aws-sdk-transcribeservice 1.145.0 → 1.146.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: fbc7cbad7fdccec4daa5609ec05f8398c0bfa5fe93a301b30209966d3c6ab0fe
-  data.tar.gz: d12fc596d95f28158525187bfd58a0a930ec6d88a0c174d1e3520bacaee3c944
+  metadata.gz: b5534a69ec8e8b812b6884d33e9b1c335d198c509be02c005fdcc35afbf3d6e3
+  data.tar.gz: 6b6784f29c7fc33fa1f3fe49b32726aa3bcd606579e174cee94e040b5a2215d3
 SHA512:
-  metadata.gz: c14ed53564f8d06ed73298c49f5af3b00d2eccb59ad687f9bc6f06b7d8aebd1bd54edcb948e6fd05e3ff4daf0112bbcfa807d2a776770a895080c424711ca578
-  data.tar.gz: 2c0b7de3fa88c0aa15fca4a2308a4a4f4417d64b97203ff662bbc9aac1ae1ccaa93d0913385b92c2b6fe6345cf1208f00d80e454256332373cb9456b486b59fc
+  metadata.gz: e7ad249e2031aa4bab063f76dc9b384a68b9250f4328d65c484ce50b4e0422e0be44258fe48a472e79474ca4c4d74374b530c1d46ad405baee4fbb95f8a1a9f4
+  data.tar.gz: 636f0360f34da9695543558709f306f73ed36707856710cade7cd97597e9d09c5556254c29410516163dcdcbaf8d163887571a39d2f69acdad9c5673939dc86a

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.146.0 (2026-09-18)
+------------------
+
+* Feature - Amazon Transcribe now lets you encrypt your custom vocabularies, custom vocabulary filters, and custom language models with a customer managed AWS KMS key instead of an AWS owned key, and adds a new UpdateLanguageModel operation to transition CLM encryption to a different KMS key.
+
 1.145.0 (2026-09-11)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.145.0
+1.146.0

data/lib/aws-sdk-transcribeservice/client.rb

@@ -773,6 +773,11 @@ module Aws::TranscribeService
     #   locations for training and tuning data, the ARN you use must have
     #   permissions to access both locations.
     #
+    # @option params [Types::EncryptionConfiguration] :encryption_configuration
+    #   Specifies the encryption configuration for your custom language model.
+    #   Your model artifacts are encrypted with the specified KMS key or with
+    #   an AWS-owned key if a key is not supplied.
+    #
     # @option params [Array<Types::Tag>] :tags
     #   Adds one or more custom tags, each in the form of a key:value pair, to
     #   a new custom language model at the time you create this new model.
@@ -803,6 +808,12 @@ module Aws::TranscribeService
     #       tuning_data_s3_uri: "Uri",
     #       data_access_role_arn: "DataAccessRoleArn", # required
     #     },
+    #     encryption_configuration: {
+    #       kms_encryption_context: {
+    #         "PrintableNonEmptyString" => "PrintableNonEmptyString",
+    #       },
+    #       kms_key: "KMSKeyId", # required
+    #     },
     #     tags: [
     #       {
     #         key: "TagKey", # required
@@ -1013,9 +1024,10 @@ module Aws::TranscribeService
     # @option params [String] :data_access_role_arn
     #   The Amazon Resource Name (ARN) of an IAM role that has permissions to
     #   access the Amazon S3 bucket that contains your input files (in this
-    #   case, your custom vocabulary). If the role that you specify doesn’t
-    #   have the appropriate permissions to access the specified Amazon S3
-    #   location, your request fails.
+    #   case, your custom vocabulary). If you include
+    #   `EncryptionConfiguration` in your request, this role must also have
+    #   permissions to access the specified KMS key. If the role that you
+    #   specify doesn’t have the appropriate permissions, your request fails.
     #
     #   IAM role ARNs have the format
     #   `arn:partition:iam::account:role/role-name-with-path`. For example:
@@ -1027,6 +1039,11 @@ module Aws::TranscribeService
     #
     #   [1]: https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_identifiers.html#identifiers-arns
     #
+    # @option params [Types::EncryptionConfiguration] :encryption_configuration
+    #   Specifies the encryption configuration for your custom vocabulary.
+    #   Your vocabulary artifacts are encrypted with the specified KMS key or
+    #   with an AWS-owned key if a key is not supplied.
+    #
     # @return [Types::CreateVocabularyResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::CreateVocabularyResponse#vocabulary_name #vocabulary_name} => String
@@ -1049,6 +1066,12 @@ module Aws::TranscribeService
     #       },
     #     ],
     #     data_access_role_arn: "DataAccessRoleArn",
+    #     encryption_configuration: {
+    #       kms_encryption_context: {
+    #         "PrintableNonEmptyString" => "PrintableNonEmptyString",
+    #       },
+    #       kms_key: "KMSKeyId", # required
+    #     },
     #   })
     #
     # @example Response structure
@@ -1157,9 +1180,10 @@ module Aws::TranscribeService
     # @option params [String] :data_access_role_arn
     #   The Amazon Resource Name (ARN) of an IAM role that has permissions to
     #   access the Amazon S3 bucket that contains your input files (in this
-    #   case, your custom vocabulary filter). If the role that you specify
-    #   doesn’t have the appropriate permissions to access the specified
-    #   Amazon S3 location, your request fails.
+    #   case, your custom vocabulary filter). If you include
+    #   `EncryptionConfiguration` in your request, this role must also have
+    #   permissions to access the specified KMS key. If the role that you
+    #   specify doesn’t have the appropriate permissions, your request fails.
     #
     #   IAM role ARNs have the format
     #   `arn:partition:iam::account:role/role-name-with-path`. For example:
@@ -1171,6 +1195,11 @@ module Aws::TranscribeService
     #
     #   [1]: https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_identifiers.html#identifiers-arns
     #
+    # @option params [Types::EncryptionConfiguration] :encryption_configuration
+    #   Specifies the encryption configuration for your custom vocabulary
+    #   filter. Your vocabulary filter artifacts are encrypted with the
+    #   specified KMS key or with an AWS-owned key if a key is not supplied.
+    #
     # @return [Types::CreateVocabularyFilterResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::CreateVocabularyFilterResponse#vocabulary_filter_name #vocabulary_filter_name} => String
@@ -1191,6 +1220,12 @@ module Aws::TranscribeService
     #       },
     #     ],
     #     data_access_role_arn: "DataAccessRoleArn",
+    #     encryption_configuration: {
+    #       kms_encryption_context: {
+    #         "PrintableNonEmptyString" => "PrintableNonEmptyString",
+    #       },
+    #       kms_key: "KMSKeyId", # required
+    #     },
     #   })
     #
     # @example Response structure
@@ -1472,6 +1507,9 @@ module Aws::TranscribeService
     #   resp.language_model.input_data_config.s3_uri #=> String
     #   resp.language_model.input_data_config.tuning_data_s3_uri #=> String
     #   resp.language_model.input_data_config.data_access_role_arn #=> String
+    #   resp.language_model.encryption_configuration.kms_encryption_context #=> Hash
+    #   resp.language_model.encryption_configuration.kms_encryption_context["PrintableNonEmptyString"] #=> String
+    #   resp.language_model.encryption_configuration.kms_key #=> String
     #
     #
     # The following waiters are defined for this operation (see {Client#wait_until} for detailed usage):
@@ -1959,6 +1997,8 @@ module Aws::TranscribeService
     #   * {Types::GetVocabularyResponse#last_modified_time #last_modified_time} => Time
     #   * {Types::GetVocabularyResponse#failure_reason #failure_reason} => String
     #   * {Types::GetVocabularyResponse#download_uri #download_uri} => String
+    #   * {Types::GetVocabularyResponse#data_access_role_arn #data_access_role_arn} => String
+    #   * {Types::GetVocabularyResponse#encryption_configuration #encryption_configuration} => Types::EncryptionConfiguration
     #
     # @example Request syntax with placeholder values
     #
@@ -1974,6 +2014,10 @@ module Aws::TranscribeService
     #   resp.last_modified_time #=> Time
     #   resp.failure_reason #=> String
     #   resp.download_uri #=> String
+    #   resp.data_access_role_arn #=> String
+    #   resp.encryption_configuration.kms_encryption_context #=> Hash
+    #   resp.encryption_configuration.kms_encryption_context["PrintableNonEmptyString"] #=> String
+    #   resp.encryption_configuration.kms_key #=> String
     #
     #
     # The following waiters are defined for this operation (see {Client#wait_until} for detailed usage):
@@ -2003,6 +2047,8 @@ module Aws::TranscribeService
     #   * {Types::GetVocabularyFilterResponse#language_code #language_code} => String
     #   * {Types::GetVocabularyFilterResponse#last_modified_time #last_modified_time} => Time
     #   * {Types::GetVocabularyFilterResponse#download_uri #download_uri} => String
+    #   * {Types::GetVocabularyFilterResponse#data_access_role_arn #data_access_role_arn} => String
+    #   * {Types::GetVocabularyFilterResponse#encryption_configuration #encryption_configuration} => Types::EncryptionConfiguration
     #
     # @example Request syntax with placeholder values
     #
@@ -2016,6 +2062,10 @@ module Aws::TranscribeService
     #   resp.language_code #=> String, one of "af-ZA", "ar-AE", "ar-SA", "am-ET", "cy-GB", "da-DK", "de-CH", "de-DE", "en-AB", "en-AU", "en-GB", "en-IE", "en-IN", "en-US", "en-WL", "es-ES", "es-MX", "es-US", "fa-AF", "fa-IR", "fr-CA", "fr-FR", "ga-IE", "gd-GB", "he-IL", "hi-IN", "ht-HT", "id-ID", "it-IT", "ja-JP", "jv-ID", "km-KH", "ko-KR", "my-MM", "ms-MY", "nl-NL", "pt-BR", "pt-PT", "ru-RU", "ta-IN", "te-IN", "tr-TR", "zh-CN", "zh-TW", "th-TH", "en-ZA", "en-NZ", "vi-VN", "sv-SE", "ab-GE", "ast-ES", "az-AZ", "ba-RU", "be-BY", "bg-BG", "bn-IN", "bs-BA", "ca-ES", "ckb-IQ", "ckb-IR", "cs-CZ", "cy-WL", "el-GR", "et-EE", "et-ET", "eu-ES", "fi-FI", "gl-ES", "gu-IN", "ha-NG", "hr-HR", "hu-HU", "hy-AM", "is-IS", "ka-GE", "kab-DZ", "kk-KZ", "kn-IN", "ky-KG", "lg-IN", "lt-LT", "lv-LV", "mhr-RU", "mi-NZ", "mk-MK", "ml-IN", "mn-MN", "mr-IN", "mt-MT", "no-NO", "ne-NP", "or-IN", "pa-IN", "pl-PL", "ps-AF", "ro-RO", "rw-RW", "si-LK", "sk-SK", "sl-SI", "so-SO", "sq-AL", "sr-RS", "su-ID", "sw-BI", "sw-KE", "sw-RW", "sw-TZ", "sw-UG", "tl-PH", "tt-RU", "ug-CN", "uk-UA", "uz-UZ", "wo-SN", "zh-HK", "zu-ZA"
     #   resp.last_modified_time #=> Time
     #   resp.download_uri #=> String
+    #   resp.data_access_role_arn #=> String
+    #   resp.encryption_configuration.kms_encryption_context #=> Hash
+    #   resp.encryption_configuration.kms_encryption_context["PrintableNonEmptyString"] #=> String
+    #   resp.encryption_configuration.kms_key #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/transcribe-2017-10-26/GetVocabularyFilter AWS API Documentation
     #
@@ -2260,6 +2310,9 @@ module Aws::TranscribeService
     #   resp.models[0].input_data_config.s3_uri #=> String
     #   resp.models[0].input_data_config.tuning_data_s3_uri #=> String
     #   resp.models[0].input_data_config.data_access_role_arn #=> String
+    #   resp.models[0].encryption_configuration.kms_encryption_context #=> Hash
+    #   resp.models[0].encryption_configuration.kms_encryption_context["PrintableNonEmptyString"] #=> String
+    #   resp.models[0].encryption_configuration.kms_key #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/transcribe-2017-10-26/ListLanguageModels AWS API Documentation
     #
@@ -3165,7 +3218,7 @@ module Aws::TranscribeService
     #     output_bucket_name: "OutputBucketName", # required
     #     output_encryption_kms_key_id: "KMSKeyId",
     #     kms_encryption_context: {
-    #       "NonEmptyString" => "NonEmptyString",
+    #       "PrintableNonEmptyString" => "PrintableNonEmptyString",
     #     },
     #     data_access_role_arn: "DataAccessRoleArn", # required
     #     settings: { # required
@@ -3472,7 +3525,7 @@ module Aws::TranscribeService
     #     output_key: "OutputKey",
     #     output_encryption_kms_key_id: "KMSKeyId",
     #     kms_encryption_context: {
-    #       "NonEmptyString" => "NonEmptyString",
+    #       "PrintableNonEmptyString" => "PrintableNonEmptyString",
     #     },
     #     settings: {
     #       show_speaker_labels: false,
@@ -3903,7 +3956,7 @@ module Aws::TranscribeService
     #     output_key: "OutputKey",
     #     output_encryption_kms_key_id: "KMSKeyId",
     #     kms_encryption_context: {
-    #       "NonEmptyString" => "NonEmptyString",
+    #       "PrintableNonEmptyString" => "PrintableNonEmptyString",
     #     },
     #     settings: {
     #       vocabulary_name: "VocabularyName",
@@ -4285,6 +4338,78 @@ module Aws::TranscribeService
       req.send_request(options)
     end
 
