aws-sdk 2.1472.0 → 2.1474.0

package/clients/opensearch.d.ts

@@ -404,11 +404,11 @@ declare class OpenSearch extends Service {
    */
   startServiceSoftwareUpdate(callback?: (err: AWSError, data: OpenSearch.Types.StartServiceSoftwareUpdateResponse) => void): Request<OpenSearch.Types.StartServiceSoftwareUpdateResponse, AWSError>;
   /**
-   * Modifies the cluster configuration of the specified Amazon OpenSearch Service domain.sl
+   * Modifies the cluster configuration of the specified Amazon OpenSearch Service domain.
    */
   updateDomainConfig(params: OpenSearch.Types.UpdateDomainConfigRequest, callback?: (err: AWSError, data: OpenSearch.Types.UpdateDomainConfigResponse) => void): Request<OpenSearch.Types.UpdateDomainConfigResponse, AWSError>;
   /**
-   * Modifies the cluster configuration of the specified Amazon OpenSearch Service domain.sl
+   * Modifies the cluster configuration of the specified Amazon OpenSearch Service domain.
    */
   updateDomainConfig(callback?: (err: AWSError, data: OpenSearch.Types.UpdateDomainConfigResponse) => void): Request<OpenSearch.Types.UpdateDomainConfigResponse, AWSError>;
   /**
@@ -1138,7 +1138,7 @@ declare namespace OpenSearch {
   export type CreatedAt = Date;
   export interface CrossClusterSearchConnectionProperties {
     /**
-     * Status of SkipUnavailable param for outbound connection.
+     * The status of the SkipUnavailable setting for the outbound connection. This feature allows you to specify some clusters as optional and ensure that your cross-cluster queries return partial results despite failures on one or more remote clusters.
      */
     SkipUnavailable?: SkipUnavailableStatus;
   }
@@ -1343,7 +1343,7 @@ declare namespace OpenSearch {
   }
   export interface DescribeDomainsRequest {
     /**
-     * Array of OpenSearch Service domain names that you want information about. If you don't specify any domains, OpenSearch Service returns information about all domains owned by the account.
+     * Array of OpenSearch Service domain names that you want information about. You must specify at least one domain name.
      */
     DomainNames: DomainNameList;
   }
@@ -1460,7 +1460,7 @@ declare namespace OpenSearch {
     Value?: DescribePackagesFilterValues;
   }
   export type DescribePackagesFilterList = DescribePackagesFilter[];
-  export type DescribePackagesFilterName = "PackageID"|"PackageName"|"PackageStatus"|string;
+  export type DescribePackagesFilterName = "PackageID"|"PackageName"|"PackageStatus"|"PackageType"|"EngineVersion"|string;
   export type DescribePackagesFilterValue = string;
   export type DescribePackagesFilterValues = DescribePackagesFilterValue[];
   export interface DescribePackagesRequest {
@@ -1982,6 +1982,7 @@ declare namespace OpenSearch {
   export type Endpoint = string;
   export type EndpointsMap = {[key: string]: ServiceUrl};
   export type EngineType = "OpenSearch"|"Elasticsearch"|string;
+  export type EngineVersion = string;
   export interface EnvironmentInfo {
     /**
      *  A list of AvailabilityZoneInfo for the domain.
@@ -2618,6 +2619,14 @@ declare namespace OpenSearch {
      * Additional information if the package is in an error state. Null otherwise.
      */
     ErrorDetails?: ErrorDetails;
+    /**
+     * Version of OpenSearch or Elasticsearch, in the format Elasticsearch_X.Y or OpenSearch_X.Y. Defaults to the latest version of OpenSearch.
+     */
+    EngineVersion?: EngineVersion;
+    /**
+     * If the package is a ZIP-PLUGIN package, additional information about plugin properties.
+     */
+    AvailablePluginProperties?: PluginProperties;
   }
   export type PackageDetailsList = PackageDetails[];
   export type PackageID = string;
@@ -2633,7 +2642,7 @@ declare namespace OpenSearch {
     S3Key?: S3Key;
   }
   export type PackageStatus = "COPYING"|"COPY_FAILED"|"VALIDATING"|"VALIDATION_FAILED"|"AVAILABLE"|"DELETING"|"DELETED"|"DELETE_FAILED"|string;
-  export type PackageType = "TXT-DICTIONARY"|string;
+  export type PackageType = "TXT-DICTIONARY"|"ZIP-PLUGIN"|string;
   export type PackageVersion = string;
   export interface PackageVersionHistory {
     /**
@@ -2648,9 +2657,39 @@ declare namespace OpenSearch {
      * The date and time when the package was created.
