aws-sdk-rds 1.273.0 → 1.274.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 87bbdee3cb6233ef751a077cdc4b6f370fc1e61d210b863461048deaff81232f
-  data.tar.gz: 33ed02b02b7a6d1f8f4b6695e1f624cbfe8147e23711fdfdeb3de7f445f454a1
+  metadata.gz: e070ab8103e3dd1cf61b8282e8223983010f5dff4c0788e0f4c47db14896a2a8
+  data.tar.gz: 6e2893ebabea2f890dae9df48dcd40a3659481f4898419e1185d0dedee4946da
 SHA512:
-  metadata.gz: 68219a17b6dab3d628db68bb135e7923f629b7cbf14d8b73c35d51043b09ddf757d78cb795f550a17b988ec8f5926c8194df1f050c346fa198642ecf4403f275
-  data.tar.gz: 6225050e1140d3ef4c3907bf3f93a6b9361a5a9f55d166ab436bd27d26daea83c57859bd1c504246efe1dd32639b70a8214d031274d9cb3060ba1db0e646b680
+  metadata.gz: 774b07b235e3ae7594ab5c17806b32da69fedd6fe431cd428c1928718d40a1c079742e219c81545df0b51c6f5a446189baeb01deaea96fb5608af596f29e94bf
+  data.tar.gz: 1050abba589683c1a0d19bf689c5dd9dc1cf8bb2528616d3a3b499a763d71d0f9eb31f427f38d9003410248026d9a886abacd439da8c59018436f7cabb6d90f1

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.274.0 (2025-04-24)
+------------------
+
+* Feature - This Amazon RDS release adds support for managed master user passwords for Oracle CDBs.
+
 1.273.0 (2025-03-26)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.273.0
+1.274.0

data/lib/aws-sdk-rds/client.rb

@@ -3342,7 +3342,14 @@ module Aws::RDS
     #   the DB cluster during the maintenance window. By default, minor engine
     #   upgrades are applied automatically.
     #
-    #   Valid for Cluster Type: Aurora DB clusters and Multi-AZ DB cluster
+    #   Valid for Cluster Type: Aurora DB clusters and Multi-AZ DB cluster.
+    #
+    #   For more information about automatic minor version upgrades, see
+    #   [Automatically upgrading the minor engine version][1].
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_UpgradeDBInstance.Upgrading.html#USER_UpgradeDBInstance.Upgrading.AutoMinorVersionUpgrades
     #
     # @option params [Integer] :monitoring_interval
     #   The interval, in seconds, between points when Enhanced Monitoring
@@ -5036,6 +5043,13 @@ module Aws::RDS
     #   If you create an RDS Custom DB instance, you must set
     #   `AutoMinorVersionUpgrade` to `false`.
     #
+    #   For more information about automatic minor version upgrades, see
+    #   [Automatically upgrading the minor engine version][1].
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_UpgradeDBInstance.Upgrading.html#USER_UpgradeDBInstance.Upgrading.AutoMinorVersionUpgrades
+    #
     # @option params [String] :license_model
     #   The license model information for this DB instance.
     #
@@ -6193,6 +6207,13 @@ module Aws::RDS
     #
     #   Default: Inherits the value from the source DB instance.
     #
+    #   For more information about automatic minor version upgrades, see
+    #   [Automatically upgrading the minor engine version][1].
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_UpgradeDBInstance.Upgrading.html#USER_UpgradeDBInstance.Upgrading.AutoMinorVersionUpgrades
+    #
     # @option params [Integer] :iops
     #   The amount of Provisioned IOPS (input/output operations per second) to
     #   initially allocate for the DB instance.
@@ -8625,7 +8646,7 @@ module Aws::RDS
     #
     #   * Can't be a reserved word for the chosen database engine.
     #
-    # @option params [required, String] :master_user_password
+    # @option params [String] :master_user_password
     #   The password for the master user in your tenant database.
     #
     #   Constraints:
@@ -8636,6 +8657,8 @@ module Aws::RDS
     #     (`/`), double quote (`"`), at symbol (`@`), ampersand (`&`), or
     #     single quote (`'`).
     #
+    #   * Can't be specified when `ManageMasterUserPassword` is enabled.
