aws-sdk-s3control 1.33.0 → 1.37.0

data/lib/aws-sdk-s3control/client_api.rb

@@ -20,6 +20,7 @@ module Aws::S3Control
     AccountId = Shapes::StringShape.new(name: 'AccountId')
     AccountLevel = Shapes::StructureShape.new(name: 'AccountLevel')
     ActivityMetrics = Shapes::StructureShape.new(name: 'ActivityMetrics')
+    Alias = Shapes::StringShape.new(name: 'Alias')
     AwsLambdaTransformation = Shapes::StructureShape.new(name: 'AwsLambdaTransformation')
     AwsLambdaTransformationPayload = Shapes::StringShape.new(name: 'AwsLambdaTransformationPayload')
     AwsOrgArn = Shapes::StringShape.new(name: 'AwsOrgArn')
@@ -65,6 +66,7 @@ module Aws::S3Control
     DeleteStorageLensConfigurationTaggingResult = Shapes::StructureShape.new(name: 'DeleteStorageLensConfigurationTaggingResult')
     DescribeJobRequest = Shapes::StructureShape.new(name: 'DescribeJobRequest')
     DescribeJobResult = Shapes::StructureShape.new(name: 'DescribeJobResult')
+    Endpoints = Shapes::MapShape.new(name: 'Endpoints')
     ExceptionMessage = Shapes::StringShape.new(name: 'ExceptionMessage')
     Exclude = Shapes::StructureShape.new(name: 'Exclude')
     ExpirationStatus = Shapes::StringShape.new(name: 'ExpirationStatus')
@@ -186,7 +188,7 @@ module Aws::S3Control
     ObjectLambdaAllowedFeature = Shapes::StringShape.new(name: 'ObjectLambdaAllowedFeature')
     ObjectLambdaAllowedFeaturesList = Shapes::ListShape.new(name: 'ObjectLambdaAllowedFeaturesList')
     ObjectLambdaConfiguration = Shapes::StructureShape.new(name: 'ObjectLambdaConfiguration')
-    ObjectLambdaContentTransformation = Shapes::StructureShape.new(name: 'ObjectLambdaContentTransformation')
+    ObjectLambdaContentTransformation = Shapes::UnionShape.new(name: 'ObjectLambdaContentTransformation')
     ObjectLambdaPolicy = Shapes::StringShape.new(name: 'ObjectLambdaPolicy')
     ObjectLambdaSupportingAccessPointArn = Shapes::StringShape.new(name: 'ObjectLambdaSupportingAccessPointArn')
     ObjectLambdaTransformationConfiguration = Shapes::StructureShape.new(name: 'ObjectLambdaTransformationConfiguration')
@@ -300,6 +302,7 @@ module Aws::S3Control
     AccessPoint.add_member(:vpc_configuration, Shapes::ShapeRef.new(shape: VpcConfiguration, location_name: "VpcConfiguration"))
     AccessPoint.add_member(:bucket, Shapes::ShapeRef.new(shape: BucketName, required: true, location_name: "Bucket"))
     AccessPoint.add_member(:access_point_arn, Shapes::ShapeRef.new(shape: S3AccessPointArn, location_name: "AccessPointArn"))
+    AccessPoint.add_member(:alias, Shapes::ShapeRef.new(shape: Alias, location_name: "Alias"))
     AccessPoint.struct_class = Types::AccessPoint
 
     AccessPointList.member = Shapes::ShapeRef.new(shape: AccessPoint, location_name: "AccessPoint")
@@ -344,6 +347,7 @@ module Aws::S3Control
     CreateAccessPointRequest.struct_class = Types::CreateAccessPointRequest
 
     CreateAccessPointResult.add_member(:access_point_arn, Shapes::ShapeRef.new(shape: S3AccessPointArn, location_name: "AccessPointArn"))
+    CreateAccessPointResult.add_member(:alias, Shapes::ShapeRef.new(shape: Alias, location_name: "Alias"))
     CreateAccessPointResult.struct_class = Types::CreateAccessPointResult
 
     CreateBucketConfiguration.add_member(:location_constraint, Shapes::ShapeRef.new(shape: BucketLocationConstraint, location_name: "LocationConstraint"))
@@ -440,6 +444,9 @@ module Aws::S3Control
     DescribeJobResult.add_member(:job, Shapes::ShapeRef.new(shape: JobDescriptor, location_name: "Job"))
     DescribeJobResult.struct_class = Types::DescribeJobResult
 
+    Endpoints.key = Shapes::ShapeRef.new(shape: NonEmptyMaxLength64String)
+    Endpoints.value = Shapes::ShapeRef.new(shape: NonEmptyMaxLength1024String)
+
     Exclude.add_member(:buckets, Shapes::ShapeRef.new(shape: Buckets, location_name: "Buckets"))
     Exclude.add_member(:regions, Shapes::ShapeRef.new(shape: Regions, location_name: "Regions"))
     Exclude.struct_class = Types::Exclude
@@ -498,6 +505,9 @@ module Aws::S3Control
     GetAccessPointResult.add_member(:vpc_configuration, Shapes::ShapeRef.new(shape: VpcConfiguration, location_name: "VpcConfiguration"))
     GetAccessPointResult.add_member(:public_access_block_configuration, Shapes::ShapeRef.new(shape: PublicAccessBlockConfiguration, location_name: "PublicAccessBlockConfiguration"))
     GetAccessPointResult.add_member(:creation_date, Shapes::ShapeRef.new(shape: CreationDate, location_name: "CreationDate"))
+    GetAccessPointResult.add_member(:alias, Shapes::ShapeRef.new(shape: Alias, location_name: "Alias"))
+    GetAccessPointResult.add_member(:access_point_arn, Shapes::ShapeRef.new(shape: S3AccessPointArn, location_name: "AccessPointArn"))
+    GetAccessPointResult.add_member(:endpoints, Shapes::ShapeRef.new(shape: Endpoints, location_name: "Endpoints"))
     GetAccessPointResult.struct_class = Types::GetAccessPointResult
 
