@aws-sdk/client-storage-gateway 3.649.0 → 3.651.0

package/dist-types/models/models_0.d.ts

@@ -905,8 +905,10 @@ export interface CachediSCSIVolume {
      */
     VolumeUsedInBytes?: number;
     /**
-     * <p>The Amazon Resource Name (ARN) of a symmetric customer master key (CMK) used for Amazon S3 server-side encryption. Storage Gateway does not support asymmetric CMKs. This
-     *          value can only be set when <code>KMSEncrypted</code> is <code>true</code>. Optional.</p>
+     * <p>Optional. The Amazon Resource Name (ARN) of a symmetric customer master key (CMK) used
+     *          for Amazon S3 server-side encryption. Storage Gateway does not support asymmetric
+     *          CMKs. This value must be set if <code>KMSEncrypted</code> is <code>true</code>, or if
+     *             <code>EncryptionType</code> is <code>SseKms</code> or <code>DsseKms</code>.</p>
      * @public
      */
     KMSKey?: string;
@@ -1124,6 +1126,19 @@ export interface CreateCachediSCSIVolumeOutput {
      */
     TargetARN?: string;
 }
+/**
+ * @public
+ * @enum
+ */
+export declare const EncryptionType: {
+    readonly DsseKms: "DsseKms";
+    readonly SseKms: "SseKms";
+    readonly SseS3: "SseS3";
+};
+/**
+ * @public
+ */
+export type EncryptionType = (typeof EncryptionType)[keyof typeof EncryptionType];
 /**
  * <p>Describes Network File System (NFS) file share default values. Files and folders stored
  *          as Amazon S3 objects in S3 buckets don't, by default, have Unix file
@@ -1199,17 +1214,48 @@ export interface CreateNFSFileShareInput {
      */
     GatewayARN: string | undefined;
     /**
-     * <p>Set to <code>true</code> to use Amazon S3 server-side encryption with your own
-     *             KMS key, or <code>false</code> to use a key managed by Amazon S3.
-     *          Optional.</p>
+     * <p>A value that specifies the type of server-side encryption that the file share will use
+     *          for the data that it stores in Amazon S3.</p>
+     *          <note>
+     *             <p>We recommend using <code>EncryptionType</code> instead of <code>KMSEncrypted</code>
+     *             to set the file share encryption method. You do not need to provide values for both
+     *             parameters.</p>
+     *             <p>If values for both parameters exist in the same request, then the specified
+     *             encryption methods must not conflict. For example, if <code>EncryptionType</code> is
+     *                <code>SseS3</code>, then <code>KMSEncrypted</code> must be <code>false</code>. If
+     *                <code>EncryptionType</code> is <code>SseKms</code> or <code>DsseKms</code>, then
+     *                <code>KMSEncrypted</code> must be <code>true</code>.</p>
+     *          </note>
+     * @public
+     */
+    EncryptionType?: EncryptionType;
+    /**
+     * @deprecated
+     *
+     * <p>Optional. Set to <code>true</code> to use Amazon S3 server-side encryption with
+     *          your own KMS key (SSE-KMS), or <code>false</code> to use a key managed by
+     *             Amazon S3 (SSE-S3). To use dual-layer encryption (DSSE-KMS), set the
+     *             <code>EncryptionType</code> parameter instead.</p>
+     *          <note>
+     *             <p>We recommend using <code>EncryptionType</code> instead of <code>KMSEncrypted</code>
+     *             to set the file share encryption method. You do not need to provide values for both
+     *             parameters.</p>
+     *             <p>If values for both parameters exist in the same request, then the specified
+     *             encryption methods must not conflict. For example, if <code>EncryptionType</code> is
+     *                <code>SseS3</code>, then <code>KMSEncrypted</code> must be <code>false</code>. If
+     *                <code>EncryptionType</code> is <code>SseKms</code> or <code>DsseKms</code>, then
+     *                <code>KMSEncrypted</code> must be <code>true</code>.</p>
+     *          </note>
      *          <p>Valid Values: <code>true</code> | <code>false</code>
      *          </p>
      * @public
      */
     KMSEncrypted?: boolean;
     /**
-     * <p>The Amazon Resource Name (ARN) of a symmetric customer master key (CMK) used for Amazon S3 server-side encryption. Storage Gateway does not support asymmetric CMKs. This
-     *          value can only be set when <code>KMSEncrypted</code> is <code>true</code>. Optional.</p>
+     * <p>Optional. The Amazon Resource Name (ARN) of a symmetric customer master key (CMK) used
+     *          for Amazon S3 server-side encryption. Storage Gateway does not support asymmetric
+     *          CMKs. This value must be set if <code>KMSEncrypted</code> is <code>true</code>, or if
+     *             <code>EncryptionType</code> is <code>SseKms</code> or <code>DsseKms</code>.</p>
      * @public
      */
     KMSKey?: string;
@@ -1355,6 +1401,9 @@ export interface CreateNFSFileShareInput {
      *             <p>
      *                <code>SettlingTimeInSeconds</code> has no effect on the timing of the object
      *             uploading to Amazon S3, only the timing of the notification.</p>
+     *             <p>This setting is not meant to specify an exact time at which the notification will be
+     *             sent. In some cases, the gateway might require more than the specified delay time to
+     *             generate and send notifications.</p>
      *          </note>
      *          <p>The following example sets <code>NotificationPolicy</code> on with
      *             <code>SettlingTimeInSeconds</code> set to 60.</p>
@@ -1423,17 +1472,48 @@ export interface CreateSMBFileShareInput {
      */
     GatewayARN: string | undefined;
     /**
-     * <p>Set to <code>true</code> to use Amazon S3 server-side encryption with your own
-     *             KMS key, or <code>false</code> to use a key managed by Amazon S3.
