pulumi-alicloud 3.51.0a1710157550__py3-none-any.whl → 3.73.0a1736832142__py3-none-any.whl

pulumi_alicloud/rds/instance.py

@@ -4,9 +4,14 @@
 
 import copy
 import warnings
+import sys
 import pulumi
 import pulumi.runtime
 from typing import Any, Mapping, Optional, Sequence, Union, overload
+if sys.version_info >= (3, 11):
+    from typing import NotRequired, TypedDict, TypeAlias
+else:
+    from typing_extensions import NotRequired, TypedDict, TypeAlias
 from .. import _utilities
 from . import outputs
 from ._inputs import *
@@ -37,6 +42,7 @@ class InstanceArgs:
                  db_instance_ip_array_name: Optional[pulumi.Input[str]] = None,
                  db_instance_storage_type: Optional[pulumi.Input[str]] = None,
                  db_is_ignore_case: Optional[pulumi.Input[bool]] = None,
+                 db_param_group_id: Optional[pulumi.Input[str]] = None,
                  db_time_zone: Optional[pulumi.Input[str]] = None,
                  deletion_protection: Optional[pulumi.Input[bool]] = None,
                  direction: Optional[pulumi.Input[str]] = None,
@@ -55,9 +61,11 @@ class InstanceArgs:
                  node_id: Optional[pulumi.Input[str]] = None,
                  parameters: Optional[pulumi.Input[Sequence[pulumi.Input['InstanceParameterArgs']]]] = None,
                  period: Optional[pulumi.Input[int]] = None,
+                 pg_bouncer_enabled: Optional[pulumi.Input[bool]] = None,
                  pg_hba_confs: Optional[pulumi.Input[Sequence[pulumi.Input['InstancePgHbaConfArgs']]]] = None,
                  port: Optional[pulumi.Input[str]] = None,
                  private_ip_address: Optional[pulumi.Input[str]] = None,
+                 recovery_model: Optional[pulumi.Input[str]] = None,
                  released_keep_policy: Optional[pulumi.Input[str]] = None,
                  replication_acl: Optional[pulumi.Input[str]] = None,
                  resource_group_id: Optional[pulumi.Input[str]] = None,
@@ -78,9 +86,10 @@ class InstanceArgs:
                  storage_threshold: Optional[pulumi.Input[int]] = None,
                  storage_upper_bound: Optional[pulumi.Input[int]] = None,
                  switch_time: Optional[pulumi.Input[str]] = None,
-                 tags: Optional[pulumi.Input[Mapping[str, Any]]] = None,
+                 tags: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
                  target_minor_version: Optional[pulumi.Input[str]] = None,
                  tcp_connection_type: Optional[pulumi.Input[str]] = None,
+                 tde_encryption_key: Optional[pulumi.Input[str]] = None,
                  tde_status: Optional[pulumi.Input[str]] = None,
                  upgrade_db_instance_kernel_version: Optional[pulumi.Input[bool]] = None,
                  upgrade_time: Optional[pulumi.Input[str]] = None,
@@ -88,7 +97,8 @@ class InstanceArgs:
                  vswitch_id: Optional[pulumi.Input[str]] = None,
                  whitelist_network_type: Optional[pulumi.Input[str]] = None,
                  zone_id: Optional[pulumi.Input[str]] = None,
-                 zone_id_slave_a: Optional[pulumi.Input[str]] = None):
+                 zone_id_slave_a: Optional[pulumi.Input[str]] = None,
+                 zone_id_slave_b: Optional[pulumi.Input[str]] = None):
         """
         The set of arguments for constructing a Instance resource.
         :param pulumi.Input[str] engine: Database type. Value options: MySQL, SQLServer, PostgreSQL, MariaDB.
@@ -137,7 +147,7 @@ class InstanceArgs:
         :param pulumi.Input[str] babelfish_port: The TDS port of the instance for which Babelfish is enabled.
                
                > **NOTE:** This parameter applies only to ApsaraDB RDS for PostgreSQL instances. For more information about Babelfish for ApsaraDB RDS for PostgreSQL, see [Introduction to Babelfish](https://www.alibabacloud.com/help/en/apsaradb-for-rds/latest/babelfish-for-pg).
-        :param pulumi.Input[str] ca_type: The type of the server certificate. This parameter is supported only when the instance runs PostgreSQL with standard or enhanced SSDs. If you set the SSLEnabled parameter to 1, the default value of this parameter is aliyun. Value range:
+        :param pulumi.Input[str] ca_type: The type of the server certificate. This parameter is supported only when the instance runs PostgreSQL or MySQL with standard or enhanced SSDs. If you set the SSLEnabled parameter to 1, the default value of this parameter is aliyun. **NOTE:** From version 1.231.0, `ca_type` start  support `MySQL` engine. Value range:
                - aliyun: a cloud certificate
                - custom: a custom certificate
         :param pulumi.Input[str] category: The RDS edition of the instance. If you want to create a serverless instance, you must use this value. Valid values:
@@ -145,10 +155,10 @@ class InstanceArgs:
                * **HighAvailability**: High-availability Edition.
                * **AlwaysOn**: Cluster Edition.
                * **Finance**: Enterprise Edition.
-               * **cluster**: MySQL Cluster Edition. (Available in 1.202.0+)
-               * **serverless_basic**: RDS Serverless Basic Edition. This edition is available only for instances that run MySQL and PostgreSQL. (Available in 1.200.0+)
-               * **serverless_standard**: RDS Serverless Basic Edition. This edition is available only for instances that run MySQL and PostgreSQL. (Available in 1.204.0+)
-               * **serverless_ha**: RDS Serverless High-availability Edition for SQL Server. (Available in 1.204.0+)
+               * **cluster**: MySQL Cluster Edition. (Available since 1.202.0)
+               * **serverless_basic**: RDS Serverless Basic Edition. This edition is available only for instances that run MySQL and PostgreSQL. (Available since 1.200.0)
+               * **serverless_standard**: RDS Serverless Basic Edition. This edition is available only for instances that run MySQL and PostgreSQL. (Available since 1.204.0)
+               * **serverless_ha**: RDS Serverless High-availability Edition for SQL Server. (Available since 1.204.0)
                
                > **NOTE:** `zone_id_slave_a` and `zone_id_slave_b` can specify slave zone ids when creating the high-availability or enterprise edition instances. Meanwhile, `vswitch_id` needs to pass in the corresponding vswitch id to the slave zone by order (If the `vswitch_id` is not specified, the classic network version will be created). For example, `zone_id` = "zone-a" and `zone_id_slave_a` = "zone-c", `zone_id_slave_b` = "zone-b", then the `vswitch_id` must be "vsw-zone-a,vsw-zone-c,vsw-zone-b". Of course, you can also choose automatic allocation , for example, `zone_id` = "zone-a" and `zone_id_slave_a` = "Auto",`zone_id_slave_b` = "Auto", then the `vswitch_id` must be "vsw-zone-a,Auto,Auto". The list contains up to 2 slave zone ids , separated by commas.
         :param pulumi.Input[str] client_ca_cert: The public key of the CA that issues client certificates. This parameter is supported only when the instance runs PostgreSQL with standard or enhanced SSDs. If you set the ClientCAEbabled parameter to 1, you must also specify this parameter.
@@ -160,7 +170,7 @@ class InstanceArgs:
                - 1: enables the CRL
                - 0: disables the CRL
         :param pulumi.Input[str] connection_string_prefix: The private connection string prefix. If you want to update public connection string prefix, please use resource rds.Connection connection_prefix.
-               > **NOTE:** The prefix must be 8 to 64 characters in length and can contain letters, digits, and hyphens (-). It cannot contain Chinese characters and special characters ~!#%!^(MISSING)&*=+\\|{};:'",<>/?
+               > **NOTE:** The prefix must be 8 to 64 characters in length and can contain letters, digits, and hyphens (-). It cannot contain Chinese characters and special characters ~!#%^&*=+\\|{};:'",<>/?
         :param pulumi.Input[str] db_instance_ip_array_attribute: The attribute of the IP address whitelist. By default, this parameter is empty.
                
                > **NOTE:** The IP address whitelists that have the hidden attribute are not displayed in the ApsaraDB RDS console. These IP address whitelists are used to access Alibaba Cloud services, such as Data Transmission Service (DTS).
@@ -173,7 +183,9 @@ class InstanceArgs:
                - cloud_essd: specifies to use enhanced SSDs (ESSDs).
                - cloud_essd2: specifies to use enhanced SSDs (ESSDs).
                - cloud_essd3: specifies to use enhanced SSDs (ESSDs).
+               - general_essd: general essd.
         :param pulumi.Input[bool] db_is_ignore_case: Specifies whether table names on the instance are case-sensitive. Valid values: `true`, `false`.
+        :param pulumi.Input[str] db_param_group_id: Parameter template ID. Only MySQL and PostgreSQL support this parameter. If this parameter is not specified, the default parameter template is used. You can also customize a parameter template and use it here.
         :param pulumi.Input[str] db_time_zone: The time zone of the instance. This parameter takes effect only when you set the `Engine` parameter to MySQL or PostgreSQL.
                - If you set the `Engine` parameter to MySQL.
                - This time zone of the instance is in UTC. Valid values: -12:59 to +13:00.
@@ -193,6 +205,11 @@ class InstanceArgs:
                - Immediate: The change immediately takes effect.
                - MaintainTime: The change takes effect during the specified maintenance window. For more information, see ModifyDBInstanceMaintainTime.
         :param pulumi.Input[str] encryption_key: The key id of the KMS. Used for encrypting a disk if not null. Only for PostgreSQL, MySQL and SQLServer.
+               When the instance is PostgreSQL, this parameter can be used to enable, modify, and disable cloud disk encryption.Value range:
+               - ServiceKey: Enable disk encryption using the service-managed key (Default Service CMK) automatically generated by Alibaba Cloud RDS.
+               - <EncryptionKey>: Use a custom key to enable cloud disk encryption or change the current key. For example: 494c98ce-f2b5-48ab-96ab-36c986b6****.
+               - disabled: Turn off cloud disk encryption.
+               > **NOTE:** This parameter is available when the instance runs MySQL.
         :param pulumi.Input[str] force: Specifies whether to enable forcible switching. Valid values:
                - Yes
                - No
@@ -203,8 +220,6 @@ class InstanceArgs:
         :param pulumi.Input[str] ha_config: The primary/secondary switchover mode of the instance. Default value: Auto. Valid values:
                - Auto: The system automatically switches over services from the primary to secondary instances in the event of a fault.
                - Manual: You must manually switch over services from the primary to secondary instances in the event of a fault.
-               
-               > **NOTE:** If you set this parameter to Manual, you must specify the ManualHATime parameter.
         :param pulumi.Input[str] instance_charge_type: Valid values are `Prepaid`, `Postpaid`, `Serverless`, Default to `Postpaid`. Currently, the resource only supports PostPaid to PrePaid. For more information, see [Overview](https://www.alibabacloud.com/help/en/apsaradb-for-rds/latest/what-is-serverless?spm=a2c63.p38356.0.0.772a28cfTAGqIv).
         :param pulumi.Input[str] instance_name: The name of DB instance. It a string of 2 to 256 characters.
         :param pulumi.Input[str] maintain_time: Maintainable time period format of the instance: HH:MMZ-HH:MMZ (UTC time)
@@ -220,9 +235,15 @@ class InstanceArgs:
         :param pulumi.Input[Sequence[pulumi.Input['InstanceParameterArgs']]] parameters: Set of parameters needs to be set after DB instance was launched. Available parameters can refer to the latest docs [View database parameter templates](https://www.alibabacloud.com/help/doc-detail/26284.htm) . See `parameters` below.
         :param pulumi.Input[int] period: The duration that you will buy DB instance (in month). It is valid when instance_charge_type is `PrePaid`. Valid values: [1~9], 12, 24, 36.
                > **NOTE:** The attribute `period` is only used to create Subscription instance or modify the PayAsYouGo instance to Subscription. Once effect, it will not be modified that means running `pulumi up` will not effect the resource.
+        :param pulumi.Input[bool] pg_bouncer_enabled: Modify the PgBouncer feature of the RDS PostgreSQL instance. Valid values:
+               - true: enable.
+               - false: disable.
         :param pulumi.Input[Sequence[pulumi.Input['InstancePgHbaConfArgs']]] pg_hba_confs: The configuration of [AD domain](https://www.alibabacloud.com/help/en/doc-detail/349288.htm) . See `pg_hba_conf` below.
         :param pulumi.Input[str] port: The private port of the database service. If you want to update public port, please use resource rds.Connection port.
         :param pulumi.Input[str] private_ip_address: The private IP address of the instance. The private IP address must be within the Classless Inter-Domain Routing (CIDR) block of the vSwitch that is specified by the VSwitchId parameter.
+        :param pulumi.Input[str] recovery_model: Enable the Simple Recovery Model for an RDS SQL Server Instance.The Simple Recovery Model feature is only supported by the Basic Series of RDS SQL Server instances. Once this feature is enabled, it cannot be disabled.Valid values:
+               - simple: Enable Simple Recovery.
+               > **NOTE:** If you set this parameter to Manual, you must specify the ManualHATime parameter.
         :param pulumi.Input[str] released_keep_policy: The policy based on which ApsaraDB RDS retains archived backup files after the instance is released. Valid values:
                - None: No archived backup files are retained.
                - Lastest: Only the last archived backup file is retained.
@@ -236,13 +257,16 @@ class InstanceArgs:
                - verify-full (supported only when the instance runs PostgreSQL 12 or later)
         :param pulumi.Input[str] resource_group_id: The ID of resource group which the DB instance belongs.
         :param pulumi.Input[str] role_arn: The Alibaba Cloud Resource Name (ARN) of the RAM role.
+               
+               > **NOTE:**  This parameter is not required when you create an instance that runs MySQL, PostgreSQL, or SQL Server. You need to only specify the RoleARN parameter to create an instance that has cloud disk encryption enabled by using the obtained key ID.
+               You can configure RAM authorization to require a RAM user to enable cloud disk encryption when the RAM user is used to create an instance. If cloud disk encryption is disabled during the instance creation, the creation operation fails. To complete the configuration, you can attach the following policy to the RAM user: {"Version":"1","Statement":[{"Effect":"Deny","Action":"rds:CreateDBInstance","Resource":"*","Condition":{"StringEquals":{"rds:DiskEncryptionRequired":"false"}}}]}
         :param pulumi.Input[str] security_group_id: It has been deprecated from 1.69.0 and use `security_group_ids` instead.
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] security_group_ids: , Available in 1.69.0+) The list IDs to join ECS Security Group. At most supports three security groups.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] security_group_ids: , Available since 1.69.0) The list IDs to join ECS Security Group. At most supports three security groups.
         :param pulumi.Input[str] security_ip_mode: Valid values are `normal`, `safety`, Default to `normal`. support `safety` switch to high security access mode.
         :param pulumi.Input[str] security_ip_type: The type of IP address in the IP address whitelist.
         :param pulumi.Input[Sequence[pulumi.Input[str]]] security_ips: List of IP addresses allowed to access all databases of an instance. The list contains up to 1,000 IP addresses, separated by commas. Supported formats include 0.0.0.0/0, 10.23.12.24 (IP), and 10.23.12.24/24 (Classless Inter-Domain Routing (CIDR) mode. /24 represents the length of the prefix in an IP address. The range of the prefix length is [1,32]).
-        :param pulumi.Input[str] server_cert: The content of the server certificate. This parameter is supported only when the instance runs PostgreSQL with standard or enhanced SSDs. If you set the CAType parameter to custom, you must also specify this parameter.
-        :param pulumi.Input[str] server_key: The private key of the server certificate. This parameter is supported only when the instance runs PostgreSQL with standard or enhanced SSDs. If you set the CAType parameter to custom, you must also specify this parameter.
+        :param pulumi.Input[str] server_cert: The content of the server certificate. This parameter is supported only when the instance runs PostgreSQL or MySQL with standard or enhanced SSDs. If you set the CAType parameter to custom, you must also specify this parameter. **NOTE:** From version 1.231.0, `server_cert` start  support `MySQL` engine.
+        :param pulumi.Input[str] server_key: The private key of the server certificate. This parameter is supported only when the instance runs PostgreSQL or MySQL with standard or enhanced SSDs. If you set the CAType parameter to custom, you must also specify this parameter. **NOTE:** From version 1.231.0, `server_key` start support `MySQL` engine.
         :param pulumi.Input[Sequence[pulumi.Input['InstanceServerlessConfigArgs']]] serverless_configs: The settings of the serverless instance. This parameter is required when you create a serverless instance. This parameter takes effect only when you create an ApsaraDB RDS for Serverless instance. See `serverless_config` below.
         :param pulumi.Input[int] sql_collector_config_value: The sql collector keep time of the instance. Valid values are `30`, `180`, `365`, `1095`, `1825`, Default to `30`.
         :param pulumi.Input[str] sql_collector_status: The sql collector status of the instance. Valid values are `Enabled`, `Disabled`, Default to `Disabled`.
@@ -259,7 +283,7 @@ class InstanceArgs:
                - Disable
                
                > **NOTE:** This parameter only takes effect when the StorageAutoScale parameter is set to Enable.
-        :param pulumi.Input[int] storage_threshold: The trigger threshold (percentage) for automatic storage space expansion.
+        :param pulumi.Input[int] storage_threshold: The threshold in percentage based on which an automatic storage expansion is triggered. If the available storage reaches the threshold, ApsaraDB RDS increases the storage capacity of the instance.
                Valid values: [10, 20, 30, 40, 50].
                
                > **NOTE:** This parameter only takes effect when the StorageAutoScale parameter is set to Enable. The value must be greater than or equal to the total size of the current storage space of the instance.
@@ -269,7 +293,7 @@ class InstanceArgs:
         :param pulumi.Input[str] switch_time: The specific point in time when you want to perform the update. Specify the time in the ISO 8601 standard in the yyyy-MM-ddTHH:mm:ssZ format. It is valid only when `target_minor_version` is changed. The time must be in UTC.
                
                > **NOTE:** This parameter takes effect only when you set the UpgradeTime parameter to SpecifyTime.
-        :param pulumi.Input[Mapping[str, Any]] tags: A mapping of tags to assign to the resource.
+        :param pulumi.Input[Mapping[str, pulumi.Input[str]]] tags: A mapping of tags to assign to the resource.
                - Key: It can be up to 64 characters in length. It cannot begin with "aliyun", "acs:", "http://", or "https://". It cannot be a null string.
                - Value: It can be up to 128 characters in length. It cannot begin with "aliyun", "acs:", "http://", or "https://". It can be a null string.
                