     GetBucketLifecycleConfigurationRequest.add_member(:account_id, Shapes::ShapeRef.new(shape: AccountId, required: true, location: "header", location_name: "x-amz-account-id", metadata: {"hostLabel"=>true, "hostLabelName"=>"AccountId"}))
@@ -771,6 +781,9 @@ module Aws::S3Control
     ObjectLambdaConfiguration.struct_class = Types::ObjectLambdaConfiguration
 
     ObjectLambdaContentTransformation.add_member(:aws_lambda, Shapes::ShapeRef.new(shape: AwsLambdaTransformation, location_name: "AwsLambda"))
+    ObjectLambdaContentTransformation.add_member(:unknown, Shapes::ShapeRef.new(shape: nil, location_name: 'unknown'))
+    ObjectLambdaContentTransformation.add_member_subclass(:aws_lambda, Types::ObjectLambdaContentTransformation::AwsLambda)
+    ObjectLambdaContentTransformation.add_member_subclass(:unknown, Types::ObjectLambdaContentTransformation::Unknown)
     ObjectLambdaContentTransformation.struct_class = Types::ObjectLambdaContentTransformation
 
     ObjectLambdaTransformationConfiguration.add_member(:actions, Shapes::ShapeRef.new(shape: ObjectLambdaTransformationConfigurationActionsList, required: true, location_name: "Actions"))
@@ -901,6 +914,7 @@ module Aws::S3Control
     S3CopyObjectOperation.add_member(:object_lock_legal_hold_status, Shapes::ShapeRef.new(shape: S3ObjectLockLegalHoldStatus, location_name: "ObjectLockLegalHoldStatus"))
     S3CopyObjectOperation.add_member(:object_lock_mode, Shapes::ShapeRef.new(shape: S3ObjectLockMode, location_name: "ObjectLockMode"))
     S3CopyObjectOperation.add_member(:object_lock_retain_until_date, Shapes::ShapeRef.new(shape: TimeStamp, location_name: "ObjectLockRetainUntilDate"))
+    S3CopyObjectOperation.add_member(:bucket_key_enabled, Shapes::ShapeRef.new(shape: Boolean, location_name: "BucketKeyEnabled"))
     S3CopyObjectOperation.struct_class = Types::S3CopyObjectOperation
 
     S3DeleteObjectTaggingOperation.struct_class = Types::S3DeleteObjectTaggingOperation

data/lib/aws-sdk-s3control/types.rb

@@ -52,7 +52,7 @@ module Aws::S3Control
     #   if one exists.
     #
     #   <note markdown="1"> This element is empty if this access point is an Amazon S3 on
-    #   Outposts access point that is used by other AWS services.
+    #   Outposts access point that is used by other Amazon Web Services.
     #
     #    </note>
     #   @return [Types::VpcConfiguration]
@@ -65,6 +65,10 @@ module Aws::S3Control
     #   The ARN for the access point.
     #   @return [String]
     #
+    # @!attribute [rw] alias
+    #   The name or alias of the access point.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/s3control-2018-08-20/AccessPoint AWS API Documentation
     #
     class AccessPoint < Struct.new(
@@ -72,7 +76,8 @@ module Aws::S3Control
       :network_origin,
       :vpc_configuration,
       :bucket,
-      :access_point_arn)
+      :access_point_arn,
+      :alias)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -142,7 +147,7 @@ module Aws::S3Control
       include Aws::Structure
     end
 
-    # AWS Lambda function used to transform objects through an Object Lambda
+    # Lambda function used to transform objects through an Object Lambda
     # Access Point.
     #
     # @note When making an API call, you may pass AwsLambdaTransformation
@@ -154,7 +159,7 @@ module Aws::S3Control
     #       }
     #
     # @!attribute [rw] function_arn
-    #   The Amazon Resource Name (ARN) of the AWS Lambda function.
+    #   The Amazon Resource Name (ARN) of the Lambda function.
     #   @return [String]
     #
     # @!attribute [rw] function_payload
@@ -183,7 +188,7 @@ module Aws::S3Control
     end
 
