aws-sdk-s3 1.24.1 → 1.36.1

data/lib/aws-sdk-s3/types.rb

@@ -401,13 +401,13 @@ module Aws::S3
     #               {
     #                 date: Time.now,
     #                 days: 1,
-    #                 storage_class: "GLACIER", # accepts GLACIER, STANDARD_IA, ONEZONE_IA
+    #                 storage_class: "GLACIER", # accepts GLACIER, STANDARD_IA, ONEZONE_IA, INTELLIGENT_TIERING, DEEP_ARCHIVE
     #               },
     #             ],
     #             noncurrent_version_transitions: [
     #               {
     #                 noncurrent_days: 1,
-    #                 storage_class: "GLACIER", # accepts GLACIER, STANDARD_IA, ONEZONE_IA
+    #                 storage_class: "GLACIER", # accepts GLACIER, STANDARD_IA, ONEZONE_IA, INTELLIGENT_TIERING, DEEP_ARCHIVE
     #               },
     #             ],
     #             noncurrent_version_expiration: {
@@ -649,8 +649,8 @@ module Aws::S3
     #
     #       {
     #         id: "NotificationId",
-    #         event: "s3:ReducedRedundancyLostObject", # accepts s3:ReducedRedundancyLostObject, s3:ObjectCreated:*, s3:ObjectCreated:Put, s3:ObjectCreated:Post, s3:ObjectCreated:Copy, s3:ObjectCreated:CompleteMultipartUpload, s3:ObjectRemoved:*, s3:ObjectRemoved:Delete, s3:ObjectRemoved:DeleteMarkerCreated
-    #         events: ["s3:ReducedRedundancyLostObject"], # accepts s3:ReducedRedundancyLostObject, s3:ObjectCreated:*, s3:ObjectCreated:Put, s3:ObjectCreated:Post, s3:ObjectCreated:Copy, s3:ObjectCreated:CompleteMultipartUpload, s3:ObjectRemoved:*, s3:ObjectRemoved:Delete, s3:ObjectRemoved:DeleteMarkerCreated
+    #         event: "s3:ReducedRedundancyLostObject", # accepts s3:ReducedRedundancyLostObject, s3:ObjectCreated:*, s3:ObjectCreated:Put, s3:ObjectCreated:Post, s3:ObjectCreated:Copy, s3:ObjectCreated:CompleteMultipartUpload, s3:ObjectRemoved:*, s3:ObjectRemoved:Delete, s3:ObjectRemoved:DeleteMarkerCreated, s3:ObjectRestore:Post, s3:ObjectRestore:Completed
+    #         events: ["s3:ReducedRedundancyLostObject"], # accepts s3:ReducedRedundancyLostObject, s3:ObjectCreated:*, s3:ObjectCreated:Put, s3:ObjectCreated:Post, s3:ObjectCreated:Copy, s3:ObjectCreated:CompleteMultipartUpload, s3:ObjectRemoved:*, s3:ObjectRemoved:Delete, s3:ObjectRemoved:DeleteMarkerCreated, s3:ObjectRestore:Post, s3:ObjectRestore:Completed
     #         cloud_function: "CloudFunction",
     #         invocation_role: "CloudFunctionInvocationRole",
     #       }
@@ -972,7 +972,7 @@ module Aws::S3
     #         metadata_directive: "COPY", # accepts COPY, REPLACE
     #         tagging_directive: "COPY", # accepts COPY, REPLACE
     #         server_side_encryption: "AES256", # accepts AES256, aws:kms
-    #         storage_class: "STANDARD", # accepts STANDARD, REDUCED_REDUNDANCY, STANDARD_IA, ONEZONE_IA
+    #         storage_class: "STANDARD", # accepts STANDARD, REDUCED_REDUNDANCY, STANDARD_IA, ONEZONE_IA, INTELLIGENT_TIERING, GLACIER, DEEP_ARCHIVE
     #         website_redirect_location: "WebsiteRedirectLocation",
     #         sse_customer_algorithm: "SSECustomerAlgorithm",
     #         sse_customer_key: "SSECustomerKey",
@@ -983,6 +983,9 @@ module Aws::S3
     #         copy_source_sse_customer_key_md5: "CopySourceSSECustomerKeyMD5",
     #         request_payer: "requester", # accepts requester
     #         tagging: "TaggingHeader",
+    #         object_lock_mode: "GOVERNANCE", # accepts GOVERNANCE, COMPLIANCE
+    #         object_lock_retain_until_date: Time.now,
+    #         object_lock_legal_hold_status: "ON", # accepts ON, OFF
     #       }
     #
     # @!attribute [rw] acl
@@ -1150,6 +1153,20 @@ module Aws::S3
     #   encoded as URL Query parameters
     #   @return [String]
     #
+    # @!attribute [rw] object_lock_mode
+    #   The Object Lock mode that you want to apply to the copied object.
+    #   @return [String]
+    #
+    # @!attribute [rw] object_lock_retain_until_date
+    #   The date and time when you want the copied object's Object Lock to
+    #   expire.
+    #   @return [Time]
+    #
+    # @!attribute [rw] object_lock_legal_hold_status
+    #   Specifies whether you want to apply a Legal Hold to the copied
+    #   object.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/s3-2006-03-01/CopyObjectRequest AWS API Documentation
     #
     class CopyObjectRequest < Struct.new(
@@ -1185,7 +1202,10 @@ module Aws::S3
       :copy_source_sse_customer_key,
       :copy_source_sse_customer_key_md5,
       :request_payer,
-      :tagging)
+      :tagging,
+      :object_lock_mode,
+      :object_lock_retain_until_date,
+      :object_lock_legal_hold_status)
       include Aws::Structure
     end
 
@@ -1228,7 +1248,8 @@ module Aws::S3
     #
     # @!attribute [rw] location_constraint
     #   Specifies the region where the bucket will be created. If you don't
-    #   specify a region, the bucket will be created in US Standard.
+    #   specify a region, the bucket is created in US East (N. Virginia)
+    #   Region (us-east-1).
     #   @return [String]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/s3-2006-03-01/CreateBucketConfiguration AWS API Documentation
@@ -1262,6 +1283,7 @@ module Aws::S3
     #         grant_read_acp: "GrantReadACP",
     #         grant_write: "GrantWrite",
     #         grant_write_acp: "GrantWriteACP",
+    #         object_lock_enabled_for_bucket: false,
     #       }
     #
     # @!attribute [rw] acl
@@ -1296,6 +1318,11 @@ module Aws::S3
     #   Allows grantee to write the ACL for the applicable bucket.
     #   @return [String]
     #
+    # @!attribute [rw] object_lock_enabled_for_bucket
+    #   Specifies whether you want S3 Object Lock to be enabled for the new
+    #   bucket.
+    #   @return [Boolean]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/s3-2006-03-01/CreateBucketRequest AWS API Documentation
     #
     class CreateBucketRequest < Struct.new(
@@ -1306,7 +1333,8 @@ module Aws::S3
       :grant_read,
       :grant_read_acp,
       :grant_write,
-      :grant_write_acp)
+      :grant_write_acp,
+      :object_lock_enabled_for_bucket)
       include Aws::Structure
     end
 
@@ -1397,7 +1425,7 @@ module Aws::S3
     #           "MetadataKey" => "MetadataValue",
     #         },
     #         server_side_encryption: "AES256", # accepts AES256, aws:kms
-    #         storage_class: "STANDARD", # accepts STANDARD, REDUCED_REDUNDANCY, STANDARD_IA, ONEZONE_IA
+    #         storage_class: "STANDARD", # accepts STANDARD, REDUCED_REDUNDANCY, STANDARD_IA, ONEZONE_IA, INTELLIGENT_TIERING, GLACIER, DEEP_ARCHIVE
     #         website_redirect_location: "WebsiteRedirectLocation",
     #         sse_customer_algorithm: "SSECustomerAlgorithm",
     #         sse_customer_key: "SSECustomerKey",
@@ -1405,6 +1433,9 @@ module Aws::S3
     #         ssekms_key_id: "SSEKMSKeyId",
     #         request_payer: "requester", # accepts requester
     #         tagging: "TaggingHeader",
+    #         object_lock_mode: "GOVERNANCE", # accepts GOVERNANCE, COMPLIANCE
+    #         object_lock_retain_until_date: Time.now,
+    #         object_lock_legal_hold_status: "ON", # accepts ON, OFF
     #       }
     #
     # @!attribute [rw] acl
@@ -1520,6 +1551,20 @@ module Aws::S3
     #   parameters
     #   @return [String]
     #
+    # @!attribute [rw] object_lock_mode
+    #   Specifies the Object Lock mode that you want to apply to the
+    #   uploaded object.
+    #   @return [String]
+    #
+    # @!attribute [rw] object_lock_retain_until_date
+    #   Specifies the date and time when you want the Object Lock to expire.
+    #   @return [Time]
+    #
+    # @!attribute [rw] object_lock_legal_hold_status
+    #   Specifies whether you want to apply a Legal Hold to the uploaded
+    #   object.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/s3-2006-03-01/CreateMultipartUploadRequest AWS API Documentation
     #
     class CreateMultipartUploadRequest < Struct.new(
@@ -1545,7 +1590,46 @@ module Aws::S3
       :sse_customer_key_md5,
       :ssekms_key_id,
       :request_payer,
-      :tagging)
+      :tagging,
+      :object_lock_mode,
+      :object_lock_retain_until_date,
+      :object_lock_legal_hold_status)
+      include Aws::Structure
+    end
+
+    # The container element for specifying the default Object Lock retention
+    # settings for new objects placed in the specified bucket.
+    #
+    # @note When making an API call, you may pass DefaultRetention
+    #   data as a hash:
+    #
+    #       {
+    #         mode: "GOVERNANCE", # accepts GOVERNANCE, COMPLIANCE
+    #         days: 1,
+    #         years: 1,
+    #       }
+    #
+    # @!attribute [rw] mode
+    #   The default Object Lock retention mode you want to apply to new
+    #   objects placed in the specified bucket.
+    #   @return [String]
+    #
+    # @!attribute [rw] days
+    #   The number of days that you want to specify for the default
+    #   retention period.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] years
+    #   The number of years that you want to specify for the default
+    #   retention period.
+    #   @return [Integer]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/s3-2006-03-01/DefaultRetention AWS API Documentation
+    #
+    class DefaultRetention < Struct.new(
+      :mode,
+      :days,
+      :years)
       include Aws::Structure
     end
 
@@ -1886,6 +1970,7 @@ module Aws::S3
     #         mfa: "MFA",
     #         version_id: "ObjectVersionId",
     #         request_payer: "requester", # accepts requester
+    #         bypass_governance_retention: false,
     #       }
     #
     # @!attribute [rw] bucket
@@ -1912,6 +1997,11 @@ module Aws::S3
     #   http://docs.aws.amazon.com/AmazonS3/latest/dev/ObjectsinRequesterPaysBuckets.html
     #   @return [String]
     #
+    # @!attribute [rw] bypass_governance_retention
+    #   Indicates whether S3 Object Lock should bypass Governance-mode
+    #   restrictions to process this operation.
+    #   @return [Boolean]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/s3-2006-03-01/DeleteObjectRequest AWS API Documentation
     #
     class DeleteObjectRequest < Struct.new(
@@ -1919,7 +2009,8 @@ module Aws::S3
       :key,
       :mfa,
       :version_id,
-      :request_payer)
+      :request_payer,
+      :bypass_governance_retention)
       include Aws::Structure
     end
 