@@ -286,7 +310,9 @@ class InstanceArgs:
         :param pulumi.Input[str] tcp_connection_type: The availability check method of the instance. Valid values:
                - **SHORT**: Alibaba Cloud uses short-lived connections to check the availability of the instance.
                - **LONG**: Alibaba Cloud uses persistent connections to check the availability of the instance.
+        :param pulumi.Input[str] tde_encryption_key: The ID of the custom key.
         :param pulumi.Input[str] tde_status: The TDE(Transparent Data Encryption) status. After TDE is turned on, it cannot be turned off. See more [engine and engineVersion limitation](https://www.alibabacloud.com/help/zh/doc-detail/26256.htm).
+               > **NOTE:** When creating an instance and enabling disk encryption, you can only use the Key ID; you cannot use the ServiceKey.
         :param pulumi.Input[bool] upgrade_db_instance_kernel_version: Whether to upgrade a minor version of the kernel. Valid values:
                - true: upgrade
                - false: not to upgrade
@@ -309,6 +335,7 @@ class InstanceArgs:
                If it is a multi-zone and `vswitch_id` is specified, the vswitch must in the one of them.
                The multiple zone ID can be retrieved by setting `multi` to "true" in the data source `get_zones`.
         :param pulumi.Input[str] zone_id_slave_a: The region ID of the secondary instance if you create a secondary instance. If you set this parameter to the same value as the ZoneId parameter, the instance is deployed in a single zone. Otherwise, the instance is deployed in multiple zones.
+        :param pulumi.Input[str] zone_id_slave_b: RDS MySQL Cluster series instances support creating 1 to 2 secondary nodes at the same time when establishing a new instance. If you have this requirement, you can use this parameter to specify the availability zone for the second secondary node.
         """
         pulumi.set(__self__, "engine", engine)
         pulumi.set(__self__, "engine_version", engine_version)
@@ -348,6 +375,8 @@ class InstanceArgs:
             pulumi.set(__self__, "db_instance_storage_type", db_instance_storage_type)
         if db_is_ignore_case is not None:
             pulumi.set(__self__, "db_is_ignore_case", db_is_ignore_case)
+        if db_param_group_id is not None:
+            pulumi.set(__self__, "db_param_group_id", db_param_group_id)
         if db_time_zone is not None:
             pulumi.set(__self__, "db_time_zone", db_time_zone)
         if deletion_protection is not None:
@@ -384,12 +413,16 @@ class InstanceArgs:
             pulumi.set(__self__, "parameters", parameters)
         if period is not None:
             pulumi.set(__self__, "period", period)
+        if pg_bouncer_enabled is not None:
+            pulumi.set(__self__, "pg_bouncer_enabled", pg_bouncer_enabled)
         if pg_hba_confs is not None:
             pulumi.set(__self__, "pg_hba_confs", pg_hba_confs)
         if port is not None:
             pulumi.set(__self__, "port", port)
         if private_ip_address is not None:
             pulumi.set(__self__, "private_ip_address", private_ip_address)
+        if recovery_model is not None:
+            pulumi.set(__self__, "recovery_model", recovery_model)
         if released_keep_policy is not None:
             pulumi.set(__self__, "released_keep_policy", released_keep_policy)
         if replication_acl is not None:
@@ -439,6 +472,8 @@ class InstanceArgs:
             pulumi.set(__self__, "target_minor_version", target_minor_version)
         if tcp_connection_type is not None:
             pulumi.set(__self__, "tcp_connection_type", tcp_connection_type)
+        if tde_encryption_key is not None:
+            pulumi.set(__self__, "tde_encryption_key", tde_encryption_key)
         if tde_status is not None:
             pulumi.set(__self__, "tde_status", tde_status)
         if upgrade_db_instance_kernel_version is not None:
@@ -458,6 +493,8 @@ class InstanceArgs:
             pulumi.set(__self__, "zone_id", zone_id)
         if zone_id_slave_a is not None:
             pulumi.set(__self__, "zone_id_slave_a", zone_id_slave_a)
+        if zone_id_slave_b is not None:
+            pulumi.set(__self__, "zone_id_slave_b", zone_id_slave_b)
 
     @property
     @pulumi.getter
@@ -619,7 +656,7 @@ class InstanceArgs:
     @pulumi.getter(name="caType")
     def ca_type(self) -> Optional[pulumi.Input[str]]:
         """
-        The type of the server certificate. This parameter is supported only when the instance runs PostgreSQL with standard or enhanced SSDs. If you set the SSLEnabled parameter to 1, the default value of this parameter is aliyun. Value range:
+        The type of the server certificate. This parameter is supported only when the instance runs PostgreSQL or MySQL with standard or enhanced SSDs. If you set the SSLEnabled parameter to 1, the default value of this parameter is aliyun. **NOTE:** From version 1.231.0, `ca_type` start  support `MySQL` engine. Value range:
         - aliyun: a cloud certificate
         - custom: a custom certificate
         """
@@ -638,10 +675,10 @@ class InstanceArgs:
         * **HighAvailability**: High-availability Edition.
         * **AlwaysOn**: Cluster Edition.
         * **Finance**: Enterprise Edition.
-        * **cluster**: MySQL Cluster Edition. (Available in 1.202.0+)
-        * **serverless_basic**: RDS Serverless Basic Edition. This edition is available only for instances that run MySQL and PostgreSQL. (Available in 1.200.0+)
-        * **serverless_standard**: RDS Serverless Basic Edition. This edition is available only for instances that run MySQL and PostgreSQL. (Available in 1.204.0+)
-        * **serverless_ha**: RDS Serverless High-availability Edition for SQL Server. (Available in 1.204.0+)
+        * **cluster**: MySQL Cluster Edition. (Available since 1.202.0)
+        * **serverless_basic**: RDS Serverless Basic Edition. This edition is available only for instances that run MySQL and PostgreSQL. (Available since 1.200.0)
+        * **serverless_standard**: RDS Serverless Basic Edition. This edition is available only for instances that run MySQL and PostgreSQL. (Available since 1.204.0)
+        * **serverless_ha**: RDS Serverless High-availability Edition for SQL Server. (Available since 1.204.0)
 
         > **NOTE:** `zone_id_slave_a` and `zone_id_slave_b` can specify slave zone ids when creating the high-availability or enterprise edition instances. Meanwhile, `vswitch_id` needs to pass in the corresponding vswitch id to the slave zone by order (If the `vswitch_id` is not specified, the classic network version will be created). For example, `zone_id` = "zone-a" and `zone_id_slave_a` = "zone-c", `zone_id_slave_b` = "zone-b", then the `vswitch_id` must be "vsw-zone-a,vsw-zone-c,vsw-zone-b". Of course, you can also choose automatic allocation , for example, `zone_id` = "zone-a" and `zone_id_slave_a` = "Auto",`zone_id_slave_b` = "Auto", then the `vswitch_id` must be "vsw-zone-a,Auto,Auto". The list contains up to 2 slave zone ids , separated by commas.
         """
@@ -708,7 +745,7 @@ class InstanceArgs:
     def connection_string_prefix(self) -> Optional[pulumi.Input[str]]:
         """
         The private connection string prefix. If you want to update public connection string prefix, please use resource rds.Connection connection_prefix.
-        > **NOTE:** The prefix must be 8 to 64 characters in length and can contain letters, digits, and hyphens (-). It cannot contain Chinese characters and special characters ~!#%!^(MISSING)&*=+\\|{};:'",<>/?
+        > **NOTE:** The prefix must be 8 to 64 characters in length and can contain letters, digits, and hyphens (-). It cannot contain Chinese characters and special characters ~!#%^&*=+\\|{};:'",<>/?
         """
         return pulumi.get(self, "connection_string_prefix")
 
@@ -754,6 +791,7 @@ class InstanceArgs:
         - cloud_essd: specifies to use enhanced SSDs (ESSDs).
         - cloud_essd2: specifies to use enhanced SSDs (ESSDs).
         - cloud_essd3: specifies to use enhanced SSDs (ESSDs).
+        - general_essd: general essd.
         """
         return pulumi.get(self, "db_instance_storage_type")
 
@@ -773,6 +811,18 @@ class InstanceArgs:
     def db_is_ignore_case(self, value: Optional[pulumi.Input[bool]]):
         pulumi.set(self, "db_is_ignore_case", value)
 
+    @property
+    @pulumi.getter(name="dbParamGroupId")
+    def db_param_group_id(self) -> Optional[pulumi.Input[str]]:
+        """
+        Parameter template ID. Only MySQL and PostgreSQL support this parameter. If this parameter is not specified, the default parameter template is used. You can also customize a parameter template and use it here.
+        """
+        return pulumi.get(self, "db_param_group_id")
+
+    @db_param_group_id.setter
+    def db_param_group_id(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "db_param_group_id", value)
+
     @property
     @pulumi.getter(name="dbTimeZone")
     def db_time_zone(self) -> Optional[pulumi.Input[str]]:
@@ -840,6 +890,11 @@ class InstanceArgs:
     def encryption_key(self) -> Optional[pulumi.Input[str]]:
         """
         The key id of the KMS. Used for encrypting a disk if not null. Only for PostgreSQL, MySQL and SQLServer.
+        When the instance is PostgreSQL, this parameter can be used to enable, modify, and disable cloud disk encryption.Value range:
+        - ServiceKey: Enable disk encryption using the service-managed key (Default Service CMK) automatically generated by Alibaba Cloud RDS.
+        - <EncryptionKey>: Use a custom key to enable cloud disk encryption or change the current key. For example: 494c98ce-f2b5-48ab-96ab-36c986b6****.
+        - disabled: Turn off cloud disk encryption.
+        > **NOTE:** This parameter is available when the instance runs MySQL.
         """
         return pulumi.get(self, "encryption_key")
 
@@ -894,8 +949,6 @@ class InstanceArgs:
         The primary/secondary switchover mode of the instance. Default value: Auto. Valid values:
         - Auto: The system automatically switches over services from the primary to secondary instances in the event of a fault.
         - Manual: You must manually switch over services from the primary to secondary instances in the event of a fault.
-
-        > **NOTE:** If you set this parameter to Manual, you must specify the ManualHATime parameter.
         """
         return pulumi.get(self, "ha_config")
 
@@ -1017,6 +1070,20 @@ class InstanceArgs:
     def period(self, value: Optional[pulumi.Input[int]]):
         pulumi.set(self, "period", value)
 
+    @property
+    @pulumi.getter(name="pgBouncerEnabled")
+    def pg_bouncer_enabled(self) -> Optional[pulumi.Input[bool]]:
+        """
+        Modify the PgBouncer feature of the RDS PostgreSQL instance. Valid values:
+        - true: enable.
+        - false: disable.
+        """
+        return pulumi.get(self, "pg_bouncer_enabled")
+
+    @pg_bouncer_enabled.setter
+    def pg_bouncer_enabled(self, value: Optional[pulumi.Input[bool]]):
+        pulumi.set(self, "pg_bouncer_enabled", value)
+
     @property
     @pulumi.getter(name="pgHbaConfs")
     def pg_hba_confs(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['InstancePgHbaConfArgs']]]]:
@@ -1053,6 +1120,20 @@ class InstanceArgs:
     def private_ip_address(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "private_ip_address", value)
 
+    @property
+    @pulumi.getter(name="recoveryModel")
+    def recovery_model(self) -> Optional[pulumi.Input[str]]:
+        """
+        Enable the Simple Recovery Model for an RDS SQL Server Instance.The Simple Recovery Model feature is only supported by the Basic Series of RDS SQL Server instances. Once this feature is enabled, it cannot be disabled.Valid values:
+        - simple: Enable Simple Recovery.
+        > **NOTE:** If you set this parameter to Manual, you must specify the ManualHATime parameter.
+        """
+        return pulumi.get(self, "recovery_model")
+
+    @recovery_model.setter
+    def recovery_model(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "recovery_model", value)
+
     @property
     @pulumi.getter(name="releasedKeepPolicy")
     def released_keep_policy(self) -> Optional[pulumi.Input[str]]:
@@ -1103,6 +1184,9 @@ class InstanceArgs:
     def role_arn(self) -> Optional[pulumi.Input[str]]:
         """
         The Alibaba Cloud Resource Name (ARN) of the RAM role.
+
+        > **NOTE:**  This parameter is not required when you create an instance that runs MySQL, PostgreSQL, or SQL Server. You need to only specify the RoleARN parameter to create an instance that has cloud disk encryption enabled by using the obtained key ID.
+        You can configure RAM authorization to require a RAM user to enable cloud disk encryption when the RAM user is used to create an instance. If cloud disk encryption is disabled during the instance creation, the creation operation fails. To complete the configuration, you can attach the following policy to the RAM user: {"Version":"1","Statement":[{"Effect":"Deny","Action":"rds:CreateDBInstance","Resource":"*","Condition":{"StringEquals":{"rds:DiskEncryptionRequired":"false"}}}]}
         """
         return pulumi.get(self, "role_arn")
 
@@ -1112,13 +1196,11 @@ class InstanceArgs:
 
     @property
     @pulumi.getter(name="securityGroupId")
+    @_utilities.deprecated("""Attribute `security_group_id` has been deprecated from 1.69.0 and use `security_group_ids` instead.""")
     def security_group_id(self) -> Optional[pulumi.Input[str]]:
         """
         It has been deprecated from 1.69.0 and use `security_group_ids` instead.
         """
-        warnings.warn("""Attribute `security_group_id` has been deprecated from 1.69.0 and use `security_group_ids` instead.""", DeprecationWarning)
-        pulumi.log.warn("""security_group_id is deprecated: Attribute `security_group_id` has been deprecated from 1.69.0 and use `security_group_ids` instead.""")
-
         return pulumi.get(self, "security_group_id")
 
     @security_group_id.setter
@@ -1129,7 +1211,7 @@ class InstanceArgs:
     @pulumi.getter(name="securityGroupIds")
     def security_group_ids(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
         """
-        , Available in 1.69.0+) The list IDs to join ECS Security Group. At most supports three security groups.
+        , Available since 1.69.0) The list IDs to join ECS Security Group. At most supports three security groups.
         """
         return pulumi.get(self, "security_group_ids")
 
@@ -1177,7 +1259,7 @@ class InstanceArgs:
     @pulumi.getter(name="serverCert")
     def server_cert(self) -> Optional[pulumi.Input[str]]:
         """
-        The content of the server certificate. This parameter is supported only when the instance runs PostgreSQL with standard or enhanced SSDs. If you set the CAType parameter to custom, you must also specify this parameter.
+        The content of the server certificate. This parameter is supported only when the instance runs PostgreSQL or MySQL with standard or enhanced SSDs. If you set the CAType parameter to custom, you must also specify this parameter. **NOTE:** From version 1.231.0, `server_cert` start  support `MySQL` engine.
         """
         return pulumi.get(self, "server_cert")
 
@@ -1189,7 +1271,7 @@ class InstanceArgs:
     @pulumi.getter(name="serverKey")
     def server_key(self) -> Optional[pulumi.Input[str]]:
         """
-        The private key of the server certificate. This parameter is supported only when the instance runs PostgreSQL with standard or enhanced SSDs. If you set the CAType parameter to custom, you must also specify this parameter.
+        The private key of the server certificate. This parameter is supported only when the instance runs PostgreSQL or MySQL with standard or enhanced SSDs. If you set the CAType parameter to custom, you must also specify this parameter. **NOTE:** From version 1.231.0, `server_key` start support `MySQL` engine.
         """
         return pulumi.get(self, "server_key")
 
@@ -1283,7 +1365,7 @@ class InstanceArgs:
     @pulumi.getter(name="storageThreshold")
     def storage_threshold(self) -> Optional[pulumi.Input[int]]:
         """
-        The trigger threshold (percentage) for automatic storage space expansion.
+        The threshold in percentage based on which an automatic storage expansion is triggered. If the available storage reaches the threshold, ApsaraDB RDS increases the storage capacity of the instance.
         Valid values: [10, 20, 30, 40, 50].
 