      */
     CreatedAt?: CreatedAt;
+    /**
+     * Additional information about plugin properties if the package is a ZIP-PLUGIN package.
+     */
+    PluginProperties?: PluginProperties;
   }
   export type PackageVersionHistoryList = PackageVersionHistory[];
   export type Password = string;
+  export type PluginClassName = string;
+  export type PluginDescription = string;
+  export type PluginName = string;
+  export interface PluginProperties {
+    /**
+     * The name of the plugin.
+     */
+    Name?: PluginName;
+    /**
+     * The description of the plugin.
+     */
+    Description?: PluginDescription;
+    /**
+     * The version of the plugin.
+     */
+    Version?: PluginVersion;
+    /**
+     * The name of the class to load.
+     */
+    ClassName?: PluginClassName;
+    /**
+     * The uncompressed size of the plugin.
+     */
+    UncompressedSizeInBytes?: UncompressedPluginSizeInBytes;
+  }
+  export type PluginVersion = string;
   export type PolicyDocument = string;
   export type PrincipalType = "AWS_ACCOUNT"|"AWS_SERVICE"|string;
   export interface PurchaseReservedInstanceOfferingRequest {
@@ -3089,6 +3128,7 @@ declare namespace OpenSearch {
   export type TimeUnit = "HOURS"|string;
   export type TotalNumberOfStages = number;
   export type UIntValue = number;
+  export type UncompressedPluginSizeInBytes = number;
   export interface UpdateDomainConfigRequest {
     /**
      * The name of the domain that you're updating.

package/clients/pricing.d.ts

@@ -28,11 +28,11 @@ declare class Pricing extends Service {
    */
   getAttributeValues(callback?: (err: AWSError, data: Pricing.Types.GetAttributeValuesResponse) => void): Request<Pricing.Types.GetAttributeValuesResponse, AWSError>;
   /**
-   *   This feature is in preview release and is subject to change. Your use of Amazon Web Services Price List API is subject to the Beta Service Participation terms of the Amazon Web Services Service Terms (Section 1.10).   This returns the URL that you can retrieve your Price List file from. This URL is based on the PriceListArn and FileFormat that you retrieve from the  ListPriceLists  response. 
+   *   This feature is in preview release and is subject to change. Your use of Amazon Web Services Price List API is subject to the Beta Service Participation terms of the Amazon Web Services Service Terms (Section 1.10).   This returns the URL that you can retrieve your Price List file from. This URL is based on the PriceListArn and FileFormat that you retrieve from the ListPriceLists response. 
    */
   getPriceListFileUrl(params: Pricing.Types.GetPriceListFileUrlRequest, callback?: (err: AWSError, data: Pricing.Types.GetPriceListFileUrlResponse) => void): Request<Pricing.Types.GetPriceListFileUrlResponse, AWSError>;
   /**
-   *   This feature is in preview release and is subject to change. Your use of Amazon Web Services Price List API is subject to the Beta Service Participation terms of the Amazon Web Services Service Terms (Section 1.10).   This returns the URL that you can retrieve your Price List file from. This URL is based on the PriceListArn and FileFormat that you retrieve from the  ListPriceLists  response. 
+   *   This feature is in preview release and is subject to change. Your use of Amazon Web Services Price List API is subject to the Beta Service Participation terms of the Amazon Web Services Service Terms (Section 1.10).   This returns the URL that you can retrieve your Price List file from. This URL is based on the PriceListArn and FileFormat that you retrieve from the ListPriceLists response. 
