@pgarbe/cdk-ecr-sync 0.5.18 → 0.5.22

package/node_modules/aws-sdk/clients/backup.d.ts

@@ -20,11 +20,11 @@ declare class Backup extends Service {
    */
   createBackupPlan(callback?: (err: AWSError, data: Backup.Types.CreateBackupPlanOutput) => void): Request<Backup.Types.CreateBackupPlanOutput, AWSError>;
   /**
-   * Creates a JSON document that specifies a set of resources to assign to a backup plan. Resources can be included by specifying patterns for a ListOfTags and selected Resources.  For example, consider the following patterns:    Resources: "arn:aws:ec2:region:account-id:volume/volume-id"     ConditionKey:"department"   ConditionValue:"finance"   ConditionType:"StringEquals"     ConditionKey:"importance"   ConditionValue:"critical"   ConditionType:"StringEquals"    Using these patterns would back up all Amazon Elastic Block Store (Amazon EBS) volumes that are tagged as "department=finance", "importance=critical", in addition to an EBS volume with the specified volume ID. Resources and conditions are additive in that all resources that match the pattern are selected. This shouldn't be confused with a logical AND, where all conditions must match. The matching patterns are logically put together using the OR operator. In other words, all patterns that match are selected for backup.
+   * Creates a JSON document that specifies a set of resources to assign to a backup plan. For examples, see Assigning resources programmatically. 
    */
   createBackupSelection(params: Backup.Types.CreateBackupSelectionInput, callback?: (err: AWSError, data: Backup.Types.CreateBackupSelectionOutput) => void): Request<Backup.Types.CreateBackupSelectionOutput, AWSError>;
   /**
-   * Creates a JSON document that specifies a set of resources to assign to a backup plan. Resources can be included by specifying patterns for a ListOfTags and selected Resources.  For example, consider the following patterns:    Resources: "arn:aws:ec2:region:account-id:volume/volume-id"     ConditionKey:"department"   ConditionValue:"finance"   ConditionType:"StringEquals"     ConditionKey:"importance"   ConditionValue:"critical"   ConditionType:"StringEquals"    Using these patterns would back up all Amazon Elastic Block Store (Amazon EBS) volumes that are tagged as "department=finance", "importance=critical", in addition to an EBS volume with the specified volume ID. Resources and conditions are additive in that all resources that match the pattern are selected. This shouldn't be confused with a logical AND, where all conditions must match. The matching patterns are logically put together using the OR operator. In other words, all patterns that match are selected for backup.
+   * Creates a JSON document that specifies a set of resources to assign to a backup plan. For examples, see Assigning resources programmatically. 
    */
   createBackupSelection(callback?: (err: AWSError, data: Backup.Types.CreateBackupSelectionOutput) => void): Request<Backup.Types.CreateBackupSelectionOutput, AWSError>;
   /**
@@ -36,11 +36,11 @@ declare class Backup extends Service {
    */
   createBackupVault(callback?: (err: AWSError, data: Backup.Types.CreateBackupVaultOutput) => void): Request<Backup.Types.CreateBackupVaultOutput, AWSError>;
   /**
-   * Creates a framework with one or more controls. A framework is a collection of controls that you can use to evaluate your backup practices. By using pre-built customizable controls to define your policies, you can evaluate whether your backup practices comply with your policies. To get insights into the compliance status of your frameworks, you can set up automatic daily reports.
+   * Creates a framework with one or more controls. A framework is a collection of controls that you can use to evaluate your backup practices. By using pre-built customizable controls to define your policies, you can evaluate whether your backup practices comply with your policies and which resources are not yet in compliance.
    */
   createFramework(params: Backup.Types.CreateFrameworkInput, callback?: (err: AWSError, data: Backup.Types.CreateFrameworkOutput) => void): Request<Backup.Types.CreateFrameworkOutput, AWSError>;
   /**
-   * Creates a framework with one or more controls. A framework is a collection of controls that you can use to evaluate your backup practices. By using pre-built customizable controls to define your policies, you can evaluate whether your backup practices comply with your policies. To get insights into the compliance status of your frameworks, you can set up automatic daily reports.
+   * Creates a framework with one or more controls. A framework is a collection of controls that you can use to evaluate your backup practices. By using pre-built customizable controls to define your policies, you can evaluate whether your backup practices comply with your policies and which resources are not yet in compliance.
