@aws-sdk/client-backup 3.933.0 → 3.935.0

package/dist-types/models/models_0.d.ts

@@ -1,5 +1,4 @@
-import { ExceptionOptionType as __ExceptionOptionType } from "@smithy/smithy-client";
-import { BackupServiceException as __BaseException } from "./BackupServiceException";
+import { AggregationPeriod, BackupJobState, BackupJobStatus, BackupVaultEvent, ConditionType, CopyJobState, CopyJobStatus, EncryptionKeyType, Index, IndexStatus, LegalHoldStatus, LifecycleDeleteAfterEvent, MalwareScanner, MpaRevokeSessionStatus, MpaSessionStatus, RecoveryPointStatus, RestoreDeletionStatus, RestoreJobState, RestoreJobStatus, RestoreTestingRecoveryPointSelectionAlgorithm, RestoreTestingRecoveryPointType, RestoreValidationStatus, RuleExecutionType, ScanFinding, ScanJobState, ScanJobStatus, ScanMode, ScanResourceType, ScanResultStatus, ScanState, StorageClass, VaultState, VaultType } from "./enums";
 /**
  * <p>The backup options for each resource type.</p>
  * @public
@@ -34,51 +33,25 @@ export interface AdvancedBackupSetting {
     BackupOptions?: Record<string, string> | undefined;
 }
 /**
+ * <p>Contains aggregated scan results across multiple scan operations, providing a summary of scan status and findings.</p>
  * @public
- * @enum
  */
-export declare const AggregationPeriod: {
-    readonly FOURTEEN_DAYS: "FOURTEEN_DAYS";
-    readonly ONE_DAY: "ONE_DAY";
-    readonly SEVEN_DAYS: "SEVEN_DAYS";
-};
-/**
- * @public
- */
-export type AggregationPeriod = (typeof AggregationPeriod)[keyof typeof AggregationPeriod];
-/**
- * <p>The required resource already exists.</p>
- * @public
- */
-export declare class AlreadyExistsException extends __BaseException {
-    readonly name: "AlreadyExistsException";
-    readonly $fault: "client";
-    Code?: string | undefined;
-    Message?: string | undefined;
-    /**
-     * <p></p>
-     * @public
-     */
-    CreatorRequestId?: string | undefined;
+export interface AggregatedScanResult {
     /**
-     * <p></p>
+     * <p>A Boolean value indicating whether any of the aggregated scans failed.</p>
      * @public
      */
-    Arn?: string | undefined;
+    FailedScan?: boolean | undefined;
     /**
-     * <p></p>
+     * <p>An array of findings discovered across all aggregated scans.</p>
      * @public
      */
-    Type?: string | undefined;
+    Findings?: ScanFinding[] | undefined;
     /**
-     * <p></p>
+     * <p>The timestamp when the aggregated scan result was last computed, in Unix format and Coordinated Universal Time (UTC).</p>
      * @public
      */
-    Context?: string | undefined;
-    /**
-     * @internal
-     */
-    constructor(opts: __ExceptionOptionType<AlreadyExistsException, __BaseException>);
+    LastComputed?: Date | undefined;
 }
 /**
  * @public
@@ -100,128 +73,6 @@ export interface AssociateBackupVaultMpaApprovalTeamInput {
      */
     RequesterComment?: string | undefined;
 }
-/**
- * <p>Indicates that something is wrong with a parameter's value. For example, the value is
- *          out of range.</p>
- * @public
- */
-export declare class InvalidParameterValueException extends __BaseException {
-    readonly name: "InvalidParameterValueException";
-    readonly $fault: "client";
-    Code?: string | undefined;
-    Message?: string | undefined;
-    /**
-     * <p></p>
-     * @public
-     */
-    Type?: string | undefined;
-    /**
-     * <p></p>
-     * @public
-     */
-    Context?: string | undefined;
-    /**
-     * @internal
-     */
-    constructor(opts: __ExceptionOptionType<InvalidParameterValueException, __BaseException>);
-}
-/**
- * <p>Indicates that something is wrong with the input to the request. For example, a
- *          parameter is of the wrong type.</p>
- * @public
- */
-export declare class InvalidRequestException extends __BaseException {
-    readonly name: "InvalidRequestException";
-    readonly $fault: "client";
-    Code?: string | undefined;
-    Message?: string | undefined;
-    /**
-     * <p></p>
-     * @public
-     */
-    Type?: string | undefined;
-    /**
-     * <p></p>
-     * @public
-     */
-    Context?: string | undefined;
-    /**
-     * @internal
-     */
-    constructor(opts: __ExceptionOptionType<InvalidRequestException, __BaseException>);
-}
-/**
- * <p>Indicates that a required parameter is missing.</p>
- * @public
- */
-export declare class MissingParameterValueException extends __BaseException {
-    readonly name: "MissingParameterValueException";
-    readonly $fault: "client";
-    Code?: string | undefined;
-    Message?: string | undefined;
-    /**
-     * <p></p>
-     * @public
-     */
-    Type?: string | undefined;
-    /**
-     * <p></p>
-     * @public
-     */
-    Context?: string | undefined;
-    /**
-     * @internal
-     */
-    constructor(opts: __ExceptionOptionType<MissingParameterValueException, __BaseException>);
-}
-/**
- * <p>A resource that is required for the action doesn't exist.</p>
- * @public
- */
-export declare class ResourceNotFoundException extends __BaseException {
-    readonly name: "ResourceNotFoundException";
-    readonly $fault: "client";
-    Code?: string | undefined;
-    Message?: string | undefined;
-    /**
-     * <p></p>
-     * @public
-     */
-    Type?: string | undefined;
-    /**
-     * <p></p>
-     * @public
-     */
-    Context?: string | undefined;
-    /**
-     * @internal
-     */
-    constructor(opts: __ExceptionOptionType<ResourceNotFoundException, __BaseException>);
-}
-/**
- * <p>The request failed due to a temporary failure of the server.</p>
- * @public
- */
-export declare class ServiceUnavailableException extends __BaseException {
-    readonly name: "ServiceUnavailableException";
-    readonly $fault: "server";
-    Code?: string | undefined;
-    Message?: string | undefined;
-    /**
-     * <p></p>
-     * @public
-     */
-    Type?: string | undefined;
-    /**
-     * <p></p>
-     * @public
-     */
-    Context?: string | undefined;
-    /**
-     * @internal
-     */
-    constructor(opts: __ExceptionOptionType<ServiceUnavailableException, __BaseException>);
-}
 /**
  * <p>Contains information about the backup plan and rule that Backup used to
  *          initiate the recovery point backup.</p>
@@ -272,17 +123,6 @@ export interface RecoveryPointCreator {
      */
     BackupRuleTimezone?: string | undefined;
 }
-/**
- * @public
- * @enum
- */
-export declare const LifecycleDeleteAfterEvent: {
-    readonly DELETE_AFTER_COPY: "DELETE_AFTER_COPY";
-};
-/**
- * @public
- */
-export type LifecycleDeleteAfterEvent = (typeof LifecycleDeleteAfterEvent)[keyof typeof LifecycleDeleteAfterEvent];
 /**
  * <p>Specifies the time period, in days, before a recovery point transitions to cold storage
  *          or is deleted.</p>
@@ -324,25 +164,6 @@ export interface Lifecycle {
      */
     DeleteAfterEvent?: LifecycleDeleteAfterEvent | undefined;
 }
-/**
- * @public
- * @enum
- */
-export declare const BackupJobState: {
-    readonly ABORTED: "ABORTED";
-    readonly ABORTING: "ABORTING";
-    readonly COMPLETED: "COMPLETED";
-    readonly CREATED: "CREATED";
-    readonly EXPIRED: "EXPIRED";
-    readonly FAILED: "FAILED";
-    readonly PARTIAL: "PARTIAL";
-    readonly PENDING: "PENDING";
-    readonly RUNNING: "RUNNING";
-};
-/**
- * @public
- */
-export type BackupJobState = (typeof BackupJobState)[keyof typeof BackupJobState];
 /**
  * <p>Contains detailed information about a backup job.</p>
  * @public
@@ -593,27 +414,6 @@ export interface BackupJob {
      */
     MessageCategory?: string | undefined;
 }
-/**
- * @public
- * @enum
- */
-export declare const BackupJobStatus: {
-    readonly ABORTED: "ABORTED";
-    readonly ABORTING: "ABORTING";
-    readonly AGGREGATE_ALL: "AGGREGATE_ALL";
-    readonly ANY: "ANY";
-    readonly COMPLETED: "COMPLETED";
-    readonly CREATED: "CREATED";
-    readonly EXPIRED: "EXPIRED";
-    readonly FAILED: "FAILED";
-    readonly PARTIAL: "PARTIAL";
-    readonly PENDING: "PENDING";
-    readonly RUNNING: "RUNNING";
-};
-/**
- * @public
- */
-export type BackupJobStatus = (typeof BackupJobStatus)[keyof typeof BackupJobStatus];
 /**
  * <p>This is a summary of jobs created
  *          or running within the most recent 30 days.</p>
@@ -733,6 +533,23 @@ export interface IndexAction {
      */
     ResourceTypes?: string[] | undefined;
 }
+/**
+ * <p>Defines a scanning action that specifies the malware scanner and scan mode to use.</p>
+ * @public
+ */
+export interface ScanAction {
+    /**
+     * <p>The malware scanner to use for the scan action. Currently only <code>GUARDDUTY</code> is supported.</p>
+     * @public
+     */
+    MalwareScanner?: MalwareScanner | undefined;
+    /**
+     * <p>The scanning mode to use for the scan action.</p>
+     *          <p>Valid values: <code>FULL_SCAN</code> | <code>INCREMENTAL_SCAN</code>.</p>
+     * @public
+     */
+    ScanMode?: ScanMode | undefined;
+}
 /**
  * <p>Specifies a scheduled task used to back up a selection of resources.</p>
  * @public
@@ -845,6 +662,33 @@ export interface BackupRule {
      * @public
      */
     IndexActions?: IndexAction[] | undefined;
+    /**
+     * <p>Contains your scanning configuration for the backup rule and includes the malware scanner, and scan mode of either full or incremental.</p>
+     * @public
+     */
+    ScanActions?: ScanAction[] | undefined;
+}
+/**
+ * <p>Contains configuration settings for malware scanning, including the scanner type, target resource types, and scanner role.</p>
+ * @public
+ */
+export interface ScanSetting {
+    /**
+     * <p>The malware scanner to use for scanning. Currently only <code>GUARDDUTY</code> is supported.</p>
+     * @public
+     */
+    MalwareScanner?: MalwareScanner | undefined;
+    /**
+     * <p>An array of resource types to be scanned for malware.</p>
+     * @public
+     */
+    ResourceTypes?: string[] | undefined;
+    /**
+     * <p>The Amazon Resource Name (ARN) of the IAM role that the scanner uses to access resources; for example,
+     *          <code>arn:aws:iam::123456789012:role/ScannerRole</code>.</p>
+     * @public
+     */
+    ScannerRoleArn?: string | undefined;
 }
 /**
  * <p>Contains an optional backup plan display name and an array of <code>BackupRule</code>
@@ -873,6 +717,11 @@ export interface BackupPlan {
      * @public
      */
     AdvancedBackupSettings?: AdvancedBackupSetting[] | undefined;
+    /**
+     * <p>Contains your scanning configuration for the backup plan and includes the Malware scanner, your selected resources, and scanner role.</p>
+     * @public
+     */
+    ScanSettings?: ScanSetting[] | undefined;
 }
 /**
  * <p>Specifies a scheduled task used to back up a selection of resources.</p>
