@aws-sdk/client-backup 3.934.0 → 3.935.0

package/dist-types/models/models_0.d.ts

@@ -1,5 +1,4 @@
-import { ExceptionOptionType as __ExceptionOptionType } from "@smithy/smithy-client";
-import { BackupServiceException as __BaseException } from "./BackupServiceException";
+import { AggregationPeriod, BackupJobState, BackupJobStatus, BackupVaultEvent, ConditionType, CopyJobState, CopyJobStatus, EncryptionKeyType, Index, IndexStatus, LegalHoldStatus, LifecycleDeleteAfterEvent, MalwareScanner, MpaRevokeSessionStatus, MpaSessionStatus, RecoveryPointStatus, RestoreDeletionStatus, RestoreJobState, RestoreJobStatus, RestoreTestingRecoveryPointSelectionAlgorithm, RestoreTestingRecoveryPointType, RestoreValidationStatus, RuleExecutionType, ScanFinding, ScanJobState, ScanJobStatus, ScanMode, ScanResourceType, ScanResultStatus, ScanState, StorageClass, VaultState, VaultType } from "./enums";
 /**
  * <p>The backup options for each resource type.</p>
  * @public
@@ -34,51 +33,25 @@ export interface AdvancedBackupSetting {
     BackupOptions?: Record<string, string> | undefined;
 }
 /**
+ * <p>Contains aggregated scan results across multiple scan operations, providing a summary of scan status and findings.</p>
  * @public
- * @enum
  */
-export declare const AggregationPeriod: {
-    readonly FOURTEEN_DAYS: "FOURTEEN_DAYS";
-    readonly ONE_DAY: "ONE_DAY";
-    readonly SEVEN_DAYS: "SEVEN_DAYS";
-};
-/**
- * @public
- */
-export type AggregationPeriod = (typeof AggregationPeriod)[keyof typeof AggregationPeriod];
-/**
- * <p>The required resource already exists.</p>
- * @public
- */
-export declare class AlreadyExistsException extends __BaseException {
-    readonly name: "AlreadyExistsException";
-    readonly $fault: "client";
-    Code?: string | undefined;
-    Message?: string | undefined;
-    /**
-     * <p></p>
-     * @public
-     */
-    CreatorRequestId?: string | undefined;
+export interface AggregatedScanResult {
     /**
-     * <p></p>
+     * <p>A Boolean value indicating whether any of the aggregated scans failed.</p>
      * @public
      */
-    Arn?: string | undefined;
+    FailedScan?: boolean | undefined;
     /**
-     * <p></p>
+     * <p>An array of findings discovered across all aggregated scans.</p>
      * @public
      */
-    Type?: string | undefined;
+    Findings?: ScanFinding[] | undefined;
     /**
-     * <p></p>
+     * <p>The timestamp when the aggregated scan result was last computed, in Unix format and Coordinated Universal Time (UTC).</p>
      * @public
      */
-    Context?: string | undefined;
-    /**
-     * @internal
-     */
-    constructor(opts: __ExceptionOptionType<AlreadyExistsException, __BaseException>);
+    LastComputed?: Date | undefined;
 }
 /**
  * @public
@@ -100,128 +73,6 @@ export interface AssociateBackupVaultMpaApprovalTeamInput {
      */
     RequesterComment?: string | undefined;
 }
-/**
- * <p>Indicates that something is wrong with a parameter's value. For example, the value is
- *          out of range.</p>
- * @public
- */
-export declare class InvalidParameterValueException extends __BaseException {
-    readonly name: "InvalidParameterValueException";
-    readonly $fault: "client";
-    Code?: string | undefined;
-    Message?: string | undefined;
-    /**
-     * <p></p>
-     * @public
-     */
-    Type?: string | undefined;
-    /**
-     * <p></p>
-     * @public
-     */
-    Context?: string | undefined;
-    /**
-     * @internal
-     */
-    constructor(opts: __ExceptionOptionType<InvalidParameterValueException, __BaseException>);
-}
-/**
- * <p>Indicates that something is wrong with the input to the request. For example, a
- *          parameter is of the wrong type.</p>
- * @public
- */
-export declare class InvalidRequestException extends __BaseException {
-    readonly name: "InvalidRequestException";
-    readonly $fault: "client";
-    Code?: string | undefined;
-    Message?: string | undefined;
-    /**
-     * <p></p>
-     * @public
-     */
-    Type?: string | undefined;
-    /**
-     * <p></p>
-     * @public
-     */
-    Context?: string | undefined;
-    /**
-     * @internal
-     */
-    constructor(opts: __ExceptionOptionType<InvalidRequestException, __BaseException>);
-}
-/**
- * <p>Indicates that a required parameter is missing.</p>
- * @public
- */
-export declare class MissingParameterValueException extends __BaseException {
-    readonly name: "MissingParameterValueException";
-    readonly $fault: "client";
-    Code?: string | undefined;
-    Message?: string | undefined;
-    /**
-     * <p></p>
-     * @public
-     */
-    Type?: string | undefined;
-    /**
-     * <p></p>
-     * @public
-     */
-    Context?: string | undefined;
-    /**
-     * @internal
-     */
-    constructor(opts: __ExceptionOptionType<MissingParameterValueException, __BaseException>);
-}
-/**
- * <p>A resource that is required for the action doesn't exist.</p>
- * @public
- */
-export declare class ResourceNotFoundException extends __BaseException {
-    readonly name: "ResourceNotFoundException";
-    readonly $fault: "client";
-    Code?: string | undefined;
-    Message?: string | undefined;
-    /**
-     * <p></p>
-     * @public
-     */
-    Type?: string | undefined;
-    /**
-     * <p></p>
-     * @public
-     */
-    Context?: string | undefined;
-    /**
-     * @internal
-     */
-    constructor(opts: __ExceptionOptionType<ResourceNotFoundException, __BaseException>);
-}
-/**
- * <p>The request failed due to a temporary failure of the server.</p>
- * @public
- */
-export declare class ServiceUnavailableException extends __BaseException {
-    readonly name: "ServiceUnavailableException";
-    readonly $fault: "server";
-    Code?: string | undefined;
-    Message?: string | undefined;
-    /**
-     * <p></p>
-     * @public
-     */
-    Type?: string | undefined;
-    /**
-     * <p></p>
-     * @public
-     */
-    Context?: string | undefined;
-    /**
-     * @internal
-     */
-    constructor(opts: __ExceptionOptionType<ServiceUnavailableException, __BaseException>);
-}
 /**
  * <p>Contains information about the backup plan and rule that Backup used to
  *          initiate the recovery point backup.</p>
@@ -272,17 +123,6 @@ export interface RecoveryPointCreator {
      */
     BackupRuleTimezone?: string | undefined;
 }
-/**
- * @public
- * @enum
- */
-export declare const LifecycleDeleteAfterEvent: {
-    readonly DELETE_AFTER_COPY: "DELETE_AFTER_COPY";
-};
-/**
- * @public
- */
-export type LifecycleDeleteAfterEvent = (typeof LifecycleDeleteAfterEvent)[keyof typeof LifecycleDeleteAfterEvent];
 /**
  * <p>Specifies the time period, in days, before a recovery point transitions to cold storage
  *          or is deleted.</p>
@@ -324,25 +164,6 @@ export interface Lifecycle {
      */
     DeleteAfterEvent?: LifecycleDeleteAfterEvent | undefined;
 }
-/**
- * @public
- * @enum
- */
-export declare const BackupJobState: {
-    readonly ABORTED: "ABORTED";
-    readonly ABORTING: "ABORTING";
-    readonly COMPLETED: "COMPLETED";
-    readonly CREATED: "CREATED";
-    readonly EXPIRED: "EXPIRED";
-    readonly FAILED: "FAILED";
-    readonly PARTIAL: "PARTIAL";
-    readonly PENDING: "PENDING";
-    readonly RUNNING: "RUNNING";
-};
-/**
- * @public