    */
   createFramework(callback?: (err: AWSError, data: Backup.Types.CreateFrameworkOutput) => void): Request<Backup.Types.CreateFrameworkOutput, AWSError>;
   /**
@@ -83,6 +83,14 @@ declare class Backup extends Service {
    * Deletes the policy document that manages permissions on a backup vault.
    */
   deleteBackupVaultAccessPolicy(callback?: (err: AWSError, data: {}) => void): Request<{}, AWSError>;
+  /**
+   * Deletes Backup Vault Lock from a backup vault specified by a backup vault name. If the Vault Lock configuration is immutable, then you cannot delete Vault Lock using API operations, and you will receive an InvalidRequestException if you attempt to do so. For more information, see Vault Lock in the Backup Developer Guide.
+   */
+  deleteBackupVaultLockConfiguration(params: Backup.Types.DeleteBackupVaultLockConfigurationInput, callback?: (err: AWSError, data: {}) => void): Request<{}, AWSError>;
+  /**
+   * Deletes Backup Vault Lock from a backup vault specified by a backup vault name. If the Vault Lock configuration is immutable, then you cannot delete Vault Lock using API operations, and you will receive an InvalidRequestException if you attempt to do so. For more information, see Vault Lock in the Backup Developer Guide.
+   */
+  deleteBackupVaultLockConfiguration(callback?: (err: AWSError, data: {}) => void): Request<{}, AWSError>;
   /**
    * Deletes event notifications for the specified backup vault.
    */
@@ -407,6 +415,14 @@ declare class Backup extends Service {
    * Sets a resource-based policy that is used to manage access permissions on the target backup vault. Requires a backup vault name and an access policy document in JSON format.
    */
   putBackupVaultAccessPolicy(callback?: (err: AWSError, data: {}) => void): Request<{}, AWSError>;
+  /**
+   * Applies Backup Vault Lock to a backup vault, preventing attempts to delete any recovery point stored in or created in a backup vault. Vault Lock also prevents attempts to update the lifecycle policy that controls the retention period of any recovery point currently stored in a backup vault. If specified, Vault Lock enforces a minimum and maximum retention period for future backup and copy jobs that target a backup vault.  Backup Vault Lock has yet to receive a third-party assessment for SEC 17a-4(f) and CFTC. 
+   */
+  putBackupVaultLockConfiguration(params: Backup.Types.PutBackupVaultLockConfigurationInput, callback?: (err: AWSError, data: {}) => void): Request<{}, AWSError>;
+  /**
+   * Applies Backup Vault Lock to a backup vault, preventing attempts to delete any recovery point stored in or created in a backup vault. Vault Lock also prevents attempts to update the lifecycle policy that controls the retention period of any recovery point currently stored in a backup vault. If specified, Vault Lock enforces a minimum and maximum retention period for future backup and copy jobs that target a backup vault.  Backup Vault Lock has yet to receive a third-party assessment for SEC 17a-4(f) and CFTC. 
+   */
+  putBackupVaultLockConfiguration(callback?: (err: AWSError, data: {}) => void): Request<{}, AWSError>;
   /**
    * Turns on notifications on a backup vault for the specified topic and events.
    */
@@ -623,7 +639,7 @@ declare namespace Backup {
   export type BackupOptions = {[key: string]: BackupOptionValue};
   export interface BackupPlan {
     /**
-     * The display name of a backup plan.
+     * The display name of a backup plan. Must contain 1 to 50 alphanumeric or '-_.' characters.
      */
     BackupPlanName: BackupPlanName;
     /**
@@ -637,7 +653,7 @@ declare namespace Backup {
   }
   export interface BackupPlanInput {
     /**
-     * The optional display name of a backup plan.
+     * The display name of a backup plan. Must contain 1 to 50 alphanumeric or '-_.' characters.
      */
     BackupPlanName: BackupPlanName;
     /**
@@ -689,7 +705,7 @@ declare namespace Backup {
      */
     BackupPlanName?: BackupPlanName;
     /**
-     * A unique string that identifies the request and allows failed requests to be retried without the risk of running the operation twice.
+     * A unique string that identifies the request and allows failed requests to be retried without the risk of running the operation twice. This parameter is optional. If used, this parameter must contain 1 to 50 alphanumeric or '-_.' characters.
      */
     CreatorRequestId?: string;
     /**
@@ -703,7 +719,7 @@ declare namespace Backup {
   }
   export interface BackupRule {
     /**
-     * An optional display name for a backup rule.
