aws-sdk-rds 1.95.0 → 1.96.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -230,17 +230,23 @@ module Aws::RDS
230
230
  #
231
231
  # Constraints:
232
232
  #
233
- # * If the source type is a DB instance, then a `DBInstanceIdentifier`
234
- # must be supplied.
233
+ # * If the source type is a DB instance, a `DBInstanceIdentifier`
234
+ # value must be supplied.
235
235
  #
236
- # * If the source type is a DB security group, a `DBSecurityGroupName`
236
+ # * If the source type is a DB cluster, a `DBClusterIdentifier` value
237
237
  # must be supplied.
238
238
  #
239
239
  # * If the source type is a DB parameter group, a
240
- # `DBParameterGroupName` must be supplied.
240
+ # `DBParameterGroupName` value must be supplied.
241
+ #
242
+ # * If the source type is a DB security group, a `DBSecurityGroupName`
243
+ # value must be supplied.
241
244
  #
242
- # * If the source type is a DB snapshot, a `DBSnapshotIdentifier` must
243
- # be supplied.
245
+ # * If the source type is a DB snapshot, a `DBSnapshotIdentifier`
246
+ # value must be supplied.
247
+ #
248
+ # * If the source type is a DB cluster snapshot, a
249
+ # `DBClusterSnapshotIdentifier` value must be supplied.
244
250
  # @return [String]
245
251
  #
246
252
  # @see http://docs.aws.amazon.com/goto/WebAPI/rds-2014-10-31/AddSourceIdentifierToSubscriptionMessage AWS API Documentation
@@ -2450,6 +2456,9 @@ module Aws::RDS
2450
2456
  #
2451
2457
  # * Must contain 1 to 64 letters or numbers.
2452
2458
  #
2459
+ # * Must begin with a letter. Subsequent characters can be letters,
2460
+ # underscores, or digits (0-9).
2461
+ #
2453
2462
  # * Can't be a word reserved by the specified database engine
2454
2463
  #
2455
2464
  # **MariaDB**
@@ -2462,6 +2471,9 @@ module Aws::RDS
2462
2471
  #
2463
2472
  # * Must contain 1 to 64 letters or numbers.
2464
2473
  #
2474
+ # * Must begin with a letter. Subsequent characters can be letters,
2475
+ # underscores, or digits (0-9).
2476
+ #
2465
2477
  # * Can't be a word reserved by the specified database engine
2466
2478
  #
2467
2479
  # **PostgreSQL**
@@ -2474,8 +2486,8 @@ module Aws::RDS
2474
2486
  #
2475
2487
  # * Must contain 1 to 63 letters, numbers, or underscores.
2476
2488
  #
2477
- # * Must begin with a letter or an underscore. Subsequent characters
2478
- # can be letters, underscores, or digits (0-9).
2489
+ # * Must begin with a letter. Subsequent characters can be letters,
2490
+ # underscores, or digits (0-9).
2479
2491
  #
2480
2492
  # * Can't be a word reserved by the specified database engine
2481
2493
  #
@@ -3151,24 +3163,15 @@ module Aws::RDS
3151
3163
  #
3152
3164
  # @!attribute [rw] domain
3153
3165
  # The Active Directory directory ID to create the DB instance in.
3154
- # Currently, only Microsoft SQL Server and Oracle DB instances can be
3155
- # created in an Active Directory Domain.
3166
+ # Currently, only MySQL, Microsoft SQL Server, Oracle, and PostgreSQL
3167
+ # DB instances can be created in an Active Directory Domain.
3156
3168
  #
3157
- # For Microsoft SQL Server DB instances, Amazon RDS can use Windows
3158
- # Authentication to authenticate users that connect to the DB
3159
- # instance. For more information, see [ Using Windows Authentication
3160
- # with an Amazon RDS DB Instance Running Microsoft SQL Server][1] in
3161
- # the *Amazon RDS User Guide*.
3162
- #
3163
- # For Oracle DB instances, Amazon RDS can use Kerberos Authentication
3164
- # to authenticate users that connect to the DB instance. For more
3165
- # information, see [ Using Kerberos Authentication with Amazon RDS for
3166
- # Oracle][2] in the *Amazon RDS User Guide*.
3169
+ # For more information, see [ Kerberos Authentication][1] in the
3170
+ # *Amazon RDS User Guide*.