- */
-export type BackupJobState = (typeof BackupJobState)[keyof typeof BackupJobState];
 /**
  * <p>Contains detailed information about a backup job.</p>
  * @public
@@ -593,27 +414,6 @@ export interface BackupJob {
      */
     MessageCategory?: string | undefined;
 }
-/**
- * @public
- * @enum
- */
-export declare const BackupJobStatus: {
-    readonly ABORTED: "ABORTED";
-    readonly ABORTING: "ABORTING";
-    readonly AGGREGATE_ALL: "AGGREGATE_ALL";
-    readonly ANY: "ANY";
-    readonly COMPLETED: "COMPLETED";
-    readonly CREATED: "CREATED";
-    readonly EXPIRED: "EXPIRED";
-    readonly FAILED: "FAILED";
-    readonly PARTIAL: "PARTIAL";
-    readonly PENDING: "PENDING";
-    readonly RUNNING: "RUNNING";
-};
-/**
- * @public
- */
-export type BackupJobStatus = (typeof BackupJobStatus)[keyof typeof BackupJobStatus];
 /**
  * <p>This is a summary of jobs created
  *          or running within the most recent 30 days.</p>
@@ -733,6 +533,23 @@ export interface IndexAction {
      */
     ResourceTypes?: string[] | undefined;
 }
+/**
+ * <p>Defines a scanning action that specifies the malware scanner and scan mode to use.</p>
+ * @public
+ */
+export interface ScanAction {
+    /**
+     * <p>The malware scanner to use for the scan action. Currently only <code>GUARDDUTY</code> is supported.</p>
+     * @public
+     */
+    MalwareScanner?: MalwareScanner | undefined;
+    /**
+     * <p>The scanning mode to use for the scan action.</p>
+     *          <p>Valid values: <code>FULL_SCAN</code> | <code>INCREMENTAL_SCAN</code>.</p>
+     * @public
+     */
+    ScanMode?: ScanMode | undefined;
+}
 /**
  * <p>Specifies a scheduled task used to back up a selection of resources.</p>
  * @public
@@ -845,6 +662,33 @@ export interface BackupRule {
      * @public
      */
     IndexActions?: IndexAction[] | undefined;
+    /**
+     * <p>Contains your scanning configuration for the backup rule and includes the malware scanner, and scan mode of either full or incremental.</p>
+     * @public
+     */
+    ScanActions?: ScanAction[] | undefined;
+}
+/**
+ * <p>Contains configuration settings for malware scanning, including the scanner type, target resource types, and scanner role.</p>
+ * @public
+ */
+export interface ScanSetting {
+    /**
+     * <p>The malware scanner to use for scanning. Currently only <code>GUARDDUTY</code> is supported.</p>
+     * @public
+     */
+    MalwareScanner?: MalwareScanner | undefined;
+    /**
+     * <p>An array of resource types to be scanned for malware.</p>
+     * @public
+     */
+    ResourceTypes?: string[] | undefined;
+    /**
+     * <p>The Amazon Resource Name (ARN) of the IAM role that the scanner uses to access resources; for example,
+     *          <code>arn:aws:iam::123456789012:role/ScannerRole</code>.</p>
+     * @public
+     */
+    ScannerRoleArn?: string | undefined;
 }
 /**
  * <p>Contains an optional backup plan display name and an array of <code>BackupRule</code>
@@ -873,6 +717,11 @@ export interface BackupPlan {
      * @public
      */
     AdvancedBackupSettings?: AdvancedBackupSetting[] | undefined;
+    /**
+     * <p>Contains your scanning configuration for the backup plan and includes the Malware scanner, your selected resources, and scanner role.</p>
+     * @public
+     */
+    ScanSettings?: ScanSetting[] | undefined;
 }
 /**
  * <p>Specifies a scheduled task used to back up a selection of resources.</p>
@@ -984,6 +833,11 @@ export interface BackupRuleInput {
      * @public
      */
     IndexActions?: IndexAction[] | undefined;
+    /**
+     * <p>Contains your scanning configuration for the backup rule and includes the malware scanner, and scan mode of either full or incremental.</p>
+     * @public
+     */
+    ScanActions?: ScanAction[] | undefined;
 }
 /**
  * <p>Contains an optional backup plan display name and an array of <code>BackupRule</code>
@@ -1010,6 +864,11 @@ export interface BackupPlanInput {
      * @public
      */
     AdvancedBackupSettings?: AdvancedBackupSetting[] | undefined;
+    /**
+     * <p>Contains your scanning configuration for the backup rule and includes the malware scanner, and scan mode of either full or incremental.</p>
+     * @public
+     */
+    ScanSettings?: ScanSetting[] | undefined;
 }
 /**
  * <p>Contains metadata about a backup plan.</p>
@@ -1144,17 +1003,6 @@ export interface Conditions {
      */
     StringNotLike?: ConditionParameter[] | undefined;
 }
-/**
- * @public
- * @enum
- */
-export declare const ConditionType: {
-    readonly STRINGEQUALS: "STRINGEQUALS";
-};
-/**
- * @public
- */
-export type ConditionType = (typeof ConditionType)[keyof typeof ConditionType];
 /**
  * <p>Contains an array of triplets made up of a condition type (such as
  *             <code>StringEquals</code>), a key, and a value. Used to filter resources using their
@@ -1288,75 +1136,6 @@ export interface BackupSelectionsListMember {
      */
     IamRoleArn?: string | undefined;
 }
-/**
- * @public
- * @enum
- */
-export declare const BackupVaultEvent: {
-    readonly BACKUP_JOB_COMPLETED: "BACKUP_JOB_COMPLETED";
-    readonly BACKUP_JOB_EXPIRED: "BACKUP_JOB_EXPIRED";
-    readonly BACKUP_JOB_FAILED: "BACKUP_JOB_FAILED";
-    readonly BACKUP_JOB_STARTED: "BACKUP_JOB_STARTED";
-    readonly BACKUP_JOB_SUCCESSFUL: "BACKUP_JOB_SUCCESSFUL";
-    readonly BACKUP_PLAN_CREATED: "BACKUP_PLAN_CREATED";
-    readonly BACKUP_PLAN_MODIFIED: "BACKUP_PLAN_MODIFIED";
-    readonly CONTINUOUS_BACKUP_INTERRUPTED: "CONTINUOUS_BACKUP_INTERRUPTED";
-    readonly COPY_JOB_FAILED: "COPY_JOB_FAILED";
-    readonly COPY_JOB_STARTED: "COPY_JOB_STARTED";
-    readonly COPY_JOB_SUCCESSFUL: "COPY_JOB_SUCCESSFUL";
-    readonly RECOVERY_POINT_INDEXING_FAILED: "RECOVERY_POINT_INDEXING_FAILED";
-    readonly RECOVERY_POINT_INDEX_COMPLETED: "RECOVERY_POINT_INDEX_COMPLETED";
-    readonly RECOVERY_POINT_INDEX_DELETED: "RECOVERY_POINT_INDEX_DELETED";
-    readonly RECOVERY_POINT_MODIFIED: "RECOVERY_POINT_MODIFIED";
-    readonly RESTORE_JOB_COMPLETED: "RESTORE_JOB_COMPLETED";
-    readonly RESTORE_JOB_FAILED: "RESTORE_JOB_FAILED";
-    readonly RESTORE_JOB_STARTED: "RESTORE_JOB_STARTED";
-    readonly RESTORE_JOB_SUCCESSFUL: "RESTORE_JOB_SUCCESSFUL";
-    readonly S3_BACKUP_OBJECT_FAILED: "S3_BACKUP_OBJECT_FAILED";
-    readonly S3_RESTORE_OBJECT_FAILED: "S3_RESTORE_OBJECT_FAILED";
-};
-/**
- * @public
- */
-export type BackupVaultEvent = (typeof BackupVaultEvent)[keyof typeof BackupVaultEvent];
-/**
- * @public
- * @enum
- */
-export declare const EncryptionKeyType: {
-    readonly AWS_OWNED_KMS_KEY: "AWS_OWNED_KMS_KEY";
-    readonly CUSTOMER_MANAGED_KMS_KEY: "CUSTOMER_MANAGED_KMS_KEY";
-};
-/**
- * @public
- */
-export type EncryptionKeyType = (typeof EncryptionKeyType)[keyof typeof EncryptionKeyType];
-/**
- * @public
- * @enum
- */
-export declare const VaultState: {
-    readonly AVAILABLE: "AVAILABLE";
-    readonly CREATING: "CREATING";
-    readonly FAILED: "FAILED";
-};
-/**
- * @public
- */
-export type VaultState = (typeof VaultState)[keyof typeof VaultState];
-/**
- * @public
- * @enum
- */
-export declare const VaultType: {
-    readonly BACKUP_VAULT: "BACKUP_VAULT";
-    readonly LOGICALLY_AIR_GAPPED_BACKUP_VAULT: "LOGICALLY_AIR_GAPPED_BACKUP_VAULT";