+    # Updates the encryption configuration for an existing custom language
+    # model. You can use this operation to change the KMS key used to
+    # encrypt your model artifacts. The model artifacts are re-encrypted in
+    # place. No model training is required.
+    #
+    # Your custom language model must not be in the `IN_PROGRESS` state when
+    # you call this operation. You cannot submit another update while a
+    # previous update is in progress. Use to check the current state of your
+    # model.
+    #
+    # Your custom language model remains available for transcription jobs
+    # while the update is being processed.
+    #
+    # @option params [required, String] :model_name
+    #   The name of the custom language model you want to update. Model names
+    #   are case sensitive.
+    #
+    # @option params [String] :data_access_role_arn
+    #   The Amazon Resource Name (ARN) of an IAM role. If you include
+    #   `EncryptionConfiguration` in your request, this role must have
+    #   permissions to access the specified KMS key. If the role that you
+    #   specify doesn't have the appropriate permissions, your request fails.
+    #
+    #   IAM role ARNs have the format
+    #   `arn:partition:iam::account:role/role-name-with-path`. For example:
+    #   `arn:aws:iam::111122223333:role/Admin`.
+    #
+    #   For more information, see [IAM ARNs][1].
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_identifiers.html#identifiers-arns
+    #
+    # @option params [Types::EncryptionConfiguration] :encryption_configuration
+    #   Specifies the new encryption configuration for your custom language
+    #   model. The model artifacts are re-encrypted in place using the
+    #   specified KMS key or with an AWS-owned key if a key is not supplied.
+    #
+    # @return [Types::UpdateLanguageModelResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::UpdateLanguageModelResponse#model_name #model_name} => String
+    #   * {Types::UpdateLanguageModelResponse#model_status #model_status} => String
+    #   * {Types::UpdateLanguageModelResponse#last_modified_time #last_modified_time} => Time
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.update_language_model({
+    #     model_name: "ModelName", # required
+    #     data_access_role_arn: "DataAccessRoleArn",
+    #     encryption_configuration: {
+    #       kms_encryption_context: {
+    #         "PrintableNonEmptyString" => "PrintableNonEmptyString",
+    #       },
+    #       kms_key: "KMSKeyId", # required
+    #     },
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.model_name #=> String
+    #   resp.model_status #=> String, one of "IN_PROGRESS", "FAILED", "COMPLETED"
+    #   resp.last_modified_time #=> Time
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/transcribe-2017-10-26/UpdateLanguageModel AWS API Documentation
+    #
+    # @overload update_language_model(params = {})
+    # @param [Hash] params ({})
+    def update_language_model(params = {}, options = {})
+      req = build_request(:update_language_model, params)
+      req.send_request(options)
+    end
+
     # Updates an existing custom medical vocabulary with new values. This
     # operation overwrites all existing information with your new values;
     # you cannot append new terms onto an existing custom vocabulary.
@@ -4341,6 +4466,10 @@ module Aws::TranscribeService
     # overwrites all existing information with your new values; you cannot
     # append new terms onto an existing custom vocabulary.
     #
+    # Your custom vocabulary must be in a terminal state (`READY` or
+    # `FAILED`) before you can update it. You must include either `Phrases`
+    # or `VocabularyFileUri` in your request.
+    #
     # @option params [required, String] :vocabulary_name
     #   The name of the custom vocabulary you want to update. Custom
     #   vocabulary names are case sensitive.
@@ -4396,9 +4525,10 @@ module Aws::TranscribeService
     # @option params [String] :data_access_role_arn
     #   The Amazon Resource Name (ARN) of an IAM role that has permissions to
     #   access the Amazon S3 bucket that contains your input files (in this
-    #   case, your custom vocabulary). If the role that you specify doesn’t
-    #   have the appropriate permissions to access the specified Amazon S3
-    #   location, your request fails.
+    #   case, your custom vocabulary). If you include
+    #   `EncryptionConfiguration` in your request, this role must also have
+    #   permissions to access the specified KMS key. If the role that you
+    #   specify doesn’t have the appropriate permissions, your request fails.
     #
     #   IAM role ARNs have the format
     #   `arn:partition:iam::account:role/role-name-with-path`. For example:
@@ -4410,6 +4540,11 @@ module Aws::TranscribeService
     #
     #   [1]: https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_identifiers.html#identifiers-arns
     #
+    # @option params [Types::EncryptionConfiguration] :encryption_configuration
+    #   Specifies the new encryption configuration for your custom vocabulary.
+    #   The vocabulary artifacts are re-encrypted in place using the specified
+    #   KMS key or with an AWS-owned key if a key is not supplied.
+    #
     # @return [Types::UpdateVocabularyResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::UpdateVocabularyResponse#vocabulary_name #vocabulary_name} => String
@@ -4425,6 +4560,12 @@ module Aws::TranscribeService
     #     phrases: ["Phrase"],
     #     vocabulary_file_uri: "Uri",
     #     data_access_role_arn: "DataAccessRoleArn",
+    #     encryption_configuration: {
+    #       kms_encryption_context: {
+    #         "PrintableNonEmptyString" => "PrintableNonEmptyString",
+    #       },
+    #       kms_key: "KMSKeyId", # required
+    #     },
     #   })
     #
     # @example Response structure
@@ -4447,6 +4588,9 @@ module Aws::TranscribeService
     # The new list you provide overwrites all previous entries; you cannot
     # append new terms onto an existing custom vocabulary filter.
     #
+    # You must include either `Words` or `VocabularyFilterFileUri` in your
+    # request.
+    #
     # @option params [required, String] :vocabulary_filter_name
     #   The name of the custom vocabulary filter you want to update. Custom
     #   vocabulary filter names are case sensitive.
@@ -4485,9 +4629,10 @@ module Aws::TranscribeService
     # @option params [String] :data_access_role_arn
     #   The Amazon Resource Name (ARN) of an IAM role that has permissions to
     #   access the Amazon S3 bucket that contains your input files (in this
-    #   case, your custom vocabulary filter). If the role that you specify
-    #   doesn’t have the appropriate permissions to access the specified
-    #   Amazon S3 location, your request fails.
+    #   case, your custom vocabulary filter). If you include
+    #   `EncryptionConfiguration` in your request, this role must also have
+    #   permissions to access the specified KMS key. If the role that you
+    #   specify doesn’t have the appropriate permissions, your request fails.
     #
     #   IAM role ARNs have the format
     #   `arn:partition:iam::account:role/role-name-with-path`. For example:
@@ -4499,6 +4644,12 @@ module Aws::TranscribeService
     #
     #   [1]: https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_identifiers.html#identifiers-arns
     #
+    # @option params [Types::EncryptionConfiguration] :encryption_configuration
+    #   Specifies the new encryption configuration for your custom vocabulary
+    #   filter. The vocabulary filter artifacts are re-encrypted in place
+    #   using the specified KMS key or with an AWS-owned key if a key is not
+    #   supplied.
+    #
     # @return [Types::UpdateVocabularyFilterResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::UpdateVocabularyFilterResponse#vocabulary_filter_name #vocabulary_filter_name} => String
@@ -4512,6 +4663,12 @@ module Aws::TranscribeService
     #     words: ["Word"],
     #     vocabulary_filter_file_uri: "Uri",
     #     data_access_role_arn: "DataAccessRoleArn",
+    #     encryption_configuration: {
+    #       kms_encryption_context: {
+    #         "PrintableNonEmptyString" => "PrintableNonEmptyString",
+    #       },
+    #       kms_key: "KMSKeyId", # required
+    #     },
     #   })
     #
     # @example Response structure
@@ -4547,7 +4704,7 @@ module Aws::TranscribeService
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-transcribeservice'
-      context[:gem_version] = '1.145.0'
+      context[:gem_version] = '1.146.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-transcribeservice/client_api.rb