     # The requested Outposts bucket name is not available. The bucket
-    # namespace is shared by all users of the AWS Outposts in this Region.
+    # namespace is shared by all users of the Outposts in this Region.
     # Select a different name and try again.
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/s3control-2018-08-20/BucketAlreadyExists AWS API Documentation
@@ -262,7 +267,7 @@ module Aws::S3Control
     #       }
     #
     # @!attribute [rw] account_id
-    #   The AWS account ID for owner of the specified Object Lambda Access
+    #   The account ID for owner of the specified Object Lambda Access
     #   Point.
     #   @return [String]
     #
@@ -315,7 +320,7 @@ module Aws::S3Control
     #       }
     #
     # @!attribute [rw] account_id
-    #   The AWS account ID for the owner of the bucket for which you want to
+    #   The account ID for the owner of the bucket for which you want to
     #   create an access point.
     #   @return [String]
     #
@@ -330,8 +335,9 @@ module Aws::S3Control
     #   For using this parameter with Amazon S3 on Outposts with the REST
     #   API, you must specify the name and the x-amz-outpost-id as well.
     #
-    #   For using this parameter with S3 on Outposts with the AWS SDK and
-    #   CLI, you must specify the ARN of the bucket accessed in the format
+    #   For using this parameter with S3 on Outposts with the Amazon Web
+    #   Services SDK and CLI, you must specify the ARN of the bucket
+    #   accessed in the format
     #   `arn:aws:s3-outposts:<Region>:<account-id>:outpost/<outpost-id>/bucket/<my-bucket-name>`.
     #   For example, to access the bucket `reports` through outpost
     #   `my-outpost` owned by account `123456789012` in Region `us-west-2`,
@@ -375,10 +381,15 @@ module Aws::S3Control
     #    </note>
     #   @return [String]
     #
+    # @!attribute [rw] alias
+    #   The name or alias of the access point.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/s3control-2018-08-20/CreateAccessPointResult AWS API Documentation
     #
     class CreateAccessPointResult < Struct.new(
-      :access_point_arn)
+      :access_point_arn,
+      :alias)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -538,8 +549,9 @@ module Aws::S3Control
     #   For using this parameter with Amazon S3 on Outposts with the REST
     #   API, you must specify the name and the x-amz-outpost-id as well.
     #
-    #   For using this parameter with S3 on Outposts with the AWS SDK and
-    #   CLI, you must specify the ARN of the bucket accessed in the format
+    #   For using this parameter with S3 on Outposts with the Amazon Web
+    #   Services SDK and CLI, you must specify the ARN of the bucket
+    #   accessed in the format
     #   `arn:aws:s3-outposts:<Region>:<account-id>:outpost/<outpost-id>/bucket/<my-bucket-name>`.
     #   For example, to access the bucket `reports` through outpost
     #   `my-outpost` owned by account `123456789012` in Region `us-west-2`,
@@ -612,6 +624,7 @@ module Aws::S3Control
     #             object_lock_legal_hold_status: "OFF", # accepts OFF, ON
     #             object_lock_mode: "COMPLIANCE", # accepts COMPLIANCE, GOVERNANCE
     #             object_lock_retain_until_date: Time.now,
+    #             bucket_key_enabled: false,
     #           },
     #           s3_put_object_acl: {
     #             access_control_policy: {
@@ -692,7 +705,7 @@ module Aws::S3Control
     #       }
     #
     # @!attribute [rw] account_id
-    #   The AWS account ID that creates the job.
+    #   The account ID that creates the job.
     #   @return [String]
     #
     # @!attribute [rw] confirmation_required
@@ -740,7 +753,7 @@ module Aws::S3Control
     #   @return [Integer]
     #
     # @!attribute [rw] role_arn
-    #   The Amazon Resource Name (ARN) for the AWS Identity and Access
+    #   The Amazon Resource Name (ARN) for the Identity and Access
     #   Management (IAM) role that Batch Operations will use to run this
     #   job's action on every object in the manifest.
     #   @return [String]
@@ -851,9 +864,9 @@ module Aws::S3Control
     #   For using this parameter with Amazon S3 on Outposts with the REST
     #   API, you must specify the name and the x-amz-outpost-id as well.
     #
-    #   For using this parameter with S3 on Outposts with the AWS SDK and
-    #   CLI, you must specify the ARN of the access point accessed in the
-    #   format
+    #   For using this parameter with S3 on Outposts with the Amazon Web
+    #   Services SDK and CLI, you must specify the ARN of the access point
+    #   accessed in the format
     #   `arn:aws:s3-outposts:<Region>:<account-id>:outpost/<outpost-id>/accesspoint/<my-accesspoint-name>`.
     #   For example, to access the access point `reports-ap` through outpost
     #   `my-outpost` owned by account `123456789012` in Region `us-west-2`,
@@ -889,9 +902,9 @@ module Aws::S3Control
     #   For using this parameter with Amazon S3 on Outposts with the REST
     #   API, you must specify the name and the x-amz-outpost-id as well.
     #
-    #   For using this parameter with S3 on Outposts with the AWS SDK and
-    #   CLI, you must specify the ARN of the access point accessed in the
-    #   format
+    #   For using this parameter with S3 on Outposts with the Amazon Web
+    #   Services SDK and CLI, you must specify the ARN of the access point
+    #   accessed in the format
     #   `arn:aws:s3-outposts:<Region>:<account-id>:outpost/<outpost-id>/accesspoint/<my-accesspoint-name>`.
     #   For example, to access the access point `reports-ap` through outpost
     #   `my-outpost` owned by account `123456789012` in Region `us-west-2`,
@@ -927,8 +940,9 @@ module Aws::S3Control
     #   For using this parameter with Amazon S3 on Outposts with the REST
     #   API, you must specify the name and the x-amz-outpost-id as well.
     #
-    #   For using this parameter with S3 on Outposts with the AWS SDK and
-    #   CLI, you must specify the ARN of the bucket accessed in the format
+    #   For using this parameter with S3 on Outposts with the Amazon Web
+    #   Services SDK and CLI, you must specify the ARN of the bucket
+    #   accessed in the format
     #   `arn:aws:s3-outposts:<Region>:<account-id>:outpost/<outpost-id>/bucket/<my-bucket-name>`.
     #   For example, to access the bucket `reports` through outpost
     #   `my-outpost` owned by account `123456789012` in Region `us-west-2`,
@@ -964,8 +978,9 @@ module Aws::S3Control
     #   For using this parameter with Amazon S3 on Outposts with the REST
     #   API, you must specify the name and the x-amz-outpost-id as well.
     #
-    #   For using this parameter with S3 on Outposts with the AWS SDK and
-    #   CLI, you must specify the ARN of the bucket accessed in the format
+    #   For using this parameter with S3 on Outposts with the Amazon Web
+    #   Services SDK and CLI, you must specify the ARN of the bucket
+    #   accessed in the format
     #   `arn:aws:s3-outposts:<Region>:<account-id>:outpost/<outpost-id>/bucket/<my-bucket-name>`.
     #   For example, to access the bucket `reports` through outpost
     #   `my-outpost` owned by account `123456789012` in Region `us-west-2`,
@@ -1001,8 +1016,9 @@ module Aws::S3Control
     #   For using this parameter with Amazon S3 on Outposts with the REST
     #   API, you must specify the name and the x-amz-outpost-id as well.
     #
-    #   For using this parameter with S3 on Outposts with the AWS SDK and
-    #   CLI, you must specify the ARN of the bucket accessed in the format
+    #   For using this parameter with S3 on Outposts with the Amazon Web
+    #   Services SDK and CLI, you must specify the ARN of the bucket
+    #   accessed in the format
     #   `arn:aws:s3-outposts:<Region>:<account-id>:outpost/<outpost-id>/bucket/<my-bucket-name>`.
     #   For example, to access the bucket `reports` through outpost
     #   `my-outpost` owned by account `123456789012` in Region `us-west-2`,
@@ -1029,7 +1045,7 @@ module Aws::S3Control
     #       }
     #
     # @!attribute [rw] account_id
-    #   The AWS account ID of the Outposts bucket tag set to be removed.
+    #   The account ID of the Outposts bucket tag set to be removed.
     #   @return [String]
     #
     # @!attribute [rw] bucket
@@ -1038,8 +1054,9 @@ module Aws::S3Control
     #   For using this parameter with Amazon S3 on Outposts with the REST
     #   API, you must specify the name and the x-amz-outpost-id as well.
     #
-    #   For using this parameter with S3 on Outposts with the AWS SDK and
-    #   CLI, you must specify the ARN of the bucket accessed in the format
+    #   For using this parameter with S3 on Outposts with the Amazon Web
