationSourceIdentifier"))
     DBCluster.add_member(:read_replica_identifiers, Shapes::ShapeRef.new(shape: ReadReplicaIdentifierList, location_name: "ReadReplicaIdentifiers"))
     DBCluster.add_member(:status_infos, Shapes::ShapeRef.new(shape: DBClusterStatusInfoList, location_name: "StatusInfos"))
@@ -1746,6 +1749,7 @@ module Aws::RDS
     DBInstance.add_member(:availability_zone, Shapes::ShapeRef.new(shape: String, location_name: "AvailabilityZone"))
     DBInstance.add_member(:db_subnet_group, Shapes::ShapeRef.new(shape: DBSubnetGroup, location_name: "DBSubnetGroup"))
     DBInstance.add_member(:preferred_maintenance_window, Shapes::ShapeRef.new(shape: String, location_name: "PreferredMaintenanceWindow"))
+    DBInstance.add_member(:upgrade_rollout_order, Shapes::ShapeRef.new(shape: UpgradeRolloutOrder, location_name: "UpgradeRolloutOrder"))
     DBInstance.add_member(:pending_modified_values, Shapes::ShapeRef.new(shape: PendingModifiedValues, location_name: "PendingModifiedValues"))
     DBInstance.add_member(:latest_restorable_time, Shapes::ShapeRef.new(shape: TStamp, location_name: "LatestRestorableTime"))
     DBInstance.add_member(:multi_az, Shapes::ShapeRef.new(shape: Boolean, location_name: "MultiAZ"))
@@ -4421,6 +4425,8 @@ module Aws::RDS
 
     ValidUpgradeTargetList.member = Shapes::ShapeRef.new(shape: UpgradeTarget, location_name: "UpgradeTarget")
 
+    VpcEncryptionControlViolationException.struct_class = Types::VpcEncryptionControlViolationException
+
     VpcSecurityGroupIdList.member = Shapes::ShapeRef.new(shape: String, location_name: "VpcSecurityGroupId")
 
     VpcSecurityGroupMembership.add_member(:vpc_security_group_id, Shapes::ShapeRef.new(shape: String, location_name: "VpcSecurityGroupId"))
@@ -4673,6 +4679,7 @@ module Aws::RDS
         o.errors << Shapes::ShapeRef.new(shape: DomainNotFoundFault)
         o.errors << Shapes::ShapeRef.new(shape: StorageTypeNotSupportedFault)
         o.errors << Shapes::ShapeRef.new(shape: OptionGroupNotFoundFault)
+        o.errors << Shapes::ShapeRef.new(shape: VpcEncryptionControlViolationException)
       end)
 
       api.add_operation(:create_db_cluster_endpoint, Seahorse::Model::Operation.new.tap do |o|
@@ -4740,6 +4747,7 @@ module Aws::RDS
         o.errors << Shapes::ShapeRef.new(shape: BackupPolicyNotFoundFault)
         o.errors << Shapes::ShapeRef.new(shape: CertificateNotFoundFault)
         o.errors << Shapes::ShapeRef.new(shape: TenantDatabaseQuotaExceededFault)
+        o.errors << Shapes::ShapeRef.new(shape: VpcEncryptionControlViolationException)
       end)
 
       api.add_operation(:create_db_instance_read_replica, Seahorse::Model::Operation.new.tap do |o|
@@ -4772,6 +4780,7 @@ module Aws::RDS
         o.errors << Shapes::ShapeRef.new(shape: DomainNotFoundFault)
         o.errors << Shapes::ShapeRef.new(shape: TenantDatabaseQuotaExceededFault)
         o.errors << Shapes::ShapeRef.new(shape: CertificateNotFoundFault)
+        o.errors << Shapes::ShapeRef.new(shape: VpcEncryptionControlViolationException)
       end)
 
       api.add_operation(:create_db_parameter_group, Seahorse::Model::Operation.new.tap do |o|
@@ -5958,6 +5967,7 @@ module Aws::RDS
         o.errors << Shapes::ShapeRef.new(shape: StorageTypeNotAvailableFault)
         o.errors << Shapes::ShapeRef.new(shape: OptionGroupNotFoundFault)
         o.errors << Shapes::ShapeRef.new(shape: KMSKeyNotAccessibleFault)
+        o.errors << Shapes::ShapeRef.new(shape: VpcEncryptionControlViolationException)
       end)
 
       api.add_operation(:modify_db_cluster_endpoint, Seahorse::Model::Operation.new.tap do |o|
@@ -6021,6 +6031,7 @@ module Aws::RDS
         o.errors << Shapes::ShapeRef.new(shape: NetworkTypeNotSupported)
         o.errors << Shapes::ShapeRef.new(shape: InvalidDBClusterStateFault)
         o.errors << Shapes::ShapeRef.new(shape: TenantDatabaseQuotaExceededFault)
+        o.errors << Shapes::ShapeRef.new(shape: VpcEncryptionControlViolationException)
       end)
 