-    readonly RESTORE_ACCESS_BACKUP_VAULT: "RESTORE_ACCESS_BACKUP_VAULT";
-};
-/**
- * @public
- */
-export type VaultType = (typeof VaultType)[keyof typeof VaultType];
 /**
  * <p>Contains metadata about a backup vault.</p>
  * @public
@@ -1521,56 +1300,6 @@ export interface CancelLegalHoldInput {
  */
 export interface CancelLegalHoldOutput {
 }
-/**
- * <p>Backup is already performing an action on this recovery point. It can't
- *          perform the action you requested until the first action finishes. Try again later.</p>
- * @public
- */
-export declare class InvalidResourceStateException extends __BaseException {
-    readonly name: "InvalidResourceStateException";
-    readonly $fault: "client";
-    Code?: string | undefined;
-    Message?: string | undefined;
-    /**
-     * <p></p>
-     * @public
-     */
-    Type?: string | undefined;
-    /**
-     * <p></p>
-     * @public
-     */
-    Context?: string | undefined;
-    /**
-     * @internal
-     */
-    constructor(opts: __ExceptionOptionType<InvalidResourceStateException, __BaseException>);
-}
-/**
- * <p>Backup can't perform the action that you requested until it finishes
- *          performing a previous action. Try again later.</p>
- * @public
- */
-export declare class ConflictException extends __BaseException {
-    readonly name: "ConflictException";
-    readonly $fault: "client";
-    Code?: string | undefined;
-    Message?: string | undefined;
-    /**
-     * <p></p>
-     * @public
-     */
-    Type?: string | undefined;
-    /**
-     * <p></p>
-     * @public
-     */
-    Context?: string | undefined;
-    /**
-     * @internal
-     */
-    constructor(opts: __ExceptionOptionType<ConflictException, __BaseException>);
-}
 /**
  * <p>The parameters for a control. A control can have zero, one, or more than one
  *          parameter. An example of a control with two parameters is: "backup plan frequency is at
@@ -1628,21 +1357,6 @@ export interface ControlScope {
      */
     Tags?: Record<string, string> | undefined;
 }
-/**
- * @public
- * @enum
- */
-export declare const CopyJobState: {
-    readonly COMPLETED: "COMPLETED";
-    readonly CREATED: "CREATED";
-    readonly FAILED: "FAILED";
-    readonly PARTIAL: "PARTIAL";
-    readonly RUNNING: "RUNNING";
-};
-/**
- * @public
- */
-export type CopyJobState = (typeof CopyJobState)[keyof typeof CopyJobState];
 /**
  * <p>Contains detailed information about a copy job.</p>
  * @public
@@ -1826,27 +1540,6 @@ export interface CopyJob {
      */
     MessageCategory?: string | undefined;
 }
-/**
- * @public
- * @enum
- */
-export declare const CopyJobStatus: {
-    readonly ABORTED: "ABORTED";
-    readonly ABORTING: "ABORTING";
-    readonly AGGREGATE_ALL: "AGGREGATE_ALL";
-    readonly ANY: "ANY";
-    readonly COMPLETED: "COMPLETED";
-    readonly COMPLETING: "COMPLETING";
-    readonly CREATED: "CREATED";
-    readonly FAILED: "FAILED";
-    readonly FAILING: "FAILING";
-    readonly PARTIAL: "PARTIAL";
-    readonly RUNNING: "RUNNING";
-};
-/**
- * @public
- */
-export type CopyJobStatus = (typeof CopyJobStatus)[keyof typeof CopyJobStatus];
 /**
  * <p>This is a summary of copy jobs created
  *          or running within the most recent 30 days.</p>
@@ -1975,31 +1668,6 @@ export interface CreateBackupPlanOutput {
      */
     AdvancedBackupSettings?: AdvancedBackupSetting[] | undefined;
 }
-/**
- * <p>A limit in the request has been exceeded; for example, a maximum number of items allowed
- *          in a request.</p>
- * @public
- */
-export declare class LimitExceededException extends __BaseException {
-    readonly name: "LimitExceededException";
-    readonly $fault: "client";
-    Code?: string | undefined;
-    Message?: string | undefined;
-    /**
-     * <p></p>
-     * @public
-     */
-    Type?: string | undefined;
-    /**
-     * <p></p>
-     * @public
-     */
-    Context?: string | undefined;
-    /**
-     * @internal
-     */
-    constructor(opts: __ExceptionOptionType<LimitExceededException, __BaseException>);
-}
 /**
  * @public
  */
@@ -2276,20 +1944,6 @@ export interface CreateLegalHoldInput {
      */
     Tags?: Record<string, string> | undefined;
 }
-/**
- * @public
- * @enum
- */
-export declare const LegalHoldStatus: {
-    readonly ACTIVE: "ACTIVE";
-    readonly CANCELED: "CANCELED";
-    readonly CANCELING: "CANCELING";
-    readonly CREATING: "CREATING";
-};
-/**
- * @public
- */
-export type LegalHoldStatus = (typeof LegalHoldStatus)[keyof typeof LegalHoldStatus];
 /**
  * @public
  */
@@ -2437,7 +2091,7 @@ export interface ReportSetting {
      *          template. The report templates are:</p>
      *          <p>
      *             <code>RESOURCE_COMPLIANCE_REPORT | CONTROL_COMPLIANCE_REPORT | BACKUP_JOB_REPORT |
-     *             COPY_JOB_REPORT | RESTORE_JOB_REPORT</code>
+     *             COPY_JOB_REPORT | RESTORE_JOB_REPORT | SCAN_JOB_REPORT</code>
      *          </p>
      * @public
      */
@@ -2498,7 +2152,7 @@ export interface CreateReportPlanInput {
      *          template. The report templates are:</p>
      *          <p>
      *             <code>RESOURCE_COMPLIANCE_REPORT | CONTROL_COMPLIANCE_REPORT | BACKUP_JOB_REPORT |
-     *             COPY_JOB_REPORT | RESTORE_JOB_REPORT</code>
+     *             COPY_JOB_REPORT | RESTORE_JOB_REPORT | SCAN_JOB_REPORT </code>
      *          </p>
      *          <p>If the report template is <code>RESOURCE_COMPLIANCE_REPORT</code> or
      *             <code>CONTROL_COMPLIANCE_REPORT</code>, this API resource also describes the report
@@ -2598,30 +2252,6 @@ export interface CreateRestoreAccessBackupVaultOutput {
      */
     CreationDate?: Date | undefined;
 }
-/**
- * @public
- * @enum
- */
-export declare const RestoreTestingRecoveryPointSelectionAlgorithm: {
-    readonly LATEST_WITHIN_WINDOW: "LATEST_WITHIN_WINDOW";
-    readonly RANDOM_WITHIN_WINDOW: "RANDOM_WITHIN_WINDOW";
-};
-/**
- * @public
- */
-export type RestoreTestingRecoveryPointSelectionAlgorithm = (typeof RestoreTestingRecoveryPointSelectionAlgorithm)[keyof typeof RestoreTestingRecoveryPointSelectionAlgorithm];
-/**
- * @public
- * @enum
- */
-export declare const RestoreTestingRecoveryPointType: {
-    readonly CONTINUOUS: "CONTINUOUS";
-    readonly SNAPSHOT: "SNAPSHOT";
-};
-/**
- * @public
- */
-export type RestoreTestingRecoveryPointType = (typeof RestoreTestingRecoveryPointType)[keyof typeof RestoreTestingRecoveryPointType];
 /**
  * <p>
  *             <code>RecoveryPointSelection</code> has five parameters (three required and two
@@ -3354,30 +2984,6 @@ export interface DeleteTieringConfigurationInput {
  */
 export interface DeleteTieringConfigurationOutput {
 }
-/**
- * <p>A dependent Amazon Web Services service or resource returned an error to the Backup service, and the action cannot be completed.</p>
- * @public
- */
-export declare class DependencyFailureException extends __BaseException {
-    readonly name: "DependencyFailureException";
-    readonly $fault: "server";
-    Code?: string | undefined;
-    Message?: string | undefined;
-    /**
-     * <p></p>
-     * @public
-     */
-    Type?: string | undefined;
-    /**
-     * <p></p>
-     * @public
-     */
-    Context?: string | undefined;
-    /**
-     * @internal