-     *          Optional.</p>
+     * <p>A value that specifies the type of server-side encryption that the file share will use
+     *          for the data that it stores in Amazon S3.</p>
+     *          <note>
+     *             <p>We recommend using <code>EncryptionType</code> instead of <code>KMSEncrypted</code>
+     *             to set the file share encryption method. You do not need to provide values for both
+     *             parameters.</p>
+     *             <p>If values for both parameters exist in the same request, then the specified
+     *             encryption methods must not conflict. For example, if <code>EncryptionType</code> is
+     *                <code>SseS3</code>, then <code>KMSEncrypted</code> must be <code>false</code>. If
+     *                <code>EncryptionType</code> is <code>SseKms</code> or <code>DsseKms</code>, then
+     *                <code>KMSEncrypted</code> must be <code>true</code>.</p>
+     *          </note>
+     * @public
+     */
+    EncryptionType?: EncryptionType;
+    /**
+     * @deprecated
+     *
+     * <p>Optional. Set to <code>true</code> to use Amazon S3 server-side encryption with
+     *          your own KMS key (SSE-KMS), or <code>false</code> to use a key managed by
+     *             Amazon S3 (SSE-S3). To use dual-layer encryption (DSSE-KMS), set the
+     *             <code>EncryptionType</code> parameter instead.</p>
+     *          <note>
+     *             <p>We recommend using <code>EncryptionType</code> instead of <code>KMSEncrypted</code>
+     *             to set the file share encryption method. You do not need to provide values for both
+     *             parameters.</p>
+     *             <p>If values for both parameters exist in the same request, then the specified
+     *             encryption methods must not conflict. For example, if <code>EncryptionType</code> is
+     *                <code>SseS3</code>, then <code>KMSEncrypted</code> must be <code>false</code>. If
+     *                <code>EncryptionType</code> is <code>SseKms</code> or <code>DsseKms</code>, then
+     *                <code>KMSEncrypted</code> must be <code>true</code>.</p>
+     *          </note>
      *          <p>Valid Values: <code>true</code> | <code>false</code>
      *          </p>
      * @public
      */
     KMSEncrypted?: boolean;
     /**
-     * <p>The Amazon Resource Name (ARN) of a symmetric customer master key (CMK) used for Amazon S3 server-side encryption. Storage Gateway does not support asymmetric CMKs. This
-     *          value can only be set when <code>KMSEncrypted</code> is <code>true</code>. Optional.</p>
+     * <p>Optional. The Amazon Resource Name (ARN) of a symmetric customer master key (CMK) used
+     *          for Amazon S3 server-side encryption. Storage Gateway does not support asymmetric
+     *          CMKs. This value must be set if <code>KMSEncrypted</code> is <code>true</code>, or if
+     *             <code>EncryptionType</code> is <code>SseKms</code> or <code>DsseKms</code>.</p>
      * @public
      */
     KMSKey?: string;
@@ -1520,9 +1600,9 @@ export interface CreateSMBFileShareInput {
      * <p>Set this value to <code>true</code> to enable access control list (ACL) on the SMB file
      *          share. Set it to <code>false</code> to map file and directory permissions to the POSIX
      *          permissions.</p>
-     *          <p>For more information, see <a href="https://docs.aws.amazon.com/storagegateway/latest/userguide/smb-acl.html">Using Microsoft Windows ACLs to