       api.add_operation(:modify_db_parameter_group, Seahorse::Model::Operation.new.tap do |o|
@@ -6403,6 +6414,7 @@ module Aws::RDS
         o.errors << Shapes::ShapeRef.new(shape: StorageTypeNotSupportedFault)
         o.errors << Shapes::ShapeRef.new(shape: InvalidDBInstanceStateFault)
         o.errors << Shapes::ShapeRef.new(shape: InsufficientDBInstanceCapacityFault)
+        o.errors << Shapes::ShapeRef.new(shape: VpcEncryptionControlViolationException)
       end)
 
       api.add_operation(:restore_db_cluster_to_point_in_time, Seahorse::Model::Operation.new.tap do |o|
@@ -6433,6 +6445,7 @@ module Aws::RDS
         o.errors << Shapes::ShapeRef.new(shape: StorageTypeNotSupportedFault)
         o.errors << Shapes::ShapeRef.new(shape: DBClusterAutomatedBackupNotFoundFault)
         o.errors << Shapes::ShapeRef.new(shape: InsufficientDBInstanceCapacityFault)
+        o.errors << Shapes::ShapeRef.new(shape: VpcEncryptionControlViolationException)
       end)
 
       api.add_operation(:restore_db_instance_from_db_snapshot, Seahorse::Model::Operation.new.tap do |o|
@@ -6465,6 +6478,7 @@ module Aws::RDS
         o.errors << Shapes::ShapeRef.new(shape: DBClusterSnapshotNotFoundFault)
         o.errors << Shapes::ShapeRef.new(shape: CertificateNotFoundFault)
         o.errors << Shapes::ShapeRef.new(shape: TenantDatabaseQuotaExceededFault)
+        o.errors << Shapes::ShapeRef.new(shape: VpcEncryptionControlViolationException)
       end)
 
       api.add_operation(:restore_db_instance_from_s3, Seahorse::Model::Operation.new.tap do |o|
@@ -6492,6 +6506,7 @@ module Aws::RDS
         o.errors << Shapes::ShapeRef.new(shape: NetworkTypeNotSupported)
         o.errors << Shapes::ShapeRef.new(shape: BackupPolicyNotFoundFault)
         o.errors << Shapes::ShapeRef.new(shape: CertificateNotFoundFault)
+        o.errors << Shapes::ShapeRef.new(shape: VpcEncryptionControlViolationException)
       end)
 
       api.add_operation(:restore_db_instance_to_point_in_time, Seahorse::Model::Operation.new.tap do |o|
@@ -6525,6 +6540,7 @@ module Aws::RDS
         o.errors << Shapes::ShapeRef.new(shape: DBInstanceAutomatedBackupNotFoundFault)
         o.errors << Shapes::ShapeRef.new(shape: TenantDatabaseQuotaExceededFault)
         o.errors << Shapes::ShapeRef.new(shape: CertificateNotFoundFault)
+        o.errors << Shapes::ShapeRef.new(shape: VpcEncryptionControlViolationException)
       end)
 
       api.add_operation(:revoke_db_security_group_ingress, Seahorse::Model::Operation.new.tap do |o|
@@ -6563,6 +6579,7 @@ module Aws::RDS
         o.errors << Shapes::ShapeRef.new(shape: InvalidDBInstanceStateFault)
         o.errors << Shapes::ShapeRef.new(shape: InvalidDBShardGroupStateFault)
         o.errors << Shapes::ShapeRef.new(shape: KMSKeyNotAccessibleFault)
+        o.errors << Shapes::ShapeRef.new(shape: VpcEncryptionControlViolationException)
       end)
 
       api.add_operation(:start_db_instance, Seahorse::Model::Operation.new.tap do |o|
@@ -6582,6 +6599,7 @@ module Aws::RDS
         o.errors << Shapes::ShapeRef.new(shape: DBClusterNotFoundFault)
         o.errors << Shapes::ShapeRef.new(shape: AuthorizationNotFoundFault)
         o.errors << Shapes::ShapeRef.new(shape: KMSKeyNotAccessibleFault)
+        o.errors << Shapes::ShapeRef.new(shape: VpcEncryptionControlViolationException)
       end)
 
       api.add_operation(:start_db_instance_automated_backups_replication, Seahorse::Model::Operation.new.tap do |o|

data/lib/aws-sdk-rds/db_cluster.rb

@@ -190,6 +190,20 @@ module Aws::RDS
       data[:preferred_maintenance_window]
     end
 