         > **NOTE:** This parameter only takes effect when the StorageAutoScale parameter is set to Enable. The value must be greater than or equal to the total size of the current storage space of the instance.
@@ -1324,7 +1406,7 @@ class InstanceArgs:
 
     @property
     @pulumi.getter
-    def tags(self) -> Optional[pulumi.Input[Mapping[str, Any]]]:
+    def tags(self) -> Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]]:
         """
         A mapping of tags to assign to the resource.
         - Key: It can be up to 64 characters in length. It cannot begin with "aliyun", "acs:", "http://", or "https://". It cannot be a null string.
@@ -1335,7 +1417,7 @@ class InstanceArgs:
         return pulumi.get(self, "tags")
 
     @tags.setter
-    def tags(self, value: Optional[pulumi.Input[Mapping[str, Any]]]):
+    def tags(self, value: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]]):
         pulumi.set(self, "tags", value)
 
     @property
@@ -1372,11 +1454,24 @@ class InstanceArgs:
     def tcp_connection_type(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "tcp_connection_type", value)
 
+    @property
+    @pulumi.getter(name="tdeEncryptionKey")
+    def tde_encryption_key(self) -> Optional[pulumi.Input[str]]:
+        """
+        The ID of the custom key.
+        """
+        return pulumi.get(self, "tde_encryption_key")
+
+    @tde_encryption_key.setter
+    def tde_encryption_key(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "tde_encryption_key", value)
+
     @property
     @pulumi.getter(name="tdeStatus")
     def tde_status(self) -> Optional[pulumi.Input[str]]:
         """
         The TDE(Transparent Data Encryption) status. After TDE is turned on, it cannot be turned off. See more [engine and engineVersion limitation](https://www.alibabacloud.com/help/zh/doc-detail/26256.htm).
+        > **NOTE:** When creating an instance and enabling disk encryption, you can only use the Key ID; you cannot use the ServiceKey.
         """
         return pulumi.get(self, "tde_status")
 
@@ -1386,15 +1481,13 @@ class InstanceArgs:
 
     @property
     @pulumi.getter(name="upgradeDbInstanceKernelVersion")
+    @_utilities.deprecated("""Attribute `upgrade_db_instance_kernel_version` has been deprecated from 1.198.0 and use `target_minor_version` instead.""")
     def upgrade_db_instance_kernel_version(self) -> Optional[pulumi.Input[bool]]:
         """
         Whether to upgrade a minor version of the kernel. Valid values:
         - true: upgrade
         - false: not to upgrade
         """
-        warnings.warn("""Attribute `upgrade_db_instance_kernel_version` has been deprecated from 1.198.0 and use `target_minor_version` instead.""", DeprecationWarning)
-        pulumi.log.warn("""upgrade_db_instance_kernel_version is deprecated: Attribute `upgrade_db_instance_kernel_version` has been deprecated from 1.198.0 and use `target_minor_version` instead.""")
-
         return pulumi.get(self, "upgrade_db_instance_kernel_version")
 
     @upgrade_db_instance_kernel_version.setter
@@ -1486,6 +1579,18 @@ class InstanceArgs:
     def zone_id_slave_a(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "zone_id_slave_a", value)
 
+    @property
+    @pulumi.getter(name="zoneIdSlaveB")
+    def zone_id_slave_b(self) -> Optional[pulumi.Input[str]]:
+        """
+        RDS MySQL Cluster series instances support creating 1 to 2 secondary nodes at the same time when establishing a new instance. If you have this requirement, you can use this parameter to specify the availability zone for the second secondary node.
+        """
+        return pulumi.get(self, "zone_id_slave_b")
+
+    @zone_id_slave_b.setter
+    def zone_id_slave_b(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "zone_id_slave_b", value)
+
 
 @pulumi.input_type
 class _InstanceState:
@@ -1510,6 +1615,7 @@ class _InstanceState:
                  db_instance_storage_type: Optional[pulumi.Input[str]] = None,
                  db_instance_type: Optional[pulumi.Input[str]] = None,
                  db_is_ignore_case: Optional[pulumi.Input[bool]] = None,
+                 db_param_group_id: Optional[pulumi.Input[str]] = None,
                  db_time_zone: Optional[pulumi.Input[str]] = None,
                  deletion_protection: Optional[pulumi.Input[bool]] = None,
                  direction: Optional[pulumi.Input[str]] = None,
@@ -1532,9 +1638,11 @@ class _InstanceState:
                  node_id: Optional[pulumi.Input[str]] = None,
                  parameters: Optional[pulumi.Input[Sequence[pulumi.Input['InstanceParameterArgs']]]] = None,
                  period: Optional[pulumi.Input[int]] = None,
+                 pg_bouncer_enabled: Optional[pulumi.Input[bool]] = None,
                  pg_hba_confs: Optional[pulumi.Input[Sequence[pulumi.Input['InstancePgHbaConfArgs']]]] = None,
                  port: Optional[pulumi.Input[str]] = None,
                  private_ip_address: Optional[pulumi.Input[str]] = None,
+                 recovery_model: Optional[pulumi.Input[str]] = None,
                  released_keep_policy: Optional[pulumi.Input[str]] = None,
                  replication_acl: Optional[pulumi.Input[str]] = None,
                  resource_group_id: Optional[pulumi.Input[str]] = None,
@@ -1557,9 +1665,10 @@ class _InstanceState:
                  storage_threshold: Optional[pulumi.Input[int]] = None,
                  storage_upper_bound: Optional[pulumi.Input[int]] = None,
                  switch_time: Optional[pulumi.Input[str]] = None,
-                 tags: Optional[pulumi.Input[Mapping[str, Any]]] = None,
+                 tags: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
                  target_minor_version: Optional[pulumi.Input[str]] = None,
                  tcp_connection_type: Optional[pulumi.Input[str]] = None,
+                 tde_encryption_key: Optional[pulumi.Input[str]] = None,
                  tde_status: Optional[pulumi.Input[str]] = None,
                  upgrade_db_instance_kernel_version: Optional[pulumi.Input[bool]] = None,
                  upgrade_time: Optional[pulumi.Input[str]] = None,
@@ -1567,7 +1676,8 @@ class _InstanceState:
                  vswitch_id: Optional[pulumi.Input[str]] = None,
                  whitelist_network_type: Optional[pulumi.Input[str]] = None,
                  zone_id: Optional[pulumi.Input[str]] = None,
-                 zone_id_slave_a: Optional[pulumi.Input[str]] = None):
+                 zone_id_slave_a: Optional[pulumi.Input[str]] = None,
+                 zone_id_slave_b: Optional[pulumi.Input[str]] = None):
         """
         Input properties used for looking up and filtering Instance resources.
         :param pulumi.Input[str] acl: The method that is used to verify the identities of clients. This parameter is supported only when the instance runs PostgreSQL with standard or enhanced SSDs. In addition, this parameter is available only when the public key of the CA that issues client certificates is enabled. Valid values:
@@ -1588,7 +1698,7 @@ class _InstanceState:
         :param pulumi.Input[str] babelfish_port: The TDS port of the instance for which Babelfish is enabled.
                
                > **NOTE:** This parameter applies only to ApsaraDB RDS for PostgreSQL instances. For more information about Babelfish for ApsaraDB RDS for PostgreSQL, see [Introduction to Babelfish](https://www.alibabacloud.com/help/en/apsaradb-for-rds/latest/babelfish-for-pg).
-        :param pulumi.Input[str] ca_type: The type of the server certificate. This parameter is supported only when the instance runs PostgreSQL with standard or enhanced SSDs. If you set the SSLEnabled parameter to 1, the default value of this parameter is aliyun. Value range:
+        :param pulumi.Input[str] ca_type: The type of the server certificate. This parameter is supported only when the instance runs PostgreSQL or MySQL with standard or enhanced SSDs. If you set the SSLEnabled parameter to 1, the default value of this parameter is aliyun. **NOTE:** From version 1.231.0, `ca_type` start  support `MySQL` engine. Value range:
                - aliyun: a cloud certificate
                - custom: a custom certificate
         :param pulumi.Input[str] category: The RDS edition of the instance. If you want to create a serverless instance, you must use this value. Valid values:
@@ -1596,10 +1706,10 @@ class _InstanceState:
                * **HighAvailability**: High-availability Edition.
                * **AlwaysOn**: Cluster Edition.
                * **Finance**: Enterprise Edition.
-               * **cluster**: MySQL Cluster Edition. (Available in 1.202.0+)
-               * **serverless_basic**: RDS Serverless Basic Edition. This edition is available only for instances that run MySQL and PostgreSQL. (Available in 1.200.0+)
-               * **serverless_standard**: RDS Serverless Basic Edition. This edition is available only for instances that run MySQL and PostgreSQL. (Available in 1.204.0+)
-               * **serverless_ha**: RDS Serverless High-availability Edition for SQL Server. (Available in 1.204.0+)
+               * **cluster**: MySQL Cluster Edition. (Available since 1.202.0)
+               * **serverless_basic**: RDS Serverless Basic Edition. This edition is available only for instances that run MySQL and PostgreSQL. (Available since 1.200.0)
+               * **serverless_standard**: RDS Serverless Basic Edition. This edition is available only for instances that run MySQL and PostgreSQL. (Available since 1.204.0)
+               * **serverless_ha**: RDS Serverless High-availability Edition for SQL Server. (Available since 1.204.0)
                
                > **NOTE:** `zone_id_slave_a` and `zone_id_slave_b` can specify slave zone ids when creating the high-availability or enterprise edition instances. Meanwhile, `vswitch_id` needs to pass in the corresponding vswitch id to the slave zone by order (If the `vswitch_id` is not specified, the classic network version will be created). For example, `zone_id` = "zone-a" and `zone_id_slave_a` = "zone-c", `zone_id_slave_b` = "zone-b", then the `vswitch_id` must be "vsw-zone-a,vsw-zone-c,vsw-zone-b". Of course, you can also choose automatic allocation , for example, `zone_id` = "zone-a" and `zone_id_slave_a` = "Auto",`zone_id_slave_b` = "Auto", then the `vswitch_id` must be "vsw-zone-a,Auto,Auto". The list contains up to 2 slave zone ids , separated by commas.
         :param pulumi.Input[str] client_ca_cert: The public key of the CA that issues client certificates. This parameter is supported only when the instance runs PostgreSQL with standard or enhanced SSDs. If you set the ClientCAEbabled parameter to 1, you must also specify this parameter.
@@ -1612,8 +1722,8 @@ class _InstanceState:
                - 0: disables the CRL
         :param pulumi.Input[str] connection_string: RDS database connection string.
         :param pulumi.Input[str] connection_string_prefix: The private connection string prefix. If you want to update public connection string prefix, please use resource rds.Connection connection_prefix.
-               > **NOTE:** The prefix must be 8 to 64 characters in length and can contain letters, digits, and hyphens (-). It cannot contain Chinese characters and special characters ~!#%!^(MISSING)&*=+\\|{};:'",<>/?
-        :param pulumi.Input[str] create_time: (Available in 1.204.1+) The creation time of db instance.
+               > **NOTE:** The prefix must be 8 to 64 characters in length and can contain letters, digits, and hyphens (-). It cannot contain Chinese characters and special characters ~!#%^&*=+\\|{};:'",<>/?
+        :param pulumi.Input[str] create_time: (Available since 1.204.1) The creation time of db instance.
         :param pulumi.Input[str] db_instance_ip_array_attribute: The attribute of the IP address whitelist. By default, this parameter is empty.
                
                > **NOTE:** The IP address whitelists that have the hidden attribute are not displayed in the ApsaraDB RDS console. These IP address whitelists are used to access Alibaba Cloud services, such as Data Transmission Service (DTS).
@@ -1626,8 +1736,10 @@ class _InstanceState:
                - cloud_essd: specifies to use enhanced SSDs (ESSDs).
                - cloud_essd2: specifies to use enhanced SSDs (ESSDs).
                - cloud_essd3: specifies to use enhanced SSDs (ESSDs).
-        :param pulumi.Input[str] db_instance_type: (Available in 1.197.0+) The type of db instance.
+               - general_essd: general essd.
+        :param pulumi.Input[str] db_instance_type: (Available since 1.197.0) The type of db instance.
         :param pulumi.Input[bool] db_is_ignore_case: Specifies whether table names on the instance are case-sensitive. Valid values: `true`, `false`.
+        :param pulumi.Input[str] db_param_group_id: Parameter template ID. Only MySQL and PostgreSQL support this parameter. If this parameter is not specified, the default parameter template is used. You can also customize a parameter template and use it here.
         :param pulumi.Input[str] db_time_zone: The time zone of the instance. This parameter takes effect only when you set the `Engine` parameter to MySQL or PostgreSQL.
                - If you set the `Engine` parameter to MySQL.
                - This time zone of the instance is in UTC. Valid values: -12:59 to +13:00.
@@ -1647,6 +1759,11 @@ class _InstanceState:
                - Immediate: The change immediately takes effect.
                - MaintainTime: The change takes effect during the specified maintenance window. For more information, see ModifyDBInstanceMaintainTime.
         :param pulumi.Input[str] encryption_key: The key id of the KMS. Used for encrypting a disk if not null. Only for PostgreSQL, MySQL and SQLServer.
+               When the instance is PostgreSQL, this parameter can be used to enable, modify, and disable cloud disk encryption.Value range:
+               - ServiceKey: Enable disk encryption using the service-managed key (Default Service CMK) automatically generated by Alibaba Cloud RDS.
+               - <EncryptionKey>: Use a custom key to enable cloud disk encryption or change the current key. For example: 494c98ce-f2b5-48ab-96ab-36c986b6****.
+               - disabled: Turn off cloud disk encryption.
+               > **NOTE:** This parameter is available when the instance runs MySQL.
         :param pulumi.Input[str] engine: Database type. Value options: MySQL, SQLServer, PostgreSQL, MariaDB.
                
                > **NOTE:** When the 'engine_version' changes, it can be used as the target database version for the large version upgrade of RDS for MySQL instance.
@@ -1670,8 +1787,6 @@ class _InstanceState:
         :param pulumi.Input[str] ha_config: The primary/secondary switchover mode of the instance. Default value: Auto. Valid values:
                - Auto: The system automatically switches over services from the primary to secondary instances in the event of a fault.
                - Manual: You must manually switch over services from the primary to secondary instances in the event of a fault.
-               
-               > **NOTE:** If you set this parameter to Manual, you must specify the ManualHATime parameter.
         :param pulumi.Input[str] instance_charge_type: Valid values are `Prepaid`, `Postpaid`, `Serverless`, Default to `Postpaid`. Currently, the resource only supports PostPaid to PrePaid. For more information, see [Overview](https://www.alibabacloud.com/help/en/apsaradb-for-rds/latest/what-is-serverless?spm=a2c63.p38356.0.0.772a28cfTAGqIv).
         :param pulumi.Input[str] instance_name: The name of DB instance. It a string of 2 to 256 characters.
         :param pulumi.Input[int] instance_storage: User-defined DB instance storage space. Value range:
@@ -1702,9 +1817,15 @@ class _InstanceState:
         :param pulumi.Input[Sequence[pulumi.Input['InstanceParameterArgs']]] parameters: Set of parameters needs to be set after DB instance was launched. Available parameters can refer to the latest docs [View database parameter templates](https://www.alibabacloud.com/help/doc-detail/26284.htm) . See `parameters` below.
         :param pulumi.Input[int] period: The duration that you will buy DB instance (in month). It is valid when instance_charge_type is `PrePaid`. Valid values: [1~9], 12, 24, 36.
                > **NOTE:** The attribute `period` is only used to create Subscription instance or modify the PayAsYouGo instance to Subscription. Once effect, it will not be modified that means running `pulumi up` will not effect the resource.
+        :param pulumi.Input[bool] pg_bouncer_enabled: Modify the PgBouncer feature of the RDS PostgreSQL instance. Valid values:
+               - true: enable.
+               - false: disable.
         :param pulumi.Input[Sequence[pulumi.Input['InstancePgHbaConfArgs']]] pg_hba_confs: The configuration of [AD domain](https://www.alibabacloud.com/help/en/doc-detail/349288.htm) . See `pg_hba_conf` below.
         :param pulumi.Input[str] port: The private port of the database service. If you want to update public port, please use resource rds.Connection port.
         :param pulumi.Input[str] private_ip_address: The private IP address of the instance. The private IP address must be within the Classless Inter-Domain Routing (CIDR) block of the vSwitch that is specified by the VSwitchId parameter.
+        :param pulumi.Input[str] recovery_model: Enable the Simple Recovery Model for an RDS SQL Server Instance.The Simple Recovery Model feature is only supported by the Basic Series of RDS SQL Server instances. Once this feature is enabled, it cannot be disabled.Valid values:
+               - simple: Enable Simple Recovery.
+               > **NOTE:** If you set this parameter to Manual, you must specify the ManualHATime parameter.
         :param pulumi.Input[str] released_keep_policy: The policy based on which ApsaraDB RDS retains archived backup files after the instance is released. Valid values:
                - None: No archived backup files are retained.
                - Lastest: Only the last archived backup file is retained.
@@ -1718,13 +1839,16 @@ class _InstanceState:
                - verify-full (supported only when the instance runs PostgreSQL 12 or later)
         :param pulumi.Input[str] resource_group_id: The ID of resource group which the DB instance belongs.
         :param pulumi.Input[str] role_arn: The Alibaba Cloud Resource Name (ARN) of the RAM role.
+               
+               > **NOTE:**  This parameter is not required when you create an instance that runs MySQL, PostgreSQL, or SQL Server. You need to only specify the RoleARN parameter to create an instance that has cloud disk encryption enabled by using the obtained key ID.
+               You can configure RAM authorization to require a RAM user to enable cloud disk encryption when the RAM user is used to create an instance. If cloud disk encryption is disabled during the instance creation, the creation operation fails. To complete the configuration, you can attach the following policy to the RAM user: {"Version":"1","Statement":[{"Effect":"Deny","Action":"rds:CreateDBInstance","Resource":"*","Condition":{"StringEquals":{"rds:DiskEncryptionRequired":"false"}}}]}
         :param pulumi.Input[str] security_group_id: It has been deprecated from 1.69.0 and use `security_group_ids` instead.
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] security_group_ids: , Available in 1.69.0+) The list IDs to join ECS Security Group. At most supports three security groups.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] security_group_ids: , Available since 1.69.0) The list IDs to join ECS Security Group. At most supports three security groups.
         :param pulumi.Input[str] security_ip_mode: Valid values are `normal`, `safety`, Default to `normal`. support `safety` switch to high security access mode.
         :param pulumi.Input[str] security_ip_type: The type of IP address in the IP address whitelist.
         :param pulumi.Input[Sequence[pulumi.Input[str]]] security_ips: List of IP addresses allowed to access all databases of an instance. The list contains up to 1,000 IP addresses, separated by commas. Supported formats include 0.0.0.0/0, 10.23.12.24 (IP), and 10.23.12.24/24 (Classless Inter-Domain Routing (CIDR) mode. /24 represents the length of the prefix in an IP address. The range of the prefix length is [1,32]).
-        :param pulumi.Input[str] server_cert: The content of the server certificate. This parameter is supported only when the instance runs PostgreSQL with standard or enhanced SSDs. If you set the CAType parameter to custom, you must also specify this parameter.
-        :param pulumi.Input[str] server_key: The private key of the server certificate. This parameter is supported only when the instance runs PostgreSQL with standard or enhanced SSDs. If you set the CAType parameter to custom, you must also specify this parameter.
+        :param pulumi.Input[str] server_cert: The content of the server certificate. This parameter is supported only when the instance runs PostgreSQL or MySQL with standard or enhanced SSDs. If you set the CAType parameter to custom, you must also specify this parameter. **NOTE:** From version 1.231.0, `server_cert` start  support `MySQL` engine.
+        :param pulumi.Input[str] server_key: The private key of the server certificate. This parameter is supported only when the instance runs PostgreSQL or MySQL with standard or enhanced SSDs. If you set the CAType parameter to custom, you must also specify this parameter. **NOTE:** From version 1.231.0, `server_key` start support `MySQL` engine.
         :param pulumi.Input[Sequence[pulumi.Input['InstanceServerlessConfigArgs']]] serverless_configs: The settings of the serverless instance. This parameter is required when you create a serverless instance. This parameter takes effect only when you create an ApsaraDB RDS for Serverless instance. See `serverless_config` below.
         :param pulumi.Input[int] sql_collector_config_value: The sql collector keep time of the instance. Valid values are `30`, `180`, `365`, `1095`, `1825`, Default to `30`.
         :param pulumi.Input[str] sql_collector_status: The sql collector status of the instance. Valid values are `Enabled`, `Disabled`, Default to `Disabled`.
@@ -1737,13 +1861,13 @@ class _InstanceState:
                > **NOTE:** The attribute `ssl_action` will be ignored when setting `instance_charge_type = "Serverless"` for SQLServer, PostgreSQL or MariaDB.
         :param pulumi.Input[str] ssl_connection_string: The internal or public endpoint for which the server certificate needs to be created or updated.
         :param pulumi.Input[str] ssl_status: Status of the SSL feature. `Yes`: SSL is turned on; `No`: SSL is turned off.
-        :param pulumi.Input[str] status: (Available in 1.204.1+) The status of db instance.
+        :param pulumi.Input[str] status: (Available since 1.204.1) The status of db instance.
         :param pulumi.Input[str] storage_auto_scale: Automatic storage space expansion switch. Valid values:
                - Enable
                - Disable
                
                > **NOTE:** This parameter only takes effect when the StorageAutoScale parameter is set to Enable.
-        :param pulumi.Input[int] storage_threshold: The trigger threshold (percentage) for automatic storage space expansion.
+        :param pulumi.Input[int] storage_threshold: The threshold in percentage based on which an automatic storage expansion is triggered. If the available storage reaches the threshold, ApsaraDB RDS increases the storage capacity of the instance.
                Valid values: [10, 20, 30, 40, 50].
                