@@ -984,6 +833,11 @@ export interface BackupRuleInput {
      * @public
      */
     IndexActions?: IndexAction[] | undefined;
+    /**
+     * <p>Contains your scanning configuration for the backup rule and includes the malware scanner, and scan mode of either full or incremental.</p>
+     * @public
+     */
+    ScanActions?: ScanAction[] | undefined;
 }
 /**
  * <p>Contains an optional backup plan display name and an array of <code>BackupRule</code>
@@ -1010,6 +864,11 @@ export interface BackupPlanInput {
      * @public
      */
     AdvancedBackupSettings?: AdvancedBackupSetting[] | undefined;
+    /**
+     * <p>Contains your scanning configuration for the backup rule and includes the malware scanner, and scan mode of either full or incremental.</p>
+     * @public
+     */
+    ScanSettings?: ScanSetting[] | undefined;
 }
 /**
  * <p>Contains metadata about a backup plan.</p>
@@ -1144,17 +1003,6 @@ export interface Conditions {
      */
     StringNotLike?: ConditionParameter[] | undefined;
 }
-/**
- * @public
- * @enum
- */
-export declare const ConditionType: {
-    readonly STRINGEQUALS: "STRINGEQUALS";
-};
-/**
- * @public
- */
-export type ConditionType = (typeof ConditionType)[keyof typeof ConditionType];
 /**
  * <p>Contains an array of triplets made up of a condition type (such as
  *             <code>StringEquals</code>), a key, and a value. Used to filter resources using their
@@ -1288,75 +1136,6 @@ export interface BackupSelectionsListMember {
      */
     IamRoleArn?: string | undefined;
 }
-/**
- * @public
- * @enum
- */
-export declare const BackupVaultEvent: {
-    readonly BACKUP_JOB_COMPLETED: "BACKUP_JOB_COMPLETED";
-    readonly BACKUP_JOB_EXPIRED: "BACKUP_JOB_EXPIRED";
-    readonly BACKUP_JOB_FAILED: "BACKUP_JOB_FAILED";
-    readonly BACKUP_JOB_STARTED: "BACKUP_JOB_STARTED";
-    readonly BACKUP_JOB_SUCCESSFUL: "BACKUP_JOB_SUCCESSFUL";
-    readonly BACKUP_PLAN_CREATED: "BACKUP_PLAN_CREATED";
-    readonly BACKUP_PLAN_MODIFIED: "BACKUP_PLAN_MODIFIED";
-    readonly CONTINUOUS_BACKUP_INTERRUPTED: "CONTINUOUS_BACKUP_INTERRUPTED";
-    readonly COPY_JOB_FAILED: "COPY_JOB_FAILED";
-    readonly COPY_JOB_STARTED: "COPY_JOB_STARTED";
-    readonly COPY_JOB_SUCCESSFUL: "COPY_JOB_SUCCESSFUL";
-    readonly RECOVERY_POINT_INDEXING_FAILED: "RECOVERY_POINT_INDEXING_FAILED";
-    readonly RECOVERY_POINT_INDEX_COMPLETED: "RECOVERY_POINT_INDEX_COMPLETED";
-    readonly RECOVERY_POINT_INDEX_DELETED: "RECOVERY_POINT_INDEX_DELETED";
-    readonly RECOVERY_POINT_MODIFIED: "RECOVERY_POINT_MODIFIED";
-    readonly RESTORE_JOB_COMPLETED: "RESTORE_JOB_COMPLETED";
-    readonly RESTORE_JOB_FAILED: "RESTORE_JOB_FAILED";
-    readonly RESTORE_JOB_STARTED: "RESTORE_JOB_STARTED";
-    readonly RESTORE_JOB_SUCCESSFUL: "RESTORE_JOB_SUCCESSFUL";
-    readonly S3_BACKUP_OBJECT_FAILED: "S3_BACKUP_OBJECT_FAILED";
-    readonly S3_RESTORE_OBJECT_FAILED: "S3_RESTORE_OBJECT_FAILED";
-};
-/**
- * @public
- */
-export type BackupVaultEvent = (typeof BackupVaultEvent)[keyof typeof BackupVaultEvent];
-/**
- * @public
- * @enum
- */
-export declare const EncryptionKeyType: {
-    readonly AWS_OWNED_KMS_KEY: "AWS_OWNED_KMS_KEY";
-    readonly CUSTOMER_MANAGED_KMS_KEY: "CUSTOMER_MANAGED_KMS_KEY";
-};
-/**
- * @public
- */
-export type EncryptionKeyType = (typeof EncryptionKeyType)[keyof typeof EncryptionKeyType];
-/**
- * @public
- * @enum
- */
-export declare const VaultState: {
-    readonly AVAILABLE: "AVAILABLE";
-    readonly CREATING: "CREATING";
-    readonly FAILED: "FAILED";
-};
-/**
- * @public
- */
-export type VaultState = (typeof VaultState)[keyof typeof VaultState];
-/**
- * @public
- * @enum
- */
-export declare const VaultType: {
-    readonly BACKUP_VAULT: "BACKUP_VAULT";
-    readonly LOGICALLY_AIR_GAPPED_BACKUP_VAULT: "LOGICALLY_AIR_GAPPED_BACKUP_VAULT";
-    readonly RESTORE_ACCESS_BACKUP_VAULT: "RESTORE_ACCESS_BACKUP_VAULT";
-};
-/**
- * @public
- */
-export type VaultType = (typeof VaultType)[keyof typeof VaultType];
 /**
  * <p>Contains metadata about a backup vault.</p>
  * @public
@@ -1521,56 +1300,6 @@ export interface CancelLegalHoldInput {
  */
 export interface CancelLegalHoldOutput {
 }
-/**
- * <p>Backup is already performing an action on this recovery point. It can't
- *          perform the action you requested until the first action finishes. Try again later.</p>
- * @public
- */
-export declare class InvalidResourceStateException extends __BaseException {
-    readonly name: "InvalidResourceStateException";
-    readonly $fault: "client";
-    Code?: string | undefined;
-    Message?: string | undefined;
-    /**
-     * <p></p>
-     * @public
-     */
-    Type?: string | undefined;
-    /**
-     * <p></p>
-     * @public
-     */
-    Context?: string | undefined;
-    /**
-     * @internal
-     */
-    constructor(opts: __ExceptionOptionType<InvalidResourceStateException, __BaseException>);
-}
-/**
- * <p>Backup can't perform the action that you requested until it finishes
- *          performing a previous action. Try again later.</p>
- * @public
- */
-export declare class ConflictException extends __BaseException {
-    readonly name: "ConflictException";
-    readonly $fault: "client";
-    Code?: string | undefined;
-    Message?: string | undefined;
-    /**
-     * <p></p>
-     * @public
-     */
-    Type?: string | undefined;
-    /**
-     * <p></p>
-     * @public
-     */
-    Context?: string | undefined;
-    /**
-     * @internal
-     */
-    constructor(opts: __ExceptionOptionType<ConflictException, __BaseException>);
-}
 /**
  * <p>The parameters for a control. A control can have zero, one, or more than one
  *          parameter. An example of a control with two parameters is: "backup plan frequency is at
@@ -1628,21 +1357,6 @@ export interface ControlScope {
      */
     Tags?: Record<string, string> | undefined;
 }
-/**
- * @public
- * @enum
- */
-export declare const CopyJobState: {
-    readonly COMPLETED: "COMPLETED";
-    readonly CREATED: "CREATED";
-    readonly FAILED: "FAILED";
-    readonly PARTIAL: "PARTIAL";
-    readonly RUNNING: "RUNNING";
-};
-/**
- * @public
- */
-export type CopyJobState = (typeof CopyJobState)[keyof typeof CopyJobState];
 /**
  * <p>Contains detailed information about a copy job.</p>
  * @public
@@ -1826,27 +1540,6 @@ export interface CopyJob {
      */
     MessageCategory?: string | undefined;
 }
-/**
- * @public
- * @enum
- */
-export declare const CopyJobStatus: {
-    readonly ABORTED: "ABORTED";
-    readonly ABORTING: "ABORTING";
-    readonly AGGREGATE_ALL: "AGGREGATE_ALL";
-    readonly ANY: "ANY";
-    readonly COMPLETED: "COMPLETED";
-    readonly COMPLETING: "COMPLETING";
-    readonly CREATED: "CREATED";
-    readonly FAILED: "FAILED";
-    readonly FAILING: "FAILING";
-    readonly PARTIAL: "PARTIAL";
-    readonly RUNNING: "RUNNING";
-};
-/**
- * @public
- */
-export type CopyJobStatus = (typeof CopyJobStatus)[keyof typeof CopyJobStatus];
 /**
  * <p>This is a summary of copy jobs created
  *          or running within the most recent 30 days.</p>
@@ -1975,31 +1668,6 @@ export interface CreateBackupPlanOutput {
      */
     AdvancedBackupSettings?: AdvancedBackupSetting[] | undefined;
 }
-/**
- * <p>A limit in the request has been exceeded; for example, a maximum number of items allowed
- *          in a request.</p>
- * @public
- */
-export declare class LimitExceededException extends __BaseException {
-    readonly name: "LimitExceededException";
-    readonly $fault: "client";
-    Code?: string | undefined;
-    Message?: string | undefined;
-    /**
-     * <p></p>
-     * @public
-     */
-    Type?: string | undefined;
-    /**
-     * <p></p>
-     * @public
-     */
-    Context?: string | undefined;
-    /**
-     * @internal
-     */
-    constructor(opts: __ExceptionOptionType<LimitExceededException, __BaseException>);
-}
 /**
  * @public
  */
@@ -2276,20 +1944,6 @@ export interface CreateLegalHoldInput {
      */
     Tags?: Record<string, string> | undefined;
 }
-/**
- * @public
- * @enum
- */
-export declare const LegalHoldStatus: {
-    readonly ACTIVE: "ACTIVE";
-    readonly CANCELED: "CANCELED";
-    readonly CANCELING: "CANCELING";
-    readonly CREATING: "CREATING";
-};
-/**
- * @public
- */
-export type LegalHoldStatus = (typeof LegalHoldStatus)[keyof typeof LegalHoldStatus];
 /**
  * @public
  */
@@ -2437,7 +2091,7 @@ export interface ReportSetting {
      *          template. The report templates are:</p>
      *          <p>
      *             <code>RESOURCE_COMPLIANCE_REPORT | CONTROL_COMPLIANCE_REPORT | BACKUP_JOB_REPORT |
-     *             COPY_JOB_REPORT | RESTORE_JOB_REPORT</code>
+     *             COPY_JOB_REPORT | RESTORE_JOB_REPORT | SCAN_JOB_REPORT</code>
      *          </p>
      * @public
      */
@@ -2498,7 +2152,7 @@ export interface CreateReportPlanInput {
      *          template. The report templates are:</p>
      *          <p>
      *             <code>RESOURCE_COMPLIANCE_REPORT | CONTROL_COMPLIANCE_REPORT | BACKUP_JOB_REPORT |
-     *             COPY_JOB_REPORT | RESTORE_JOB_REPORT</code>
+     *             COPY_JOB_REPORT | RESTORE_JOB_REPORT | SCAN_JOB_REPORT </code>
      *          </p>
      *          <p>If the report template is <code>RESOURCE_COMPLIANCE_REPORT</code> or
      *             <code>CONTROL_COMPLIANCE_REPORT</code>, this API resource also describes the report
@@ -2598,30 +2252,6 @@ export interface CreateRestoreAccessBackupVaultOutput {
      */
     CreationDate?: Date | undefined;
 }
-/**
- * @public
- * @enum
- */
-export declare const RestoreTestingRecoveryPointSelectionAlgorithm: {
-    readonly LATEST_WITHIN_WINDOW: "LATEST_WITHIN_WINDOW";
-    readonly RANDOM_WITHIN_WINDOW: "RANDOM_WITHIN_WINDOW";
-};
-/**
- * @public
- */
-export type RestoreTestingRecoveryPointSelectionAlgorithm = (typeof RestoreTestingRecoveryPointSelectionAlgorithm)[keyof typeof RestoreTestingRecoveryPointSelectionAlgorithm];
-/**
- * @public
- * @enum
- */
-export declare const RestoreTestingRecoveryPointType: {
-    readonly CONTINUOUS: "CONTINUOUS";
-    readonly SNAPSHOT: "SNAPSHOT";
-};
-/**
- * @public
- */
-export type RestoreTestingRecoveryPointType = (typeof RestoreTestingRecoveryPointType)[keyof typeof RestoreTestingRecoveryPointType];
 /**
  * <p>
  *             <code>RecoveryPointSelection</code> has five parameters (three required and two
@@ -3066,56 +2696,161 @@ export interface CreateRestoreTestingSelectionOutput {
     RestoreTestingSelectionName: string | undefined;
 }
 /**
+ * <p>This contains metadata about resource selection for tiering configurations.</p>
+ *          <p>You can specify up to 5 different resource selections per tiering configuration.
