aws-sdk-rds 1.95.0 → 1.100.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 68ed99c62f343083a371d4e477726ec9e9f17f5ee97432fa47c3f749c765b226
-  data.tar.gz: 7cefc277f470ce3a31bc166a777e03af5a6c877e3a7cccaa7d8d31ee6a2fb055
+  metadata.gz: 9561986025439a6795590ebe176dee6dc10c6a7de1c9f7489d093d58af553a59
+  data.tar.gz: 89319fff16a633dbc246bbd92bf892a52050393071e9f08b4ca7c2031ec27e38
 SHA512:
-  metadata.gz: 9cb29a6f6a7fb10526298c875a56b97ea6afa833ad4353a1f864165d4056f27a78a4f316bc3d8719698f98f4801a6776429f27db0e5f984287566dc6b01633c9
-  data.tar.gz: e1b38f90d45c9cdd058ae16daf8b60eba0e3991c2c3ff0a7af5a924d993b4d3bbbb02a38e3c89f28392dab11259ad551d73bd626ec0d47963c1387fc3db7cfb6
+  metadata.gz: dbd4756c465d7c915fd0f91654aa02e970104bb399c264377d53019c4c563dfd1efaec3f4a0dc34c7ef55b41df4f75b66a3e9065aec9a0f8e59adf2ced5c2be7
+  data.tar.gz: 9ed98386ed026c8f91c6275319da98c168eb850631d989074bca4d8d0f47ffc9f4a7194ea40739ac003f62bd0bbd2a8454222a04cfeee9d73cf89b36abb19d72

data/lib/aws-sdk-rds.rb

@@ -7,6 +7,7 @@
 #
 # WARNING ABOUT GENERATED CODE
 
+
 require 'aws-sigv4'
 require 'aws-sdk-core'
 
@@ -70,9 +71,9 @@ require_relative 'aws-sdk-rds/customizations'
 #
 # See {Errors} for more information.
 #
-# @service
+# @!group service
 module Aws::RDS
 
-  GEM_VERSION = '1.95.0'
+  GEM_VERSION = '1.100.0'
 
 end

data/lib/aws-sdk-rds/client.rb

@@ -87,13 +87,28 @@ module Aws::RDS
     #     * `Aws::Credentials` - Used for configuring static, non-refreshing
     #       credentials.
     #
+    #     * `Aws::SharedCredentials` - Used for loading static credentials from a
+    #       shared file, such as `~/.aws/config`.
+    #
+    #     * `Aws::AssumeRoleCredentials` - Used when you need to assume a role.
+    #
+    #     * `Aws::AssumeRoleWebIdentityCredentials` - Used when you need to
+    #       assume a role after providing credentials via the web.
+    #
+    #     * `Aws::SSOCredentials` - Used for loading credentials from AWS SSO using an
+    #       access token generated from `aws login`.
+    #
+    #     * `Aws::ProcessCredentials` - Used for loading credentials from a
+    #       process that outputs to stdout.
+    #
     #     * `Aws::InstanceProfileCredentials` - Used for loading credentials
     #       from an EC2 IMDS on an EC2 instance.
     #
-    #     * `Aws::SharedCredentials` - Used for loading credentials from a
-    #       shared file, such as `~/.aws/config`.
+    #     * `Aws::ECSCredentials` - Used for loading credentials from
+    #       instances running in ECS.
     #
-    #     * `Aws::AssumeRoleCredentials` - Used when you need to assume a role.
+    #     * `Aws::CognitoIdentityCredentials` - Used for loading credentials
+    #       from the Cognito Identity service.
     #
     #     When `:credentials` are not configured directly, the following
     #     locations will be searched for credentials:
@@ -103,10 +118,10 @@ module Aws::RDS
     #     * ENV['AWS_ACCESS_KEY_ID'], ENV['AWS_SECRET_ACCESS_KEY']
     #     * `~/.aws/credentials`
     #     * `~/.aws/config`
-    #     * EC2 IMDS instance profile - When used by default, the timeouts are
-    #       very aggressive. Construct and pass an instance of
-    #       `Aws::InstanceProfileCredentails` to enable retries and extended
-    #       timeouts.
+    #     * EC2/ECS IMDS instance profile - When used by default, the timeouts
+    #       are very aggressive. Construct and pass an instance of
+    #       `Aws::InstanceProfileCredentails` or `Aws::ECSCredentials` to
+    #       enable retries and extended timeouts.
     #
     #   @option options [required, String] :region
     #     The AWS region to connect to.  The configured `:region` is
@@ -410,17 +425,23 @@ module Aws::RDS
     #
     #   Constraints:
     #
-    #   * If the source type is a DB instance, then a `DBInstanceIdentifier`
+    #   * If the source type is a DB instance, a `DBInstanceIdentifier` value
     #     must be supplied.
     #
-    #   * If the source type is a DB security group, a `DBSecurityGroupName`
+    #   * If the source type is a DB cluster, a `DBClusterIdentifier` value
     #     must be supplied.
     #
     #   * If the source type is a DB parameter group, a `DBParameterGroupName`
+    #     value must be supplied.
+    #
+    #   * If the source type is a DB security group, a `DBSecurityGroupName`
+    #     value must be supplied.
+    #
+    #   * If the source type is a DB snapshot, a `DBSnapshotIdentifier` value
     #     must be supplied.
     #
-    #   * If the source type is a DB snapshot, a `DBSnapshotIdentifier` must
-    #     be supplied.
