aws-sdk 2.1503.0 → 2.1505.0

package/clients/controltower.d.ts

@@ -12,19 +12,19 @@ declare class ControlTower extends Service {
   constructor(options?: ControlTower.Types.ClientConfiguration)
   config: Config & ControlTower.Types.ClientConfiguration;
   /**
-   * Creates a new landing zone. This starts an asynchronous operation that creates and configures a landing zone based on the parameters specified in the manifest JSON file. 
+   * Creates a new landing zone. This API call starts an asynchronous operation that creates and configures a landing zone, based on the parameters specified in the manifest JSON file.
    */
   createLandingZone(params: ControlTower.Types.CreateLandingZoneInput, callback?: (err: AWSError, data: ControlTower.Types.CreateLandingZoneOutput) => void): Request<ControlTower.Types.CreateLandingZoneOutput, AWSError>;
   /**
-   * Creates a new landing zone. This starts an asynchronous operation that creates and configures a landing zone based on the parameters specified in the manifest JSON file. 
+   * Creates a new landing zone. This API call starts an asynchronous operation that creates and configures a landing zone, based on the parameters specified in the manifest JSON file.
    */
   createLandingZone(callback?: (err: AWSError, data: ControlTower.Types.CreateLandingZoneOutput) => void): Request<ControlTower.Types.CreateLandingZoneOutput, AWSError>;
   /**
-   * This decommissions a landing zone. This starts an asynchronous operation that deletes Amazon Web Services Control Tower resources deployed in Amazon Web Services Control Tower managed accounts. 
+   * Decommissions a landing zone. This API call starts an asynchronous operation that deletes Amazon Web Services Control Tower resources deployed in accounts managed by Amazon Web Services Control Tower.
    */
   deleteLandingZone(params: ControlTower.Types.DeleteLandingZoneInput, callback?: (err: AWSError, data: ControlTower.Types.DeleteLandingZoneOutput) => void): Request<ControlTower.Types.DeleteLandingZoneOutput, AWSError>;
   /**
-   * This decommissions a landing zone. This starts an asynchronous operation that deletes Amazon Web Services Control Tower resources deployed in Amazon Web Services Control Tower managed accounts. 
+   * Decommissions a landing zone. This API call starts an asynchronous operation that deletes Amazon Web Services Control Tower resources deployed in accounts managed by Amazon Web Services Control Tower.
    */
   deleteLandingZone(callback?: (err: AWSError, data: ControlTower.Types.DeleteLandingZoneOutput) => void): Request<ControlTower.Types.DeleteLandingZoneOutput, AWSError>;
   /**
@@ -60,19 +60,19 @@ declare class ControlTower extends Service {
    */
   getEnabledControl(callback?: (err: AWSError, data: ControlTower.Types.GetEnabledControlOutput) => void): Request<ControlTower.Types.GetEnabledControlOutput, AWSError>;
   /**
-   * Returns details about the landing zone. Displays a message in case of error. 
+   * Returns details about the landing zone. Displays a message in case of error.
    */
   getLandingZone(params: ControlTower.Types.GetLandingZoneInput, callback?: (err: AWSError, data: ControlTower.Types.GetLandingZoneOutput) => void): Request<ControlTower.Types.GetLandingZoneOutput, AWSError>;
   /**
-   * Returns details about the landing zone. Displays a message in case of error. 
+   * Returns details about the landing zone. Displays a message in case of error.
    */
   getLandingZone(callback?: (err: AWSError, data: ControlTower.Types.GetLandingZoneOutput) => void): Request<ControlTower.Types.GetLandingZoneOutput, AWSError>;
   /**
-   * Returns the status of the specified landing zone operation. Details for an operation are available for X days. 
+   * Returns the status of the specified landing zone operation. Details for an operation are available for 60 days.
    */
   getLandingZoneOperation(params: ControlTower.Types.GetLandingZoneOperationInput, callback?: (err: AWSError, data: ControlTower.Types.GetLandingZoneOperationOutput) => void): Request<ControlTower.Types.GetLandingZoneOperationOutput, AWSError>;
   /**
-   * Returns the status of the specified landing zone operation. Details for an operation are available for X days. 
+   * Returns the status of the specified landing zone operation. Details for an operation are available for 60 days.
    */
   getLandingZoneOperation(callback?: (err: AWSError, data: ControlTower.Types.GetLandingZoneOperationOutput) => void): Request<ControlTower.Types.GetLandingZoneOperationOutput, AWSError>;
   /**
@@ -84,11 +84,11 @@ declare class ControlTower extends Service {
    */
   listEnabledControls(callback?: (err: AWSError, data: ControlTower.Types.ListEnabledControlsOutput) => void): Request<ControlTower.Types.ListEnabledControlsOutput, AWSError>;
   /**
-   * Returns the landing zone ARN for the landing zone deployed in your managed account. This API also creates an ARN for existing accounts that do not yet have a landing zone ARN.  The return limit is one landing zone ARN. 
+   * Returns the landing zone ARN for the landing zone deployed in your managed account. This API also creates an ARN for existing accounts that do not yet have a landing zone ARN.  Returns one landing zone ARN.
    */
   listLandingZones(params: ControlTower.Types.ListLandingZonesInput, callback?: (err: AWSError, data: ControlTower.Types.ListLandingZonesOutput) => void): Request<ControlTower.Types.ListLandingZonesOutput, AWSError>;
   /**
-   * Returns the landing zone ARN for the landing zone deployed in your managed account. This API also creates an ARN for existing accounts that do not yet have a landing zone ARN.  The return limit is one landing zone ARN. 
+   * Returns the landing zone ARN for the landing zone deployed in your managed account. This API also creates an ARN for existing accounts that do not yet have a landing zone ARN.  Returns one landing zone ARN.