-     *             control access to an SMB file share</a> in the <i>Storage Gateway User
-     *             Guide</i>.</p>
+     *          <p>For more information, see <a href="https://docs.aws.amazon.com/filegateway/latest/files3/smb-acl.html">Using Windows ACLs to limit SMB file share
+     *             access</a> in the <i>Amazon S3 File Gateway User
+     *          Guide</i>.</p>
      *          <p>Valid Values: <code>true</code> | <code>false</code>
      *          </p>
      * @public
@@ -1622,6 +1702,9 @@ export interface CreateSMBFileShareInput {
      *             <p>
      *                <code>SettlingTimeInSeconds</code> has no effect on the timing of the object
      *             uploading to Amazon S3, only the timing of the notification.</p>
+     *             <p>This setting is not meant to specify an exact time at which the notification will be
+     *             sent. In some cases, the gateway might require more than the specified delay time to
+     *             generate and send notifications.</p>
      *          </note>
      *          <p>The following example sets <code>NotificationPolicy</code> on with
      *             <code>SettlingTimeInSeconds</code> set to 60.</p>
@@ -3056,8 +3139,11 @@ export interface SoftwareUpdatePreferences {
      *          <p>
      *             <code>ALL_VERSIONS</code> - Enables regular gateway maintenance updates.</p>
      *          <p>
-     *             <code>EMERGENCY_VERSIONS_ONLY</code> - Disables regular gateway maintenance
-     *          updates.</p>
+     *             <code>EMERGENCY_VERSIONS_ONLY</code> - Disables regular gateway maintenance updates. The
+     *          gateway will still receive emergency version updates on rare occasions if necessary to
+     *          remedy highly critical security or durability issues. You will be notified before an
+     *          emergency version update is applied. These updates are applied during your gateway's
+     *          scheduled maintenance window.</p>
      * @public
      */
     AutomaticUpdatePolicy?: AutomaticUpdatePolicy;
@@ -3141,12 +3227,15 @@ export interface DescribeMaintenanceStartTimeOutput {
     Timezone?: string;
     /**
      * <p>A set of variables indicating the software update preferences for the gateway.</p>
-     *          <p>Includes <code>AutomaticUpdatePolicy</code> field with the following inputs:</p>
+     *          <p>Includes <code>AutomaticUpdatePolicy</code> parameter with the following inputs:</p>
      *          <p>
      *             <code>ALL_VERSIONS</code> - Enables regular gateway maintenance updates.</p>
      *          <p>
-     *             <code>EMERGENCY_VERSIONS_ONLY</code> - Disables regular gateway maintenance
-     *          updates.</p>
+     *             <code>EMERGENCY_VERSIONS_ONLY</code> - Disables regular gateway maintenance updates. The
+     *          gateway will still receive emergency version updates on rare occasions if necessary to
+     *          remedy highly critical security or durability issues. You will be notified before an
+     *          emergency version update is applied. These updates are applied during your gateway's
+     *          scheduled maintenance window.</p>
      * @public
      */
     SoftwareUpdatePreferences?: SoftwareUpdatePreferences;
@@ -3204,17 +3293,48 @@ export interface NFSFileShareInfo {
      */
     GatewayARN?: string;
     /**
-     * <p>Set to <code>true</code> to use Amazon S3 server-side encryption with your own
-     *             KMS key, or <code>false</code> to use a key managed by Amazon S3.