+    #   * If the source type is a DB cluster snapshot, a
+    #     `DBClusterSnapshotIdentifier` value must be supplied.
     #
     # @return [Types::AddSourceIdentifierToSubscriptionResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
@@ -1366,7 +1387,7 @@ module Aws::RDS
     end
 
     # Copies the specified DB snapshot. The source DB snapshot must be in
-    # the "available" state.
+    # the `available` or `storage-optimization` state.
     #
     # You can copy a snapshot from one AWS Region to another. In that case,
     # the AWS Region where you call the `CopyDBSnapshot` action is the
@@ -2123,6 +2144,14 @@ module Aws::RDS
     #   used. For more information, see [Publishing Database Logs to Amazon
     #   CloudWatch Logs][1] in the *Amazon Aurora User Guide*.
     #
+    #   **Aurora MySQL**
+    #
+    #   Possible values are `audit`, `error`, `general`, and `slowquery`.
+    #
+    #   **Aurora PostgreSQL**
+    #
+    #   Possible values are `postgresql` and `upgrade`.
+    #
     #
     #
     #   [1]: https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/USER_LogAccess.html#USER_LogAccess.Procedural.UploadtoCloudWatch
@@ -2719,6 +2748,9 @@ module Aws::RDS
     #
     #   * Must contain 1 to 64 letters or numbers.
     #
+    #   * Must begin with a letter. Subsequent characters can be letters,
+    #     underscores, or digits (0-9).
+    #
     #   * Can't be a word reserved by the specified database engine
     #
     #   **MariaDB**
@@ -2731,6 +2763,9 @@ module Aws::RDS
     #
     #   * Must contain 1 to 64 letters or numbers.
     #
+    #   * Must begin with a letter. Subsequent characters can be letters,
+    #     underscores, or digits (0-9).
+    #
     #   * Can't be a word reserved by the specified database engine
     #
     #   **PostgreSQL**
@@ -2743,8 +2778,8 @@ module Aws::RDS
     #
     #   * Must contain 1 to 63 letters, numbers, or underscores.
     #
-    #   * Must begin with a letter or an underscore. Subsequent characters can
-    #     be letters, underscores, or digits (0-9).
+    #   * Must begin with a letter. Subsequent characters can be letters,
+    #     underscores, or digits (0-9).
     #
     #   * Can't be a word reserved by the specified database engine
     #
@@ -3386,24 +3421,15 @@ module Aws::RDS
     #
     # @option params [String] :domain
     #   The Active Directory directory ID to create the DB instance in.
-    #   Currently, only Microsoft SQL Server and Oracle DB instances can be
-    #   created in an Active Directory Domain.
+    #   Currently, only MySQL, Microsoft SQL Server, Oracle, and PostgreSQL DB
+    #   instances can be created in an Active Directory Domain.
     #
-    #   For Microsoft SQL Server DB instances, Amazon RDS can use Windows
-    #   Authentication to authenticate users that connect to the DB instance.
-    #   For more information, see [ Using Windows Authentication with an
-    #   Amazon RDS DB Instance Running Microsoft SQL Server][1] in the *Amazon
+    #   For more information, see [ Kerberos Authentication][1] in the *Amazon
     #   RDS User Guide*.
     #
-    #   For Oracle DB instances, Amazon RDS can use Kerberos Authentication to
-    #   authenticate users that connect to the DB instance. For more
-    #   information, see [ Using Kerberos Authentication with Amazon RDS for
-    #   Oracle][2] in the *Amazon RDS User Guide*.
-    #
     #
     #
-    #   [1]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_SQLServerWinAuth.html
-    #   [2]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/oracle-kerberos.html
+    #   [1]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/kerberos-authentication.html
     #
     # @option params [Boolean] :copy_tags_to_snapshot
     #   A value that indicates whether to copy tags from the DB instance to
@@ -3533,6 +3559,26 @@ module Aws::RDS
     #   CloudWatch Logs ][1] in the *Amazon Relational Database Service User
     #   Guide*.
     #
+    #   **MariaDB**
+    #
+    #   Possible values are `audit`, `error`, `general`, and `slowquery`.
+    #
+    #   **Microsoft SQL Server**
+    #
+    #   Possible values are `agent` and `error`.
+    #
+    #   **MySQL**
+    #
+    #   Possible values are `audit`, `error`, `general`, and `slowquery`.
+    #
+    #   **Oracle**
+    #
+    #   Possible values are `alert`, `audit`, `listener`, and `trace`.
+    #
+    #   **PostgreSQL**
+    #
+    #   Possible values are `postgresql` and `upgrade`.
+    #
     #
     #
     #   [1]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_LogAccess.html#USER_LogAccess.Procedural.UploadtoCloudWatch
@@ -3712,6 +3758,7 @@ module Aws::RDS
     #   resp.db_instance.read_replica_db_instance_identifiers[0] #=> String
     #   resp.db_instance.read_replica_db_cluster_identifiers #=> Array
     #   resp.db_instance.read_replica_db_cluster_identifiers[0] #=> String
+    #   resp.db_instance.replica_mode #=> String, one of "open-read-only", "mounted"
     #   resp.db_instance.license_model #=> String
     #   resp.db_instance.iops #=> Integer
     #   resp.db_instance.option_group_memberships #=> Array
@@ -4162,27 +4209,42 @@ module Aws::RDS
     #
     # @option params [String] :domain
     #   The Active Directory directory ID to create the DB instance in.
+    #   Currently, only MySQL, Microsoft SQL Server, Oracle, and PostgreSQL DB
+    #   instances can be created in an Active Directory Domain.