+    # This data type represents the order in which the clusters are
+    # upgraded.
+    #
+    # * \[first\] - Typically used for development or testing environments.
+    #
+    # * \[second\] - Default order for resources not specifically
+    #   configured.
+    #
+    # * \[last\] - Usually reserved for production environments.
+    # @return [String]
+    def upgrade_rollout_order
+      data[:upgrade_rollout_order]
+    end
+
     # The identifier of the source DB cluster if this DB cluster is a read
     # replica.
     # @return [String]
@@ -986,7 +1000,7 @@ module Aws::RDS
     #     performance_insights_kms_key_id: "String",
     #     performance_insights_retention_period: 1,
     #     enable_limitless_database: false,
-    #     cluster_scalability_type: "standard", # accepts standard, limitless, scaleout
+    #     cluster_scalability_type: "standard", # accepts standard, limitless
     #     db_system_id: "String",
     #     manage_master_user_password: false,
     #     enable_local_write_forwarding: false,
@@ -1512,40 +1526,31 @@ module Aws::RDS
     # @option options [Boolean] :publicly_accessible
     #   Specifies whether the DB cluster is publicly accessible.
     #
+    #   Valid for Cluster Type: Multi-AZ DB clusters only
+    #
     #   When the DB cluster is publicly accessible and you connect from
-    #   outside of the DB cluster's virtual private cloud (VPC), its Domain
-    #   Name System (DNS) endpoint resolves to the public IP address. When you
+    #   outside of the DB cluster's virtual private cloud (VPC), its domain
+    #   name system (DNS) endpoint resolves to the public IP address. When you
     #   connect from within the same VPC as the DB cluster, the endpoint
     #   resolves to the private IP address. Access to the DB cluster is
-    #   ultimately controlled by the security group it uses. That public
-    #   access isn't permitted if the security group assigned to the DB
-    #   cluster doesn't permit it.
+    #   controlled by its security group settings.
     #
     #   When the DB cluster isn't publicly accessible, it is an internal DB
     #   cluster with a DNS name that resolves to a private IP address.
     #
-    #   Valid for Cluster Type: Multi-AZ DB clusters only
+    #   The default behavior when `PubliclyAccessible` is not specified
+    #   depends on whether a `DBSubnetGroup` is specified.
     #
-    #   Default: The default behavior varies depending on whether
-    #   `DBSubnetGroupName` is specified.
+    #   If `DBSubnetGroup` isn't specified, `PubliclyAccessible` defaults to
+    #   `true`.
     #
-    #   If `DBSubnetGroupName` isn't specified, and `PubliclyAccessible`
-    #   isn't specified, the following applies:
+    #   If `DBSubnetGroup` is specified, `PubliclyAccessible` defaults to
+    #   `false` unless the value of `DBSubnetGroup` is `default`, in which
+    #   case `PubliclyAccessible` defaults to `true`.
     #
-    #   * If the default VPC in the target Region doesn’t have an internet
-    #     gateway attached to it, the DB cluster is private.
-    #
-    #   * If the default VPC in the target Region has an internet gateway
-    #     attached to it, the DB cluster is public.
-    #
-    #   If `DBSubnetGroupName` is specified, and `PubliclyAccessible` isn't
-    #   specified, the following applies:
-    #
-    #   * If the subnets are part of a VPC that doesn’t have an internet
-    #     gateway attached to it, the DB cluster is private.
-    #
-    #   * If the subnets are part of a VPC that has an internet gateway
-    #     attached to it, the DB cluster is public.
+    #   If `PubliclyAccessible` is true and the VPC that the `DBSubnetGroup`
+    #   is in doesn't have an internet gateway attached to it, Amazon RDS
+    #   returns an error.
     # @option options [Boolean] :auto_minor_version_upgrade
     #   Specifies whether minor engine upgrades are applied automatically to
     #   the DB cluster during the maintenance window. By default, minor engine

data/lib/aws-sdk-rds/db_instance.rb

@@ -153,6 +153,20 @@ module Aws::RDS
       data[:preferred_maintenance_window]
     end
 