@@ -65,6 +65,7 @@ module Aws::TranscribeService
     DescribeLanguageModelRequest = Shapes::StructureShape.new(name: 'DescribeLanguageModelRequest')
     DescribeLanguageModelResponse = Shapes::StructureShape.new(name: 'DescribeLanguageModelResponse')
     DurationInSeconds = Shapes::FloatShape.new(name: 'DurationInSeconds')
+    EncryptionConfiguration = Shapes::StructureShape.new(name: 'EncryptionConfiguration')
     FailureReason = Shapes::StringShape.new(name: 'FailureReason')
     GetCallAnalyticsCategoryRequest = Shapes::StructureShape.new(name: 'GetCallAnalyticsCategoryRequest')
     GetCallAnalyticsCategoryResponse = Shapes::StructureShape.new(name: 'GetCallAnalyticsCategoryResponse')
@@ -162,6 +163,7 @@ module Aws::TranscribeService
     Phrases = Shapes::ListShape.new(name: 'Phrases')
     PiiEntityType = Shapes::StringShape.new(name: 'PiiEntityType')
     PiiEntityTypes = Shapes::ListShape.new(name: 'PiiEntityTypes')
+    PrintableNonEmptyString = Shapes::StringShape.new(name: 'PrintableNonEmptyString')
     Pronouns = Shapes::StringShape.new(name: 'Pronouns')
     RedactionOutput = Shapes::StringShape.new(name: 'RedactionOutput')
     RedactionType = Shapes::StringShape.new(name: 'RedactionType')
@@ -216,6 +218,8 @@ module Aws::TranscribeService
     UntagResourceResponse = Shapes::StructureShape.new(name: 'UntagResourceResponse')
     UpdateCallAnalyticsCategoryRequest = Shapes::StructureShape.new(name: 'UpdateCallAnalyticsCategoryRequest')
     UpdateCallAnalyticsCategoryResponse = Shapes::StructureShape.new(name: 'UpdateCallAnalyticsCategoryResponse')
+    UpdateLanguageModelRequest = Shapes::StructureShape.new(name: 'UpdateLanguageModelRequest')
+    UpdateLanguageModelResponse = Shapes::StructureShape.new(name: 'UpdateLanguageModelResponse')
     UpdateMedicalVocabularyRequest = Shapes::StructureShape.new(name: 'UpdateMedicalVocabularyRequest')
     UpdateMedicalVocabularyResponse = Shapes::StructureShape.new(name: 'UpdateMedicalVocabularyResponse')
     UpdateVocabularyFilterRequest = Shapes::StructureShape.new(name: 'UpdateVocabularyFilterRequest')
@@ -334,6 +338,7 @@ module Aws::TranscribeService
     CreateLanguageModelRequest.add_member(:base_model_name, Shapes::ShapeRef.new(shape: BaseModelName, required: true, location_name: "BaseModelName"))
     CreateLanguageModelRequest.add_member(:model_name, Shapes::ShapeRef.new(shape: ModelName, required: true, location_name: "ModelName"))
     CreateLanguageModelRequest.add_member(:input_data_config, Shapes::ShapeRef.new(shape: InputDataConfig, required: true, location_name: "InputDataConfig"))
+    CreateLanguageModelRequest.add_member(:encryption_configuration, Shapes::ShapeRef.new(shape: EncryptionConfiguration, location_name: "EncryptionConfiguration"))
     CreateLanguageModelRequest.add_member(:tags, Shapes::ShapeRef.new(shape: TagList, location_name: "Tags"))
     CreateLanguageModelRequest.struct_class = Types::CreateLanguageModelRequest
 
@@ -363,6 +368,7 @@ module Aws::TranscribeService
     CreateVocabularyFilterRequest.add_member(:vocabulary_filter_file_uri, Shapes::ShapeRef.new(shape: Uri, location_name: "VocabularyFilterFileUri"))
     CreateVocabularyFilterRequest.add_member(:tags, Shapes::ShapeRef.new(shape: TagList, location_name: "Tags"))
     CreateVocabularyFilterRequest.add_member(:data_access_role_arn, Shapes::ShapeRef.new(shape: DataAccessRoleArn, location_name: "DataAccessRoleArn"))
+    CreateVocabularyFilterRequest.add_member(:encryption_configuration, Shapes::ShapeRef.new(shape: EncryptionConfiguration, location_name: "EncryptionConfiguration"))
     CreateVocabularyFilterRequest.struct_class = Types::CreateVocabularyFilterRequest
 