3167
3171
  #
3168
3172
  #
3169
3173
  #
3170
- # [1]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_SQLServerWinAuth.html
3171
- # [2]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/oracle-kerberos.html
3174
+ # [1]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/kerberos-authentication.html
3172
3175
  # @return [String]
3173
3176
  #
3174
3177
  # @!attribute [rw] copy_tags_to_snapshot
@@ -3439,6 +3442,7 @@ module Aws::RDS
3439
3442
  # deletion_protection: false,
3440
3443
  # domain: "String",
3441
3444
  # domain_iam_role_name: "String",
3445
+ # replica_mode: "open-read-only", # accepts open-read-only, mounted
3442
3446
  # source_region: "String",
3443
3447
  # }
3444
3448
  #
@@ -3844,22 +3848,15 @@ module Aws::RDS
3844
3848
  #
3845
3849
  # @!attribute [rw] domain
3846
3850
  # The Active Directory directory ID to create the DB instance in.
3851
+ # Currently, only MySQL, Microsoft SQL Server, Oracle, and PostgreSQL
3852
+ # DB instances can be created in an Active Directory Domain.
3847
3853
  #
3848
- # For Oracle DB instances, Amazon RDS can use Kerberos authentication
3849
- # to authenticate users that connect to the DB instance. For more
3850
- # information, see [ Using Kerberos Authentication with Amazon RDS for
3851
- # Oracle][1] in the *Amazon RDS User Guide*.
3852
- #
3853
- # For Microsoft SQL Server DB instances, Amazon RDS can use Windows
3854
- # Authentication to authenticate users that connect to the DB
3855
- # instance. For more information, see [ Using Windows Authentication
3856
- # with an Amazon RDS DB Instance Running Microsoft SQL Server][2] in
3857
- # the *Amazon RDS User Guide*.
3854
+ # For more information, see [ Kerberos Authentication][1] in the
3855
+ # *Amazon RDS User Guide*.
3858
3856
  #
3859
3857
  #
3860
3858
  #
3861
- # [1]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/oracle-kerberos.html
3862
- # [2]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_SQLServerWinAuth.html
3859
+ # [1]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/kerberos-authentication.html
3863
3860
  # @return [String]
3864
3861
  #
3865
3862
  # @!attribute [rw] domain_iam_role_name
@@ -3867,6 +3864,30 @@ module Aws::RDS
3867
3864
  # the Directory Service.
3868
3865
  # @return [String]
3869
3866
  #
3867
+ # @!attribute [rw] replica_mode
3868
+ # The open mode of the replica database: mounted or read-only.
3869
+ #
3870
+ # <note markdown="1"> This parameter is only supported for Oracle DB instances.
3871
+ #
3872
+ # </note>
3873
+ #
3874
+ # Mounted DB replicas are included in Oracle Enterprise Edition. The
3875
+ # main use case for mounted replicas is cross-Region disaster
3876
+ # recovery. The primary database doesn't use Active Data Guard to
3877
+ # transmit information to the mounted replica. Because it doesn't
3878
+ # accept user connections, a mounted replica can't serve a read-only
3879
+ # workload.
3880
+ #
3881
+ # You can create a combination of mounted and read-only DB replicas
3882
+ # for the same primary DB instance. For more information, see [Working
3883
+ # with Oracle Read Replicas for Amazon RDS][1] in the *Amazon RDS User
3884
+ # Guide*.
3885
+ #
3886
+ #
3887
+ #
3888
+ # [1]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/oracle-read-replicas.html
3889
+ # @return [String]
3890
+ #
3870
3891
  # @!attribute [rw] destination_region
3871
3892
  # @return [String]
3872
3893
  #
@@ -3908,6 +3929,7 @@ module Aws::RDS
3908
3929
  :deletion_protection,
3909
3930
  :domain,
3910
3931
  :domain_iam_role_name,
3932
+ :replica_mode,
3911
3933
  :destination_region,
3912
3934
  :source_region)
3913
3935
  SENSITIVE = []
@@ -4380,18 +4402,18 @@ module Aws::RDS
4380
4402
  # @!attribute [rw] source_type
4381
4403
  # The type of source that is generating the events. For example, if
4382
4404
  # you want to be notified of events generated by a DB instance, you
4383
- # would set this parameter to db-instance. if this value isn't
4384
- # specified, all events are returned.