+ *          Data moved to lower-cost tier remains there until deletion (one-way transition).</p>
  * @public
  */
-export interface DeleteBackupPlanInput {
+export interface ResourceSelection {
     /**
-     * <p>Uniquely identifies a backup plan.</p>
+     * <p>An array of strings that either contains ARNs of the associated resources
+     *          or contains a wildcard <code>*</code> to specify all resources.
+     *          You can specify up to 100 specific resources per tiering configuration.</p>
      * @public
      */
-    BackupPlanId: string | undefined;
+    Resources: string[] | undefined;
+    /**
+     * <p>The number of days after creation within a backup vault that an object can transition to the low cost warm storage tier.
+     *          Must be a positive integer between 60 and 36500 days.</p>
+     * @public
+     */
+    TieringDownSettingsInDays: number | undefined;
+    /**
+     * <p>The type of Amazon Web Services resource; for example, <code>S3</code> for Amazon S3.
+     *          For tiering configurations, this is currently limited to <code>S3</code>.</p>
+     * @public
+     */
+    ResourceType: string | undefined;
 }
 /**
+ * <p>This contains metadata about a tiering configuration for create operations.</p>
  * @public
  */
-export interface DeleteBackupPlanOutput {
-    /**
-     * <p>Uniquely identifies a backup plan.</p>
-     * @public
-     */
-    BackupPlanId?: string | undefined;
+export interface TieringConfigurationInputForCreate {
     /**
-     * <p>An Amazon Resource Name (ARN) that uniquely identifies a backup plan; for example,
-     *             <code>arn:aws:backup:us-east-1:123456789012:plan:8F81F553-3A74-4A3F-B93D-B3360DC80C50</code>.</p>
+     * <p>The unique name of the tiering configuration. This cannot be changed
+     *          after creation, and it must consist of only alphanumeric characters and underscores.</p>
      * @public
      */
-    BackupPlanArn?: string | undefined;
+    TieringConfigurationName: string | undefined;
     /**
-     * <p>The date and time a backup plan is deleted, in Unix format and Coordinated Universal
-     *          Time (UTC). The value of <code>DeletionDate</code> is accurate to milliseconds. For
-     *          example, the value 1516925490.087 represents Friday, January 26, 2018 12:11:30.087
-     *          AM.</p>
+     * <p>The name of the backup vault where the tiering configuration applies.
+     *          Use <code>*</code> to apply to all backup vaults.</p>
      * @public
      */
-    DeletionDate?: Date | undefined;
+    BackupVaultName: string | undefined;
     /**
-     * <p>Unique, randomly generated, Unicode, UTF-8 encoded strings that are at most 1,024 bytes
-     *          long. Version IDs cannot be edited.</p>
+     * <p>An array of resource selection objects that specify which resources
+     *          are included in the tiering configuration and their tiering settings.</p>
      * @public
      */
-    VersionId?: string | undefined;
+    ResourceSelection: ResourceSelection[] | undefined;
 }
 /**
  * @public
  */
-export interface DeleteBackupSelectionInput {
+export interface CreateTieringConfigurationInput {
     /**
-     * <p>Uniquely identifies a backup plan.</p>
+     * <p>A tiering configuration must contain a unique <code>TieringConfigurationName</code> string
+     *          you create and must contain a <code>BackupVaultName</code> and <code>ResourceSelection</code>.
+     *          You may optionally include a <code>CreatorRequestId</code> string.</p>
+     *          <p>The <code>TieringConfigurationName</code> is a unique string that is the name of the
+     *          tiering configuration. This cannot be changed after creation, and it must consist of only
+     *          alphanumeric characters and underscores.</p>
      * @public
      */
-    BackupPlanId: string | undefined;
+    TieringConfiguration: TieringConfigurationInputForCreate | undefined;
     /**
-     * <p>Uniquely identifies the body of a request to assign a set of resources to a backup
+     * <p>The tags to assign to the tiering configuration.</p>
+     * @public
+     */
+    TieringConfigurationTags?: Record<string, string> | undefined;
+    /**
+     * <p>This is a unique string that identifies the request and
+     *          allows failed requests to be retried without the risk of running
+     *          the operation twice. This parameter is optional. If used, this
+     *          parameter must contain 1 to 50 alphanumeric or '-_.' characters.</p>
+     * @public
+     */
+    CreatorRequestId?: string | undefined;
+}
+/**
+ * @public
+ */
+export interface CreateTieringConfigurationOutput {
+    /**
+     * <p>An Amazon Resource Name (ARN) that uniquely identifies the created
+     *          tiering configuration.</p>
+     * @public
+     */
+    TieringConfigurationArn?: string | undefined;
+    /**
+     * <p>This unique string is the name of the tiering configuration.</p>
+     *          <p>The name cannot be changed after creation. The name consists of only
+     *          alphanumeric characters and underscores. Maximum length is 200.</p>
+     * @public
+     */
+    TieringConfigurationName?: string | undefined;
+    /**
+     * <p>The date and time a tiering configuration was created, in Unix format
+     *          and Coordinated Universal Time (UTC). The value of <code>CreationTime</code>
+     *          is accurate to milliseconds. For example, the value 1516925490.087 represents
+     *          Friday, January 26, 2018 12:11:30.087AM.</p>
+     * @public
+     */
+    CreationTime?: Date | undefined;
+}
+/**
+ * @public
+ */
+export interface DeleteBackupPlanInput {
+    /**
+     * <p>Uniquely identifies a backup plan.</p>
+     * @public
+     */
+    BackupPlanId: string | undefined;
+}
+/**
+ * @public
+ */
+export interface DeleteBackupPlanOutput {
+    /**
+     * <p>Uniquely identifies a backup plan.</p>
+     * @public
+     */
+    BackupPlanId?: string | undefined;
+    /**
+     * <p>An Amazon Resource Name (ARN) that uniquely identifies a backup plan; for example,
+     *             <code>arn:aws:backup:us-east-1:123456789012:plan:8F81F553-3A74-4A3F-B93D-B3360DC80C50</code>.</p>
+     * @public
+     */
+    BackupPlanArn?: string | undefined;
+    /**
+     * <p>The date and time a backup plan is deleted, in Unix format and Coordinated Universal
+     *          Time (UTC). The value of <code>DeletionDate</code> is accurate to milliseconds. For
+     *          example, the value 1516925490.087 represents Friday, January 26, 2018 12:11:30.087
+     *          AM.</p>
+     * @public
+     */
+    DeletionDate?: Date | undefined;
+    /**
+     * <p>Unique, randomly generated, Unicode, UTF-8 encoded strings that are at most 1,024 bytes
+     *          long. Version IDs cannot be edited.</p>
+     * @public
+     */
+    VersionId?: string | undefined;
+}
+/**
+ * @public
+ */
+export interface DeleteBackupSelectionInput {
+    /**
+     * <p>Uniquely identifies a backup plan.</p>
+     * @public
+     */
+    BackupPlanId: string | undefined;
+    /**
+     * <p>Uniquely identifies the body of a request to assign a set of resources to a backup
      *          plan.</p>
      * @public
      */
@@ -3235,28 +2970,19 @@ export interface DeleteRestoreTestingSelectionInput {
     RestoreTestingSelectionName: string | undefined;
 }
 /**
- * <p>A dependent Amazon Web Services service or resource returned an error to the Backup service, and the action cannot be completed.</p>
  * @public
  */
-export declare class DependencyFailureException extends __BaseException {
-    readonly name: "DependencyFailureException";
-    readonly $fault: "server";
-    Code?: string | undefined;
-    Message?: string | undefined;
+export interface DeleteTieringConfigurationInput {
     /**
-     * <p></p>
+     * <p>The unique name of a tiering configuration.</p>
      * @public
      */
-    Type?: string | undefined;
-    /**
-     * <p></p>
-     * @public
-     */
-    Context?: string | undefined;
-    /**
-     * @internal
-     */
-    constructor(opts: __ExceptionOptionType<DependencyFailureException, __BaseException>);
+    TieringConfigurationName: string | undefined;
+}
+/**
+ * @public
+ */
+export interface DeleteTieringConfigurationOutput {
 }
 /**
  * @public
@@ -3529,19 +3255,6 @@ export interface DescribeBackupVaultInput {
      */
     BackupVaultAccountId?: string | undefined;
 }
-/**
- * @public
- * @enum
- */
-export declare const MpaSessionStatus: {
-    readonly APPROVED: "APPROVED";
-    readonly FAILED: "FAILED";
-    readonly PENDING: "PENDING";
-};
-/**
- * @public
- */
-export type MpaSessionStatus = (typeof MpaSessionStatus)[keyof typeof MpaSessionStatus];
 /**
  * <p>Contains information about the latest update to an MPA approval team association.</p>
  * @public
@@ -3927,49 +3640,32 @@ export interface DescribeRecoveryPointInput {