-     *          Optional.</p>
+     * <p>A value that specifies the type of server-side encryption that the file share will use
+     *          for the data that it stores in Amazon S3.</p>
+     *          <note>
+     *             <p>We recommend using <code>EncryptionType</code> instead of <code>KMSEncrypted</code>
+     *             to set the file share encryption method. You do not need to provide values for both
+     *             parameters.</p>
+     *             <p>If values for both parameters exist in the same request, then the specified
+     *             encryption methods must not conflict. For example, if <code>EncryptionType</code> is
+     *                <code>SseS3</code>, then <code>KMSEncrypted</code> must be <code>false</code>. If
+     *                <code>EncryptionType</code> is <code>SseKms</code> or <code>DsseKms</code>, then
+     *                <code>KMSEncrypted</code> must be <code>true</code>.</p>
+     *          </note>
+     * @public
+     */
+    EncryptionType?: EncryptionType;
+    /**
+     * @deprecated
+     *
+     * <p>Optional. Set to <code>true</code> to use Amazon S3 server-side encryption with
+     *          your own KMS key (SSE-KMS), or <code>false</code> to use a key managed by
+     *             Amazon S3 (SSE-S3). To use dual-layer encryption (DSSE-KMS), set the
+     *             <code>EncryptionType</code> parameter instead.</p>
+     *          <note>
+     *             <p>We recommend using <code>EncryptionType</code> instead of <code>KMSEncrypted</code>
+     *             to set the file share encryption method. You do not need to provide values for both
+     *             parameters.</p>
+     *             <p>If values for both parameters exist in the same request, then the specified
+     *             encryption methods must not conflict. For example, if <code>EncryptionType</code> is
+     *                <code>SseS3</code>, then <code>KMSEncrypted</code> must be <code>false</code>. If
+     *                <code>EncryptionType</code> is <code>SseKms</code> or <code>DsseKms</code>, then
+     *                <code>KMSEncrypted</code> must be <code>true</code>.</p>
+     *          </note>
      *          <p>Valid Values: <code>true</code> | <code>false</code>
      *          </p>
      * @public
      */
     KMSEncrypted?: boolean;
     /**
-     * <p>The Amazon Resource Name (ARN) of a symmetric customer master key (CMK) used for Amazon S3 server-side encryption. Storage Gateway does not support asymmetric CMKs. This
-     *          value can only be set when <code>KMSEncrypted</code> is <code>true</code>. Optional.</p>
+     * <p>Optional. The Amazon Resource Name (ARN) of a symmetric customer master key (CMK) used
+     *          for Amazon S3 server-side encryption. Storage Gateway does not support asymmetric
+     *          CMKs. This value must be set if <code>KMSEncrypted</code> is <code>true</code>, or if
+     *             <code>EncryptionType</code> is <code>SseKms</code> or <code>DsseKms</code>.</p>
      * @public
      */
     KMSKey?: string;
@@ -3360,6 +3480,9 @@ export interface NFSFileShareInfo {
      *             <p>
      *                <code>SettlingTimeInSeconds</code> has no effect on the timing of the object
      *             uploading to Amazon S3, only the timing of the notification.</p>
+     *             <p>This setting is not meant to specify an exact time at which the notification will be
+     *             sent. In some cases, the gateway might require more than the specified delay time to
+     *             generate and send notifications.</p>
      *          </note>
      *          <p>The following example sets <code>NotificationPolicy</code> on with
      *             <code>SettlingTimeInSeconds</code> set to 60.</p>
@@ -3455,17 +3578,48 @@ export interface SMBFileShareInfo {
      */
     GatewayARN?: string;
     /**
-     * <p>Set to <code>true</code> to use Amazon S3 server-side encryption with your own
-     *             KMS key, or <code>false</code> to use a key managed by Amazon S3.
-     *          Optional.</p>
+     * <p>A value that specifies the type of server-side encryption that the file share will use
+     *          for the data that it stores in Amazon S3.</p>
+     *          <note>
+     *             <p>We recommend using <code>EncryptionType</code> instead of <code>KMSEncrypted</code>
+     *             to set the file share encryption method. You do not need to provide values for both
+     *             parameters.</p>
+     *             <p>If values for both parameters exist in the same request, then the specified
+     *             encryption methods must not conflict. For example, if <code>EncryptionType</code> is
+     *                <code>SseS3</code>, then <code>KMSEncrypted</code> must be <code>false</code>. If
+     *                <code>EncryptionType</code> is <code>SseKms</code> or <code>DsseKms</code>, then
+     *                <code>KMSEncrypted</code> must be <code>true</code>.</p>
+     *          </note>
+     * @public
+     */
+    EncryptionType?: EncryptionType;
+    /**
+     * @deprecated
+     *
+     * <p>Optional. Set to <code>true</code> to use Amazon S3 server-side encryption with
+     *          your own KMS key (SSE-KMS), or <code>false</code> to use a key managed by
+     *             Amazon S3 (SSE-S3). To use dual-layer encryption (DSSE-KMS), set the
+     *             <code>EncryptionType</code> parameter instead.</p>
+     *          <note>