+    #   Services SDK and CLI, you must specify the ARN of the bucket
+    #   accessed in the format
     #   `arn:aws:s3-outposts:<Region>:<account-id>:outpost/<outpost-id>/bucket/<my-bucket-name>`.
     #   For example, to access the bucket `reports` through outpost
     #   `my-outpost` owned by account `123456789012` in Region `us-west-2`,
@@ -1066,7 +1083,7 @@ module Aws::S3Control
     #       }
     #
     # @!attribute [rw] account_id
-    #   The AWS account ID associated with the S3 Batch Operations job.
+    #   The account ID associated with the S3 Batch Operations job.
     #   @return [String]
     #
     # @!attribute [rw] job_id
@@ -1095,7 +1112,7 @@ module Aws::S3Control
     #       }
     #
     # @!attribute [rw] account_id
-    #   The account ID for the AWS account whose `PublicAccessBlock`
+    #   The account ID for the account whose `PublicAccessBlock`
     #   configuration you want to remove.
     #   @return [String]
     #
@@ -1170,7 +1187,7 @@ module Aws::S3Control
     #       }
     #
     # @!attribute [rw] account_id
-    #   The AWS account ID associated with the S3 Batch Operations job.
+    #   The account ID associated with the S3 Batch Operations job.
     #   @return [String]
     #
     # @!attribute [rw] job_id
@@ -1371,9 +1388,9 @@ module Aws::S3Control
     #   For using this parameter with Amazon S3 on Outposts with the REST
     #   API, you must specify the name and the x-amz-outpost-id as well.
     #
-    #   For using this parameter with S3 on Outposts with the AWS SDK and
-    #   CLI, you must specify the ARN of the access point accessed in the
-    #   format
+    #   For using this parameter with S3 on Outposts with the Amazon Web
+    #   Services SDK and CLI, you must specify the ARN of the access point
+    #   accessed in the format
     #   `arn:aws:s3-outposts:<Region>:<account-id>:outpost/<outpost-id>/accesspoint/<my-accesspoint-name>`.
     #   For example, to access the access point `reports-ap` through outpost
     #   `my-outpost` owned by account `123456789012` in Region `us-west-2`,
@@ -1505,9 +1522,9 @@ module Aws::S3Control
     #   For using this parameter with Amazon S3 on Outposts with the REST
     #   API, you must specify the name and the x-amz-outpost-id as well.
     #
-    #   For using this parameter with S3 on Outposts with the AWS SDK and
-    #   CLI, you must specify the ARN of the access point accessed in the
-    #   format
+    #   For using this parameter with S3 on Outposts with the Amazon Web
+    #   Services SDK and CLI, you must specify the ARN of the access point
+    #   accessed in the format
     #   `arn:aws:s3-outposts:<Region>:<account-id>:outpost/<outpost-id>/accesspoint/<my-accesspoint-name>`.
     #   For example, to access the access point `reports-ap` through outpost
     #   `my-outpost` owned by account `123456789012` in Region `us-west-2`,
@@ -1549,7 +1566,7 @@ module Aws::S3Control
     #   specified access point.
     #
     #   <note markdown="1"> This element is empty if this access point is an Amazon S3 on
-    #   Outposts access point that is used by other AWS services.
+    #   Outposts access point that is used by other Amazon Web Services.
     #
     #    </note>
     #   @return [Types::VpcConfiguration]
@@ -1572,6 +1589,18 @@ module Aws::S3Control
     #   The date and time when the specified access point was created.
     #   @return [Time]
     #
+    # @!attribute [rw] alias
+    #   The name or alias of the access point.
+    #   @return [String]
+    #
+    # @!attribute [rw] access_point_arn
+    #   The ARN of the access point.
+    #   @return [String]
+    #
+    # @!attribute [rw] endpoints
+    #   The VPC endpoint for the access point.
+    #   @return [Hash<String,String>]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/s3control-2018-08-20/GetAccessPointResult AWS API Documentation
     #
     class GetAccessPointResult < Struct.new(
@@ -1580,7 +1609,10 @@ module Aws::S3Control
       :network_origin,
       :vpc_configuration,
       :public_access_block_configuration,
-      :creation_date)
+      :creation_date,
+      :alias,
+      :access_point_arn,
+      :endpoints)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -1594,7 +1626,7 @@ module Aws::S3Control
     #       }
     #
     # @!attribute [rw] account_id
-    #   The AWS account ID of the Outposts bucket.
+    #   The account ID of the Outposts bucket.
     #   @return [String]
     #
     # @!attribute [rw] bucket
@@ -1603,8 +1635,9 @@ module Aws::S3Control
     #   For using this parameter with Amazon S3 on Outposts with the REST
     #   API, you must specify the name and the x-amz-outpost-id as well.
     #
-    #   For using this parameter with S3 on Outposts with the AWS SDK and
-    #   CLI, you must specify the ARN of the bucket accessed in the format
+    #   For using this parameter with S3 on Outposts with the Amazon Web
+    #   Services SDK and CLI, you must specify the ARN of the bucket
+    #   accessed in the format
     #   `arn:aws:s3-outposts:<Region>:<account-id>:outpost/<outpost-id>/bucket/<my-bucket-name>`.
     #   For example, to access the bucket `reports` through outpost
     #   `my-outpost` owned by account `123456789012` in Region `us-west-2`,
@@ -1643,7 +1676,7 @@ module Aws::S3Control
     #       }
     #
     # @!attribute [rw] account_id
-    #   The AWS account ID of the Outposts bucket.
+    #   The account ID of the Outposts bucket.
     #   @return [String]
     #
     # @!attribute [rw] bucket
@@ -1652,8 +1685,9 @@ module Aws::S3Control
     #   For using this parameter with Amazon S3 on Outposts with the REST
     #   API, you must specify the name and the x-amz-outpost-id as well.
     #
-    #   For using this parameter with S3 on Outposts with the AWS SDK and
-    #   CLI, you must specify the ARN of the bucket accessed in the format
+    #   For using this parameter with S3 on Outposts with the Amazon Web
+    #   Services SDK and CLI, you must specify the ARN of the bucket
+    #   accessed in the format
     #   `arn:aws:s3-outposts:<Region>:<account-id>:outpost/<outpost-id>/bucket/<my-bucket-name>`.
     #   For example, to access the bucket `reports` through outpost
     #   `my-outpost` owned by account `123456789012` in Region `us-west-2`,
@@ -1692,7 +1726,7 @@ module Aws::S3Control
     #       }
     #
     # @!attribute [rw] account_id
-    #   The AWS account ID of the Outposts bucket.
+    #   The account ID of the Outposts bucket.
     #   @return [String]
     #
     # @!attribute [rw] bucket
@@ -1701,8 +1735,9 @@ module Aws::S3Control
     #   For using this parameter with Amazon S3 on Outposts with the REST
     #   API, you must specify the name and the x-amz-outpost-id as well.
     #
-    #   For using this parameter with S3 on Outposts with the AWS SDK and
-    #   CLI, you must specify the ARN of the bucket accessed in the format
+    #   For using this parameter with S3 on Outposts with the Amazon Web
+    #   Services SDK and CLI, you must specify the ARN of the bucket
+    #   accessed in the format
     #   `arn:aws:s3-outposts:<Region>:<account-id>:outpost/<outpost-id>/bucket/<my-bucket-name>`.
     #   For example, to access the bucket `reports` through outpost
     #   `my-outpost` owned by account `123456789012` in Region `us-west-2`,
@@ -1750,7 +1785,7 @@ module Aws::S3Control
     #       }
     #
     # @!attribute [rw] account_id
-    #   The AWS account ID of the Outposts bucket.
+    #   The account ID of the Outposts bucket.
     #   @return [String]
     #
     # @!attribute [rw] bucket
@@ -1759,8 +1794,9 @@ module Aws::S3Control
     #   For using this parameter with Amazon S3 on Outposts with the REST
     #   API, you must specify the name and the x-amz-outpost-id as well.
     #
-    #   For using this parameter with S3 on Outposts with the AWS SDK and
-    #   CLI, you must specify the ARN of the bucket accessed in the format
+    #   For using this parameter with S3 on Outposts with the Amazon Web
+    #   Services SDK and CLI, you must specify the ARN of the bucket
+    #   accessed in the format
     #   `arn:aws:s3-outposts:<Region>:<account-id>:outpost/<outpost-id>/bucket/<my-bucket-name>`.
     #   For example, to access the bucket `reports` through outpost
     #   `my-outpost` owned by account `123456789012` in Region `us-west-2`,
@@ -1799,7 +1835,7 @@ module Aws::S3Control
     #       }
     #
     # @!attribute [rw] account_id
-    #   The AWS account ID associated with the S3 Batch Operations job.
+    #   The account ID associated with the S3 Batch Operations job.
     #   @return [String]
     #
     # @!attribute [rw] job_id
@@ -1830,7 +1866,7 @@ module Aws::S3Control
 