-     */
-    constructor(opts: __ExceptionOptionType<DependencyFailureException, __BaseException>);
-}
 /**
  * @public
  */
@@ -3649,19 +3255,6 @@ export interface DescribeBackupVaultInput {
      */
     BackupVaultAccountId?: string | undefined;
 }
-/**
- * @public
- * @enum
- */
-export declare const MpaSessionStatus: {
-    readonly APPROVED: "APPROVED";
-    readonly FAILED: "FAILED";
-    readonly PENDING: "PENDING";
-};
-/**
- * @public
- */
-export type MpaSessionStatus = (typeof MpaSessionStatus)[keyof typeof MpaSessionStatus];
 /**
  * <p>Contains information about the latest update to an MPA approval team association.</p>
  * @public
@@ -4047,49 +3640,32 @@ export interface DescribeRecoveryPointInput {
     BackupVaultAccountId?: string | undefined;
 }
 /**
+ * <p>Contains the results of a security scan, including scanner information, scan state, and any findings discovered.</p>
  * @public
- * @enum
  */
-export declare const IndexStatus: {
-    readonly ACTIVE: "ACTIVE";
-    readonly DELETING: "DELETING";
-    readonly FAILED: "FAILED";
-    readonly PENDING: "PENDING";
-};
-/**
- * @public
- */
-export type IndexStatus = (typeof IndexStatus)[keyof typeof IndexStatus];
-/**
- * @public
- * @enum
- */
-export declare const RecoveryPointStatus: {
-    readonly AVAILABLE: "AVAILABLE";
-    readonly COMPLETED: "COMPLETED";
-    readonly CREATING: "CREATING";
-    readonly DELETING: "DELETING";
-    readonly EXPIRED: "EXPIRED";
-    readonly PARTIAL: "PARTIAL";
-    readonly STOPPED: "STOPPED";
-};
-/**
- * @public
- */
-export type RecoveryPointStatus = (typeof RecoveryPointStatus)[keyof typeof RecoveryPointStatus];
-/**
- * @public
- * @enum
- */
-export declare const StorageClass: {
-    readonly COLD: "COLD";
-    readonly DELETED: "DELETED";
-    readonly WARM: "WARM";
-};
-/**
- * @public
- */
-export type StorageClass = (typeof StorageClass)[keyof typeof StorageClass];
+export interface ScanResult {
+    /**
+     * <p>The malware scanner used to perform the scan. Currently only <code>GUARDDUTY</code> is supported.</p>
+     * @public
+     */
+    MalwareScanner?: MalwareScanner | undefined;
+    /**
+     * <p>The final state of the scan job.</p>
+     *          <p>Valid values: <code>COMPLETED</code> | <code>FAILED</code> | <code>CANCELED</code>.</p>
+     * @public
+     */
+    ScanJobState?: ScanJobState | undefined;
+    /**
+     * <p>The timestamp of when the last scan was performed, in Unix format and Coordinated Universal Time (UTC).</p>
+     * @public
+     */
+    LastScanTimestamp?: Date | undefined;
+    /**
+     * <p>An array of findings discovered during the scan.</p>
+     * @public
+     */
+    Findings?: ScanFinding[] | undefined;
+}
 /**
  * @public
  */
@@ -4328,6 +3904,12 @@ export interface DescribeRecoveryPointOutput {
      * @public
      */
     EncryptionKeyType?: EncryptionKeyType | undefined;
+    /**
+     * <p>Contains the latest scanning results against the recovery point and currently include <code>MalwareScanner</code>, <code>ScanJobState</code>, <code>Findings</code>, and <code>LastScanTimestamp</code>
+     *          </p>
+     * @public
+     */
+    ScanResults?: ScanResult[] | undefined;
 }
 /**
  * @public
@@ -4585,48 +4167,6 @@ export interface RestoreJobCreator {
      */
     RestoreTestingPlanArn?: string | undefined;
 }
-/**
- * @public
- * @enum
- */
-export declare const RestoreDeletionStatus: {
-    readonly DELETING: "DELETING";
-    readonly FAILED: "FAILED";
-    readonly SUCCESSFUL: "SUCCESSFUL";
-};
-/**
- * @public
- */
-export type RestoreDeletionStatus = (typeof RestoreDeletionStatus)[keyof typeof RestoreDeletionStatus];
-/**
- * @public
- * @enum
- */
-export declare const RestoreJobStatus: {
-    readonly ABORTED: "ABORTED";
-    readonly COMPLETED: "COMPLETED";
-    readonly FAILED: "FAILED";
-    readonly PENDING: "PENDING";
-    readonly RUNNING: "RUNNING";
-};
-/**
- * @public
- */
-export type RestoreJobStatus = (typeof RestoreJobStatus)[keyof typeof RestoreJobStatus];
-/**
- * @public
- * @enum
- */
-export declare const RestoreValidationStatus: {
-    readonly FAILED: "FAILED";
-    readonly SUCCESSFUL: "SUCCESSFUL";
-    readonly TIMED_OUT: "TIMED_OUT";
-    readonly VALIDATING: "VALIDATING";
-};
-/**
- * @public
- */
-export type RestoreValidationStatus = (typeof RestoreValidationStatus)[keyof typeof RestoreValidationStatus];
 /**
  * @public
  */
@@ -4762,6 +4302,179 @@ export interface DescribeRestoreJobOutput {
      */
     ParentJobId?: string | undefined;
 }
+/**
+ * @public
+ */
+export interface DescribeScanJobInput {
+    /**
+     * <p>Uniquely identifies a request to Backup to scan a resource.</p>
+     * @public
+     */
+    ScanJobId: string | undefined;
+}
+/**
+ * <p>Contains identifying information about the creation of a scan job, including the backup plan and rule that initiated the scan.</p>
+ * @public
+ */
+export interface ScanJobCreator {
+    /**
+     * <p>An Amazon Resource Name (ARN) that uniquely identifies a backup plan; for example,
+     *          <code>arn:aws:backup:us-east-1:123456789012:plan:8F81F553-3A74-4A3F-B93D-B3360DC80C50</code>.</p>
+     * @public
+     */
+    BackupPlanArn: string | undefined;
+    /**
+     * <p>The ID of the backup plan.</p>
+     * @public
+     */
+    BackupPlanId: string | undefined;
+    /**
+     * <p>Unique, randomly generated, Unicode, UTF-8 encoded strings that are at most 1,024 bytes
+     *          long. Version IDs cannot be edited.</p>
+     * @public
+     */
+    BackupPlanVersion: string | undefined;
+    /**
+     * <p>Uniquely identifies the backup rule that initiated the scan job.</p>
+     * @public
+     */
+    BackupRuleId: string | undefined;
+}
+/**
+ * <p>Contains information about the results of a scan job.</p>
+ * @public
+ */
+export interface ScanResultInfo {
+    /**
+     * <p>The status of the scan results.</p>
+     *          <p>Valid values: <code>THREATS_FOUND</code> | <code>NO_THREATS_FOUND</code>.</p>
+     * @public
+     */
+    ScanResultStatus: ScanResultStatus | undefined;
+}
+/**
+ * @public
+ */
+export interface DescribeScanJobOutput {
+    /**
+     * <p>Returns the account ID that owns the scan job.</p>
+     *          <p>Pattern: <code>^[0-9]\{12\}$</code>
+     *          </p>
+     * @public
+     */
+    AccountId: string | undefined;
+    /**
+     * <p>An Amazon Resource Name (ARN) that uniquely identifies a backup vault; for example,
+     *             <code>arn:aws:backup:us-east-1:123456789012:backup-vault:aBackupVault</code>
+     *          </p>
+     * @public
+     */
+    BackupVaultArn: string | undefined;
+    /**
+     * <p>The name of a logical container where backups are stored. Backup vaults are identified by names that are
+     *          unique to the account used to create them and the Amazon Web Services Region where they are created.</p>
+     *          <p>Pattern: <code>^[a-zA-Z0-9\-\_\.]\{2,50\}$</code>
+     *          </p>
+     * @public
+     */
+    BackupVaultName: string | undefined;
+    /**
+     * <p>The date and time that a backup index finished creation, in Unix format and Coordinated
+     *          Universal Time (UTC). The value of <code>CompletionDate</code> is accurate to milliseconds.