4405
+ # set this parameter to `db-instance`. If this value isn't specified,
4406
+ # all events are returned.
4385
4407
  #
4386
4408
  # Valid values: `db-instance` \| `db-cluster` \| `db-parameter-group`
4387
4409
  # \| `db-security-group` \| `db-snapshot` \| `db-cluster-snapshot`
4388
4410
  # @return [String]
4389
4411
  #
4390
4412
  # @!attribute [rw] event_categories
4391
- # A list of event categories for a SourceType that you want to
4392
- # subscribe to. You can see a list of the categories for a given
4393
- # SourceType in the [Events][1] topic in the *Amazon RDS User Guide*
4394
- # or by using the **DescribeEventCategories** action.
4413
+ # A list of event categories for a particular source type
4414
+ # (`SourceType`) that you want to subscribe to. You can see a list of
4415
+ # the categories for a given source type in [Events][1] in the *Amazon
4416
+ # RDS User Guide* or by using the `DescribeEventCategories` operation.
4395
4417
  #
4396
4418
  #
4397
4419
  #
@@ -4407,19 +4429,26 @@ module Aws::RDS
4407
4429
  #
4408
4430
  # Constraints:
4409
4431
  #
4410
- # * If SourceIds are supplied, SourceType must also be provided.
4432
+ # * If a `SourceIds` value is supplied, `SourceType` must also be
4433
+ # provided.
4411
4434
  #
4412
- # * If the source type is a DB instance, then a `DBInstanceIdentifier`
4413
- # must be supplied.
4435
+ # * If the source type is a DB instance, a `DBInstanceIdentifier`
4436
+ # value must be supplied.
4414
4437
  #
4415
- # * If the source type is a DB security group, a `DBSecurityGroupName`
4438
+ # * If the source type is a DB cluster, a `DBClusterIdentifier` value
4416
4439
  # must be supplied.
4417
4440
  #
4418
4441
  # * If the source type is a DB parameter group, a
4419
- # `DBParameterGroupName` must be supplied.
4442
+ # `DBParameterGroupName` value must be supplied.
4443
+ #
4444
+ # * If the source type is a DB security group, a `DBSecurityGroupName`
4445
+ # value must be supplied.
4446
+ #
4447
+ # * If the source type is a DB snapshot, a `DBSnapshotIdentifier`
4448
+ # value must be supplied.
4420
4449
  #
4421
- # * If the source type is a DB snapshot, a `DBSnapshotIdentifier` must
4422
- # be supplied.
4450
+ # * If the source type is a DB cluster snapshot, a
4451
+ # `DBClusterSnapshotIdentifier` value must be supplied.
4423
4452
  # @return [Array<String>]
4424
4453
  #
4425
4454
  # @!attribute [rw] enabled
@@ -5242,7 +5271,10 @@ module Aws::RDS
5242
5271
  #
5243
5272
  # @!attribute [rw] status
5244
5273
  # The current status of the endpoint. One of: `creating`, `available`,
5245
- # `deleting`, `modifying`.
5274
+ # `deleting`, `inactive`, `modifying`. The `inactive` state applies to
5275
+ # an endpoint that can't be used for a certain kind of cluster, such
5276
+ # as a `writer` endpoint for a read-only secondary cluster in a global
5277
+ # database.
5246
5278
  # @return [String]
5247
5279
  #
5248
5280
  # @!attribute [rw] endpoint_type
@@ -6102,6 +6134,20 @@ module Aws::RDS
6102
6134
  # </note>
6103
6135
  # @return [Array<String>]
6104
6136
  #
6137
+ # @!attribute [rw] replica_mode
6138
+ # The open mode of an Oracle read replica. The default is
6139
+ # `open-read-only`. For more information, see [Working with Oracle
6140
+ # Read Replicas for Amazon RDS][1] in the *Amazon RDS User Guide*.
6141
+ #
6142
+ # <note markdown="1"> This attribute is only supported in RDS for Oracle.