                > **NOTE:** This parameter only takes effect when the StorageAutoScale parameter is set to Enable. The value must be greater than or equal to the total size of the current storage space of the instance.
@@ -1753,7 +1877,7 @@ class _InstanceState:
         :param pulumi.Input[str] switch_time: The specific point in time when you want to perform the update. Specify the time in the ISO 8601 standard in the yyyy-MM-ddTHH:mm:ssZ format. It is valid only when `target_minor_version` is changed. The time must be in UTC.
                
                > **NOTE:** This parameter takes effect only when you set the UpgradeTime parameter to SpecifyTime.
-        :param pulumi.Input[Mapping[str, Any]] tags: A mapping of tags to assign to the resource.
+        :param pulumi.Input[Mapping[str, pulumi.Input[str]]] tags: A mapping of tags to assign to the resource.
                - Key: It can be up to 64 characters in length. It cannot begin with "aliyun", "acs:", "http://", or "https://". It cannot be a null string.
                - Value: It can be up to 128 characters in length. It cannot begin with "aliyun", "acs:", "http://", or "https://". It can be a null string.
                
@@ -1770,7 +1894,9 @@ class _InstanceState:
         :param pulumi.Input[str] tcp_connection_type: The availability check method of the instance. Valid values:
                - **SHORT**: Alibaba Cloud uses short-lived connections to check the availability of the instance.
                - **LONG**: Alibaba Cloud uses persistent connections to check the availability of the instance.
+        :param pulumi.Input[str] tde_encryption_key: The ID of the custom key.
         :param pulumi.Input[str] tde_status: The TDE(Transparent Data Encryption) status. After TDE is turned on, it cannot be turned off. See more [engine and engineVersion limitation](https://www.alibabacloud.com/help/zh/doc-detail/26256.htm).
+               > **NOTE:** When creating an instance and enabling disk encryption, you can only use the Key ID; you cannot use the ServiceKey.
         :param pulumi.Input[bool] upgrade_db_instance_kernel_version: Whether to upgrade a minor version of the kernel. Valid values:
                - true: upgrade
                - false: not to upgrade
@@ -1793,6 +1919,7 @@ class _InstanceState:
                If it is a multi-zone and `vswitch_id` is specified, the vswitch must in the one of them.
                The multiple zone ID can be retrieved by setting `multi` to "true" in the data source `get_zones`.
         :param pulumi.Input[str] zone_id_slave_a: The region ID of the secondary instance if you create a secondary instance. If you set this parameter to the same value as the ZoneId parameter, the instance is deployed in a single zone. Otherwise, the instance is deployed in multiple zones.
+        :param pulumi.Input[str] zone_id_slave_b: RDS MySQL Cluster series instances support creating 1 to 2 secondary nodes at the same time when establishing a new instance. If you have this requirement, you can use this parameter to specify the availability zone for the second secondary node.
         """
         if acl is not None:
             pulumi.set(__self__, "acl", acl)
@@ -1834,6 +1961,8 @@ class _InstanceState:
             pulumi.set(__self__, "db_instance_type", db_instance_type)
         if db_is_ignore_case is not None:
             pulumi.set(__self__, "db_is_ignore_case", db_is_ignore_case)
+        if db_param_group_id is not None:
+            pulumi.set(__self__, "db_param_group_id", db_param_group_id)
         if db_time_zone is not None:
             pulumi.set(__self__, "db_time_zone", db_time_zone)
         if deletion_protection is not None:
@@ -1878,12 +2007,16 @@ class _InstanceState:
             pulumi.set(__self__, "parameters", parameters)
         if period is not None:
             pulumi.set(__self__, "period", period)
+        if pg_bouncer_enabled is not None:
+            pulumi.set(__self__, "pg_bouncer_enabled", pg_bouncer_enabled)
         if pg_hba_confs is not None:
             pulumi.set(__self__, "pg_hba_confs", pg_hba_confs)
         if port is not None:
             pulumi.set(__self__, "port", port)
         if private_ip_address is not None:
             pulumi.set(__self__, "private_ip_address", private_ip_address)
+        if recovery_model is not None:
+            pulumi.set(__self__, "recovery_model", recovery_model)
         if released_keep_policy is not None:
             pulumi.set(__self__, "released_keep_policy", released_keep_policy)
         if replication_acl is not None:
@@ -1937,6 +2070,8 @@ class _InstanceState:
             pulumi.set(__self__, "target_minor_version", target_minor_version)
         if tcp_connection_type is not None:
             pulumi.set(__self__, "tcp_connection_type", tcp_connection_type)
+        if tde_encryption_key is not None:
+            pulumi.set(__self__, "tde_encryption_key", tde_encryption_key)
         if tde_status is not None:
             pulumi.set(__self__, "tde_status", tde_status)
         if upgrade_db_instance_kernel_version is not None:
@@ -1956,6 +2091,8 @@ class _InstanceState:
             pulumi.set(__self__, "zone_id", zone_id)
         if zone_id_slave_a is not None:
             pulumi.set(__self__, "zone_id_slave_a", zone_id_slave_a)
+        if zone_id_slave_b is not None:
+            pulumi.set(__self__, "zone_id_slave_b", zone_id_slave_b)
 
     @property
     @pulumi.getter
@@ -2045,7 +2182,7 @@ class _InstanceState:
     @pulumi.getter(name="caType")
     def ca_type(self) -> Optional[pulumi.Input[str]]:
         """
-        The type of the server certificate. This parameter is supported only when the instance runs PostgreSQL with standard or enhanced SSDs. If you set the SSLEnabled parameter to 1, the default value of this parameter is aliyun. Value range:
+        The type of the server certificate. This parameter is supported only when the instance runs PostgreSQL or MySQL with standard or enhanced SSDs. If you set the SSLEnabled parameter to 1, the default value of this parameter is aliyun. **NOTE:** From version 1.231.0, `ca_type` start  support `MySQL` engine. Value range:
         - aliyun: a cloud certificate
         - custom: a custom certificate
         """
@@ -2064,10 +2201,10 @@ class _InstanceState:
         * **HighAvailability**: High-availability Edition.
         * **AlwaysOn**: Cluster Edition.
         * **Finance**: Enterprise Edition.
-        * **cluster**: MySQL Cluster Edition. (Available in 1.202.0+)
-        * **serverless_basic**: RDS Serverless Basic Edition. This edition is available only for instances that run MySQL and PostgreSQL. (Available in 1.200.0+)
-        * **serverless_standard**: RDS Serverless Basic Edition. This edition is available only for instances that run MySQL and PostgreSQL. (Available in 1.204.0+)
-        * **serverless_ha**: RDS Serverless High-availability Edition for SQL Server. (Available in 1.204.0+)
+        * **cluster**: MySQL Cluster Edition. (Available since 1.202.0)
+        * **serverless_basic**: RDS Serverless Basic Edition. This edition is available only for instances that run MySQL and PostgreSQL. (Available since 1.200.0)
+        * **serverless_standard**: RDS Serverless Basic Edition. This edition is available only for instances that run MySQL and PostgreSQL. (Available since 1.204.0)
+        * **serverless_ha**: RDS Serverless High-availability Edition for SQL Server. (Available since 1.204.0)
 
         > **NOTE:** `zone_id_slave_a` and `zone_id_slave_b` can specify slave zone ids when creating the high-availability or enterprise edition instances. Meanwhile, `vswitch_id` needs to pass in the corresponding vswitch id to the slave zone by order (If the `vswitch_id` is not specified, the classic network version will be created). For example, `zone_id` = "zone-a" and `zone_id_slave_a` = "zone-c", `zone_id_slave_b` = "zone-b", then the `vswitch_id` must be "vsw-zone-a,vsw-zone-c,vsw-zone-b". Of course, you can also choose automatic allocation , for example, `zone_id` = "zone-a" and `zone_id_slave_a` = "Auto",`zone_id_slave_b` = "Auto", then the `vswitch_id` must be "vsw-zone-a,Auto,Auto". The list contains up to 2 slave zone ids , separated by commas.
         """
@@ -2146,7 +2283,7 @@ class _InstanceState:
     def connection_string_prefix(self) -> Optional[pulumi.Input[str]]:
         """
         The private connection string prefix. If you want to update public connection string prefix, please use resource rds.Connection connection_prefix.
-        > **NOTE:** The prefix must be 8 to 64 characters in length and can contain letters, digits, and hyphens (-). It cannot contain Chinese characters and special characters ~!#%!^(MISSING)&*=+\\|{};:'",<>/?
+        > **NOTE:** The prefix must be 8 to 64 characters in length and can contain letters, digits, and hyphens (-). It cannot contain Chinese characters and special characters ~!#%^&*=+\\|{};:'",<>/?
         """
         return pulumi.get(self, "connection_string_prefix")
 
@@ -2158,7 +2295,7 @@ class _InstanceState:
     @pulumi.getter(name="createTime")
     def create_time(self) -> Optional[pulumi.Input[str]]:
         """
-        (Available in 1.204.1+) The creation time of db instance.
+        (Available since 1.204.1) The creation time of db instance.
         """
         return pulumi.get(self, "create_time")
 
@@ -2204,6 +2341,7 @@ class _InstanceState:
         - cloud_essd: specifies to use enhanced SSDs (ESSDs).
         - cloud_essd2: specifies to use enhanced SSDs (ESSDs).
         - cloud_essd3: specifies to use enhanced SSDs (ESSDs).
+        - general_essd: general essd.
         """
         return pulumi.get(self, "db_instance_storage_type")
 
@@ -2215,7 +2353,7 @@ class _InstanceState:
     @pulumi.getter(name="dbInstanceType")
     def db_instance_type(self) -> Optional[pulumi.Input[str]]:
         """
-        (Available in 1.197.0+) The type of db instance.
+        (Available since 1.197.0) The type of db instance.
         """
         return pulumi.get(self, "db_instance_type")
 
@@ -2235,6 +2373,18 @@ class _InstanceState:
     def db_is_ignore_case(self, value: Optional[pulumi.Input[bool]]):
         pulumi.set(self, "db_is_ignore_case", value)
 
+    @property
+    @pulumi.getter(name="dbParamGroupId")
+    def db_param_group_id(self) -> Optional[pulumi.Input[str]]:
+        """
+        Parameter template ID. Only MySQL and PostgreSQL support this parameter. If this parameter is not specified, the default parameter template is used. You can also customize a parameter template and use it here.
+        """
+        return pulumi.get(self, "db_param_group_id")
+
+    @db_param_group_id.setter
+    def db_param_group_id(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "db_param_group_id", value)
+
     @property
     @pulumi.getter(name="dbTimeZone")
     def db_time_zone(self) -> Optional[pulumi.Input[str]]:
@@ -2302,6 +2452,11 @@ class _InstanceState:
     def encryption_key(self) -> Optional[pulumi.Input[str]]:
         """
         The key id of the KMS. Used for encrypting a disk if not null. Only for PostgreSQL, MySQL and SQLServer.
+        When the instance is PostgreSQL, this parameter can be used to enable, modify, and disable cloud disk encryption.Value range:
+        - ServiceKey: Enable disk encryption using the service-managed key (Default Service CMK) automatically generated by Alibaba Cloud RDS.
+        - <EncryptionKey>: Use a custom key to enable cloud disk encryption or change the current key. For example: 494c98ce-f2b5-48ab-96ab-36c986b6****.
+        - disabled: Turn off cloud disk encryption.
+        > **NOTE:** This parameter is available when the instance runs MySQL.
         """
         return pulumi.get(self, "encryption_key")
 
@@ -2391,8 +2546,6 @@ class _InstanceState:
         The primary/secondary switchover mode of the instance. Default value: Auto. Valid values:
         - Auto: The system automatically switches over services from the primary to secondary instances in the event of a fault.
         - Manual: You must manually switch over services from the primary to secondary instances in the event of a fault.
-
-        > **NOTE:** If you set this parameter to Manual, you must specify the ManualHATime parameter.
         """
         return pulumi.get(self, "ha_config")
 
@@ -2551,6 +2704,20 @@ class _InstanceState:
     def period(self, value: Optional[pulumi.Input[int]]):
         pulumi.set(self, "period", value)
 
+    @property
+    @pulumi.getter(name="pgBouncerEnabled")
+    def pg_bouncer_enabled(self) -> Optional[pulumi.Input[bool]]:
+        """
+        Modify the PgBouncer feature of the RDS PostgreSQL instance. Valid values:
+        - true: enable.
+        - false: disable.
+        """
+        return pulumi.get(self, "pg_bouncer_enabled")
+
+    @pg_bouncer_enabled.setter
+    def pg_bouncer_enabled(self, value: Optional[pulumi.Input[bool]]):
+        pulumi.set(self, "pg_bouncer_enabled", value)
+
     @property
     @pulumi.getter(name="pgHbaConfs")
     def pg_hba_confs(self) -> Optional[pulumi.Input[Sequence[pulumi.Input['InstancePgHbaConfArgs']]]]:
@@ -2587,6 +2754,20 @@ class _InstanceState:
     def private_ip_address(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "private_ip_address", value)
 
+    @property
+    @pulumi.getter(name="recoveryModel")
+    def recovery_model(self) -> Optional[pulumi.Input[str]]:
+        """
+        Enable the Simple Recovery Model for an RDS SQL Server Instance.The Simple Recovery Model feature is only supported by the Basic Series of RDS SQL Server instances. Once this feature is enabled, it cannot be disabled.Valid values:
+        - simple: Enable Simple Recovery.
+        > **NOTE:** If you set this parameter to Manual, you must specify the ManualHATime parameter.
+        """
+        return pulumi.get(self, "recovery_model")
+
+    @recovery_model.setter
+    def recovery_model(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "recovery_model", value)
+
     @property
     @pulumi.getter(name="releasedKeepPolicy")
     def released_keep_policy(self) -> Optional[pulumi.Input[str]]:
@@ -2637,6 +2818,9 @@ class _InstanceState:
     def role_arn(self) -> Optional[pulumi.Input[str]]:
         """
         The Alibaba Cloud Resource Name (ARN) of the RAM role.
+
+        > **NOTE:**  This parameter is not required when you create an instance that runs MySQL, PostgreSQL, or SQL Server. You need to only specify the RoleARN parameter to create an instance that has cloud disk encryption enabled by using the obtained key ID.
+        You can configure RAM authorization to require a RAM user to enable cloud disk encryption when the RAM user is used to create an instance. If cloud disk encryption is disabled during the instance creation, the creation operation fails. To complete the configuration, you can attach the following policy to the RAM user: {"Version":"1","Statement":[{"Effect":"Deny","Action":"rds:CreateDBInstance","Resource":"*","Condition":{"StringEquals":{"rds:DiskEncryptionRequired":"false"}}}]}
         """
         return pulumi.get(self, "role_arn")
 
@@ -2646,13 +2830,11 @@ class _InstanceState:
 
     @property
     @pulumi.getter(name="securityGroupId")
+    @_utilities.deprecated("""Attribute `security_group_id` has been deprecated from 1.69.0 and use `security_group_ids` instead.""")
     def security_group_id(self) -> Optional[pulumi.Input[str]]:
         """
         It has been deprecated from 1.69.0 and use `security_group_ids` instead.
         """
-        warnings.warn("""Attribute `security_group_id` has been deprecated from 1.69.0 and use `security_group_ids` instead.""", DeprecationWarning)
-        pulumi.log.warn("""security_group_id is deprecated: Attribute `security_group_id` has been deprecated from 1.69.0 and use `security_group_ids` instead.""")
-
         return pulumi.get(self, "security_group_id")
 
     @security_group_id.setter
@@ -2663,7 +2845,7 @@ class _InstanceState:
     @pulumi.getter(name="securityGroupIds")
     def security_group_ids(self) -> Optional[pulumi.Input[Sequence[pulumi.Input[str]]]]:
         """
-        , Available in 1.69.0+) The list IDs to join ECS Security Group. At most supports three security groups.
+        , Available since 1.69.0) The list IDs to join ECS Security Group. At most supports three security groups.
         """
         return pulumi.get(self, "security_group_ids")
 
@@ -2711,7 +2893,7 @@ class _InstanceState:
     @pulumi.getter(name="serverCert")
     def server_cert(self) -> Optional[pulumi.Input[str]]:
         """
-        The content of the server certificate. This parameter is supported only when the instance runs PostgreSQL with standard or enhanced SSDs. If you set the CAType parameter to custom, you must also specify this parameter.
+        The content of the server certificate. This parameter is supported only when the instance runs PostgreSQL or MySQL with standard or enhanced SSDs. If you set the CAType parameter to custom, you must also specify this parameter. **NOTE:** From version 1.231.0, `server_cert` start  support `MySQL` engine.
         """
         return pulumi.get(self, "server_cert")
 
@@ -2723,7 +2905,7 @@ class _InstanceState:
     @pulumi.getter(name="serverKey")
     def server_key(self) -> Optional[pulumi.Input[str]]:
         """
-        The private key of the server certificate. This parameter is supported only when the instance runs PostgreSQL with standard or enhanced SSDs. If you set the CAType parameter to custom, you must also specify this parameter.
+        The private key of the server certificate. This parameter is supported only when the instance runs PostgreSQL or MySQL with standard or enhanced SSDs. If you set the CAType parameter to custom, you must also specify this parameter. **NOTE:** From version 1.231.0, `server_key` start support `MySQL` engine.
         """
         return pulumi.get(self, "server_key")
 
@@ -2813,7 +2995,7 @@ class _InstanceState:
     @pulumi.getter
     def status(self) -> Optional[pulumi.Input[str]]:
         """
-        (Available in 1.204.1+) The status of db instance.
+        (Available since 1.204.1) The status of db instance.
         """
         return pulumi.get(self, "status")
 
@@ -2841,7 +3023,7 @@ class _InstanceState:
     @pulumi.getter(name="storageThreshold")
     def storage_threshold(self) -> Optional[pulumi.Input[int]]:
         """
-        The trigger threshold (percentage) for automatic storage space expansion.
+        The threshold in percentage based on which an automatic storage expansion is triggered. If the available storage reaches the threshold, ApsaraDB RDS increases the storage capacity of the instance.
         Valid values: [10, 20, 30, 40, 50].
 