+     *          For example, the value 1516925490.087 represents Friday, January 26, 2018 12:11:30.087
+     *          AM.</p>
+     * @public
+     */
+    CompletionDate?: Date | undefined;
+    /**
+     * <p>Contains identifying information about the creation of a scan job, including the backup plan and rule that initiated the scan.</p>
+     * @public
+     */
+    CreatedBy: ScanJobCreator | undefined;
+    /**
+     * <p>The date and time that a backup index finished creation, in Unix format and Coordinated
+     *          Universal Time (UTC). The value of <code>CreationDate</code> is accurate to milliseconds.
+     *          For example, the value 1516925490.087 represents Friday, January 26, 2018 12:11:30.087
+     *          AM.</p>
+     * @public
+     */
+    CreationDate: Date | undefined;
+    /**
+     * <p>An Amazon Resource Name (ARN) that uniquely identifies a backup vault; for example,
+     *             <code>arn:aws:iam::123456789012:role/S3Access</code>.</p>
+     * @public
+     */
+    IamRoleArn: string | undefined;
+    /**
+     * <p>The scanning engine used for the corresponding scan job. Currently only <code>GUARDUTY</code> is supported.</p>
+     * @public
+     */
+    MalwareScanner: MalwareScanner | undefined;
+    /**
+     * <p>An ARN that uniquely identifies the target recovery point for scanning.; for example,
+     *       <code>arn:aws:backup:us-east-1:123456789012:recovery-point:1EB3B5E7-9EB0-435A-A80B-108B488B0D45</code>.</p>
+     * @public
+     */
+    RecoveryPointArn: string | undefined;
+    /**
+     * <p>An ARN that uniquely identifies the source resource of the corresponding recovery point ARN.</p>
+     * @public
+     */
+    ResourceArn: string | undefined;
+    /**
+     * <p>The non-unique name of the resource that belongs to the specified backup.</p>
+     * @public
+     */
+    ResourceName: string | undefined;
+    /**
+     * <p>The type of Amazon Web Services Resource to be backed up; for example, an Amazon Elastic Block Store (Amazon EBS) volume.</p>
+     *          <p>Pattern: <code>^[a-zA-Z0-9\-\_\.]\{1,50\}$</code>
+     *          </p>
+     * @public
+     */
+    ResourceType: ScanResourceType | undefined;
+    /**
+     * <p>An ARN that uniquely identifies the base recovery point for scanning. This field will only be populated when an incremental scan job has taken place.</p>
+     * @public
+     */
+    ScanBaseRecoveryPointArn?: string | undefined;
+    /**
+     * <p>The scan ID generated by Amazon GuardDuty for the corresponding Scan Job ID request from Backup.</p>
+     * @public
+     */
+    ScanId?: string | undefined;
+    /**
+     * <p>The scan job ID that uniquely identified the request to Backup.</p>
+     * @public
+     */
+    ScanJobId: string | undefined;
+    /**
+     * <p>Specifies the scan type used for the scan job.</p>
+     * @public
+     */
+    ScanMode: ScanMode | undefined;
+    /**
+     * <p>
+     *       Contains the <code>ScanResultsStatus</code> for the scanning job and returns <code>THREATS_FOUND</code> or <code>NO_THREATS_FOUND</code> for completed jobs.</p>
+     * @public
+     */
+    ScanResult?: ScanResultInfo | undefined;
+    /**
+     * <p>Specifies the scanner IAM role ARN used to for the scan job.</p>
+     * @public
+     */
+    ScannerRoleArn: string | undefined;
+    /**
+     * <p>The current state of a scan job.</p>
+     * @public
+     */
+    State: ScanState | undefined;
+    /**
+     * <p>A detailed message explaining the status of the job to back up a resource.</p>
+     * @public
+     */
+    StatusMessage?: string | undefined;
+}
 /**
  * @public
  */
@@ -4859,19 +4572,6 @@ export interface GetBackupPlanInput {
      */
     MaxScheduledRunsPreview?: number | undefined;
 }
-/**
- * @public
- * @enum
- */
-export declare const RuleExecutionType: {
-    readonly CONTINUOUS: "CONTINUOUS";
-    readonly CONTINUOUS_AND_SNAPSHOTS: "CONTINUOUS_AND_SNAPSHOTS";
-    readonly SNAPSHOTS: "SNAPSHOTS";
-};
-/**
- * @public
- */
-export type RuleExecutionType = (typeof RuleExecutionType)[keyof typeof RuleExecutionType];
 /**
  * <p>Contains information about a scheduled backup plan execution, including the execution time, rule type, and associated rule identifier.</p>
  * @public
@@ -7395,6 +7095,12 @@ export interface RecoveryPointByBackupVault {
      * @public
      */
     EncryptionKeyType?: EncryptionKeyType | undefined;
+    /**
+     * <p>Contains the latest scanning results against the recovery point and currently include
+     *       <code>FailedScan</code>, <code>Findings</code>, <code>LastComputed</code>.</p>
+     * @public
+     */
+    AggregatedScanResult?: AggregatedScanResult | undefined;
 }
 /**
  * @public
@@ -7616,6 +7322,12 @@ export interface RecoveryPointByResource {
      * @public
      */
     EncryptionKeyType?: EncryptionKeyType | undefined;
+    /**
+     * <p>Contains the latest scanning results against the recovery point and currently include
+     *       <code>FailedScan</code>, <code>Findings</code>, <code>LastComputed</code>.</p>
+     * @public
+     */
+    AggregatedScanResult?: AggregatedScanResult | undefined;
 }
 /**
  * @public
@@ -7666,8 +7378,11 @@ export interface ListReportJobsInput {
     /**
      * <p>Returns only report jobs that are in the specified status. The statuses are:</p>
      *          <p>
-     *             <code>CREATED | RUNNING | COMPLETED | FAILED</code>
+     *             <code>CREATED | RUNNING | COMPLETED | FAILED | COMPLETED_WITH_ISSUES</code>
      *          </p>
+     *          <p> Please note that only scanning jobs finish with state completed with issues.
+     *             For backup jobs this is a console interpretation of a job that finishes in
+     *             completed state and has a status message.</p>
      * @public
      */
     ByStatus?: string | undefined;
@@ -7756,18 +7471,6 @@ export interface ListRestoreAccessBackupVaultsInput {
      */
     MaxResults?: number | undefined;
 }
-/**
- * @public
- * @enum
- */
-export declare const MpaRevokeSessionStatus: {
-    readonly FAILED: "FAILED";
-    readonly PENDING: "PENDING";
-};
-/**
- * @public
- */
-export type MpaRevokeSessionStatus = (typeof MpaRevokeSessionStatus)[keyof typeof MpaRevokeSessionStatus];
 /**
  * <p>Contains information about the latest request to revoke access to a backup vault.</p>
  * @public
@@ -8197,24 +7900,6 @@ export interface ListRestoreJobsByProtectedResourceOutput {
      */
     NextToken?: string | undefined;
 }
-/**
- * @public
- * @enum
- */
-export declare const RestoreJobState: {
-    readonly ABORTED: "ABORTED";
-    readonly AGGREGATE_ALL: "AGGREGATE_ALL";
-    readonly ANY: "ANY";
-    readonly COMPLETED: "COMPLETED";
-    readonly CREATED: "CREATED";
-    readonly FAILED: "FAILED";
-    readonly PENDING: "PENDING";
-    readonly RUNNING: "RUNNING";
-};
-/**
- * @public
- */
-export type RestoreJobState = (typeof RestoreJobState)[keyof typeof RestoreJobState];
 /**
  * @public
  */
@@ -8588,84 +8273,500 @@ export interface ListRestoreTestingSelectionsOutput {
 /**
  * @public
  */
-export interface ListTagsInput {
-    /**
-     * <p>An Amazon Resource Name (ARN) that uniquely identifies a resource. The format of the ARN
-     *          depends on the type of resource. Valid targets for <code>ListTags</code> are recovery
-     *          points, backup plans, and backup vaults.</p>
-     * @public
-     */
-    ResourceArn: string | undefined;
+export interface ListScanJobsInput {
     /**
-     * <p>The next item following a partial list of returned items. For example, if a request is
-     *          made to return <code>MaxResults</code> number of items, <code>NextToken</code> allows you
-     *          to return more items in your list starting at the location pointed to by the next
-     *          token.</p>
+     * <p>The account ID to list the jobs from. Returns only backup jobs associated with the specified account ID.</p>
+     *          <p>If used from an Amazon Web Services Organizations management account, passing <code>*</code> returns all jobs across the organization.</p>
+     *          <p>Pattern: <code>^[0-9]\{12\}$</code>
+     *          </p>
      * @public
      */
-    NextToken?: string | undefined;
+    ByAccountId?: string | undefined;
     /**
-     * <p>The maximum number of items to be returned.</p>
+     * <p>Returns only scan jobs that will be stored in the specified backup vault.