     #
-    #   For Oracle DB instances, Amazon RDS can use Kerberos authentication to
-    #   authenticate users that connect to the DB instance. For more
-    #   information, see [ Using Kerberos Authentication with Amazon RDS for
-    #   Oracle][1] in the *Amazon RDS User Guide*.
-    #
-    #   For Microsoft SQL Server DB instances, Amazon RDS can use Windows
-    #   Authentication to authenticate users that connect to the DB instance.
-    #   For more information, see [ Using Windows Authentication with an
-    #   Amazon RDS DB Instance Running Microsoft SQL Server][2] in the *Amazon
+    #   For more information, see [ Kerberos Authentication][1] in the *Amazon
     #   RDS User Guide*.
     #
     #
     #
-    #   [1]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/oracle-kerberos.html
-    #   [2]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_SQLServerWinAuth.html
+    #   [1]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/kerberos-authentication.html
     #
     # @option params [String] :domain_iam_role_name
     #   Specify the name of the IAM role to be used when making API calls to
     #   the Directory Service.
     #
+    # @option params [String] :replica_mode
+    #   The open mode of the replica database: mounted or read-only.
+    #
+    #   <note markdown="1"> This parameter is only supported for Oracle DB instances.
+    #
+    #    </note>
+    #
+    #   Mounted DB replicas are included in Oracle Enterprise Edition. The
+    #   main use case for mounted replicas is cross-Region disaster recovery.
+    #   The primary database doesn't use Active Data Guard to transmit
+    #   information to the mounted replica. Because it doesn't accept user
+    #   connections, a mounted replica can't serve a read-only workload.
+    #
+    #   You can create a combination of mounted and read-only DB replicas for
+    #   the same primary DB instance. For more information, see [Working with
+    #   Oracle Read Replicas for Amazon RDS][1] in the *Amazon RDS User
+    #   Guide*.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/oracle-read-replicas.html
+    #
     # @option params [String] :source_region
     #   The source region of the snapshot. This is only needed when the
     #   shapshot is encrypted and in a different region.
@@ -4261,6 +4323,7 @@ module Aws::RDS
     #     deletion_protection: false,
     #     domain: "String",
     #     domain_iam_role_name: "String",
+    #     replica_mode: "open-read-only", # accepts open-read-only, mounted
     #     source_region: "String",
     #   })
     #
@@ -4329,6 +4392,7 @@ module Aws::RDS
     #   resp.db_instance.read_replica_db_instance_identifiers[0] #=> String
     #   resp.db_instance.read_replica_db_cluster_identifiers #=> Array
     #   resp.db_instance.read_replica_db_cluster_identifiers[0] #=> String
+    #   resp.db_instance.replica_mode #=> String, one of "open-read-only", "mounted"
     #   resp.db_instance.license_model #=> String
     #   resp.db_instance.iops #=> Integer
     #   resp.db_instance.option_group_memberships #=> Array
@@ -4908,21 +4972,22 @@ module Aws::RDS
     # create a topic in Amazon SNS and subscribe to the topic. The ARN is
     # displayed in the SNS console.
     #
-    # You can specify the type of source (SourceType) you want to be
-    # notified of, provide a list of RDS sources (SourceIds) that triggers
-    # the events, and provide a list of event categories (EventCategories)
-    # for events you want to be notified of. For example, you can specify
-    # SourceType = db-instance, SourceIds = mydbinstance1, mydbinstance2 and
-    # EventCategories = Availability, Backup.
-    #
-    # If you specify both the SourceType and SourceIds, such as SourceType =
-    # db-instance and SourceIdentifier = myDBInstance1, you are notified of
-    # all the db-instance events for the specified source. If you specify a
-    # SourceType but do not specify a SourceIdentifier, you receive notice
-    # of the events for that source type for all your RDS sources. If you
-    # don't specify either the SourceType or the SourceIdentifier, you are
-    # notified of events generated from all RDS sources belonging to your
-    # customer account.
+    # You can specify the type of source (`SourceType`) that you want to be
+    # notified of and provide a list of RDS sources (`SourceIds`) that
+    # triggers the events. You can also provide a list of event categories
+    # (`EventCategories`) for events that you want to be notified of. For
+    # example, you can specify `SourceType` = `db-instance`, `SourceIds` =
+    # `mydbinstance1`, `mydbinstance2` and `EventCategories` =
+    # `Availability`, `Backup`.
+    #
+    # If you specify both the `SourceType` and `SourceIds`, such as
+    # `SourceType` = `db-instance` and `SourceIdentifier` = `myDBInstance1`,
+    # you are notified of all the `db-instance` events for the specified
+    # source. If you specify a `SourceType` but do not specify a
+    # `SourceIdentifier`, you receive notice of the events for that source
+    # type for all your RDS sources. If you don't specify either the
+    # SourceType or the `SourceIdentifier`, you are notified of events
+    # generated from all RDS sources belonging to your customer account.
     #
     # <note markdown="1"> RDS event notification is only available for unencrypted SNS topics.
     # If you specify an encrypted SNS topic, event notifications aren't
@@ -4942,18 +5007,18 @@ module Aws::RDS
     #
     # @option params [String] :source_type
     #   The type of source that is generating the events. For example, if you
-    #   want to be notified of events generated by a DB instance, you would
-    #   set this parameter to db-instance. if this value isn't specified, all
-    #   events are returned.