    */
   getPriceListFileUrl(callback?: (err: AWSError, data: Pricing.Types.GetPriceListFileUrlResponse) => void): Request<Pricing.Types.GetPriceListFileUrlResponse, AWSError>;
   /**
@@ -44,11 +44,11 @@ declare class Pricing extends Service {
    */
   getProducts(callback?: (err: AWSError, data: Pricing.Types.GetProductsResponse) => void): Request<Pricing.Types.GetProductsResponse, AWSError>;
   /**
-   *   This feature is in preview release and is subject to change. Your use of Amazon Web Services Price List API is subject to the Beta Service Participation terms of the Amazon Web Services Service Terms (Section 1.10).   This returns a list of Price List references that the requester if authorized to view, given a ServiceCode, CurrencyCode, and an EffectiveDate. Use without a RegionCode filter to list Price List references from all available Amazon Web Services Regions. Use with a RegionCode filter to get the Price List reference that's specific to a specific Amazon Web Services Region. You can use the PriceListArn from the response to get your preferred Price List files through the  GetPriceListFileUrl  API.
+   *   This feature is in preview release and is subject to change. Your use of Amazon Web Services Price List API is subject to the Beta Service Participation terms of the Amazon Web Services Service Terms (Section 1.10).   This returns a list of Price List references that the requester if authorized to view, given a ServiceCode, CurrencyCode, and an EffectiveDate. Use without a RegionCode filter to list Price List references from all available Amazon Web Services Regions. Use with a RegionCode filter to get the Price List reference that's specific to a specific Amazon Web Services Region. You can use the PriceListArn from the response to get your preferred Price List files through the GetPriceListFileUrl API.
    */
   listPriceLists(params: Pricing.Types.ListPriceListsRequest, callback?: (err: AWSError, data: Pricing.Types.ListPriceListsResponse) => void): Request<Pricing.Types.ListPriceListsResponse, AWSError>;
   /**
-   *   This feature is in preview release and is subject to change. Your use of Amazon Web Services Price List API is subject to the Beta Service Participation terms of the Amazon Web Services Service Terms (Section 1.10).   This returns a list of Price List references that the requester if authorized to view, given a ServiceCode, CurrencyCode, and an EffectiveDate. Use without a RegionCode filter to list Price List references from all available Amazon Web Services Regions. Use with a RegionCode filter to get the Price List reference that's specific to a specific Amazon Web Services Region. You can use the PriceListArn from the response to get your preferred Price List files through the  GetPriceListFileUrl  API.
+   *   This feature is in preview release and is subject to change. Your use of Amazon Web Services Price List API is subject to the Beta Service Participation terms of the Amazon Web Services Service Terms (Section 1.10).   This returns a list of Price List references that the requester if authorized to view, given a ServiceCode, CurrencyCode, and an EffectiveDate. Use without a RegionCode filter to list Price List references from all available Amazon Web Services Regions. Use with a RegionCode filter to get the Price List reference that's specific to a specific Amazon Web Services Region. You can use the PriceListArn from the response to get your preferred Price List files through the GetPriceListFileUrl API.
    */
   listPriceLists(callback?: (err: AWSError, data: Pricing.Types.ListPriceListsResponse) => void): Request<Pricing.Types.ListPriceListsResponse, AWSError>;
 }
@@ -144,11 +144,11 @@ declare namespace Pricing {
   }
   export interface GetPriceListFileUrlRequest {
     /**
-     * The unique identifier that maps to where your Price List files are located. PriceListArn can be obtained from the  ListPriceLists  response. 
+     * The unique identifier that maps to where your Price List files are located. PriceListArn can be obtained from the ListPriceLists response. 
      */
     PriceListArn: PriceListArn;
     /**
-     * The format that you want to retrieve your Price List files in. The FileFormat can be obtained from the  ListPriceLists  response. 
+     * The format that you want to retrieve your Price List files in. The FileFormat can be obtained from the ListPriceLists response. 
      */
     FileFormat: FileFormat;
   }
@@ -196,7 +196,7 @@ declare namespace Pricing {
   }
   export interface ListPriceListsRequest {
     /**
-     * The service code or the Savings Plan service code for the attributes that you want to retrieve. For example, to get the list of applicable Amazon EC2 price lists, use AmazonEC2. For a full list of service codes containing On-Demand and Reserved Instance (RI) pricing, use the  DescribeServices  API. To retrieve the Compute Savings Plan price lists, use ComputeSavingsPlans. To retrieve Machine Learning Savings Plans price lists, use MachineLearningSavingsPlans. 
+     * The service code or the Savings Plan service code for the attributes that you want to retrieve. For example, to get the list of applicable Amazon EC2 price lists, use AmazonEC2. For a full list of service codes containing On-Demand and Reserved Instance (RI) pricing, use the DescribeServices API. To retrieve the Reserved Instance and Compute Savings Plan price lists, use ComputeSavingsPlans.  To retrieve Machine Learning Savings Plans price lists, use MachineLearningSavingsPlans. 