    */
   listLandingZones(callback?: (err: AWSError, data: ControlTower.Types.ListLandingZonesOutput) => void): Request<ControlTower.Types.ListLandingZonesOutput, AWSError>;
   /**
@@ -100,11 +100,11 @@ declare class ControlTower extends Service {
    */
   listTagsForResource(callback?: (err: AWSError, data: ControlTower.Types.ListTagsForResourceOutput) => void): Request<ControlTower.Types.ListTagsForResourceOutput, AWSError>;
   /**
-   * This API call resets a landing zone. It starts an asynchronous operation that resets the landing zone to the parameters specified in its original configuration. 
+   * This API call resets a landing zone. It starts an asynchronous operation that resets the landing zone to the parameters specified in its original configuration.
    */
   resetLandingZone(params: ControlTower.Types.ResetLandingZoneInput, callback?: (err: AWSError, data: ControlTower.Types.ResetLandingZoneOutput) => void): Request<ControlTower.Types.ResetLandingZoneOutput, AWSError>;
   /**
-   * This API call resets a landing zone. It starts an asynchronous operation that resets the landing zone to the parameters specified in its original configuration. 
+   * This API call resets a landing zone. It starts an asynchronous operation that resets the landing zone to the parameters specified in its original configuration.
    */
   resetLandingZone(callback?: (err: AWSError, data: ControlTower.Types.ResetLandingZoneOutput) => void): Request<ControlTower.Types.ResetLandingZoneOutput, AWSError>;
   /**
@@ -124,11 +124,19 @@ declare class ControlTower extends Service {
    */
   untagResource(callback?: (err: AWSError, data: ControlTower.Types.UntagResourceOutput) => void): Request<ControlTower.Types.UntagResourceOutput, AWSError>;
   /**
-   * This API call updates the landing zone. It starts an asynchronous operation that updates the landing zone based on the new landing zone version or the updated parameters specified in the updated manifest file. 
+   *  Updates the configuration of an already enabled control. If the enabled control shows an EnablementStatus of SUCCEEDED, supply parameters that are different from the currently configured parameters. Otherwise, Amazon Web Services Control Tower will not accept the request. If the enabled control shows an EnablementStatus of FAILED, Amazon Web Services Control Tower will update the control to match any valid parameters that you supply. If the DriftSummary status for the control shows as DRIFTED, you cannot call this API. Instead, you can update the control by calling DisableControl and again calling EnableControl, or you can run an extending governance operation. For usage examples, see  the Amazon Web Services Control Tower User Guide  
+   */
+  updateEnabledControl(params: ControlTower.Types.UpdateEnabledControlInput, callback?: (err: AWSError, data: ControlTower.Types.UpdateEnabledControlOutput) => void): Request<ControlTower.Types.UpdateEnabledControlOutput, AWSError>;
+  /**
+   *  Updates the configuration of an already enabled control. If the enabled control shows an EnablementStatus of SUCCEEDED, supply parameters that are different from the currently configured parameters. Otherwise, Amazon Web Services Control Tower will not accept the request. If the enabled control shows an EnablementStatus of FAILED, Amazon Web Services Control Tower will update the control to match any valid parameters that you supply. If the DriftSummary status for the control shows as DRIFTED, you cannot call this API. Instead, you can update the control by calling DisableControl and again calling EnableControl, or you can run an extending governance operation. For usage examples, see  the Amazon Web Services Control Tower User Guide  
+   */
+  updateEnabledControl(callback?: (err: AWSError, data: ControlTower.Types.UpdateEnabledControlOutput) => void): Request<ControlTower.Types.UpdateEnabledControlOutput, AWSError>;
+  /**
+   * This API call updates the landing zone. It starts an asynchronous operation that updates the landing zone based on the new landing zone version, or on the changed parameters specified in the updated manifest file. 
    */
   updateLandingZone(params: ControlTower.Types.UpdateLandingZoneInput, callback?: (err: AWSError, data: ControlTower.Types.UpdateLandingZoneOutput) => void): Request<ControlTower.Types.UpdateLandingZoneOutput, AWSError>;
   /**
-   * This API call updates the landing zone. It starts an asynchronous operation that updates the landing zone based on the new landing zone version or the updated parameters specified in the updated manifest file. 
+   * This API call updates the landing zone. It starts an asynchronous operation that updates the landing zone based on the new landing zone version, or on the changed parameters specified in the updated manifest file. 
    */
   updateLandingZone(callback?: (err: AWSError, data: ControlTower.Types.UpdateLandingZoneOutput) => void): Request<ControlTower.Types.UpdateLandingZoneOutput, AWSError>;
 }
@@ -158,7 +166,7 @@ declare namespace ControlTower {
     statusMessage?: String;
   }
   export type ControlOperationStatus = "SUCCEEDED"|"FAILED"|"IN_PROGRESS"|string;
-  export type ControlOperationType = "ENABLE_CONTROL"|"DISABLE_CONTROL"|string;
+  export type ControlOperationType = "ENABLE_CONTROL"|"DISABLE_CONTROL"|"UPDATE_ENABLED_CONTROL"|string;
   export interface CreateLandingZoneInput {
     /**
      * The manifest.yaml file is a text file that describes your Amazon Web Services resources. For examples, review The manifest file. 
@@ -169,35 +177,35 @@ declare namespace ControlTower {
      */
     tags?: TagMap;
     /**
-     * The landing zone version. 
+     * The landing zone version, for example, 3.0.
      */
     version: LandingZoneVersion;
   }
   export interface CreateLandingZoneOutput {
     /**
-     * The ARN of the landing zone. 
+     * The ARN of the landing zone resource.
      */
     arn: Arn;
     /**
-     * A unique identifier assigned to a CreateLandingZone operation. You can use this identifier as an input of GetLandingZoneOperation to check the operation's status. 
+     * A unique identifier assigned to a CreateLandingZone operation. You can use this identifier as an input of GetLandingZoneOperation to check the operation's status.
      */
     operationIdentifier: OperationIdentifier;
   }
   export interface DeleteLandingZoneInput {
     /**
-     * The unique identifier of the landing zone. 
+     * The unique identifier of the landing zone.