+     *             <p>We recommend using <code>EncryptionType</code> instead of <code>KMSEncrypted</code>
+     *             to set the file share encryption method. You do not need to provide values for both
+     *             parameters.</p>
+     *             <p>If values for both parameters exist in the same request, then the specified
+     *             encryption methods must not conflict. For example, if <code>EncryptionType</code> is
+     *                <code>SseS3</code>, then <code>KMSEncrypted</code> must be <code>false</code>. If
+     *                <code>EncryptionType</code> is <code>SseKms</code> or <code>DsseKms</code>, then
+     *                <code>KMSEncrypted</code> must be <code>true</code>.</p>
+     *          </note>
      *          <p>Valid Values: <code>true</code> | <code>false</code>
      *          </p>
      * @public
      */
     KMSEncrypted?: boolean;
     /**
-     * <p>The Amazon Resource Name (ARN) of a symmetric customer master key (CMK) used for Amazon S3 server-side encryption. Storage Gateway does not support asymmetric CMKs. This
-     *          value can only be set when <code>KMSEncrypted</code> is <code>true</code>. Optional.</p>
+     * <p>Optional. The Amazon Resource Name (ARN) of a symmetric customer master key (CMK) used
+     *          for Amazon S3 server-side encryption. Storage Gateway does not support asymmetric
+     *          CMKs. This value must be set if <code>KMSEncrypted</code> is <code>true</code>, or if
+     *             <code>EncryptionType</code> is <code>SseKms</code> or <code>DsseKms</code>.</p>
      * @public
      */
     KMSKey?: string;
@@ -3558,9 +3712,9 @@ export interface SMBFileShareInfo {
      * <p>If this value is set to <code>true</code>, it indicates that access control list (ACL)
      *          is enabled on the SMB file share. If it is set to <code>false</code>, it indicates that
      *          file and directory permissions are mapped to the POSIX permission.</p>
-     *          <p>For more information, see <a href="https://docs.aws.amazon.com/storagegateway/latest/userguide/smb-acl.html">Using Microsoft Windows ACLs to
-     *             control access to an SMB file share</a> in the <i>Storage Gateway User
-     *             Guide</i>.</p>
+     *          <p>For more information, see <a href="https://docs.aws.amazon.com/filegateway/latest/files3/smb-acl.html">Using Windows ACLs to limit SMB file share
+     *             access</a> in the <i>Amazon S3 File Gateway User
+     *          Guide</i>.</p>
      * @public
      */
     SMBACLEnabled?: boolean;
@@ -3649,6 +3803,9 @@ export interface SMBFileShareInfo {
      *             <p>
      *                <code>SettlingTimeInSeconds</code> has no effect on the timing of the object
      *             uploading to Amazon S3, only the timing of the notification.</p>
+     *             <p>This setting is not meant to specify an exact time at which the notification will be
+     *             sent. In some cases, the gateway might require more than the specified delay time to
+     *             generate and send notifications.</p>
      *          </note>
      *          <p>The following example sets <code>NotificationPolicy</code> on with
      *             <code>SettlingTimeInSeconds</code> set to 60.</p>
@@ -4015,8 +4172,10 @@ export interface StorediSCSIVolume {
      */
     VolumeUsedInBytes?: number;
     /**
-     * <p>The Amazon Resource Name (ARN) of a symmetric customer master key (CMK) used for Amazon S3 server-side encryption. Storage Gateway does not support asymmetric CMKs. This
-     *          value can only be set when <code>KMSEncrypted</code> is <code>true</code>. Optional.</p>
+     * <p>Optional. The Amazon Resource Name (ARN) of a symmetric customer master key (CMK) used
+     *          for Amazon S3 server-side encryption. Storage Gateway does not support asymmetric
+     *          CMKs. This value must be set if <code>KMSEncrypted</code> is <code>true</code>, or if
+     *             <code>EncryptionType</code> is <code>SseKms</code> or <code>DsseKms</code>.</p>
      * @public
      */
     KMSKey?: string;
@@ -4201,8 +4360,10 @@ export interface TapeArchive {
      */
     TapeUsedInBytes?: number;
     /**
-     * <p>The Amazon Resource Name (ARN) of a symmetric customer master key (CMK) used for Amazon S3 server-side encryption. Storage Gateway does not support asymmetric CMKs. This
-     *          value can only be set when <code>KMSEncrypted</code> is <code>true</code>. Optional.</p>
+     * <p>Optional. The Amazon Resource Name (ARN) of a symmetric customer master key (CMK) used
+     *          for Amazon S3 server-side encryption. Storage Gateway does not support asymmetric
+     *          CMKs. This value must be set if <code>KMSEncrypted</code> is <code>true</code>, or if
+     *             <code>EncryptionType</code> is <code>SseKms</code> or <code>DsseKms</code>.</p>
      * @public
      */
     KMSKey?: string;
@@ -4419,8 +4580,10 @@ export interface Tape {
      */
     TapeUsedInBytes?: number;
     /**
-     * <p>The Amazon Resource Name (ARN) of a symmetric customer master key (CMK) used for Amazon S3 server-side encryption. Storage Gateway does not support asymmetric CMKs. This
-     *          value can only be set when <code>KMSEncrypted</code> is <code>true</code>. Optional.</p>
+     * <p>Optional. The Amazon Resource Name (ARN) of a symmetric customer master key (CMK) used
+     *          for Amazon S3 server-side encryption. Storage Gateway does not support asymmetric