     BackupVaultAccountId?: string | undefined;
 }
 /**
- * @public
- * @enum
- */
-export declare const IndexStatus: {
-    readonly ACTIVE: "ACTIVE";
-    readonly DELETING: "DELETING";
-    readonly FAILED: "FAILED";
-    readonly PENDING: "PENDING";
-};
-/**
- * @public
- */
-export type IndexStatus = (typeof IndexStatus)[keyof typeof IndexStatus];
-/**
- * @public
- * @enum
- */
-export declare const RecoveryPointStatus: {
-    readonly AVAILABLE: "AVAILABLE";
-    readonly COMPLETED: "COMPLETED";
-    readonly CREATING: "CREATING";
-    readonly DELETING: "DELETING";
-    readonly EXPIRED: "EXPIRED";
-    readonly PARTIAL: "PARTIAL";
-    readonly STOPPED: "STOPPED";
-};
-/**
+ * <p>Contains the results of a security scan, including scanner information, scan state, and any findings discovered.</p>
  * @public
  */
-export type RecoveryPointStatus = (typeof RecoveryPointStatus)[keyof typeof RecoveryPointStatus];
-/**
- * @public
- * @enum
- */
-export declare const StorageClass: {
-    readonly COLD: "COLD";
-    readonly DELETED: "DELETED";
-    readonly WARM: "WARM";
-};
-/**
- * @public
- */
-export type StorageClass = (typeof StorageClass)[keyof typeof StorageClass];
+export interface ScanResult {
+    /**
+     * <p>The malware scanner used to perform the scan. Currently only <code>GUARDDUTY</code> is supported.</p>
+     * @public
+     */
+    MalwareScanner?: MalwareScanner | undefined;
+    /**
+     * <p>The final state of the scan job.</p>
+     *          <p>Valid values: <code>COMPLETED</code> | <code>FAILED</code> | <code>CANCELED</code>.</p>
+     * @public
+     */
+    ScanJobState?: ScanJobState | undefined;
+    /**
+     * <p>The timestamp of when the last scan was performed, in Unix format and Coordinated Universal Time (UTC).</p>
+     * @public
+     */
+    LastScanTimestamp?: Date | undefined;
+    /**
+     * <p>An array of findings discovered during the scan.</p>
+     * @public
+     */
+    Findings?: ScanFinding[] | undefined;
+}
 /**
  * @public
  */
@@ -4208,6 +3904,12 @@ export interface DescribeRecoveryPointOutput {
      * @public
      */
     EncryptionKeyType?: EncryptionKeyType | undefined;
+    /**
+     * <p>Contains the latest scanning results against the recovery point and currently include <code>MalwareScanner</code>, <code>ScanJobState</code>, <code>Findings</code>, and <code>LastScanTimestamp</code>
+     *          </p>
+     * @public
+     */
+    ScanResults?: ScanResult[] | undefined;
 }
 /**
  * @public
@@ -4465,48 +4167,6 @@ export interface RestoreJobCreator {
      */
     RestoreTestingPlanArn?: string | undefined;
 }
-/**
- * @public
- * @enum
- */
-export declare const RestoreDeletionStatus: {
-    readonly DELETING: "DELETING";
-    readonly FAILED: "FAILED";
-    readonly SUCCESSFUL: "SUCCESSFUL";
-};
-/**
- * @public
- */
-export type RestoreDeletionStatus = (typeof RestoreDeletionStatus)[keyof typeof RestoreDeletionStatus];
-/**
- * @public
- * @enum
- */
-export declare const RestoreJobStatus: {
-    readonly ABORTED: "ABORTED";
-    readonly COMPLETED: "COMPLETED";
-    readonly FAILED: "FAILED";
-    readonly PENDING: "PENDING";
-    readonly RUNNING: "RUNNING";
-};
-/**
- * @public
- */
-export type RestoreJobStatus = (typeof RestoreJobStatus)[keyof typeof RestoreJobStatus];
-/**
- * @public
- * @enum
- */
-export declare const RestoreValidationStatus: {
-    readonly FAILED: "FAILED";
-    readonly SUCCESSFUL: "SUCCESSFUL";
-    readonly TIMED_OUT: "TIMED_OUT";
-    readonly VALIDATING: "VALIDATING";
-};
-/**
- * @public
- */
-export type RestoreValidationStatus = (typeof RestoreValidationStatus)[keyof typeof RestoreValidationStatus];
 /**
  * @public
  */
@@ -4645,164 +4305,324 @@ export interface DescribeRestoreJobOutput {
 /**
  * @public
  */
-export interface DisassociateBackupVaultMpaApprovalTeamInput {
-    /**
-     * <p>The name of the backup vault from which to disassociate the MPA approval team.</p>
-     * @public
-     */
-    BackupVaultName: string | undefined;
+export interface DescribeScanJobInput {
     /**
-     * <p>An optional comment explaining the reason for disassociating the MPA approval team from the backup vault.</p>
+     * <p>Uniquely identifies a request to Backup to scan a resource.</p>
      * @public
      */
-    RequesterComment?: string | undefined;
+    ScanJobId: string | undefined;
 }
 /**
+ * <p>Contains identifying information about the creation of a scan job, including the backup plan and rule that initiated the scan.</p>
  * @public
  */
-export interface DisassociateRecoveryPointInput {
+export interface ScanJobCreator {
     /**
-     * <p>The unique name of an Backup vault.</p>
+     * <p>An Amazon Resource Name (ARN) that uniquely identifies a backup plan; for example,
+     *          <code>arn:aws:backup:us-east-1:123456789012:plan:8F81F553-3A74-4A3F-B93D-B3360DC80C50</code>.</p>
      * @public
      */
-    BackupVaultName: string | undefined;
+    BackupPlanArn: string | undefined;
     /**
-     * <p>An Amazon Resource Name (ARN) that uniquely identifies an Backup recovery
-     *          point.</p>
+     * <p>The ID of the backup plan.</p>
      * @public
      */
-    RecoveryPointArn: string | undefined;
-}
-/**
- * @public
- */
-export interface DisassociateRecoveryPointFromParentInput {
+    BackupPlanId: string | undefined;
     /**
-     * <p>The name of a logical container where the child (nested) recovery point
-     *          is stored. Backup vaults are identified by names that are unique to the account used
-     *          to create them and the Amazon Web Services Region where they are created.</p>
+     * <p>Unique, randomly generated, Unicode, UTF-8 encoded strings that are at most 1,024 bytes
+     *          long. Version IDs cannot be edited.</p>
      * @public
      */
-    BackupVaultName: string | undefined;
+    BackupPlanVersion: string | undefined;
     /**
-     * <p>The Amazon Resource Name (ARN) that uniquely identifies the child
-     *          (nested) recovery point; for example,
-     *          <code>arn:aws:backup:us-east-1:123456789012:recovery-point:1EB3B5E7-9EB0-435A-A80B-108B488B0D45.</code>
-     *          </p>
+     * <p>Uniquely identifies the backup rule that initiated the scan job.</p>
      * @public
      */
-    RecoveryPointArn: string | undefined;
+    BackupRuleId: string | undefined;
 }
 /**
+ * <p>Contains information about the results of a scan job.</p>
  * @public
  */
-export interface ExportBackupPlanTemplateInput {
+export interface ScanResultInfo {
     /**
-     * <p>Uniquely identifies a backup plan.</p>
+     * <p>The status of the scan results.</p>
+     *          <p>Valid values: <code>THREATS_FOUND</code> | <code>NO_THREATS_FOUND</code>.</p>
      * @public
      */
-    BackupPlanId: string | undefined;
+    ScanResultStatus: ScanResultStatus | undefined;
 }
 /**
  * @public
  */
-export interface ExportBackupPlanTemplateOutput {
+export interface DescribeScanJobOutput {
     /**
-     * <p>The body of a backup plan template in JSON format.</p>
-     *          <note>
-     *             <p>This is a signed JSON document that cannot be modified before being passed to
-     *                <code>GetBackupPlanFromJSON.</code>
-     *             </p>
-     *          </note>
+     * <p>Returns the account ID that owns the scan job.</p>
+     *          <p>Pattern: <code>^[0-9]\{12\}$</code>
+     *          </p>
      * @public
      */
-    BackupPlanTemplateJson?: string | undefined;
-}
-/**
- * @public
- */
-export interface GetBackupPlanInput {
+    AccountId: string | undefined;
     /**
-     * <p>Uniquely identifies a backup plan.</p>
+     * <p>An Amazon Resource Name (ARN) that uniquely identifies a backup vault; for example,
+     *             <code>arn:aws:backup:us-east-1:123456789012:backup-vault:aBackupVault</code>
+     *          </p>
      * @public
      */
-    BackupPlanId: string | undefined;
+    BackupVaultArn: string | undefined;
     /**
-     * <p>Unique, randomly generated, Unicode, UTF-8 encoded strings that are at most 1,024 bytes
-     *          long. Version IDs cannot be edited.</p>
+     * <p>The name of a logical container where backups are stored. Backup vaults are identified by names that are
+     *          unique to the account used to create them and the Amazon Web Services Region where they are created.</p>
+     *          <p>Pattern: <code>^[a-zA-Z0-9\-\_\.]\{2,50\}$</code>
+     *          </p>
      * @public
      */
-    VersionId?: string | undefined;
+    BackupVaultName: string | undefined;
     /**
-     * <p>Number of future scheduled backup runs to preview. When set to 0 (default), no scheduled runs preview is included in the response. Valid range is 0-10.</p>
+     * <p>The date and time that a backup index finished creation, in Unix format and Coordinated
+     *          Universal Time (UTC). The value of <code>CompletionDate</code> is accurate to milliseconds.