+    # This data type represents the order in which the instances are
+    # upgraded.
+    #
+    # * \[first\] - Typically used for development or testing environments.
+    #
+    # * \[second\] - Default order for resources not specifically
+    #   configured.
+    #
+    # * \[last\] - Usually reserved for production environments.
+    # @return [String]
+    def upgrade_rollout_order
+      data[:upgrade_rollout_order]
+    end
+
     # Information about pending changes to the DB instance. This information
     # is returned only when there are pending changes. Specific changes are
     # identified by subelements.
@@ -1729,37 +1743,28 @@ module Aws::RDS
     #   Specifies whether the DB instance is publicly accessible.
     #
     #   When the DB instance is publicly accessible and you connect from
-    #   outside of the DB instance's virtual private cloud (VPC), its Domain
-    #   Name System (DNS) endpoint resolves to the public IP address. When you
+    #   outside of the DB instance's virtual private cloud (VPC), its domain
+    #   name system (DNS) endpoint resolves to the public IP address. When you
     #   connect from within the same VPC as the DB instance, the endpoint
     #   resolves to the private IP address. Access to the DB instance is
-    #   ultimately controlled by the security group it uses. That public
-    #   access is not permitted if the security group assigned to the DB
-    #   instance doesn't permit it.
+    #   controlled by its security group settings.
     #
     #   When the DB instance isn't publicly accessible, it is an internal DB
     #   instance with a DNS name that resolves to a private IP address.
     #
-    #   Default: The default behavior varies depending on whether
-    #   `DBSubnetGroupName` is specified.
-    #
-    #   If `DBSubnetGroupName` isn't specified, and `PubliclyAccessible`
-    #   isn't specified, the following applies:
-    #
-    #   * If the default VPC in the target Region doesn’t have an internet
-    #     gateway attached to it, the DB instance is private.
+    #   The default behavior when `PubliclyAccessible` is not specified
+    #   depends on whether a `DBSubnetGroup` is specified.
     #
-    #   * If the default VPC in the target Region has an internet gateway
-    #     attached to it, the DB instance is public.
+    #   If `DBSubnetGroup` isn't specified, `PubliclyAccessible` defaults to
+    #   `false` for Aurora instances and `true` for non-Aurora instances.
     #
-    #   If `DBSubnetGroupName` is specified, and `PubliclyAccessible` isn't
-    #   specified, the following applies:
+    #   If `DBSubnetGroup` is specified, `PubliclyAccessible` defaults to
+    #   `false` unless the value of `DBSubnetGroup` is `default`, in which
+    #   case `PubliclyAccessible` defaults to `true`.
     #
-    #   * If the subnets are part of a VPC that doesn’t have an internet
-    #     gateway attached to it, the DB instance is private.
-    #
-    #   * If the subnets are part of a VPC that has an internet gateway
-    #     attached to it, the DB instance is public.
+    #   If `PubliclyAccessible` is true and the VPC that the `DBSubnetGroup`
+    #   is in doesn't have an internet gateway attached to it, Amazon RDS
+    #   returns an error.
     # @option options [Array<Types::Tag>] :tags
     #   Tags to assign to the DB instance.
     # @option options [String] :db_cluster_identifier
@@ -3742,7 +3747,7 @@ module Aws::RDS
     #
     #   * Must be in the distinguished name format.
     #
-    #   * Can't be longer than 64 characters.
+    #   ^
     #
     #   Example:
     #   `OU=mymanagedADtestOU,DC=mymanagedADtest,DC=mymanagedAD,DC=mydomain`

data/lib/aws-sdk-rds/errors.rb

@@ -240,6 +240,7 @@ module Aws::RDS
   #    * This error class is not used. `TenantDatabaseQuotaExceeded` is used during parsing instead.
   # * {UnsupportedDBEngineVersionFault}
   #    * This error class is not used. `UnsupportedDBEngineVersion` is used during parsing instead.
+  # * {VpcEncryptionControlViolationException}
   #
   # Additionally, error classes are dynamically generated for service errors based on the error code
   # if they are not defined above.
@@ -1833,5 +1834,15 @@ module Aws::RDS
       end
     end
 
+    class VpcEncryptionControlViolationException < ServiceError
+
+      # @param [Seahorse::Client::RequestContext] context
+      # @param [String] message
+      # @param [Aws::RDS::Types::VpcEncryptionControlViolationException] data
+      def initialize(context, message, data = Aws::EmptyStructure.new)
+        super(context, message, data)
+      end
+    end
+
   end
 end