     # @!attribute [rw] public_access_block_configuration
     #   The `PublicAccessBlock` configuration currently in effect for this
-    #   AWS account.
+    #   account.
     #   @return [Types::PublicAccessBlockConfiguration]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/s3control-2018-08-20/GetPublicAccessBlockOutput AWS API Documentation
@@ -1849,7 +1885,7 @@ module Aws::S3Control
     #       }
     #
     # @!attribute [rw] account_id
-    #   The account ID for the AWS account whose `PublicAccessBlock`
+    #   The account ID for the account whose `PublicAccessBlock`
     #   configuration you want to retrieve.
     #   @return [String]
     #
@@ -2077,7 +2113,7 @@ module Aws::S3Control
     #   @return [Time]
     #
     # @!attribute [rw] role_arn
-    #   The Amazon Resource Name (ARN) for the AWS Identity and Access
+    #   The Amazon Resource Name (ARN) for the Identity and Access
     #   Management (IAM) role assigned to run the tasks for this job.
     #   @return [String]
     #
@@ -2362,6 +2398,7 @@ module Aws::S3Control
     #           object_lock_legal_hold_status: "OFF", # accepts OFF, ON
     #           object_lock_mode: "COMPLIANCE", # accepts COMPLIANCE, GOVERNANCE
     #           object_lock_retain_until_date: Time.now,
+    #           bucket_key_enabled: false,
     #         },
     #         s3_put_object_acl: {
     #           access_control_policy: {
@@ -2413,7 +2450,7 @@ module Aws::S3Control
     #       }
     #
     # @!attribute [rw] lambda_invoke
-    #   Directs the specified job to invoke an AWS Lambda function on every
+    #   Directs the specified job to invoke an Lambda function on every
     #   object in the manifest.
     #   @return [Types::LambdaInvokeOperation]
     #
@@ -2575,7 +2612,7 @@ module Aws::S3Control
     #       }
     #
     # @!attribute [rw] function_arn
-    #   The Amazon Resource Name (ARN) for the AWS Lambda function that the
+    #   The Amazon Resource Name (ARN) for the Lambda function that the
     #   specified job will invoke on every object in the manifest.
     #   @return [String]
     #
@@ -2970,8 +3007,8 @@ module Aws::S3Control
     #       }
     #
     # @!attribute [rw] account_id
-    #   The AWS account ID for owner of the bucket whose access points you
-    #   want to list.
+    #   The account ID for owner of the bucket whose access points you want
+    #   to list.
     #   @return [String]
     #
     # @!attribute [rw] bucket
@@ -2981,8 +3018,9 @@ module Aws::S3Control
     #   For using this parameter with Amazon S3 on Outposts with the REST
     #   API, you must specify the name and the x-amz-outpost-id as well.
     #
-    #   For using this parameter with S3 on Outposts with the AWS SDK and
-    #   CLI, you must specify the ARN of the bucket accessed in the format
+    #   For using this parameter with S3 on Outposts with the Amazon Web
+    #   Services SDK and CLI, you must specify the ARN of the bucket
+    #   accessed in the format
     #   `arn:aws:s3-outposts:<Region>:<account-id>:outpost/<outpost-id>/bucket/<my-bucket-name>`.
     #   For example, to access the bucket `reports` through outpost
     #   `my-outpost` owned by account `123456789012` in Region `us-west-2`,
@@ -3049,7 +3087,7 @@ module Aws::S3Control
     #       }
     #
     # @!attribute [rw] account_id
-    #   The AWS account ID associated with the S3 Batch Operations job.
+    #   The account ID associated with the S3 Batch Operations job.
     #   @return [String]
     #
     # @!attribute [rw] job_statuses
@@ -3112,7 +3150,7 @@ module Aws::S3Control
     #       }
     #
     # @!attribute [rw] account_id
-    #   The AWS account ID of the Outposts bucket.
+    #   The account ID of the Outposts bucket.
     #   @return [String]
     #
     # @!attribute [rw] next_token
@@ -3122,7 +3160,7 @@ module Aws::S3Control
     #   @return [Integer]
     #
     # @!attribute [rw] outpost_id
-    #   The ID of the AWS Outposts.
+    #   The ID of the Outposts.
     #
     #   <note markdown="1"> This is required by Amazon S3 on Outposts buckets.
     #
@@ -3327,7 +3365,7 @@ module Aws::S3Control
       include Aws::Structure
     end
 