     CreateVocabularyFilterResponse.add_member(:vocabulary_filter_name, Shapes::ShapeRef.new(shape: VocabularyFilterName, location_name: "VocabularyFilterName"))
@@ -376,6 +382,7 @@ module Aws::TranscribeService
     CreateVocabularyRequest.add_member(:vocabulary_file_uri, Shapes::ShapeRef.new(shape: Uri, location_name: "VocabularyFileUri"))
     CreateVocabularyRequest.add_member(:tags, Shapes::ShapeRef.new(shape: TagList, location_name: "Tags"))
     CreateVocabularyRequest.add_member(:data_access_role_arn, Shapes::ShapeRef.new(shape: DataAccessRoleArn, location_name: "DataAccessRoleArn"))
+    CreateVocabularyRequest.add_member(:encryption_configuration, Shapes::ShapeRef.new(shape: EncryptionConfiguration, location_name: "EncryptionConfiguration"))
     CreateVocabularyRequest.struct_class = Types::CreateVocabularyRequest
 
     CreateVocabularyResponse.add_member(:vocabulary_name, Shapes::ShapeRef.new(shape: VocabularyName, location_name: "VocabularyName"))
@@ -422,6 +429,10 @@ module Aws::TranscribeService
     DescribeLanguageModelResponse.add_member(:language_model, Shapes::ShapeRef.new(shape: LanguageModel, location_name: "LanguageModel"))
     DescribeLanguageModelResponse.struct_class = Types::DescribeLanguageModelResponse
 
+    EncryptionConfiguration.add_member(:kms_encryption_context, Shapes::ShapeRef.new(shape: KMSEncryptionContextMap, location_name: "KMSEncryptionContext"))
+    EncryptionConfiguration.add_member(:kms_key, Shapes::ShapeRef.new(shape: KMSKeyId, required: true, location_name: "KMSKey"))
+    EncryptionConfiguration.struct_class = Types::EncryptionConfiguration
+
     GetCallAnalyticsCategoryRequest.add_member(:category_name, Shapes::ShapeRef.new(shape: CategoryName, required: true, location_name: "CategoryName"))
     GetCallAnalyticsCategoryRequest.struct_class = Types::GetCallAnalyticsCategoryRequest
 
@@ -470,6 +481,8 @@ module Aws::TranscribeService
     GetVocabularyFilterResponse.add_member(:language_code, Shapes::ShapeRef.new(shape: LanguageCode, location_name: "LanguageCode"))
     GetVocabularyFilterResponse.add_member(:last_modified_time, Shapes::ShapeRef.new(shape: DateTime, location_name: "LastModifiedTime"))
     GetVocabularyFilterResponse.add_member(:download_uri, Shapes::ShapeRef.new(shape: Uri, location_name: "DownloadUri"))
+    GetVocabularyFilterResponse.add_member(:data_access_role_arn, Shapes::ShapeRef.new(shape: DataAccessRoleArn, location_name: "DataAccessRoleArn"))
+    GetVocabularyFilterResponse.add_member(:encryption_configuration, Shapes::ShapeRef.new(shape: EncryptionConfiguration, location_name: "EncryptionConfiguration"))
     GetVocabularyFilterResponse.struct_class = Types::GetVocabularyFilterResponse
 
     GetVocabularyRequest.add_member(:vocabulary_name, Shapes::ShapeRef.new(shape: VocabularyName, required: true, location_name: "VocabularyName"))
@@ -481,6 +494,8 @@ module Aws::TranscribeService
     GetVocabularyResponse.add_member(:last_modified_time, Shapes::ShapeRef.new(shape: DateTime, location_name: "LastModifiedTime"))
     GetVocabularyResponse.add_member(:failure_reason, Shapes::ShapeRef.new(shape: FailureReason, location_name: "FailureReason"))
     GetVocabularyResponse.add_member(:download_uri, Shapes::ShapeRef.new(shape: Uri, location_name: "DownloadUri"))
+    GetVocabularyResponse.add_member(:data_access_role_arn, Shapes::ShapeRef.new(shape: DataAccessRoleArn, location_name: "DataAccessRoleArn"))
+    GetVocabularyResponse.add_member(:encryption_configuration, Shapes::ShapeRef.new(shape: EncryptionConfiguration, location_name: "EncryptionConfiguration"))
     GetVocabularyResponse.struct_class = Types::GetVocabularyResponse
 
     InputDataConfig.add_member(:s3_uri, Shapes::ShapeRef.new(shape: Uri, required: true, location_name: "S3Uri"))
@@ -502,8 +517,8 @@ module Aws::TranscribeService
     JobExecutionSettings.add_member(:data_access_role_arn, Shapes::ShapeRef.new(shape: DataAccessRoleArn, location_name: "DataAccessRoleArn"))
     JobExecutionSettings.struct_class = Types::JobExecutionSettings
 
-    KMSEncryptionContextMap.key = Shapes::ShapeRef.new(shape: NonEmptyString)
-    KMSEncryptionContextMap.value = Shapes::ShapeRef.new(shape: NonEmptyString)
+    KMSEncryptionContextMap.key = Shapes::ShapeRef.new(shape: PrintableNonEmptyString)
+    KMSEncryptionContextMap.value = Shapes::ShapeRef.new(shape: PrintableNonEmptyString)
 
     LanguageCodeItem.add_member(:language_code, Shapes::ShapeRef.new(shape: LanguageCode, location_name: "LanguageCode"))
     LanguageCodeItem.add_member(:duration_in_seconds, Shapes::ShapeRef.new(shape: DurationInSeconds, location_name: "DurationInSeconds"))
@@ -528,6 +543,7 @@ module Aws::TranscribeService
     LanguageModel.add_member(:upgrade_availability, Shapes::ShapeRef.new(shape: Boolean, location_name: "UpgradeAvailability"))
     LanguageModel.add_member(:failure_reason, Shapes::ShapeRef.new(shape: FailureReason, location_name: "FailureReason"))
     LanguageModel.add_member(:input_data_config, Shapes::ShapeRef.new(shape: InputDataConfig, location_name: "InputDataConfig"))
+    LanguageModel.add_member(:encryption_configuration, Shapes::ShapeRef.new(shape: EncryptionConfiguration, location_name: "EncryptionConfiguration"))
     LanguageModel.struct_class = Types::LanguageModel
 
     LanguageOptions.member = Shapes::ShapeRef.new(shape: LanguageCode)
@@ -974,6 +990,16 @@ module Aws::TranscribeService
     UpdateCallAnalyticsCategoryResponse.add_member(:category_properties, Shapes::ShapeRef.new(shape: CategoryProperties, location_name: "CategoryProperties"))
     UpdateCallAnalyticsCategoryResponse.struct_class = Types::UpdateCallAnalyticsCategoryResponse
 
+    UpdateLanguageModelRequest.add_member(:model_name, Shapes::ShapeRef.new(shape: ModelName, required: true, location_name: "ModelName"))
+    UpdateLanguageModelRequest.add_member(:data_access_role_arn, Shapes::ShapeRef.new(shape: DataAccessRoleArn, location_name: "DataAccessRoleArn"))
+    UpdateLanguageModelRequest.add_member(:encryption_configuration, Shapes::ShapeRef.new(shape: EncryptionConfiguration, location_name: "EncryptionConfiguration"))
+    UpdateLanguageModelRequest.struct_class = Types::UpdateLanguageModelRequest
+
+    UpdateLanguageModelResponse.add_member(:model_name, Shapes::ShapeRef.new(shape: ModelName, location_name: "ModelName"))
+    UpdateLanguageModelResponse.add_member(:model_status, Shapes::ShapeRef.new(shape: ModelStatus, location_name: "ModelStatus"))
+    UpdateLanguageModelResponse.add_member(:last_modified_time, Shapes::ShapeRef.new(shape: DateTime, location_name: "LastModifiedTime"))
+    UpdateLanguageModelResponse.struct_class = Types::UpdateLanguageModelResponse
+
     UpdateMedicalVocabularyRequest.add_member(:vocabulary_name, Shapes::ShapeRef.new(shape: VocabularyName, required: true, location_name: "VocabularyName"))
     UpdateMedicalVocabularyRequest.add_member(:language_code, Shapes::ShapeRef.new(shape: LanguageCode, required: true, location_name: "LanguageCode"))
     UpdateMedicalVocabularyRequest.add_member(:vocabulary_file_uri, Shapes::ShapeRef.new(shape: Uri, required: true, location_name: "VocabularyFileUri"))
@@ -989,6 +1015,7 @@ module Aws::TranscribeService
     UpdateVocabularyFilterRequest.add_member(:words, Shapes::ShapeRef.new(shape: Words, location_name: "Words"))
     UpdateVocabularyFilterRequest.add_member(:vocabulary_filter_file_uri, Shapes::ShapeRef.new(shape: Uri, location_name: "VocabularyFilterFileUri"))
     UpdateVocabularyFilterRequest.add_member(:data_access_role_arn, Shapes::ShapeRef.new(shape: DataAccessRoleArn, location_name: "DataAccessRoleArn"))
+    UpdateVocabularyFilterRequest.add_member(:encryption_configuration, Shapes::ShapeRef.new(shape: EncryptionConfiguration, location_name: "EncryptionConfiguration"))
     UpdateVocabularyFilterRequest.struct_class = Types::UpdateVocabularyFilterRequest
 