+    #   want to be notified of events generated by a DB instance, you set this
+    #   parameter to `db-instance`. If this value isn't specified, all events
+    #   are returned.
     #
     #   Valid values: `db-instance` \| `db-cluster` \| `db-parameter-group` \|
     #   `db-security-group` \| `db-snapshot` \| `db-cluster-snapshot`
     #
     # @option params [Array<String>] :event_categories
-    #   A list of event categories for a SourceType that you want to subscribe
-    #   to. You can see a list of the categories for a given SourceType in the
-    #   [Events][1] topic in the *Amazon RDS User Guide* or by using the
-    #   **DescribeEventCategories** action.
+    #   A list of event categories for a particular source type (`SourceType`)
+    #   that you want to subscribe to. You can see a list of the categories
+    #   for a given source type in [Events][1] in the *Amazon RDS User Guide*
+    #   or by using the `DescribeEventCategories` operation.
     #
     #
     #
@@ -4968,19 +5033,26 @@ module Aws::RDS
     #
     #   Constraints:
     #
-    #   * If SourceIds are supplied, SourceType must also be provided.
+    #   * If a `SourceIds` value is supplied, `SourceType` must also be
+    #     provided.
     #
-    #   * If the source type is a DB instance, then a `DBInstanceIdentifier`
+    #   * If the source type is a DB instance, a `DBInstanceIdentifier` value
     #     must be supplied.
     #
-    #   * If the source type is a DB security group, a `DBSecurityGroupName`
+    #   * If the source type is a DB cluster, a `DBClusterIdentifier` value
     #     must be supplied.
     #
     #   * If the source type is a DB parameter group, a `DBParameterGroupName`
+    #     value must be supplied.
+    #
+    #   * If the source type is a DB security group, a `DBSecurityGroupName`
+    #     value must be supplied.
+    #
+    #   * If the source type is a DB snapshot, a `DBSnapshotIdentifier` value
     #     must be supplied.
     #
-    #   * If the source type is a DB snapshot, a `DBSnapshotIdentifier` must
-    #     be supplied.
+    #   * If the source type is a DB cluster snapshot, a
+    #     `DBClusterSnapshotIdentifier` value must be supplied.
     #
     # @option params [Boolean] :enabled
     #   A value that indicates whether to activate the subscription. If the
@@ -5064,8 +5136,8 @@ module Aws::RDS
       req.send_request(options)
     end
 
-    # Creates an Aurora global database spread across multiple regions. The
-    # global database contains a single primary cluster with read-write
+    # Creates an Aurora global database spread across multiple AWS Regions.
+    # The global database contains a single primary cluster with read-write
     # capability, and a read-only secondary cluster that receives data from
     # the primary cluster through high-speed replication performed by the
     # Aurora storage subsystem.
@@ -5087,8 +5159,7 @@ module Aws::RDS
     #   global database. This parameter is optional.
     #
     # @option params [String] :engine
-    #   Provides the name of the database engine to be used for this DB
-    #   cluster.
+    #   The name of the database engine to be used for this DB cluster.
     #
     # @option params [String] :engine_version
     #   The engine version of the Aurora global database.
@@ -5845,6 +5916,7 @@ module Aws::RDS
     #   resp.db_instance.read_replica_db_instance_identifiers[0] #=> String
     #   resp.db_instance.read_replica_db_cluster_identifiers #=> Array
     #   resp.db_instance.read_replica_db_cluster_identifiers[0] #=> String
+    #   resp.db_instance.replica_mode #=> String, one of "open-read-only", "mounted"
     #   resp.db_instance.license_model #=> String
     #   resp.db_instance.iops #=> Integer
     #   resp.db_instance.option_group_memberships #=> Array
@@ -6798,7 +6870,7 @@ module Aws::RDS
     #   `writer`, `custom`. `Values` for the `db-cluster-endpoint-custom-type`
     #   filter can be one or more of: `reader`, `any`. `Values` for the
     #   `db-cluster-endpoint-status` filter can be one or more of:
-    #   `available`, `creating`, `deleting`, `modifying`.
+    #   `available`, `creating`, `deleting`, `inactive`, `modifying`.
     #
     # @option params [Integer] :max_records
     #   The maximum number of records to include in the response. If more
@@ -7942,6 +8014,7 @@ module Aws::RDS
     #   resp.db_instances[0].read_replica_db_instance_identifiers[0] #=> String
     #   resp.db_instances[0].read_replica_db_cluster_identifiers #=> Array
     #   resp.db_instances[0].read_replica_db_cluster_identifiers[0] #=> String
+    #   resp.db_instances[0].replica_mode #=> String, one of "open-read-only", "mounted"
     #   resp.db_instances[0].license_model #=> String
     #   resp.db_instances[0].iops #=> Integer
     #   resp.db_instances[0].option_group_memberships #=> Array
@@ -9147,8 +9220,8 @@ module Aws::RDS
 
     # Displays a list of categories for all event source types, or, if
     # specified, for a specified source type. You can see a list of the
-    # event categories and source types in the [ Events][1] topic in the
-    # *Amazon RDS User Guide.*
+    # event categories and source types in [ Events][1] in the *Amazon RDS
+    # User Guide.*
     #
     #
     #
@@ -9157,8 +9230,8 @@ module Aws::RDS
     # @option params [String] :source_type
     #   The type of source that is generating the events.
     #
-    #   Valid values: db-instance \| db-parameter-group \| db-security-group
-    #   \| db-snapshot
+    #   Valid values: `db-instance` \| `db-cluster` \| `db-parameter-group` \|
+    #   `db-security-group` \| `db-snapshot` \| `db-cluster-snapshot`
     #
     # @option params [Array<Types::Filter>] :filters
     #   This parameter isn't currently supported.
@@ -9209,10 +9282,11 @@ module Aws::RDS
     end
 
     # Lists all the subscription descriptions for a customer account. The
-    # description for a subscription includes SubscriptionName, SNSTopicARN,
-    # CustomerID, SourceType, SourceID, CreationTime, and Status.