      */
     landingZoneIdentifier: String;
   }
   export interface DeleteLandingZoneOutput {
     /**
-     * A unique identifier assigned to a DeleteLandingZone operation. You can use this identifier as an input of GetLandingZoneOperation to check the operation's status. 
+     * &gt;A unique identifier assigned to a DeleteLandingZone operation. You can use this identifier as an input parameter of GetLandingZoneOperation to check the operation's status.
      */
     operationIdentifier: OperationIdentifier;
   }
   export interface DisableControlInput {
     /**
-     * The ARN of the control. Only Strongly recommended and Elective controls are permitted, with the exception of the Region deny control. For information on how to find the controlIdentifier, see the overview page.
+     * The ARN of the control. Only Strongly recommended and Elective controls are permitted, with the exception of the landing zone Region deny control. For information on how to find the controlIdentifier, see the overview page.
      */
     controlIdentifier: ControlIdentifier;
     /**
@@ -211,6 +219,8 @@ declare namespace ControlTower {
      */
     operationIdentifier: OperationIdentifier;
   }
+  export interface Document {
+  }
   export type DriftStatus = "DRIFTED"|"IN_SYNC"|"NOT_CHECKING"|"UNKNOWN"|string;
   export interface DriftStatusSummary {
     /**
@@ -220,9 +230,13 @@ declare namespace ControlTower {
   }
   export interface EnableControlInput {
     /**
-     * The ARN of the control. Only Strongly recommended and Elective controls are permitted, with the exception of the Region deny control. For information on how to find the controlIdentifier, see the overview page.
+     * The ARN of the control. Only Strongly recommended and Elective controls are permitted, with the exception of the landing zone Region deny control. For information on how to find the controlIdentifier, see the overview page.
      */
     controlIdentifier: ControlIdentifier;
+    /**
+     * An array of EnabledControlParameter objects
+     */
+    parameters?: EnabledControlParameters;
     /**
      * Tags to be applied to the EnabledControl resource.
      */
@@ -255,6 +269,10 @@ declare namespace ControlTower {
      * The drift status of the enabled control.
      */
     driftStatusSummary?: DriftStatusSummary;
+    /**
+     * Array of EnabledControlParameter objects.
+     */
+    parameters?: EnabledControlParameterSummaries;
     /**
      * The deployment summary of the enabled control.
      */
@@ -268,6 +286,28 @@ declare namespace ControlTower {
      */
     targetRegions?: TargetRegions;
   }
+  export interface EnabledControlParameter {
+    /**
+     * The key of a key/value pair. It is of type string.
+     */
+    key: String;
+    /**
+     * The value of a key/value pair. It can be of type array string, number, object, or boolean. 
+     */
+    value: Document;
+  }
+  export type EnabledControlParameterSummaries = EnabledControlParameterSummary[];
+  export interface EnabledControlParameterSummary {
+    /**
+     * The key of a key/value pair.
+     */
+    key: String;
+    /**
+     * The value of a key/value pair.
+     */
+    value: Document;
+  }
+  export type EnabledControlParameters = EnabledControlParameter[];
   export interface EnabledControlSummary {
     /**
      * The ARN of the enabled control.
@@ -286,7 +326,7 @@ declare namespace ControlTower {
      */
     statusSummary?: EnablementStatusSummary;
     /**
-     *  The ARN of the organizational unit. 
+     * The ARN of the organizational unit.
      */
     targetIdentifier?: TargetIdentifier;
   }
@@ -328,39 +368,39 @@ declare namespace ControlTower {
   }
   export interface GetLandingZoneInput {
     /**
-     * The unique identifier of the landing zone. 
+     * The unique identifier of the landing zone.
      */
     landingZoneIdentifier: String;
   }
   export interface GetLandingZoneOperationInput {
     /**
-     * A unique identifier assigned to a landing zone operation. 
+     * A unique identifier assigned to a landing zone operation.
      */
     operationIdentifier: OperationIdentifier;
   }
   export interface GetLandingZoneOperationOutput {
     /**
-     * The landing zone operation details. 
+     * Details about a landing zone operation.
      */
     operationDetails: LandingZoneOperationDetail;
   }
   export interface GetLandingZoneOutput {
     /**
-     * Information about the landing zone. 
+     * Information about the landing zone.
      */
     landingZone: LandingZoneDetail;
   }
   export interface LandingZoneDetail {
     /**
-     * The ARN of the landing zone. 
+     * The ARN of the landing zone.
      */
     arn?: Arn;
     /**
-     * The drift status of the landing zone. 
+     * The drift status of the landing zone.
      */
     driftStatus?: LandingZoneDriftStatusSummary;
     /**
-     * The latest available version of the landing zone. 
+     * The latest available version of the landing zone.
      */
     latestAvailableVersion?: LandingZoneVersion;
     /**
@@ -368,11 +408,11 @@ declare namespace ControlTower {
      */
     manifest: Manifest;
     /**
-     * The landing zone deployment status.  Valid values:    ACTIVE: The landing zone is actively deployed.     PROCESSING: The landing zone is processing deployment.     FAILED: The landing zone failed deployment.   
+     * The landing zone deployment status.
      */
     status?: LandingZoneStatus;
     /**
-     * The landing zone's current deployed version. 
+     * The landing zone's current deployed version.
      */
     version: LandingZoneVersion;
   }
@@ -385,7 +425,7 @@ declare namespace ControlTower {
   }
   export interface LandingZoneOperationDetail {
     /**
-     * The landing zone operation end time. 
+     * The landing zone operation end time.
      */
     endTime?: Timestamp;
     /**
@@ -393,15 +433,15 @@ declare namespace ControlTower {
      */
     operationType?: LandingZoneOperationType;
     /**
-     * The landing zone operation start time. 
+     * The landing zone operation start time.
      */
     startTime?: Timestamp;
     /**
-     * The landing zone operation status.  Valid values:    SUCCEEDED: The landing zone operation succeeded.     IN_PROGRESS: The landing zone operation is in progress.     FAILED: The landing zone operation failed.   