+     * A display name for a backup rule. Must contain 1 to 50 alphanumeric or '-_.' characters.
      */
     RuleName: BackupRuleName;
     /**
@@ -711,7 +727,7 @@ declare namespace Backup {
      */
     TargetBackupVaultName: BackupVaultName;
     /**
-     * A cron expression in UTC specifying when Backup initiates a backup job. For more information about cron expressions, see Schedule Expressions for Rules in the Amazon CloudWatch Events User Guide.. Prior to specifying a value for this parameter, we recommend testing your cron expression using one of the many available cron generator and testing tools.
+     * A cron expression in UTC specifying when Backup initiates a backup job. For more information about Amazon Web Services cron expressions, see Schedule Expressions for Rules in the Amazon CloudWatch Events User Guide.. Two examples of Amazon Web Services cron expressions are  15 * ? * * * (take a backup every hour at 15 minutes past the hour) and 0 12 * * ? * (take a backup every day at 12 noon UTC). For a table of examples, click the preceding link and scroll down the page.
      */
     ScheduleExpression?: CronExpression;
     /**
@@ -745,7 +761,7 @@ declare namespace Backup {
   }
   export interface BackupRuleInput {
     /**
-     * An optional display name for a backup rule.
+     * A display name for a backup rule. Must contain 1 to 50 alphanumeric or '-_.' characters.
      */
     RuleName: BackupRuleName;
     /**
@@ -786,7 +802,7 @@ declare namespace Backup {
   export type BackupRulesInput = BackupRuleInput[];
   export interface BackupSelection {
     /**
-     * The display name of a resource selection document.
+     * The display name of a resource selection document. Must contain 1 to 50 alphanumeric or '-_.' characters.
      */
     SelectionName: BackupSelectionName;
     /**
@@ -794,13 +810,21 @@ declare namespace Backup {
      */
     IamRoleArn: IAMRoleArn;
     /**
-     * An array of strings that contain Amazon Resource Names (ARNs) of resources to assign to a backup plan.
+     * A list of Amazon Resource Names (ARNs) to assign to a backup plan. The maximum number of ARNs is 500 without wildcards, or 30 ARNs with wildcards. If you need to assign many resources to a backup plan, consider a different resource selection strategy, such as assigning all resources of a resource type or refining your resource selection using tags.
      */
     Resources?: ResourceArns;
     /**
-     * An array of conditions used to specify a set of resources to assign to a backup plan; for example, "StringEquals": {"ec2:ResourceTag/Department": "accounting". Assigns the backup plan to every resource with at least one matching tag.
+     * A list of conditions that you define to assign resources to your backup plans using tags. For example, "StringEquals": {"Department": "accounting". Condition operators are case sensitive.  ListOfTags differs from Conditions as follows:   When you specify more than one condition, you assign all resources that match AT LEAST ONE condition (using OR logic).    ListOfTags only supports StringEquals. Conditions supports StringEquals, StringLike, StringNotEquals, and StringNotLike.   
      */
     ListOfTags?: ListOfTags;
+    /**
+     * A list of Amazon Resource Names (ARNs) to exclude from a backup plan. The maximum number of ARNs is 500 without wildcards, or 30 ARNs with wildcards. If you need to exclude many resources from a backup plan, consider a different resource selection strategy, such as assigning only one or a few resource types or refining your resource selection using tags.
+     */
+    NotResources?: ResourceArns;
+    /**
+     * A list of conditions that you define to assign resources to your backup plans using tags. For example, "StringEquals": {"Department": "accounting". Condition operators are case sensitive.  Conditions differs from ListOfTags as follows:   When you specify more than one condition, you only assign the resources that match ALL conditions (using AND logic).    Conditions supports StringEquals, StringLike, StringNotEquals, and StringNotLike. ListOfTags only supports StringEquals.  
+     */
+    Conditions?: Conditions;
   }
   export type BackupSelectionName = string;
   export type BackupSelectionsList = BackupSelectionsListMember[];
@@ -822,7 +846,7 @@ declare namespace Backup {
      */
     CreationDate?: timestamp;
     /**
-     * A unique string that identifies the request and allows failed requests to be retried without the risk of running the operation twice.
+     * A unique string that identifies the request and allows failed requests to be retried without the risk of running the operation twice. This parameter is optional. If used, this parameter must contain 1 to 50 alphanumeric or '-_.' characters.