@@ -1998,6 +2089,7 @@ module Aws::S3
     #         },
     #         mfa: "MFA",
     #         request_payer: "requester", # accepts requester
+    #         bypass_governance_retention: false,
     #       }
     #
     # @!attribute [rw] bucket
@@ -2020,13 +2112,20 @@ module Aws::S3
     #   http://docs.aws.amazon.com/AmazonS3/latest/dev/ObjectsinRequesterPaysBuckets.html
     #   @return [String]
     #
+    # @!attribute [rw] bypass_governance_retention
+    #   Specifies whether you want to delete this object even if it has a
+    #   Governance-type Object Lock in place. You must have sufficient
+    #   permissions to perform this operation.
+    #   @return [Boolean]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/s3-2006-03-01/DeleteObjectsRequest AWS API Documentation
     #
     class DeleteObjectsRequest < Struct.new(
       :bucket,
       :delete,
       :mfa,
-      :request_payer)
+      :request_payer,
+      :bypass_governance_retention)
       include Aws::Structure
     end
 
@@ -2038,7 +2137,7 @@ module Aws::S3
     #       }
     #
     # @!attribute [rw] bucket
-    #   The Amazon S3 bucket whose Public Access Block configuration you
+    #   The Amazon S3 bucket whose `PublicAccessBlock` configuration you
     #   want to delete.
     #   @return [String]
     #
@@ -2079,7 +2178,7 @@ module Aws::S3
     #       {
     #         bucket: "BucketName", # required
     #         account: "AccountId",
-    #         storage_class: "STANDARD", # accepts STANDARD, REDUCED_REDUNDANCY, STANDARD_IA, ONEZONE_IA
+    #         storage_class: "STANDARD", # accepts STANDARD, REDUCED_REDUNDANCY, STANDARD_IA, ONEZONE_IA, INTELLIGENT_TIERING, GLACIER, DEEP_ARCHIVE
     #         access_control_translation: {
     #           owner: "Destination", # required, accepts Destination
     #         },
@@ -2266,7 +2365,7 @@ module Aws::S3
     #
     #
     #
-    #   [1]: http://docs.aws.amazon.com/AmazonS3/latest/dev/NotificationHowTo.html
+    #   [1]: https://docs.aws.amazon.com/AmazonS3/latest/dev/NotificationHowTo.html
     #   @return [String]
     #
     # @!attribute [rw] value
@@ -2666,7 +2765,7 @@ module Aws::S3
     end
 
     # @!attribute [rw] policy_status
-    #   The public-policy status for this bucket.
+    #   The policy status for the specified bucket.
     #   @return [Types::PolicyStatus]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/s3-2006-03-01/GetBucketPolicyStatusOutput AWS API Documentation
@@ -2684,8 +2783,8 @@ module Aws::S3
     #       }
     #
     # @!attribute [rw] bucket
-    #   The name of the Amazon S3 bucket whose public-policy status you want
-    #   to retrieve.
+    #   The name of the Amazon S3 bucket whose policy status you want to
+    #   retrieve.
     #   @return [String]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/s3-2006-03-01/GetBucketPolicyStatusRequest AWS API Documentation
@@ -2913,6 +3012,89 @@ module Aws::S3
       include Aws::Structure
     end
 
+    # @!attribute [rw] legal_hold
+    #   The current Legal Hold status for the specified object.
+    #   @return [Types::ObjectLockLegalHold]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/s3-2006-03-01/GetObjectLegalHoldOutput AWS API Documentation
+    #
+    class GetObjectLegalHoldOutput < Struct.new(
+      :legal_hold)
+      include Aws::Structure
+    end
+
+    # @note When making an API call, you may pass GetObjectLegalHoldRequest
+    #   data as a hash:
+    #
+    #       {
+    #         bucket: "BucketName", # required
+    #         key: "ObjectKey", # required
+    #         version_id: "ObjectVersionId",
+    #         request_payer: "requester", # accepts requester
+    #       }
+    #
+    # @!attribute [rw] bucket
+    #   The bucket containing the object whose Legal Hold status you want to
+    #   retrieve.
+    #   @return [String]
+    #
+    # @!attribute [rw] key
+    #   The key name for the object whose Legal Hold status you want to
+    #   retrieve.
+    #   @return [String]
+    #
+    # @!attribute [rw] version_id
+    #   The version ID of the object whose Legal Hold status you want to
+    #   retrieve.
+    #   @return [String]
+    #
+    # @!attribute [rw] request_payer
+    #   Confirms that the requester knows that she or he will be charged for
+    #   the request. Bucket owners need not specify this parameter in their
+    #   requests. Documentation on downloading objects from requester pays
+    #   buckets can be found at
+    #   http://docs.aws.amazon.com/AmazonS3/latest/dev/ObjectsinRequesterPaysBuckets.html
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/s3-2006-03-01/GetObjectLegalHoldRequest AWS API Documentation
+    #
+    class GetObjectLegalHoldRequest < Struct.new(
+      :bucket,
+      :key,
+      :version_id,
+      :request_payer)
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] object_lock_configuration
+    #   The specified bucket's Object Lock configuration.
+    #   @return [Types::ObjectLockConfiguration]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/s3-2006-03-01/GetObjectLockConfigurationOutput AWS API Documentation
+    #
+    class GetObjectLockConfigurationOutput < Struct.new(
+      :object_lock_configuration)
+      include Aws::Structure
+    end
+
+    # @note When making an API call, you may pass GetObjectLockConfigurationRequest
+    #   data as a hash:
+    #
+    #       {
+    #         bucket: "BucketName", # required
+    #       }
+    #
+    # @!attribute [rw] bucket
+    #   The bucket whose Object Lock configuration you want to retrieve.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/s3-2006-03-01/GetObjectLockConfigurationRequest AWS API Documentation
+    #
+    class GetObjectLockConfigurationRequest < Struct.new(
+      :bucket)
+      include Aws::Structure
+    end
+
     # @!attribute [rw] body
     #   Object data.
     #   @return [IO]
@@ -3049,6 +3231,20 @@ module Aws::S3
     #   The number of tags, if any, on the object.
     #   @return [Integer]
     #
+    # @!attribute [rw] object_lock_mode
+    #   The Object Lock mode currently in place for this object.
+    #   @return [String]
+    #
+    # @!attribute [rw] object_lock_retain_until_date
+    #   The date and time when this object's Object Lock will expire.
+    #   @return [Time]
+    #
+    # @!attribute [rw] object_lock_legal_hold_status
+    #   Indicates whether this object has an active legal hold. This field
+    #   is only returned if you have permission to view an object's legal
+    #   hold status.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/s3-2006-03-01/GetObjectOutput AWS API Documentation
     #
     class GetObjectOutput < Struct.new(
@@ -3080,7 +3276,10 @@ module Aws::S3
       :request_charged,
       :replication_status,
       :parts_count,
-      :tag_count)
+      :tag_count,
+      :object_lock_mode,
+      :object_lock_retain_until_date,
+      :object_lock_legal_hold_status)
       include Aws::Structure
     end
 
@@ -3228,6 +3427,60 @@ module Aws::S3
       include Aws::Structure
     end
 
+    # @!attribute [rw] retention
+    #   The container element for an object's retention settings.
+    #   @return [Types::ObjectLockRetention]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/s3-2006-03-01/GetObjectRetentionOutput AWS API Documentation
+    #
+    class GetObjectRetentionOutput < Struct.new(
+      :retention)
+      include Aws::Structure
+    end
+
+    # @note When making an API call, you may pass GetObjectRetentionRequest
+    #   data as a hash:
+    #
+    #       {
+    #         bucket: "BucketName", # required
+    #         key: "ObjectKey", # required
+    #         version_id: "ObjectVersionId",
+    #         request_payer: "requester", # accepts requester
+    #       }
+    #
+    # @!attribute [rw] bucket
+    #   The bucket containing the object whose retention settings you want
+    #   to retrieve.
+    #   @return [String]
+    #
+    # @!attribute [rw] key
+    #   The key name for the object whose retention settings you want to
+    #   retrieve.
+    #   @return [String]
+    #
+    # @!attribute [rw] version_id
+    #   The version ID for the object whose retention settings you want to
+    #   retrieve.
+    #   @return [String]
+    #
+    # @!attribute [rw] request_payer
+    #   Confirms that the requester knows that she or he will be charged for
+    #   the request. Bucket owners need not specify this parameter in their
+    #   requests. Documentation on downloading objects from requester pays
+    #   buckets can be found at
+    #   http://docs.aws.amazon.com/AmazonS3/latest/dev/ObjectsinRequesterPaysBuckets.html
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/s3-2006-03-01/GetObjectRetentionRequest AWS API Documentation
+    #
+    class GetObjectRetentionRequest < Struct.new(
+      :bucket,
+      :key,
+      :version_id,
+      :request_payer)
+      include Aws::Structure
+    end
+
     # @!attribute [rw] version_id
     #   @return [String]
     #
@@ -3318,7 +3571,7 @@ module Aws::S3
     end
 
     # @!attribute [rw] public_access_block_configuration
-    #   The Public Access Block configuration currently in effect for this
+    #   The `PublicAccessBlock` configuration currently in effect for this
     #   Amazon S3 bucket.
     #   @return [Types::PublicAccessBlockConfiguration]
     #
@@ -3337,7 +3590,7 @@ module Aws::S3
     #       }
     #
     # @!attribute [rw] bucket
-    #   The name of the Amazon S3 bucket whose Public Access Block
+    #   The name of the Amazon S3 bucket whose `PublicAccessBlock`
     #   configuration you want to retrieve.
     #   @return [String]
     #
@@ -3578,6 +3831,18 @@ module Aws::S3
     #   The count of parts this object has.
     #   @return [Integer]
     #
+    # @!attribute [rw] object_lock_mode
+    #   The Object Lock mode currently in place for this object.
+    #   @return [String]
+    #
+    # @!attribute [rw] object_lock_retain_until_date
+    #   The date and time when this object's Object Lock will expire.
+    #   @return [Time]
+    #
+    # @!attribute [rw] object_lock_legal_hold_status
+    #   The Legal Hold status for the specified object.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/s3-2006-03-01/HeadObjectOutput AWS API Documentation
     #
     class HeadObjectOutput < Struct.new(
@@ -3606,7 +3871,10 @@ module Aws::S3
       :storage_class,
       :request_charged,
       :replication_status,
-      :parts_count)
+      :parts_count,
+      :object_lock_mode,
+      :object_lock_retain_until_date,
+      :object_lock_legal_hold_status)
       include Aws::Structure
     end
 