data/lib/aws-sdk-rds/resource.rb

@@ -107,7 +107,7 @@ module Aws::RDS
     #     performance_insights_kms_key_id: "String",
     #     performance_insights_retention_period: 1,
     #     enable_limitless_database: false,
-    #     cluster_scalability_type: "standard", # accepts standard, limitless, scaleout
+    #     cluster_scalability_type: "standard", # accepts standard, limitless
     #     db_system_id: "String",
     #     manage_master_user_password: false,
     #     enable_local_write_forwarding: false,
@@ -649,40 +649,31 @@ module Aws::RDS
     # @option options [Boolean] :publicly_accessible
     #   Specifies whether the DB cluster is publicly accessible.
     #
+    #   Valid for Cluster Type: Multi-AZ DB clusters only
+    #
     #   When the DB cluster is publicly accessible and you connect from
-    #   outside of the DB cluster's virtual private cloud (VPC), its Domain
-    #   Name System (DNS) endpoint resolves to the public IP address. When you
+    #   outside of the DB cluster's virtual private cloud (VPC), its domain
+    #   name system (DNS) endpoint resolves to the public IP address. When you
     #   connect from within the same VPC as the DB cluster, the endpoint
     #   resolves to the private IP address. Access to the DB cluster is
-    #   ultimately controlled by the security group it uses. That public
-    #   access isn't permitted if the security group assigned to the DB
-    #   cluster doesn't permit it.
+    #   controlled by its security group settings.
     #
     #   When the DB cluster isn't publicly accessible, it is an internal DB
     #   cluster with a DNS name that resolves to a private IP address.
     #
-    #   Valid for Cluster Type: Multi-AZ DB clusters only
-    #
-    #   Default: The default behavior varies depending on whether
-    #   `DBSubnetGroupName` is specified.
-    #
-    #   If `DBSubnetGroupName` isn't specified, and `PubliclyAccessible`
-    #   isn't specified, the following applies:
+    #   The default behavior when `PubliclyAccessible` is not specified
+    #   depends on whether a `DBSubnetGroup` is specified.
     #
-    #   * If the default VPC in the target Region doesn’t have an internet
-    #     gateway attached to it, the DB cluster is private.
+    #   If `DBSubnetGroup` isn't specified, `PubliclyAccessible` defaults to
+    #   `true`.
     #
-    #   * If the default VPC in the target Region has an internet gateway
-    #     attached to it, the DB cluster is public.
+    #   If `DBSubnetGroup` is specified, `PubliclyAccessible` defaults to
+    #   `false` unless the value of `DBSubnetGroup` is `default`, in which
+    #   case `PubliclyAccessible` defaults to `true`.
     #
-    #   If `DBSubnetGroupName` is specified, and `PubliclyAccessible` isn't
-    #   specified, the following applies:
-    #
-    #   * If the subnets are part of a VPC that doesn’t have an internet
-    #     gateway attached to it, the DB cluster is private.
-    #
-    #   * If the subnets are part of a VPC that has an internet gateway
-    #     attached to it, the DB cluster is public.
+    #   If `PubliclyAccessible` is true and the VPC that the `DBSubnetGroup`
+    #   is in doesn't have an internet gateway attached to it, Amazon RDS
+    #   returns an error.
     # @option options [Boolean] :auto_minor_version_upgrade
     #   Specifies whether minor engine upgrades are applied automatically to
     #   the DB cluster during the maintenance window. By default, minor engine
@@ -1901,37 +1892,28 @@ module Aws::RDS
     #   Specifies whether the DB instance is publicly accessible.
     #
     #   When the DB instance is publicly accessible and you connect from
-    #   outside of the DB instance's virtual private cloud (VPC), its Domain
-    #   Name System (DNS) endpoint resolves to the public IP address. When you
+    #   outside of the DB instance's virtual private cloud (VPC), its domain
+    #   name system (DNS) endpoint resolves to the public IP address. When you
     #   connect from within the same VPC as the DB instance, the endpoint
     #   resolves to the private IP address. Access to the DB instance is
-    #   ultimately controlled by the security group it uses. That public
-    #   access is not permitted if the security group assigned to the DB
-    #   instance doesn't permit it.
+    #   controlled by its security group settings.
     #
     #   When the DB instance isn't publicly accessible, it is an internal DB
     #   instance with a DNS name that resolves to a private IP address.
     #
-    #   Default: The default behavior varies depending on whether
-    #   `DBSubnetGroupName` is specified.
-    #
-    #   If `DBSubnetGroupName` isn't specified, and `PubliclyAccessible`
-    #   isn't specified, the following applies:
-    #
-    #   * If the default VPC in the target Region doesn’t have an internet
-    #     gateway attached to it, the DB instance is private.
-    #
-    #   * If the default VPC in the target Region has an internet gateway
-    #     attached to it, the DB instance is public.
+    #   The default behavior when `PubliclyAccessible` is not specified
+    #   depends on whether a `DBSubnetGroup` is specified.
     #
-    #   If `DBSubnetGroupName` is specified, and `PubliclyAccessible` isn't
-    #   specified, the following applies:
+    #   If `DBSubnetGroup` isn't specified, `PubliclyAccessible` defaults to
+    #   `false` for Aurora instances and `true` for non-Aurora instances.
     #
-    #   * If the subnets are part of a VPC that doesn’t have an internet
-    #     gateway attached to it, the DB instance is private.
+    #   If `DBSubnetGroup` is specified, `PubliclyAccessible` defaults to
+    #   `false` unless the value of `DBSubnetGroup` is `default`, in which
+    #   case `PubliclyAccessible` defaults to `true`.
     #
-    #   * If the subnets are part of a VPC that has an internet gateway
-    #     attached to it, the DB instance is public.
+    #   If `PubliclyAccessible` is true and the VPC that the `DBSubnetGroup`
+    #   is in doesn't have an internet gateway attached to it, Amazon RDS
+    #   returns an error.
     # @option options [Array<Types::Tag>] :tags
     #   Tags to assign to the DB instance.
     # @option options [String] :db_cluster_identifier