+     *          For example, the value 1516925490.087 represents Friday, January 26, 2018 12:11:30.087
+     *          AM.</p>
      * @public
      */
-    MaxScheduledRunsPreview?: number | undefined;
-}
-/**
- * @public
- * @enum
- */
-export declare const RuleExecutionType: {
-    readonly CONTINUOUS: "CONTINUOUS";
-    readonly CONTINUOUS_AND_SNAPSHOTS: "CONTINUOUS_AND_SNAPSHOTS";
-    readonly SNAPSHOTS: "SNAPSHOTS";
-};
-/**
- * @public
- */
-export type RuleExecutionType = (typeof RuleExecutionType)[keyof typeof RuleExecutionType];
-/**
- * <p>Contains information about a scheduled backup plan execution, including the execution time, rule type, and associated rule identifier.</p>
- * @public
- */
-export interface ScheduledPlanExecutionMember {
+    CompletionDate?: Date | undefined;
     /**
-     * <p>The timestamp when the backup is scheduled to run, in Unix format and Coordinated Universal Time (UTC). The value is accurate to milliseconds.</p>
+     * <p>Contains identifying information about the creation of a scan job, including the backup plan and rule that initiated the scan.</p>
      * @public
      */
-    ExecutionTime?: Date | undefined;
+    CreatedBy: ScanJobCreator | undefined;
     /**
-     * <p>The unique identifier of the backup rule that will execute at the scheduled time.</p>
+     * <p>The date and time that a backup index finished creation, in Unix format and Coordinated
+     *          Universal Time (UTC). The value of <code>CreationDate</code> is accurate to milliseconds.
+     *          For example, the value 1516925490.087 represents Friday, January 26, 2018 12:11:30.087
+     *          AM.</p>
      * @public
      */
-    RuleId?: string | undefined;
+    CreationDate: Date | undefined;
     /**
-     * <p>The type of backup rule execution. Valid values are <code>CONTINUOUS</code> (point-in-time recovery), <code>SNAPSHOTS</code> (snapshot backups), or <code>CONTINUOUS_AND_SNAPSHOTS</code> (both types combined).</p>
+     * <p>An Amazon Resource Name (ARN) that uniquely identifies a backup vault; for example,
+     *             <code>arn:aws:iam::123456789012:role/S3Access</code>.</p>
      * @public
      */
-    RuleExecutionType?: RuleExecutionType | undefined;
-}
-/**
- * @public
- */
-export interface GetBackupPlanOutput {
+    IamRoleArn: string | undefined;
     /**
-     * <p>Specifies the body of a backup plan. Includes a <code>BackupPlanName</code> and one or
-     *          more sets of <code>Rules</code>.</p>
+     * <p>The scanning engine used for the corresponding scan job. Currently only <code>GUARDUTY</code> is supported.</p>
      * @public
      */
-    BackupPlan?: BackupPlan | undefined;
+    MalwareScanner: MalwareScanner | undefined;
     /**
-     * <p>Uniquely identifies a backup plan.</p>
+     * <p>An ARN that uniquely identifies the target recovery point for scanning.; for example,
+     *       <code>arn:aws:backup:us-east-1:123456789012:recovery-point:1EB3B5E7-9EB0-435A-A80B-108B488B0D45</code>.</p>
      * @public
      */
-    BackupPlanId?: string | undefined;
+    RecoveryPointArn: string | undefined;
     /**
-     * <p>An Amazon Resource Name (ARN) that uniquely identifies a backup plan; for example,
-     *             <code>arn:aws:backup:us-east-1:123456789012:plan:8F81F553-3A74-4A3F-B93D-B3360DC80C50</code>.</p>
+     * <p>An ARN that uniquely identifies the source resource of the corresponding recovery point ARN.</p>
      * @public
      */
-    BackupPlanArn?: string | undefined;
+    ResourceArn: string | undefined;
     /**
-     * <p>Unique, randomly generated, Unicode, UTF-8 encoded strings that are at most 1,024 bytes
-     *          long. Version IDs cannot be edited.</p>
+     * <p>The non-unique name of the resource that belongs to the specified backup.</p>
      * @public
      */
-    VersionId?: string | undefined;
+    ResourceName: string | undefined;
     /**
-     * <p>A unique string that identifies the request and allows failed requests to be retried
-     *          without the risk of running the operation twice. </p>
+     * <p>The type of Amazon Web Services Resource to be backed up; for example, an Amazon Elastic Block Store (Amazon EBS) volume.</p>
+     *          <p>Pattern: <code>^[a-zA-Z0-9\-\_\.]\{1,50\}$</code>
+     *          </p>
+     * @public
+     */
+    ResourceType: ScanResourceType | undefined;
+    /**
+     * <p>An ARN that uniquely identifies the base recovery point for scanning. This field will only be populated when an incremental scan job has taken place.</p>
+     * @public
+     */
+    ScanBaseRecoveryPointArn?: string | undefined;
+    /**
+     * <p>The scan ID generated by Amazon GuardDuty for the corresponding Scan Job ID request from Backup.</p>
+     * @public
+     */
+    ScanId?: string | undefined;
+    /**
+     * <p>The scan job ID that uniquely identified the request to Backup.</p>
+     * @public
+     */
+    ScanJobId: string | undefined;
+    /**
+     * <p>Specifies the scan type used for the scan job.</p>
+     * @public
+     */
+    ScanMode: ScanMode | undefined;
+    /**
+     * <p>
+     *       Contains the <code>ScanResultsStatus</code> for the scanning job and returns <code>THREATS_FOUND</code> or <code>NO_THREATS_FOUND</code> for completed jobs.</p>
+     * @public
+     */
+    ScanResult?: ScanResultInfo | undefined;
+    /**
+     * <p>Specifies the scanner IAM role ARN used to for the scan job.</p>
+     * @public
+     */
+    ScannerRoleArn: string | undefined;
+    /**
+     * <p>The current state of a scan job.</p>
+     * @public
+     */
+    State: ScanState | undefined;
+    /**
+     * <p>A detailed message explaining the status of the job to back up a resource.</p>
+     * @public
+     */
+    StatusMessage?: string | undefined;
+}
+/**
+ * @public
+ */
+export interface DisassociateBackupVaultMpaApprovalTeamInput {
+    /**
+     * <p>The name of the backup vault from which to disassociate the MPA approval team.</p>
+     * @public
+     */
+    BackupVaultName: string | undefined;
+    /**
+     * <p>An optional comment explaining the reason for disassociating the MPA approval team from the backup vault.</p>
+     * @public
+     */
+    RequesterComment?: string | undefined;
+}
+/**
+ * @public
+ */
+export interface DisassociateRecoveryPointInput {
+    /**
+     * <p>The unique name of an Backup vault.</p>
+     * @public
+     */
+    BackupVaultName: string | undefined;
+    /**
+     * <p>An Amazon Resource Name (ARN) that uniquely identifies an Backup recovery
+     *          point.</p>
+     * @public
+     */
+    RecoveryPointArn: string | undefined;
+}
+/**
+ * @public
+ */
+export interface DisassociateRecoveryPointFromParentInput {
+    /**
+     * <p>The name of a logical container where the child (nested) recovery point
+     *          is stored. Backup vaults are identified by names that are unique to the account used
+     *          to create them and the Amazon Web Services Region where they are created.</p>
+     * @public
+     */
+    BackupVaultName: string | undefined;
+    /**
+     * <p>The Amazon Resource Name (ARN) that uniquely identifies the child
+     *          (nested) recovery point; for example,
+     *          <code>arn:aws:backup:us-east-1:123456789012:recovery-point:1EB3B5E7-9EB0-435A-A80B-108B488B0D45.</code>
+     *          </p>
+     * @public
+     */
+    RecoveryPointArn: string | undefined;
+}
+/**
+ * @public
+ */
+export interface ExportBackupPlanTemplateInput {
+    /**
+     * <p>Uniquely identifies a backup plan.</p>
+     * @public
+     */
+    BackupPlanId: string | undefined;
+}
+/**
+ * @public
+ */
+export interface ExportBackupPlanTemplateOutput {
+    /**
+     * <p>The body of a backup plan template in JSON format.</p>
+     *          <note>
+     *             <p>This is a signed JSON document that cannot be modified before being passed to
+     *                <code>GetBackupPlanFromJSON.</code>
+     *             </p>
+     *          </note>
+     * @public
+     */
+    BackupPlanTemplateJson?: string | undefined;
+}
+/**
+ * @public
+ */
+export interface GetBackupPlanInput {
+    /**
+     * <p>Uniquely identifies a backup plan.</p>
+     * @public
+     */
+    BackupPlanId: string | undefined;
+    /**
+     * <p>Unique, randomly generated, Unicode, UTF-8 encoded strings that are at most 1,024 bytes
+     *          long. Version IDs cannot be edited.</p>
+     * @public
+     */
+    VersionId?: string | undefined;
+    /**
+     * <p>Number of future scheduled backup runs to preview. When set to 0 (default), no scheduled runs preview is included in the response. Valid range is 0-10.</p>
+     * @public
+     */
+    MaxScheduledRunsPreview?: number | undefined;
+}
+/**
+ * <p>Contains information about a scheduled backup plan execution, including the execution time, rule type, and associated rule identifier.</p>
+ * @public
+ */
+export interface ScheduledPlanExecutionMember {
+    /**
+     * <p>The timestamp when the backup is scheduled to run, in Unix format and Coordinated Universal Time (UTC). The value is accurate to milliseconds.</p>
+     * @public
+     */
+    ExecutionTime?: Date | undefined;
+    /**
+     * <p>The unique identifier of the backup rule that will execute at the scheduled time.</p>
+     * @public
+     */
+    RuleId?: string | undefined;
+    /**
+     * <p>The type of backup rule execution. Valid values are <code>CONTINUOUS</code> (point-in-time recovery), <code>SNAPSHOTS</code> (snapshot backups), or <code>CONTINUOUS_AND_SNAPSHOTS</code> (both types combined).</p>
+     * @public
+     */
+    RuleExecutionType?: RuleExecutionType | undefined;
+}
+/**
+ * @public
+ */
+export interface GetBackupPlanOutput {
+    /**
+     * <p>Specifies the body of a backup plan. Includes a <code>BackupPlanName</code> and one or
+     *          more sets of <code>Rules</code>.</p>
+     * @public
+     */
+    BackupPlan?: BackupPlan | undefined;
+    /**
+     * <p>Uniquely identifies a backup plan.</p>
+     * @public
+     */
+    BackupPlanId?: string | undefined;
+    /**
+     * <p>An Amazon Resource Name (ARN) that uniquely identifies a backup plan; for example,
+     *             <code>arn:aws:backup:us-east-1:123456789012:plan:8F81F553-3A74-4A3F-B93D-B3360DC80C50</code>.</p>
+     * @public
+     */
+    BackupPlanArn?: string | undefined;
+    /**
+     * <p>Unique, randomly generated, Unicode, UTF-8 encoded strings that are at most 1,024 bytes
+     *          long. Version IDs cannot be edited.</p>
+     * @public
+     */
+    VersionId?: string | undefined;
+    /**
+     * <p>A unique string that identifies the request and allows failed requests to be retried
+     *          without the risk of running the operation twice. </p>
      * @public
      */
     CreatorRequestId?: string | undefined;
@@ -5576,6 +5396,79 @@ export interface GetSupportedResourceTypesOutput {
      */
     ResourceTypes?: string[] | undefined;
 }
+/**
+ * @public
+ */
+export interface GetTieringConfigurationInput {
+    /**
+     * <p>The unique name of a tiering configuration.</p>
+     * @public
+     */
+    TieringConfigurationName: string | undefined;
+}
+/**
+ * <p>This contains metadata about a tiering configuration.</p>
+ * @public
+ */
+export interface TieringConfiguration {
+    /**
+     * <p>The unique name of the tiering configuration. This cannot be changed
+     *          after creation, and it must consist of only alphanumeric characters and underscores.</p>
+     * @public
+     */
+    TieringConfigurationName: string | undefined;
+    /**
+     * <p>An Amazon Resource Name (ARN) that uniquely identifies the
+     *          tiering configuration.</p>
+     * @public
+     */
+    TieringConfigurationArn?: string | undefined;
+    /**
+     * <p>The name of the backup vault where the tiering configuration applies.