+     *          Backup vaults are identified by names that are unique to the account
+     *          used to create them and the Amazon Web Services Region where they are created.</p>
+     *          <p>Pattern: <code>^[a-zA-Z0-9\-\_\.]\{2,50\}$</code>
+     *          </p>
      * @public
      */
-    MaxResults?: number | undefined;
-}
-/**
- * @public
- */
-export interface ListTagsOutput {
+    ByBackupVaultName?: string | undefined;
     /**
-     * <p>The next item following a partial list of returned items. For example, if a request is
-     *          made to return <code>MaxResults</code> number of items, <code>NextToken</code> allows you
-     *          to return more items in your list starting at the location pointed to by the next
-     *          token.</p>
+     * <p>Returns only scan jobs completed after a date expressed in Unix format and Coordinated Universal Time (UTC).</p>
      * @public
      */
-    NextToken?: string | undefined;
+    ByCompleteAfter?: Date | undefined;
     /**
-     * <p>Information about the tags.</p>
+     * <p>Returns only backup jobs completed before a date expressed in Unix format and Coordinated Universal Time (UTC).</p>
      * @public
      */
-    Tags?: Record<string, string> | undefined;
-}
-/**
- * @public
- */
-export interface ListTieringConfigurationsInput {
+    ByCompleteBefore?: Date | undefined;
     /**
-     * <p>The maximum number of items to be returned.</p>
+     * <p>Returns only the scan jobs for the specified malware scanner. Currently only supports <code>GUARDDUTY</code>.</p>
      * @public
      */
-    MaxResults?: number | undefined;
+    ByMalwareScanner?: MalwareScanner | undefined;
     /**
-     * <p>The next item following a partial list of returned items. For example, if a request
-     *          is made to return <code>MaxResults</code> number of items, <code>NextToken</code>
-     *          allows you to return more items in your list starting at the location pointed to by the
-     *          next token.</p>
+     * <p>Returns only the scan jobs that are ran against the specified recovery point.</p>
      * @public
      */
-    NextToken?: string | undefined;
-}
-/**
- * <p>This contains metadata about a tiering configuration returned in a list.</p>
- * @public
- */
-export interface TieringConfigurationsListMember {
+    ByRecoveryPointArn?: string | undefined;
     /**
-     * <p>An Amazon Resource Name (ARN) that uniquely identifies the
-     *          tiering configuration.</p>
+     * <p>Returns only scan jobs that match the specified resource Amazon Resource Name (ARN).</p>
      * @public
      */
-    TieringConfigurationArn?: string | undefined;
+    ByResourceArn?: string | undefined;
     /**
-     * <p>The unique name of the tiering configuration.</p>
+     * <p>Returns restore testing selections by the specified restore testing
+     *          plan name.</p>
+     *          <ul>
+     *             <li>
+     *                <p>
+     *                   <code>EBS</code>for Amazon Elastic Block Store</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>EC2</code>for Amazon Elastic Compute Cloud</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>S3</code>for Amazon Simple Storage Service (Amazon S3)</p>
+     *             </li>
+     *          </ul>
+     *          <p>Pattern: <code>^[a-zA-Z0-9\-\_\.]\{1,50\}$</code>
+     *          </p>
      * @public
      */
-    TieringConfigurationName?: string | undefined;
+    ByResourceType?: ScanResourceType | undefined;
     /**
-     * <p>The name of the backup vault where the tiering configuration applies.
-     *          Use <code>*</code> to apply to all backup vaults.</p>
-     * @public
+     * <p>Returns only the scan jobs for the specified scan results:</p>
+     *          <ul>
+     *             <li>
+     *                <p>
+     *                   <code>THREATS_FOUND</code>
+     *                </p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>NO_THREATS_FOUND</code>
+     *                </p>
+     *             </li>
+     *          </ul>
+     * @public
+     */
+    ByScanResultStatus?: ScanResultStatus | undefined;
+    /**
+     * <p>Returns only the scan jobs for the specified scanning job state.</p>
+     * @public
+     */
+    ByState?: ScanState | undefined;
+    /**
+     * <p>The maximum number of items to be returned.</p>
+     *          <p>Valid Range: Minimum value of 1. Maximum value of 1000.</p>
+     * @public
+     */
+    MaxResults?: number | undefined;
+    /**
+     * <p>The next item following a partial list of returned items. For example, if a request is made to
+     *          return <code>MaxResults</code> number of items, <code>NextToken</code> allows you to return more items
+     *          in your list starting at the location pointed to by the next token.</p>
+     * @public
+     */
+    NextToken?: string | undefined;
+}
+/**
+ * <p>Contains metadata about a scan job, including information about the scanning process, results, and associated resources.</p>
+ * @public
+ */
+export interface ScanJob {
+    /**
+     * <p>The account ID that owns the scan job.</p>
+     * @public
+     */
+    AccountId: string | undefined;
+    /**
+     * <p>An Amazon Resource Name (ARN) that uniquely identifies a backup vault; for example,
+     *          <code>arn:aws:backup:us-east-1:123456789012:backup-vault:aBackupVault</code>.</p>
+     * @public
+     */
+    BackupVaultArn: string | undefined;
+    /**
+     * <p>The name of a logical container where backups are stored. Backup vaults are identified
+     *          by names that are unique to the account used to create them and the Amazon Web Services
+     *          Region where they are created.</p>
+     * @public
+     */
+    BackupVaultName: string | undefined;
+    /**
+     * <p>The date and time that a scan job is completed, in Unix format and Coordinated
+     *          Universal Time (UTC). The value of <code>CompletionDate</code> is accurate to milliseconds.
+     *          For example, the value 1516925490.087 represents Friday, January 26, 2018 12:11:30.087
+     *          AM.</p>
+     * @public
+     */
+    CompletionDate?: Date | undefined;
+    /**
+     * <p>Contains identifying information about the creation of a scan job.</p>
+     * @public
+     */
+    CreatedBy: ScanJobCreator | undefined;
+    /**
+     * <p>The date and time that a scan job is created, in Unix format and Coordinated
+     *          Universal Time (UTC). The value of <code>CreationDate</code> is accurate to milliseconds.