      */
     ServiceCode: ServiceCode;
     /**
@@ -204,7 +204,7 @@ declare namespace Pricing {
      */
     EffectiveDate: EffectiveDate;
     /**
-     * This is used to filter the Price List by Amazon Web Services Region. For example, to get the price list only for the US East (N. Virginia) Region, use us-east-1. If nothing is specified, you retrieve price lists for all applicable Regions. The available RegionCode list can be retrieved from  GetAttributeValues  API.
+     * This is used to filter the Price List by Amazon Web Services Region. For example, to get the price list only for the US East (N. Virginia) Region, use us-east-1. If nothing is specified, you retrieve price lists for all applicable Regions. The available RegionCode list can be retrieved from GetAttributeValues API.
      */
     RegionCode?: RegionCode;
     /**

package/clients/rds.d.ts

@@ -2338,6 +2338,10 @@ declare namespace RDS {
      * The Oracle system identifier (SID), which is the name of the Oracle database instance that manages your database files. In this context, the term "Oracle database instance" refers exclusively to the system global area (SGA) and Oracle background processes. If you don't specify a SID, the value defaults to RDSCDB. The Oracle SID is also the name of your CDB.
      */
     DBSystemId?: String;
+    /**
+     * Indicates whether the DB instance has a dedicated log volume (DLV) enabled.
+     */
+    DedicatedLogVolume?: BooleanOptional;
   }
   export interface CreateDBInstanceReadReplicaMessage {
     /**
@@ -2505,6 +2509,10 @@ declare namespace RDS {
      * The identifier of the Multi-AZ DB cluster that will act as the source for the read replica. Each DB cluster can have up to 15 read replicas. Constraints:   Must be the identifier of an existing Multi-AZ DB cluster.   Can't be specified if the SourceDBInstanceIdentifier parameter is also specified.   The specified DB cluster must have automatic backups enabled, that is, its backup retention period must be greater than 0.   The source DB cluster must be in the same Amazon Web Services Region as the read replica. Cross-Region replication isn't supported.  
      */
     SourceDBClusterIdentifier?: String;
+    /**
+     * Indicates whether the DB instance has a dedicated log volume (DLV) enabled.
+     */
+    DedicatedLogVolume?: BooleanOptional;
     /**
      * The ID of the region that contains the source for the read replica.
      */
@@ -3972,6 +3980,10 @@ declare namespace RDS {
      * The progress of the storage optimization operation as a percentage.
      */
     PercentProgress?: String;
+    /**
+     * Indicates whether the DB instance has a dedicated log volume (DLV) enabled.
+     */
+    DedicatedLogVolume?: Boolean;
   }
   export interface DBInstanceAutomatedBackup {
     /**
@@ -4090,6 +4102,10 @@ declare namespace RDS {
      * The Amazon Resource Name (ARN) of the recovery point in Amazon Web Services Backup.
      */
     AwsBackupRecoveryPointArn?: String;
+    /**
+     * Indicates whether the DB instance has a dedicated log volume (DLV) enabled.
+     */
+    DedicatedLogVolume?: BooleanOptional;
   }
   export type DBInstanceAutomatedBackupList = DBInstanceAutomatedBackup[];
   export interface DBInstanceAutomatedBackupMessage {
@@ -4580,6 +4596,10 @@ declare namespace RDS {
      * The Oracle system identifier (SID), which is the name of the Oracle database instance that manages your database files. The Oracle SID is also the name of your CDB.
      */
     DBSystemId?: String;
+    /**
+     * Indicates whether the DB instance has a dedicated log volume (DLV) enabled.
+     */
+    DedicatedLogVolume?: Boolean;
   }
   export interface DBSnapshotAttribute {
     /**
@@ -6893,6 +6913,10 @@ declare namespace RDS {
      * The target Oracle DB engine when you convert a non-CDB to a CDB. This intermediate step is necessary to upgrade an Oracle Database 19c non-CDB to an Oracle Database 21c CDB. Note the following requirements:   Make sure that you specify oracle-ee-cdb or oracle-se2-cdb.   Make sure that your DB engine runs Oracle Database 19c with an April 2021 or later RU.   Note the following limitations:   You can't convert a CDB to a non-CDB.   You can't convert a replica database.   You can't convert a non-CDB to a CDB and upgrade the engine version in the same command.   You can't convert the existing custom parameter or option group when it has options or parameters that are permanent or persistent. In this situation, the DB instance reverts to the default option and parameter group. To avoid reverting to the default, specify a new parameter group with --db-parameter-group-name and a new option group with --option-group-name.  