+     *          Use <code>*</code> to apply to all backup vaults.</p>
+     * @public
+     */
+    BackupVaultName: string | undefined;
+    /**
+     * <p>An array of resource selection objects that specify which resources
+     *          are included in the tiering configuration and their tiering settings.</p>
+     * @public
+     */
+    ResourceSelection: ResourceSelection[] | undefined;
+    /**
+     * <p>This is a unique string that identifies the request and
+     *          allows failed requests to be retried without the risk of running
+     *          the operation twice.</p>
+     * @public
+     */
+    CreatorRequestId?: string | undefined;
+    /**
+     * <p>The date and time a tiering configuration was created, in Unix format
+     *          and Coordinated Universal Time (UTC). The value of <code>CreationTime</code>
+     *          is accurate to milliseconds. For example, the value 1516925490.087 represents
+     *          Friday, January 26, 2018 12:11:30.087AM.</p>
+     * @public
+     */
+    CreationTime?: Date | undefined;
+    /**
+     * <p>The date and time a tiering configuration was updated, in Unix format
+     *          and Coordinated Universal Time (UTC). The value of <code>LastUpdatedTime</code>
+     *          is accurate to milliseconds. For example, the value 1516925490.087 represents
+     *          Friday, January 26, 2018 12:11:30.087AM.</p>
+     * @public
+     */
+    LastUpdatedTime?: Date | undefined;
+}
+/**
+ * @public
+ */
+export interface GetTieringConfigurationOutput {
+    /**
+     * <p>Specifies the body of a tiering configuration. Includes <code>TieringConfigurationName</code>.</p>
+     * @public
+     */
+    TieringConfiguration?: TieringConfiguration | undefined;
+}
 /**
  * @public
  */
@@ -7202,6 +7095,12 @@ export interface RecoveryPointByBackupVault {
      * @public
      */
     EncryptionKeyType?: EncryptionKeyType | undefined;
+    /**
+     * <p>Contains the latest scanning results against the recovery point and currently include
+     *       <code>FailedScan</code>, <code>Findings</code>, <code>LastComputed</code>.</p>
+     * @public
+     */
+    AggregatedScanResult?: AggregatedScanResult | undefined;
 }
 /**
  * @public
@@ -7423,6 +7322,12 @@ export interface RecoveryPointByResource {
      * @public
      */
     EncryptionKeyType?: EncryptionKeyType | undefined;
+    /**
+     * <p>Contains the latest scanning results against the recovery point and currently include
+     *       <code>FailedScan</code>, <code>Findings</code>, <code>LastComputed</code>.</p>
+     * @public
+     */
+    AggregatedScanResult?: AggregatedScanResult | undefined;
 }
 /**
  * @public
@@ -7473,8 +7378,11 @@ export interface ListReportJobsInput {
     /**
      * <p>Returns only report jobs that are in the specified status. The statuses are:</p>
      *          <p>
-     *             <code>CREATED | RUNNING | COMPLETED | FAILED</code>
+     *             <code>CREATED | RUNNING | COMPLETED | FAILED | COMPLETED_WITH_ISSUES</code>
      *          </p>
+     *          <p> Please note that only scanning jobs finish with state completed with issues.
+     *             For backup jobs this is a console interpretation of a job that finishes in
+     *             completed state and has a status message.</p>
      * @public
      */
     ByStatus?: string | undefined;
@@ -7563,18 +7471,6 @@ export interface ListRestoreAccessBackupVaultsInput {
      */
     MaxResults?: number | undefined;
 }
-/**
- * @public
- * @enum
- */
-export declare const MpaRevokeSessionStatus: {
-    readonly FAILED: "FAILED";
-    readonly PENDING: "PENDING";
-};
-/**
- * @public
- */
-export type MpaRevokeSessionStatus = (typeof MpaRevokeSessionStatus)[keyof typeof MpaRevokeSessionStatus];
 /**
  * <p>Contains information about the latest request to revoke access to a backup vault.</p>
  * @public
@@ -8004,24 +7900,6 @@ export interface ListRestoreJobsByProtectedResourceOutput {
      */
     NextToken?: string | undefined;
 }
-/**
- * @public
- * @enum
- */
-export declare const RestoreJobState: {
-    readonly ABORTED: "ABORTED";
-    readonly AGGREGATE_ALL: "AGGREGATE_ALL";
-    readonly ANY: "ANY";
-    readonly COMPLETED: "COMPLETED";
-    readonly CREATED: "CREATED";
-    readonly FAILED: "FAILED";
-    readonly PENDING: "PENDING";
-    readonly RUNNING: "RUNNING";
-};
-/**
- * @public
- */
-export type RestoreJobState = (typeof RestoreJobState)[keyof typeof RestoreJobState];
 /**
  * @public
  */
@@ -8395,19 +8273,435 @@ export interface ListRestoreTestingSelectionsOutput {
 /**
  * @public
  */
-export interface ListTagsInput {
+export interface ListScanJobsInput {
     /**
-     * <p>An Amazon Resource Name (ARN) that uniquely identifies a resource. The format of the ARN
-     *          depends on the type of resource. Valid targets for <code>ListTags</code> are recovery
-     *          points, backup plans, and backup vaults.</p>
+     * <p>The account ID to list the jobs from. Returns only backup jobs associated with the specified account ID.</p>
+     *          <p>If used from an Amazon Web Services Organizations management account, passing <code>*</code> returns all jobs across the organization.</p>
+     *          <p>Pattern: <code>^[0-9]\{12\}$</code>
+     *          </p>
      * @public
      */
-    ResourceArn: string | undefined;
+    ByAccountId?: string | undefined;
     /**
-     * <p>The next item following a partial list of returned items. For example, if a request is
-     *          made to return <code>MaxResults</code> number of items, <code>NextToken</code> allows you
-     *          to return more items in your list starting at the location pointed to by the next
-     *          token.</p>
+     * <p>Returns only scan jobs that will be stored in the specified backup vault.
+     *          Backup vaults are identified by names that are unique to the account
+     *          used to create them and the Amazon Web Services Region where they are created.</p>
+     *          <p>Pattern: <code>^[a-zA-Z0-9\-\_\.]\{2,50\}$</code>
+     *          </p>
+     * @public
+     */
+    ByBackupVaultName?: string | undefined;
+    /**
+     * <p>Returns only scan jobs completed after a date expressed in Unix format and Coordinated Universal Time (UTC).</p>
+     * @public
+     */
+    ByCompleteAfter?: Date | undefined;
+    /**
+     * <p>Returns only backup jobs completed before a date expressed in Unix format and Coordinated Universal Time (UTC).</p>
+     * @public
+     */
+    ByCompleteBefore?: Date | undefined;
+    /**
+     * <p>Returns only the scan jobs for the specified malware scanner. Currently only supports <code>GUARDDUTY</code>.</p>
+     * @public
+     */
+    ByMalwareScanner?: MalwareScanner | undefined;
+    /**
+     * <p>Returns only the scan jobs that are ran against the specified recovery point.</p>
+     * @public
+     */
+    ByRecoveryPointArn?: string | undefined;
+    /**
+     * <p>Returns only scan jobs that match the specified resource Amazon Resource Name (ARN).</p>
+     * @public
+     */
+    ByResourceArn?: string | undefined;
+    /**
+     * <p>Returns restore testing selections by the specified restore testing
+     *          plan name.</p>
+     *          <ul>
+     *             <li>
+     *                <p>
+     *                   <code>EBS</code>for Amazon Elastic Block Store</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>EC2</code>for Amazon Elastic Compute Cloud</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>S3</code>for Amazon Simple Storage Service (Amazon S3)</p>
+     *             </li>
+     *          </ul>
+     *          <p>Pattern: <code>^[a-zA-Z0-9\-\_\.]\{1,50\}$</code>
+     *          </p>
+     * @public
+     */
+    ByResourceType?: ScanResourceType | undefined;
+    /**
+     * <p>Returns only the scan jobs for the specified scan results:</p>
+     *          <ul>
+     *             <li>
+     *                <p>
+     *                   <code>THREATS_FOUND</code>
+     *                </p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>NO_THREATS_FOUND</code>
+     *                </p>
+     *             </li>
+     *          </ul>
+     * @public
+     */
+    ByScanResultStatus?: ScanResultStatus | undefined;
+    /**
+     * <p>Returns only the scan jobs for the specified scanning job state.</p>
+     * @public
+     */
+    ByState?: ScanState | undefined;
+    /**
+     * <p>The maximum number of items to be returned.</p>
+     *          <p>Valid Range: Minimum value of 1. Maximum value of 1000.</p>
+     * @public
+     */
+    MaxResults?: number | undefined;
+    /**
+     * <p>The next item following a partial list of returned items. For example, if a request is made to
+     *          return <code>MaxResults</code> number of items, <code>NextToken</code> allows you to return more items
+     *          in your list starting at the location pointed to by the next token.</p>
+     * @public
+     */
+    NextToken?: string | undefined;
+}
+/**
+ * <p>Contains metadata about a scan job, including information about the scanning process, results, and associated resources.</p>
+ * @public
+ */
+export interface ScanJob {
+    /**
+     * <p>The account ID that owns the scan job.</p>
+     * @public
+     */
+    AccountId: string | undefined;
+    /**
+     * <p>An Amazon Resource Name (ARN) that uniquely identifies a backup vault; for example,
+     *          <code>arn:aws:backup:us-east-1:123456789012:backup-vault:aBackupVault</code>.</p>
+     * @public
+     */
+    BackupVaultArn: string | undefined;
+    /**
+     * <p>The name of a logical container where backups are stored. Backup vaults are identified
+     *          by names that are unique to the account used to create them and the Amazon Web Services
+     *          Region where they are created.</p>
+     * @public
+     */
+    BackupVaultName: string | undefined;
+    /**
+     * <p>The date and time that a scan job is completed, in Unix format and Coordinated
+     *          Universal Time (UTC). The value of <code>CompletionDate</code> is accurate to milliseconds.