     UpdateVocabularyFilterResponse.add_member(:vocabulary_filter_name, Shapes::ShapeRef.new(shape: VocabularyFilterName, location_name: "VocabularyFilterName"))
@@ -1001,6 +1028,7 @@ module Aws::TranscribeService
     UpdateVocabularyRequest.add_member(:phrases, Shapes::ShapeRef.new(shape: Phrases, location_name: "Phrases"))
     UpdateVocabularyRequest.add_member(:vocabulary_file_uri, Shapes::ShapeRef.new(shape: Uri, location_name: "VocabularyFileUri"))
     UpdateVocabularyRequest.add_member(:data_access_role_arn, Shapes::ShapeRef.new(shape: DataAccessRoleArn, location_name: "DataAccessRoleArn"))
+    UpdateVocabularyRequest.add_member(:encryption_configuration, Shapes::ShapeRef.new(shape: EncryptionConfiguration, location_name: "EncryptionConfiguration"))
     UpdateVocabularyRequest.struct_class = Types::UpdateVocabularyRequest
 
     UpdateVocabularyResponse.add_member(:vocabulary_name, Shapes::ShapeRef.new(shape: VocabularyName, location_name: "VocabularyName"))
@@ -1570,6 +1598,19 @@ module Aws::TranscribeService
         o.errors << Shapes::ShapeRef.new(shape: ConflictException)
       end)
 
+      api.add_operation(:update_language_model, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "UpdateLanguageModel"
+        o.http_method = "POST"
+        o.http_request_uri = "/"
+        o.input = Shapes::ShapeRef.new(shape: UpdateLanguageModelRequest)
+        o.output = Shapes::ShapeRef.new(shape: UpdateLanguageModelResponse)
+        o.errors << Shapes::ShapeRef.new(shape: BadRequestException)
+        o.errors << Shapes::ShapeRef.new(shape: LimitExceededException)
+        o.errors << Shapes::ShapeRef.new(shape: InternalFailureException)
+        o.errors << Shapes::ShapeRef.new(shape: NotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: ConflictException)
+      end)
+
       api.add_operation(:update_medical_vocabulary, Seahorse::Model::Operation.new.tap do |o|
         o.name = "UpdateMedicalVocabulary"
         o.http_method = "POST"
@@ -1606,6 +1647,7 @@ module Aws::TranscribeService
         o.errors << Shapes::ShapeRef.new(shape: LimitExceededException)
         o.errors << Shapes::ShapeRef.new(shape: InternalFailureException)
         o.errors << Shapes::ShapeRef.new(shape: NotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: ConflictException)
       end)
     end
 

data/lib/aws-sdk-transcribeservice/types.rb

@@ -843,6 +843,12 @@ module Aws::TranscribeService
     #   must have permissions to access both locations.
     #   @return [Types::InputDataConfig]
     #
+    # @!attribute [rw] encryption_configuration
+    #   Specifies the encryption configuration for your custom language
+    #   model. Your model artifacts are encrypted with the specified KMS key
+    #   or with an AWS-owned key if a key is not supplied.
+    #   @return [Types::EncryptionConfiguration]
+    #
     # @!attribute [rw] tags
     #   Adds one or more custom tags, each in the form of a key:value pair,
     #   to a new custom language model at the time you create this new
@@ -863,6 +869,7 @@ module Aws::TranscribeService
       :base_model_name,
       :model_name,
       :input_data_config,
+      :encryption_configuration,
       :tags)
       SENSITIVE = []
       include Aws::Structure
@@ -1076,9 +1083,11 @@ module Aws::TranscribeService
     # @!attribute [rw] data_access_role_arn
     #   The Amazon Resource Name (ARN) of an IAM role that has permissions
     #   to access the Amazon S3 bucket that contains your input files (in
-    #   this case, your custom vocabulary filter). If the role that you
-    #   specify doesn’t have the appropriate permissions to access the
-    #   specified Amazon S3 location, your request fails.
+    #   this case, your custom vocabulary filter). If you include
+    #   `EncryptionConfiguration` in your request, this role must also have
+    #   permissions to access the specified KMS key. If the role that you
+    #   specify doesn’t have the appropriate permissions, your request
+    #   fails.
     #
     #   IAM role ARNs have the format
     #   `arn:partition:iam::account:role/role-name-with-path`. For example:
@@ -1091,6 +1100,12 @@ module Aws::TranscribeService
     #   [1]: https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_identifiers.html#identifiers-arns
     #   @return [String]
     #
+    # @!attribute [rw] encryption_configuration
+    #   Specifies the encryption configuration for your custom vocabulary
+    #   filter. Your vocabulary filter artifacts are encrypted with the
+    #   specified KMS key or with an AWS-owned key if a key is not supplied.
+    #   @return [Types::EncryptionConfiguration]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/transcribe-2017-10-26/CreateVocabularyFilterRequest AWS API Documentation
     #
     class CreateVocabularyFilterRequest < Struct.new(
@@ -1099,7 +1114,8 @@ module Aws::TranscribeService
       :words,
       :vocabulary_filter_file_uri,
       :tags,
-      :data_access_role_arn)
+      :data_access_role_arn,
+      :encryption_configuration)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -1207,9 +1223,11 @@ module Aws::TranscribeService
     # @!attribute [rw] data_access_role_arn
     #   The Amazon Resource Name (ARN) of an IAM role that has permissions
     #   to access the Amazon S3 bucket that contains your input files (in
-    #   this case, your custom vocabulary). If the role that you specify
-    #   doesn’t have the appropriate permissions to access the specified
-    #   Amazon S3 location, your request fails.
+    #   this case, your custom vocabulary). If you include
+    #   `EncryptionConfiguration` in your request, this role must also have
+    #   permissions to access the specified KMS key. If the role that you
+    #   specify doesn’t have the appropriate permissions, your request
+    #   fails.
     #
     #   IAM role ARNs have the format
     #   `arn:partition:iam::account:role/role-name-with-path`. For example:
@@ -1222,6 +1240,12 @@ module Aws::TranscribeService
     #   [1]: https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_identifiers.html#identifiers-arns
     #   @return [String]
     #
+    # @!attribute [rw] encryption_configuration
+    #   Specifies the encryption configuration for your custom vocabulary.
+    #   Your vocabulary artifacts are encrypted with the specified KMS key
+    #   or with an AWS-owned key if a key is not supplied.
+    #   @return [Types::EncryptionConfiguration]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/transcribe-2017-10-26/CreateVocabularyRequest AWS API Documentation
     #
     class CreateVocabularyRequest < Struct.new(
@@ -1230,7 +1254,8 @@ module Aws::TranscribeService
       :phrases,
       :vocabulary_file_uri,
       :tags,
-      :data_access_role_arn)
+      :data_access_role_arn,
+      :encryption_configuration)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -1438,6 +1463,43 @@ module Aws::TranscribeService
       include Aws::Structure
     end
 