+     * Valid values:    SUCCEEDED: The landing zone operation succeeded.     IN_PROGRESS: The landing zone operation is in progress.     FAILED: The landing zone operation failed.   
      */
     status?: LandingZoneOperationStatus;
     /**
-     * If the operation result is FAILED, this string contains a message explaining why the operation failed. 
+     * If the operation result is FAILED, this string contains a message explaining why the operation failed.
      */
     statusMessage?: String;
   }
@@ -410,7 +450,7 @@ declare namespace ControlTower {
   export type LandingZoneStatus = "ACTIVE"|"PROCESSING"|"FAILED"|string;
   export interface LandingZoneSummary {
     /**
-     * The ARN of the landing zone. 
+     * The ARN of the landing zone.
      */
     arn?: Arn;
   }
@@ -435,28 +475,28 @@ declare namespace ControlTower {
      */
     enabledControls: EnabledControls;
     /**
-     * Retrieves the next page of results. If the string is empty, the current response is the end of the results.
+     * Retrieves the next page of results. If the string is empty, the response is the end of the results.
      */
     nextToken?: String;
   }
   export interface ListLandingZonesInput {
     /**
-     * The maximum number of returned landing zone ARNs. 
+     * The maximum number of returned landing zone ARNs, which is one.
      */
     maxResults?: ListLandingZonesMaxResults;
     /**
-     * The token to continue the list from a previous API call with the same parameters. 
+     * The token to continue the list from a previous API call with the same parameters.
      */
     nextToken?: String;
   }
   export type ListLandingZonesMaxResults = number;
   export interface ListLandingZonesOutput {
     /**
-     * The ARN of the landing zone. 
+     * The ARN of the landing zone.
      */
     landingZones: ListLandingZonesOutputLandingZonesList;
     /**
-     * Retrieves the next page of results. If the string is empty, the current response is the end of the results. 
+     * Retrieves the next page of results. If the string is empty, the response is the end of the results.
      */
     nextToken?: String;
   }
@@ -486,13 +526,13 @@ declare namespace ControlTower {
   export type RegionName = string;
   export interface ResetLandingZoneInput {
     /**
-     * The unique identifier of the landing zone. 
+     * The unique identifier of the landing zone.
      */
     landingZoneIdentifier: String;
   }
   export interface ResetLandingZoneOutput {
     /**
-     * A unique identifier assigned to a ResetLandingZone operation. You can use this identifier as an input of GetLandingZoneOperation to check the operation's status.
+     * A unique identifier assigned to a ResetLandingZone operation. You can use this identifier as an input parameter of GetLandingZoneOperation to check the operation's status.
      */
     operationIdentifier: OperationIdentifier;
   }
@@ -529,17 +569,33 @@ declare namespace ControlTower {
   }
   export interface UntagResourceOutput {
   }
+  export interface UpdateEnabledControlInput {
+    /**
+     *  The ARN of the enabled control that will be updated. 
+     */
+    enabledControlIdentifier: Arn;
+    /**
+     * A key/value pair, where Key is of type String and Value is of type Document.
+     */
+    parameters: EnabledControlParameters;
+  }
+  export interface UpdateEnabledControlOutput {
+    /**
+     *  The operation identifier for this UpdateEnabledControl operation. 
+     */
+    operationIdentifier: OperationIdentifier;
+  }
   export interface UpdateLandingZoneInput {
     /**
-     * The unique identifier of the landing zone. 
+     * The unique identifier of the landing zone.
      */
     landingZoneIdentifier: String;
     /**
-     * The manifest.yaml file is a text file that describes your Amazon Web Services resources. For examples, review The manifest file 
+     * The manifest.yaml file is a text file that describes your Amazon Web Services resources. For examples, review The manifest file.
      */
     manifest: Manifest;
     /**
-     * The landing zone version. 
+     * The landing zone version, for example, 3.2.
      */
     version: LandingZoneVersion;
   }

package/clients/efs.d.ts

@@ -36,11 +36,11 @@ declare class EFS extends Service {
    */
   createMountTarget(callback?: (err: AWSError, data: EFS.Types.MountTargetDescription) => void): Request<EFS.Types.MountTargetDescription, AWSError>;
   /**
-   * Creates a replication configuration that replicates an existing EFS file system to a new, read-only file system. For more information, see Amazon EFS replication in the Amazon EFS User Guide. The replication configuration specifies the following:    Source file system - An existing EFS file system that you want replicated. The source file system cannot be a destination file system in an existing replication configuration.    Destination file system configuration - The configuration of the destination file system to which the source file system will be replicated. There can only be one destination file system in a replication configuration. The destination file system configuration consists of the following properties:    Amazon Web Services Region - The Amazon Web Services Region in which the destination file system is created. Amazon EFS replication is available in all Amazon Web Services Regions in which EFS is available. To use EFS replication in a Region that is disabled by default, you must first opt in to the Region. For more information, see Managing Amazon Web Services Regions in the Amazon Web Services General Reference Reference Guide     Availability Zone - If you want the destination file system to use EFS One Zone availability, you must specify the Availability Zone to create the file system in. For more information about EFS storage classes, see  Amazon EFS storage classes in the Amazon EFS User Guide.    Encryption - All destination file systems are created with encryption at rest enabled. You can specify the Key Management Service (KMS) key that is used to encrypt the destination file system. If you don't specify a KMS key, your service-managed KMS key for Amazon EFS is used.   After the file system is created, you cannot change the KMS key.      The following properties are set by default:    Performance mode - The destination file system's performance mode matches that of the source file system, unless the destination file system uses EFS One Zone storage. In that case, the General Purpose performance mode is used. The performance mode cannot be changed.    Throughput mode - The destination file system's throughput mode matches that of the source file system. After the file system is created, you can modify the throughput mode.   The following properties are turned off by default:    Lifecycle management – Lifecycle management is not enabled on the destination file system. After the destination file system is created, you can enable it.    Automatic backups – Automatic daily backups are enabled on the destination file system. After the file system is created, you can change this setting.   For more information, see Amazon EFS replication in the Amazon EFS User Guide.