+    #
     # @option params [String] :character_set_name
     #   The character set for your tenant database. If you don't specify a
     #   value, the character set name defaults to `AL32UTF8`.
@@ -8643,6 +8666,47 @@ module Aws::RDS
     # @option params [String] :nchar_character_set_name
     #   The `NCHAR` value for the tenant database.
     #
+    # @option params [Boolean] :manage_master_user_password
+    #   Specifies whether to manage the master user password with Amazon Web
+    #   Services Secrets Manager.
+    #
+    #   For more information, see [Password management with Amazon Web
+    #   Services Secrets Manager][1] in the *Amazon RDS User Guide.*
+    #
+    #   Constraints:
+    #
+    #   * Can't manage the master user password with Amazon Web Services
+    #     Secrets Manager if `MasterUserPassword` is specified.
+    #
+    #   ^
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/rds-secrets-manager.html
+    #
+    # @option params [String] :master_user_secret_kms_key_id
+    #   The Amazon Web Services KMS key identifier to encrypt a secret that is
+    #   automatically generated and managed in Amazon Web Services Secrets
+    #   Manager.
+    #
+    #   This setting is valid only if the master user password is managed by
+    #   RDS in Amazon Web Services Secrets Manager for the DB instance.
+    #
+    #   The Amazon Web Services KMS key identifier is the key ARN, key ID,
+    #   alias ARN, or alias name for the KMS key. To use a KMS key in a
+    #   different Amazon Web Services account, specify the key ARN or alias
+    #   ARN.
+    #
+    #   If you don't specify `MasterUserSecretKmsKeyId`, then the
+    #   `aws/secretsmanager` KMS key is used to encrypt the secret. If the
+    #   secret is in a different Amazon Web Services account, then you can't
+    #   use the `aws/secretsmanager` KMS key to encrypt the secret, and you
+    #   must use a customer managed KMS key.
+    #
+    #   There is a default KMS key for your Amazon Web Services account. Your
+    #   Amazon Web Services account has a different default KMS key for each
+    #   Amazon Web Services Region.