+     *          For example, the value 1516925490.087 represents Friday, January 26, 2018 12:11:30.087
+     *          AM.</p>
+     * @public
+     */
+    CreationDate: Date | undefined;
+    /**
+     * <p>Specifies the IAM role ARN used to create the scan job; for example,
+     *          <code>arn:aws:iam::123456789012:role/S3Access</code>.</p>
+     * @public
+     */
+    IamRoleArn: string | undefined;
+    /**
+     * <p>The scanning engine used for the scan job. Currently only <code>GUARDDUTY</code> is supported.</p>
+     * @public
+     */
+    MalwareScanner: MalwareScanner | undefined;
+    /**
+     * <p>An ARN that uniquely identifies the recovery point being scanned; for example,
+     *          <code>arn:aws:backup:us-east-1:123456789012:recovery-point:1EB3B5E7-9EB0-435A-A80B-108B488B0D45</code>.</p>
+     * @public
+     */
+    RecoveryPointArn: string | undefined;
+    /**
+     * <p>An ARN that uniquely identifies the source resource of the recovery point being scanned.</p>
+     * @public
+     */
+    ResourceArn: string | undefined;
+    /**
+     * <p>The non-unique name of the resource that belongs to the specified backup.</p>
+     * @public
+     */
+    ResourceName: string | undefined;
+    /**
+     * <p>The type of Amazon Web Services resource being scanned; for example, an Amazon Elastic Block Store
+     *          (Amazon EBS) volume or an Amazon Relational Database Service (Amazon RDS) database.</p>
+     * @public
+     */
+    ResourceType: ScanResourceType | undefined;
+    /**
+     * <p>An ARN that uniquely identifies the base recovery point for scanning. This field is populated
+     *          when an incremental scan job has taken place.</p>
+     * @public
+     */
+    ScanBaseRecoveryPointArn?: string | undefined;
+    /**
+     * <p>The scan ID generated by the malware scanner for the corresponding scan job.</p>
+     * @public
+     */
+    ScanId?: string | undefined;
+    /**
+     * <p>The unique identifier that identifies the scan job request to Backup.</p>
+     * @public
+     */
+    ScanJobId: string | undefined;
+    /**
+     * <p>Specifies the scan type use for the scan job.</p>
+     *          <p>Includes:</p>
+     *          <p>
+     *             <code>FULL_SCAN</code> will scan the entire data lineage within the backup.</p>
+     *          <p>
+     *             <code>INCREMENTAL_SCAN</code> will scan the data difference between the target recovery point and base recovery point ARN.</p>
+     * @public
+     */
+    ScanMode: ScanMode | undefined;
+    /**
+     * <p>Contains the scan results information, including the status of threats found during scanning.</p>
+     * @public
+     */
+    ScanResult?: ScanResultInfo | undefined;
+    /**
+     * <p>Specifies the scanner IAM role ARN used for the scan job.</p>
+     * @public
+     */
+    ScannerRoleArn: string | undefined;
+    /**
+     * <p>The current state of the scan job.</p>
+     *          <p>Valid values: <code>CREATED</code> | <code>RUNNING</code> | <code>COMPLETED</code> |
+     *          <code>COMPLETED_WITH_ISSUES</code> | <code>FAILED</code> | <code>CANCELED</code>.</p>
+     * @public
+     */
+    State?: ScanState | undefined;
+    /**
+     * <p>A detailed message explaining the status of the scan job.</p>
+     * @public
+     */
+    StatusMessage?: string | undefined;
+}
+/**
+ * @public
+ */
+export interface ListScanJobsOutput {
+    /**
+     * <p>The next item following a partial list of returned items. For example, if a request is made to
+     *          return <code>MaxResults</code> number of items, <code>NextToken</code> allows you to return more items
+     *          in your list starting at the location pointed to by the next token.</p>
+     * @public
+     */
+    NextToken?: string | undefined;
+    /**
+     * <p>An array of structures containing metadata about your scan jobs returned in JSON format.</p>
+     * @public
+     */
+    ScanJobs: ScanJob[] | undefined;
+}
+/**
+ * @public
+ */
+export interface ListScanJobSummariesInput {
+    /**
+     * <p>Returns the job count for the specified account.</p>
+     *          <p>If the request is sent from a member account or an account not part of Amazon Web Services Organizations, jobs within requestor's account will be returned.</p>
+     *          <p>Root, admin, and delegated administrator accounts can use the value <code>ANY</code> to return job counts from every account in the organization.</p>
+     *          <p>
+     *             <code>AGGREGATE_ALL</code> aggregates job counts from all accounts within the authenticated organization, then returns the sum.</p>
+     * @public
+     */
+    AccountId?: string | undefined;
+    /**
+     * <p>Returns the job count for the specified resource type. Use request
+     *          <code>GetSupportedResourceTypes</code> to obtain strings for supported resource types.</p>
+     *          <p>The the value <code>ANY</code> returns count of all resource types.</p>
+     *          <p>
+     *             <code>AGGREGATE_ALL</code> aggregates job counts for all resource types and returns the sum.</p>
+     * @public
+     */
+    ResourceType?: string | undefined;
+    /**
+     * <p>Returns only the scan jobs for the specified malware scanner.
+     *          Currently the only MalwareScanner is <code>GUARDDUTY</code>. But the field also supports <code>ANY</code>, and <code>AGGREGATE_ALL</code>.</p>
+     * @public
+     */
+    MalwareScanner?: MalwareScanner | undefined;
+    /**
+     * <p>Returns only the scan jobs for the specified scan results.</p>
+     * @public
+     */
+    ScanResultStatus?: ScanResultStatus | undefined;
+    /**
+     * <p>Returns only the scan jobs for the specified scanning job state.</p>
+     * @public
+     */
+    State?: ScanJobStatus | undefined;
+    /**
+     * <p>The period for the returned results.</p>
+     *          <ul>
+     *             <li>
+     *                <p>
+     *                   <code>ONE_DAY</code>The daily job count for the prior 1 day.</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>SEVEN_DAYS</code>The daily job count for the prior 7 days.</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>FOURTEEN_DAYS</code>The daily job count for the prior 14 days.</p>
+     *             </li>
+     *          </ul>
+     * @public
+     */
+    AggregationPeriod?: AggregationPeriod | undefined;
+    /**
+     * <p>The maximum number of items to be returned.</p>
+     *          <p>The value is an integer. Range of accepted values is from 1 to 500.</p>
+     * @public
+     */
+    MaxResults?: number | undefined;
+    /**
+     * <p>The next item following a partial list of returned items. For example, if a request is made to
+     *          return <code>MaxResults</code> number of items, <code>NextToken</code> allows you to return more items
+     *          in your list starting at the location pointed to by the next token.</p>
+     * @public
+     */
+    NextToken?: string | undefined;
+}
+/**
+ * <p>Contains summary information about scan jobs, including counts and metadata for a specific time period and criteria.</p>
+ * @public
+ */
+export interface ScanJobSummary {
+    /**
+     * <p>The Amazon Web Services Region where the scan jobs were executed.</p>
+     * @public
+     */
+    Region?: string | undefined;
+    /**
+     * <p>The account ID that owns the scan jobs included in this summary.</p>
+     * @public
+     */
+    AccountId?: string | undefined;
+    /**
+     * <p>The state of the scan jobs included in this summary.</p>
+     *          <p>Valid values: <code>CREATED</code> | <code>RUNNING</code> | <code>COMPLETED</code> |
+     *          <code>COMPLETED_WITH_ISSUES</code> | <code>FAILED</code> | <code>CANCELED</code>.</p>
+     * @public
+     */
+    State?: ScanJobStatus | undefined;
+    /**
+     * <p>The type of Amazon Web Services resource for the scan jobs included in this summary.</p>
+     * @public
+     */
+    ResourceType?: string | undefined;
+    /**
+     * <p>The number of scan jobs that match the specified criteria.</p>
+     * @public
+     */
+    Count?: number | undefined;
+    /**
+     * <p>The value of time in number format of a job start time.</p>
+     *          <p>This value is the time in Unix format, Coordinated Universal Time (UTC), and accurate to
+     *          milliseconds. For example, the value 1516925490.087 represents Friday, January 26, 2018
+     *          12:11:30.087 AM.</p>
+     * @public
+     */
+    StartTime?: Date | undefined;
+    /**
+     * <p>The value of time in number format of a job end time.</p>
+     *          <p>This value is the time in Unix format, Coordinated Universal Time (UTC), and accurate to
+     *          milliseconds. For example, the value 1516925490.087 represents Friday, January 26, 2018