         > **NOTE:** This parameter only takes effect when the StorageAutoScale parameter is set to Enable. The value must be greater than or equal to the total size of the current storage space of the instance.
@@ -2882,7 +3064,7 @@ class _InstanceState:
 
     @property
     @pulumi.getter
-    def tags(self) -> Optional[pulumi.Input[Mapping[str, Any]]]:
+    def tags(self) -> Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]]:
         """
         A mapping of tags to assign to the resource.
         - Key: It can be up to 64 characters in length. It cannot begin with "aliyun", "acs:", "http://", or "https://". It cannot be a null string.
@@ -2893,7 +3075,7 @@ class _InstanceState:
         return pulumi.get(self, "tags")
 
     @tags.setter
-    def tags(self, value: Optional[pulumi.Input[Mapping[str, Any]]]):
+    def tags(self, value: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]]):
         pulumi.set(self, "tags", value)
 
     @property
@@ -2930,11 +3112,24 @@ class _InstanceState:
     def tcp_connection_type(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "tcp_connection_type", value)
 
+    @property
+    @pulumi.getter(name="tdeEncryptionKey")
+    def tde_encryption_key(self) -> Optional[pulumi.Input[str]]:
+        """
+        The ID of the custom key.
+        """
+        return pulumi.get(self, "tde_encryption_key")
+
+    @tde_encryption_key.setter
+    def tde_encryption_key(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "tde_encryption_key", value)
+
     @property
     @pulumi.getter(name="tdeStatus")
     def tde_status(self) -> Optional[pulumi.Input[str]]:
         """
         The TDE(Transparent Data Encryption) status. After TDE is turned on, it cannot be turned off. See more [engine and engineVersion limitation](https://www.alibabacloud.com/help/zh/doc-detail/26256.htm).
+        > **NOTE:** When creating an instance and enabling disk encryption, you can only use the Key ID; you cannot use the ServiceKey.
         """
         return pulumi.get(self, "tde_status")
 
@@ -2944,15 +3139,13 @@ class _InstanceState:
 
     @property
     @pulumi.getter(name="upgradeDbInstanceKernelVersion")
+    @_utilities.deprecated("""Attribute `upgrade_db_instance_kernel_version` has been deprecated from 1.198.0 and use `target_minor_version` instead.""")
     def upgrade_db_instance_kernel_version(self) -> Optional[pulumi.Input[bool]]:
         """
         Whether to upgrade a minor version of the kernel. Valid values:
         - true: upgrade
         - false: not to upgrade
         """
-        warnings.warn("""Attribute `upgrade_db_instance_kernel_version` has been deprecated from 1.198.0 and use `target_minor_version` instead.""", DeprecationWarning)
-        pulumi.log.warn("""upgrade_db_instance_kernel_version is deprecated: Attribute `upgrade_db_instance_kernel_version` has been deprecated from 1.198.0 and use `target_minor_version` instead.""")
-
         return pulumi.get(self, "upgrade_db_instance_kernel_version")
 
     @upgrade_db_instance_kernel_version.setter
@@ -3044,6 +3237,18 @@ class _InstanceState:
     def zone_id_slave_a(self, value: Optional[pulumi.Input[str]]):
         pulumi.set(self, "zone_id_slave_a", value)
 
+    @property
+    @pulumi.getter(name="zoneIdSlaveB")
+    def zone_id_slave_b(self) -> Optional[pulumi.Input[str]]:
+        """
+        RDS MySQL Cluster series instances support creating 1 to 2 secondary nodes at the same time when establishing a new instance. If you have this requirement, you can use this parameter to specify the availability zone for the second secondary node.
+        """
+        return pulumi.get(self, "zone_id_slave_b")
+
+    @zone_id_slave_b.setter
+    def zone_id_slave_b(self, value: Optional[pulumi.Input[str]]):
+        pulumi.set(self, "zone_id_slave_b", value)
+
 
 class Instance(pulumi.CustomResource):
     @overload
@@ -3054,7 +3259,7 @@ class Instance(pulumi.CustomResource):
                  auto_renew: Optional[pulumi.Input[bool]] = None,
                  auto_renew_period: Optional[pulumi.Input[int]] = None,
                  auto_upgrade_minor_version: Optional[pulumi.Input[str]] = None,
-                 babelfish_configs: Optional[pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['InstanceBabelfishConfigArgs']]]]] = None,
+                 babelfish_configs: Optional[pulumi.Input[Sequence[pulumi.Input[Union['InstanceBabelfishConfigArgs', 'InstanceBabelfishConfigArgsDict']]]]] = None,
                  babelfish_port: Optional[pulumi.Input[str]] = None,
                  ca_type: Optional[pulumi.Input[str]] = None,
                  category: Optional[pulumi.Input[str]] = None,
@@ -3067,6 +3272,7 @@ class Instance(pulumi.CustomResource):
                  db_instance_ip_array_name: Optional[pulumi.Input[str]] = None,
                  db_instance_storage_type: Optional[pulumi.Input[str]] = None,
                  db_is_ignore_case: Optional[pulumi.Input[bool]] = None,
+                 db_param_group_id: Optional[pulumi.Input[str]] = None,
                  db_time_zone: Optional[pulumi.Input[str]] = None,
                  deletion_protection: Optional[pulumi.Input[bool]] = None,
                  direction: Optional[pulumi.Input[str]] = None,
@@ -3087,11 +3293,13 @@ class Instance(pulumi.CustomResource):
                  modify_mode: Optional[pulumi.Input[str]] = None,
                  monitoring_period: Optional[pulumi.Input[int]] = None,
                  node_id: Optional[pulumi.Input[str]] = None,
-                 parameters: Optional[pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['InstanceParameterArgs']]]]] = None,
+                 parameters: Optional[pulumi.Input[Sequence[pulumi.Input[Union['InstanceParameterArgs', 'InstanceParameterArgsDict']]]]] = None,
                  period: Optional[pulumi.Input[int]] = None,
-                 pg_hba_confs: Optional[pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['InstancePgHbaConfArgs']]]]] = None,
+                 pg_bouncer_enabled: Optional[pulumi.Input[bool]] = None,
+                 pg_hba_confs: Optional[pulumi.Input[Sequence[pulumi.Input[Union['InstancePgHbaConfArgs', 'InstancePgHbaConfArgsDict']]]]] = None,
                  port: Optional[pulumi.Input[str]] = None,
                  private_ip_address: Optional[pulumi.Input[str]] = None,
+                 recovery_model: Optional[pulumi.Input[str]] = None,
                  released_keep_policy: Optional[pulumi.Input[str]] = None,
                  replication_acl: Optional[pulumi.Input[str]] = None,
                  resource_group_id: Optional[pulumi.Input[str]] = None,
@@ -3103,7 +3311,7 @@ class Instance(pulumi.CustomResource):
                  security_ips: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
                  server_cert: Optional[pulumi.Input[str]] = None,
                  server_key: Optional[pulumi.Input[str]] = None,
-                 serverless_configs: Optional[pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['InstanceServerlessConfigArgs']]]]] = None,
+                 serverless_configs: Optional[pulumi.Input[Sequence[pulumi.Input[Union['InstanceServerlessConfigArgs', 'InstanceServerlessConfigArgsDict']]]]] = None,
                  sql_collector_config_value: Optional[pulumi.Input[int]] = None,
                  sql_collector_status: Optional[pulumi.Input[str]] = None,
                  ssl_action: Optional[pulumi.Input[str]] = None,
@@ -3112,9 +3320,10 @@ class Instance(pulumi.CustomResource):
                  storage_threshold: Optional[pulumi.Input[int]] = None,
                  storage_upper_bound: Optional[pulumi.Input[int]] = None,
                  switch_time: Optional[pulumi.Input[str]] = None,
-                 tags: Optional[pulumi.Input[Mapping[str, Any]]] = None,
+                 tags: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
                  target_minor_version: Optional[pulumi.Input[str]] = None,
                  tcp_connection_type: Optional[pulumi.Input[str]] = None,
+                 tde_encryption_key: Optional[pulumi.Input[str]] = None,
                  tde_status: Optional[pulumi.Input[str]] = None,
                  upgrade_db_instance_kernel_version: Optional[pulumi.Input[bool]] = None,
                  upgrade_time: Optional[pulumi.Input[str]] = None,
@@ -3123,6 +3332,7 @@ class Instance(pulumi.CustomResource):
                  whitelist_network_type: Optional[pulumi.Input[str]] = None,
                  zone_id: Optional[pulumi.Input[str]] = None,
                  zone_id_slave_a: Optional[pulumi.Input[str]] = None,
+                 zone_id_slave_b: Optional[pulumi.Input[str]] = None,
                  __props__=None):
         """
         ## Import
@@ -3147,13 +3357,13 @@ class Instance(pulumi.CustomResource):
                - Manual: Instances are forcibly upgraded to a higher minor version when the current version is unpublished.
                
                See more [details and limitation](https://www.alibabacloud.com/help/doc-detail/123605.htm).
-        :param pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['InstanceBabelfishConfigArgs']]]] babelfish_configs: The configuration of an ApsaraDB RDS for PostgreSQL instance for which Babelfish is enabled. See `babelfish_config` below.
+        :param pulumi.Input[Sequence[pulumi.Input[Union['InstanceBabelfishConfigArgs', 'InstanceBabelfishConfigArgsDict']]]] babelfish_configs: The configuration of an ApsaraDB RDS for PostgreSQL instance for which Babelfish is enabled. See `babelfish_config` below.
                
                > **NOTE:** This parameter takes effect only when you create an ApsaraDB RDS for PostgreSQL instance. For more information, see [Introduction to Babelfish](https://www.alibabacloud.com/help/en/apsaradb-for-rds/latest/babelfish-for-pg).
         :param pulumi.Input[str] babelfish_port: The TDS port of the instance for which Babelfish is enabled.
                
                > **NOTE:** This parameter applies only to ApsaraDB RDS for PostgreSQL instances. For more information about Babelfish for ApsaraDB RDS for PostgreSQL, see [Introduction to Babelfish](https://www.alibabacloud.com/help/en/apsaradb-for-rds/latest/babelfish-for-pg).
-        :param pulumi.Input[str] ca_type: The type of the server certificate. This parameter is supported only when the instance runs PostgreSQL with standard or enhanced SSDs. If you set the SSLEnabled parameter to 1, the default value of this parameter is aliyun. Value range:
+        :param pulumi.Input[str] ca_type: The type of the server certificate. This parameter is supported only when the instance runs PostgreSQL or MySQL with standard or enhanced SSDs. If you set the SSLEnabled parameter to 1, the default value of this parameter is aliyun. **NOTE:** From version 1.231.0, `ca_type` start  support `MySQL` engine. Value range:
                - aliyun: a cloud certificate
                - custom: a custom certificate
         :param pulumi.Input[str] category: The RDS edition of the instance. If you want to create a serverless instance, you must use this value. Valid values:
@@ -3161,10 +3371,10 @@ class Instance(pulumi.CustomResource):
                * **HighAvailability**: High-availability Edition.
                * **AlwaysOn**: Cluster Edition.
                * **Finance**: Enterprise Edition.
-               * **cluster**: MySQL Cluster Edition. (Available in 1.202.0+)
-               * **serverless_basic**: RDS Serverless Basic Edition. This edition is available only for instances that run MySQL and PostgreSQL. (Available in 1.200.0+)
-               * **serverless_standard**: RDS Serverless Basic Edition. This edition is available only for instances that run MySQL and PostgreSQL. (Available in 1.204.0+)
-               * **serverless_ha**: RDS Serverless High-availability Edition for SQL Server. (Available in 1.204.0+)
+               * **cluster**: MySQL Cluster Edition. (Available since 1.202.0)
+               * **serverless_basic**: RDS Serverless Basic Edition. This edition is available only for instances that run MySQL and PostgreSQL. (Available since 1.200.0)
+               * **serverless_standard**: RDS Serverless Basic Edition. This edition is available only for instances that run MySQL and PostgreSQL. (Available since 1.204.0)
+               * **serverless_ha**: RDS Serverless High-availability Edition for SQL Server. (Available since 1.204.0)
                
                > **NOTE:** `zone_id_slave_a` and `zone_id_slave_b` can specify slave zone ids when creating the high-availability or enterprise edition instances. Meanwhile, `vswitch_id` needs to pass in the corresponding vswitch id to the slave zone by order (If the `vswitch_id` is not specified, the classic network version will be created). For example, `zone_id` = "zone-a" and `zone_id_slave_a` = "zone-c", `zone_id_slave_b` = "zone-b", then the `vswitch_id` must be "vsw-zone-a,vsw-zone-c,vsw-zone-b". Of course, you can also choose automatic allocation , for example, `zone_id` = "zone-a" and `zone_id_slave_a` = "Auto",`zone_id_slave_b` = "Auto", then the `vswitch_id` must be "vsw-zone-a,Auto,Auto". The list contains up to 2 slave zone ids , separated by commas.
         :param pulumi.Input[str] client_ca_cert: The public key of the CA that issues client certificates. This parameter is supported only when the instance runs PostgreSQL with standard or enhanced SSDs. If you set the ClientCAEbabled parameter to 1, you must also specify this parameter.
@@ -3176,7 +3386,7 @@ class Instance(pulumi.CustomResource):
                - 1: enables the CRL
                - 0: disables the CRL
         :param pulumi.Input[str] connection_string_prefix: The private connection string prefix. If you want to update public connection string prefix, please use resource rds.Connection connection_prefix.
-               > **NOTE:** The prefix must be 8 to 64 characters in length and can contain letters, digits, and hyphens (-). It cannot contain Chinese characters and special characters ~!#%!^(MISSING)&*=+\\|{};:'",<>/?
+               > **NOTE:** The prefix must be 8 to 64 characters in length and can contain letters, digits, and hyphens (-). It cannot contain Chinese characters and special characters ~!#%^&*=+\\|{};:'",<>/?
         :param pulumi.Input[str] db_instance_ip_array_attribute: The attribute of the IP address whitelist. By default, this parameter is empty.
                
                > **NOTE:** The IP address whitelists that have the hidden attribute are not displayed in the ApsaraDB RDS console. These IP address whitelists are used to access Alibaba Cloud services, such as Data Transmission Service (DTS).
@@ -3189,7 +3399,9 @@ class Instance(pulumi.CustomResource):
                - cloud_essd: specifies to use enhanced SSDs (ESSDs).
                - cloud_essd2: specifies to use enhanced SSDs (ESSDs).
                - cloud_essd3: specifies to use enhanced SSDs (ESSDs).
+               - general_essd: general essd.
         :param pulumi.Input[bool] db_is_ignore_case: Specifies whether table names on the instance are case-sensitive. Valid values: `true`, `false`.
+        :param pulumi.Input[str] db_param_group_id: Parameter template ID. Only MySQL and PostgreSQL support this parameter. If this parameter is not specified, the default parameter template is used. You can also customize a parameter template and use it here.
         :param pulumi.Input[str] db_time_zone: The time zone of the instance. This parameter takes effect only when you set the `Engine` parameter to MySQL or PostgreSQL.
                - If you set the `Engine` parameter to MySQL.
                - This time zone of the instance is in UTC. Valid values: -12:59 to +13:00.
@@ -3209,6 +3421,11 @@ class Instance(pulumi.CustomResource):
                - Immediate: The change immediately takes effect.
                - MaintainTime: The change takes effect during the specified maintenance window. For more information, see ModifyDBInstanceMaintainTime.
         :param pulumi.Input[str] encryption_key: The key id of the KMS. Used for encrypting a disk if not null. Only for PostgreSQL, MySQL and SQLServer.
+               When the instance is PostgreSQL, this parameter can be used to enable, modify, and disable cloud disk encryption.Value range:
+               - ServiceKey: Enable disk encryption using the service-managed key (Default Service CMK) automatically generated by Alibaba Cloud RDS.
+               - <EncryptionKey>: Use a custom key to enable cloud disk encryption or change the current key. For example: 494c98ce-f2b5-48ab-96ab-36c986b6****.
+               - disabled: Turn off cloud disk encryption.
+               > **NOTE:** This parameter is available when the instance runs MySQL.
         :param pulumi.Input[str] engine: Database type. Value options: MySQL, SQLServer, PostgreSQL, MariaDB.
                