@@ -3815,7 +4083,7 @@ module Aws::S3
     #           s3_bucket_destination: { # required
     #             account_id: "AccountId",
     #             bucket: "BucketName", # required
-    #             format: "CSV", # required, accepts CSV, ORC
+    #             format: "CSV", # required, accepts CSV, ORC, Parquet
     #             prefix: "Prefix",
     #             encryption: {
     #               sses3: {
@@ -3832,7 +4100,7 @@ module Aws::S3
     #         },
     #         id: "InventoryId", # required
     #         included_object_versions: "All", # required, accepts All, Current
-    #         optional_fields: ["Size"], # accepts Size, LastModifiedDate, StorageClass, ETag, IsMultipartUploaded, ReplicationStatus, EncryptionStatus
+    #         optional_fields: ["Size"], # accepts Size, LastModifiedDate, StorageClass, ETag, IsMultipartUploaded, ReplicationStatus, EncryptionStatus, ObjectLockRetainUntilDate, ObjectLockMode, ObjectLockLegalHoldStatus
     #         schedule: { # required
     #           frequency: "Daily", # required, accepts Daily, Weekly
     #         },
@@ -3889,7 +4157,7 @@ module Aws::S3
     #         s3_bucket_destination: { # required
     #           account_id: "AccountId",
     #           bucket: "BucketName", # required
-    #           format: "CSV", # required, accepts CSV, ORC
+    #           format: "CSV", # required, accepts CSV, ORC, Parquet
     #           prefix: "Prefix",
     #           encryption: {
     #             sses3: {
@@ -3968,7 +4236,7 @@ module Aws::S3
     #       {
     #         account_id: "AccountId",
     #         bucket: "BucketName", # required
-    #         format: "CSV", # required, accepts CSV, ORC
+    #         format: "CSV", # required, accepts CSV, ORC, Parquet
     #         prefix: "Prefix",
     #         encryption: {
     #           sses3: {
@@ -4075,7 +4343,7 @@ module Aws::S3
     #       {
     #         id: "NotificationId",
     #         lambda_function_arn: "LambdaFunctionArn", # required
-    #         events: ["s3:ReducedRedundancyLostObject"], # required, accepts s3:ReducedRedundancyLostObject, s3:ObjectCreated:*, s3:ObjectCreated:Put, s3:ObjectCreated:Post, s3:ObjectCreated:Copy, s3:ObjectCreated:CompleteMultipartUpload, s3:ObjectRemoved:*, s3:ObjectRemoved:Delete, s3:ObjectRemoved:DeleteMarkerCreated
+    #         events: ["s3:ReducedRedundancyLostObject"], # required, accepts s3:ReducedRedundancyLostObject, s3:ObjectCreated:*, s3:ObjectCreated:Put, s3:ObjectCreated:Post, s3:ObjectCreated:Copy, s3:ObjectCreated:CompleteMultipartUpload, s3:ObjectRemoved:*, s3:ObjectRemoved:Delete, s3:ObjectRemoved:DeleteMarkerCreated, s3:ObjectRestore:Post, s3:ObjectRestore:Completed
     #         filter: {
     #           key: {
     #             filter_rules: [
@@ -4109,7 +4377,7 @@ module Aws::S3
     #
     #
     #
-    #   [1]: http://docs.aws.amazon.com/AmazonS3/latest/dev/NotificationHowTo.html
+    #   [1]: https://docs.aws.amazon.com/AmazonS3/latest/dev/NotificationHowTo.html
     #   @return [Types::NotificationConfigurationFilter]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/s3-2006-03-01/LambdaFunctionConfiguration AWS API Documentation
@@ -4139,11 +4407,11 @@ module Aws::S3
     #             transition: {
     #               date: Time.now,
     #               days: 1,
-    #               storage_class: "GLACIER", # accepts GLACIER, STANDARD_IA, ONEZONE_IA
+    #               storage_class: "GLACIER", # accepts GLACIER, STANDARD_IA, ONEZONE_IA, INTELLIGENT_TIERING, DEEP_ARCHIVE
     #             },
     #             noncurrent_version_transition: {
     #               noncurrent_days: 1,
-    #               storage_class: "GLACIER", # accepts GLACIER, STANDARD_IA, ONEZONE_IA
+    #               storage_class: "GLACIER", # accepts GLACIER, STANDARD_IA, ONEZONE_IA, INTELLIGENT_TIERING, DEEP_ARCHIVE
     #             },
     #             noncurrent_version_expiration: {
     #               noncurrent_days: 1,
@@ -4232,13 +4500,13 @@ module Aws::S3
     #           {
     #             date: Time.now,
     #             days: 1,
-    #             storage_class: "GLACIER", # accepts GLACIER, STANDARD_IA, ONEZONE_IA
+    #             storage_class: "GLACIER", # accepts GLACIER, STANDARD_IA, ONEZONE_IA, INTELLIGENT_TIERING, DEEP_ARCHIVE
     #           },
     #         ],
     #         noncurrent_version_transitions: [
     #           {
     #             noncurrent_days: 1,
-    #             storage_class: "GLACIER", # accepts GLACIER, STANDARD_IA, ONEZONE_IA
+    #             storage_class: "GLACIER", # accepts GLACIER, STANDARD_IA, ONEZONE_IA, INTELLIGENT_TIERING, DEEP_ARCHIVE
     #           },
     #         ],
     #         noncurrent_version_expiration: {
@@ -4259,7 +4527,7 @@ module Aws::S3
     #
     # @!attribute [rw] prefix
     #   Prefix identifying one or more objects to which the rule applies.
-    #   This is deprecated; use Filter instead.
+    #   This is No longer used; use Filter instead.
     #   @return [String]
     #
     # @!attribute [rw] filter
@@ -5502,7 +5770,7 @@ module Aws::S3
     #
     #
     #
-    #   [1]: http://docs.aws.amazon.com/AmazonS3/latest/dev/s3-access-control.html
+    #   [1]: https://docs.aws.amazon.com/AmazonS3/latest/dev/s3-access-control.html
     #   @return [Integer]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/s3-2006-03-01/NoncurrentVersionExpiration AWS API Documentation
@@ -5513,11 +5781,12 @@ module Aws::S3
     end
 