6143
+ #
6144
+ # </note>
6145
+ #
6146
+ #
6147
+ #
6148
+ # [1]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/oracle-read-replicas.html
6149
+ # @return [String]
6150
+ #
6105
6151
  # @!attribute [rw] license_model
6106
6152
  # License model information for this DB instance.
6107
6153
  # @return [String]
@@ -6338,6 +6384,7 @@ module Aws::RDS
6338
6384
  :read_replica_source_db_instance_identifier,
6339
6385
  :read_replica_db_instance_identifiers,
6340
6386
  :read_replica_db_cluster_identifiers,
6387
+ :replica_mode,
6341
6388
  :license_model,
6342
6389
  :iops,
6343
6390
  :option_group_memberships,
@@ -8502,7 +8549,7 @@ module Aws::RDS
8502
8549
  # `db-cluster-endpoint-custom-type` filter can be one or more of:
8503
8550
  # `reader`, `any`. `Values` for the `db-cluster-endpoint-status`
8504
8551
  # filter can be one or more of: `available`, `creating`, `deleting`,
8505
- # `modifying`.
8552
+ # `inactive`, `modifying`.
8506
8553
  # @return [Array<Types::Filter>]
8507
8554
  #
8508
8555
  # @!attribute [rw] max_records
@@ -10117,8 +10164,8 @@ module Aws::RDS
10117
10164
  # @!attribute [rw] source_type
10118
10165
  # The type of source that is generating the events.
10119
10166
  #
10120
- # Valid values: db-instance \| db-parameter-group \| db-security-group
10121
- # \| db-snapshot
10167
+ # Valid values: `db-instance` \| `db-cluster` \| `db-parameter-group`
10168
+ # \| `db-security-group` \| `db-snapshot` \| `db-cluster-snapshot`
10122
10169
  # @return [String]
10123
10170
  #
10124
10171
  # @!attribute [rw] filters
@@ -10213,19 +10260,26 @@ module Aws::RDS
10213
10260
  #
10214
10261
  # Constraints:
10215
10262
  #
10216
- # * If SourceIdentifier is supplied, SourceType must also be provided.
10263
+ # * If `SourceIdentifier` is supplied, `SourceType` must also be
10264
+ # provided.
10217
10265
  #
10218
- # * If the source type is `DBInstance`, then a `DBInstanceIdentifier`
10219
- # must be supplied.
10266
+ # * If the source type is a DB instance, a `DBInstanceIdentifier`
10267
+ # value must be supplied.
10220
10268
  #
10221
- # * If the source type is `DBSecurityGroup`, a `DBSecurityGroupName`
10269
+ # * If the source type is a DB cluster, a `DBClusterIdentifier` value
10222
10270
  # must be supplied.
10223
10271
  #
10224
- # * If the source type is `DBParameterGroup`, a `DBParameterGroupName`
10225
- # must be supplied.
10272
+ # * If the source type is a DB parameter group, a
10273
+ # `DBParameterGroupName` value must be supplied.
10274
+ #
10275
+ # * If the source type is a DB security group, a `DBSecurityGroupName`
10276
+ # value must be supplied.
10277
+ #
10278
+ # * If the source type is a DB snapshot, a `DBSnapshotIdentifier`
10279
+ # value must be supplied.
10226
10280
  #
10227
- # * If the source type is `DBSnapshot`, a `DBSnapshotIdentifier` must
10228
- # be supplied.
10281
+ # * If the source type is a DB cluster snapshot, a
10282
+ # `DBClusterSnapshotIdentifier` value must be supplied.
10229
10283
  #
10230
10284
  # * Can't end with a hyphen or contain two consecutive hyphens.
10231
10285
  # @return [String]
@@ -11393,7 +11447,7 @@ module Aws::RDS
11393
11447
  end
11394
11448
 
11395
11449
  # Contains the results of a successful invocation of the
11396
- # `DescribeEventCategories` action.
11450
+ # `DescribeEventCategories` operation.
11397
11451
  #
11398
11452
  # @!attribute [rw] source_type
11399
11453
  # The source type that the returned categories belong to
@@ -11412,7 +11466,7 @@ module Aws::RDS
11412
11466
  include Aws::Structure
11413
11467
  end
11414
11468
 
11415
- # Data returned from the **DescribeEventCategories** action.
11469
+ # Data returned from the `DescribeEventCategories` operation.