+    #
     # @option params [Array<Types::Tag>] :tags
     #   A list of tags.
     #
@@ -8665,9 +8729,11 @@ module Aws::RDS
     #     db_instance_identifier: "String", # required
     #     tenant_db_name: "String", # required
     #     master_username: "String", # required
-    #     master_user_password: "SensitiveString", # required
+    #     master_user_password: "SensitiveString",
     #     character_set_name: "String",
     #     nchar_character_set_name: "String",
+    #     manage_master_user_password: false,
+    #     master_user_secret_kms_key_id: "String",
     #     tags: [
     #       {
     #         key: "String",
@@ -8691,6 +8757,9 @@ module Aws::RDS
     #   resp.tenant_database.deletion_protection #=> Boolean
     #   resp.tenant_database.pending_modified_values.master_user_password #=> String
     #   resp.tenant_database.pending_modified_values.tenant_db_name #=> String
+    #   resp.tenant_database.master_user_secret.secret_arn #=> String
+    #   resp.tenant_database.master_user_secret.secret_status #=> String
+    #   resp.tenant_database.master_user_secret.kms_key_id #=> String
     #   resp.tenant_database.tag_list #=> Array
     #   resp.tenant_database.tag_list[0].key #=> String
     #   resp.tenant_database.tag_list[0].value #=> String
@@ -10783,6 +10852,9 @@ module Aws::RDS
     #   resp.tenant_database.deletion_protection #=> Boolean
     #   resp.tenant_database.pending_modified_values.master_user_password #=> String
     #   resp.tenant_database.pending_modified_values.tenant_db_name #=> String
+    #   resp.tenant_database.master_user_secret.secret_arn #=> String
+    #   resp.tenant_database.master_user_secret.secret_status #=> String
+    #   resp.tenant_database.master_user_secret.kms_key_id #=> String
     #   resp.tenant_database.tag_list #=> Array
     #   resp.tenant_database.tag_list[0].key #=> String
     #   resp.tenant_database.tag_list[0].value #=> String
@@ -17582,6 +17654,9 @@ module Aws::RDS
     #   resp.tenant_databases[0].deletion_protection #=> Boolean
     #   resp.tenant_databases[0].pending_modified_values.master_user_password #=> String
     #   resp.tenant_databases[0].pending_modified_values.tenant_db_name #=> String
+    #   resp.tenant_databases[0].master_user_secret.secret_arn #=> String
+    #   resp.tenant_databases[0].master_user_secret.secret_status #=> String
+    #   resp.tenant_databases[0].master_user_secret.kms_key_id #=> String
     #   resp.tenant_databases[0].tag_list #=> Array
     #   resp.tenant_databases[0].tag_list[0].key #=> String
     #   resp.tenant_databases[0].tag_list[0].value #=> String
@@ -19259,7 +19334,14 @@ module Aws::RDS
     #   the DB cluster during the maintenance window. By default, minor engine
     #   upgrades are applied automatically.
     #
-    #   Valid for Cluster Type: Aurora DB clusters and Multi-AZ DB clusters
+    #   Valid for Cluster Type: Aurora DB clusters and Multi-AZ DB clusters.
+    #
+    #   For more information about automatic minor version upgrades, see
+    #   [Automatically upgrading the minor engine version][1].
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_UpgradeDBInstance.Upgrading.html#USER_UpgradeDBInstance.Upgrading.AutoMinorVersionUpgrades
     #
     # @option params [Integer] :monitoring_interval
     #   The interval, in seconds, between points when Enhanced Monitoring
@@ -20342,11 +20424,17 @@ module Aws::RDS
     #
     #   This setting doesn't apply to the following DB instances:
     #
-    #   * Amazon Aurora (The password for the master user is managed by the DB
-    #     cluster. For more information, see `ModifyDBCluster`.)
+    #   * Amazon Aurora
+    #
+    #     The password for the master user is managed by the DB cluster. For
+    #     more information, see `ModifyDBCluster`.
     #
     #   * RDS Custom
     #
+    #   * RDS for Oracle CDBs in the multi-tenant configuration
+    #
+    #     Specify the master password in `ModifyTenantDatabase` instead.
+    #
     #   Default: Uses existing setting
     #
     #   Constraints:
@@ -20557,6 +20645,13 @@ module Aws::RDS
     #   For an RDS Custom DB instance, don't enable this setting. Otherwise,
     #   the operation returns an error.
     #
+    #   For more information about automatic minor version upgrades, see
+    #   [Automatically upgrading the minor engine version][1].
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_UpgradeDBInstance.Upgrading.html#USER_UpgradeDBInstance.Upgrading.AutoMinorVersionUpgrades
+    #
     # @option params [String] :license_model
     #   The license model for the DB instance.
     #
@@ -21188,7 +21283,11 @@ module Aws::RDS
     #   * Can't manage the master user password with Amazon Web Services
     #     Secrets Manager if `MasterUserPassword` is specified.
     #
-    #   ^
+    #   * Can't specify for RDS for Oracle CDB instances in the multi-tenant
+    #     configuration. Use `ModifyTenantDatabase` instead.
+    #
+    #   * Can't specify the parameters `ManageMasterUserPassword` and
+    #     `MultiTenant` in the same operation.
     #
     #
     #
@@ -21199,7 +21298,7 @@ module Aws::RDS
     #   Secrets Manager for the master user password.
     #
     #   This setting is valid only if the master user password is managed by
-    #   RDS in Amazon Web Services Secrets Manager for the DB cluster. The
+    #   RDS in Amazon Web Services Secrets Manager for the DB instance. The
     #   secret value contains the updated password.
     #
     #   For more information, see [Password management with Amazon Web
@@ -23108,6 +23207,99 @@ module Aws::RDS
     #
     #   * Can't be longer than 8 characters.
     #
+    # @option params [Boolean] :manage_master_user_password
+    #   Specifies whether to manage the master user password with Amazon Web
+    #   Services Secrets Manager.
+    #
+    #   If the tenant database doesn't manage the master user password with
+    #   Amazon Web Services Secrets Manager, you can turn on this management.
+    #   In this case, you can't specify `MasterUserPassword`.