+    # description for a subscription includes `SubscriptionName`,
+    # `SNSTopicARN`, `CustomerID`, `SourceType`, `SourceID`, `CreationTime`,
+    # and `Status`.
     #
-    # If you specify a SubscriptionName, lists the description for that
+    # If you specify a `SubscriptionName`, lists the description for that
     # subscription.
     #
     # @option params [String] :subscription_name
@@ -9298,11 +9372,16 @@ module Aws::RDS
       req.send_request(options)
     end
 
-    # Returns events related to DB instances, DB security groups, DB
-    # snapshots, and DB parameter groups for the past 14 days. Events
-    # specific to a particular DB instance, DB security group, database
-    # snapshot, or DB parameter group can be obtained by providing the name
-    # as a parameter. By default, the past hour of events are returned.
+    # Returns events related to DB instances, DB clusters, DB parameter
+    # groups, DB security groups, DB snapshots, and DB cluster snapshots for
+    # the past 14 days. Events specific to a particular DB instances, DB
+    # clusters, DB parameter groups, DB security groups, DB snapshots, and
+    # DB cluster snapshots group can be obtained by providing the name as a
+    # parameter.
+    #
+    # <note markdown="1"> By default, the past hour of events are returned.
+    #
+    #  </note>
     #
     # @option params [String] :source_identifier
     #   The identifier of the event source for which events are returned. If
@@ -9310,19 +9389,26 @@ module Aws::RDS
     #
     #   Constraints:
     #
-    #   * If SourceIdentifier is supplied, SourceType must also be provided.
+    #   * If `SourceIdentifier` is supplied, `SourceType` must also be
+    #     provided.
     #
-    #   * If the source type is `DBInstance`, then a `DBInstanceIdentifier`
+    #   * If the source type is a DB instance, a `DBInstanceIdentifier` value
     #     must be supplied.
     #
-    #   * If the source type is `DBSecurityGroup`, a `DBSecurityGroupName`
+    #   * If the source type is a DB cluster, a `DBClusterIdentifier` value
     #     must be supplied.
     #
-    #   * If the source type is `DBParameterGroup`, a `DBParameterGroupName`
+    #   * If the source type is a DB parameter group, a `DBParameterGroupName`
+    #     value must be supplied.
+    #
+    #   * If the source type is a DB security group, a `DBSecurityGroupName`
+    #     value must be supplied.
+    #
+    #   * If the source type is a DB snapshot, a `DBSnapshotIdentifier` value
     #     must be supplied.
     #
-    #   * If the source type is `DBSnapshot`, a `DBSnapshotIdentifier` must be
-    #     supplied.
+    #   * If the source type is a DB cluster snapshot, a
+    #     `DBClusterSnapshotIdentifier` value must be supplied.
     #
     #   * Can't end with a hyphen or contain two consecutive hyphens.
     #
@@ -9457,7 +9543,7 @@ module Aws::RDS
     # @option params [Array<Types::Filter>] :filters
     #   Filters specify one or more snapshot exports to describe. The filters
     #   are specified as name-value pairs that define what to include in the
-    #   output.
+    #   output. Filter names and values are case-sensitive.
     #
     #   Supported filters include the following:
     #
@@ -9469,7 +9555,8 @@ module Aws::RDS
     #   * `source-arn` - The Amazon Resource Name (ARN) of the snapshot
     #     exported to Amazon S3
     #
-    #   * `status` - The status of the export task.
+    #   * `status` - The status of the export task. Must be lowercase, for
+    #     example, `complete`.
     #
     # @option params [String] :marker
     #   An optional pagination token provided by a previous
@@ -11447,6 +11534,13 @@ module Aws::RDS
     #   `none` to remove the cluster from its current domain. The domain must
     #   be created prior to this operation.
     #
+    #   For more information, see [Kerberos Authentication][1] in the *Amazon
+    #   Aurora User Guide*.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/kerberos-authentication.html
+    #
     # @option params [String] :domain_iam_role_name
     #   Specify the name of the IAM role to be used when making API calls to
     #   the Directory Service.
@@ -12325,25 +12419,16 @@ module Aws::RDS
     # @option params [String] :domain
     #   The Active Directory directory ID to move the DB instance to. Specify
     #   `none` to remove the instance from its current domain. The domain must
-    #   be created prior to this operation. Currently, only Microsoft SQL
-    #   Server and Oracle DB instances can be created in an Active Directory
-    #   Domain.
-    #
-    #   For Microsoft SQL Server DB instances, Amazon RDS can use Windows
-    #   Authentication to authenticate users that connect to the DB instance.
-    #   For more information, see [ Using Windows Authentication with an
-    #   Amazon RDS DB Instance Running Microsoft SQL Server][1] in the *Amazon
-    #   RDS User Guide*.
+    #   be created prior to this operation. Currently, only MySQL, Microsoft
+    #   SQL Server, Oracle, and PostgreSQL DB instances can be created in an
+    #   Active Directory Domain.