      */
     CreatorRequestId?: string;
     /**
@@ -851,13 +875,29 @@ declare namespace Backup {
      */
     EncryptionKeyArn?: ARN;
     /**
-     * A unique string that identifies the request and allows failed requests to be retried without the risk of running the operation twice.
+     * A unique string that identifies the request and allows failed requests to be retried without the risk of running the operation twice. This parameter is optional. If used, this parameter must contain 1 to 50 alphanumeric or '-_.' characters.
      */
     CreatorRequestId?: string;
     /**
      * The number of recovery points that are stored in a backup vault.
      */
     NumberOfRecoveryPoints?: long;
+    /**
+     * A Boolean value that indicates whether Backup Vault Lock applies to the selected backup vault. If true, Vault Lock prevents delete and update operations on the recovery points in the selected vault.
+     */
+    Locked?: Boolean;
+    /**
+     * The Backup Vault Lock setting that specifies the minimum retention period that the vault retains its recovery points. If this parameter is not specified, Vault Lock does not enforce a minimum retention period. If specified, any backup or copy job to the vault must have a lifecycle policy with a retention period equal to or longer than the minimum retention period. If the job's retention period is shorter than that minimum retention period, then the vault fails the backup or copy job, and you should either modify your lifecycle settings or use a different vault. Recovery points already stored in the vault prior to Vault Lock are not affected.
+     */
+    MinRetentionDays?: Long;
+    /**
+     * The Backup Vault Lock setting that specifies the maximum retention period that the vault retains its recovery points. If this parameter is not specified, Vault Lock does not enforce a maximum retention period on the recovery points in the vault (allowing indefinite storage). If specified, any backup or copy job to the vault must have a lifecycle policy with a retention period equal to or shorter than the maximum retention period. If the job's retention period is longer than that maximum retention period, then the vault fails the backup or copy job, and you should either modify your lifecycle settings or use a different vault. Recovery points already stored in the vault prior to Vault Lock are not affected.
+     */
+    MaxRetentionDays?: Long;
+    /**
+     * The date and time when Backup Vault Lock configuration becomes immutable, meaning it cannot be changed or deleted. If you applied Vault Lock to your vault without specifying a lock date, you can change your Vault Lock settings, or delete Vault Lock from the vault entirely, at any time. This value is in Unix format, Coordinated Universal Time (UTC), and accurate to milliseconds. For example, the value 1516925490.087 represents Friday, January 26, 2018 12:11:30.087 AM.
+     */
+    LockDate?: timestamp;
   }
   export type BackupVaultName = string;
   export type Boolean = boolean;
@@ -874,21 +914,50 @@ declare namespace Backup {
   export type ComplianceResourceIdList = string[];
   export interface Condition {
     /**
-     * An operation, such as StringEquals, that is applied to a key-value pair used to filter resources in a selection.
+     * An operation applied to a key-value pair used to assign resources to your backup plan. Condition only supports StringEquals. For more flexible assignment options, incluidng StringLike and the ability to exclude resources from your backup plan, use Conditions (with an "s" on the end) for your  BackupSelection .
      */
     ConditionType: ConditionType;
     /**
-     * The key in a key-value pair. For example, in "ec2:ResourceTag/Department": "accounting", "ec2:ResourceTag/Department" is the key.
+     * The key in a key-value pair. For example, in the tag Department: Accounting, Department is the key.
      */
     ConditionKey: ConditionKey;
     /**
-     * The value in a key-value pair. For example, in "ec2:ResourceTag/Department": "accounting", "accounting" is the value.
+     * The value in a key-value pair. For example, in the tag Department: Accounting, Accounting is the value.
      */
     ConditionValue: ConditionValue;
   }
   export type ConditionKey = string;
+  export interface ConditionParameter {
+    /**
+     * The key in a key-value pair. For example, in the tag Department: Accounting, Department is the key.
+     */
+    ConditionKey?: ConditionKey;
+    /**
+     * The value in a key-value pair. For example, in the tag Department: Accounting, Accounting is the value.
+     */
+    ConditionValue?: ConditionValue;
+  }
+  export type ConditionParameters = ConditionParameter[];
   export type ConditionType = "STRINGEQUALS"|string;
   export type ConditionValue = string;
+  export interface Conditions {
+    /**
+     * Filters the values of your tagged resources for only those resources that you tagged with the same value. Also called "exact matching."
+     */
+    StringEquals?: ConditionParameters;
+    /**
+     * Filters the values of your tagged resources for only those resources that you tagged that do not have the same value. Also called "negated matching."