+   * Creates a replication configuration that replicates an existing EFS file system to a new, read-only file system. For more information, see Amazon EFS replication in the Amazon EFS User Guide. The replication configuration specifies the following:    Source file system – The EFS file system that you want replicated. The source file system cannot be a destination file system in an existing replication configuration.    Amazon Web Services Region – The Amazon Web Services Region in which the destination file system is created. Amazon EFS replication is available in all Amazon Web Services Regions in which EFS is available. The Region must be enabled. For more information, see Managing Amazon Web Services Regions in the Amazon Web Services General Reference Reference Guide.    Destination file system configuration – The configuration of the destination file system to which the source file system will be replicated. There can only be one destination file system in a replication configuration.  Parameters for the replication configuration include:    File system ID – The ID of the destination file system for the replication. If no ID is provided, then EFS creates a new file system with the default settings. For existing file systems, the file system's replication overwrite protection must be disabled. For more information, see  Replicating to an existing file system.    Availability Zone – If you want the destination file system to use One Zone storage, you must specify the Availability Zone to create the file system in. For more information, see  EFS file system types in the Amazon EFS User Guide.    Encryption – All destination file systems are created with encryption at rest enabled. You can specify the Key Management Service (KMS) key that is used to encrypt the destination file system. If you don't specify a KMS key, your service-managed KMS key for Amazon EFS is used.   After the file system is created, you cannot change the KMS key.       After the file system is created, you cannot change the KMS key.  For new destination file systems, the following properties are set by default:    Performance mode - The destination file system's performance mode matches that of the source file system, unless the destination file system uses EFS One Zone storage. In that case, the General Purpose performance mode is used. The performance mode cannot be changed.    Throughput mode - The destination file system's throughput mode matches that of the source file system. After the file system is created, you can modify the throughput mode.      Lifecycle management – Lifecycle management is not enabled on the destination file system. After the destination file system is created, you can enable lifecycle management.    Automatic backups – Automatic daily backups are enabled on the destination file system. After the file system is created, you can change this setting.   For more information, see Amazon EFS replication in the Amazon EFS User Guide.
    */
   createReplicationConfiguration(params: EFS.Types.CreateReplicationConfigurationRequest, callback?: (err: AWSError, data: EFS.Types.ReplicationConfigurationDescription) => void): Request<EFS.Types.ReplicationConfigurationDescription, AWSError>;
   /**
-   * Creates a replication configuration that replicates an existing EFS file system to a new, read-only file system. For more information, see Amazon EFS replication in the Amazon EFS User Guide. The replication configuration specifies the following:    Source file system - An existing EFS file system that you want replicated. The source file system cannot be a destination file system in an existing replication configuration.    Destination file system configuration - The configuration of the destination file system to which the source file system will be replicated. There can only be one destination file system in a replication configuration. The destination file system configuration consists of the following properties:    Amazon Web Services Region - The Amazon Web Services Region in which the destination file system is created. Amazon EFS replication is available in all Amazon Web Services Regions in which EFS is available. To use EFS replication in a Region that is disabled by default, you must first opt in to the Region. For more information, see Managing Amazon Web Services Regions in the Amazon Web Services General Reference Reference Guide     Availability Zone - If you want the destination file system to use EFS One Zone availability, you must specify the Availability Zone to create the file system in. For more information about EFS storage classes, see  Amazon EFS storage classes in the Amazon EFS User Guide.    Encryption - All destination file systems are created with encryption at rest enabled. You can specify the Key Management Service (KMS) key that is used to encrypt the destination file system. If you don't specify a KMS key, your service-managed KMS key for Amazon EFS is used.   After the file system is created, you cannot change the KMS key.      The following properties are set by default:    Performance mode - The destination file system's performance mode matches that of the source file system, unless the destination file system uses EFS One Zone storage. In that case, the General Purpose performance mode is used. The performance mode cannot be changed.    Throughput mode - The destination file system's throughput mode matches that of the source file system. After the file system is created, you can modify the throughput mode.   The following properties are turned off by default:    Lifecycle management – Lifecycle management is not enabled on the destination file system. After the destination file system is created, you can enable it.    Automatic backups – Automatic daily backups are enabled on the destination file system. After the file system is created, you can change this setting.   For more information, see Amazon EFS replication in the Amazon EFS User Guide.
+   * Creates a replication configuration that replicates an existing EFS file system to a new, read-only file system. For more information, see Amazon EFS replication in the Amazon EFS User Guide. The replication configuration specifies the following:    Source file system – The EFS file system that you want replicated. The source file system cannot be a destination file system in an existing replication configuration.    Amazon Web Services Region – The Amazon Web Services Region in which the destination file system is created. Amazon EFS replication is available in all Amazon Web Services Regions in which EFS is available. The Region must be enabled. For more information, see Managing Amazon Web Services Regions in the Amazon Web Services General Reference Reference Guide.    Destination file system configuration – The configuration of the destination file system to which the source file system will be replicated. There can only be one destination file system in a replication configuration.  Parameters for the replication configuration include:    File system ID – The ID of the destination file system for the replication. If no ID is provided, then EFS creates a new file system with the default settings. For existing file systems, the file system's replication overwrite protection must be disabled. For more information, see  Replicating to an existing file system.    Availability Zone – If you want the destination file system to use One Zone storage, you must specify the Availability Zone to create the file system in. For more information, see  EFS file system types in the Amazon EFS User Guide.    Encryption – All destination file systems are created with encryption at rest enabled. You can specify the Key Management Service (KMS) key that is used to encrypt the destination file system. If you don't specify a KMS key, your service-managed KMS key for Amazon EFS is used.   After the file system is created, you cannot change the KMS key.       After the file system is created, you cannot change the KMS key.  For new destination file systems, the following properties are set by default:    Performance mode - The destination file system's performance mode matches that of the source file system, unless the destination file system uses EFS One Zone storage. In that case, the General Purpose performance mode is used. The performance mode cannot be changed.    Throughput mode - The destination file system's throughput mode matches that of the source file system. After the file system is created, you can modify the throughput mode.      Lifecycle management – Lifecycle management is not enabled on the destination file system. After the destination file system is created, you can enable lifecycle management.    Automatic backups – Automatic daily backups are enabled on the destination file system. After the file system is created, you can change this setting.   For more information, see Amazon EFS replication in the Amazon EFS User Guide.