     #
-    #   For Oracle DB instances, Amazon RDS can use Kerberos authentication to
-    #   authenticate users that connect to the DB instance. For more
-    #   information, see [ Using Kerberos Authentication with Amazon RDS for
-    #   Oracle][2] in the *Amazon RDS User Guide*.
+    #   For more information, see [ Kerberos Authentication][1] in the *Amazon
+    #   RDS User Guide*.
     #
     #
     #
-    #   [1]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_SQLServerWinAuth.html
-    #   [2]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/oracle-kerberos.html
+    #   [1]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/kerberos-authentication.html
     #
     # @option params [Boolean] :copy_tags_to_snapshot
     #   A value that indicates whether to copy all tags from the DB instance
@@ -12563,6 +12648,26 @@ module Aws::RDS
     #   [1]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.SSL-certificate-rotation.html
     #   [2]: https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/UsingWithRDS.SSL-certificate-rotation.html
     #
+    # @option params [String] :replica_mode
+    #   A value that sets the open mode of a replica database to either
+    #   mounted or read-only.
+    #
+    #   <note markdown="1"> Currently, this parameter is only supported for Oracle DB instances.
+    #
+    #    </note>
+    #
+    #   Mounted DB replicas are included in Oracle Enterprise Edition. The
+    #   main use case for mounted replicas is cross-Region disaster recovery.
+    #   The primary database doesn't use Active Data Guard to transmit
+    #   information to the mounted replica. Because it doesn't accept user
+    #   connections, a mounted replica can't serve a read-only workload. For
+    #   more information, see [Working with Oracle Read Replicas for Amazon
+    #   RDS][1] in the *Amazon RDS User Guide*.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/oracle-read-replicas.html
+    #
     # @return [Types::ModifyDBInstanceResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::ModifyDBInstanceResult#db_instance #db_instance} => Types::DBInstance
@@ -12642,6 +12747,7 @@ module Aws::RDS
     #     deletion_protection: false,
     #     max_allocated_storage: 1,
     #     certificate_rotation_restart: false,
+    #     replica_mode: "open-read-only", # accepts open-read-only, mounted
     #   })
     #
     # @example Response structure
@@ -12709,6 +12815,7 @@ module Aws::RDS
     #   resp.db_instance.read_replica_db_instance_identifiers[0] #=> String
     #   resp.db_instance.read_replica_db_cluster_identifiers #=> Array
     #   resp.db_instance.read_replica_db_cluster_identifiers[0] #=> String
+    #   resp.db_instance.replica_mode #=> String, one of "open-read-only", "mounted"
     #   resp.db_instance.license_model #=> String
     #   resp.db_instance.iops #=> Integer
     #   resp.db_instance.option_group_memberships #=> Array
@@ -13331,9 +13438,9 @@ module Aws::RDS
     # `AddSourceIdentifierToSubscription` and
     # `RemoveSourceIdentifierFromSubscription` calls.
     #
-    # You can see a list of the event categories for a given SourceType in
-    # the [Events][1] topic in the *Amazon RDS User Guide* or by using the
-    # **DescribeEventCategories** action.
+    # You can see a list of the event categories for a given source type
+    # (`SourceType`) in [Events][1] in the *Amazon RDS User Guide* or by
+    # using the `DescribeEventCategories` operation.
     #
     #
     #
@@ -13353,14 +13460,14 @@ module Aws::RDS
     #   set this parameter to db-instance. If this value isn't specified, all
     #   events are returned.
     #
-    #   Valid values: db-instance \| db-parameter-group \| db-security-group
-    #   \| db-snapshot
+    #   Valid values: `db-instance` \| `db-cluster` \| `db-parameter-group` \|
+    #   `db-security-group` \| `db-snapshot` \| `db-cluster-snapshot`
     #
     # @option params [Array<String>] :event_categories
-    #   A list of event categories for a SourceType that you want to subscribe
-    #   to. You can see a list of the categories for a given SourceType in the
-    #   [Events][1] topic in the *Amazon RDS User Guide* or by using the
-    #   **DescribeEventCategories** action.
+    #   A list of event categories for a source type (`SourceType`) that you
+    #   want to subscribe to. You can see a list of the categories for a given
+    #   source type in [Events][1] in the *Amazon RDS User Guide* or by using
+    #   the `DescribeEventCategories` operation.
     #
     #
     #
@@ -13792,6 +13899,7 @@ module Aws::RDS
     #   resp.db_instance.read_replica_db_instance_identifiers[0] #=> String
     #   resp.db_instance.read_replica_db_cluster_identifiers #=> Array
     #   resp.db_instance.read_replica_db_cluster_identifiers[0] #=> String
+    #   resp.db_instance.replica_mode #=> String, one of "open-read-only", "mounted"
     #   resp.db_instance.license_model #=> String
     #   resp.db_instance.iops #=> Integer
     #   resp.db_instance.option_group_memberships #=> Array
@@ -14184,6 +14292,7 @@ module Aws::RDS
     #   resp.db_instance.read_replica_db_instance_identifiers[0] #=> String
     #   resp.db_instance.read_replica_db_cluster_identifiers #=> Array
     #   resp.db_instance.read_replica_db_cluster_identifiers[0] #=> String
+    #   resp.db_instance.replica_mode #=> String, one of "open-read-only", "mounted"
     #   resp.db_instance.license_model #=> String
     #   resp.db_instance.iops #=> Integer
     #   resp.db_instance.option_group_memberships #=> Array
@@ -14739,11 +14848,11 @@ module Aws::RDS
       req.send_request(options)
     end
 
-    # Creates an Amazon Aurora DB cluster from data stored in an Amazon S3
-    # bucket. Amazon RDS must be authorized to access the Amazon S3 bucket
-    # and the data must be created using the Percona XtraBackup utility as
-    # described in [ Migrating Data to an Amazon Aurora MySQL DB Cluster][1]
-    # in the *Amazon Aurora User Guide*.