-    # An access point with an attached AWS Lambda function used to access
+    # An access point with an attached Lambda function used to access
     # transformed data from an Amazon S3 bucket.
     #
     # @!attribute [rw] name
@@ -3402,26 +3440,25 @@ module Aws::S3Control
 
     # A container for AwsLambdaTransformation.
     #
-    # @note When making an API call, you may pass ObjectLambdaContentTransformation
-    #   data as a hash:
+    # @note ObjectLambdaContentTransformation is a union - when making an API calls you must set exactly one of the members.
     #
-    #       {
-    #         aws_lambda: {
-    #           function_arn: "FunctionArnString", # required
-    #           function_payload: "AwsLambdaTransformationPayload",
-    #         },
-    #       }
+    # @note ObjectLambdaContentTransformation is a union - when returned from an API call exactly one value will be set and the returned type will be a subclass of ObjectLambdaContentTransformation corresponding to the set member.
     #
     # @!attribute [rw] aws_lambda
-    #   A container for an AWS Lambda function.
+    #   A container for an Lambda function.
     #   @return [Types::AwsLambdaTransformation]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/s3control-2018-08-20/ObjectLambdaContentTransformation AWS API Documentation
     #
     class ObjectLambdaContentTransformation < Struct.new(
-      :aws_lambda)
+      :aws_lambda,
+      :unknown)
       SENSITIVE = []
       include Aws::Structure
+      include Aws::Structure::Union
+
+      class AwsLambda < ObjectLambdaContentTransformation; end
+      class Unknown < ObjectLambdaContentTransformation; end
     end
 