     # Container for the transition rule that describes when noncurrent
-    # objects transition to the STANDARD\_IA, ONEZONE\_IA, or GLACIER
-    # storage class. If your bucket is versioning-enabled (or versioning is
-    # suspended), you can set this action to request that Amazon S3
-    # transition noncurrent object versions to the STANDARD\_IA,
-    # ONEZONE\_IA, or GLACIER storage class at a specific period in the
+    # objects transition to the STANDARD\_IA, ONEZONE\_IA,
+    # INTELLIGENT\_TIERING, GLACIER or DEEP\_ARCHIVE storage class. If your
+    # bucket is versioning-enabled (or versioning is suspended), you can set
+    # this action to request that Amazon S3 transition noncurrent object
+    # versions to the STANDARD\_IA, ONEZONE\_IA, INTELLIGENT\_TIERING,
+    # GLACIER or DEEP\_ARCHIVE storage class at a specific period in the
     # object's lifetime.
     #
     # @note When making an API call, you may pass NoncurrentVersionTransition
@@ -5525,7 +5794,7 @@ module Aws::S3
     #
     #       {
     #         noncurrent_days: 1,
-    #         storage_class: "GLACIER", # accepts GLACIER, STANDARD_IA, ONEZONE_IA
+    #         storage_class: "GLACIER", # accepts GLACIER, STANDARD_IA, ONEZONE_IA, INTELLIGENT_TIERING, DEEP_ARCHIVE
     #       }
     #
     # @!attribute [rw] noncurrent_days
@@ -5537,7 +5806,7 @@ module Aws::S3
     #
     #
     #
-    #   [1]: http://docs.aws.amazon.com/AmazonS3/latest/dev/s3-access-control.html
+    #   [1]: https://docs.aws.amazon.com/AmazonS3/latest/dev/s3-access-control.html
     #   @return [Integer]
     #
     # @!attribute [rw] storage_class
@@ -5564,7 +5833,7 @@ module Aws::S3
     #           {
     #             id: "NotificationId",
     #             topic_arn: "TopicArn", # required
-    #             events: ["s3:ReducedRedundancyLostObject"], # required, accepts s3:ReducedRedundancyLostObject, s3:ObjectCreated:*, s3:ObjectCreated:Put, s3:ObjectCreated:Post, s3:ObjectCreated:Copy, s3:ObjectCreated:CompleteMultipartUpload, s3:ObjectRemoved:*, s3:ObjectRemoved:Delete, s3:ObjectRemoved:DeleteMarkerCreated
+    #             events: ["s3:ReducedRedundancyLostObject"], # required, accepts s3:ReducedRedundancyLostObject, s3:ObjectCreated:*, s3:ObjectCreated:Put, s3:ObjectCreated:Post, s3:ObjectCreated:Copy, s3:ObjectCreated:CompleteMultipartUpload, s3:ObjectRemoved:*, s3:ObjectRemoved:Delete, s3:ObjectRemoved:DeleteMarkerCreated, s3:ObjectRestore:Post, s3:ObjectRestore:Completed
     #             filter: {
     #               key: {
     #                 filter_rules: [
@@ -5581,7 +5850,7 @@ module Aws::S3
     #           {
     #             id: "NotificationId",
     #             queue_arn: "QueueArn", # required
-    #             events: ["s3:ReducedRedundancyLostObject"], # required, accepts s3:ReducedRedundancyLostObject, s3:ObjectCreated:*, s3:ObjectCreated:Put, s3:ObjectCreated:Post, s3:ObjectCreated:Copy, s3:ObjectCreated:CompleteMultipartUpload, s3:ObjectRemoved:*, s3:ObjectRemoved:Delete, s3:ObjectRemoved:DeleteMarkerCreated
+    #             events: ["s3:ReducedRedundancyLostObject"], # required, accepts s3:ReducedRedundancyLostObject, s3:ObjectCreated:*, s3:ObjectCreated:Put, s3:ObjectCreated:Post, s3:ObjectCreated:Copy, s3:ObjectCreated:CompleteMultipartUpload, s3:ObjectRemoved:*, s3:ObjectRemoved:Delete, s3:ObjectRemoved:DeleteMarkerCreated, s3:ObjectRestore:Post, s3:ObjectRestore:Completed
     #             filter: {
     #               key: {
     #                 filter_rules: [
@@ -5598,7 +5867,7 @@ module Aws::S3
     #           {
     #             id: "NotificationId",
     #             lambda_function_arn: "LambdaFunctionArn", # required
-    #             events: ["s3:ReducedRedundancyLostObject"], # required, accepts s3:ReducedRedundancyLostObject, s3:ObjectCreated:*, s3:ObjectCreated:Put, s3:ObjectCreated:Post, s3:ObjectCreated:Copy, s3:ObjectCreated:CompleteMultipartUpload, s3:ObjectRemoved:*, s3:ObjectRemoved:Delete, s3:ObjectRemoved:DeleteMarkerCreated
+    #             events: ["s3:ReducedRedundancyLostObject"], # required, accepts s3:ReducedRedundancyLostObject, s3:ObjectCreated:*, s3:ObjectCreated:Put, s3:ObjectCreated:Post, s3:ObjectCreated:Copy, s3:ObjectCreated:CompleteMultipartUpload, s3:ObjectRemoved:*, s3:ObjectRemoved:Delete, s3:ObjectRemoved:DeleteMarkerCreated, s3:ObjectRestore:Post, s3:ObjectRestore:Completed
     #             filter: {
     #               key: {
     #                 filter_rules: [
@@ -5637,20 +5906,20 @@ module Aws::S3
     #       {
     #         topic_configuration: {
     #           id: "NotificationId",
-    #           events: ["s3:ReducedRedundancyLostObject"], # accepts s3:ReducedRedundancyLostObject, s3:ObjectCreated:*, s3:ObjectCreated:Put, s3:ObjectCreated:Post, s3:ObjectCreated:Copy, s3:ObjectCreated:CompleteMultipartUpload, s3:ObjectRemoved:*, s3:ObjectRemoved:Delete, s3:ObjectRemoved:DeleteMarkerCreated
-    #           event: "s3:ReducedRedundancyLostObject", # accepts s3:ReducedRedundancyLostObject, s3:ObjectCreated:*, s3:ObjectCreated:Put, s3:ObjectCreated:Post, s3:ObjectCreated:Copy, s3:ObjectCreated:CompleteMultipartUpload, s3:ObjectRemoved:*, s3:ObjectRemoved:Delete, s3:ObjectRemoved:DeleteMarkerCreated
+    #           events: ["s3:ReducedRedundancyLostObject"], # accepts s3:ReducedRedundancyLostObject, s3:ObjectCreated:*, s3:ObjectCreated:Put, s3:ObjectCreated:Post, s3:ObjectCreated:Copy, s3:ObjectCreated:CompleteMultipartUpload, s3:ObjectRemoved:*, s3:ObjectRemoved:Delete, s3:ObjectRemoved:DeleteMarkerCreated, s3:ObjectRestore:Post, s3:ObjectRestore:Completed
+    #           event: "s3:ReducedRedundancyLostObject", # accepts s3:ReducedRedundancyLostObject, s3:ObjectCreated:*, s3:ObjectCreated:Put, s3:ObjectCreated:Post, s3:ObjectCreated:Copy, s3:ObjectCreated:CompleteMultipartUpload, s3:ObjectRemoved:*, s3:ObjectRemoved:Delete, s3:ObjectRemoved:DeleteMarkerCreated, s3:ObjectRestore:Post, s3:ObjectRestore:Completed
     #           topic: "TopicArn",
     #         },
     #         queue_configuration: {
     #           id: "NotificationId",
-    #           event: "s3:ReducedRedundancyLostObject", # accepts s3:ReducedRedundancyLostObject, s3:ObjectCreated:*, s3:ObjectCreated:Put, s3:ObjectCreated:Post, s3:ObjectCreated:Copy, s3:ObjectCreated:CompleteMultipartUpload, s3:ObjectRemoved:*, s3:ObjectRemoved:Delete, s3:ObjectRemoved:DeleteMarkerCreated
-    #           events: ["s3:ReducedRedundancyLostObject"], # accepts s3:ReducedRedundancyLostObject, s3:ObjectCreated:*, s3:ObjectCreated:Put, s3:ObjectCreated:Post, s3:ObjectCreated:Copy, s3:ObjectCreated:CompleteMultipartUpload, s3:ObjectRemoved:*, s3:ObjectRemoved:Delete, s3:ObjectRemoved:DeleteMarkerCreated
+    #           event: "s3:ReducedRedundancyLostObject", # accepts s3:ReducedRedundancyLostObject, s3:ObjectCreated:*, s3:ObjectCreated:Put, s3:ObjectCreated:Post, s3:ObjectCreated:Copy, s3:ObjectCreated:CompleteMultipartUpload, s3:ObjectRemoved:*, s3:ObjectRemoved:Delete, s3:ObjectRemoved:DeleteMarkerCreated, s3:ObjectRestore:Post, s3:ObjectRestore:Completed
+    #           events: ["s3:ReducedRedundancyLostObject"], # accepts s3:ReducedRedundancyLostObject, s3:ObjectCreated:*, s3:ObjectCreated:Put, s3:ObjectCreated:Post, s3:ObjectCreated:Copy, s3:ObjectCreated:CompleteMultipartUpload, s3:ObjectRemoved:*, s3:ObjectRemoved:Delete, s3:ObjectRemoved:DeleteMarkerCreated, s3:ObjectRestore:Post, s3:ObjectRestore:Completed
     #           queue: "QueueArn",
     #         },
     #         cloud_function_configuration: {
     #           id: "NotificationId",
-    #           event: "s3:ReducedRedundancyLostObject", # accepts s3:ReducedRedundancyLostObject, s3:ObjectCreated:*, s3:ObjectCreated:Put, s3:ObjectCreated:Post, s3:ObjectCreated:Copy, s3:ObjectCreated:CompleteMultipartUpload, s3:ObjectRemoved:*, s3:ObjectRemoved:Delete, s3:ObjectRemoved:DeleteMarkerCreated
-    #           events: ["s3:ReducedRedundancyLostObject"], # accepts s3:ReducedRedundancyLostObject, s3:ObjectCreated:*, s3:ObjectCreated:Put, s3:ObjectCreated:Post, s3:ObjectCreated:Copy, s3:ObjectCreated:CompleteMultipartUpload, s3:ObjectRemoved:*, s3:ObjectRemoved:Delete, s3:ObjectRemoved:DeleteMarkerCreated
+    #           event: "s3:ReducedRedundancyLostObject", # accepts s3:ReducedRedundancyLostObject, s3:ObjectCreated:*, s3:ObjectCreated:Put, s3:ObjectCreated:Post, s3:ObjectCreated:Copy, s3:ObjectCreated:CompleteMultipartUpload, s3:ObjectRemoved:*, s3:ObjectRemoved:Delete, s3:ObjectRemoved:DeleteMarkerCreated, s3:ObjectRestore:Post, s3:ObjectRestore:Completed
+    #           events: ["s3:ReducedRedundancyLostObject"], # accepts s3:ReducedRedundancyLostObject, s3:ObjectCreated:*, s3:ObjectCreated:Put, s3:ObjectCreated:Post, s3:ObjectCreated:Copy, s3:ObjectCreated:CompleteMultipartUpload, s3:ObjectRemoved:*, s3:ObjectRemoved:Delete, s3:ObjectRemoved:DeleteMarkerCreated, s3:ObjectRestore:Post, s3:ObjectRestore:Completed
     #           cloud_function: "CloudFunction",
     #           invocation_role: "CloudFunctionInvocationRole",
     #         },
@@ -5680,7 +5949,7 @@ module Aws::S3
     #
     #
     #
-    # [1]: http://docs.aws.amazon.com/AmazonS3/latest/dev/NotificationHowTo.html
+    # [1]: https://docs.aws.amazon.com/AmazonS3/latest/dev/NotificationHowTo.html
     #
     # @note When making an API call, you may pass NotificationConfigurationFilter
     #   data as a hash:
@@ -5762,6 +6031,110 @@ module Aws::S3
       include Aws::Structure
     end
 
+    # The container element for Object Lock configuration parameters.
+    #
+    # @note When making an API call, you may pass ObjectLockConfiguration
+    #   data as a hash:
+    #
+    #       {
+    #         object_lock_enabled: "Enabled", # accepts Enabled
+    #         rule: {
+    #           default_retention: {
+    #             mode: "GOVERNANCE", # accepts GOVERNANCE, COMPLIANCE
+    #             days: 1,
+    #             years: 1,
+    #           },
+    #         },
+    #       }
+    #
+    # @!attribute [rw] object_lock_enabled
+    #   Indicates whether this bucket has an Object Lock configuration
+    #   enabled.
+    #   @return [String]
+    #
+    # @!attribute [rw] rule
+    #   The Object Lock rule in place for the specified object.
+    #   @return [Types::ObjectLockRule]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/s3-2006-03-01/ObjectLockConfiguration AWS API Documentation
+    #
+    class ObjectLockConfiguration < Struct.new(
+      :object_lock_enabled,
+      :rule)
+      include Aws::Structure
+    end
+
+    # A Legal Hold configuration for an object.
+    #
+    # @note When making an API call, you may pass ObjectLockLegalHold
+    #   data as a hash:
+    #
+    #       {
+    #         status: "ON", # accepts ON, OFF
+    #       }
+    #
+    # @!attribute [rw] status
+    #   Indicates whether the specified object has a Legal Hold in place.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/s3-2006-03-01/ObjectLockLegalHold AWS API Documentation
+    #
+    class ObjectLockLegalHold < Struct.new(
+      :status)
+      include Aws::Structure
+    end
+
+    # A Retention configuration for an object.
+    #
+    # @note When making an API call, you may pass ObjectLockRetention
+    #   data as a hash:
+    #
+    #       {
+    #         mode: "GOVERNANCE", # accepts GOVERNANCE, COMPLIANCE
+    #         retain_until_date: Time.now,
+    #       }
+    #
+    # @!attribute [rw] mode
+    #   Indicates the Retention mode for the specified object.
+    #   @return [String]
+    #
+    # @!attribute [rw] retain_until_date
+    #   The date on which this Object Lock Retention will expire.
+    #   @return [Time]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/s3-2006-03-01/ObjectLockRetention AWS API Documentation
+    #
+    class ObjectLockRetention < Struct.new(
+      :mode,
+      :retain_until_date)
+      include Aws::Structure
+    end
+
+    # The container element for an Object Lock rule.
+    #
+    # @note When making an API call, you may pass ObjectLockRule
+    #   data as a hash:
+    #
+    #       {
+    #         default_retention: {
+    #           mode: "GOVERNANCE", # accepts GOVERNANCE, COMPLIANCE
+    #           days: 1,
+    #           years: 1,
+    #         },
+    #       }
+    #
+    # @!attribute [rw] default_retention
+    #   The default retention period that you want to apply to new objects
+    #   placed in the specified bucket.
+    #   @return [Types::DefaultRetention]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/s3-2006-03-01/ObjectLockRule AWS API Documentation
+    #
+    class ObjectLockRule < Struct.new(
+      :default_retention)
+      include Aws::Structure
+    end
+
     # @!attribute [rw] etag
     #   @return [String]
     #
@@ -5848,7 +6221,7 @@ module Aws::S3
     #               value: "MetadataValue",
     #             },
     #           ],
-    #           storage_class: "STANDARD", # accepts STANDARD, REDUCED_REDUNDANCY, STANDARD_IA, ONEZONE_IA
+    #           storage_class: "STANDARD", # accepts STANDARD, REDUCED_REDUNDANCY, STANDARD_IA, ONEZONE_IA, INTELLIGENT_TIERING, GLACIER, DEEP_ARCHIVE
     #         },
     #       }
     #
@@ -5953,11 +6326,11 @@ module Aws::S3
       include Aws::Structure
     end
 
-    # The container element for this bucket's public-policy status.
+    # The container element for a bucket's policy status.
     #
     # @!attribute [rw] is_public
-    #   The public-policy status for this bucket. `TRUE` indicates that this
-    #   bucket is public. `FALSE` indicates that the bucket is not public.
+    #   The policy status for this bucket. `TRUE` indicates that this bucket
+    #   is public. `FALSE` indicates that the bucket is not public.
     #   @return [Boolean]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/s3-2006-03-01/PolicyStatus AWS API Documentation
@@ -6000,51 +6373,6 @@ module Aws::S3
       include Aws::Structure
     end
 