+     *          CMKs. This value must be set if <code>KMSEncrypted</code> is <code>true</code>, or if
+     *             <code>EncryptionType</code> is <code>SseKms</code> or <code>DsseKms</code>.</p>
      * @public
      */
     KMSKey?: string;
@@ -6423,8 +6586,11 @@ export interface UpdateMaintenanceStartTimeInput {
      *          <p>
      *             <code>ALL_VERSIONS</code> - Enables regular gateway maintenance updates.</p>
      *          <p>
-     *             <code>EMERGENCY_VERSIONS_ONLY</code> - Disables regular gateway maintenance
-     *          updates.</p>
+     *             <code>EMERGENCY_VERSIONS_ONLY</code> - Disables regular gateway maintenance updates. The
+     *          gateway will still receive emergency version updates on rare occasions if necessary to
+     *          remedy highly critical security or durability issues. You will be notified before an
+     *          emergency version update is applied. These updates are applied during your gateway's
+     *          scheduled maintenance window.</p>
      * @public
      */
     SoftwareUpdatePreferences?: SoftwareUpdatePreferences;
@@ -6453,17 +6619,48 @@ export interface UpdateNFSFileShareInput {
      */
     FileShareARN: string | undefined;
     /**
-     * <p>Set to <code>true</code> to use Amazon S3 server-side encryption with your own
-     *             KMS key, or <code>false</code> to use a key managed by Amazon S3.
-     *          Optional.</p>
+     * <p>A value that specifies the type of server-side encryption that the file share will use
+     *          for the data that it stores in Amazon S3.</p>
+     *          <note>
+     *             <p>We recommend using <code>EncryptionType</code> instead of <code>KMSEncrypted</code>
+     *             to set the file share encryption method. You do not need to provide values for both
+     *             parameters.</p>
+     *             <p>If values for both parameters exist in the same request, then the specified
+     *             encryption methods must not conflict. For example, if <code>EncryptionType</code> is
+     *                <code>SseS3</code>, then <code>KMSEncrypted</code> must be <code>false</code>. If
+     *                <code>EncryptionType</code> is <code>SseKms</code> or <code>DsseKms</code>, then
+     *                <code>KMSEncrypted</code> must be <code>true</code>.</p>
+     *          </note>
+     * @public
+     */
+    EncryptionType?: EncryptionType;
+    /**
+     * @deprecated
+     *
+     * <p>Optional. Set to <code>true</code> to use Amazon S3 server-side encryption with
+     *          your own KMS key (SSE-KMS), or <code>false</code> to use a key managed by
+     *             Amazon S3 (SSE-S3). To use dual-layer encryption (DSSE-KMS), set the
+     *             <code>EncryptionType</code> parameter instead.</p>
+     *          <note>
+     *             <p>We recommend using <code>EncryptionType</code> instead of <code>KMSEncrypted</code>
+     *             to set the file share encryption method. You do not need to provide values for both
+     *             parameters.</p>
+     *             <p>If values for both parameters exist in the same request, then the specified
+     *             encryption methods must not conflict. For example, if <code>EncryptionType</code> is
+     *                <code>SseS3</code>, then <code>KMSEncrypted</code> must be <code>false</code>. If
+     *                <code>EncryptionType</code> is <code>SseKms</code> or <code>DsseKms</code>, then
+     *                <code>KMSEncrypted</code> must be <code>true</code>.</p>
+     *          </note>
      *          <p>Valid Values: <code>true</code> | <code>false</code>
      *          </p>
      * @public
      */
     KMSEncrypted?: boolean;
     /**
-     * <p>The Amazon Resource Name (ARN) of a symmetric customer master key (CMK) used for Amazon S3 server-side encryption. Storage Gateway does not support asymmetric CMKs. This
-     *          value can only be set when <code>KMSEncrypted</code> is <code>true</code>. Optional.</p>
+     * <p>Optional. The Amazon Resource Name (ARN) of a symmetric customer master key (CMK) used
+     *          for Amazon S3 server-side encryption. Storage Gateway does not support asymmetric
+     *          CMKs. This value must be set if <code>KMSEncrypted</code> is <code>true</code>, or if
+     *             <code>EncryptionType</code> is <code>SseKms</code> or <code>DsseKms</code>.</p>
      * @public
      */
     KMSKey?: string;
@@ -6571,6 +6768,9 @@ export interface UpdateNFSFileShareInput {
      *             <p>
      *                <code>SettlingTimeInSeconds</code> has no effect on the timing of the object
      *             uploading to Amazon S3, only the timing of the notification.</p>
+     *             <p>This setting is not meant to specify an exact time at which the notification will be
+     *             sent. In some cases, the gateway might require more than the specified delay time to
+     *             generate and send notifications.</p>
      *          </note>
      *          <p>The following example sets <code>NotificationPolicy</code> on with
      *             <code>SettlingTimeInSeconds</code> set to 60.</p>
@@ -6612,17 +6812,48 @@ export interface UpdateSMBFileShareInput {
      */
     FileShareARN: string | undefined;
     /**
-     * <p>Set to <code>true</code> to use Amazon S3 server-side encryption with your own
-     *             KMS key, or <code>false</code> to use a key managed by Amazon S3.