+    #
+    #   If the tenant database already manages the master user password with
+    #   Amazon Web Services Secrets Manager, and you specify that the master
+    #   user password is not managed with Amazon Web Services Secrets Manager,
+    #   then you must specify `MasterUserPassword`. In this case, Amazon RDS
+    #   deletes the secret and uses the new password for the master user
+    #   specified by `MasterUserPassword`.
+    #
+    #   For more information, see [Password management with Amazon Web
+    #   Services Secrets Manager][1] in the *Amazon RDS User Guide.*
+    #
+    #   Constraints:
+    #
+    #   * Can't manage the master user password with Amazon Web Services
+    #     Secrets Manager if `MasterUserPassword` is specified.
+    #
+    #   ^
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/rds-secrets-manager.html
+    #
+    # @option params [Boolean] :rotate_master_user_password
+    #   Specifies whether to rotate the secret managed by Amazon Web Services
+    #   Secrets Manager for the master user password.
+    #
+    #   This setting is valid only if the master user password is managed by
+    #   RDS in Amazon Web Services Secrets Manager for the DB instance. The
+    #   secret value contains the updated password.
+    #
+    #   For more information, see [Password management with Amazon Web
+    #   Services Secrets Manager][1] in the *Amazon RDS User Guide.*
+    #
+    #   Constraints:
+    #
+    #   * You must apply the change immediately when rotating the master user
+    #     password.
+    #
+    #   ^
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/rds-secrets-manager.html
+    #
+    # @option params [String] :master_user_secret_kms_key_id
+    #   The Amazon Web Services KMS key identifier to encrypt a secret that is
+    #   automatically generated and managed in Amazon Web Services Secrets
+    #   Manager.
+    #
+    #   This setting is valid only if both of the following conditions are
+    #   met:
+    #
+    #   * The tenant database doesn't manage the master user password in
+    #     Amazon Web Services Secrets Manager.
+    #
+    #     If the tenant database already manages the master user password in
+    #     Amazon Web Services Secrets Manager, you can't change the KMS key
+    #     used to encrypt the secret.
+    #
+    #   * You're turning on `ManageMasterUserPassword` to manage the master
+    #     user password in Amazon Web Services Secrets Manager.
+    #
+    #     If you're turning on `ManageMasterUserPassword` and don't specify
+    #     `MasterUserSecretKmsKeyId`, then the `aws/secretsmanager` KMS key is
+    #     used to encrypt the secret. If the secret is in a different Amazon
+    #     Web Services account, then you can't use the `aws/secretsmanager`
+    #     KMS key to encrypt the secret, and you must use a self-managed KMS
+    #     key.
+    #
+    #   The Amazon Web Services KMS key identifier is any of the following:
+    #
+    #   * Key ARN
+    #
+    #   * Key ID
+    #
+    #   * Alias ARN
+    #
+    #   * Alias name for the KMS key
+    #
+    #   To use a KMS key in a different Amazon Web Services account, specify
+    #   the key ARN or alias ARN.
+    #
+    #   A default KMS key exists for your Amazon Web Services account. Your
+    #   Amazon Web Services account has a different default KMS key for each
+    #   Amazon Web Services Region.
+    #
     # @return [Types::ModifyTenantDatabaseResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::ModifyTenantDatabaseResult#tenant_database #tenant_database} => Types::TenantDatabase
@@ -23119,6 +23311,9 @@ module Aws::RDS
     #     tenant_db_name: "String", # required
     #     master_user_password: "SensitiveString",
     #     new_tenant_db_name: "String",
+    #     manage_master_user_password: false,
+    #     rotate_master_user_password: false,
+    #     master_user_secret_kms_key_id: "String",
     #   })
     #
     # @example Response structure
@@ -23136,6 +23331,9 @@ module Aws::RDS
     #   resp.tenant_database.deletion_protection #=> Boolean
     #   resp.tenant_database.pending_modified_values.master_user_password #=> String
     #   resp.tenant_database.pending_modified_values.tenant_db_name #=> String
+    #   resp.tenant_database.master_user_secret.secret_arn #=> String
+    #   resp.tenant_database.master_user_secret.secret_status #=> String
+    #   resp.tenant_database.master_user_secret.kms_key_id #=> String
     #   resp.tenant_database.tag_list #=> Array
     #   resp.tenant_database.tag_list[0].key #=> String
     #   resp.tenant_database.tag_list[0].value #=> String
@@ -27272,6 +27470,13 @@ module Aws::RDS
     #   If you restore an RDS Custom DB instance, you must disable this
     #   parameter.
     #
+    #   For more information about automatic minor version upgrades, see
+    #   [Automatically upgrading the minor engine version][1].