-    # The container element for all Public Access Block configuration
-    # options. You can enable the configuration options in any combination.
-    #
-    # Amazon S3 considers a bucket policy public unless at least one of the
-    # following conditions is true:
-    #
-    # 1.  The policy limits access to a set of CIDRs using `aws:SourceIp`.
-    #     For more information on CIDR, see
-    #     [http://www.rfc-editor.org/rfc/rfc4632.txt][1]
-    #
-    # 2.  The policy grants permissions, not including any "bad actions,"
-    #     to one of the following:
-    #
-    #     * A fixed AWS principal, user, role, or service principal
-    #
-    #     * A fixed `aws:SourceArn`
-    #
-    #     * A fixed `aws:SourceVpc`
-    #
-    #     * A fixed `aws:SourceVpce`
-    #
-    #     * A fixed `aws:SourceOwner`
-    #
-    #     * A fixed `aws:SourceAccount`
-    #
-    #     * A fixed value of
-    #       `s3:x-amz-server-side-encryption-aws-kms-key-id`
-    #
-    #     * A fixed value of `aws:userid` outside the pattern
-    #       "`AROLEID:*`"
-    #
-    # "Bad actions" are those that could expose the data inside a bucket
-    # to reads or writes by the public. These actions are `s3:Get*`,
-    # `s3:List*`, `s3:AbortMultipartUpload`, `s3:Delete*`, `s3:Put*`, and
-    # `s3:RestoreObject`.
-    #
-    # The star notation for bad actions indicates that all matching
-    # operations are considered bad actions. For example, because `s3:Get*`
-    # is a bad action, `s3:GetObject`, `s3:GetObjectVersion`, and
-    # `s3:GetObjectAcl` are all bad actions.
-    #
-    #
-    #
-    # [1]: http://www.rfc-editor.org/rfc/rfc4632.txt
-    #
     # @note When making an API call, you may pass PublicAccessBlockConfiguration
     #   data as a hash:
     #
@@ -6056,27 +6384,26 @@ module Aws::S3
     #       }
     #
     # @!attribute [rw] block_public_acls
-    #   Specifies whether Amazon S3 should block public ACLs for this
-    #   bucket. Setting this element to `TRUE` causes the following
-    #   behavior:
+    #   Specifies whether Amazon S3 should block public access control lists
+    #   (ACLs) for this bucket and objects in this bucket. Setting this
+    #   element to `TRUE` causes the following behavior:
     #
-    #   * PUT Bucket acl and PUT Object acl calls will fail if the specified
-    #     ACL allows public access.
+    #   * PUT Bucket acl and PUT Object acl calls fail if the specified ACL
+    #     is public.
     #
-    #   * PUT Object calls will fail if the request includes an object ACL.
+    #   * PUT Object calls fail if the request includes a public ACL.
     #
-    #   Note that enabling this setting doesn't affect existing policies or
-    #   ACLs.
+    #   Enabling this setting doesn't affect existing policies or ACLs.
     #   @return [Boolean]
     #
     # @!attribute [rw] ignore_public_acls
     #   Specifies whether Amazon S3 should ignore public ACLs for this
-    #   bucket. Setting this element to `TRUE` causes Amazon S3 to ignore
-    #   all public ACLs on this bucket and any objects that it contains.
+    #   bucket and objects in this bucket. Setting this element to `TRUE`
+    #   causes Amazon S3 to ignore all public ACLs on this bucket and
+    #   objects in this bucket.
     #
-    #   Note that enabling this setting doesn't affect the persistence of
-    #   any existing ACLs and doesn't prevent new public ACLs from being
-    #   set.
+    #   Enabling this setting doesn't affect the persistence of any
+    #   existing ACLs and doesn't prevent new public ACLs from being set.
     #   @return [Boolean]
     #
     # @!attribute [rw] block_public_policy
@@ -6085,20 +6412,19 @@ module Aws::S3
     #   reject calls to PUT Bucket policy if the specified bucket policy
     #   allows public access.
     #
-    #   Note that enabling this setting doesn't affect existing bucket
-    #   policies.
+    #   Enabling this setting doesn't affect existing bucket policies.
     #   @return [Boolean]
     #
     # @!attribute [rw] restrict_public_buckets
     #   Specifies whether Amazon S3 should restrict public bucket policies
-    #   for this bucket. If this element is set to `TRUE`, then only the
-    #   bucket owner and AWS Services can access this bucket if it has a
-    #   public policy.
-    #
-    #   Note that enabling this setting doesn't affect previously stored
-    #   bucket policies, except that public and cross-account access within
-    #   any public bucket policy, including non-public delegation to
-    #   specific accounts, is blocked.
+    #   for this bucket. Setting this element to `TRUE` restricts access to
+    #   this bucket to only AWS services and authorized users within this
+    #   account if the bucket has a public policy.
+    #
+    #   Enabling this setting doesn't affect previously stored bucket
+    #   policies, except that public and cross-account access within any
+    #   public bucket policy, including non-public delegation to specific
+    #   accounts, is blocked.
     #   @return [Boolean]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/s3-2006-03-01/PublicAccessBlockConfiguration AWS API Documentation
@@ -6344,7 +6670,8 @@ module Aws::S3
     #
     # @!attribute [rw] content_md5
     #   The base64-encoded 128-bit MD5 digest of the server-side encryption
-    #   configuration.
+    #   configuration. This parameter is auto-populated when using the
+    #   command from the CLI
     #   @return [String]
     #
     # @!attribute [rw] server_side_encryption_configuration
@@ -6372,7 +6699,7 @@ module Aws::S3
     #             s3_bucket_destination: { # required
     #               account_id: "AccountId",
     #               bucket: "BucketName", # required
-    #               format: "CSV", # required, accepts CSV, ORC
+    #               format: "CSV", # required, accepts CSV, ORC, Parquet
     #               prefix: "Prefix",
     #               encryption: {
     #                 sses3: {
@@ -6389,7 +6716,7 @@ module Aws::S3
     #           },
     #           id: "InventoryId", # required
     #           included_object_versions: "All", # required, accepts All, Current
-    #           optional_fields: ["Size"], # accepts Size, LastModifiedDate, StorageClass, ETag, IsMultipartUploaded, ReplicationStatus, EncryptionStatus
+    #           optional_fields: ["Size"], # accepts Size, LastModifiedDate, StorageClass, ETag, IsMultipartUploaded, ReplicationStatus, EncryptionStatus, ObjectLockRetainUntilDate, ObjectLockMode, ObjectLockLegalHoldStatus
     #           schedule: { # required
     #             frequency: "Daily", # required, accepts Daily, Weekly
     #           },
@@ -6454,13 +6781,13 @@ module Aws::S3
     #                 {
     #                   date: Time.now,
     #                   days: 1,
-    #                   storage_class: "GLACIER", # accepts GLACIER, STANDARD_IA, ONEZONE_IA
+    #                   storage_class: "GLACIER", # accepts GLACIER, STANDARD_IA, ONEZONE_IA, INTELLIGENT_TIERING, DEEP_ARCHIVE
     #                 },
     #               ],
     #               noncurrent_version_transitions: [
     #                 {
     #                   noncurrent_days: 1,
-    #                   storage_class: "GLACIER", # accepts GLACIER, STANDARD_IA, ONEZONE_IA
+    #                   storage_class: "GLACIER", # accepts GLACIER, STANDARD_IA, ONEZONE_IA, INTELLIGENT_TIERING, DEEP_ARCHIVE
     #                 },
     #               ],
     #               noncurrent_version_expiration: {
@@ -6508,11 +6835,11 @@ module Aws::S3
     #               transition: {
     #                 date: Time.now,
     #                 days: 1,
-    #                 storage_class: "GLACIER", # accepts GLACIER, STANDARD_IA, ONEZONE_IA
+    #                 storage_class: "GLACIER", # accepts GLACIER, STANDARD_IA, ONEZONE_IA, INTELLIGENT_TIERING, DEEP_ARCHIVE
     #               },
     #               noncurrent_version_transition: {
     #                 noncurrent_days: 1,
-    #                 storage_class: "GLACIER", # accepts GLACIER, STANDARD_IA, ONEZONE_IA
+    #                 storage_class: "GLACIER", # accepts GLACIER, STANDARD_IA, ONEZONE_IA, INTELLIGENT_TIERING, DEEP_ARCHIVE
     #               },
     #               noncurrent_version_expiration: {