      */
     Engine?: String;
+    /**
+     * Indicates whether the DB instance has a dedicated log volume (DLV) enabled.
+     */
+    DedicatedLogVolume?: BooleanOptional;
   }
   export interface ModifyDBInstanceResult {
     DBInstance?: DBInstance;
@@ -7559,6 +7583,10 @@ declare namespace RDS {
      * Maximum storage throughput to provisioned IOPS ratio for a DB instance.
      */
     MaxStorageThroughputPerIops?: DoubleOptional;
+    /**
+     * Indicates whether a DB instance supports using a dedicated log volume (DLV).
+     */
+    SupportsDedicatedLogVolume?: Boolean;
   }
   export type OrderableDBInstanceOptionsList = OrderableDBInstanceOption[];
   export interface OrderableDBInstanceOptionsMessage {
@@ -7750,6 +7778,10 @@ declare namespace RDS {
      * The database engine of the DB instance.
      */
     Engine?: String;
+    /**
+     * Indicates whether the DB instance has a dedicated log volume (DLV) enabled.>
+     */
+    DedicatedLogVolume?: BooleanOptional;
   }
   export interface ProcessorFeature {
     /**
@@ -8637,6 +8669,10 @@ declare namespace RDS {
      * The amount of storage (in gibibytes) to allocate initially for the DB instance. Follow the allocation rules specified in CreateDBInstance.  Be sure to allocate enough storage for your new DB instance so that the restore operation can succeed. You can also allocate additional storage for future growth. 
      */
     AllocatedStorage?: IntegerOptional;
+    /**
+     * Specifies whether to enable a dedicated log volume (DLV) for the DB instance.
+     */
+    DedicatedLogVolume?: BooleanOptional;
   }
   export interface RestoreDBInstanceFromDBSnapshotResult {
     DBInstance?: DBInstance;
@@ -8834,6 +8870,10 @@ declare namespace RDS {
      * The Amazon Web Services KMS key identifier to encrypt a secret that is automatically generated and managed in Amazon Web Services Secrets Manager. This setting is valid only if the master user password is managed by RDS in Amazon Web Services Secrets Manager for the DB instance. The Amazon Web Services KMS key identifier is the key ARN, key ID, alias ARN, or alias name for the KMS key. To use a KMS key in a different Amazon Web Services account, specify the key ARN or alias ARN. If you don't specify MasterUserSecretKmsKeyId, then the aws/secretsmanager KMS key is used to encrypt the secret. If the secret is in a different Amazon Web Services account, then you can't use the aws/secretsmanager KMS key to encrypt the secret, and you must use a customer managed KMS key. There is a default KMS key for your Amazon Web Services account. Your Amazon Web Services account has a different default KMS key for each Amazon Web Services Region.
      */
     MasterUserSecretKmsKeyId?: String;
+    /**
+     * Specifies whether to enable a dedicated log volume (DLV) for the DB instance.
+     */
+    DedicatedLogVolume?: BooleanOptional;
   }
   export interface RestoreDBInstanceFromS3Result {
     DBInstance?: DBInstance;
@@ -9008,6 +9048,10 @@ declare namespace RDS {
      * The amount of storage (in gibibytes) to allocate initially for the DB instance. Follow the allocation rules specified in CreateDBInstance.  Be sure to allocate enough storage for your new DB instance so that the restore operation can succeed. You can also allocate additional storage for future growth. 
      */
     AllocatedStorage?: IntegerOptional;
+    /**
+     * Specifies whether to enable a dedicated log volume (DLV) for the DB instance.
+     */
+    DedicatedLogVolume?: BooleanOptional;
   }
   export interface RestoreDBInstanceToPointInTimeResult {
     DBInstance?: DBInstance;
@@ -9548,6 +9592,10 @@ declare namespace RDS {
      * Valid processor features for your DB instance.