                > **NOTE:** When the 'engine_version' changes, it can be used as the target database version for the large version upgrade of RDS for MySQL instance.
@@ -3232,8 +3449,6 @@ class Instance(pulumi.CustomResource):
         :param pulumi.Input[str] ha_config: The primary/secondary switchover mode of the instance. Default value: Auto. Valid values:
                - Auto: The system automatically switches over services from the primary to secondary instances in the event of a fault.
                - Manual: You must manually switch over services from the primary to secondary instances in the event of a fault.
-               
-               > **NOTE:** If you set this parameter to Manual, you must specify the ManualHATime parameter.
         :param pulumi.Input[str] instance_charge_type: Valid values are `Prepaid`, `Postpaid`, `Serverless`, Default to `Postpaid`. Currently, the resource only supports PostPaid to PrePaid. For more information, see [Overview](https://www.alibabacloud.com/help/en/apsaradb-for-rds/latest/what-is-serverless?spm=a2c63.p38356.0.0.772a28cfTAGqIv).
         :param pulumi.Input[str] instance_name: The name of DB instance. It a string of 2 to 256 characters.
         :param pulumi.Input[int] instance_storage: User-defined DB instance storage space. Value range:
@@ -3261,12 +3476,18 @@ class Instance(pulumi.CustomResource):
                - Delete: Delete IP addresses and CIDR blocks that are specified in the SecurityIps parameter from the IP address whitelist. You must retain at least one IP address or CIDR block.
         :param pulumi.Input[int] monitoring_period: The monitoring frequency in seconds. Valid values are 5, 10, 60, 300. Defaults to 300.
         :param pulumi.Input[str] node_id: The globally unique identifier (GUID) of the secondary instance. You can call the DescribeDBInstanceHAConfig operation to query the GUID of the secondary instance.
-        :param pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['InstanceParameterArgs']]]] parameters: Set of parameters needs to be set after DB instance was launched. Available parameters can refer to the latest docs [View database parameter templates](https://www.alibabacloud.com/help/doc-detail/26284.htm) . See `parameters` below.
+        :param pulumi.Input[Sequence[pulumi.Input[Union['InstanceParameterArgs', 'InstanceParameterArgsDict']]]] parameters: Set of parameters needs to be set after DB instance was launched. Available parameters can refer to the latest docs [View database parameter templates](https://www.alibabacloud.com/help/doc-detail/26284.htm) . See `parameters` below.
         :param pulumi.Input[int] period: The duration that you will buy DB instance (in month). It is valid when instance_charge_type is `PrePaid`. Valid values: [1~9], 12, 24, 36.
                > **NOTE:** The attribute `period` is only used to create Subscription instance or modify the PayAsYouGo instance to Subscription. Once effect, it will not be modified that means running `pulumi up` will not effect the resource.
-        :param pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['InstancePgHbaConfArgs']]]] pg_hba_confs: The configuration of [AD domain](https://www.alibabacloud.com/help/en/doc-detail/349288.htm) . See `pg_hba_conf` below.
+        :param pulumi.Input[bool] pg_bouncer_enabled: Modify the PgBouncer feature of the RDS PostgreSQL instance. Valid values:
+               - true: enable.
+               - false: disable.
+        :param pulumi.Input[Sequence[pulumi.Input[Union['InstancePgHbaConfArgs', 'InstancePgHbaConfArgsDict']]]] pg_hba_confs: The configuration of [AD domain](https://www.alibabacloud.com/help/en/doc-detail/349288.htm) . See `pg_hba_conf` below.
         :param pulumi.Input[str] port: The private port of the database service. If you want to update public port, please use resource rds.Connection port.
         :param pulumi.Input[str] private_ip_address: The private IP address of the instance. The private IP address must be within the Classless Inter-Domain Routing (CIDR) block of the vSwitch that is specified by the VSwitchId parameter.
+        :param pulumi.Input[str] recovery_model: Enable the Simple Recovery Model for an RDS SQL Server Instance.The Simple Recovery Model feature is only supported by the Basic Series of RDS SQL Server instances. Once this feature is enabled, it cannot be disabled.Valid values:
+               - simple: Enable Simple Recovery.
+               > **NOTE:** If you set this parameter to Manual, you must specify the ManualHATime parameter.
         :param pulumi.Input[str] released_keep_policy: The policy based on which ApsaraDB RDS retains archived backup files after the instance is released. Valid values:
                - None: No archived backup files are retained.
                - Lastest: Only the last archived backup file is retained.
@@ -3280,14 +3501,17 @@ class Instance(pulumi.CustomResource):
                - verify-full (supported only when the instance runs PostgreSQL 12 or later)
         :param pulumi.Input[str] resource_group_id: The ID of resource group which the DB instance belongs.
         :param pulumi.Input[str] role_arn: The Alibaba Cloud Resource Name (ARN) of the RAM role.
+               
+               > **NOTE:**  This parameter is not required when you create an instance that runs MySQL, PostgreSQL, or SQL Server. You need to only specify the RoleARN parameter to create an instance that has cloud disk encryption enabled by using the obtained key ID.
+               You can configure RAM authorization to require a RAM user to enable cloud disk encryption when the RAM user is used to create an instance. If cloud disk encryption is disabled during the instance creation, the creation operation fails. To complete the configuration, you can attach the following policy to the RAM user: {"Version":"1","Statement":[{"Effect":"Deny","Action":"rds:CreateDBInstance","Resource":"*","Condition":{"StringEquals":{"rds:DiskEncryptionRequired":"false"}}}]}
         :param pulumi.Input[str] security_group_id: It has been deprecated from 1.69.0 and use `security_group_ids` instead.
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] security_group_ids: , Available in 1.69.0+) The list IDs to join ECS Security Group. At most supports three security groups.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] security_group_ids: , Available since 1.69.0) The list IDs to join ECS Security Group. At most supports three security groups.
         :param pulumi.Input[str] security_ip_mode: Valid values are `normal`, `safety`, Default to `normal`. support `safety` switch to high security access mode.
         :param pulumi.Input[str] security_ip_type: The type of IP address in the IP address whitelist.
         :param pulumi.Input[Sequence[pulumi.Input[str]]] security_ips: List of IP addresses allowed to access all databases of an instance. The list contains up to 1,000 IP addresses, separated by commas. Supported formats include 0.0.0.0/0, 10.23.12.24 (IP), and 10.23.12.24/24 (Classless Inter-Domain Routing (CIDR) mode. /24 represents the length of the prefix in an IP address. The range of the prefix length is [1,32]).
-        :param pulumi.Input[str] server_cert: The content of the server certificate. This parameter is supported only when the instance runs PostgreSQL with standard or enhanced SSDs. If you set the CAType parameter to custom, you must also specify this parameter.
-        :param pulumi.Input[str] server_key: The private key of the server certificate. This parameter is supported only when the instance runs PostgreSQL with standard or enhanced SSDs. If you set the CAType parameter to custom, you must also specify this parameter.
-        :param pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['InstanceServerlessConfigArgs']]]] serverless_configs: The settings of the serverless instance. This parameter is required when you create a serverless instance. This parameter takes effect only when you create an ApsaraDB RDS for Serverless instance. See `serverless_config` below.
+        :param pulumi.Input[str] server_cert: The content of the server certificate. This parameter is supported only when the instance runs PostgreSQL or MySQL with standard or enhanced SSDs. If you set the CAType parameter to custom, you must also specify this parameter. **NOTE:** From version 1.231.0, `server_cert` start  support `MySQL` engine.
+        :param pulumi.Input[str] server_key: The private key of the server certificate. This parameter is supported only when the instance runs PostgreSQL or MySQL with standard or enhanced SSDs. If you set the CAType parameter to custom, you must also specify this parameter. **NOTE:** From version 1.231.0, `server_key` start support `MySQL` engine.
+        :param pulumi.Input[Sequence[pulumi.Input[Union['InstanceServerlessConfigArgs', 'InstanceServerlessConfigArgsDict']]]] serverless_configs: The settings of the serverless instance. This parameter is required when you create a serverless instance. This parameter takes effect only when you create an ApsaraDB RDS for Serverless instance. See `serverless_config` below.
         :param pulumi.Input[int] sql_collector_config_value: The sql collector keep time of the instance. Valid values are `30`, `180`, `365`, `1095`, `1825`, Default to `30`.
         :param pulumi.Input[str] sql_collector_status: The sql collector status of the instance. Valid values are `Enabled`, `Disabled`, Default to `Disabled`.
         :param pulumi.Input[str] ssl_action: Actions performed on SSL functions. Valid values: 
@@ -3303,7 +3527,7 @@ class Instance(pulumi.CustomResource):
                - Disable
                
                > **NOTE:** This parameter only takes effect when the StorageAutoScale parameter is set to Enable.
-        :param pulumi.Input[int] storage_threshold: The trigger threshold (percentage) for automatic storage space expansion.
+        :param pulumi.Input[int] storage_threshold: The threshold in percentage based on which an automatic storage expansion is triggered. If the available storage reaches the threshold, ApsaraDB RDS increases the storage capacity of the instance.
                Valid values: [10, 20, 30, 40, 50].
                
                > **NOTE:** This parameter only takes effect when the StorageAutoScale parameter is set to Enable. The value must be greater than or equal to the total size of the current storage space of the instance.
@@ -3313,7 +3537,7 @@ class Instance(pulumi.CustomResource):
         :param pulumi.Input[str] switch_time: The specific point in time when you want to perform the update. Specify the time in the ISO 8601 standard in the yyyy-MM-ddTHH:mm:ssZ format. It is valid only when `target_minor_version` is changed. The time must be in UTC.
                
                > **NOTE:** This parameter takes effect only when you set the UpgradeTime parameter to SpecifyTime.
-        :param pulumi.Input[Mapping[str, Any]] tags: A mapping of tags to assign to the resource.
+        :param pulumi.Input[Mapping[str, pulumi.Input[str]]] tags: A mapping of tags to assign to the resource.
                - Key: It can be up to 64 characters in length. It cannot begin with "aliyun", "acs:", "http://", or "https://". It cannot be a null string.
                - Value: It can be up to 128 characters in length. It cannot begin with "aliyun", "acs:", "http://", or "https://". It can be a null string.
                
@@ -3330,7 +3554,9 @@ class Instance(pulumi.CustomResource):
         :param pulumi.Input[str] tcp_connection_type: The availability check method of the instance. Valid values:
                - **SHORT**: Alibaba Cloud uses short-lived connections to check the availability of the instance.
                - **LONG**: Alibaba Cloud uses persistent connections to check the availability of the instance.
+        :param pulumi.Input[str] tde_encryption_key: The ID of the custom key.
         :param pulumi.Input[str] tde_status: The TDE(Transparent Data Encryption) status. After TDE is turned on, it cannot be turned off. See more [engine and engineVersion limitation](https://www.alibabacloud.com/help/zh/doc-detail/26256.htm).
+               > **NOTE:** When creating an instance and enabling disk encryption, you can only use the Key ID; you cannot use the ServiceKey.
         :param pulumi.Input[bool] upgrade_db_instance_kernel_version: Whether to upgrade a minor version of the kernel. Valid values:
                - true: upgrade
                - false: not to upgrade
@@ -3353,6 +3579,7 @@ class Instance(pulumi.CustomResource):
                If it is a multi-zone and `vswitch_id` is specified, the vswitch must in the one of them.
                The multiple zone ID can be retrieved by setting `multi` to "true" in the data source `get_zones`.
         :param pulumi.Input[str] zone_id_slave_a: The region ID of the secondary instance if you create a secondary instance. If you set this parameter to the same value as the ZoneId parameter, the instance is deployed in a single zone. Otherwise, the instance is deployed in multiple zones.
+        :param pulumi.Input[str] zone_id_slave_b: RDS MySQL Cluster series instances support creating 1 to 2 secondary nodes at the same time when establishing a new instance. If you have this requirement, you can use this parameter to specify the availability zone for the second secondary node.
         """
         ...
     @overload
@@ -3388,7 +3615,7 @@ class Instance(pulumi.CustomResource):
                  auto_renew: Optional[pulumi.Input[bool]] = None,
                  auto_renew_period: Optional[pulumi.Input[int]] = None,
                  auto_upgrade_minor_version: Optional[pulumi.Input[str]] = None,
-                 babelfish_configs: Optional[pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['InstanceBabelfishConfigArgs']]]]] = None,
+                 babelfish_configs: Optional[pulumi.Input[Sequence[pulumi.Input[Union['InstanceBabelfishConfigArgs', 'InstanceBabelfishConfigArgsDict']]]]] = None,
                  babelfish_port: Optional[pulumi.Input[str]] = None,
                  ca_type: Optional[pulumi.Input[str]] = None,
                  category: Optional[pulumi.Input[str]] = None,
@@ -3401,6 +3628,7 @@ class Instance(pulumi.CustomResource):
                  db_instance_ip_array_name: Optional[pulumi.Input[str]] = None,
                  db_instance_storage_type: Optional[pulumi.Input[str]] = None,
                  db_is_ignore_case: Optional[pulumi.Input[bool]] = None,
+                 db_param_group_id: Optional[pulumi.Input[str]] = None,
                  db_time_zone: Optional[pulumi.Input[str]] = None,
                  deletion_protection: Optional[pulumi.Input[bool]] = None,
                  direction: Optional[pulumi.Input[str]] = None,
@@ -3421,11 +3649,13 @@ class Instance(pulumi.CustomResource):
                  modify_mode: Optional[pulumi.Input[str]] = None,
                  monitoring_period: Optional[pulumi.Input[int]] = None,
                  node_id: Optional[pulumi.Input[str]] = None,
-                 parameters: Optional[pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['InstanceParameterArgs']]]]] = None,
+                 parameters: Optional[pulumi.Input[Sequence[pulumi.Input[Union['InstanceParameterArgs', 'InstanceParameterArgsDict']]]]] = None,
                  period: Optional[pulumi.Input[int]] = None,
-                 pg_hba_confs: Optional[pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['InstancePgHbaConfArgs']]]]] = None,
+                 pg_bouncer_enabled: Optional[pulumi.Input[bool]] = None,
+                 pg_hba_confs: Optional[pulumi.Input[Sequence[pulumi.Input[Union['InstancePgHbaConfArgs', 'InstancePgHbaConfArgsDict']]]]] = None,
                  port: Optional[pulumi.Input[str]] = None,
                  private_ip_address: Optional[pulumi.Input[str]] = None,
+                 recovery_model: Optional[pulumi.Input[str]] = None,
                  released_keep_policy: Optional[pulumi.Input[str]] = None,
                  replication_acl: Optional[pulumi.Input[str]] = None,
                  resource_group_id: Optional[pulumi.Input[str]] = None,
@@ -3437,7 +3667,7 @@ class Instance(pulumi.CustomResource):
                  security_ips: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
                  server_cert: Optional[pulumi.Input[str]] = None,
                  server_key: Optional[pulumi.Input[str]] = None,
-                 serverless_configs: Optional[pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['InstanceServerlessConfigArgs']]]]] = None,
+                 serverless_configs: Optional[pulumi.Input[Sequence[pulumi.Input[Union['InstanceServerlessConfigArgs', 'InstanceServerlessConfigArgsDict']]]]] = None,
                  sql_collector_config_value: Optional[pulumi.Input[int]] = None,
                  sql_collector_status: Optional[pulumi.Input[str]] = None,
                  ssl_action: Optional[pulumi.Input[str]] = None,
@@ -3446,9 +3676,10 @@ class Instance(pulumi.CustomResource):
                  storage_threshold: Optional[pulumi.Input[int]] = None,
                  storage_upper_bound: Optional[pulumi.Input[int]] = None,
                  switch_time: Optional[pulumi.Input[str]] = None,
-                 tags: Optional[pulumi.Input[Mapping[str, Any]]] = None,
+                 tags: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
                  target_minor_version: Optional[pulumi.Input[str]] = None,
                  tcp_connection_type: Optional[pulumi.Input[str]] = None,
+                 tde_encryption_key: Optional[pulumi.Input[str]] = None,
                  tde_status: Optional[pulumi.Input[str]] = None,
                  upgrade_db_instance_kernel_version: Optional[pulumi.Input[bool]] = None,
                  upgrade_time: Optional[pulumi.Input[str]] = None,
@@ -3457,6 +3688,7 @@ class Instance(pulumi.CustomResource):
                  whitelist_network_type: Optional[pulumi.Input[str]] = None,
                  zone_id: Optional[pulumi.Input[str]] = None,
                  zone_id_slave_a: Optional[pulumi.Input[str]] = None,
+                 zone_id_slave_b: Optional[pulumi.Input[str]] = None,
                  __props__=None):
         opts = pulumi.ResourceOptions.merge(_utilities.get_resource_opts_defaults(), opts)
         if not isinstance(opts, pulumi.ResourceOptions):
@@ -3474,7 +3706,7 @@ class Instance(pulumi.CustomResource):
             __props__.__dict__["babelfish_port"] = babelfish_port
             __props__.__dict__["ca_type"] = ca_type
             __props__.__dict__["category"] = category
-            __props__.__dict__["client_ca_cert"] = client_ca_cert
+            __props__.__dict__["client_ca_cert"] = None if client_ca_cert is None else pulumi.Output.secret(client_ca_cert)
             __props__.__dict__["client_ca_enabled"] = client_ca_enabled
             __props__.__dict__["client_cert_revocation_list"] = client_cert_revocation_list
             __props__.__dict__["client_crl_enabled"] = client_crl_enabled
@@ -3483,6 +3715,7 @@ class Instance(pulumi.CustomResource):
             __props__.__dict__["db_instance_ip_array_name"] = db_instance_ip_array_name
             __props__.__dict__["db_instance_storage_type"] = db_instance_storage_type
             __props__.__dict__["db_is_ignore_case"] = db_is_ignore_case
+            __props__.__dict__["db_param_group_id"] = db_param_group_id
             __props__.__dict__["db_time_zone"] = db_time_zone
             __props__.__dict__["deletion_protection"] = deletion_protection
             __props__.__dict__["direction"] = direction
@@ -3513,9 +3746,11 @@ class Instance(pulumi.CustomResource):
             __props__.__dict__["node_id"] = node_id
             __props__.__dict__["parameters"] = parameters
             __props__.__dict__["period"] = period
+            __props__.__dict__["pg_bouncer_enabled"] = pg_bouncer_enabled
             __props__.__dict__["pg_hba_confs"] = pg_hba_confs
             __props__.__dict__["port"] = port
             __props__.__dict__["private_ip_address"] = private_ip_address
+            __props__.__dict__["recovery_model"] = recovery_model
             __props__.__dict__["released_keep_policy"] = released_keep_policy
             __props__.__dict__["replication_acl"] = replication_acl
             __props__.__dict__["resource_group_id"] = resource_group_id
@@ -3525,7 +3760,7 @@ class Instance(pulumi.CustomResource):
             __props__.__dict__["security_ip_mode"] = security_ip_mode
             __props__.__dict__["security_ip_type"] = security_ip_type
             __props__.__dict__["security_ips"] = security_ips
-            __props__.__dict__["server_cert"] = server_cert
+            __props__.__dict__["server_cert"] = None if server_cert is None else pulumi.Output.secret(server_cert)
             __props__.__dict__["server_key"] = server_key
             __props__.__dict__["serverless_configs"] = serverless_configs
             __props__.__dict__["sql_collector_config_value"] = sql_collector_config_value
@@ -3539,6 +3774,7 @@ class Instance(pulumi.CustomResource):
             __props__.__dict__["tags"] = tags
             __props__.__dict__["target_minor_version"] = target_minor_version
             __props__.__dict__["tcp_connection_type"] = tcp_connection_type
+            __props__.__dict__["tde_encryption_key"] = tde_encryption_key
             __props__.__dict__["tde_status"] = tde_status
             __props__.__dict__["upgrade_db_instance_kernel_version"] = upgrade_db_instance_kernel_version
             __props__.__dict__["upgrade_time"] = upgrade_time
@@ -3547,11 +3783,14 @@ class Instance(pulumi.CustomResource):
             __props__.__dict__["whitelist_network_type"] = whitelist_network_type
             __props__.__dict__["zone_id"] = zone_id
             __props__.__dict__["zone_id_slave_a"] = zone_id_slave_a
+            __props__.__dict__["zone_id_slave_b"] = zone_id_slave_b
             __props__.__dict__["connection_string"] = None
             __props__.__dict__["create_time"] = None
             __props__.__dict__["db_instance_type"] = None
             __props__.__dict__["ssl_status"] = None
             __props__.__dict__["status"] = None
+        secret_opts = pulumi.ResourceOptions(additional_secret_outputs=["clientCaCert", "serverCert"])
+        opts = pulumi.ResourceOptions.merge(opts, secret_opts)
         super(Instance, __self__).__init__(
             'alicloud:rds/instance:Instance',
             resource_name,
@@ -3566,7 +3805,7 @@ class Instance(pulumi.CustomResource):
             auto_renew: Optional[pulumi.Input[bool]] = None,
             auto_renew_period: Optional[pulumi.Input[int]] = None,
             auto_upgrade_minor_version: Optional[pulumi.Input[str]] = None,
-            babelfish_configs: Optional[pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['InstanceBabelfishConfigArgs']]]]] = None,
+            babelfish_configs: Optional[pulumi.Input[Sequence[pulumi.Input[Union['InstanceBabelfishConfigArgs', 'InstanceBabelfishConfigArgsDict']]]]] = None,
             babelfish_port: Optional[pulumi.Input[str]] = None,
             ca_type: Optional[pulumi.Input[str]] = None,
             category: Optional[pulumi.Input[str]] = None,
@@ -3582,6 +3821,7 @@ class Instance(pulumi.CustomResource):
             db_instance_storage_type: Optional[pulumi.Input[str]] = None,
             db_instance_type: Optional[pulumi.Input[str]] = None,
             db_is_ignore_case: Optional[pulumi.Input[bool]] = None,
+            db_param_group_id: Optional[pulumi.Input[str]] = None,
             db_time_zone: Optional[pulumi.Input[str]] = None,
             deletion_protection: Optional[pulumi.Input[bool]] = None,
             direction: Optional[pulumi.Input[str]] = None,
@@ -3602,11 +3842,13 @@ class Instance(pulumi.CustomResource):
             modify_mode: Optional[pulumi.Input[str]] = None,
             monitoring_period: Optional[pulumi.Input[int]] = None,
             node_id: Optional[pulumi.Input[str]] = None,
-            parameters: Optional[pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['InstanceParameterArgs']]]]] = None,
+            parameters: Optional[pulumi.Input[Sequence[pulumi.Input[Union['InstanceParameterArgs', 'InstanceParameterArgsDict']]]]] = None,
             period: Optional[pulumi.Input[int]] = None,
-            pg_hba_confs: Optional[pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['InstancePgHbaConfArgs']]]]] = None,
+            pg_bouncer_enabled: Optional[pulumi.Input[bool]] = None,
+            pg_hba_confs: Optional[pulumi.Input[Sequence[pulumi.Input[Union['InstancePgHbaConfArgs', 'InstancePgHbaConfArgsDict']]]]] = None,
             port: Optional[pulumi.Input[str]] = None,
             private_ip_address: Optional[pulumi.Input[str]] = None,
+            recovery_model: Optional[pulumi.Input[str]] = None,
             released_keep_policy: Optional[pulumi.Input[str]] = None,
             replication_acl: Optional[pulumi.Input[str]] = None,
             resource_group_id: Optional[pulumi.Input[str]] = None,
@@ -3618,7 +3860,7 @@ class Instance(pulumi.CustomResource):
             security_ips: Optional[pulumi.Input[Sequence[pulumi.Input[str]]]] = None,
             server_cert: Optional[pulumi.Input[str]] = None,
             server_key: Optional[pulumi.Input[str]] = None,
-            serverless_configs: Optional[pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['InstanceServerlessConfigArgs']]]]] = None,
+            serverless_configs: Optional[pulumi.Input[Sequence[pulumi.Input[Union['InstanceServerlessConfigArgs', 'InstanceServerlessConfigArgsDict']]]]] = None,
             sql_collector_config_value: Optional[pulumi.Input[int]] = None,
             sql_collector_status: Optional[pulumi.Input[str]] = None,
             ssl_action: Optional[pulumi.Input[str]] = None,
@@ -3629,9 +3871,10 @@ class Instance(pulumi.CustomResource):
             storage_threshold: Optional[pulumi.Input[int]] = None,
             storage_upper_bound: Optional[pulumi.Input[int]] = None,
             switch_time: Optional[pulumi.Input[str]] = None,
-            tags: Optional[pulumi.Input[Mapping[str, Any]]] = None,
+            tags: Optional[pulumi.Input[Mapping[str, pulumi.Input[str]]]] = None,
             target_minor_version: Optional[pulumi.Input[str]] = None,
             tcp_connection_type: Optional[pulumi.Input[str]] = None,
+            tde_encryption_key: Optional[pulumi.Input[str]] = None,
             tde_status: Optional[pulumi.Input[str]] = None,
             upgrade_db_instance_kernel_version: Optional[pulumi.Input[bool]] = None,
             upgrade_time: Optional[pulumi.Input[str]] = None,
@@ -3639,7 +3882,8 @@ class Instance(pulumi.CustomResource):
             vswitch_id: Optional[pulumi.Input[str]] = None,
             whitelist_network_type: Optional[pulumi.Input[str]] = None,
             zone_id: Optional[pulumi.Input[str]] = None,
-            zone_id_slave_a: Optional[pulumi.Input[str]] = None) -> 'Instance':
+            zone_id_slave_a: Optional[pulumi.Input[str]] = None,
+            zone_id_slave_b: Optional[pulumi.Input[str]] = None) -> 'Instance':
         """
         Get an existing Instance resource's state with the given name, id, and optional extra
         properties used to qualify the lookup.
@@ -3659,13 +3903,13 @@ class Instance(pulumi.CustomResource):
                - Manual: Instances are forcibly upgraded to a higher minor version when the current version is unpublished.
                