11416
11470
  #
11417
11471
  # @!attribute [rw] event_categories_map_list
11418
11472
  # A list of EventCategoriesMap data types.
@@ -12803,6 +12857,13 @@ module Aws::RDS
12803
12857
  # The Active Directory directory ID to move the DB cluster to. Specify
12804
12858
  # `none` to remove the cluster from its current domain. The domain
12805
12859
  # must be created prior to this operation.
12860
+ #
12861
+ # For more information, see [Kerberos Authentication][1] in the
12862
+ # *Amazon Aurora User Guide*.
12863
+ #
12864
+ #
12865
+ #
12866
+ # [1]: https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/kerberos-authentication.html
12806
12867
  # @return [String]
12807
12868
  #
12808
12869
  # @!attribute [rw] domain_iam_role_name
@@ -13073,6 +13134,7 @@ module Aws::RDS
13073
13134
  # deletion_protection: false,
13074
13135
  # max_allocated_storage: 1,
13075
13136
  # certificate_rotation_restart: false,
13137
+ # replica_mode: "open-read-only", # accepts open-read-only, mounted
13076
13138
  # }
13077
13139
  #
13078
13140
  # @!attribute [rw] db_instance_identifier
@@ -13489,24 +13551,15 @@ module Aws::RDS
13489
13551
  # The Active Directory directory ID to move the DB instance to.
13490
13552
  # Specify `none` to remove the instance from its current domain. The
13491
13553
  # domain must be created prior to this operation. Currently, only
13492
- # Microsoft SQL Server and Oracle DB instances can be created in an
13493
- # Active Directory Domain.
13554
+ # MySQL, Microsoft SQL Server, Oracle, and PostgreSQL DB instances can
13555
+ # be created in an Active Directory Domain.
13494
13556
  #
13495
- # For Microsoft SQL Server DB instances, Amazon RDS can use Windows
13496
- # Authentication to authenticate users that connect to the DB
13497
- # instance. For more information, see [ Using Windows Authentication
13498
- # with an Amazon RDS DB Instance Running Microsoft SQL Server][1] in
13499
- # the *Amazon RDS User Guide*.
13500
- #
13501
- # For Oracle DB instances, Amazon RDS can use Kerberos authentication
13502
- # to authenticate users that connect to the DB instance. For more
13503
- # information, see [ Using Kerberos Authentication with Amazon RDS for
13504
- # Oracle][2] in the *Amazon RDS User Guide*.
13557
+ # For more information, see [ Kerberos Authentication][1] in the
13558
+ # *Amazon RDS User Guide*.
13505
13559
  #
13506
13560
  #
13507
13561
  #
13508
- # [1]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_SQLServerWinAuth.html
13509
- # [2]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/oracle-kerberos.html
13562
+ # [1]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/kerberos-authentication.html
13510
13563
  # @return [String]
13511
13564
  #
13512
13565
  # @!attribute [rw] copy_tags_to_snapshot
@@ -13747,6 +13800,27 @@ module Aws::RDS
13747
13800
  # [2]: https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/UsingWithRDS.SSL-certificate-rotation.html
13748
13801
  # @return [Boolean]
13749
13802
  #
13803
+ # @!attribute [rw] replica_mode
13804
+ # A value that sets the open mode of a replica database to either
13805
+ # mounted or read-only.
13806
+ #
13807
+ # <note markdown="1"> Currently, this parameter is only supported for Oracle DB instances.
13808
+ #
13809
+ # </note>
13810
+ #
13811
+ # Mounted DB replicas are included in Oracle Enterprise Edition. The
13812
+ # main use case for mounted replicas is cross-Region disaster
13813
+ # recovery. The primary database doesn't use Active Data Guard to
13814
+ # transmit information to the mounted replica. Because it doesn't
13815
+ # accept user connections, a mounted replica can't serve a read-only
13816
+ # workload. For more information, see [Working with Oracle Read
13817
+ # Replicas for Amazon RDS][1] in the *Amazon RDS User Guide*.