+     */
+    StringNotEquals?: ConditionParameters;
+    /**
+     * Filters the values of your tagged resources for matching tag values with the use of a wildcard character (*) anywhere in the string. For example, "prod*" or "*rod*" matches the tag value "production".
+     */
+    StringLike?: ConditionParameters;
+    /**
+     * Filters the values of your tagged resources for non-matching tag values with the use of a wildcard character (*) anywhere in the string.
+     */
+    StringNotLike?: ConditionParameters;
+  }
   export interface ControlInputParameter {
     /**
      * The name of a parameter, for example, BackupPlanFrequency.
@@ -903,7 +972,7 @@ declare namespace Backup {
   export type ControlName = string;
   export interface ControlScope {
     /**
-     * Describes whether the control scope includes a specific resource identified by its unique Amazon Resource Name (ARN).
+     * The ID of the only Amazon Web Services resource that you want your control scope to contain.
      */
     ComplianceResourceIds?: ComplianceResourceIdList;
     /**
@@ -911,7 +980,7 @@ declare namespace Backup {
      */
     ComplianceResourceTypes?: ResourceTypeList;
     /**
-     * Describes whether the control scope includes resources with one or more tags. Each tag is a key-value pair.
+     * The tag key-value pair applied to those Amazon Web Services resources that you want to trigger an evaluation for a rule. A maximum of one key-value pair can be provided. The tag value is optional, but it cannot be an empty string. The structure to assign a tag is: [{"Key":"string","Value":"string"}].
      */
     Tags?: stringMap;
   }
@@ -994,7 +1063,7 @@ declare namespace Backup {
      */
     BackupPlanTags?: Tags;
     /**
-     * Identifies the request and allows failed requests to be retried without the risk of running the operation twice. If the request includes a CreatorRequestId that matches an existing backup plan, that plan is returned. This parameter is optional.
+     * Identifies the request and allows failed requests to be retried without the risk of running the operation twice. If the request includes a CreatorRequestId that matches an existing backup plan, that plan is returned. This parameter is optional. If used, this parameter must contain 1 to 50 alphanumeric or '-_.' characters.
      */
     CreatorRequestId?: string;
   }
@@ -1030,7 +1099,7 @@ declare namespace Backup {
      */
     BackupSelection: BackupSelection;
     /**
-     * A unique string that identifies the request and allows failed requests to be retried without the risk of running the operation twice.
+     * A unique string that identifies the request and allows failed requests to be retried without the risk of running the operation twice. This parameter is optional. If used, this parameter must contain 1 to 50 alphanumeric or '-_.' characters.
      */
     CreatorRequestId?: string;
   }
@@ -1062,7 +1131,7 @@ declare namespace Backup {
      */
     EncryptionKeyArn?: ARN;
     /**
-     * A unique string that identifies the request and allows failed requests to be retried without the risk of running the operation twice.
+     * A unique string that identifies the request and allows failed requests to be retried without the risk of running the operation twice. This parameter is optional. If used, this parameter must contain 1 to 50 alphanumeric or '-_.' characters.
      */
     CreatorRequestId?: string;
   }
@@ -1126,11 +1195,11 @@ declare namespace Backup {
      */
     ReportDeliveryChannel: ReportDeliveryChannel;
     /**
-     * Identifies the report template for the report. Reports are built using a report template. The report templates are:  BACKUP_JOB_REPORT | COPY_JOB_REPORT | RESTORE_JOB_REPORT 
+     * Identifies the report template for the report. Reports are built using a report template. The report templates are:  RESOURCE_COMPLIANCE_REPORT | CONTROL_COMPLIANCE_REPORT | BACKUP_JOB_REPORT | COPY_JOB_REPORT | RESTORE_JOB_REPORT  If the report template is RESOURCE_COMPLIANCE_REPORT or CONTROL_COMPLIANCE_REPORT, this API resource also describes the report coverage by Amazon Web Services Regions and frameworks.
      */
     ReportSetting: ReportSetting;
     /**
-     * Metadata that you can assign to help organize the frameworks that you create. Each tag is a key-value pair.
+     * Metadata that you can assign to help organize the report plans that you create. Each tag is a key-value pair.
      */
     ReportPlanTags?: stringMap;
     /**
@@ -1147,6 +1216,10 @@ declare namespace Backup {
      * An Amazon Resource Name (ARN) that uniquely identifies a resource. The format of the ARN depends on the resource type.