     # A configuration used when creating an Object Lambda Access Point
@@ -3603,8 +3640,8 @@ module Aws::S3Control
     # @!attribute [rw] restrict_public_buckets
     #   Specifies whether Amazon S3 should restrict public bucket policies
     #   for buckets in this account. Setting this element to `TRUE`
-    #   restricts access to buckets with public policies to only AWS service
-    #   principals and authorized users within this account.
+    #   restricts access to buckets with public policies to only Amazon Web
+    #   Service principals and authorized users within this account.
     #
     #   Enabling this setting doesn't affect previously stored bucket
     #   policies, except that public and cross-account access within any
@@ -3714,8 +3751,8 @@ module Aws::S3Control
     #       }
     #
     # @!attribute [rw] account_id
-    #   The AWS account ID for owner of the bucket associated with the
-    #   specified access point.
+    #   The account ID for owner of the bucket associated with the specified
+    #   access point.
     #   @return [String]
     #
     # @!attribute [rw] name
@@ -3725,9 +3762,9 @@ module Aws::S3Control
     #   For using this parameter with Amazon S3 on Outposts with the REST
     #   API, you must specify the name and the x-amz-outpost-id as well.
     #
-    #   For using this parameter with S3 on Outposts with the AWS SDK and
-    #   CLI, you must specify the ARN of the access point accessed in the
-    #   format
+    #   For using this parameter with S3 on Outposts with the Amazon Web
+    #   Services SDK and CLI, you must specify the ARN of the access point
+    #   accessed in the format
     #   `arn:aws:s3-outposts:<Region>:<account-id>:outpost/<outpost-id>/accesspoint/<my-accesspoint-name>`.
     #   For example, to access the access point `reports-ap` through outpost
     #   `my-outpost` owned by account `123456789012` in Region `us-west-2`,
@@ -3814,7 +3851,7 @@ module Aws::S3Control
     #       }
     #
     # @!attribute [rw] account_id
-    #   The AWS account ID of the Outposts bucket.
+    #   The account ID of the Outposts bucket.
     #   @return [String]
     #
     # @!attribute [rw] bucket
@@ -3846,7 +3883,7 @@ module Aws::S3Control
     #       }
     #
     # @!attribute [rw] account_id
-    #   The AWS account ID of the Outposts bucket.
+    #   The account ID of the Outposts bucket.
     #   @return [String]
     #
     # @!attribute [rw] bucket
@@ -3855,8 +3892,9 @@ module Aws::S3Control
     #   For using this parameter with Amazon S3 on Outposts with the REST
     #   API, you must specify the name and the x-amz-outpost-id as well.
     #
-    #   For using this parameter with S3 on Outposts with the AWS SDK and
-    #   CLI, you must specify the ARN of the bucket accessed in the format
+    #   For using this parameter with S3 on Outposts with the Amazon Web
+    #   Services SDK and CLI, you must specify the ARN of the bucket
+    #   accessed in the format
     #   `arn:aws:s3-outposts:<Region>:<account-id>:outpost/<outpost-id>/bucket/<my-bucket-name>`.
     #   For example, to access the bucket `reports` through outpost
     #   `my-outpost` owned by account `123456789012` in Region `us-west-2`,
@@ -3906,7 +3944,7 @@ module Aws::S3Control
     #       }
     #
     # @!attribute [rw] account_id
-    #   The AWS account ID of the Outposts bucket.
+    #   The account ID of the Outposts bucket.
     #   @return [String]
     #
     # @!attribute [rw] bucket
@@ -3915,8 +3953,9 @@ module Aws::S3Control
     #   For using this parameter with Amazon S3 on Outposts with the REST
     #   API, you must specify the name and the x-amz-outpost-id as well.
     #
-    #   For using this parameter with S3 on Outposts with the AWS SDK and
-    #   CLI, you must specify the ARN of the bucket accessed in the format
+    #   For using this parameter with S3 on Outposts with the Amazon Web
+    #   Services SDK and CLI, you must specify the ARN of the bucket
+    #   accessed in the format
     #   `arn:aws:s3-outposts:<Region>:<account-id>:outpost/<outpost-id>/bucket/<my-bucket-name>`.
     #   For example, to access the bucket `reports` through outpost
     #   `my-outpost` owned by account `123456789012` in Region `us-west-2`,
@@ -3953,7 +3992,7 @@ module Aws::S3Control
     #       }
     #
     # @!attribute [rw] account_id
-    #   The AWS account ID associated with the S3 Batch Operations job.
+    #   The account ID associated with the S3 Batch Operations job.
     #   @return [String]
     #
     # @!attribute [rw] job_id
@@ -3994,11 +4033,11 @@ module Aws::S3Control
     #
     # @!attribute [rw] public_access_block_configuration
     #   The `PublicAccessBlock` configuration that you want to apply to the
-    #   specified AWS account.
+    #   specified account.
     #   @return [Types::PublicAccessBlockConfiguration]
     #
     # @!attribute [rw] account_id
-    #   The account ID for the AWS account whose `PublicAccessBlock`
+    #   The account ID for the account whose `PublicAccessBlock`
     #   configuration you want to set.
     #   @return [String]
     #
@@ -4169,7 +4208,7 @@ module Aws::S3Control
     #   @return [Time]
     #
     # @!attribute [rw] outpost_id
-    #   The AWS Outposts ID of the regional bucket.
+    #   The Outposts ID of the regional bucket.
     #   @return [String]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/s3control-2018-08-20/RegionalBucket AWS API Documentation
@@ -4377,6 +4416,7 @@ module Aws::S3Control
     #         object_lock_legal_hold_status: "OFF", # accepts OFF, ON
     #         object_lock_mode: "COMPLIANCE", # accepts COMPLIANCE, GOVERNANCE
     #         object_lock_retain_until_date: Time.now,
+    #         bucket_key_enabled: false,
     #       }
     #
     # @!attribute [rw] target_resource
@@ -4444,6 +4484,16 @@ module Aws::S3Control
     #   all objects in the Batch Operations job.
     #   @return [Time]
     #
+    # @!attribute [rw] bucket_key_enabled
+    #   Specifies whether Amazon S3 should use an S3 Bucket Key for object
+    #   encryption with server-side encryption using Amazon Web Services KMS
+    #   (SSE-KMS). Setting this header to `true` causes Amazon S3 to use an
+    #   S3 Bucket Key for object encryption with SSE-KMS.
+    #
+    #   Specifying this header with an *object* action doesn’t affect
+    #   *bucket-level* settings for S3 Bucket Key.
+    #   @return [Boolean]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/s3control-2018-08-20/S3CopyObjectOperation AWS API Documentation
     #
     class S3CopyObjectOperation < Struct.new(
@@ -4462,7 +4512,8 @@ module Aws::S3Control
       :target_key_prefix,
       :object_lock_legal_hold_status,
       :object_lock_mode,
-      :object_lock_retain_until_date)
+      :object_lock_retain_until_date,
+      :bucket_key_enabled)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -4981,7 +5032,7 @@ module Aws::S3Control
       include Aws::Structure
     end
 