-     *          Optional.</p>
+     * <p>A value that specifies the type of server-side encryption that the file share will use
+     *          for the data that it stores in Amazon S3.</p>
+     *          <note>
+     *             <p>We recommend using <code>EncryptionType</code> instead of <code>KMSEncrypted</code>
+     *             to set the file share encryption method. You do not need to provide values for both
+     *             parameters.</p>
+     *             <p>If values for both parameters exist in the same request, then the specified
+     *             encryption methods must not conflict. For example, if <code>EncryptionType</code> is
+     *                <code>SseS3</code>, then <code>KMSEncrypted</code> must be <code>false</code>. If
+     *                <code>EncryptionType</code> is <code>SseKms</code> or <code>DsseKms</code>, then
+     *                <code>KMSEncrypted</code> must be <code>true</code>.</p>
+     *          </note>
+     * @public
+     */
+    EncryptionType?: EncryptionType;
+    /**
+     * @deprecated
+     *
+     * <p>Optional. Set to <code>true</code> to use Amazon S3 server-side encryption with
+     *          your own KMS key (SSE-KMS), or <code>false</code> to use a key managed by
+     *             Amazon S3 (SSE-S3). To use dual-layer encryption (DSSE-KMS), set the
+     *             <code>EncryptionType</code> parameter instead.</p>
+     *          <note>
+     *             <p>We recommend using <code>EncryptionType</code> instead of <code>KMSEncrypted</code>
+     *             to set the file share encryption method. You do not need to provide values for both
+     *             parameters.</p>
+     *             <p>If values for both parameters exist in the same request, then the specified
+     *             encryption methods must not conflict. For example, if <code>EncryptionType</code> is
+     *                <code>SseS3</code>, then <code>KMSEncrypted</code> must be <code>false</code>. If
+     *                <code>EncryptionType</code> is <code>SseKms</code> or <code>DsseKms</code>, then
+     *                <code>KMSEncrypted</code> must be <code>true</code>.</p>
+     *          </note>
      *          <p>Valid Values: <code>true</code> | <code>false</code>
      *          </p>
      * @public
      */
     KMSEncrypted?: boolean;
     /**
-     * <p>The Amazon Resource Name (ARN) of a symmetric customer master key (CMK) used for Amazon S3 server-side encryption. Storage Gateway does not support asymmetric CMKs. This
-     *          value can only be set when <code>KMSEncrypted</code> is <code>true</code>. Optional.</p>
+     * <p>Optional. The Amazon Resource Name (ARN) of a symmetric customer master key (CMK) used
+     *          for Amazon S3 server-side encryption. Storage Gateway does not support asymmetric
+     *          CMKs. This value must be set if <code>KMSEncrypted</code> is <code>true</code>, or if
+     *             <code>EncryptionType</code> is <code>SseKms</code> or <code>DsseKms</code>.</p>
      * @public
      */
     KMSKey?: string;
@@ -6678,9 +6909,9 @@ export interface UpdateSMBFileShareInput {
      * <p>Set this value to <code>true</code> to enable access control list (ACL) on the SMB file
      *          share. Set it to <code>false</code> to map file and directory permissions to the POSIX
      *          permissions.</p>
-     *          <p>For more information, see <a href="https://docs.aws.amazon.com/storagegateway/latest/userguide/smb-acl.html">Using Microsoft Windows ACLs to
-     *             control access to an SMB file share</a> in the <i>Storage Gateway User
-     *             Guide</i>.</p>
+     *          <p>For more information, see <a href="https://docs.aws.amazon.com/filegateway/latest/files3/smb-acl.html">Using Windows ACLs to limit SMB file share
+     *             access</a> in the <i>Amazon S3 File Gateway User
+     *          Guide</i>.</p>