data/lib/aws-sdk-rds/types.rb

@@ -2790,40 +2790,31 @@ module Aws::RDS
     # @!attribute [rw] publicly_accessible
     #   Specifies whether the DB cluster is publicly accessible.
     #
+    #   Valid for Cluster Type: Multi-AZ DB clusters only
+    #
     #   When the DB cluster is publicly accessible and you connect from
-    #   outside of the DB cluster's virtual private cloud (VPC), its Domain
-    #   Name System (DNS) endpoint resolves to the public IP address. When
+    #   outside of the DB cluster's virtual private cloud (VPC), its domain
+    #   name system (DNS) endpoint resolves to the public IP address. When
     #   you connect from within the same VPC as the DB cluster, the endpoint
     #   resolves to the private IP address. Access to the DB cluster is
-    #   ultimately controlled by the security group it uses. That public
-    #   access isn't permitted if the security group assigned to the DB
-    #   cluster doesn't permit it.
+    #   controlled by its security group settings.
     #
     #   When the DB cluster isn't publicly accessible, it is an internal DB
     #   cluster with a DNS name that resolves to a private IP address.
     #
-    #   Valid for Cluster Type: Multi-AZ DB clusters only
+    #   The default behavior when `PubliclyAccessible` is not specified
+    #   depends on whether a `DBSubnetGroup` is specified.
     #
-    #   Default: The default behavior varies depending on whether
-    #   `DBSubnetGroupName` is specified.
+    #   If `DBSubnetGroup` isn't specified, `PubliclyAccessible` defaults
+    #   to `true`.
     #
-    #   If `DBSubnetGroupName` isn't specified, and `PubliclyAccessible`
-    #   isn't specified, the following applies:
-    #
-    #   * If the default VPC in the target Region doesn’t have an internet
-    #     gateway attached to it, the DB cluster is private.
+    #   If `DBSubnetGroup` is specified, `PubliclyAccessible` defaults to
+    #   `false` unless the value of `DBSubnetGroup` is `default`, in which
+    #   case `PubliclyAccessible` defaults to `true`.
     #
-    #   * If the default VPC in the target Region has an internet gateway
-    #     attached to it, the DB cluster is public.
-    #
-    #   If `DBSubnetGroupName` is specified, and `PubliclyAccessible` isn't
-    #   specified, the following applies:
-    #
-    #   * If the subnets are part of a VPC that doesn’t have an internet
-    #     gateway attached to it, the DB cluster is private.
-    #
-    #   * If the subnets are part of a VPC that has an internet gateway
-    #     attached to it, the DB cluster is public.
+    #   If `PubliclyAccessible` is true and the VPC that the `DBSubnetGroup`
+    #   is in doesn't have an internet gateway attached to it, Amazon RDS
+    #   returns an error.
     #   @return [Boolean]
     #
     # @!attribute [rw] auto_minor_version_upgrade
@@ -4235,36 +4226,27 @@ module Aws::RDS
     #
     #   When the DB instance is publicly accessible and you connect from
     #   outside of the DB instance's virtual private cloud (VPC), its
-    #   Domain Name System (DNS) endpoint resolves to the public IP address.
+    #   domain name system (DNS) endpoint resolves to the public IP address.
     #   When you connect from within the same VPC as the DB instance, the
     #   endpoint resolves to the private IP address. Access to the DB
-    #   instance is ultimately controlled by the security group it uses.
-    #   That public access is not permitted if the security group assigned
-    #   to the DB instance doesn't permit it.
+    #   instance is controlled by its security group settings.
     #
     #   When the DB instance isn't publicly accessible, it is an internal
     #   DB instance with a DNS name that resolves to a private IP address.
     #
-    #   Default: The default behavior varies depending on whether
-    #   `DBSubnetGroupName` is specified.
-    #
-    #   If `DBSubnetGroupName` isn't specified, and `PubliclyAccessible`
-    #   isn't specified, the following applies:
+    #   The default behavior when `PubliclyAccessible` is not specified
+    #   depends on whether a `DBSubnetGroup` is specified.
     #
-    #   * If the default VPC in the target Region doesn’t have an internet
-    #     gateway attached to it, the DB instance is private.
+    #   If `DBSubnetGroup` isn't specified, `PubliclyAccessible` defaults
+    #   to `false` for Aurora instances and `true` for non-Aurora instances.
     #
-    #   * If the default VPC in the target Region has an internet gateway
-    #     attached to it, the DB instance is public.
+    #   If `DBSubnetGroup` is specified, `PubliclyAccessible` defaults to
+    #   `false` unless the value of `DBSubnetGroup` is `default`, in which
+    #   case `PubliclyAccessible` defaults to `true`.
     #
-    #   If `DBSubnetGroupName` is specified, and `PubliclyAccessible` isn't
-    #   specified, the following applies:
-    #
-    #   * If the subnets are part of a VPC that doesn’t have an internet
-    #     gateway attached to it, the DB instance is private.
-    #
-    #   * If the subnets are part of a VPC that has an internet gateway
-    #     attached to it, the DB instance is public.
+    #   If `PubliclyAccessible` is true and the VPC that the `DBSubnetGroup`
+    #   is in doesn't have an internet gateway attached to it, Amazon RDS
+    #   returns an error.
     #   @return [Boolean]
     #
     # @!attribute [rw] tags
@@ -7197,6 +7179,19 @@ module Aws::RDS
     #   Universal Coordinated Time (UTC).
     #   @return [String]
     #
+    # @!attribute [rw] upgrade_rollout_order
+    #   This data type represents the order in which the clusters are
+    #   upgraded.
+    #
+    #   * \[first\] - Typically used for development or testing
+    #     environments.
+    #
+    #   * \[second\] - Default order for resources not specifically
+    #     configured.
+    #
+    #   * \[last\] - Usually reserved for production environments.
+    #   @return [String]
+    #
     # @!attribute [rw] replication_source_identifier
     #   The identifier of the source DB cluster if this DB cluster is a read
     #   replica.
@@ -7698,6 +7693,7 @@ module Aws::RDS
       :db_cluster_option_group_memberships,
       :preferred_backup_window,
       :preferred_maintenance_window,
+      :upgrade_rollout_order,
       :replication_source_identifier,
       :read_replica_identifiers,
       :status_infos,
@@ -9166,6 +9162,19 @@ module Aws::RDS
     #   Universal Coordinated Time (UTC).
     #   @return [String]
     #
+    # @!attribute [rw] upgrade_rollout_order
+    #   This data type represents the order in which the instances are
+    #   upgraded.
+    #
+    #   * \[first\] - Typically used for development or testing
+    #     environments.
+    #
+    #   * \[second\] - Default order for resources not specifically
+    #     configured.
+    #
+    #   * \[last\] - Usually reserved for production environments.
+    #   @return [String]
+    #
     # @!attribute [rw] pending_modified_values
     #   Information about pending changes to the DB instance. This
     #   information is returned only when there are pending changes.
@@ -9713,6 +9722,7 @@ module Aws::RDS
       :availability_zone,
       :db_subnet_group,
       :preferred_maintenance_window,
+      :upgrade_rollout_order,
       :pending_modified_values,
       :latest_restorable_time,
       :multi_az,
@@ -19426,7 +19436,7 @@ module Aws::RDS
     #
     #   * Must be in the distinguished name format.
     #
-    #   * Can't be longer than 64 characters.
+    #   ^
     #
     #   Example:
     #   `OU=mymanagedADtestOU,DC=mymanagedADtest,DC=mymanagedAD,DC=mydomain`
@@ -29348,6 +29358,15 @@ module Aws::RDS
       include Aws::Structure
     end
 