+     *          12:11:30.087 AM.</p>
+     * @public
+     */
+    EndTime?: Date | undefined;
+    /**
+     * <p>Specifies the malware scanner used during the scan job. Currently only supports <code>GUARDDUTY</code>.</p>
+     * @public
+     */
+    MalwareScanner?: MalwareScanner | undefined;
+    /**
+     * <p>The scan result status for the scan jobs included in this summary.</p>
+     *          <p>Valid values: <code>THREATS_FOUND</code> | <code>NO_THREATS_FOUND</code>.</p>
+     * @public
+     */
+    ScanResultStatus?: ScanResultStatus | undefined;
+}
+/**
+ * @public
+ */
+export interface ListScanJobSummariesOutput {
+    /**
+     * <p>The summary information.</p>
+     * @public
+     */
+    ScanJobSummaries?: ScanJobSummary[] | undefined;
+    /**
+     * <p>The period for the returned results.</p>
+     *          <ul>
+     *             <li>
+     *                <p>
+     *                   <code>ONE_DAY</code>The daily job count for the prior 1 day.</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>SEVEN_DAYS</code>The daily job count for the prior 7 days.</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>FOURTEEN_DAYS</code>The daily job count for the prior 14 days.</p>
+     *             </li>
+     *          </ul>
+     *          <p>Valid Values: <code>'ONE_DAY'</code> | <code>'SEVEN_DAYS'</code> | <code>'FOURTEEN_DAYS'</code>
+     *          </p>
+     * @public
+     */
+    AggregationPeriod?: string | undefined;
+    /**
+     * <p>The next item following a partial list of returned items. For example, if a request is made to
+     *          return <code>MaxResults</code> number of items, <code>NextToken</code> allows you to return more items
+     *          in your list starting at the location pointed to by the next token.</p>
+     * @public
+     */
+    NextToken?: string | undefined;
+}
+/**
+ * @public
+ */
+export interface ListTagsInput {
+    /**
+     * <p>An Amazon Resource Name (ARN) that uniquely identifies a resource. The format of the ARN
+     *          depends on the type of resource. Valid targets for <code>ListTags</code> are recovery
+     *          points, backup plans, and backup vaults.</p>
+     * @public
+     */
+    ResourceArn: string | undefined;
+    /**
+     * <p>The next item following a partial list of returned items. For example, if a request is
+     *          made to return <code>MaxResults</code> number of items, <code>NextToken</code> allows you
+     *          to return more items in your list starting at the location pointed to by the next
+     *          token.</p>
+     * @public
+     */
+    NextToken?: string | undefined;
+    /**
+     * <p>The maximum number of items to be returned.</p>
+     * @public
+     */
+    MaxResults?: number | undefined;
+}
+/**
+ * @public
+ */
+export interface ListTagsOutput {
+    /**
+     * <p>The next item following a partial list of returned items. For example, if a request is
+     *          made to return <code>MaxResults</code> number of items, <code>NextToken</code> allows you
+     *          to return more items in your list starting at the location pointed to by the next
+     *          token.</p>
+     * @public
+     */
+    NextToken?: string | undefined;
+    /**
+     * <p>Information about the tags.</p>
+     * @public
+     */
+    Tags?: Record<string, string> | undefined;
+}
+/**
+ * @public
+ */
+export interface ListTieringConfigurationsInput {
+    /**
+     * <p>The maximum number of items to be returned.</p>
+     * @public
+     */
+    MaxResults?: number | undefined;
+    /**
+     * <p>The next item following a partial list of returned items. For example, if a request
+     *          is made to return <code>MaxResults</code> number of items, <code>NextToken</code>
+     *          allows you to return more items in your list starting at the location pointed to by the
+     *          next token.</p>
+     * @public
+     */
+    NextToken?: string | undefined;
+}
+/**
+ * <p>This contains metadata about a tiering configuration returned in a list.</p>
+ * @public
+ */
+export interface TieringConfigurationsListMember {
+    /**
+     * <p>An Amazon Resource Name (ARN) that uniquely identifies the
+     *          tiering configuration.</p>
+     * @public
+     */
+    TieringConfigurationArn?: string | undefined;
+    /**
+     * <p>The unique name of the tiering configuration.</p>
+     * @public
+     */
+    TieringConfigurationName?: string | undefined;
+    /**
+     * <p>The name of the backup vault where the tiering configuration applies.
+     *          Use <code>*</code> to apply to all backup vaults.</p>
+     * @public
      */
     BackupVaultName?: string | undefined;
     /**
@@ -8851,18 +8952,6 @@ export interface RevokeRestoreAccessBackupVaultInput {
      */
     RequesterComment?: string | undefined;
 }
-/**
- * @public
- * @enum
- */
-export declare const Index: {
-    readonly DISABLED: "DISABLED";
-    readonly ENABLED: "ENABLED";
-};
-/**
- * @public
- */
-export type Index = (typeof Index)[keyof typeof Index];
 /**
  * @public
  */
@@ -9317,6 +9406,87 @@ export interface StartRestoreJobOutput {
      */
     RestoreJobId?: string | undefined;
 }
+/**
+ * @public
+ */
+export interface StartScanJobInput {
+    /**
+     * <p>The name of a logical container where backups are stored. Backup vaults are identified by names that
+     *           are unique to the account used to create them and the Amazon Web Services Region where they are created.</p>
+     *          <p>Pattern: <code>^[a-zA-Z0-9\-\_]\{2,50\}$</code>
+     *          </p>
+     * @public
+     */
+    BackupVaultName: string | undefined;
+    /**
+     * <p>Specifies the IAM role ARN used to create the target recovery point; for example,
+     *             <code>arn:aws:iam::123456789012:role/S3Access</code>.</p>
+     * @public
+     */
+    IamRoleArn: string | undefined;
+    /**
+     * <p>A customer-chosen string that you can use to distinguish between otherwise identical
+     *          calls to <code>StartScanJob</code>. Retrying a successful request with the same idempotency
+     *          token results in a success message with no action taken.</p>
+     * @public
+     */
+    IdempotencyToken?: string | undefined;
+    /**
+     * <p>Specifies the malware scanner used during the scan job. Currently only supports <code>GUARDDUTY</code>.</p>
+     * @public
+     */
+    MalwareScanner: MalwareScanner | undefined;
+    /**
+     * <p>An Amazon Resource Name (ARN) that uniquely identifies a recovery point. This is your target recovery point for a full scan.
+     *          If you are running an incremental scan, this will be your a recovery point which has been created after your base recovery point selection.</p>
+     * @public
+     */
+    RecoveryPointArn: string | undefined;
+    /**
+     * <p>An ARN that uniquely identifies the base recovery point to be used for incremental scanning.</p>
+     * @public
+     */
+    ScanBaseRecoveryPointArn?: string | undefined;
+    /**
+     * <p>Specifies the scan type use for the scan job.</p>
+     *          <p>Includes:</p>
+     *          <ul>
+     *             <li>
+     *                <p>
+     *                   <code>FULL_SCAN</code> will scan the entire data lineage within the backup.</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>INCREMENTAL_SCAN</code> will scan the data difference between the target recovery point and base recovery point ARN.</p>
+     *             </li>
+     *          </ul>
+     * @public
+     */
+    ScanMode: ScanMode | undefined;
+    /**
+     * <p>Specified the IAM scanner role ARN.</p>
+     * @public
+     */
+    ScannerRoleArn: string | undefined;
+}
+/**
+ * @public
+ */
+export interface StartScanJobOutput {
+    /**
+     * <p>The date and time that a backup job is created, in Unix format and Coordinated Universal
+     *          Time (UTC). The value of <code>CreationDate</code> is accurate to milliseconds. For
+     *          example, the value 1516925490.087 represents Friday, January 26, 2018 12:11:30.087
+     *          AM.</p>
+     * @public
+     */
+    CreationDate: Date | undefined;
+    /**
+     * <p>Uniquely identifies a request to Backup to back up a resource.</p>
+     * @public
+     */
+    ScanJobId: string | undefined;
+}
 /**
  * @public
  */
@@ -9415,6 +9585,11 @@ export interface UpdateBackupPlanOutput {
      * @public
      */
     AdvancedBackupSettings?: AdvancedBackupSetting[] | undefined;
+    /**
+     * <p>Contains your scanning configuration for the backup plan and includes the Malware scanner, your selected resources, and scanner role.</p>
+     * @public
+     */
+    ScanSettings?: ScanSetting[] | undefined;
 }
 /**
  * @public