+    # Encryption configuration for the invocation
+    #
+    # @!attribute [rw] kms_encryption_context
+    #   A map of plain text, non-secret key:value pairs, known as encryption
+    #   context pairs, that provide an added layer of security for your
+    #   data. For more information, see [KMS encryption context][1].
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/transcribe/latest/dg/key-management.html#kms-context
+    #   @return [Hash<String,String>]
+    #
+    # @!attribute [rw] kms_key
+    #   The Amazon Resource Name (ARN) of the KMS key you want to use to
+    #   encrypt your resource artifacts. Only full KMS key ARN format is
+    #   supported.
+    #
+    #   KMS key ARNs have the format
+    #   `arn:partition:kms:region:account:key/key-id`. For example:
+    #   `arn:aws:kms:us-west-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab`.
+    #
+    #   For more information, see [KMS key ARNs][1].
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#key-id-key-ARN
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/transcribe-2017-10-26/EncryptionConfiguration AWS API Documentation
+    #
+    class EncryptionConfiguration < Struct.new(
+      :kms_encryption_context,
+      :kms_key)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @!attribute [rw] category_name
     #   The name of the Call Analytics category you want information about.
     #   Category names are case sensitive.
@@ -1672,13 +1734,25 @@ module Aws::TranscribeService
     #   use this URI to view or download the custom vocabulary filter.
     #   @return [String]
     #
+    # @!attribute [rw] data_access_role_arn
+    #   The Amazon Resource Name (ARN) of the IAM role used to access the
+    #   Amazon S3 bucket that contains your input files and, if applicable,
+    #   the KMS key specified in `EncryptionConfiguration`.
+    #   @return [String]
+    #
+    # @!attribute [rw] encryption_configuration
+    #   The encryption configuration used for your custom vocabulary filter.
+    #   @return [Types::EncryptionConfiguration]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/transcribe-2017-10-26/GetVocabularyFilterResponse AWS API Documentation
     #
     class GetVocabularyFilterResponse < Struct.new(
       :vocabulary_filter_name,
       :language_code,
       :last_modified_time,
-      :download_uri)
+      :download_uri,
+      :data_access_role_arn,
+      :encryption_configuration)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -1733,6 +1807,16 @@ module Aws::TranscribeService
     #   this URI to view or download the custom vocabulary.
     #   @return [String]
     #
+    # @!attribute [rw] data_access_role_arn
+    #   The Amazon Resource Name (ARN) of the IAM role used to access the
+    #   Amazon S3 bucket that contains your input files and, if applicable,
+    #   the KMS key specified in `EncryptionConfiguration`.
+    #   @return [String]
+    #
+    # @!attribute [rw] encryption_configuration
+    #   The encryption configuration used for your custom vocabulary.
+    #   @return [Types::EncryptionConfiguration]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/transcribe-2017-10-26/GetVocabularyResponse AWS API Documentation
     #
     class GetVocabularyResponse < Struct.new(
@@ -1741,7 +1825,9 @@ module Aws::TranscribeService
       :vocabulary_state,
       :last_modified_time,
       :failure_reason,
-      :download_uri)
+      :download_uri,
+      :data_access_role_arn,
+      :encryption_configuration)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -2121,6 +2207,10 @@ module Aws::TranscribeService
     #   (Amazon Resource Name) that has permissions to access these data.
     #   @return [Types::InputDataConfig]
     #
+    # @!attribute [rw] encryption_configuration
+    #   The encryption configuration used for your custom language model.
+    #   @return [Types::EncryptionConfiguration]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/transcribe-2017-10-26/LanguageModel AWS API Documentation
     #
     class LanguageModel < Struct.new(
@@ -2132,7 +2222,8 @@ module Aws::TranscribeService
       :model_status,
       :upgrade_availability,
       :failure_reason,
-      :input_data_config)
+      :input_data_config,
+      :encryption_configuration)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -5699,6 +5790,68 @@ module Aws::TranscribeService
       include Aws::Structure
     end
 
+    # @!attribute [rw] model_name
+    #   The name of the custom language model you want to update. Model
+    #   names are case sensitive.
+    #   @return [String]
+    #
+    # @!attribute [rw] data_access_role_arn
+    #   The Amazon Resource Name (ARN) of an IAM role. If you include
+    #   `EncryptionConfiguration` in your request, this role must have
+    #   permissions to access the specified KMS key. If the role that you
+    #   specify doesn't have the appropriate permissions, your request
+    #   fails.
+    #
+    #   IAM role ARNs have the format
+    #   `arn:partition:iam::account:role/role-name-with-path`. For example:
+    #   `arn:aws:iam::111122223333:role/Admin`.
+    #
+    #   For more information, see [IAM ARNs][1].
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_identifiers.html#identifiers-arns
+    #   @return [String]
+    #
+    # @!attribute [rw] encryption_configuration
+    #   Specifies the new encryption configuration for your custom language
+    #   model. The model artifacts are re-encrypted in place using the
+    #   specified KMS key or with an AWS-owned key if a key is not supplied.
+    #   @return [Types::EncryptionConfiguration]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/transcribe-2017-10-26/UpdateLanguageModelRequest AWS API Documentation
+    #
+    class UpdateLanguageModelRequest < Struct.new(
+      :model_name,
+      :data_access_role_arn,
+      :encryption_configuration)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] model_name
+    #   The name of the custom language model that was updated.
+    #   @return [String]
+    #
+    # @!attribute [rw] model_status
+    #   The status of the specified custom language model.
+    #   @return [String]
+    #
+    # @!attribute [rw] last_modified_time
+    #   The date and time the specified custom language model was last
+    #   modified.
+    #   @return [Time]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/transcribe-2017-10-26/UpdateLanguageModelResponse AWS API Documentation
+    #
+    class UpdateLanguageModelResponse < Struct.new(
+      :model_name,
+      :model_status,
+      :last_modified_time)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @!attribute [rw] vocabulary_name
     #   The name of the custom medical vocabulary you want to update. Custom
     #   medical vocabulary names are case sensitive.
@@ -5807,9 +5960,11 @@ module Aws::TranscribeService
     # @!attribute [rw] data_access_role_arn
     #   The Amazon Resource Name (ARN) of an IAM role that has permissions
     #   to access the Amazon S3 bucket that contains your input files (in
-    #   this case, your custom vocabulary filter). If the role that you
-    #   specify doesn’t have the appropriate permissions to access the
-    #   specified Amazon S3 location, your request fails.
+    #   this case, your custom vocabulary filter). If you include
+    #   `EncryptionConfiguration` in your request, this role must also have
+    #   permissions to access the specified KMS key. If the role that you
+    #   specify doesn’t have the appropriate permissions, your request
+    #   fails.
     #
     #   IAM role ARNs have the format
     #   `arn:partition:iam::account:role/role-name-with-path`. For example:
@@ -5822,13 +5977,21 @@ module Aws::TranscribeService
     #   [1]: https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_identifiers.html#identifiers-arns
     #   @return [String]
     #
+    # @!attribute [rw] encryption_configuration
+    #   Specifies the new encryption configuration for your custom
+    #   vocabulary filter. The vocabulary filter artifacts are re-encrypted
+    #   in place using the specified KMS key or with an AWS-owned key if a
+    #   key is not supplied.
+    #   @return [Types::EncryptionConfiguration]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/transcribe-2017-10-26/UpdateVocabularyFilterRequest AWS API Documentation
     #
     class UpdateVocabularyFilterRequest < Struct.new(
       :vocabulary_filter_name,
       :words,
       :vocabulary_filter_file_uri,
-      :data_access_role_arn)
+      :data_access_role_arn,
+      :encryption_configuration)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -5920,9 +6083,11 @@ module Aws::TranscribeService
     # @!attribute [rw] data_access_role_arn
     #   The Amazon Resource Name (ARN) of an IAM role that has permissions
     #   to access the Amazon S3 bucket that contains your input files (in
-    #   this case, your custom vocabulary). If the role that you specify
-    #   doesn’t have the appropriate permissions to access the specified
-    #   Amazon S3 location, your request fails.
+    #   this case, your custom vocabulary). If you include
+    #   `EncryptionConfiguration` in your request, this role must also have
+    #   permissions to access the specified KMS key. If the role that you
+    #   specify doesn’t have the appropriate permissions, your request
+    #   fails.
     #
     #   IAM role ARNs have the format
     #   `arn:partition:iam::account:role/role-name-with-path`. For example:
@@ -5935,6 +6100,13 @@ module Aws::TranscribeService
     #   [1]: https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_identifiers.html#identifiers-arns
     #   @return [String]
     #
+    # @!attribute [rw] encryption_configuration
+    #   Specifies the new encryption configuration for your custom
+    #   vocabulary. The vocabulary artifacts are re-encrypted in place using
+    #   the specified KMS key or with an AWS-owned key if a key is not
+    #   supplied.
+    #   @return [Types::EncryptionConfiguration]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/transcribe-2017-10-26/UpdateVocabularyRequest AWS API Documentation
     #
     class UpdateVocabularyRequest < Struct.new(
@@ -5942,7 +6114,8 @@ module Aws::TranscribeService
       :language_code,
       :phrases,
       :vocabulary_file_uri,
-      :data_access_role_arn)
+      :data_access_role_arn,
+      :encryption_configuration)
       SENSITIVE = []
       include Aws::Structure
     end

data/lib/aws-sdk-transcribeservice.rb

@@ -55,7 +55,7 @@ module Aws::TranscribeService
   autoload :EndpointProvider, 'aws-sdk-transcribeservice/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-transcribeservice/endpoints'
 