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_UpgradeDBInstance.Upgrading.html#USER_UpgradeDBInstance.Upgrading.AutoMinorVersionUpgrades
+    #
     # @option params [String] :license_model
     #   License model information for the restored DB instance.
     #
@@ -27752,6 +27957,46 @@ module Aws::RDS
     #
     #   [1]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/extended-support.html
     #
+    # @option params [Boolean] :manage_master_user_password
+    #   Specifies whether to manage the master user password with Amazon Web
+    #   Services Secrets Manager in the restored DB instance.
+    #
+    #   For more information, see [Password management with Amazon Web
+    #   Services Secrets Manager][1] in the *Amazon RDS User Guide*.
+    #
+    #   Constraints:
+    #
+    #   * Applies to RDS for Oracle only.
+    #
+    #   ^
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/rds-secrets-manager.html
+    #
+    # @option params [String] :master_user_secret_kms_key_id
+    #   The Amazon Web Services KMS key identifier to encrypt a secret that is
+    #   automatically generated and managed in Amazon Web Services Secrets
+    #   Manager.
+    #
+    #   This setting is valid only if the master user password is managed by
+    #   RDS in Amazon Web Services Secrets Manager for the DB instance.
+    #
+    #   The Amazon Web Services KMS key identifier is the key ARN, key ID,
+    #   alias ARN, or alias name for the KMS key. To use a KMS key in a
+    #   different Amazon Web Services account, specify the key ARN or alias
+    #   ARN.
+    #
+    #   If you don't specify `MasterUserSecretKmsKeyId`, then the
+    #   `aws/secretsmanager` KMS key is used to encrypt the secret. If the
+    #   secret is in a different Amazon Web Services account, then you can't
+    #   use the `aws/secretsmanager` KMS key to encrypt the secret, and you
+    #   must use a customer managed KMS key.
+    #
+    #   There is a default KMS key for your Amazon Web Services account. Your
+    #   Amazon Web Services account has a different default KMS key for each
+    #   Amazon Web Services Region.
+    #
     # @return [Types::RestoreDBInstanceFromDBSnapshotResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::RestoreDBInstanceFromDBSnapshotResult#db_instance #db_instance} => Types::DBInstance
@@ -27849,6 +28094,8 @@ module Aws::RDS
     #     dedicated_log_volume: false,
     #     ca_certificate_identifier: "String",
     #     engine_lifecycle_support: "String",
+    #     manage_master_user_password: false,
+    #     master_user_secret_kms_key_id: "String",
     #   })
     #
     # @example Response structure
@@ -28235,6 +28482,13 @@ module Aws::RDS
     #   DB instance during the maintenance window. By default, minor engine
     #   upgrades are not applied automatically.
     #
+    #   For more information about automatic minor version upgrades, see
+    #   [Automatically upgrading the minor engine version][1].
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_UpgradeDBInstance.Upgrading.html#USER_UpgradeDBInstance.Upgrading.AutoMinorVersionUpgrades
+    #
     # @option params [String] :license_model
     #   The license model for this DB instance. Use `general-public-license`.
     #
@@ -28982,6 +29236,13 @@ module Aws::RDS
     #
     #   This setting doesn't apply to RDS Custom.
     #
+    #   For more information about automatic minor version upgrades, see
+    #   [Automatically upgrading the minor engine version][1].
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_UpgradeDBInstance.Upgrading.html#USER_UpgradeDBInstance.Upgrading.AutoMinorVersionUpgrades
+    #
     # @option params [String] :license_model
     #   The license model information for the restored DB instance.
     #
@@ -29459,6 +29720,46 @@ module Aws::RDS
     #
     #   [1]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/extended-support.html
     #
+    # @option params [Boolean] :manage_master_user_password
+    #   Specifies whether to manage the master user password with Amazon Web
+    #   Services Secrets Manager in the restored DB instance.