    */
   createReplicationConfiguration(callback?: (err: AWSError, data: EFS.Types.ReplicationConfigurationDescription) => void): Request<EFS.Types.ReplicationConfigurationDescription, AWSError>;
   /**
@@ -84,11 +84,11 @@ declare class EFS extends Service {
    */
   deleteMountTarget(callback?: (err: AWSError, data: {}) => void): Request<{}, AWSError>;
   /**
-   * Deletes an existing replication configuration. Deleting a replication configuration ends the replication process. After a replication configuration is deleted, the destination file system is no longer read-only. You can write to the destination file system after its status becomes Writeable.
+   * Deletes a replication configuration. Deleting a replication configuration ends the replication process. After a replication configuration is deleted, the destination file system becomes Writeable and its replication overwrite protection is re-enabled. For more information, see Delete a replication configuration. This operation requires permissions for the elasticfilesystem:DeleteReplicationConfiguration action. 
    */
   deleteReplicationConfiguration(params: EFS.Types.DeleteReplicationConfigurationRequest, callback?: (err: AWSError, data: {}) => void): Request<{}, AWSError>;
   /**
-   * Deletes an existing replication configuration. Deleting a replication configuration ends the replication process. After a replication configuration is deleted, the destination file system is no longer read-only. You can write to the destination file system after its status becomes Writeable.
+   * Deletes a replication configuration. Deleting a replication configuration ends the replication process. After a replication configuration is deleted, the destination file system becomes Writeable and its replication overwrite protection is re-enabled. For more information, see Delete a replication configuration. This operation requires permissions for the elasticfilesystem:DeleteReplicationConfiguration action. 
    */
   deleteReplicationConfiguration(callback?: (err: AWSError, data: {}) => void): Request<{}, AWSError>;
   /**
@@ -140,11 +140,11 @@ declare class EFS extends Service {
    */
   describeFileSystems(callback?: (err: AWSError, data: EFS.Types.DescribeFileSystemsResponse) => void): Request<EFS.Types.DescribeFileSystemsResponse, AWSError>;
   /**
-   * Returns the current LifecycleConfiguration object for the specified Amazon EFS file system. Llifecycle management uses the LifecycleConfiguration object to identify when to move files between storage classes. For a file system without a LifecycleConfiguration object, the call returns an empty array in the response. This operation requires permissions for the elasticfilesystem:DescribeLifecycleConfiguration operation.
+   * Returns the current LifecycleConfiguration object for the specified Amazon EFS file system. Lifecycle management uses the LifecycleConfiguration object to identify when to move files between storage classes. For a file system without a LifecycleConfiguration object, the call returns an empty array in the response. This operation requires permissions for the elasticfilesystem:DescribeLifecycleConfiguration operation.
    */
   describeLifecycleConfiguration(params: EFS.Types.DescribeLifecycleConfigurationRequest, callback?: (err: AWSError, data: EFS.Types.LifecycleConfigurationDescription) => void): Request<EFS.Types.LifecycleConfigurationDescription, AWSError>;
   /**
-   * Returns the current LifecycleConfiguration object for the specified Amazon EFS file system. Llifecycle management uses the LifecycleConfiguration object to identify when to move files between storage classes. For a file system without a LifecycleConfiguration object, the call returns an empty array in the response. This operation requires permissions for the elasticfilesystem:DescribeLifecycleConfiguration operation.
+   * Returns the current LifecycleConfiguration object for the specified Amazon EFS file system. Lifecycle management uses the LifecycleConfiguration object to identify when to move files between storage classes. For a file system without a LifecycleConfiguration object, the call returns an empty array in the response. This operation requires permissions for the elasticfilesystem:DescribeLifecycleConfiguration operation.
    */
   describeLifecycleConfiguration(callback?: (err: AWSError, data: EFS.Types.LifecycleConfigurationDescription) => void): Request<EFS.Types.LifecycleConfigurationDescription, AWSError>;
   /**
@@ -220,11 +220,11 @@ declare class EFS extends Service {
    */
   putFileSystemPolicy(callback?: (err: AWSError, data: EFS.Types.FileSystemPolicyDescription) => void): Request<EFS.Types.FileSystemPolicyDescription, AWSError>;
   /**
-   * Use this action to manage storage of your file system. A LifecycleConfiguration consists of one or more LifecyclePolicy objects that define the following:     TransitionToIA  – When to move files in the file system from primary storage (Standard storage class) into the Infrequent Access (IA) storage.     TransitionToArchive  – When to move files in the file system from their current storage class (either IA or Standard storage) into the Archive storage. File systems cannot transition into Archive storage before transitioning into IA storage. Therefore, TransitionToArchive must either not be set or must be later than TransitionToIA.   The Archive storage class is available only for file systems that use the Elastic Throughput mode and the General Purpose Performance mode.       TransitionToPrimaryStorageClass  – Whether to move files in the file system back to primary storage (Standard storage class) after they are accessed in IA or Archive storage.   For more information, see  Managing file system storage. Each Amazon EFS file system supports one lifecycle configuration, which applies to all files in the file system. If a LifecycleConfiguration object already exists for the specified file system, a PutLifecycleConfiguration call modifies the existing configuration. A PutLifecycleConfiguration call with an empty LifecyclePolicies array in the request body deletes any existing LifecycleConfiguration for the file system. In the request, specify the following:    The ID for the file system for which you are enabling, disabling, or modifying Lifecycle management.   A LifecyclePolicies array of LifecyclePolicy objects that define when to move files to IA storage, to Archive storage, and back to primary storage.  Amazon EFS requires that each LifecyclePolicy object have only have a single transition, so the LifecyclePolicies array needs to be structured with separate LifecyclePolicy objects. See the example requests in the following section for more information.    This operation requires permissions for the elasticfilesystem:PutLifecycleConfiguration operation. To apply a LifecycleConfiguration object to an encrypted file system, you need the same Key Management Service permissions as when you created the encrypted file system.