-    # The AWS organization for your S3 Storage Lens.
+    # The Amazon Web Services organization for your S3 Storage Lens.
     #
     # @note When making an API call, you may pass StorageLensAwsOrg
     #   data as a hash:
@@ -4991,9 +5042,9 @@ module Aws::S3Control
     #       }
     #
     # @!attribute [rw] arn
-    #   A container for the Amazon Resource Name (ARN) of the AWS
-    #   organization. This property is read-only and follows the following
-    #   format: `
+    #   A container for the Amazon Resource Name (ARN) of the Amazon Web
+    #   Services organization. This property is read-only and follows the
+    #   following format: `
     #   arn:aws:organizations:us-east-1:example-account-id:organization/o-ex2l495dck
     #   `
     #   @return [String]
@@ -5096,8 +5147,8 @@ module Aws::S3Control
     #   @return [Boolean]
     #
     # @!attribute [rw] aws_org
-    #   A container for the AWS organization for this S3 Storage Lens
-    #   configuration.
+    #   A container for the Amazon Web Services organization for this S3
+    #   Storage Lens configuration.
     #   @return [Types::StorageLensAwsOrg]
     #
     # @!attribute [rw] storage_lens_arn
@@ -5317,7 +5368,7 @@ module Aws::S3Control
     #       }
     #
     # @!attribute [rw] account_id
-    #   The AWS account ID associated with the S3 Batch Operations job.
+    #   The account ID associated with the S3 Batch Operations job.
     #   @return [String]
     #
     # @!attribute [rw] job_id
@@ -5366,7 +5417,7 @@ module Aws::S3Control
     #       }
     #
     # @!attribute [rw] account_id
-    #   The AWS account ID associated with the S3 Batch Operations job.
+    #   The account ID associated with the S3 Batch Operations job.
     #   @return [String]
     #
     # @!attribute [rw] job_id