+    #
+    #   For more information, see [Password management with Amazon Web
+    #   Services Secrets Manager][1] in the *Amazon RDS User Guide*.
+    #
+    #   Constraints:
+    #
+    #   * Applies to RDS for Oracle only.
+    #
+    #   ^
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/rds-secrets-manager.html
+    #
+    # @option params [String] :master_user_secret_kms_key_id
+    #   The Amazon Web Services KMS key identifier to encrypt a secret that is
+    #   automatically generated and managed in Amazon Web Services Secrets
+    #   Manager.
+    #
+    #   This setting is valid only if the master user password is managed by
+    #   RDS in Amazon Web Services Secrets Manager for the DB instance.
+    #
+    #   The Amazon Web Services KMS key identifier is the key ARN, key ID,
+    #   alias ARN, or alias name for the KMS key. To use a KMS key in a
+    #   different Amazon Web Services account, specify the key ARN or alias
+    #   ARN.
+    #
+    #   If you don't specify `MasterUserSecretKmsKeyId`, then the
+    #   `aws/secretsmanager` KMS key is used to encrypt the secret. If the
+    #   secret is in a different Amazon Web Services account, then you can't
+    #   use the `aws/secretsmanager` KMS key to encrypt the secret, and you
+    #   must use a customer managed KMS key.
+    #
+    #   There is a default KMS key for your Amazon Web Services account. Your
+    #   Amazon Web Services account has a different default KMS key for each
+    #   Amazon Web Services Region.
+    #
     # @return [Types::RestoreDBInstanceToPointInTimeResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::RestoreDBInstanceToPointInTimeResult#db_instance #db_instance} => Types::DBInstance
@@ -29619,6 +29920,8 @@ module Aws::RDS
     #     dedicated_log_volume: false,
     #     ca_certificate_identifier: "String",
     #     engine_lifecycle_support: "String",
+    #     manage_master_user_password: false,
+    #     master_user_secret_kms_key_id: "String",
     #   })
     #
     # @example Response structure
@@ -31899,7 +32202,7 @@ module Aws::RDS
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-rds'
-      context[:gem_version] = '1.273.0'
+      context[:gem_version] = '1.274.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-rds/client_api.rb

@@ -1351,9 +1351,11 @@ module Aws::RDS
     CreateTenantDatabaseMessage.add_member(:db_instance_identifier, Shapes::ShapeRef.new(shape: String, required: true, location_name: "DBInstanceIdentifier"))
     CreateTenantDatabaseMessage.add_member(:tenant_db_name, Shapes::ShapeRef.new(shape: String, required: true, location_name: "TenantDBName"))
     CreateTenantDatabaseMessage.add_member(:master_username, Shapes::ShapeRef.new(shape: String, required: true, location_name: "MasterUsername"))
-    CreateTenantDatabaseMessage.add_member(:master_user_password, Shapes::ShapeRef.new(shape: SensitiveString, required: true, location_name: "MasterUserPassword"))
+    CreateTenantDatabaseMessage.add_member(:master_user_password, Shapes::ShapeRef.new(shape: SensitiveString, location_name: "MasterUserPassword"))
     CreateTenantDatabaseMessage.add_member(:character_set_name, Shapes::ShapeRef.new(shape: String, location_name: "CharacterSetName"))
     CreateTenantDatabaseMessage.add_member(:nchar_character_set_name, Shapes::ShapeRef.new(shape: String, location_name: "NcharCharacterSetName"))
+    CreateTenantDatabaseMessage.add_member(:manage_master_user_password, Shapes::ShapeRef.new(shape: BooleanOptional, location_name: "ManageMasterUserPassword"))
+    CreateTenantDatabaseMessage.add_member(:master_user_secret_kms_key_id, Shapes::ShapeRef.new(shape: String, location_name: "MasterUserSecretKmsKeyId"))