      */
     ReportPlanArn?: ARN;
+    /**
+     * The date and time a backup vault is created, in Unix format and Coordinated Universal Time (UTC). The value of CreationTime is accurate to milliseconds. For example, the value 1516925490.087 represents Friday, January 26, 2018 12:11:30.087 AM.
+     */
+    CreationTime?: timestamp;
   }
   export type CronExpression = string;
   export interface DeleteBackupPlanInput {
@@ -1195,6 +1268,12 @@ declare namespace Backup {
      */
     BackupVaultName: string;
   }
+  export interface DeleteBackupVaultLockConfigurationInput {
+    /**
+     * The name of the backup vault from which to delete Backup Vault Lock.
+     */
+    BackupVaultName: BackupVaultName;
+  }
   export interface DeleteBackupVaultNotificationsInput {
     /**
      * The name of a logical container where backups are stored. Backup vaults are identified by names that are unique to the account used to create them and the Region where they are created. They consist of lowercase letters, numbers, and hyphens.
@@ -1342,6 +1421,22 @@ declare namespace Backup {
      * The number of recovery points that are stored in a backup vault.
      */
     NumberOfRecoveryPoints?: long;
+    /**
+     * A Boolean that indicates whether Backup Vault Lock is currently protecting the backup vault. True means that Vault Lock causes delete or update operations on the recovery points stored in the vault to fail.
+     */
+    Locked?: Boolean;
+    /**
+     * The Backup Vault Lock setting that specifies the minimum retention period that the vault retains its recovery points. If this parameter is not specified, Vault Lock does not enforce a minimum retention period. If specified, any backup or copy job to the vault must have a lifecycle policy with a retention period equal to or longer than the minimum retention period. If the job's retention period is shorter than that minimum retention period, then the vault fails the backup or copy job, and you should either modify your lifecycle settings or use a different vault. Recovery points already stored in the vault prior to Vault Lock are not affected.
+     */
+    MinRetentionDays?: Long;
+    /**
+     * The Backup Vault Lock setting that specifies the maximum retention period that the vault retains its recovery points. If this parameter is not specified, Vault Lock does not enforce a maximum retention period on the recovery points in the vault (allowing indefinite storage). If specified, any backup or copy job to the vault must have a lifecycle policy with a retention period equal to or shorter than the maximum retention period. If the job's retention period is longer than that maximum retention period, then the vault fails the backup or copy job, and you should either modify your lifecycle settings or use a different vault. Recovery points already stored in the vault prior to Vault Lock are not affected.
+     */
+    MaxRetentionDays?: Long;
+    /**
+     * The date and time when Backup Vault Lock configuration cannot be changed or deleted. If you applied Vault Lock to your vault without specifying a lock date, you can change any of your Vault Lock settings, or delete Vault Lock from the vault entirely, at any time. This value is in Unix format, Coordinated Universal Time (UTC), and accurate to milliseconds. For example, the value 1516925490.087 represents Friday, January 26, 2018 12:11:30.087 AM.
+     */
+    LockDate?: timestamp;
   }
   export interface DescribeCopyJobInput {
     /**
@@ -1522,6 +1617,10 @@ declare namespace Backup {
      * Returns a list of all services along with the opt-in preferences in the Region.
      */
     ResourceTypeOptInPreference?: ResourceTypeOptInPreference;
+    /**
+     * Returns whether a DynamoDB recovery point was taken using  Backup's advanced DynamoDB backup features. 
+     */
+    ResourceTypeManagementPreference?: ResourceTypeManagementPreference;
   }
   export interface DescribeReportJobInput {
     /**
@@ -1848,7 +1947,7 @@ declare namespace Backup {
   }
   export interface GetSupportedResourceTypesOutput {
     /**
-     * Contains a string with the supported Amazon Web Services resource types:    DynamoDB for Amazon DynamoDB    EBS for Amazon Elastic Block Store    EC2 for Amazon Elastic Compute Cloud    EFS for Amazon Elastic File System    RDS for Amazon Relational Database Service    Aurora for Amazon Aurora    Storage Gateway for Storage Gateway  
+     * Contains a string with the supported Amazon Web Services resource types:    Aurora for Amazon Aurora    DynamoDB for Amazon DynamoDB    EBS for Amazon Elastic Block Store    EC2 for Amazon Elastic Compute Cloud    EFS for Amazon Elastic File System    FSX for Amazon FSx    RDS for Amazon Relational Database Service    Storage Gateway for Storage Gateway  
      */
     ResourceTypes?: ResourceTypes;
   }
@@ -2334,6 +2433,24 @@ declare namespace Backup {
      */
     Policy?: IAMPolicy;
   }
+  export interface PutBackupVaultLockConfigurationInput {
+    /**
+     * The Backup Vault Lock configuration that specifies the name of the backup vault it protects.