                See more [details and limitation](https://www.alibabacloud.com/help/doc-detail/123605.htm).
-        :param pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['InstanceBabelfishConfigArgs']]]] babelfish_configs: The configuration of an ApsaraDB RDS for PostgreSQL instance for which Babelfish is enabled. See `babelfish_config` below.
+        :param pulumi.Input[Sequence[pulumi.Input[Union['InstanceBabelfishConfigArgs', 'InstanceBabelfishConfigArgsDict']]]] babelfish_configs: The configuration of an ApsaraDB RDS for PostgreSQL instance for which Babelfish is enabled. See `babelfish_config` below.
                
                > **NOTE:** This parameter takes effect only when you create an ApsaraDB RDS for PostgreSQL instance. For more information, see [Introduction to Babelfish](https://www.alibabacloud.com/help/en/apsaradb-for-rds/latest/babelfish-for-pg).
         :param pulumi.Input[str] babelfish_port: The TDS port of the instance for which Babelfish is enabled.
                
                > **NOTE:** This parameter applies only to ApsaraDB RDS for PostgreSQL instances. For more information about Babelfish for ApsaraDB RDS for PostgreSQL, see [Introduction to Babelfish](https://www.alibabacloud.com/help/en/apsaradb-for-rds/latest/babelfish-for-pg).
-        :param pulumi.Input[str] ca_type: The type of the server certificate. This parameter is supported only when the instance runs PostgreSQL with standard or enhanced SSDs. If you set the SSLEnabled parameter to 1, the default value of this parameter is aliyun. Value range:
+        :param pulumi.Input[str] ca_type: The type of the server certificate. This parameter is supported only when the instance runs PostgreSQL or MySQL with standard or enhanced SSDs. If you set the SSLEnabled parameter to 1, the default value of this parameter is aliyun. **NOTE:** From version 1.231.0, `ca_type` start  support `MySQL` engine. Value range:
                - aliyun: a cloud certificate
                - custom: a custom certificate
         :param pulumi.Input[str] category: The RDS edition of the instance. If you want to create a serverless instance, you must use this value. Valid values:
@@ -3673,10 +3917,10 @@ class Instance(pulumi.CustomResource):
                * **HighAvailability**: High-availability Edition.
                * **AlwaysOn**: Cluster Edition.
                * **Finance**: Enterprise Edition.
-               * **cluster**: MySQL Cluster Edition. (Available in 1.202.0+)
-               * **serverless_basic**: RDS Serverless Basic Edition. This edition is available only for instances that run MySQL and PostgreSQL. (Available in 1.200.0+)
-               * **serverless_standard**: RDS Serverless Basic Edition. This edition is available only for instances that run MySQL and PostgreSQL. (Available in 1.204.0+)
-               * **serverless_ha**: RDS Serverless High-availability Edition for SQL Server. (Available in 1.204.0+)
+               * **cluster**: MySQL Cluster Edition. (Available since 1.202.0)
+               * **serverless_basic**: RDS Serverless Basic Edition. This edition is available only for instances that run MySQL and PostgreSQL. (Available since 1.200.0)
+               * **serverless_standard**: RDS Serverless Basic Edition. This edition is available only for instances that run MySQL and PostgreSQL. (Available since 1.204.0)
+               * **serverless_ha**: RDS Serverless High-availability Edition for SQL Server. (Available since 1.204.0)
                
                > **NOTE:** `zone_id_slave_a` and `zone_id_slave_b` can specify slave zone ids when creating the high-availability or enterprise edition instances. Meanwhile, `vswitch_id` needs to pass in the corresponding vswitch id to the slave zone by order (If the `vswitch_id` is not specified, the classic network version will be created). For example, `zone_id` = "zone-a" and `zone_id_slave_a` = "zone-c", `zone_id_slave_b` = "zone-b", then the `vswitch_id` must be "vsw-zone-a,vsw-zone-c,vsw-zone-b". Of course, you can also choose automatic allocation , for example, `zone_id` = "zone-a" and `zone_id_slave_a` = "Auto",`zone_id_slave_b` = "Auto", then the `vswitch_id` must be "vsw-zone-a,Auto,Auto". The list contains up to 2 slave zone ids , separated by commas.
         :param pulumi.Input[str] client_ca_cert: The public key of the CA that issues client certificates. This parameter is supported only when the instance runs PostgreSQL with standard or enhanced SSDs. If you set the ClientCAEbabled parameter to 1, you must also specify this parameter.
@@ -3689,8 +3933,8 @@ class Instance(pulumi.CustomResource):
                - 0: disables the CRL
         :param pulumi.Input[str] connection_string: RDS database connection string.
         :param pulumi.Input[str] connection_string_prefix: The private connection string prefix. If you want to update public connection string prefix, please use resource rds.Connection connection_prefix.
-               > **NOTE:** The prefix must be 8 to 64 characters in length and can contain letters, digits, and hyphens (-). It cannot contain Chinese characters and special characters ~!#%!^(MISSING)&*=+\\|{};:'",<>/?
-        :param pulumi.Input[str] create_time: (Available in 1.204.1+) The creation time of db instance.
+               > **NOTE:** The prefix must be 8 to 64 characters in length and can contain letters, digits, and hyphens (-). It cannot contain Chinese characters and special characters ~!#%^&*=+\\|{};:'",<>/?
+        :param pulumi.Input[str] create_time: (Available since 1.204.1) The creation time of db instance.
         :param pulumi.Input[str] db_instance_ip_array_attribute: The attribute of the IP address whitelist. By default, this parameter is empty.
                
                > **NOTE:** The IP address whitelists that have the hidden attribute are not displayed in the ApsaraDB RDS console. These IP address whitelists are used to access Alibaba Cloud services, such as Data Transmission Service (DTS).
@@ -3703,8 +3947,10 @@ class Instance(pulumi.CustomResource):
                - cloud_essd: specifies to use enhanced SSDs (ESSDs).
                - cloud_essd2: specifies to use enhanced SSDs (ESSDs).
                - cloud_essd3: specifies to use enhanced SSDs (ESSDs).
-        :param pulumi.Input[str] db_instance_type: (Available in 1.197.0+) The type of db instance.
+               - general_essd: general essd.
+        :param pulumi.Input[str] db_instance_type: (Available since 1.197.0) The type of db instance.
         :param pulumi.Input[bool] db_is_ignore_case: Specifies whether table names on the instance are case-sensitive. Valid values: `true`, `false`.
+        :param pulumi.Input[str] db_param_group_id: Parameter template ID. Only MySQL and PostgreSQL support this parameter. If this parameter is not specified, the default parameter template is used. You can also customize a parameter template and use it here.
         :param pulumi.Input[str] db_time_zone: The time zone of the instance. This parameter takes effect only when you set the `Engine` parameter to MySQL or PostgreSQL.
                - If you set the `Engine` parameter to MySQL.
                - This time zone of the instance is in UTC. Valid values: -12:59 to +13:00.
@@ -3724,6 +3970,11 @@ class Instance(pulumi.CustomResource):
                - Immediate: The change immediately takes effect.
                - MaintainTime: The change takes effect during the specified maintenance window. For more information, see ModifyDBInstanceMaintainTime.
         :param pulumi.Input[str] encryption_key: The key id of the KMS. Used for encrypting a disk if not null. Only for PostgreSQL, MySQL and SQLServer.
+               When the instance is PostgreSQL, this parameter can be used to enable, modify, and disable cloud disk encryption.Value range:
+               - ServiceKey: Enable disk encryption using the service-managed key (Default Service CMK) automatically generated by Alibaba Cloud RDS.
+               - <EncryptionKey>: Use a custom key to enable cloud disk encryption or change the current key. For example: 494c98ce-f2b5-48ab-96ab-36c986b6****.
+               - disabled: Turn off cloud disk encryption.
+               > **NOTE:** This parameter is available when the instance runs MySQL.
         :param pulumi.Input[str] engine: Database type. Value options: MySQL, SQLServer, PostgreSQL, MariaDB.
                