     #                 noncurrent_days: 1,
@@ -6645,7 +6972,7 @@ module Aws::S3
     #             {
     #               id: "NotificationId",
     #               topic_arn: "TopicArn", # required
-    #               events: ["s3:ReducedRedundancyLostObject"], # required, accepts s3:ReducedRedundancyLostObject, s3:ObjectCreated:*, s3:ObjectCreated:Put, s3:ObjectCreated:Post, s3:ObjectCreated:Copy, s3:ObjectCreated:CompleteMultipartUpload, s3:ObjectRemoved:*, s3:ObjectRemoved:Delete, s3:ObjectRemoved:DeleteMarkerCreated
+    #               events: ["s3:ReducedRedundancyLostObject"], # required, accepts s3:ReducedRedundancyLostObject, s3:ObjectCreated:*, s3:ObjectCreated:Put, s3:ObjectCreated:Post, s3:ObjectCreated:Copy, s3:ObjectCreated:CompleteMultipartUpload, s3:ObjectRemoved:*, s3:ObjectRemoved:Delete, s3:ObjectRemoved:DeleteMarkerCreated, s3:ObjectRestore:Post, s3:ObjectRestore:Completed
     #               filter: {
     #                 key: {
     #                   filter_rules: [
@@ -6662,7 +6989,7 @@ module Aws::S3
     #             {
     #               id: "NotificationId",
     #               queue_arn: "QueueArn", # required
-    #               events: ["s3:ReducedRedundancyLostObject"], # required, accepts s3:ReducedRedundancyLostObject, s3:ObjectCreated:*, s3:ObjectCreated:Put, s3:ObjectCreated:Post, s3:ObjectCreated:Copy, s3:ObjectCreated:CompleteMultipartUpload, s3:ObjectRemoved:*, s3:ObjectRemoved:Delete, s3:ObjectRemoved:DeleteMarkerCreated
+    #               events: ["s3:ReducedRedundancyLostObject"], # required, accepts s3:ReducedRedundancyLostObject, s3:ObjectCreated:*, s3:ObjectCreated:Put, s3:ObjectCreated:Post, s3:ObjectCreated:Copy, s3:ObjectCreated:CompleteMultipartUpload, s3:ObjectRemoved:*, s3:ObjectRemoved:Delete, s3:ObjectRemoved:DeleteMarkerCreated, s3:ObjectRestore:Post, s3:ObjectRestore:Completed
     #               filter: {
     #                 key: {
     #                   filter_rules: [
@@ -6679,7 +7006,7 @@ module Aws::S3
     #             {
     #               id: "NotificationId",
     #               lambda_function_arn: "LambdaFunctionArn", # required
-    #               events: ["s3:ReducedRedundancyLostObject"], # required, accepts s3:ReducedRedundancyLostObject, s3:ObjectCreated:*, s3:ObjectCreated:Put, s3:ObjectCreated:Post, s3:ObjectCreated:Copy, s3:ObjectCreated:CompleteMultipartUpload, s3:ObjectRemoved:*, s3:ObjectRemoved:Delete, s3:ObjectRemoved:DeleteMarkerCreated
+    #               events: ["s3:ReducedRedundancyLostObject"], # required, accepts s3:ReducedRedundancyLostObject, s3:ObjectCreated:*, s3:ObjectCreated:Put, s3:ObjectCreated:Post, s3:ObjectCreated:Copy, s3:ObjectCreated:CompleteMultipartUpload, s3:ObjectRemoved:*, s3:ObjectRemoved:Delete, s3:ObjectRemoved:DeleteMarkerCreated, s3:ObjectRestore:Post, s3:ObjectRestore:Completed
     #               filter: {
     #                 key: {
     #                   filter_rules: [
@@ -6721,20 +7048,20 @@ module Aws::S3
     #         notification_configuration: { # required
     #           topic_configuration: {
     #             id: "NotificationId",
-    #             events: ["s3:ReducedRedundancyLostObject"], # accepts s3:ReducedRedundancyLostObject, s3:ObjectCreated:*, s3:ObjectCreated:Put, s3:ObjectCreated:Post, s3:ObjectCreated:Copy, s3:ObjectCreated:CompleteMultipartUpload, s3:ObjectRemoved:*, s3:ObjectRemoved:Delete, s3:ObjectRemoved:DeleteMarkerCreated
-    #             event: "s3:ReducedRedundancyLostObject", # accepts s3:ReducedRedundancyLostObject, s3:ObjectCreated:*, s3:ObjectCreated:Put, s3:ObjectCreated:Post, s3:ObjectCreated:Copy, s3:ObjectCreated:CompleteMultipartUpload, s3:ObjectRemoved:*, s3:ObjectRemoved:Delete, s3:ObjectRemoved:DeleteMarkerCreated
+    #             events: ["s3:ReducedRedundancyLostObject"], # accepts s3:ReducedRedundancyLostObject, s3:ObjectCreated:*, s3:ObjectCreated:Put, s3:ObjectCreated:Post, s3:ObjectCreated:Copy, s3:ObjectCreated:CompleteMultipartUpload, s3:ObjectRemoved:*, s3:ObjectRemoved:Delete, s3:ObjectRemoved:DeleteMarkerCreated, s3:ObjectRestore:Post, s3:ObjectRestore:Completed
+    #             event: "s3:ReducedRedundancyLostObject", # accepts s3:ReducedRedundancyLostObject, s3:ObjectCreated:*, s3:ObjectCreated:Put, s3:ObjectCreated:Post, s3:ObjectCreated:Copy, s3:ObjectCreated:CompleteMultipartUpload, s3:ObjectRemoved:*, s3:ObjectRemoved:Delete, s3:ObjectRemoved:DeleteMarkerCreated, s3:ObjectRestore:Post, s3:ObjectRestore:Completed
     #             topic: "TopicArn",
     #           },
     #           queue_configuration: {
     #             id: "NotificationId",
-    #             event: "s3:ReducedRedundancyLostObject", # accepts s3:ReducedRedundancyLostObject, s3:ObjectCreated:*, s3:ObjectCreated:Put, s3:ObjectCreated:Post, s3:ObjectCreated:Copy, s3:ObjectCreated:CompleteMultipartUpload, s3:ObjectRemoved:*, s3:ObjectRemoved:Delete, s3:ObjectRemoved:DeleteMarkerCreated
-    #             events: ["s3:ReducedRedundancyLostObject"], # accepts s3:ReducedRedundancyLostObject, s3:ObjectCreated:*, s3:ObjectCreated:Put, s3:ObjectCreated:Post, s3:ObjectCreated:Copy, s3:ObjectCreated:CompleteMultipartUpload, s3:ObjectRemoved:*, s3:ObjectRemoved:Delete, s3:ObjectRemoved:DeleteMarkerCreated
+    #             event: "s3:ReducedRedundancyLostObject", # accepts s3:ReducedRedundancyLostObject, s3:ObjectCreated:*, s3:ObjectCreated:Put, s3:ObjectCreated:Post, s3:ObjectCreated:Copy, s3:ObjectCreated:CompleteMultipartUpload, s3:ObjectRemoved:*, s3:ObjectRemoved:Delete, s3:ObjectRemoved:DeleteMarkerCreated, s3:ObjectRestore:Post, s3:ObjectRestore:Completed
+    #             events: ["s3:ReducedRedundancyLostObject"], # accepts s3:ReducedRedundancyLostObject, s3:ObjectCreated:*, s3:ObjectCreated:Put, s3:ObjectCreated:Post, s3:ObjectCreated:Copy, s3:ObjectCreated:CompleteMultipartUpload, s3:ObjectRemoved:*, s3:ObjectRemoved:Delete, s3:ObjectRemoved:DeleteMarkerCreated, s3:ObjectRestore:Post, s3:ObjectRestore:Completed
     #             queue: "QueueArn",
     #           },
     #           cloud_function_configuration: {
     #             id: "NotificationId",
-    #             event: "s3:ReducedRedundancyLostObject", # accepts s3:ReducedRedundancyLostObject, s3:ObjectCreated:*, s3:ObjectCreated:Put, s3:ObjectCreated:Post, s3:ObjectCreated:Copy, s3:ObjectCreated:CompleteMultipartUpload, s3:ObjectRemoved:*, s3:ObjectRemoved:Delete, s3:ObjectRemoved:DeleteMarkerCreated
-    #             events: ["s3:ReducedRedundancyLostObject"], # accepts s3:ReducedRedundancyLostObject, s3:ObjectCreated:*, s3:ObjectCreated:Put, s3:ObjectCreated:Post, s3:ObjectCreated:Copy, s3:ObjectCreated:CompleteMultipartUpload, s3:ObjectRemoved:*, s3:ObjectRemoved:Delete, s3:ObjectRemoved:DeleteMarkerCreated
+    #             event: "s3:ReducedRedundancyLostObject", # accepts s3:ReducedRedundancyLostObject, s3:ObjectCreated:*, s3:ObjectCreated:Put, s3:ObjectCreated:Post, s3:ObjectCreated:Copy, s3:ObjectCreated:CompleteMultipartUpload, s3:ObjectRemoved:*, s3:ObjectRemoved:Delete, s3:ObjectRemoved:DeleteMarkerCreated, s3:ObjectRestore:Post, s3:ObjectRestore:Completed
+    #             events: ["s3:ReducedRedundancyLostObject"], # accepts s3:ReducedRedundancyLostObject, s3:ObjectCreated:*, s3:ObjectCreated:Put, s3:ObjectCreated:Post, s3:ObjectCreated:Copy, s3:ObjectCreated:CompleteMultipartUpload, s3:ObjectRemoved:*, s3:ObjectRemoved:Delete, s3:ObjectRemoved:DeleteMarkerCreated, s3:ObjectRestore:Post, s3:ObjectRestore:Completed
     #             cloud_function: "CloudFunction",
     #             invocation_role: "CloudFunctionInvocationRole",
     #           },
@@ -6832,7 +7159,7 @@ module Aws::S3
     #               destination: { # required
     #                 bucket: "BucketName", # required
     #                 account: "AccountId",
-    #                 storage_class: "STANDARD", # accepts STANDARD, REDUCED_REDUNDANCY, STANDARD_IA, ONEZONE_IA
+    #                 storage_class: "STANDARD", # accepts STANDARD, REDUCED_REDUNDANCY, STANDARD_IA, ONEZONE_IA, INTELLIGENT_TIERING, GLACIER, DEEP_ARCHIVE
     #                 access_control_translation: {
     #                   owner: "Destination", # required, accepts Destination
     #                 },
@@ -7137,6 +7464,143 @@ module Aws::S3
       include Aws::Structure
     end
 