+    # Creates an Amazon Aurora DB cluster from MySQL data stored in an
+    # Amazon S3 bucket. Amazon RDS must be authorized to access the Amazon
+    # S3 bucket and the data must be created using the Percona XtraBackup
+    # utility as described in [ Migrating Data from MySQL by Using an Amazon
+    # S3 Bucket][1] in the *Amazon Aurora User Guide*.
     #
     # <note markdown="1"> This action only restores the DB cluster, not the DB instances for
     # that DB cluster. You must invoke the `CreateDBInstance` action to
@@ -14757,13 +14866,14 @@ module Aws::RDS
     # For more information on Amazon Aurora, see [ What Is Amazon
     # Aurora?][2] in the *Amazon Aurora User Guide.*
     #
-    # <note markdown="1"> This action only applies to Aurora DB clusters.
+    # <note markdown="1"> This action only applies to Aurora DB clusters. The source DB engine
+    # must be MySQL.
     #
     #  </note>
     #
     #
     #
-    # [1]: https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/AuroraMySQL.Migrating.html
+    # [1]: https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/AuroraMySQL.Migrating.ExtMySQL.html#AuroraMySQL.Migrating.ExtMySQL.S3
     # [2]: https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/CHAP_AuroraOverview.html
     #
     # @option params [Array<String>] :availability_zones
@@ -14828,10 +14938,11 @@ module Aws::RDS
     #   Example: `mySubnetgroup`
     #
     # @option params [required, String] :engine
-    #   The name of the database engine to be used for the restored DB
-    #   cluster.
+    #   The name of the database engine to be used for this DB cluster.
     #
-    #   Valid Values: `aurora`, `aurora-postgresql`
+    #   Valid Values: `aurora` (for MySQL 5.6-compatible Aurora),
+    #   `aurora-mysql` (for MySQL 5.7-compatible Aurora), and
+    #   `aurora-postgresql`
     #
     # @option params [String] :engine_version
     #   The version number of the database engine to use.
@@ -14986,7 +15097,7 @@ module Aws::RDS
     #
     #   MySQL versions 5.5, 5.6, and 5.7 are supported.
     #
-    #   Example: `5.6.40`
+    #   Example: `5.6.40`, `5.7.28`
     #
     # @option params [required, String] :s3_bucket_name
     #   The name of the Amazon S3 bucket that contains the data used to create
@@ -15414,7 +15525,16 @@ module Aws::RDS
     #
     # @option params [String] :domain
     #   Specify the Active Directory directory ID to restore the DB cluster
-    #   in. The domain must be created prior to this operation.
+    #   in. The domain must be created prior to this operation. Currently,
+    #   only MySQL, Microsoft SQL Server, Oracle, and PostgreSQL DB instances
+    #   can be created in an Active Directory Domain.
+    #
+    #   For more information, see [ Kerberos Authentication][1] in the *Amazon
+    #   RDS User Guide*.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/kerberos-authentication.html
     #
     # @option params [String] :domain_iam_role_name
     #   Specify the name of the IAM role to be used when making API calls to
@@ -16164,24 +16284,15 @@ module Aws::RDS
     # @option params [String] :domain
     #   Specify the Active Directory directory ID to restore the DB instance
     #   in. The domain must be created prior to this operation. Currently,
-    #   only Microsoft SQL Server and Oracle DB instances can be created in an
-    #   Active Directory Domain.
+    #   only MySQL, Microsoft SQL Server, Oracle, and PostgreSQL DB instances
+    #   can be created in an Active Directory Domain.
     #
-    #   For Microsoft SQL Server DB instances, Amazon RDS can use Windows
-    #   Authentication to authenticate users that connect to the DB instance.
-    #   For more information, see [ Using Windows Authentication with an
-    #   Amazon RDS DB Instance Running Microsoft SQL Server][1] in the *Amazon
+    #   For more information, see [ Kerberos Authentication][1] in the *Amazon
     #   RDS User Guide*.
     #
-    #   For Oracle DB instances, Amazon RDS can use Kerberos authentication to
-    #   authenticate users that connect to the DB instance. For more
-    #   information, see [ Using Kerberos Authentication with Amazon RDS for
-    #   Oracle][2] in the *Amazon RDS User Guide*.