+     */
+    BackupVaultName: BackupVaultName;
+    /**
+     * The Backup Vault Lock configuration that specifies the minimum retention period that the vault retains its recovery points. This setting can be useful if, for example, your organization's policies require you to retain certain data for at least seven years (2555 days). If this parameter is not specified, Vault Lock will not enforce a minimum retention period. If this parameter is specified, any backup or copy job to the vault must have a lifecycle policy with a retention period equal to or longer than the minimum retention period. If the job's retention period is shorter than that minimum retention period, then the vault fails that backup or copy job, and you should either modify your lifecycle settings or use a different vault. Recovery points already saved in the vault prior to Vault Lock are not affected.
+     */
+    MinRetentionDays?: Long;
+    /**
+     * The Backup Vault Lock configuration that specifies the maximum retention period that the vault retains its recovery points. This setting can be useful if, for example, your organization's policies require you to destroy certain data after retaining it for four years (1460 days). If this parameter is not included, Vault Lock does not enforce a maximum retention period on the recovery points in the vault. If this parameter is included without a value, Vault Lock will not enforce a maximum retention period. If this parameter is specified, any backup or copy job to the vault must have a lifecycle policy with a retention period equal to or shorter than the maximum retention period. If the job's retention period is longer than that maximum retention period, then the vault fails the backup or copy job, and you should either modify your lifecycle settings or use a different vault. Recovery points already saved in the vault prior to Vault Lock are not affected.
+     */
+    MaxRetentionDays?: Long;
+    /**
+     * The Backup Vault Lock configuration that specifies the number of days before the lock date. For example, setting ChangeableForDays to 30 on Jan. 1, 2022 at 8pm UTC will set the lock date to Jan. 31, 2022 at 8pm UTC. Backup enforces a 72-hour cooling-off period before Vault Lock takes effect and becomes immutable. Therefore, you must set ChangeableForDays to 3 or greater. Before the lock date, you can delete Vault Lock from the vault using DeleteBackupVaultLockConfiguration or change the Vault Lock configuration using PutBackupVaultLockConfiguration. On and after the lock date, the Vault Lock becomes immutable and cannot be changed or deleted. If this parameter is not specified, you can delete Vault Lock from the vault using DeleteBackupVaultLockConfiguration or change the Vault Lock configuration using PutBackupVaultLockConfiguration at any time.
+     */
+    ChangeableForDays?: Long;
+  }
   export interface PutBackupVaultNotificationsInput {
     /**
      * The name of a logical container where backups are stored. Backup vaults are identified by names that are unique to the account used to create them and the Amazon Web Services Region where they are created. They consist of lowercase letters, numbers, and hyphens.
@@ -2344,7 +2461,7 @@ declare namespace Backup {
      */
     SNSTopicArn: ARN;
     /**
-     * An array of events that indicate the status of jobs to back up resources to the backup vault.  The following events are supported:  BACKUP_JOB_STARTED, BACKUP_JOB_COMPLETED,  COPY_JOB_STARTED, COPY_JOB_SUCCESSFUL, COPY_JOB_FAILED,  RESTORE_JOB_STARTED, RESTORE_JOB_COMPLETED, and RECOVERY_POINT_MODIFIED. To find failed backup jobs, use BACKUP_JOB_COMPLETED and filter using event metadata. Other events in the following list are deprecated. 
+     * An array of events that indicate the status of jobs to back up resources to the backup vault. For common use cases and code samples, see Using Amazon SNS to track Backup events. The following events are supported:    BACKUP_JOB_STARTED | BACKUP_JOB_COMPLETED     COPY_JOB_STARTED | COPY_JOB_SUCCESSFUL | COPY_JOB_FAILED     RESTORE_JOB_STARTED | RESTORE_JOB_COMPLETED | RECOVERY_POINT_MODIFIED     Ignore the list below because it includes deprecated events. Refer to the list above. 