+    # @!attribute [rw] request_charged
+    #   If present, indicates that the requester was successfully charged
+    #   for the request.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/s3-2006-03-01/PutObjectLegalHoldOutput AWS API Documentation
+    #
+    class PutObjectLegalHoldOutput < Struct.new(
+      :request_charged)
+      include Aws::Structure
+    end
+
+    # @note When making an API call, you may pass PutObjectLegalHoldRequest
+    #   data as a hash:
+    #
+    #       {
+    #         bucket: "BucketName", # required
+    #         key: "ObjectKey", # required
+    #         legal_hold: {
+    #           status: "ON", # accepts ON, OFF
+    #         },
+    #         request_payer: "requester", # accepts requester
+    #         version_id: "ObjectVersionId",
+    #         content_md5: "ContentMD5",
+    #       }
+    #
+    # @!attribute [rw] bucket
+    #   The bucket containing the object that you want to place a Legal Hold
+    #   on.
+    #   @return [String]
+    #
+    # @!attribute [rw] key
+    #   The key name for the object that you want to place a Legal Hold on.
+    #   @return [String]
+    #
+    # @!attribute [rw] legal_hold
+    #   Container element for the Legal Hold configuration you want to apply
+    #   to the specified object.
+    #   @return [Types::ObjectLockLegalHold]
+    #
+    # @!attribute [rw] request_payer
+    #   Confirms that the requester knows that she or he will be charged for
+    #   the request. Bucket owners need not specify this parameter in their
+    #   requests. Documentation on downloading objects from requester pays
+    #   buckets can be found at
+    #   http://docs.aws.amazon.com/AmazonS3/latest/dev/ObjectsinRequesterPaysBuckets.html
+    #   @return [String]
+    #
+    # @!attribute [rw] version_id
+    #   The version ID of the object that you want to place a Legal Hold on.
+    #   @return [String]
+    #
+    # @!attribute [rw] content_md5
+    #   The MD5 hash for the request body.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/s3-2006-03-01/PutObjectLegalHoldRequest AWS API Documentation
+    #
+    class PutObjectLegalHoldRequest < Struct.new(
+      :bucket,
+      :key,
+      :legal_hold,
+      :request_payer,
+      :version_id,
+      :content_md5)
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] request_charged
+    #   If present, indicates that the requester was successfully charged
+    #   for the request.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/s3-2006-03-01/PutObjectLockConfigurationOutput AWS API Documentation
+    #
+    class PutObjectLockConfigurationOutput < Struct.new(
+      :request_charged)
+      include Aws::Structure
+    end
+
+    # @note When making an API call, you may pass PutObjectLockConfigurationRequest
+    #   data as a hash:
+    #
+    #       {
+    #         bucket: "BucketName", # required
+    #         object_lock_configuration: {
+    #           object_lock_enabled: "Enabled", # accepts Enabled
+    #           rule: {
+    #             default_retention: {
+    #               mode: "GOVERNANCE", # accepts GOVERNANCE, COMPLIANCE
+    #               days: 1,
+    #               years: 1,
+    #             },
+    #           },
+    #         },
+    #         request_payer: "requester", # accepts requester
+    #         token: "ObjectLockToken",
+    #         content_md5: "ContentMD5",
+    #       }
+    #
+    # @!attribute [rw] bucket
+    #   The bucket whose Object Lock configuration you want to create or
+    #   replace.
+    #   @return [String]
+    #
+    # @!attribute [rw] object_lock_configuration
+    #   The Object Lock configuration that you want to apply to the
+    #   specified bucket.
+    #   @return [Types::ObjectLockConfiguration]
+    #
+    # @!attribute [rw] request_payer
+    #   Confirms that the requester knows that she or he will be charged for
+    #   the request. Bucket owners need not specify this parameter in their
+    #   requests. Documentation on downloading objects from requester pays
+    #   buckets can be found at
+    #   http://docs.aws.amazon.com/AmazonS3/latest/dev/ObjectsinRequesterPaysBuckets.html
+    #   @return [String]
+    #
+    # @!attribute [rw] token
+    #   A token to allow Object Lock to be enabled for an existing bucket.
+    #   @return [String]
+    #
+    # @!attribute [rw] content_md5
+    #   The MD5 hash for the request body.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/s3-2006-03-01/PutObjectLockConfigurationRequest AWS API Documentation
+    #
+    class PutObjectLockConfigurationRequest < Struct.new(
+      :bucket,
+      :object_lock_configuration,
+      :request_payer,
+      :token,
+      :content_md5)
+      include Aws::Structure
+    end
+
     # @!attribute [rw] expiration
     #   If the object expiration is configured, this will contain the
     #   expiration date (expiry-date) and rule ID (rule-id). The value of
@@ -7217,7 +7681,7 @@ module Aws::S3
     #           "MetadataKey" => "MetadataValue",
     #         },
     #         server_side_encryption: "AES256", # accepts AES256, aws:kms
-    #         storage_class: "STANDARD", # accepts STANDARD, REDUCED_REDUNDANCY, STANDARD_IA, ONEZONE_IA
+    #         storage_class: "STANDARD", # accepts STANDARD, REDUCED_REDUNDANCY, STANDARD_IA, ONEZONE_IA, INTELLIGENT_TIERING, GLACIER, DEEP_ARCHIVE
     #         website_redirect_location: "WebsiteRedirectLocation",
     #         sse_customer_algorithm: "SSECustomerAlgorithm",
     #         sse_customer_key: "SSECustomerKey",
@@ -7225,6 +7689,9 @@ module Aws::S3
     #         ssekms_key_id: "SSEKMSKeyId",
     #         request_payer: "requester", # accepts requester
     #         tagging: "TaggingHeader",
+    #         object_lock_mode: "GOVERNANCE", # accepts GOVERNANCE, COMPLIANCE
+    #         object_lock_retain_until_date: Time.now,
+    #         object_lock_legal_hold_status: "ON", # accepts ON, OFF
     #       }
     #
     # @!attribute [rw] acl
@@ -7263,7 +7730,8 @@ module Aws::S3
     #   @return [Integer]
     #
     # @!attribute [rw] content_md5
-    #   The base64-encoded 128-bit MD5 digest of the part data.
+    #   The base64-encoded 128-bit MD5 digest of the part data. This
+    #   parameter is auto-populated when using the command from the CLI
     #   @return [String]
     #
     # @!attribute [rw] content_type
@@ -7355,6 +7823,20 @@ module Aws::S3
     #   parameters. (For example, "Key1=Value1")
     #   @return [String]
     #
+    # @!attribute [rw] object_lock_mode
+    #   The Object Lock mode that you want to apply to this object.
+    #   @return [String]
+    #
+    # @!attribute [rw] object_lock_retain_until_date
+    #   The date and time when you want this object's Object Lock to
+    #   expire.
+    #   @return [Time]
+    #
+    # @!attribute [rw] object_lock_legal_hold_status
+    #   The Legal Hold status that you want to apply to the specified
+    #   object.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/s3-2006-03-01/PutObjectRequest AWS API Documentation
     #
     class PutObjectRequest < Struct.new(
@@ -7383,7 +7865,87 @@ module Aws::S3
       :sse_customer_key_md5,
       :ssekms_key_id,
       :request_payer,
-      :tagging)
+      :tagging,
+      :object_lock_mode,
+      :object_lock_retain_until_date,
+      :object_lock_legal_hold_status)
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] request_charged
+    #   If present, indicates that the requester was successfully charged
+    #   for the request.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/s3-2006-03-01/PutObjectRetentionOutput AWS API Documentation
+    #
+    class PutObjectRetentionOutput < Struct.new(
+      :request_charged)
+      include Aws::Structure
+    end
+
+    # @note When making an API call, you may pass PutObjectRetentionRequest
+    #   data as a hash:
+    #
+    #       {
+    #         bucket: "BucketName", # required
+    #         key: "ObjectKey", # required
+    #         retention: {
+    #           mode: "GOVERNANCE", # accepts GOVERNANCE, COMPLIANCE
+    #           retain_until_date: Time.now,
+    #         },
+    #         request_payer: "requester", # accepts requester
+    #         version_id: "ObjectVersionId",
+    #         bypass_governance_retention: false,
+    #         content_md5: "ContentMD5",
+    #       }
+    #
+    # @!attribute [rw] bucket
+    #   The bucket that contains the object you want to apply this Object
+    #   Retention configuration to.
+    #   @return [String]
+    #
+    # @!attribute [rw] key
+    #   The key name for the object that you want to apply this Object
+    #   Retention configuration to.
+    #   @return [String]
+    #
+    # @!attribute [rw] retention
+    #   The container element for the Object Retention configuration.
+    #   @return [Types::ObjectLockRetention]
+    #
+    # @!attribute [rw] request_payer
+    #   Confirms that the requester knows that she or he will be charged for
+    #   the request. Bucket owners need not specify this parameter in their
+    #   requests. Documentation on downloading objects from requester pays
+    #   buckets can be found at
+    #   http://docs.aws.amazon.com/AmazonS3/latest/dev/ObjectsinRequesterPaysBuckets.html
+    #   @return [String]
+    #
+    # @!attribute [rw] version_id
+    #   The version ID for the object that you want to apply this Object
+    #   Retention configuration to.
+    #   @return [String]
+    #
+    # @!attribute [rw] bypass_governance_retention
+    #   Indicates whether this operation should bypass Governance-mode
+    #   restrictions.j
+    #   @return [Boolean]
+    #
+    # @!attribute [rw] content_md5
+    #   The MD5 hash for the request body.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/s3-2006-03-01/PutObjectRetentionRequest AWS API Documentation
+    #
+    class PutObjectRetentionRequest < Struct.new(
+      :bucket,
+      :key,
+      :retention,
+      :request_payer,
+      :version_id,
+      :bypass_governance_retention,
+      :content_md5)
       include Aws::Structure
     end
 