13818
+ #
13819
+ #
13820
+ #
13821
+ # [1]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/oracle-read-replicas.html
13822
+ # @return [String]
13823
+ #
13750
13824
  # @see http://docs.aws.amazon.com/goto/WebAPI/rds-2014-10-31/ModifyDBInstanceMessage AWS API Documentation
13751
13825
  #
13752
13826
  class ModifyDBInstanceMessage < Struct.new(
@@ -13791,7 +13865,8 @@ module Aws::RDS
13791
13865
  :use_default_processor_features,
13792
13866
  :deletion_protection,
13793
13867
  :max_allocated_storage,
13794
- :certificate_rotation_restart)
13868
+ :certificate_rotation_restart,
13869
+ :replica_mode)
13795
13870
  SENSITIVE = []
13796
13871
  include Aws::Structure
13797
13872
  end
@@ -14264,15 +14339,15 @@ module Aws::RDS
14264
14339
  # would set this parameter to db-instance. If this value isn't
14265
14340
  # specified, all events are returned.
14266
14341
  #
14267
- # Valid values: db-instance \| db-parameter-group \| db-security-group
14268
- # \| db-snapshot
14342
+ # Valid values: `db-instance` \| `db-cluster` \| `db-parameter-group`
14343
+ # \| `db-security-group` \| `db-snapshot` \| `db-cluster-snapshot`
14269
14344
  # @return [String]
14270
14345
  #
14271
14346
  # @!attribute [rw] event_categories
14272
- # A list of event categories for a SourceType that you want to
14273
- # subscribe to. You can see a list of the categories for a given
14274
- # SourceType in the [Events][1] topic in the *Amazon RDS User Guide*
14275
- # or by using the **DescribeEventCategories** action.
14347
+ # A list of event categories for a source type (`SourceType`) that you
14348
+ # want to subscribe to. You can see a list of the categories for a
14349
+ # given source type in [Events][1] in the *Amazon RDS User Guide* or
14350
+ # by using the `DescribeEventCategories` operation.
14276
14351
  #
14277
14352
  #
14278
14353
  #
@@ -16552,10 +16627,11 @@ module Aws::RDS
16552
16627
  # @return [String]
16553
16628
  #
16554
16629
  # @!attribute [rw] engine
16555
- # The name of the database engine to be used for the restored DB
16556
- # cluster.
16630
+ # The name of the database engine to be used for this DB cluster.
16557
16631
  #
16558
- # Valid Values: `aurora`, `aurora-postgresql`
16632
+ # Valid Values: `aurora` (for MySQL 5.6-compatible Aurora),
16633
+ # `aurora-mysql` (for MySQL 5.7-compatible Aurora), and
16634
+ # `aurora-postgresql`
16559
16635
  # @return [String]
16560
16636
  #
16561
16637
  # @!attribute [rw] engine_version
@@ -16723,7 +16799,7 @@ module Aws::RDS
16723
16799
  #
16724
16800
  # MySQL versions 5.5, 5.6, and 5.7 are supported.
16725
16801
  #
16726
- # Example: `5.6.40`
16802
+ # Example: `5.6.40`, `5.7.28`
16727
16803
  # @return [String]
16728
16804
  #
16729
16805
  # @!attribute [rw] s3_bucket_name
@@ -17114,7 +17190,16 @@ module Aws::RDS
17114
17190
  #
17115
17191
  # @!attribute [rw] domain
17116
17192
  # Specify the Active Directory directory ID to restore the DB cluster
17117
- # in. The domain must be created prior to this operation.
17193
+ # in. The domain must be created prior to this operation. Currently,
17194
+ # only MySQL, Microsoft SQL Server, Oracle, and PostgreSQL DB
17195
+ # instances can be created in an Active Directory Domain.
17196
+ #
17197
+ # For more information, see [ Kerberos Authentication][1] in the
17198
+ # *Amazon RDS User Guide*.
17199
+ #
17200
+ #
17201
+ #
17202
+ # [1]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/kerberos-authentication.html
17118
17203
  # @return [String]
17119
17204
  #
17120
17205
  # @!attribute [rw] domain_iam_role_name
@@ -17725,24 +17810,15 @@ module Aws::RDS
17725
17810
  # @!attribute [rw] domain
17726
17811
  # Specify the Active Directory directory ID to restore the DB instance
17727
17812
  # in. The domain must be created prior to this operation. Currently,
17728
- # only Microsoft SQL Server and Oracle DB instances can be created in
17729
- # an Active Directory Domain.
17813
+ # only MySQL, Microsoft SQL Server, Oracle, and PostgreSQL DB
17814
+ # instances can be created in an Active Directory Domain.