      */
     ValidProcessorFeatures?: AvailableProcessorFeatureList;
+    /**
+     * Indicates whether a DB instance supports using a dedicated log volume (DLV).
+     */
+    SupportsDedicatedLogVolume?: Boolean;
   }
   export interface ValidStorageOptions {
     /**

package/clients/redshift.d.ts

@@ -461,11 +461,11 @@ declare class Redshift extends Service {
    */
   describeClusters(callback?: (err: AWSError, data: Redshift.Types.ClustersMessage) => void): Request<Redshift.Types.ClustersMessage, AWSError>;
   /**
-   * Contains information for custom domain associations for a cluster.
+   * Contains information about custom domain associations for a cluster.
    */
   describeCustomDomainAssociations(params: Redshift.Types.DescribeCustomDomainAssociationsMessage, callback?: (err: AWSError, data: Redshift.Types.CustomDomainAssociationsMessage) => void): Request<Redshift.Types.CustomDomainAssociationsMessage, AWSError>;
   /**
-   * Contains information for custom domain associations for a cluster.
+   * Contains information about custom domain associations for a cluster.
    */
   describeCustomDomainAssociations(callback?: (err: AWSError, data: Redshift.Types.CustomDomainAssociationsMessage) => void): Request<Redshift.Types.CustomDomainAssociationsMessage, AWSError>;
   /**
@@ -1497,6 +1497,14 @@ declare namespace Redshift {
      * The expiration date for the certificate associated with the custom domain name.
      */
     CustomDomainCertificateExpiryDate?: TStamp;
+    /**
+     * The Amazon Resource Name (ARN) for the cluster's admin user credentials secret.
+     */
+    MasterPasswordSecretArn?: String;
+    /**
+     * The ID of the Key Management Service (KMS) key used to encrypt and store the cluster's admin credentials secret.
+     */
+    MasterPasswordSecretKmsKeyId?: String;
   }
   export interface ClusterAssociatedToSchedule {
     /**
@@ -1872,9 +1880,9 @@ declare namespace Redshift {
      */
     MasterUsername: String;
     /**
-     * The password associated with the admin user account for the cluster that is being created. Constraints:   Must be between 8 and 64 characters in length.   Must contain at least one uppercase letter.   Must contain at least one lowercase letter.   Must contain one number.   Can be any printable ASCII character (ASCII code 33-126) except ' (single quote), " (double quote), \, /, or @.  
+     * The password associated with the admin user account for the cluster that is being created. You can't use MasterUserPassword if ManageMasterPassword is true. Constraints:   Must be between 8 and 64 characters in length.   Must contain at least one uppercase letter.   Must contain at least one lowercase letter.   Must contain one number.   Can be any printable ASCII character (ASCII code 33-126) except ' (single quote), " (double quote), \, /, or @.  
      */
-    MasterUserPassword: String;
+    MasterUserPassword?: SensitiveString;
     /**
      * A list of security groups to be associated with this cluster. Default: The default cluster security group for Amazon Redshift.
      */
@@ -1987,6 +1995,14 @@ declare namespace Redshift {
      * A flag that specifies whether to load sample data once the cluster is created.
      */
     LoadSampleData?: String;
+    /**
+     * If true, Amazon Redshift uses Secrets Manager to manage this cluster's admin credentials. You can't use MasterUserPassword if ManageMasterPassword is true. If ManageMasterPassword is false or not set, Amazon Redshift uses MasterUserPassword for the admin user account's password. 
+     */
+    ManageMasterPassword?: BooleanOptional;
+    /**
+     * The ID of the Key Management Service (KMS) key used to encrypt and store the cluster's admin credentials secret. You can only use this parameter if ManageMasterPassword is true.
+     */
+    MasterPasswordSecretKmsKeyId?: String;
   }
   export interface CreateClusterParameterGroupMessage {
     /**
@@ -4125,9 +4141,9 @@ declare namespace Redshift {
      */
     VpcSecurityGroupIds?: VpcSecurityGroupIdList;
     /**
-     * The new password for the cluster admin user. This change is asynchronously applied as soon as possible. Between the time of the request and the completion of the request, the MasterUserPassword element exists in the PendingModifiedValues element of the operation response.   Operations never return the password, so this operation provides a way to regain access to the admin user account for a cluster if the password is lost.  Default: Uses existing setting. Constraints:   Must be between 8 and 64 characters in length.   Must contain at least one uppercase letter.   Must contain at least one lowercase letter.   Must contain one number.   Can be any printable ASCII character (ASCII code 33-126) except ' (single quote), " (double quote), \, /, or @.  