     CreateTenantDatabaseMessage.add_member(:tags, Shapes::ShapeRef.new(shape: TagList, location_name: "Tags"))
     CreateTenantDatabaseMessage.struct_class = Types::CreateTenantDatabaseMessage
 
@@ -3307,6 +3309,9 @@ module Aws::RDS
     ModifyTenantDatabaseMessage.add_member(:tenant_db_name, Shapes::ShapeRef.new(shape: String, required: true, location_name: "TenantDBName"))
     ModifyTenantDatabaseMessage.add_member(:master_user_password, Shapes::ShapeRef.new(shape: SensitiveString, location_name: "MasterUserPassword"))
     ModifyTenantDatabaseMessage.add_member(:new_tenant_db_name, Shapes::ShapeRef.new(shape: String, location_name: "NewTenantDBName"))
+    ModifyTenantDatabaseMessage.add_member(:manage_master_user_password, Shapes::ShapeRef.new(shape: BooleanOptional, location_name: "ManageMasterUserPassword"))
+    ModifyTenantDatabaseMessage.add_member(:rotate_master_user_password, Shapes::ShapeRef.new(shape: BooleanOptional, location_name: "RotateMasterUserPassword"))
+    ModifyTenantDatabaseMessage.add_member(:master_user_secret_kms_key_id, Shapes::ShapeRef.new(shape: String, location_name: "MasterUserSecretKmsKeyId"))
     ModifyTenantDatabaseMessage.struct_class = Types::ModifyTenantDatabaseMessage
 
     ModifyTenantDatabaseResult.add_member(:tenant_database, Shapes::ShapeRef.new(shape: TenantDatabase, location_name: "TenantDatabase"))
@@ -3923,6 +3928,8 @@ module Aws::RDS
     RestoreDBInstanceFromDBSnapshotMessage.add_member(:dedicated_log_volume, Shapes::ShapeRef.new(shape: BooleanOptional, location_name: "DedicatedLogVolume"))
     RestoreDBInstanceFromDBSnapshotMessage.add_member(:ca_certificate_identifier, Shapes::ShapeRef.new(shape: String, location_name: "CACertificateIdentifier"))
     RestoreDBInstanceFromDBSnapshotMessage.add_member(:engine_lifecycle_support, Shapes::ShapeRef.new(shape: String, location_name: "EngineLifecycleSupport"))
+    RestoreDBInstanceFromDBSnapshotMessage.add_member(:manage_master_user_password, Shapes::ShapeRef.new(shape: BooleanOptional, location_name: "ManageMasterUserPassword"))
+    RestoreDBInstanceFromDBSnapshotMessage.add_member(:master_user_secret_kms_key_id, Shapes::ShapeRef.new(shape: String, location_name: "MasterUserSecretKmsKeyId"))
     RestoreDBInstanceFromDBSnapshotMessage.struct_class = Types::RestoreDBInstanceFromDBSnapshotMessage
 
     RestoreDBInstanceFromDBSnapshotResult.add_member(:db_instance, Shapes::ShapeRef.new(shape: DBInstance, location_name: "DBInstance"))
@@ -4031,6 +4038,8 @@ module Aws::RDS
     RestoreDBInstanceToPointInTimeMessage.add_member(:dedicated_log_volume, Shapes::ShapeRef.new(shape: BooleanOptional, location_name: "DedicatedLogVolume"))
     RestoreDBInstanceToPointInTimeMessage.add_member(:ca_certificate_identifier, Shapes::ShapeRef.new(shape: String, location_name: "CACertificateIdentifier"))
     RestoreDBInstanceToPointInTimeMessage.add_member(:engine_lifecycle_support, Shapes::ShapeRef.new(shape: String, location_name: "EngineLifecycleSupport"))
+    RestoreDBInstanceToPointInTimeMessage.add_member(:manage_master_user_password, Shapes::ShapeRef.new(shape: BooleanOptional, location_name: "ManageMasterUserPassword"))
+    RestoreDBInstanceToPointInTimeMessage.add_member(:master_user_secret_kms_key_id, Shapes::ShapeRef.new(shape: String, location_name: "MasterUserSecretKmsKeyId"))
     RestoreDBInstanceToPointInTimeMessage.struct_class = Types::RestoreDBInstanceToPointInTimeMessage
 
     RestoreDBInstanceToPointInTimeResult.add_member(:db_instance, Shapes::ShapeRef.new(shape: DBInstance, location_name: "DBInstance"))
@@ -4274,6 +4283,7 @@ module Aws::RDS
     TenantDatabase.add_member(:nchar_character_set_name, Shapes::ShapeRef.new(shape: String, location_name: "NcharCharacterSetName"))