+   * Use this action to manage storage for your file system. A LifecycleConfiguration consists of one or more LifecyclePolicy objects that define the following:     TransitionToIA  – When to move files in the file system from primary storage (Standard storage class) into the Infrequent Access (IA) storage.     TransitionToArchive  – When to move files in the file system from their current storage class (either IA or Standard storage) into the Archive storage. File systems cannot transition into Archive storage before transitioning into IA storage. Therefore, TransitionToArchive must either not be set or must be later than TransitionToIA.   The Archive storage class is available only for file systems that use the Elastic Throughput mode and the General Purpose Performance mode.         TransitionToPrimaryStorageClass  – Whether to move files in the file system back to primary storage (Standard storage class) after they are accessed in IA or Archive storage.   For more information, see  Managing file system storage. Each Amazon EFS file system supports one lifecycle configuration, which applies to all files in the file system. If a LifecycleConfiguration object already exists for the specified file system, a PutLifecycleConfiguration call modifies the existing configuration. A PutLifecycleConfiguration call with an empty LifecyclePolicies array in the request body deletes any existing LifecycleConfiguration. In the request, specify the following:    The ID for the file system for which you are enabling, disabling, or modifying Lifecycle management.   A LifecyclePolicies array of LifecyclePolicy objects that define when to move files to IA storage, to Archive storage, and back to primary storage.  Amazon EFS requires that each LifecyclePolicy object have only have a single transition, so the LifecyclePolicies array needs to be structured with separate LifecyclePolicy objects. See the example requests in the following section for more information.    This operation requires permissions for the elasticfilesystem:PutLifecycleConfiguration operation. To apply a LifecycleConfiguration object to an encrypted file system, you need the same Key Management Service permissions as when you created the encrypted file system.
    */
   putLifecycleConfiguration(params: EFS.Types.PutLifecycleConfigurationRequest, callback?: (err: AWSError, data: EFS.Types.LifecycleConfigurationDescription) => void): Request<EFS.Types.LifecycleConfigurationDescription, AWSError>;
   /**
-   * Use this action to manage storage of your file system. A LifecycleConfiguration consists of one or more LifecyclePolicy objects that define the following:     TransitionToIA  – When to move files in the file system from primary storage (Standard storage class) into the Infrequent Access (IA) storage.     TransitionToArchive  – When to move files in the file system from their current storage class (either IA or Standard storage) into the Archive storage. File systems cannot transition into Archive storage before transitioning into IA storage. Therefore, TransitionToArchive must either not be set or must be later than TransitionToIA.   The Archive storage class is available only for file systems that use the Elastic Throughput mode and the General Purpose Performance mode.       TransitionToPrimaryStorageClass  – Whether to move files in the file system back to primary storage (Standard storage class) after they are accessed in IA or Archive storage.   For more information, see  Managing file system storage. Each Amazon EFS file system supports one lifecycle configuration, which applies to all files in the file system. If a LifecycleConfiguration object already exists for the specified file system, a PutLifecycleConfiguration call modifies the existing configuration. A PutLifecycleConfiguration call with an empty LifecyclePolicies array in the request body deletes any existing LifecycleConfiguration for the file system. In the request, specify the following:    The ID for the file system for which you are enabling, disabling, or modifying Lifecycle management.   A LifecyclePolicies array of LifecyclePolicy objects that define when to move files to IA storage, to Archive storage, and back to primary storage.  Amazon EFS requires that each LifecyclePolicy object have only have a single transition, so the LifecyclePolicies array needs to be structured with separate LifecyclePolicy objects. See the example requests in the following section for more information.    This operation requires permissions for the elasticfilesystem:PutLifecycleConfiguration operation. To apply a LifecycleConfiguration object to an encrypted file system, you need the same Key Management Service permissions as when you created the encrypted file system.
+   * Use this action to manage storage for your file system. A LifecycleConfiguration consists of one or more LifecyclePolicy objects that define the following:     TransitionToIA  – When to move files in the file system from primary storage (Standard storage class) into the Infrequent Access (IA) storage.     TransitionToArchive  – When to move files in the file system from their current storage class (either IA or Standard storage) into the Archive storage. File systems cannot transition into Archive storage before transitioning into IA storage. Therefore, TransitionToArchive must either not be set or must be later than TransitionToIA.   The Archive storage class is available only for file systems that use the Elastic Throughput mode and the General Purpose Performance mode.         TransitionToPrimaryStorageClass  – Whether to move files in the file system back to primary storage (Standard storage class) after they are accessed in IA or Archive storage.   For more information, see  Managing file system storage. Each Amazon EFS file system supports one lifecycle configuration, which applies to all files in the file system. If a LifecycleConfiguration object already exists for the specified file system, a PutLifecycleConfiguration call modifies the existing configuration. A PutLifecycleConfiguration call with an empty LifecyclePolicies array in the request body deletes any existing LifecycleConfiguration. In the request, specify the following:    The ID for the file system for which you are enabling, disabling, or modifying Lifecycle management.   A LifecyclePolicies array of LifecyclePolicy objects that define when to move files to IA storage, to Archive storage, and back to primary storage.  Amazon EFS requires that each LifecyclePolicy object have only have a single transition, so the LifecyclePolicies array needs to be structured with separate LifecyclePolicy objects. See the example requests in the following section for more information.    This operation requires permissions for the elasticfilesystem:PutLifecycleConfiguration operation. To apply a LifecycleConfiguration object to an encrypted file system, you need the same Key Management Service permissions as when you created the encrypted file system.