+     * The new password for the cluster admin user. This change is asynchronously applied as soon as possible. Between the time of the request and the completion of the request, the MasterUserPassword element exists in the PendingModifiedValues element of the operation response.  You can't use MasterUserPassword if ManageMasterPassword is true.  Operations never return the password, so this operation provides a way to regain access to the admin user account for a cluster if the password is lost.  Default: Uses existing setting. Constraints:   Must be between 8 and 64 characters in length.   Must contain at least one uppercase letter.   Must contain at least one lowercase letter.   Must contain one number.   Can be any printable ASCII character (ASCII code 33-126) except ' (single quote), " (double quote), \, /, or @.  
      */
-    MasterUserPassword?: String;
+    MasterUserPassword?: SensitiveString;
     /**
      * The name of the cluster parameter group to apply to this cluster. This change is applied only after the cluster is rebooted. To reboot a cluster use RebootCluster.  Default: Uses existing setting. Constraints: The cluster parameter group must be in the same parameter group family that matches the cluster version.
      */
@@ -4200,6 +4216,14 @@ declare namespace Redshift {
      * The option to change the port of an Amazon Redshift cluster.
      */
     Port?: IntegerOptional;
+    /**
+     * If true, Amazon Redshift uses Secrets Manager to manage this cluster's admin credentials. You can't use MasterUserPassword if ManageMasterPassword is true. If ManageMasterPassword is false or not set, Amazon Redshift uses MasterUserPassword for the admin user account's password. 
+     */
+    ManageMasterPassword?: BooleanOptional;
+    /**
+     * The ID of the Key Management Service (KMS) key used to encrypt and store the cluster's admin credentials secret. You can only use this parameter if ManageMasterPassword is true.
+     */
+    MasterPasswordSecretKmsKeyId?: String;
   }
   export interface ModifyClusterParameterGroupMessage {
     /**
@@ -4622,7 +4646,7 @@ declare namespace Redshift {
     /**
      * The pending or in-progress change of the admin user password for the cluster.
      */
-    MasterUserPassword?: String;
+    MasterUserPassword?: SensitiveString;
     /**
      * The pending or in-progress change of the cluster's node type.
      */
@@ -5125,6 +5149,14 @@ declare namespace Redshift {
      * Enables support for restoring an unencrypted snapshot to a cluster encrypted with Key Management Service (KMS) and a customer managed key.
      */
     Encrypted?: BooleanOptional;
+    /**
+     * If true, Amazon Redshift uses Secrets Manager to manage the restored cluster's admin credentials. If ManageMasterPassword is false or not set, Amazon Redshift uses the admin credentials the cluster had at the time the snapshot was taken.
+     */
+    ManageMasterPassword?: BooleanOptional;
+    /**
+     * The ID of the Key Management Service (KMS) key used to encrypt and store the cluster's admin credentials secret. You can only use this parameter if ManageMasterPassword is true.
+     */
+    MasterPasswordSecretKmsKeyId?: String;
   }
   export interface RestoreFromClusterSnapshotResult {
     Cluster?: Cluster;
@@ -5508,6 +5540,14 @@ declare namespace Redshift {
      * A timestamp representing the start of the retention period for the snapshot.
      */
     SnapshotRetentionStartTime?: TStamp;
+    /**
+     * The Amazon Resource Name (ARN) for the cluster's admin user credentials secret.
+     */
+    MasterPasswordSecretArn?: String;
+    /**
+     * The ID of the Key Management Service (KMS) key used to encrypt and store the cluster's admin credentials secret.
+     */
+    MasterPasswordSecretKmsKeyId?: String;
   }
   export type SnapshotAttributeToSortBy = "SOURCE_TYPE"|"TOTAL_SIZE"|"CREATE_TIME"|string;
   export interface SnapshotCopyGrant {

package/clients/redshiftserverless.d.ts

@@ -397,7 +397,11 @@ declare namespace RedshiftServerless {
   }
   export interface CreateNamespaceRequest {
     /**
-     * The password of the administrator for the first database created in the namespace.