+    # The operation violates VPC encryption control settings. Make sure that
+    # your DB instance type supports the Nitro encryption-in-transit
+    # capability, or modify your VPC's encryption controls to not enforce
+    # encryption-in-transit.
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/rds-2014-10-31/VpcEncryptionControlViolationException AWS API Documentation
+    #
+    class VpcEncryptionControlViolationException < Aws::EmptyStructure; end
+
     # This data type is used as a response element for queries on VPC
     # security group membership.
     #

data/lib/aws-sdk-rds.rb

@@ -80,7 +80,7 @@ module Aws::RDS
   autoload :ReservedDBInstancesOffering, 'aws-sdk-rds/reserved_db_instances_offering'
   autoload :ResourcePendingMaintenanceActionList, 'aws-sdk-rds/resource_pending_maintenance_action_list'
 
-  GEM_VERSION = '1.297.0'
+  GEM_VERSION = '1.300.0'
 
 end
 

data/sig/client.rbs

@@ -447,7 +447,7 @@ module Aws
                                ?performance_insights_kms_key_id: ::String,
                                ?performance_insights_retention_period: ::Integer,
                                ?enable_limitless_database: bool,
-                               ?cluster_scalability_type: ("standard" | "limitless" | "scaleout"),
+                               ?cluster_scalability_type: ("standard" | "limitless"),
                                ?db_system_id: ::String,
                                ?manage_master_user_password: bool,
                                ?enable_local_write_forwarding: bool,

data/sig/db_cluster.rbs

@@ -84,6 +84,9 @@ module Aws
       # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/RDS/DBCluster.html#preferred_maintenance_window-instance_method
       def preferred_maintenance_window: () -> ::String
 
+      # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/RDS/DBCluster.html#upgrade_rollout_order-instance_method
+      def upgrade_rollout_order: () -> ("first" | "second" | "last")
+
       # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/RDS/DBCluster.html#replication_source_identifier-instance_method
       def replication_source_identifier: () -> ::String
 
@@ -259,7 +262,7 @@ module Aws
       def limitless_database: () -> Types::LimitlessDatabase
 
       # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/RDS/DBCluster.html#cluster_scalability_type-instance_method
-      def cluster_scalability_type: () -> ("standard" | "limitless" | "scaleout")
+      def cluster_scalability_type: () -> ("standard" | "limitless")
 
       # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/RDS/DBCluster.html#certificate_details-instance_method
       def certificate_details: () -> Types::CertificateDetails
@@ -350,7 +353,7 @@ module Aws
                     ?performance_insights_kms_key_id: ::String,
                     ?performance_insights_retention_period: ::Integer,
                     ?enable_limitless_database: bool,
-                    ?cluster_scalability_type: ("standard" | "limitless" | "scaleout"),
+                    ?cluster_scalability_type: ("standard" | "limitless"),
                     ?db_system_id: ::String,
                     ?manage_master_user_password: bool,
                     ?enable_local_write_forwarding: bool,

data/sig/db_instance.rbs

@@ -66,6 +66,9 @@ module Aws
       # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/RDS/DBInstance.html#preferred_maintenance_window-instance_method
       def preferred_maintenance_window: () -> ::String
 
+      # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/RDS/DBInstance.html#upgrade_rollout_order-instance_method
+      def upgrade_rollout_order: () -> ("first" | "second" | "last")
+
       # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/RDS/DBInstance.html#pending_modified_values-instance_method
       def pending_modified_values: () -> Types::PendingModifiedValues
 

data/sig/errors.rbs

@@ -301,6 +301,8 @@ module Aws
       end
       class UnsupportedDBEngineVersionFault < ::Aws::Errors::ServiceError
       end
+      class VpcEncryptionControlViolationException < ::Aws::Errors::ServiceError
+      end
     end
   end
 end

data/sig/resource.rbs

@@ -151,7 +151,7 @@ module Aws
                                ?performance_insights_kms_key_id: ::String,
                                ?performance_insights_retention_period: ::Integer,
                                ?enable_limitless_database: bool,
-                               ?cluster_scalability_type: ("standard" | "limitless" | "scaleout"),
+                               ?cluster_scalability_type: ("standard" | "limitless"),
                                ?db_system_id: ::String,
                                ?manage_master_user_password: bool,
                                ?enable_local_write_forwarding: bool,

data/sig/types.rbs

@@ -395,7 +395,7 @@ module Aws::RDS
       attr_accessor performance_insights_kms_key_id: ::String
       attr_accessor performance_insights_retention_period: ::Integer
       attr_accessor enable_limitless_database: bool
-      attr_accessor cluster_scalability_type: ("standard" | "limitless" | "scaleout")
+      attr_accessor cluster_scalability_type: ("standard" | "limitless")
       attr_accessor db_system_id: ::String
       attr_accessor manage_master_user_password: bool
       attr_accessor enable_local_write_forwarding: bool
@@ -787,6 +787,7 @@ module Aws::RDS
       attr_accessor db_cluster_option_group_memberships: ::Array[Types::DBClusterOptionGroupStatus]
       attr_accessor preferred_backup_window: ::String
       attr_accessor preferred_maintenance_window: ::String
+      attr_accessor upgrade_rollout_order: ("first" | "second" | "last")
       attr_accessor replication_source_identifier: ::String
       attr_accessor read_replica_identifiers: ::Array[::String]
       attr_accessor status_infos: ::Array[Types::DBClusterStatusInfo]
@@ -845,7 +846,7 @@ module Aws::RDS
       attr_accessor local_write_forwarding_status: ("enabled" | "disabled" | "enabling" | "disabling" | "requested")
       attr_accessor aws_backup_recovery_point_arn: ::String
       attr_accessor limitless_database: Types::LimitlessDatabase
-      attr_accessor cluster_scalability_type: ("standard" | "limitless" | "scaleout")
+      attr_accessor cluster_scalability_type: ("standard" | "limitless")
       attr_accessor certificate_details: Types::CertificateDetails
       attr_accessor engine_lifecycle_support: ::String
       SENSITIVE: []
@@ -1147,6 +1148,7 @@ module Aws::RDS
       attr_accessor availability_zone: ::String
       attr_accessor db_subnet_group: Types::DBSubnetGroup
       attr_accessor preferred_maintenance_window: ::String
+      attr_accessor upgrade_rollout_order: ("first" | "second" | "last")
       attr_accessor pending_modified_values: Types::PendingModifiedValues
       attr_accessor latest_restorable_time: ::Time
       attr_accessor multi_az: bool
@@ -4404,6 +4406,9 @@ module Aws::RDS
       SENSITIVE: []
     end
 
+    class VpcEncryptionControlViolationException < Aws::EmptyStructure
+    end
+
     class VpcSecurityGroupMembership
       attr_accessor vpc_security_group_id: ::String
       attr_accessor status: ::String

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-rds
 version: !ruby/object:Gem::Version
-  version: 1.297.0
+  version: 1.300.0
 platform: ruby
 authors:
 - Amazon Web Services
@@ -18,7 +18,7 @@ dependencies:
         version: '3'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.234.0
+        version: 3.239.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
@@ -28,7 +28,7 @@ dependencies:
         version: '3'
     - - ">="
       - !ruby/object:Gem::Version
-        version: 3.234.0
+        version: 3.239.1
 - !ruby/object:Gem::Dependency
   name: aws-sigv4
   requirement: !ruby/object:Gem::Requirement