    */
   putLifecycleConfiguration(callback?: (err: AWSError, data: EFS.Types.LifecycleConfigurationDescription) => void): Request<EFS.Types.LifecycleConfigurationDescription, AWSError>;
   /**
@@ -251,6 +251,14 @@ declare class EFS extends Service {
    * Updates the throughput mode or the amount of provisioned throughput of an existing file system.
    */
   updateFileSystem(callback?: (err: AWSError, data: EFS.Types.FileSystemDescription) => void): Request<EFS.Types.FileSystemDescription, AWSError>;
+  /**
+   * Updates protection on the file system. This operation requires permissions for the elasticfilesystem:UpdateFileSystemProtection action. 
+   */
+  updateFileSystemProtection(params: EFS.Types.UpdateFileSystemProtectionRequest, callback?: (err: AWSError, data: EFS.Types.FileSystemProtectionDescription) => void): Request<EFS.Types.FileSystemProtectionDescription, AWSError>;
+  /**
+   * Updates protection on the file system. This operation requires permissions for the elasticfilesystem:UpdateFileSystemProtection action. 
+   */
+  updateFileSystemProtection(callback?: (err: AWSError, data: EFS.Types.FileSystemProtectionDescription) => void): Request<EFS.Types.FileSystemProtectionDescription, AWSError>;
 }
 declare namespace EFS {
   export type AccessPointArn = string;
@@ -695,9 +703,13 @@ declare namespace EFS {
      */
     AvailabilityZoneName?: AvailabilityZoneName;
     /**
-     * Specifies the Key Management Service (KMS) key that you want to use to encrypt the destination file system. If you do not specify a KMS key, Amazon EFS uses your default KMS key for Amazon EFS, /aws/elasticfilesystem. This ID can be in one of the following formats:   Key ID - The unique identifier of the key, for example 1234abcd-12ab-34cd-56ef-1234567890ab.   ARN - The Amazon Resource Name (ARN) for the key, for example arn:aws:kms:us-west-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab.   Key alias - A previously created display name for a key, for example alias/projectKey1.   Key alias ARN - The ARN for a key alias, for example arn:aws:kms:us-west-2:444455556666:alias/projectKey1.  
+     * Specify the Key Management Service (KMS) key that you want to use to encrypt the destination file system. If you do not specify a KMS key, Amazon EFS uses your default KMS key for Amazon EFS, /aws/elasticfilesystem. This ID can be in one of the following formats:   Key ID - The unique identifier of the key, for example 1234abcd-12ab-34cd-56ef-1234567890ab.   ARN - The Amazon Resource Name (ARN) for the key, for example arn:aws:kms:us-west-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab.   Key alias - A previously created display name for a key, for example alias/projectKey1.   Key alias ARN - The ARN for a key alias, for example arn:aws:kms:us-west-2:444455556666:alias/projectKey1.  
      */
     KmsKeyId?: KmsKeyId;
+    /**
+     * The ID of the file system to use for the destination. The file system's replication overwrite replication must be disabled. If you do not provide an ID, then EFS creates a new file system for the replication destination.
+     */
+    FileSystemId?: FileSystemId;
   }
   export type Destinations = Destination[];
   export type DestinationsToCreate = DestinationToCreate[];
@@ -772,6 +784,10 @@ declare namespace EFS {
      * The tags associated with the file system, presented as an array of Tag objects.
      */
     Tags: Tags;
+    /**
+     * Describes the protection on the file system. 
+     */
+    FileSystemProtection?: FileSystemProtectionDescription;
   }
   export type FileSystemDescriptions = FileSystemDescription[];
   export type FileSystemId = string;
@@ -786,6 +802,12 @@ declare namespace EFS {
      */
     Policy?: Policy;
   }
+  export interface FileSystemProtectionDescription {
+    /**
+     * The status of the file system's replication overwrite protection.    ENABLED – The file system cannot be used as the destination file system in a replication configuration. The file system is writeable. Replication overwrite protection is ENABLED by default.     DISABLED – The file system can be used as the destination file system in a replication configuration. The file system is read-only and can only be modified by EFS replication.    REPLICATING – The file system is being used as the destination file system in a replication configuration. The file system is read-only and is only modified only by EFS replication.   If the replication configuration is deleted, the file system's replication overwrite protection is re-enabled, the file system becomes writeable.
+     */
+    ReplicationOverwriteProtection?: ReplicationOverwriteProtection;
+  }
   export interface FileSystemSize {
     /**
      * The latest known metered size (in bytes) of data stored in the file system.
@@ -1010,6 +1032,7 @@ declare namespace EFS {
     Destinations: Destinations;
   }
   export type ReplicationConfigurationDescriptions = ReplicationConfigurationDescription[];
+  export type ReplicationOverwriteProtection = "ENABLED"|"DISABLED"|"REPLICATING"|string;
   export type ReplicationStatus = "ENABLED"|"ENABLING"|"DELETING"|"ERROR"|"PAUSED"|"PAUSING"|string;
   export type Resource = "FILE_SYSTEM"|"MOUNT_TARGET"|string;
   export type ResourceId = string;
@@ -1081,6 +1104,16 @@ declare namespace EFS {
      */
     TagKeys: TagKeys;
   }
+  export interface UpdateFileSystemProtectionRequest {
+    /**
+     * The ID of the file system to update. 
+     */
+    FileSystemId: FileSystemId;
+    /**
+     * The status of the file system's replication overwrite protection.    ENABLED – The file system cannot be used as the destination file system in a replication configuration. The file system is writeable. Replication overwrite protection is ENABLED by default.     DISABLED – The file system can be used as the destination file system in a replication configuration. The file system is read-only and can only be modified by EFS replication.    REPLICATING – The file system is being used as the destination file system in a replication configuration. The file system is read-only and is only modified only by EFS replication.   If the replication configuration is deleted, the file system's replication overwrite protection is re-enabled, the file system becomes writeable.
+     */
+    ReplicationOverwriteProtection?: ReplicationOverwriteProtection;
+  }
   export interface UpdateFileSystemRequest {
     /**
      * The ID of the file system that you want to update.