     #
     #
-    #
-    #   [1]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_SQLServerWinAuth.html
-    #   [2]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/oracle-kerberos.html
+    #   [1]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/kerberos-authentication.html
     #
     # @option params [Boolean] :copy_tags_to_snapshot
     #   A value that indicates whether to copy all tags from the restored DB
@@ -16457,6 +16568,7 @@ module Aws::RDS
     #   resp.db_instance.read_replica_db_instance_identifiers[0] #=> String
     #   resp.db_instance.read_replica_db_cluster_identifiers #=> Array
     #   resp.db_instance.read_replica_db_cluster_identifiers[0] #=> String
+    #   resp.db_instance.replica_mode #=> String, one of "open-read-only", "mounted"
     #   resp.db_instance.license_model #=> String
     #   resp.db_instance.iops #=> Integer
     #   resp.db_instance.option_group_memberships #=> Array
@@ -17015,6 +17127,7 @@ module Aws::RDS
     #   resp.db_instance.read_replica_db_instance_identifiers[0] #=> String
     #   resp.db_instance.read_replica_db_cluster_identifiers #=> Array
     #   resp.db_instance.read_replica_db_cluster_identifiers[0] #=> String
+    #   resp.db_instance.replica_mode #=> String, one of "open-read-only", "mounted"
     #   resp.db_instance.license_model #=> String
     #   resp.db_instance.iops #=> Integer
     #   resp.db_instance.option_group_memberships #=> Array
@@ -17307,24 +17420,15 @@ module Aws::RDS
     # @option params [String] :domain
     #   Specify the Active Directory directory ID to restore the DB instance
     #   in. The domain must be created prior to this operation. Currently,
-    #   only Microsoft SQL Server and Oracle DB instances can be created in an
-    #   Active Directory Domain.
+    #   only MySQL, Microsoft SQL Server, Oracle, and PostgreSQL DB instances
+    #   can be created in an Active Directory Domain.
     #
-    #   For Microsoft SQL Server DB instances, Amazon RDS can use Windows
-    #   Authentication to authenticate users that connect to the DB instance.
-    #   For more information, see [ Using Windows Authentication with an
-    #   Amazon RDS DB Instance Running Microsoft SQL Server][1] in the *Amazon
+    #   For more information, see [ Kerberos Authentication][1] in the *Amazon
     #   RDS User Guide*.
     #
-    #   For Oracle DB instances, Amazon RDS can use Kerberos authentication to
-    #   authenticate users that connect to the DB instance. For more
-    #   information, see [ Using Kerberos Authentication with Amazon RDS for
-    #   Oracle][2] in the *Amazon RDS User Guide*.
     #
     #
-    #
-    #   [1]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_SQLServerWinAuth.html
-    #   [2]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/oracle-kerberos.html
+    #   [1]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/kerberos-authentication.html
     #
     # @option params [String] :domain_iam_role_name
     #   Specify the name of the IAM role to be used when making API calls to
@@ -17602,6 +17706,7 @@ module Aws::RDS
     #   resp.db_instance.read_replica_db_instance_identifiers[0] #=> String
     #   resp.db_instance.read_replica_db_cluster_identifiers #=> Array
     #   resp.db_instance.read_replica_db_cluster_identifiers[0] #=> String
+    #   resp.db_instance.replica_mode #=> String, one of "open-read-only", "mounted"
     #   resp.db_instance.license_model #=> String
     #   resp.db_instance.iops #=> Integer
     #   resp.db_instance.option_group_memberships #=> Array
@@ -18026,6 +18131,7 @@ module Aws::RDS
     #   resp.db_instance.read_replica_db_instance_identifiers[0] #=> String
     #   resp.db_instance.read_replica_db_cluster_identifiers #=> Array
     #   resp.db_instance.read_replica_db_cluster_identifiers[0] #=> String
+    #   resp.db_instance.replica_mode #=> String, one of "open-read-only", "mounted"
     #   resp.db_instance.license_model #=> String
     #   resp.db_instance.iops #=> Integer
     #   resp.db_instance.option_group_memberships #=> Array
@@ -18109,8 +18215,26 @@ module Aws::RDS
     #   The ID of the AWS KMS key to use to encrypt the snapshot exported to
     #   Amazon S3. The KMS key ID is the Amazon Resource Name (ARN), the KMS
     #   key identifier, or the KMS key alias for the KMS encryption key. The
-    #   IAM role used for the snapshot export must have encryption and
-    #   decryption permissions to use this KMS key.
+    #   caller of this operation must be authorized to execute the following
+    #   operations. These can be set in the KMS key policy:
+    #
+    #   * GrantOperation.Encrypt
+    #
+    #   * GrantOperation.Decrypt
+    #
+    #   * GrantOperation.GenerateDataKey
+    #
+    #   * GrantOperation.GenerateDataKeyWithoutPlaintext
+    #
+    #   * GrantOperation.ReEncryptFrom
+    #
+    #   * GrantOperation.ReEncryptTo
+    #
+    #   * GrantOperation.CreateGrant
+    #
+    #   * GrantOperation.DescribeKey
+    #
+    #   * GrantOperation.RetireGrant
     #
     # @option params [String] :s3_prefix
     #   The Amazon S3 bucket prefix to use as the file name and path of the
@@ -18462,6 +18586,7 @@ module Aws::RDS
     #   resp.db_instance.read_replica_db_instance_identifiers[0] #=> String
     #   resp.db_instance.read_replica_db_cluster_identifiers #=> Array
     #   resp.db_instance.read_replica_db_cluster_identifiers[0] #=> String
+    #   resp.db_instance.replica_mode #=> String, one of "open-read-only", "mounted"
     #   resp.db_instance.license_model #=> String
     #   resp.db_instance.iops #=> Integer
     #   resp.db_instance.option_group_memberships #=> Array
@@ -18536,7 +18661,7 @@ module Aws::RDS
         params: params,
         config: config)
       context[:gem_name] = 'aws-sdk-rds'
-      context[:gem_version] = '1.95.0'
+      context[:gem_version] = '1.100.0'
       Seahorse::Client::Request.new(handlers, context)
     end