+     * The ID of the Key Management Service (KMS) key used to encrypt and store the namespace's admin credentials secret. You can only use this parameter if manageAdminPassword is true.
+     */
+    adminPasswordSecretKmsKeyId?: KmsKeyId;
+    /**
+     * The password of the administrator for the first database created in the namespace. You can't use adminUserPassword if manageAdminPassword is true. 
      */
     adminUserPassword?: DbPassword;
     /**
@@ -424,6 +428,10 @@ declare namespace RedshiftServerless {
      * The types of logs the namespace can export. Available export types are userlog, connectionlog, and useractivitylog.
      */
     logExports?: LogExportList;
+    /**
+     * If true, Amazon Redshift uses Secrets Manager to manage the namespace's admin credentials. You can't use adminUserPassword if manageAdminPassword is true. If manageAdminPassword is false or not set, Amazon Redshift uses adminUserPassword for the admin user account's password. 
+     */
+    manageAdminPassword?: Boolean;
     /**
      * The name of the namespace.
      */
@@ -1039,6 +1047,14 @@ declare namespace RedshiftServerless {
   export type LogExportList = LogExport[];
   export type Long = number;
   export interface Namespace {
+    /**
+     * The Amazon Resource Name (ARN) for the namespace's admin user credentials secret.
+     */
+    adminPasswordSecretArn?: String;
+    /**
+     * The ID of the Key Management Service (KMS) key used to encrypt and store the namespace's admin credentials secret.
+     */
+    adminPasswordSecretKmsKeyId?: KmsKeyId;
     /**
      * The username of the administrator for the first database created in the namespace.
      */
@@ -1187,6 +1203,14 @@ declare namespace RedshiftServerless {
     recoveryPointId?: String;
   }
   export interface RestoreFromSnapshotRequest {
+    /**
+     * The ID of the Key Management Service (KMS) key used to encrypt and store the namespace's admin credentials secret.
+     */
+    adminPasswordSecretKmsKeyId?: KmsKeyId;
+    /**
+     * If true, Amazon Redshift uses Secrets Manager to manage the restored snapshot's admin credentials. If MmanageAdminPassword is false or not set, Amazon Redshift uses the admin credentials that the namespace or cluster had at the time the snapshot was taken.
+     */
+    manageAdminPassword?: Boolean;
     /**
      * The name of the namespace to restore the snapshot to.
      */
@@ -1282,6 +1306,14 @@ declare namespace RedshiftServerless {
      * The size of the incremental backup in megabytes.
      */
     actualIncrementalBackupSizeInMegaBytes?: Double;
+    /**
+     * The Amazon Resource Name (ARN) for the namespace's admin user credentials secret.
+     */
+    adminPasswordSecretArn?: String;
+    /**
+     * The ID of the Key Management Service (KMS) key used to encrypt and store the namespace's admin credentials secret.
+     */
+    adminPasswordSecretKmsKeyId?: KmsKeyId;
     /**
      * The username of the database within a snapshot.
      */
@@ -1477,7 +1509,11 @@ declare namespace RedshiftServerless {
   }
   export interface UpdateNamespaceRequest {
     /**
-     * The password of the administrator for the first database created in the namespace. This parameter must be updated together with adminUsername.
+     * The ID of the Key Management Service (KMS) key used to encrypt and store the namespace's admin credentials secret. You can only use this parameter if manageAdminPassword is true.
+     */
+    adminPasswordSecretKmsKeyId?: KmsKeyId;
+    /**
+     * The password of the administrator for the first database created in the namespace. This parameter must be updated together with adminUsername. You can't use adminUserPassword if manageAdminPassword is true. 
      */
     adminUserPassword?: DbPassword;
     /**
@@ -1500,6 +1536,10 @@ declare namespace RedshiftServerless {
      * The types of logs the namespace can export. The export types are userlog, connectionlog, and useractivitylog.
      */
     logExports?: LogExportList;
+    /**
+     * If true, Amazon Redshift uses Secrets Manager to manage the namespace's admin credentials. You can't use adminUserPassword if manageAdminPassword is true. If manageAdminPassword is false or not set, Amazon Redshift uses adminUserPassword for the admin user account's password. 
+     */
+    manageAdminPassword?: Boolean;
     /**
      * The name of the namespace to update. You can't update the name of a namespace once it is created.
      */