17730
17815
  #
17731
- # For Microsoft SQL Server DB instances, Amazon RDS can use Windows
17732
- # Authentication to authenticate users that connect to the DB
17733
- # instance. For more information, see [ Using Windows Authentication
17734
- # with an Amazon RDS DB Instance Running Microsoft SQL Server][1] in
17735
- # the *Amazon RDS User Guide*.
17736
- #
17737
- # For Oracle DB instances, Amazon RDS can use Kerberos authentication
17738
- # to authenticate users that connect to the DB instance. For more
17739
- # information, see [ Using Kerberos Authentication with Amazon RDS for
17740
- # Oracle][2] in the *Amazon RDS User Guide*.
17816
+ # For more information, see [ Kerberos Authentication][1] in the
17817
+ # *Amazon RDS User Guide*.
17741
17818
  #
17742
17819
  #
17743
17820
  #
17744
- # [1]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_SQLServerWinAuth.html
17745
- # [2]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/oracle-kerberos.html
17821
+ # [1]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/kerberos-authentication.html
17746
17822
  # @return [String]
17747
17823
  #
17748
17824
  # @!attribute [rw] copy_tags_to_snapshot
@@ -18686,24 +18762,15 @@ module Aws::RDS
18686
18762
  # @!attribute [rw] domain
18687
18763
  # Specify the Active Directory directory ID to restore the DB instance
18688
18764
  # in. The domain must be created prior to this operation. Currently,
18689
- # only Microsoft SQL Server and Oracle DB instances can be created in
18690
- # an Active Directory Domain.
18765
+ # only MySQL, Microsoft SQL Server, Oracle, and PostgreSQL DB
18766
+ # instances can be created in an Active Directory Domain.
18691
18767
  #
18692
- # For Microsoft SQL Server DB instances, Amazon RDS can use Windows
18693
- # Authentication to authenticate users that connect to the DB
18694
- # instance. For more information, see [ Using Windows Authentication
18695
- # with an Amazon RDS DB Instance Running Microsoft SQL Server][1] in
18696
- # the *Amazon RDS User Guide*.
18697
- #
18698
- # For Oracle DB instances, Amazon RDS can use Kerberos authentication
18699
- # to authenticate users that connect to the DB instance. For more
18700
- # information, see [ Using Kerberos Authentication with Amazon RDS for
18701
- # Oracle][2] in the *Amazon RDS User Guide*.
18768
+ # For more information, see [ Kerberos Authentication][1] in the
18769
+ # *Amazon RDS User Guide*.
18702
18770
  #
18703
18771
  #
18704
18772
  #
18705
- # [1]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_SQLServerWinAuth.html
18706
- # [2]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/oracle-kerberos.html
18773
+ # [1]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/kerberos-authentication.html
18707
18774
  # @return [String]
18708
18775
  #
18709
18776
  # @!attribute [rw] domain_iam_role_name
@@ -19347,8 +19414,26 @@ module Aws::RDS
19347
19414
  # The ID of the AWS KMS key to use to encrypt the snapshot exported to
19348
19415
  # Amazon S3. The KMS key ID is the Amazon Resource Name (ARN), the KMS
19349
19416
  # key identifier, or the KMS key alias for the KMS encryption key. The
19350
- # IAM role used for the snapshot export must have encryption and
19351
- # decryption permissions to use this KMS key.
19417
+ # caller of this operation must be authorized to execute the following
19418
+ # operations. These can be set in the KMS key policy:
19419
+ #
19420
+ # * GrantOperation.Encrypt
19421
+ #
19422
+ # * GrantOperation.Decrypt
19423
+ #
19424
+ # * GrantOperation.GenerateDataKey
19425
+ #
19426
+ # * GrantOperation.GenerateDataKeyWithoutPlaintext
19427
+ #
19428
+ # * GrantOperation.ReEncryptFrom
19429
+ #
19430
+ # * GrantOperation.ReEncryptTo
19431
+ #
19432
+ # * GrantOperation.CreateGrant
19433
+ #
19434
+ # * GrantOperation.DescribeKey
19435
+ #
19436
+ # * GrantOperation.RetireGrant
19352
19437
  # @return [String]
19353
19438
  #
19354
19439
  # @!attribute [rw] s3_prefix