-  GEM_VERSION = '1.145.0'
+  GEM_VERSION = '1.146.0'
 
 end
 

data/sig/client.rbs

@@ -117,6 +117,10 @@ module Aws
                                      tuning_data_s3_uri: ::String?,
                                      data_access_role_arn: ::String
                                    },
+                                   ?encryption_configuration: {
+                                     kms_encryption_context: Hash[::String, ::String]?,
+                                     kms_key: ::String
+                                   },
                                    ?tags: Array[
                                      {
                                        key: ::String,
@@ -168,7 +172,11 @@ module Aws
                                    value: ::String
                                  }
                                ],
-                               ?data_access_role_arn: ::String
+                               ?data_access_role_arn: ::String,
+                               ?encryption_configuration: {
+                                 kms_encryption_context: Hash[::String, ::String]?,
+                                 kms_key: ::String
+                               }
                              ) -> _CreateVocabularyResponseSuccess
                            | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _CreateVocabularyResponseSuccess
 
@@ -190,7 +198,11 @@ module Aws
                                           value: ::String
                                         }
                                       ],
-                                      ?data_access_role_arn: ::String
+                                      ?data_access_role_arn: ::String,
+                                      ?encryption_configuration: {
+                                        kms_encryption_context: Hash[::String, ::String]?,
+                                        kms_key: ::String
+                                      }
                                     ) -> _CreateVocabularyFilterResponseSuccess
                                   | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _CreateVocabularyFilterResponseSuccess
 
@@ -337,6 +349,8 @@ module Aws
         def last_modified_time: () -> ::Time
         def failure_reason: () -> ::String
         def download_uri: () -> ::String
+        def data_access_role_arn: () -> ::String
+        def encryption_configuration: () -> Types::EncryptionConfiguration
       end
       # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/TranscribeService/Client.html#get_vocabulary-instance_method
       def get_vocabulary: (
@@ -350,6 +364,8 @@ module Aws
         def language_code: () -> ("af-ZA" | "ar-AE" | "ar-SA" | "am-ET" | "cy-GB" | "da-DK" | "de-CH" | "de-DE" | "en-AB" | "en-AU" | "en-GB" | "en-IE" | "en-IN" | "en-US" | "en-WL" | "es-ES" | "es-MX" | "es-US" | "fa-AF" | "fa-IR" | "fr-CA" | "fr-FR" | "ga-IE" | "gd-GB" | "he-IL" | "hi-IN" | "ht-HT" | "id-ID" | "it-IT" | "ja-JP" | "jv-ID" | "km-KH" | "ko-KR" | "my-MM" | "ms-MY" | "nl-NL" | "pt-BR" | "pt-PT" | "ru-RU" | "ta-IN" | "te-IN" | "tr-TR" | "zh-CN" | "zh-TW" | "th-TH" | "en-ZA" | "en-NZ" | "vi-VN" | "sv-SE" | "ab-GE" | "ast-ES" | "az-AZ" | "ba-RU" | "be-BY" | "bg-BG" | "bn-IN" | "bs-BA" | "ca-ES" | "ckb-IQ" | "ckb-IR" | "cs-CZ" | "cy-WL" | "el-GR" | "et-EE" | "et-ET" | "eu-ES" | "fi-FI" | "gl-ES" | "gu-IN" | "ha-NG" | "hr-HR" | "hu-HU" | "hy-AM" | "is-IS" | "ka-GE" | "kab-DZ" | "kk-KZ" | "kn-IN" | "ky-KG" | "lg-IN" | "lt-LT" | "lv-LV" | "mhr-RU" | "mi-NZ" | "mk-MK" | "ml-IN" | "mn-MN" | "mr-IN" | "mt-MT" | "no-NO" | "ne-NP" | "or-IN" | "pa-IN" | "pl-PL" | "ps-AF" | "ro-RO" | "rw-RW" | "si-LK" | "sk-SK" | "sl-SI" | "so-SO" | "sq-AL" | "sr-RS" | "su-ID" | "sw-BI" | "sw-KE" | "sw-RW" | "sw-TZ" | "sw-UG" | "tl-PH" | "tt-RU" | "ug-CN" | "uk-UA" | "uz-UZ" | "wo-SN" | "zh-HK" | "zu-ZA")
         def last_modified_time: () -> ::Time
         def download_uri: () -> ::String
+        def data_access_role_arn: () -> ::String
+        def encryption_configuration: () -> Types::EncryptionConfiguration
       end
       # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/TranscribeService/Client.html#get_vocabulary_filter-instance_method
       def get_vocabulary_filter: (
@@ -735,6 +751,23 @@ module Aws
                                           ) -> _UpdateCallAnalyticsCategoryResponseSuccess
                                         | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _UpdateCallAnalyticsCategoryResponseSuccess
 
+      interface _UpdateLanguageModelResponseSuccess
+        include ::Seahorse::Client::_ResponseSuccess[Types::UpdateLanguageModelResponse]
+        def model_name: () -> ::String
+        def model_status: () -> ("IN_PROGRESS" | "FAILED" | "COMPLETED")
+        def last_modified_time: () -> ::Time
+      end
+      # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/TranscribeService/Client.html#update_language_model-instance_method
+      def update_language_model: (
+                                   model_name: ::String,
+                                   ?data_access_role_arn: ::String,
+                                   ?encryption_configuration: {
+                                     kms_encryption_context: Hash[::String, ::String]?,
+                                     kms_key: ::String
+                                   }
+                                 ) -> _UpdateLanguageModelResponseSuccess
+                               | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _UpdateLanguageModelResponseSuccess
+
       interface _UpdateMedicalVocabularyResponseSuccess
         include ::Seahorse::Client::_ResponseSuccess[Types::UpdateMedicalVocabularyResponse]
         def vocabulary_name: () -> ::String
@@ -763,7 +796,11 @@ module Aws
                                language_code: ("af-ZA" | "ar-AE" | "ar-SA" | "am-ET" | "cy-GB" | "da-DK" | "de-CH" | "de-DE" | "en-AB" | "en-AU" | "en-GB" | "en-IE" | "en-IN" | "en-US" | "en-WL" | "es-ES" | "es-MX" | "es-US" | "fa-AF" | "fa-IR" | "fr-CA" | "fr-FR" | "ga-IE" | "gd-GB" | "he-IL" | "hi-IN" | "ht-HT" | "id-ID" | "it-IT" | "ja-JP" | "jv-ID" | "km-KH" | "ko-KR" | "my-MM" | "ms-MY" | "nl-NL" | "pt-BR" | "pt-PT" | "ru-RU" | "ta-IN" | "te-IN" | "tr-TR" | "zh-CN" | "zh-TW" | "th-TH" | "en-ZA" | "en-NZ" | "vi-VN" | "sv-SE" | "ab-GE" | "ast-ES" | "az-AZ" | "ba-RU" | "be-BY" | "bg-BG" | "bn-IN" | "bs-BA" | "ca-ES" | "ckb-IQ" | "ckb-IR" | "cs-CZ" | "cy-WL" | "el-GR" | "et-EE" | "et-ET" | "eu-ES" | "fi-FI" | "gl-ES" | "gu-IN" | "ha-NG" | "hr-HR" | "hu-HU" | "hy-AM" | "is-IS" | "ka-GE" | "kab-DZ" | "kk-KZ" | "kn-IN" | "ky-KG" | "lg-IN" | "lt-LT" | "lv-LV" | "mhr-RU" | "mi-NZ" | "mk-MK" | "ml-IN" | "mn-MN" | "mr-IN" | "mt-MT" | "no-NO" | "ne-NP" | "or-IN" | "pa-IN" | "pl-PL" | "ps-AF" | "ro-RO" | "rw-RW" | "si-LK" | "sk-SK" | "sl-SI" | "so-SO" | "sq-AL" | "sr-RS" | "su-ID" | "sw-BI" | "sw-KE" | "sw-RW" | "sw-TZ" | "sw-UG" | "tl-PH" | "tt-RU" | "ug-CN" | "uk-UA" | "uz-UZ" | "wo-SN" | "zh-HK" | "zu-ZA"),
                                ?phrases: Array[::String],
                                ?vocabulary_file_uri: ::String,
-                               ?data_access_role_arn: ::String
+                               ?data_access_role_arn: ::String,
+                               ?encryption_configuration: {
+                                 kms_encryption_context: Hash[::String, ::String]?,
+                                 kms_key: ::String
+                               }
                              ) -> _UpdateVocabularyResponseSuccess
                            | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _UpdateVocabularyResponseSuccess
 