+     *          For example, the value 1516925490.087 represents Friday, January 26, 2018 12:11:30.087
+     *          AM.</p>
+     * @public
+     */
+    CompletionDate?: Date | undefined;
+    /**
+     * <p>Contains identifying information about the creation of a scan job.</p>
+     * @public
+     */
+    CreatedBy: ScanJobCreator | undefined;
+    /**
+     * <p>The date and time that a scan job is created, in Unix format and Coordinated
+     *          Universal Time (UTC). The value of <code>CreationDate</code> is accurate to milliseconds.
+     *          For example, the value 1516925490.087 represents Friday, January 26, 2018 12:11:30.087
+     *          AM.</p>
+     * @public
+     */
+    CreationDate: Date | undefined;
+    /**
+     * <p>Specifies the IAM role ARN used to create the scan job; for example,
+     *          <code>arn:aws:iam::123456789012:role/S3Access</code>.</p>
+     * @public
+     */
+    IamRoleArn: string | undefined;
+    /**
+     * <p>The scanning engine used for the scan job. Currently only <code>GUARDDUTY</code> is supported.</p>
+     * @public
+     */
+    MalwareScanner: MalwareScanner | undefined;
+    /**
+     * <p>An ARN that uniquely identifies the recovery point being scanned; for example,
+     *          <code>arn:aws:backup:us-east-1:123456789012:recovery-point:1EB3B5E7-9EB0-435A-A80B-108B488B0D45</code>.</p>
+     * @public
+     */
+    RecoveryPointArn: string | undefined;
+    /**
+     * <p>An ARN that uniquely identifies the source resource of the recovery point being scanned.</p>
+     * @public
+     */
+    ResourceArn: string | undefined;
+    /**
+     * <p>The non-unique name of the resource that belongs to the specified backup.</p>
+     * @public
+     */
+    ResourceName: string | undefined;
+    /**
+     * <p>The type of Amazon Web Services resource being scanned; for example, an Amazon Elastic Block Store
+     *          (Amazon EBS) volume or an Amazon Relational Database Service (Amazon RDS) database.</p>
+     * @public
+     */
+    ResourceType: ScanResourceType | undefined;
+    /**
+     * <p>An ARN that uniquely identifies the base recovery point for scanning. This field is populated
+     *          when an incremental scan job has taken place.</p>
+     * @public
+     */
+    ScanBaseRecoveryPointArn?: string | undefined;
+    /**
+     * <p>The scan ID generated by the malware scanner for the corresponding scan job.</p>
+     * @public
+     */
+    ScanId?: string | undefined;
+    /**
+     * <p>The unique identifier that identifies the scan job request to Backup.</p>
+     * @public
+     */
+    ScanJobId: string | undefined;
+    /**
+     * <p>Specifies the scan type use for the scan job.</p>
+     *          <p>Includes:</p>
+     *          <p>
+     *             <code>FULL_SCAN</code> will scan the entire data lineage within the backup.</p>
+     *          <p>
+     *             <code>INCREMENTAL_SCAN</code> will scan the data difference between the target recovery point and base recovery point ARN.</p>
+     * @public
+     */
+    ScanMode: ScanMode | undefined;
+    /**
+     * <p>Contains the scan results information, including the status of threats found during scanning.</p>
+     * @public
+     */
+    ScanResult?: ScanResultInfo | undefined;
+    /**
+     * <p>Specifies the scanner IAM role ARN used for the scan job.</p>
+     * @public
+     */
+    ScannerRoleArn: string | undefined;
+    /**
+     * <p>The current state of the scan job.</p>
+     *          <p>Valid values: <code>CREATED</code> | <code>RUNNING</code> | <code>COMPLETED</code> |
+     *          <code>COMPLETED_WITH_ISSUES</code> | <code>FAILED</code> | <code>CANCELED</code>.</p>
+     * @public
+     */
+    State?: ScanState | undefined;
+    /**
+     * <p>A detailed message explaining the status of the scan job.</p>
+     * @public
+     */
+    StatusMessage?: string | undefined;
+}
+/**
+ * @public
+ */
+export interface ListScanJobsOutput {
+    /**
+     * <p>The next item following a partial list of returned items. For example, if a request is made to
+     *          return <code>MaxResults</code> number of items, <code>NextToken</code> allows you to return more items
+     *          in your list starting at the location pointed to by the next token.</p>
+     * @public
+     */
+    NextToken?: string | undefined;
+    /**
+     * <p>An array of structures containing metadata about your scan jobs returned in JSON format.</p>
+     * @public
+     */
+    ScanJobs: ScanJob[] | undefined;
+}
+/**
+ * @public
+ */
+export interface ListScanJobSummariesInput {
+    /**
+     * <p>Returns the job count for the specified account.</p>
+     *          <p>If the request is sent from a member account or an account not part of Amazon Web Services Organizations, jobs within requestor's account will be returned.</p>
+     *          <p>Root, admin, and delegated administrator accounts can use the value <code>ANY</code> to return job counts from every account in the organization.</p>
+     *          <p>
+     *             <code>AGGREGATE_ALL</code> aggregates job counts from all accounts within the authenticated organization, then returns the sum.</p>
+     * @public
+     */
+    AccountId?: string | undefined;
+    /**
+     * <p>Returns the job count for the specified resource type. Use request
+     *          <code>GetSupportedResourceTypes</code> to obtain strings for supported resource types.</p>
+     *          <p>The the value <code>ANY</code> returns count of all resource types.</p>
+     *          <p>
+     *             <code>AGGREGATE_ALL</code> aggregates job counts for all resource types and returns the sum.</p>
+     * @public
+     */
+    ResourceType?: string | undefined;
+    /**
+     * <p>Returns only the scan jobs for the specified malware scanner.
+     *          Currently the only MalwareScanner is <code>GUARDDUTY</code>. But the field also supports <code>ANY</code>, and <code>AGGREGATE_ALL</code>.</p>
+     * @public
+     */
+    MalwareScanner?: MalwareScanner | undefined;
+    /**
+     * <p>Returns only the scan jobs for the specified scan results.</p>
+     * @public
+     */
+    ScanResultStatus?: ScanResultStatus | undefined;
+    /**
+     * <p>Returns only the scan jobs for the specified scanning job state.</p>
+     * @public
+     */
+    State?: ScanJobStatus | undefined;
+    /**
+     * <p>The period for the returned results.</p>
+     *          <ul>
+     *             <li>
+     *                <p>
+     *                   <code>ONE_DAY</code>The daily job count for the prior 1 day.</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>SEVEN_DAYS</code>The daily job count for the prior 7 days.</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>FOURTEEN_DAYS</code>The daily job count for the prior 14 days.</p>
+     *             </li>
+     *          </ul>
+     * @public
+     */
+    AggregationPeriod?: AggregationPeriod | undefined;
+    /**
+     * <p>The maximum number of items to be returned.</p>
+     *          <p>The value is an integer. Range of accepted values is from 1 to 500.</p>
+     * @public
+     */
+    MaxResults?: number | undefined;
+    /**
+     * <p>The next item following a partial list of returned items. For example, if a request is made to
+     *          return <code>MaxResults</code> number of items, <code>NextToken</code> allows you to return more items
+     *          in your list starting at the location pointed to by the next token.</p>
+     * @public
+     */
+    NextToken?: string | undefined;
+}
+/**
+ * <p>Contains summary information about scan jobs, including counts and metadata for a specific time period and criteria.</p>
+ * @public
+ */
+export interface ScanJobSummary {
+    /**
+     * <p>The Amazon Web Services Region where the scan jobs were executed.</p>
+     * @public
+     */
+    Region?: string | undefined;
+    /**
+     * <p>The account ID that owns the scan jobs included in this summary.</p>
+     * @public
+     */
+    AccountId?: string | undefined;
+    /**
+     * <p>The state of the scan jobs included in this summary.</p>
+     *          <p>Valid values: <code>CREATED</code> | <code>RUNNING</code> | <code>COMPLETED</code> |
+     *          <code>COMPLETED_WITH_ISSUES</code> | <code>FAILED</code> | <code>CANCELED</code>.</p>
+     * @public
+     */
+    State?: ScanJobStatus | undefined;
+    /**
+     * <p>The type of Amazon Web Services resource for the scan jobs included in this summary.</p>
+     * @public
+     */
+    ResourceType?: string | undefined;
+    /**
+     * <p>The number of scan jobs that match the specified criteria.</p>
+     * @public
+     */
+    Count?: number | undefined;
+    /**
+     * <p>The value of time in number format of a job start time.</p>
+     *          <p>This value is the time in Unix format, Coordinated Universal Time (UTC), and accurate to
+     *          milliseconds. For example, the value 1516925490.087 represents Friday, January 26, 2018
+     *          12:11:30.087 AM.</p>
+     * @public
+     */
+    StartTime?: Date | undefined;
+    /**
+     * <p>The value of time in number format of a job end time.</p>
+     *          <p>This value is the time in Unix format, Coordinated Universal Time (UTC), and accurate to
+     *          milliseconds. For example, the value 1516925490.087 represents Friday, January 26, 2018
+     *          12:11:30.087 AM.</p>
+     * @public
+     */
+    EndTime?: Date | undefined;
+    /**
+     * <p>Specifies the malware scanner used during the scan job. Currently only supports <code>GUARDDUTY</code>.</p>
+     * @public
+     */
+    MalwareScanner?: MalwareScanner | undefined;
+    /**
+     * <p>The scan result status for the scan jobs included in this summary.</p>
+     *          <p>Valid values: <code>THREATS_FOUND</code> | <code>NO_THREATS_FOUND</code>.</p>
+     * @public
+     */
+    ScanResultStatus?: ScanResultStatus | undefined;
+}
+/**
+ * @public
+ */
+export interface ListScanJobSummariesOutput {
+    /**
+     * <p>The summary information.</p>
+     * @public
+     */
+    ScanJobSummaries?: ScanJobSummary[] | undefined;
+    /**
+     * <p>The period for the returned results.</p>
+     *          <ul>
+     *             <li>
+     *                <p>
+     *                   <code>ONE_DAY</code>The daily job count for the prior 1 day.</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>SEVEN_DAYS</code>The daily job count for the prior 7 days.</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>FOURTEEN_DAYS</code>The daily job count for the prior 14 days.</p>
+     *             </li>
+     *          </ul>
+     *          <p>Valid Values: <code>'ONE_DAY'</code> | <code>'SEVEN_DAYS'</code> | <code>'FOURTEEN_DAYS'</code>
+     *          </p>
+     * @public
+     */
+    AggregationPeriod?: string | undefined;
+    /**
+     * <p>The next item following a partial list of returned items. For example, if a request is made to
+     *          return <code>MaxResults</code> number of items, <code>NextToken</code> allows you to return more items
+     *          in your list starting at the location pointed to by the next token.</p>
+     * @public
+     */
+    NextToken?: string | undefined;
+}
+/**
+ * @public
+ */
+export interface ListTagsInput {
+    /**
+     * <p>An Amazon Resource Name (ARN) that uniquely identifies a resource. The format of the ARN
+     *          depends on the type of resource. Valid targets for <code>ListTags</code> are recovery
+     *          points, backup plans, and backup vaults.</p>
+     * @public
+     */
+    ResourceArn: string | undefined;
+    /**
+     * <p>The next item following a partial list of returned items. For example, if a request is
+     *          made to return <code>MaxResults</code> number of items, <code>NextToken</code> allows you
+     *          to return more items in your list starting at the location pointed to by the next
+     *          token.</p>
      * @public
      */
     NextToken?: string | undefined;
@@ -8435,6 +8729,81 @@ export interface ListTagsOutput {
      */
     Tags?: Record<string, string> | undefined;
 }
+/**
+ * @public
+ */
+export interface ListTieringConfigurationsInput {
+    /**
+     * <p>The maximum number of items to be returned.</p>
+     * @public
+     */
+    MaxResults?: number | undefined;
+    /**
+     * <p>The next item following a partial list of returned items. For example, if a request
+     *          is made to return <code>MaxResults</code> number of items, <code>NextToken</code>
+     *          allows you to return more items in your list starting at the location pointed to by the
+     *          next token.</p>
+     * @public
+     */
+    NextToken?: string | undefined;
+}
+/**
+ * <p>This contains metadata about a tiering configuration returned in a list.</p>
+ * @public
+ */
+export interface TieringConfigurationsListMember {
+    /**
+     * <p>An Amazon Resource Name (ARN) that uniquely identifies the
+     *          tiering configuration.</p>
+     * @public
+     */
+    TieringConfigurationArn?: string | undefined;
+    /**
+     * <p>The unique name of the tiering configuration.</p>
+     * @public
+     */
+    TieringConfigurationName?: string | undefined;
+    /**
+     * <p>The name of the backup vault where the tiering configuration applies.