     TenantDatabase.add_member(:deletion_protection, Shapes::ShapeRef.new(shape: Boolean, location_name: "DeletionProtection"))
     TenantDatabase.add_member(:pending_modified_values, Shapes::ShapeRef.new(shape: TenantDatabasePendingModifiedValues, location_name: "PendingModifiedValues"))
+    TenantDatabase.add_member(:master_user_secret, Shapes::ShapeRef.new(shape: MasterUserSecret, location_name: "MasterUserSecret"))
     TenantDatabase.add_member(:tag_list, Shapes::ShapeRef.new(shape: TagList, location_name: "TagList"))
     TenantDatabase.struct_class = Types::TenantDatabase
 
@@ -4839,6 +4849,7 @@ module Aws::RDS
         o.errors << Shapes::ShapeRef.new(shape: InvalidDBInstanceStateFault)
         o.errors << Shapes::ShapeRef.new(shape: TenantDatabaseAlreadyExistsFault)
         o.errors << Shapes::ShapeRef.new(shape: TenantDatabaseQuotaExceededFault)
+        o.errors << Shapes::ShapeRef.new(shape: KMSKeyNotAccessibleFault)
       end)
 
       api.add_operation(:delete_blue_green_deployment, Seahorse::Model::Operation.new.tap do |o|
@@ -6068,6 +6079,7 @@ module Aws::RDS
         o.errors << Shapes::ShapeRef.new(shape: TenantDatabaseNotFoundFault)
         o.errors << Shapes::ShapeRef.new(shape: TenantDatabaseAlreadyExistsFault)
         o.errors << Shapes::ShapeRef.new(shape: InvalidDBInstanceStateFault)
+        o.errors << Shapes::ShapeRef.new(shape: KMSKeyNotAccessibleFault)
       end)
 
       api.add_operation(:promote_read_replica, Seahorse::Model::Operation.new.tap do |o|

data/lib/aws-sdk-rds/db_cluster.rb

@@ -552,6 +552,13 @@ module Aws::RDS
     # Indicates whether minor version patches are applied automatically.
     #
     # This setting is for Aurora DB clusters and Multi-AZ DB clusters.
+    #
+    # For more information about automatic minor version upgrades, see
+    # [Automatically upgrading the minor engine version][1].
+    #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_UpgradeDBInstance.Upgrading.html#USER_UpgradeDBInstance.Upgrading.AutoMinorVersionUpgrades
     # @return [Boolean]
     def auto_minor_version_upgrade
       data[:auto_minor_version_upgrade]
@@ -1579,7 +1586,14 @@ module Aws::RDS
     #   the DB cluster during the maintenance window. By default, minor engine
     #   upgrades are applied automatically.
     #
-    #   Valid for Cluster Type: Aurora DB clusters and Multi-AZ DB cluster
+    #   Valid for Cluster Type: Aurora DB clusters and Multi-AZ DB cluster.
+    #
+    #   For more information about automatic minor version upgrades, see
+    #   [Automatically upgrading the minor engine version][1].
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_UpgradeDBInstance.Upgrading.html#USER_UpgradeDBInstance.Upgrading.AutoMinorVersionUpgrades
     # @option options [Integer] :monitoring_interval
     #   The interval, in seconds, between points when Enhanced Monitoring
     #   metrics are collected for the DB cluster. To turn off collecting
@@ -2413,7 +2427,14 @@ module Aws::RDS
     #   the DB cluster during the maintenance window. By default, minor engine
     #   upgrades are applied automatically.
     #
-    #   Valid for Cluster Type: Aurora DB clusters and Multi-AZ DB clusters
+    #   Valid for Cluster Type: Aurora DB clusters and Multi-AZ DB clusters.
+    #
+    #   For more information about automatic minor version upgrades, see
+    #   [Automatically upgrading the minor engine version][1].
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_UpgradeDBInstance.Upgrading.html#USER_UpgradeDBInstance.Upgrading.AutoMinorVersionUpgrades
     # @option options [Integer] :monitoring_interval
     #   The interval, in seconds, between points when Enhanced Monitoring
     #   metrics are collected for the DB cluster. To turn off collecting