@@ -7456,17 +8018,24 @@ module Aws::S3
     #       }
     #
     # @!attribute [rw] bucket
-    #   The name of the Amazon S3 bucket whose Public Access Block
+    #   The name of the Amazon S3 bucket whose `PublicAccessBlock`
     #   configuration you want to set.
     #   @return [String]
     #
     # @!attribute [rw] content_md5
-    #   The MD5 hash of the `PutPublicBlock` request body.
+    #   The MD5 hash of the `PutPublicAccessBlock` request body.
     #   @return [String]
     #
     # @!attribute [rw] public_access_block_configuration
-    #   The Public Access Block configuration that you want to apply to this
-    #   Amazon S3 bucket.
+    #   The `PublicAccessBlock` configuration that you want to apply to this
+    #   Amazon S3 bucket. You can enable the configuration options in any
+    #   combination. For more information about when Amazon S3 considers a
+    #   bucket or object public, see [The Meaning of "Public"][1] in the
+    #   *Amazon Simple Storage Service Developer Guide*.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/AmazonS3/latest/dev/access-control-block-public-access.html#access-control-block-public-access-policy-status
     #   @return [Types::PublicAccessBlockConfiguration]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/s3-2006-03-01/PutPublicAccessBlockRequest AWS API Documentation
@@ -7488,7 +8057,7 @@ module Aws::S3
     #       {
     #         id: "NotificationId",
     #         queue_arn: "QueueArn", # required
-    #         events: ["s3:ReducedRedundancyLostObject"], # required, accepts s3:ReducedRedundancyLostObject, s3:ObjectCreated:*, s3:ObjectCreated:Put, s3:ObjectCreated:Post, s3:ObjectCreated:Copy, s3:ObjectCreated:CompleteMultipartUpload, s3:ObjectRemoved:*, s3:ObjectRemoved:Delete, s3:ObjectRemoved:DeleteMarkerCreated
+    #         events: ["s3:ReducedRedundancyLostObject"], # required, accepts s3:ReducedRedundancyLostObject, s3:ObjectCreated:*, s3:ObjectCreated:Put, s3:ObjectCreated:Post, s3:ObjectCreated:Copy, s3:ObjectCreated:CompleteMultipartUpload, s3:ObjectRemoved:*, s3:ObjectRemoved:Delete, s3:ObjectRemoved:DeleteMarkerCreated, s3:ObjectRestore:Post, s3:ObjectRestore:Completed
     #         filter: {
     #           key: {
     #             filter_rules: [
@@ -7523,7 +8092,7 @@ module Aws::S3
     #
     #
     #
-    #   [1]: http://docs.aws.amazon.com/AmazonS3/latest/dev/NotificationHowTo.html
+    #   [1]: https://docs.aws.amazon.com/AmazonS3/latest/dev/NotificationHowTo.html
     #   @return [Types::NotificationConfigurationFilter]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/s3-2006-03-01/QueueConfiguration AWS API Documentation
@@ -7541,8 +8110,8 @@ module Aws::S3
     #
     #       {
     #         id: "NotificationId",
-    #         event: "s3:ReducedRedundancyLostObject", # accepts s3:ReducedRedundancyLostObject, s3:ObjectCreated:*, s3:ObjectCreated:Put, s3:ObjectCreated:Post, s3:ObjectCreated:Copy, s3:ObjectCreated:CompleteMultipartUpload, s3:ObjectRemoved:*, s3:ObjectRemoved:Delete, s3:ObjectRemoved:DeleteMarkerCreated
-    #         events: ["s3:ReducedRedundancyLostObject"], # accepts s3:ReducedRedundancyLostObject, s3:ObjectCreated:*, s3:ObjectCreated:Put, s3:ObjectCreated:Post, s3:ObjectCreated:Copy, s3:ObjectCreated:CompleteMultipartUpload, s3:ObjectRemoved:*, s3:ObjectRemoved:Delete, s3:ObjectRemoved:DeleteMarkerCreated
+    #         event: "s3:ReducedRedundancyLostObject", # accepts s3:ReducedRedundancyLostObject, s3:ObjectCreated:*, s3:ObjectCreated:Put, s3:ObjectCreated:Post, s3:ObjectCreated:Copy, s3:ObjectCreated:CompleteMultipartUpload, s3:ObjectRemoved:*, s3:ObjectRemoved:Delete, s3:ObjectRemoved:DeleteMarkerCreated, s3:ObjectRestore:Post, s3:ObjectRestore:Completed
+    #         events: ["s3:ReducedRedundancyLostObject"], # accepts s3:ReducedRedundancyLostObject, s3:ObjectCreated:*, s3:ObjectCreated:Put, s3:ObjectCreated:Post, s3:ObjectCreated:Copy, s3:ObjectCreated:CompleteMultipartUpload, s3:ObjectRemoved:*, s3:ObjectRemoved:Delete, s3:ObjectRemoved:DeleteMarkerCreated, s3:ObjectRestore:Post, s3:ObjectRestore:Completed
     #         queue: "QueueArn",
     #       }
     #
@@ -7700,7 +8269,7 @@ module Aws::S3
     #             destination: { # required
     #               bucket: "BucketName", # required
     #               account: "AccountId",
-    #               storage_class: "STANDARD", # accepts STANDARD, REDUCED_REDUNDANCY, STANDARD_IA, ONEZONE_IA
+    #               storage_class: "STANDARD", # accepts STANDARD, REDUCED_REDUNDANCY, STANDARD_IA, ONEZONE_IA, INTELLIGENT_TIERING, GLACIER, DEEP_ARCHIVE
     #               access_control_translation: {
     #                 owner: "Destination", # required, accepts Destination
     #               },
@@ -7769,7 +8338,7 @@ module Aws::S3
     #         destination: { # required
     #           bucket: "BucketName", # required
     #           account: "AccountId",
-    #           storage_class: "STANDARD", # accepts STANDARD, REDUCED_REDUNDANCY, STANDARD_IA, ONEZONE_IA
+    #           storage_class: "STANDARD", # accepts STANDARD, REDUCED_REDUNDANCY, STANDARD_IA, ONEZONE_IA, INTELLIGENT_TIERING, GLACIER, DEEP_ARCHIVE
     #           access_control_translation: {
     #             owner: "Destination", # required, accepts Destination
     #           },
@@ -8076,7 +8645,7 @@ module Aws::S3
     #                   value: "MetadataValue",
     #                 },
     #               ],
-    #               storage_class: "STANDARD", # accepts STANDARD, REDUCED_REDUNDANCY, STANDARD_IA, ONEZONE_IA
+    #               storage_class: "STANDARD", # accepts STANDARD, REDUCED_REDUNDANCY, STANDARD_IA, ONEZONE_IA, INTELLIGENT_TIERING, GLACIER, DEEP_ARCHIVE
     #             },
     #           },
     #         },
@@ -8197,7 +8766,7 @@ module Aws::S3
     #                 value: "MetadataValue",
     #               },
     #             ],
-    #             storage_class: "STANDARD", # accepts STANDARD, REDUCED_REDUNDANCY, STANDARD_IA, ONEZONE_IA
+    #             storage_class: "STANDARD", # accepts STANDARD, REDUCED_REDUNDANCY, STANDARD_IA, ONEZONE_IA, INTELLIGENT_TIERING, GLACIER, DEEP_ARCHIVE
     #           },
     #         },
     #       }
@@ -8299,11 +8868,11 @@ module Aws::S3
     #         transition: {
     #           date: Time.now,
     #           days: 1,
-    #           storage_class: "GLACIER", # accepts GLACIER, STANDARD_IA, ONEZONE_IA
+    #           storage_class: "GLACIER", # accepts GLACIER, STANDARD_IA, ONEZONE_IA, INTELLIGENT_TIERING, DEEP_ARCHIVE
     #         },
     #         noncurrent_version_transition: {
     #           noncurrent_days: 1,
-    #           storage_class: "GLACIER", # accepts GLACIER, STANDARD_IA, ONEZONE_IA
+    #           storage_class: "GLACIER", # accepts GLACIER, STANDARD_IA, ONEZONE_IA, INTELLIGENT_TIERING, DEEP_ARCHIVE
     #         },
     #         noncurrent_version_expiration: {
     #           noncurrent_days: 1,
@@ -8335,12 +8904,13 @@ module Aws::S3
     #
     # @!attribute [rw] noncurrent_version_transition
     #   Container for the transition rule that describes when noncurrent
-    #   objects transition to the STANDARD\_IA, ONEZONE\_IA, or GLACIER
-    #   storage class. If your bucket is versioning-enabled (or versioning
-    #   is suspended), you can set this action to request that Amazon S3
-    #   transition noncurrent object versions to the STANDARD\_IA,
-    #   ONEZONE\_IA, or GLACIER storage class at a specific period in the
-    #   object's lifetime.
+    #   objects transition to the STANDARD\_IA, ONEZONE\_IA,
+    #   INTELLIGENT\_TIERING, GLACIER or DEEP\_ARCHIVE storage class. If
+    #   your bucket is versioning-enabled (or versioning is suspended), you
+    #   can set this action to request that Amazon S3 transition noncurrent
+    #   object versions to the STANDARD\_IA, ONEZONE\_IA,
+    #   INTELLIGENT\_TIERING, GLACIER or DEEP\_ARCHIVE storage class at a
+    #   specific period in the object's lifetime.
     #   @return [Types::NoncurrentVersionTransition]
     #
     # @!attribute [rw] noncurrent_version_expiration
@@ -8439,7 +9009,7 @@ module Aws::S3
     #             value: "MetadataValue",
     #           },
     #         ],
-    #         storage_class: "STANDARD", # accepts STANDARD, REDUCED_REDUNDANCY, STANDARD_IA, ONEZONE_IA
+    #         storage_class: "STANDARD", # accepts STANDARD, REDUCED_REDUNDANCY, STANDARD_IA, ONEZONE_IA, INTELLIGENT_TIERING, GLACIER, DEEP_ARCHIVE
     #       }
     #
     # @!attribute [rw] bucket_name
@@ -8540,7 +9110,7 @@ module Aws::S3
     #
     #
     #
-    # [1]: http://docs.aws.amazon.com/AmazonS3/latest/API/RESTObjectSELECTContent.html
+    # [1]: https://docs.aws.amazon.com/AmazonS3/latest/API/RESTObjectSELECTContent.html
     #
     # @note When making an API call, you may pass SelectObjectContentRequest
     #   data as a hash:
@@ -8602,7 +9172,7 @@ module Aws::S3
     #
     #
     #
-    #   [1]: http://docs.aws.amazon.com/AmazonS3/latest/dev/ServerSideEncryptionCustomerKeys.html
+    #   [1]: https://docs.aws.amazon.com/AmazonS3/latest/dev/ServerSideEncryptionCustomerKeys.html
     #   @return [String]
     #
     # @!attribute [rw] sse_customer_key
@@ -8611,7 +9181,7 @@ module Aws::S3
     #
     #
     #
-    #   [1]: http://docs.aws.amazon.com/AmazonS3/latest/dev/ServerSideEncryptionCustomerKeys.html
+    #   [1]: https://docs.aws.amazon.com/AmazonS3/latest/dev/ServerSideEncryptionCustomerKeys.html
     #   @return [String]
     #
     # @!attribute [rw] sse_customer_key_md5
@@ -8620,7 +9190,7 @@ module Aws::S3
     #
     #
     #
-    #   [1]: http://docs.aws.amazon.com/AmazonS3/latest/dev/ServerSideEncryptionCustomerKeys.html
+    #   [1]: https://docs.aws.amazon.com/AmazonS3/latest/dev/ServerSideEncryptionCustomerKeys.html
     #   @return [String]
     #
     # @!attribute [rw] expression
@@ -9037,7 +9607,7 @@ module Aws::S3
     #       {
     #         id: "NotificationId",
     #         topic_arn: "TopicArn", # required
-    #         events: ["s3:ReducedRedundancyLostObject"], # required, accepts s3:ReducedRedundancyLostObject, s3:ObjectCreated:*, s3:ObjectCreated:Put, s3:ObjectCreated:Post, s3:ObjectCreated:Copy, s3:ObjectCreated:CompleteMultipartUpload, s3:ObjectRemoved:*, s3:ObjectRemoved:Delete, s3:ObjectRemoved:DeleteMarkerCreated
+    #         events: ["s3:ReducedRedundancyLostObject"], # required, accepts s3:ReducedRedundancyLostObject, s3:ObjectCreated:*, s3:ObjectCreated:Put, s3:ObjectCreated:Post, s3:ObjectCreated:Copy, s3:ObjectCreated:CompleteMultipartUpload, s3:ObjectRemoved:*, s3:ObjectRemoved:Delete, s3:ObjectRemoved:DeleteMarkerCreated, s3:ObjectRestore:Post, s3:ObjectRestore:Completed
     #         filter: {
     #           key: {
     #             filter_rules: [
@@ -9072,7 +9642,7 @@ module Aws::S3
     #
     #
     #
-    #   [1]: http://docs.aws.amazon.com/AmazonS3/latest/dev/NotificationHowTo.html
+    #   [1]: https://docs.aws.amazon.com/AmazonS3/latest/dev/NotificationHowTo.html
     #   @return [Types::NotificationConfigurationFilter]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/s3-2006-03-01/TopicConfiguration AWS API Documentation
@@ -9090,8 +9660,8 @@ module Aws::S3
     #
     #       {
     #         id: "NotificationId",
-    #         events: ["s3:ReducedRedundancyLostObject"], # accepts s3:ReducedRedundancyLostObject, s3:ObjectCreated:*, s3:ObjectCreated:Put, s3:ObjectCreated:Post, s3:ObjectCreated:Copy, s3:ObjectCreated:CompleteMultipartUpload, s3:ObjectRemoved:*, s3:ObjectRemoved:Delete, s3:ObjectRemoved:DeleteMarkerCreated
-    #         event: "s3:ReducedRedundancyLostObject", # accepts s3:ReducedRedundancyLostObject, s3:ObjectCreated:*, s3:ObjectCreated:Put, s3:ObjectCreated:Post, s3:ObjectCreated:Copy, s3:ObjectCreated:CompleteMultipartUpload, s3:ObjectRemoved:*, s3:ObjectRemoved:Delete, s3:ObjectRemoved:DeleteMarkerCreated
+    #         events: ["s3:ReducedRedundancyLostObject"], # accepts s3:ReducedRedundancyLostObject, s3:ObjectCreated:*, s3:ObjectCreated:Put, s3:ObjectCreated:Post, s3:ObjectCreated:Copy, s3:ObjectCreated:CompleteMultipartUpload, s3:ObjectRemoved:*, s3:ObjectRemoved:Delete, s3:ObjectRemoved:DeleteMarkerCreated, s3:ObjectRestore:Post, s3:ObjectRestore:Completed
+    #         event: "s3:ReducedRedundancyLostObject", # accepts s3:ReducedRedundancyLostObject, s3:ObjectCreated:*, s3:ObjectCreated:Put, s3:ObjectCreated:Post, s3:ObjectCreated:Copy, s3:ObjectCreated:CompleteMultipartUpload, s3:ObjectRemoved:*, s3:ObjectRemoved:Delete, s3:ObjectRemoved:DeleteMarkerCreated, s3:ObjectRestore:Post, s3:ObjectRestore:Completed
     #         topic: "TopicArn",
     #       }
     #
@@ -9129,7 +9699,7 @@ module Aws::S3
     #       {
     #         date: Time.now,
     #         days: 1,
-    #         storage_class: "GLACIER", # accepts GLACIER, STANDARD_IA, ONEZONE_IA
+    #         storage_class: "GLACIER", # accepts GLACIER, STANDARD_IA, ONEZONE_IA, INTELLIGENT_TIERING, DEEP_ARCHIVE
     #       }
     #
     # @!attribute [rw] date
@@ -9259,7 +9829,7 @@ module Aws::S3
     #   must use the form bytes=first-last, where the first and last are the
     #   zero-based byte offsets to copy. For example, bytes=0-9 indicates
     #   that you want to copy the first ten bytes of the source. You can
-    #   copy a range only if the source object is greater than 5 GB.
+    #   copy a range only if the source object is greater than 5 MB.
     #   @return [String]
     #
     # @!attribute [rw] key