@@ -778,7 +815,11 @@ module Aws
                                       vocabulary_filter_name: ::String,
                                       ?words: Array[::String],
                                       ?vocabulary_filter_file_uri: ::String,
-                                      ?data_access_role_arn: ::String
+                                      ?data_access_role_arn: ::String,
+                                      ?encryption_configuration: {
+                                        kms_encryption_context: Hash[::String, ::String]?,
+                                        kms_key: ::String
+                                      }
                                     ) -> _UpdateVocabularyFilterResponseSuccess
                                   | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _UpdateVocabularyFilterResponseSuccess
 

data/sig/types.rbs

@@ -129,6 +129,7 @@ module Aws::TranscribeService
       attr_accessor base_model_name: ("NarrowBand" | "WideBand")
       attr_accessor model_name: ::String
       attr_accessor input_data_config: Types::InputDataConfig
+      attr_accessor encryption_configuration: Types::EncryptionConfiguration
       attr_accessor tags: ::Array[Types::Tag]
       SENSITIVE: []
     end
@@ -166,6 +167,7 @@ module Aws::TranscribeService
       attr_accessor vocabulary_filter_file_uri: ::String
       attr_accessor tags: ::Array[Types::Tag]
       attr_accessor data_access_role_arn: ::String
+      attr_accessor encryption_configuration: Types::EncryptionConfiguration
       SENSITIVE: []
     end
 
@@ -183,6 +185,7 @@ module Aws::TranscribeService
       attr_accessor vocabulary_file_uri: ::String
       attr_accessor tags: ::Array[Types::Tag]
       attr_accessor data_access_role_arn: ::String
+      attr_accessor encryption_configuration: Types::EncryptionConfiguration
       SENSITIVE: []
     end
 
@@ -256,6 +259,12 @@ module Aws::TranscribeService
       SENSITIVE: []
     end
 
+    class EncryptionConfiguration
+      attr_accessor kms_encryption_context: ::Hash[::String, ::String]
+      attr_accessor kms_key: ::String
+      SENSITIVE: []
+    end
+
     class GetCallAnalyticsCategoryRequest
       attr_accessor category_name: ::String
       SENSITIVE: []
@@ -331,6 +340,8 @@ module Aws::TranscribeService
       attr_accessor language_code: ("af-ZA" | "ar-AE" | "ar-SA" | "am-ET" | "cy-GB" | "da-DK" | "de-CH" | "de-DE" | "en-AB" | "en-AU" | "en-GB" | "en-IE" | "en-IN" | "en-US" | "en-WL" | "es-ES" | "es-MX" | "es-US" | "fa-AF" | "fa-IR" | "fr-CA" | "fr-FR" | "ga-IE" | "gd-GB" | "he-IL" | "hi-IN" | "ht-HT" | "id-ID" | "it-IT" | "ja-JP" | "jv-ID" | "km-KH" | "ko-KR" | "my-MM" | "ms-MY" | "nl-NL" | "pt-BR" | "pt-PT" | "ru-RU" | "ta-IN" | "te-IN" | "tr-TR" | "zh-CN" | "zh-TW" | "th-TH" | "en-ZA" | "en-NZ" | "vi-VN" | "sv-SE" | "ab-GE" | "ast-ES" | "az-AZ" | "ba-RU" | "be-BY" | "bg-BG" | "bn-IN" | "bs-BA" | "ca-ES" | "ckb-IQ" | "ckb-IR" | "cs-CZ" | "cy-WL" | "el-GR" | "et-EE" | "et-ET" | "eu-ES" | "fi-FI" | "gl-ES" | "gu-IN" | "ha-NG" | "hr-HR" | "hu-HU" | "hy-AM" | "is-IS" | "ka-GE" | "kab-DZ" | "kk-KZ" | "kn-IN" | "ky-KG" | "lg-IN" | "lt-LT" | "lv-LV" | "mhr-RU" | "mi-NZ" | "mk-MK" | "ml-IN" | "mn-MN" | "mr-IN" | "mt-MT" | "no-NO" | "ne-NP" | "or-IN" | "pa-IN" | "pl-PL" | "ps-AF" | "ro-RO" | "rw-RW" | "si-LK" | "sk-SK" | "sl-SI" | "so-SO" | "sq-AL" | "sr-RS" | "su-ID" | "sw-BI" | "sw-KE" | "sw-RW" | "sw-TZ" | "sw-UG" | "tl-PH" | "tt-RU" | "ug-CN" | "uk-UA" | "uz-UZ" | "wo-SN" | "zh-HK" | "zu-ZA")
       attr_accessor last_modified_time: ::Time
       attr_accessor download_uri: ::String
+      attr_accessor data_access_role_arn: ::String
+      attr_accessor encryption_configuration: Types::EncryptionConfiguration
       SENSITIVE: []
     end
 
@@ -346,6 +357,8 @@ module Aws::TranscribeService
       attr_accessor last_modified_time: ::Time
       attr_accessor failure_reason: ::String
       attr_accessor download_uri: ::String
+      attr_accessor data_access_role_arn: ::String
+      attr_accessor encryption_configuration: Types::EncryptionConfiguration
       SENSITIVE: []
     end
 
@@ -399,6 +412,7 @@ module Aws::TranscribeService
       attr_accessor upgrade_availability: bool
       attr_accessor failure_reason: ::String
       attr_accessor input_data_config: Types::InputDataConfig
+      attr_accessor encryption_configuration: Types::EncryptionConfiguration
       SENSITIVE: []
     end
 
@@ -942,6 +956,20 @@ module Aws::TranscribeService
       SENSITIVE: []
     end
 
+    class UpdateLanguageModelRequest
+      attr_accessor model_name: ::String
+      attr_accessor data_access_role_arn: ::String
+      attr_accessor encryption_configuration: Types::EncryptionConfiguration
+      SENSITIVE: []
+    end
+
+    class UpdateLanguageModelResponse
+      attr_accessor model_name: ::String
+      attr_accessor model_status: ("IN_PROGRESS" | "FAILED" | "COMPLETED")
+      attr_accessor last_modified_time: ::Time
+      SENSITIVE: []
+    end
+
     class UpdateMedicalVocabularyRequest
       attr_accessor vocabulary_name: ::String
       attr_accessor language_code: ("af-ZA" | "ar-AE" | "ar-SA" | "am-ET" | "cy-GB" | "da-DK" | "de-CH" | "de-DE" | "en-AB" | "en-AU" | "en-GB" | "en-IE" | "en-IN" | "en-US" | "en-WL" | "es-ES" | "es-MX" | "es-US" | "fa-AF" | "fa-IR" | "fr-CA" | "fr-FR" | "ga-IE" | "gd-GB" | "he-IL" | "hi-IN" | "ht-HT" | "id-ID" | "it-IT" | "ja-JP" | "jv-ID" | "km-KH" | "ko-KR" | "my-MM" | "ms-MY" | "nl-NL" | "pt-BR" | "pt-PT" | "ru-RU" | "ta-IN" | "te-IN" | "tr-TR" | "zh-CN" | "zh-TW" | "th-TH" | "en-ZA" | "en-NZ" | "vi-VN" | "sv-SE" | "ab-GE" | "ast-ES" | "az-AZ" | "ba-RU" | "be-BY" | "bg-BG" | "bn-IN" | "bs-BA" | "ca-ES" | "ckb-IQ" | "ckb-IR" | "cs-CZ" | "cy-WL" | "el-GR" | "et-EE" | "et-ET" | "eu-ES" | "fi-FI" | "gl-ES" | "gu-IN" | "ha-NG" | "hr-HR" | "hu-HU" | "hy-AM" | "is-IS" | "ka-GE" | "kab-DZ" | "kk-KZ" | "kn-IN" | "ky-KG" | "lg-IN" | "lt-LT" | "lv-LV" | "mhr-RU" | "mi-NZ" | "mk-MK" | "ml-IN" | "mn-MN" | "mr-IN" | "mt-MT" | "no-NO" | "ne-NP" | "or-IN" | "pa-IN" | "pl-PL" | "ps-AF" | "ro-RO" | "rw-RW" | "si-LK" | "sk-SK" | "sl-SI" | "so-SO" | "sq-AL" | "sr-RS" | "su-ID" | "sw-BI" | "sw-KE" | "sw-RW" | "sw-TZ" | "sw-UG" | "tl-PH" | "tt-RU" | "ug-CN" | "uk-UA" | "uz-UZ" | "wo-SN" | "zh-HK" | "zu-ZA")
@@ -962,6 +990,7 @@ module Aws::TranscribeService
       attr_accessor words: ::Array[::String]
       attr_accessor vocabulary_filter_file_uri: ::String
       attr_accessor data_access_role_arn: ::String
+      attr_accessor encryption_configuration: Types::EncryptionConfiguration
       SENSITIVE: []
     end
 
@@ -978,6 +1007,7 @@ module Aws::TranscribeService
       attr_accessor phrases: ::Array[::String]
       attr_accessor vocabulary_file_uri: ::String
       attr_accessor data_access_role_arn: ::String
+      attr_accessor encryption_configuration: Types::EncryptionConfiguration
       SENSITIVE: []
     end
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-transcribeservice
 version: !ruby/object:Gem::Version
-  version: 1.145.0
+  version: 1.146.0
 platform: ruby
 authors:
 - Amazon Web Services