+     *          Use <code>*</code> to apply to all backup vaults.</p>
+     * @public
+     */
+    BackupVaultName?: string | undefined;
+    /**
+     * <p>The date and time a tiering configuration was created, in Unix format
+     *          and Coordinated Universal Time (UTC). The value of <code>CreationTime</code>
+     *          is accurate to milliseconds. For example, the value 1516925490.087 represents
+     *          Friday, January 26, 2018 12:11:30.087AM.</p>
+     * @public
+     */
+    CreationTime?: Date | undefined;
+    /**
+     * <p>The date and time a tiering configuration was updated, in Unix format
+     *          and Coordinated Universal Time (UTC). The value of <code>LastUpdatedTime</code>
+     *          is accurate to milliseconds. For example, the value 1516925490.087 represents
+     *          Friday, January 26, 2018 12:11:30.087AM.</p>
+     * @public
+     */
+    LastUpdatedTime?: Date | undefined;
+}
+/**
+ * @public
+ */
+export interface ListTieringConfigurationsOutput {
+    /**
+     * <p>An array of tiering configurations returned by the <code>ListTieringConfigurations</code> call.</p>
+     * @public
+     */
+    TieringConfigurations?: TieringConfigurationsListMember[] | undefined;
+    /**
+     * <p>The next item following a partial list of returned items. For example, if a request
+     *          is made to return <code>MaxResults</code> number of items, <code>NextToken</code>
+     *          allows you to return more items in your list starting at the location pointed to by the
+     *          next token.</p>
+     * @public
+     */
+    NextToken?: string | undefined;
+}
 /**
  * @public
  */
@@ -8583,18 +8952,6 @@ export interface RevokeRestoreAccessBackupVaultInput {
      */
     RequesterComment?: string | undefined;
 }
-/**
- * @public
- * @enum
- */
-export declare const Index: {
-    readonly DISABLED: "DISABLED";
-    readonly ENABLED: "ENABLED";
-};
-/**
- * @public
- */
-export type Index = (typeof Index)[keyof typeof Index];
 /**
  * @public
  */
@@ -9049,6 +9406,87 @@ export interface StartRestoreJobOutput {
      */
     RestoreJobId?: string | undefined;
 }
+/**
+ * @public
+ */
+export interface StartScanJobInput {
+    /**
+     * <p>The name of a logical container where backups are stored. Backup vaults are identified by names that
+     *           are unique to the account used to create them and the Amazon Web Services Region where they are created.</p>
+     *          <p>Pattern: <code>^[a-zA-Z0-9\-\_]\{2,50\}$</code>
+     *          </p>
+     * @public
+     */
+    BackupVaultName: string | undefined;
+    /**
+     * <p>Specifies the IAM role ARN used to create the target recovery point; for example,
+     *             <code>arn:aws:iam::123456789012:role/S3Access</code>.</p>
+     * @public
+     */
+    IamRoleArn: string | undefined;
+    /**
+     * <p>A customer-chosen string that you can use to distinguish between otherwise identical
+     *          calls to <code>StartScanJob</code>. Retrying a successful request with the same idempotency
+     *          token results in a success message with no action taken.</p>
+     * @public
+     */
+    IdempotencyToken?: string | undefined;
+    /**
+     * <p>Specifies the malware scanner used during the scan job. Currently only supports <code>GUARDDUTY</code>.</p>
+     * @public
+     */
+    MalwareScanner: MalwareScanner | undefined;
+    /**
+     * <p>An Amazon Resource Name (ARN) that uniquely identifies a recovery point. This is your target recovery point for a full scan.
+     *          If you are running an incremental scan, this will be your a recovery point which has been created after your base recovery point selection.</p>
+     * @public
+     */
+    RecoveryPointArn: string | undefined;
+    /**
+     * <p>An ARN that uniquely identifies the base recovery point to be used for incremental scanning.</p>
+     * @public
+     */
+    ScanBaseRecoveryPointArn?: string | undefined;
+    /**
+     * <p>Specifies the scan type use for the scan job.</p>
+     *          <p>Includes:</p>
+     *          <ul>
+     *             <li>
+     *                <p>
+     *                   <code>FULL_SCAN</code> will scan the entire data lineage within the backup.</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>INCREMENTAL_SCAN</code> will scan the data difference between the target recovery point and base recovery point ARN.</p>
+     *             </li>
+     *          </ul>
+     * @public
+     */
+    ScanMode: ScanMode | undefined;
+    /**
+     * <p>Specified the IAM scanner role ARN.</p>
+     * @public
+     */
+    ScannerRoleArn: string | undefined;
+}
+/**
+ * @public
+ */
+export interface StartScanJobOutput {
+    /**
+     * <p>The date and time that a backup job is created, in Unix format and Coordinated Universal
+     *          Time (UTC). The value of <code>CreationDate</code> is accurate to milliseconds. For
+     *          example, the value 1516925490.087 represents Friday, January 26, 2018 12:11:30.087
+     *          AM.</p>
+     * @public
+     */
+    CreationDate: Date | undefined;
+    /**
+     * <p>Uniquely identifies a request to Backup to back up a resource.</p>
+     * @public
+     */
+    ScanJobId: string | undefined;
+}
 /**
  * @public
  */
@@ -9147,6 +9585,11 @@ export interface UpdateBackupPlanOutput {
      * @public
      */
     AdvancedBackupSettings?: AdvancedBackupSetting[] | undefined;
+    /**
+     * <p>Contains your scanning configuration for the backup plan and includes the Malware scanner, your selected resources, and scanner role.</p>
+     * @public
+     */
+    ScanSettings?: ScanSetting[] | undefined;
 }
 /**
  * @public
@@ -9634,3 +10077,68 @@ export interface UpdateRestoreTestingSelectionOutput {
      */
     UpdateTime: Date | undefined;
 }
+/**
+ * <p>This contains metadata about a tiering configuration for update operations.</p>
+ * @public
+ */
+export interface TieringConfigurationInputForUpdate {
+    /**
+     * <p>An array of resource selection objects that specify which resources
+     *          are included in the tiering configuration and their tiering settings.</p>
+     * @public
+     */
+    ResourceSelection: ResourceSelection[] | undefined;
+    /**
+     * <p>The name of the backup vault where the tiering configuration applies.
+     *          Use <code>*</code> to apply to all backup vaults.</p>
+     * @public
+     */
+    BackupVaultName: string | undefined;
+}
+/**
+ * @public
+ */
+export interface UpdateTieringConfigurationInput {
+    /**
+     * <p>The name of a tiering configuration to update.</p>
+     * @public
+     */
+    TieringConfigurationName: string | undefined;
+    /**
+     * <p>Specifies the body of a tiering configuration.</p>
+     * @public
+     */
+    TieringConfiguration: TieringConfigurationInputForUpdate | undefined;
+}
+/**
+ * @public
+ */
+export interface UpdateTieringConfigurationOutput {
+    /**
+     * <p>An Amazon Resource Name (ARN) that uniquely identifies the updated
+     *          tiering configuration.</p>
+     * @public
+     */
+    TieringConfigurationArn?: string | undefined;
+    /**
+     * <p>This unique string is the name of the tiering configuration.</p>
+     * @public
+     */
+    TieringConfigurationName?: string | undefined;
+    /**
+     * <p>The date and time a tiering configuration was created, in Unix format
+     *          and Coordinated Universal Time (UTC). The value of <code>CreationTime</code>
+     *          is accurate to milliseconds. For example, the value 1516925490.087 represents
+     *          Friday, January 26, 2018 12:11:30.087AM.</p>
+     * @public
+     */
+    CreationTime?: Date | undefined;
+    /**
+     * <p>The date and time a tiering configuration was updated, in Unix format
+     *          and Coordinated Universal Time (UTC). The value of <code>LastUpdatedTime</code>
+     *          is accurate to milliseconds. For example, the value 1516925490.087 represents
+     *          Friday, January 26, 2018 12:11:30.087AM.</p>
+     * @public
+     */
+    LastUpdatedTime?: Date | undefined;
+}