      *          <p>Valid Values: <code>true</code> | <code>false</code>
      *          </p>
      * @public
@@ -6757,6 +6988,9 @@ export interface UpdateSMBFileShareInput {
      *             <p>
      *                <code>SettlingTimeInSeconds</code> has no effect on the timing of the object
      *             uploading to Amazon S3, only the timing of the notification.</p>
+     *             <p>This setting is not meant to specify an exact time at which the notification will be
+     *             sent. In some cases, the gateway might require more than the specified delay time to
+     *             generate and send notifications.</p>
      *          </note>
      *          <p>The following example sets <code>NotificationPolicy</code> on with
      *             <code>SettlingTimeInSeconds</code> set to 60.</p>

package/dist-types/ts3.4/models/models_0.d.ts

@@ -277,6 +277,13 @@ export interface CreateCachediSCSIVolumeOutput {
   VolumeARN?: string;
   TargetARN?: string;
 }
+export declare const EncryptionType: {
+  readonly DsseKms: "DsseKms";
+  readonly SseKms: "SseKms";
+  readonly SseS3: "SseS3";
+};
+export type EncryptionType =
+  (typeof EncryptionType)[keyof typeof EncryptionType];
 export interface NFSFileShareDefaults {
   FileMode?: string;
   DirectoryMode?: string;
@@ -297,6 +304,7 @@ export interface CreateNFSFileShareInput {
   ClientToken: string | undefined;
   NFSFileShareDefaults?: NFSFileShareDefaults;
   GatewayARN: string | undefined;
+  EncryptionType?: EncryptionType;
   KMSEncrypted?: boolean;
   KMSKey?: string;
   Role: string | undefined;
@@ -322,6 +330,7 @@ export interface CreateNFSFileShareOutput {
 export interface CreateSMBFileShareInput {
   ClientToken: string | undefined;
   GatewayARN: string | undefined;
+  EncryptionType?: EncryptionType;
   KMSEncrypted?: boolean;
   KMSKey?: string;
   Role: string | undefined;
@@ -651,6 +660,7 @@ export interface NFSFileShareInfo {
   FileShareId?: string;
   FileShareStatus?: string;
   GatewayARN?: string;
+  EncryptionType?: EncryptionType;
   KMSEncrypted?: boolean;
   KMSKey?: string;
   Path?: string;
@@ -682,6 +692,7 @@ export interface SMBFileShareInfo {
   FileShareId?: string;
   FileShareStatus?: string;
   GatewayARN?: string;
+  EncryptionType?: EncryptionType;
   KMSEncrypted?: boolean;
   KMSKey?: string;
   Path?: string;
@@ -1226,6 +1237,7 @@ export interface UpdateMaintenanceStartTimeOutput {
 }
 export interface UpdateNFSFileShareInput {
   FileShareARN: string | undefined;
+  EncryptionType?: EncryptionType;
   KMSEncrypted?: boolean;
   KMSKey?: string;
   NFSFileShareDefaults?: NFSFileShareDefaults;
@@ -1246,6 +1258,7 @@ export interface UpdateNFSFileShareOutput {
 }
 export interface UpdateSMBFileShareInput {
   FileShareARN: string | undefined;
+  EncryptionType?: EncryptionType;
   KMSEncrypted?: boolean;
   KMSKey?: string;
   DefaultStorageClass?: string;

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@aws-sdk/client-storage-gateway",
   "description": "AWS SDK for JavaScript Storage Gateway Client for Node.js, Browser and React Native",
-  "version": "3.649.0",
+  "version": "3.651.0",
   "scripts": {
     "build": "concurrently 'yarn:build:cjs' 'yarn:build:es' 'yarn:build:types'",
     "build:cjs": "node ../../scripts/compilation/inline client-storage-gateway",
@@ -20,10 +20,10 @@
   "dependencies": {
     "@aws-crypto/sha256-browser": "5.2.0",
     "@aws-crypto/sha256-js": "5.2.0",
-    "@aws-sdk/client-sso-oidc": "3.649.0",
-    "@aws-sdk/client-sts": "3.649.0",
+    "@aws-sdk/client-sso-oidc": "3.650.0",
+    "@aws-sdk/client-sts": "3.650.0",
     "@aws-sdk/core": "3.649.0",
-    "@aws-sdk/credential-provider-node": "3.649.0",
+    "@aws-sdk/credential-provider-node": "3.650.0",
     "@aws-sdk/middleware-host-header": "3.649.0",
     "@aws-sdk/middleware-logger": "3.649.0",
     "@aws-sdk/middleware-recursion-detection": "3.649.0",