      */
     BackupVaultEvents: BackupVaultEvents;
   }
@@ -2507,7 +2624,7 @@ declare namespace Backup {
      */
     ReportPlanArn?: ARN;
     /**
-     * Identifies the report template for the report. Reports are built using a report template. The report templates are:   BACKUP_JOB_REPORT | COPY_JOB_REPORT | RESTORE_JOB_REPORT 
+     * Identifies the report template for the report. Reports are built using a report template. The report templates are:   RESOURCE_COMPLIANCE_REPORT | CONTROL_COMPLIANCE_REPORT | BACKUP_JOB_REPORT | COPY_JOB_REPORT | RESTORE_JOB_REPORT 
      */
     ReportTemplate?: string;
     /**
@@ -2547,7 +2664,7 @@ declare namespace Backup {
      */
     ReportPlanDescription?: ReportPlanDescription;
     /**
-     * Identifies the report template for the report. Reports are built using a report template. The report templates are:  BACKUP_JOB_REPORT | COPY_JOB_REPORT | RESTORE_JOB_REPORT 
+     * Identifies the report template for the report. Reports are built using a report template. The report templates are:  RESOURCE_COMPLIANCE_REPORT | CONTROL_COMPLIANCE_REPORT | BACKUP_JOB_REPORT | COPY_JOB_REPORT | RESTORE_JOB_REPORT  If the report template is RESOURCE_COMPLIANCE_REPORT or CONTROL_COMPLIANCE_REPORT, this API resource also describes the report coverage by Amazon Web Services Regions and frameworks.
      */
     ReportSetting?: ReportSetting;
     /**
@@ -2576,13 +2693,22 @@ declare namespace Backup {
   export type ReportPlanName = string;
   export interface ReportSetting {
     /**
-     * Identifies the report template for the report. Reports are built using a report template. The report templates are:  BACKUP_JOB_REPORT | COPY_JOB_REPORT | RESTORE_JOB_REPORT 
+     * Identifies the report template for the report. Reports are built using a report template. The report templates are:  RESOURCE_COMPLIANCE_REPORT | CONTROL_COMPLIANCE_REPORT | BACKUP_JOB_REPORT | COPY_JOB_REPORT | RESTORE_JOB_REPORT 
      */
     ReportTemplate: string;
+    /**
+     * The Amazon Resource Names (ARNs) of the frameworks a report covers.
+     */
+    FrameworkArns?: stringList;
+    /**
+     * The number of frameworks a report covers.
+     */
+    NumberOfFrameworks?: integer;
   }
   export type ResourceArns = ARN[];
   export type ResourceType = string;
   export type ResourceTypeList = ARN[];
+  export type ResourceTypeManagementPreference = {[key: string]: IsEnabled};
   export type ResourceTypeOptInPreference = {[key: string]: IsEnabled};
   export type ResourceTypes = ResourceType[];
   export type RestoreJobId = string;
@@ -2786,7 +2912,7 @@ declare namespace Backup {
      */
     ResourceArn: ARN;
     /**
-     * Key-value pairs that are used to help organize your resources. You can assign your own metadata to the resources you create.
+     * Key-value pairs that are used to help organize your resources. You can assign your own metadata to the resources you create. For clarity, this is the structure to assign tags: [{"Key":"string","Value":"string"}].
      */
     Tags: Tags;
   }
@@ -2909,6 +3035,10 @@ declare namespace Backup {
      * Updates the list of services along with the opt-in preferences for the Region.
      */
     ResourceTypeOptInPreference?: ResourceTypeOptInPreference;
+    /**
+     * Enables or disables  Backup's advanced DynamoDB backup features for the Region.
+     */
+    ResourceTypeManagementPreference?: ResourceTypeManagementPreference;
   }
   export interface UpdateReportPlanInput {
     /**
@@ -2924,7 +3054,7 @@ declare namespace Backup {
      */
     ReportDeliveryChannel?: ReportDeliveryChannel;
     /**
-     * Identifies the report template for the report. Reports are built using a report template. The report templates are:  BACKUP_JOB_REPORT | COPY_JOB_REPORT | RESTORE_JOB_REPORT 
+     * Identifies the report template for the report. Reports are built using a report template. The report templates are:  RESOURCE_COMPLIANCE_REPORT | CONTROL_COMPLIANCE_REPORT | BACKUP_JOB_REPORT | COPY_JOB_REPORT | RESTORE_JOB_REPORT  If the report template is RESOURCE_COMPLIANCE_REPORT or CONTROL_COMPLIANCE_REPORT, this API resource also describes the report coverage by Amazon Web Services Regions and frameworks.
      */
     ReportSetting?: ReportSetting;
     /**