                > **NOTE:** When the 'engine_version' changes, it can be used as the target database version for the large version upgrade of RDS for MySQL instance.
@@ -3747,8 +3998,6 @@ class Instance(pulumi.CustomResource):
         :param pulumi.Input[str] ha_config: The primary/secondary switchover mode of the instance. Default value: Auto. Valid values:
                - Auto: The system automatically switches over services from the primary to secondary instances in the event of a fault.
                - Manual: You must manually switch over services from the primary to secondary instances in the event of a fault.
-               
-               > **NOTE:** If you set this parameter to Manual, you must specify the ManualHATime parameter.
         :param pulumi.Input[str] instance_charge_type: Valid values are `Prepaid`, `Postpaid`, `Serverless`, Default to `Postpaid`. Currently, the resource only supports PostPaid to PrePaid. For more information, see [Overview](https://www.alibabacloud.com/help/en/apsaradb-for-rds/latest/what-is-serverless?spm=a2c63.p38356.0.0.772a28cfTAGqIv).
         :param pulumi.Input[str] instance_name: The name of DB instance. It a string of 2 to 256 characters.
         :param pulumi.Input[int] instance_storage: User-defined DB instance storage space. Value range:
@@ -3776,12 +4025,18 @@ class Instance(pulumi.CustomResource):
                - Delete: Delete IP addresses and CIDR blocks that are specified in the SecurityIps parameter from the IP address whitelist. You must retain at least one IP address or CIDR block.
         :param pulumi.Input[int] monitoring_period: The monitoring frequency in seconds. Valid values are 5, 10, 60, 300. Defaults to 300.
         :param pulumi.Input[str] node_id: The globally unique identifier (GUID) of the secondary instance. You can call the DescribeDBInstanceHAConfig operation to query the GUID of the secondary instance.
-        :param pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['InstanceParameterArgs']]]] parameters: Set of parameters needs to be set after DB instance was launched. Available parameters can refer to the latest docs [View database parameter templates](https://www.alibabacloud.com/help/doc-detail/26284.htm) . See `parameters` below.
+        :param pulumi.Input[Sequence[pulumi.Input[Union['InstanceParameterArgs', 'InstanceParameterArgsDict']]]] parameters: Set of parameters needs to be set after DB instance was launched. Available parameters can refer to the latest docs [View database parameter templates](https://www.alibabacloud.com/help/doc-detail/26284.htm) . See `parameters` below.
         :param pulumi.Input[int] period: The duration that you will buy DB instance (in month). It is valid when instance_charge_type is `PrePaid`. Valid values: [1~9], 12, 24, 36.
                > **NOTE:** The attribute `period` is only used to create Subscription instance or modify the PayAsYouGo instance to Subscription. Once effect, it will not be modified that means running `pulumi up` will not effect the resource.
-        :param pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['InstancePgHbaConfArgs']]]] pg_hba_confs: The configuration of [AD domain](https://www.alibabacloud.com/help/en/doc-detail/349288.htm) . See `pg_hba_conf` below.
+        :param pulumi.Input[bool] pg_bouncer_enabled: Modify the PgBouncer feature of the RDS PostgreSQL instance. Valid values:
+               - true: enable.
+               - false: disable.
+        :param pulumi.Input[Sequence[pulumi.Input[Union['InstancePgHbaConfArgs', 'InstancePgHbaConfArgsDict']]]] pg_hba_confs: The configuration of [AD domain](https://www.alibabacloud.com/help/en/doc-detail/349288.htm) . See `pg_hba_conf` below.
         :param pulumi.Input[str] port: The private port of the database service. If you want to update public port, please use resource rds.Connection port.
         :param pulumi.Input[str] private_ip_address: The private IP address of the instance. The private IP address must be within the Classless Inter-Domain Routing (CIDR) block of the vSwitch that is specified by the VSwitchId parameter.
+        :param pulumi.Input[str] recovery_model: Enable the Simple Recovery Model for an RDS SQL Server Instance.The Simple Recovery Model feature is only supported by the Basic Series of RDS SQL Server instances. Once this feature is enabled, it cannot be disabled.Valid values:
+               - simple: Enable Simple Recovery.
+               > **NOTE:** If you set this parameter to Manual, you must specify the ManualHATime parameter.
         :param pulumi.Input[str] released_keep_policy: The policy based on which ApsaraDB RDS retains archived backup files after the instance is released. Valid values:
                - None: No archived backup files are retained.
                - Lastest: Only the last archived backup file is retained.
@@ -3795,14 +4050,17 @@ class Instance(pulumi.CustomResource):
                - verify-full (supported only when the instance runs PostgreSQL 12 or later)
         :param pulumi.Input[str] resource_group_id: The ID of resource group which the DB instance belongs.
         :param pulumi.Input[str] role_arn: The Alibaba Cloud Resource Name (ARN) of the RAM role.
+               
+               > **NOTE:**  This parameter is not required when you create an instance that runs MySQL, PostgreSQL, or SQL Server. You need to only specify the RoleARN parameter to create an instance that has cloud disk encryption enabled by using the obtained key ID.
+               You can configure RAM authorization to require a RAM user to enable cloud disk encryption when the RAM user is used to create an instance. If cloud disk encryption is disabled during the instance creation, the creation operation fails. To complete the configuration, you can attach the following policy to the RAM user: {"Version":"1","Statement":[{"Effect":"Deny","Action":"rds:CreateDBInstance","Resource":"*","Condition":{"StringEquals":{"rds:DiskEncryptionRequired":"false"}}}]}
         :param pulumi.Input[str] security_group_id: It has been deprecated from 1.69.0 and use `security_group_ids` instead.
-        :param pulumi.Input[Sequence[pulumi.Input[str]]] security_group_ids: , Available in 1.69.0+) The list IDs to join ECS Security Group. At most supports three security groups.
+        :param pulumi.Input[Sequence[pulumi.Input[str]]] security_group_ids: , Available since 1.69.0) The list IDs to join ECS Security Group. At most supports three security groups.
         :param pulumi.Input[str] security_ip_mode: Valid values are `normal`, `safety`, Default to `normal`. support `safety` switch to high security access mode.
         :param pulumi.Input[str] security_ip_type: The type of IP address in the IP address whitelist.
         :param pulumi.Input[Sequence[pulumi.Input[str]]] security_ips: List of IP addresses allowed to access all databases of an instance. The list contains up to 1,000 IP addresses, separated by commas. Supported formats include 0.0.0.0/0, 10.23.12.24 (IP), and 10.23.12.24/24 (Classless Inter-Domain Routing (CIDR) mode. /24 represents the length of the prefix in an IP address. The range of the prefix length is [1,32]).
-        :param pulumi.Input[str] server_cert: The content of the server certificate. This parameter is supported only when the instance runs PostgreSQL with standard or enhanced SSDs. If you set the CAType parameter to custom, you must also specify this parameter.
-        :param pulumi.Input[str] server_key: The private key of the server certificate. This parameter is supported only when the instance runs PostgreSQL with standard or enhanced SSDs. If you set the CAType parameter to custom, you must also specify this parameter.
-        :param pulumi.Input[Sequence[pulumi.Input[pulumi.InputType['InstanceServerlessConfigArgs']]]] serverless_configs: The settings of the serverless instance. This parameter is required when you create a serverless instance. This parameter takes effect only when you create an ApsaraDB RDS for Serverless instance. See `serverless_config` below.
+        :param pulumi.Input[str] server_cert: The content of the server certificate. This parameter is supported only when the instance runs PostgreSQL or MySQL with standard or enhanced SSDs. If you set the CAType parameter to custom, you must also specify this parameter. **NOTE:** From version 1.231.0, `server_cert` start  support `MySQL` engine.
+        :param pulumi.Input[str] server_key: The private key of the server certificate. This parameter is supported only when the instance runs PostgreSQL or MySQL with standard or enhanced SSDs. If you set the CAType parameter to custom, you must also specify this parameter. **NOTE:** From version 1.231.0, `server_key` start support `MySQL` engine.
+        :param pulumi.Input[Sequence[pulumi.Input[Union['InstanceServerlessConfigArgs', 'InstanceServerlessConfigArgsDict']]]] serverless_configs: The settings of the serverless instance. This parameter is required when you create a serverless instance. This parameter takes effect only when you create an ApsaraDB RDS for Serverless instance. See `serverless_config` below.
         :param pulumi.Input[int] sql_collector_config_value: The sql collector keep time of the instance. Valid values are `30`, `180`, `365`, `1095`, `1825`, Default to `30`.
         :param pulumi.Input[str] sql_collector_status: The sql collector status of the instance. Valid values are `Enabled`, `Disabled`, Default to `Disabled`.
         :param pulumi.Input[str] ssl_action: Actions performed on SSL functions. Valid values: 
@@ -3814,13 +4072,13 @@ class Instance(pulumi.CustomResource):
                > **NOTE:** The attribute `ssl_action` will be ignored when setting `instance_charge_type = "Serverless"` for SQLServer, PostgreSQL or MariaDB.
         :param pulumi.Input[str] ssl_connection_string: The internal or public endpoint for which the server certificate needs to be created or updated.
         :param pulumi.Input[str] ssl_status: Status of the SSL feature. `Yes`: SSL is turned on; `No`: SSL is turned off.
-        :param pulumi.Input[str] status: (Available in 1.204.1+) The status of db instance.
+        :param pulumi.Input[str] status: (Available since 1.204.1) The status of db instance.
         :param pulumi.Input[str] storage_auto_scale: Automatic storage space expansion switch. Valid values:
                - Enable
                - Disable
                
                > **NOTE:** This parameter only takes effect when the StorageAutoScale parameter is set to Enable.
-        :param pulumi.Input[int] storage_threshold: The trigger threshold (percentage) for automatic storage space expansion.
+        :param pulumi.Input[int] storage_threshold: The threshold in percentage based on which an automatic storage expansion is triggered. If the available storage reaches the threshold, ApsaraDB RDS increases the storage capacity of the instance.
                Valid values: [10, 20, 30, 40, 50].
                
                > **NOTE:** This parameter only takes effect when the StorageAutoScale parameter is set to Enable. The value must be greater than or equal to the total size of the current storage space of the instance.
@@ -3830,7 +4088,7 @@ class Instance(pulumi.CustomResource):
         :param pulumi.Input[str] switch_time: The specific point in time when you want to perform the update. Specify the time in the ISO 8601 standard in the yyyy-MM-ddTHH:mm:ssZ format. It is valid only when `target_minor_version` is changed. The time must be in UTC.
                
                > **NOTE:** This parameter takes effect only when you set the UpgradeTime parameter to SpecifyTime.
-        :param pulumi.Input[Mapping[str, Any]] tags: A mapping of tags to assign to the resource.
+        :param pulumi.Input[Mapping[str, pulumi.Input[str]]] tags: A mapping of tags to assign to the resource.
                - Key: It can be up to 64 characters in length. It cannot begin with "aliyun", "acs:", "http://", or "https://". It cannot be a null string.
                - Value: It can be up to 128 characters in length. It cannot begin with "aliyun", "acs:", "http://", or "https://". It can be a null string.
                
@@ -3847,7 +4105,9 @@ class Instance(pulumi.CustomResource):
         :param pulumi.Input[str] tcp_connection_type: The availability check method of the instance. Valid values:
                - **SHORT**: Alibaba Cloud uses short-lived connections to check the availability of the instance.
                - **LONG**: Alibaba Cloud uses persistent connections to check the availability of the instance.
+        :param pulumi.Input[str] tde_encryption_key: The ID of the custom key.
         :param pulumi.Input[str] tde_status: The TDE(Transparent Data Encryption) status. After TDE is turned on, it cannot be turned off. See more [engine and engineVersion limitation](https://www.alibabacloud.com/help/zh/doc-detail/26256.htm).
+               > **NOTE:** When creating an instance and enabling disk encryption, you can only use the Key ID; you cannot use the ServiceKey.
         :param pulumi.Input[bool] upgrade_db_instance_kernel_version: Whether to upgrade a minor version of the kernel. Valid values:
                - true: upgrade
                - false: not to upgrade
@@ -3870,6 +4130,7 @@ class Instance(pulumi.CustomResource):
                If it is a multi-zone and `vswitch_id` is specified, the vswitch must in the one of them.
                The multiple zone ID can be retrieved by setting `multi` to "true" in the data source `get_zones`.
         :param pulumi.Input[str] zone_id_slave_a: The region ID of the secondary instance if you create a secondary instance. If you set this parameter to the same value as the ZoneId parameter, the instance is deployed in a single zone. Otherwise, the instance is deployed in multiple zones.
+        :param pulumi.Input[str] zone_id_slave_b: RDS MySQL Cluster series instances support creating 1 to 2 secondary nodes at the same time when establishing a new instance. If you have this requirement, you can use this parameter to specify the availability zone for the second secondary node.
         """
         opts = pulumi.ResourceOptions.merge(opts, pulumi.ResourceOptions(id=id))
 
@@ -3895,6 +4156,7 @@ class Instance(pulumi.CustomResource):
         __props__.__dict__["db_instance_storage_type"] = db_instance_storage_type
         __props__.__dict__["db_instance_type"] = db_instance_type
         __props__.__dict__["db_is_ignore_case"] = db_is_ignore_case
+        __props__.__dict__["db_param_group_id"] = db_param_group_id
         __props__.__dict__["db_time_zone"] = db_time_zone
         __props__.__dict__["deletion_protection"] = deletion_protection
         __props__.__dict__["direction"] = direction
@@ -3917,9 +4179,11 @@ class Instance(pulumi.CustomResource):
         __props__.__dict__["node_id"] = node_id
         __props__.__dict__["parameters"] = parameters
         __props__.__dict__["period"] = period
+        __props__.__dict__["pg_bouncer_enabled"] = pg_bouncer_enabled
         __props__.__dict__["pg_hba_confs"] = pg_hba_confs
         __props__.__dict__["port"] = port
         __props__.__dict__["private_ip_address"] = private_ip_address
+        __props__.__dict__["recovery_model"] = recovery_model
         __props__.__dict__["released_keep_policy"] = released_keep_policy
         __props__.__dict__["replication_acl"] = replication_acl
         __props__.__dict__["resource_group_id"] = resource_group_id
@@ -3945,6 +4209,7 @@ class Instance(pulumi.CustomResource):
         __props__.__dict__["tags"] = tags
         __props__.__dict__["target_minor_version"] = target_minor_version
         __props__.__dict__["tcp_connection_type"] = tcp_connection_type
+        __props__.__dict__["tde_encryption_key"] = tde_encryption_key
         __props__.__dict__["tde_status"] = tde_status
         __props__.__dict__["upgrade_db_instance_kernel_version"] = upgrade_db_instance_kernel_version
         __props__.__dict__["upgrade_time"] = upgrade_time
@@ -3953,6 +4218,7 @@ class Instance(pulumi.CustomResource):
         __props__.__dict__["whitelist_network_type"] = whitelist_network_type
         __props__.__dict__["zone_id"] = zone_id
         __props__.__dict__["zone_id_slave_a"] = zone_id_slave_a
+        __props__.__dict__["zone_id_slave_b"] = zone_id_slave_b
         return Instance(resource_name, opts=opts, __props__=__props__)
 
     @property
@@ -4019,7 +4285,7 @@ class Instance(pulumi.CustomResource):
     @pulumi.getter(name="caType")
     def ca_type(self) -> pulumi.Output[str]:
         """
-        The type of the server certificate. This parameter is supported only when the instance runs PostgreSQL with standard or enhanced SSDs. If you set the SSLEnabled parameter to 1, the default value of this parameter is aliyun. Value range:
+        The type of the server certificate. This parameter is supported only when the instance runs PostgreSQL or MySQL with standard or enhanced SSDs. If you set the SSLEnabled parameter to 1, the default value of this parameter is aliyun. **NOTE:** From version 1.231.0, `ca_type` start  support `MySQL` engine. Value range:
         - aliyun: a cloud certificate
         - custom: a custom certificate
         """
@@ -4034,10 +4300,10 @@ class Instance(pulumi.CustomResource):
         * **HighAvailability**: High-availability Edition.
         * **AlwaysOn**: Cluster Edition.
         * **Finance**: Enterprise Edition.
-        * **cluster**: MySQL Cluster Edition. (Available in 1.202.0+)
-        * **serverless_basic**: RDS Serverless Basic Edition. This edition is available only for instances that run MySQL and PostgreSQL. (Available in 1.200.0+)
-        * **serverless_standard**: RDS Serverless Basic Edition. This edition is available only for instances that run MySQL and PostgreSQL. (Available in 1.204.0+)
-        * **serverless_ha**: RDS Serverless High-availability Edition for SQL Server. (Available in 1.204.0+)
+        * **cluster**: MySQL Cluster Edition. (Available since 1.202.0)
+        * **serverless_basic**: RDS Serverless Basic Edition. This edition is available only for instances that run MySQL and PostgreSQL. (Available since 1.200.0)
+        * **serverless_standard**: RDS Serverless Basic Edition. This edition is available only for instances that run MySQL and PostgreSQL. (Available since 1.204.0)
+        * **serverless_ha**: RDS Serverless High-availability Edition for SQL Server. (Available since 1.204.0)
 
         > **NOTE:** `zone_id_slave_a` and `zone_id_slave_b` can specify slave zone ids when creating the high-availability or enterprise edition instances. Meanwhile, `vswitch_id` needs to pass in the corresponding vswitch id to the slave zone by order (If the `vswitch_id` is not specified, the classic network version will be created). For example, `zone_id` = "zone-a" and `zone_id_slave_a` = "zone-c", `zone_id_slave_b` = "zone-b", then the `vswitch_id` must be "vsw-zone-a,vsw-zone-c,vsw-zone-b". Of course, you can also choose automatic allocation , for example, `zone_id` = "zone-a" and `zone_id_slave_a` = "Auto",`zone_id_slave_b` = "Auto", then the `vswitch_id` must be "vsw-zone-a,Auto,Auto". The list contains up to 2 slave zone ids , separated by commas.
         """
@@ -4092,7 +4358,7 @@ class Instance(pulumi.CustomResource):
     def connection_string_prefix(self) -> pulumi.Output[str]:
         """
         The private connection string prefix. If you want to update public connection string prefix, please use resource rds.Connection connection_prefix.
-        > **NOTE:** The prefix must be 8 to 64 characters in length and can contain letters, digits, and hyphens (-). It cannot contain Chinese characters and special characters ~!#%!^(MISSING)&*=+\\|{};:'",<>/?
+        > **NOTE:** The prefix must be 8 to 64 characters in length and can contain letters, digits, and hyphens (-). It cannot contain Chinese characters and special characters ~!#%^&*=+\\|{};:'",<>/?
         """
         return pulumi.get(self, "connection_string_prefix")
 
@@ -4100,7 +4366,7 @@ class Instance(pulumi.CustomResource):
     @pulumi.getter(name="createTime")
     def create_time(self) -> pulumi.Output[str]:
         """
-        (Available in 1.204.1+) The creation time of db instance.
+        (Available since 1.204.1) The creation time of db instance.
         """
         return pulumi.get(self, "create_time")
 
@@ -4134,6 +4400,7 @@ class Instance(pulumi.CustomResource):
         - cloud_essd: specifies to use enhanced SSDs (ESSDs).
         - cloud_essd2: specifies to use enhanced SSDs (ESSDs).
         - cloud_essd3: specifies to use enhanced SSDs (ESSDs).
+        - general_essd: general essd.
         """
         return pulumi.get(self, "db_instance_storage_type")
 
@@ -4141,7 +4408,7 @@ class Instance(pulumi.CustomResource):
     @pulumi.getter(name="dbInstanceType")
     def db_instance_type(self) -> pulumi.Output[str]:
         """
-        (Available in 1.197.0+) The type of db instance.
+        (Available since 1.197.0) The type of db instance.
         """
         return pulumi.get(self, "db_instance_type")
 
@@ -4153,6 +4420,14 @@ class Instance(pulumi.CustomResource):
         """
         return pulumi.get(self, "db_is_ignore_case")
 
+    @property
+    @pulumi.getter(name="dbParamGroupId")
+    def db_param_group_id(self) -> pulumi.Output[Optional[str]]:
+        """
+        Parameter template ID. Only MySQL and PostgreSQL support this parameter. If this parameter is not specified, the default parameter template is used. You can also customize a parameter template and use it here.
+        """
+        return pulumi.get(self, "db_param_group_id")
+
     @property
     @pulumi.getter(name="dbTimeZone")
     def db_time_zone(self) -> pulumi.Output[str]:
@@ -4204,6 +4479,11 @@ class Instance(pulumi.CustomResource):
     def encryption_key(self) -> pulumi.Output[Optional[str]]:
         """
         The key id of the KMS. Used for encrypting a disk if not null. Only for PostgreSQL, MySQL and SQLServer.
+        When the instance is PostgreSQL, this parameter can be used to enable, modify, and disable cloud disk encryption.Value range:
+        - ServiceKey: Enable disk encryption using the service-managed key (Default Service CMK) automatically generated by Alibaba Cloud RDS.
+        - <EncryptionKey>: Use a custom key to enable cloud disk encryption or change the current key. For example: 494c98ce-f2b5-48ab-96ab-36c986b6****.
+        - disabled: Turn off cloud disk encryption.
+        > **NOTE:** This parameter is available when the instance runs MySQL.
         """
         return pulumi.get(self, "encryption_key")
 
@@ -4269,8 +4549,6 @@ class Instance(pulumi.CustomResource):
         The primary/secondary switchover mode of the instance. Default value: Auto. Valid values:
         - Auto: The system automatically switches over services from the primary to secondary instances in the event of a fault.
         - Manual: You must manually switch over services from the primary to secondary instances in the event of a fault.
-
-        > **NOTE:** If you set this parameter to Manual, you must specify the ManualHATime parameter.
         """
         return pulumi.get(self, "ha_config")
 
@@ -4381,6 +4659,16 @@ class Instance(pulumi.CustomResource):
         """
         return pulumi.get(self, "period")
 
+    @property
+    @pulumi.getter(name="pgBouncerEnabled")
+    def pg_bouncer_enabled(self) -> pulumi.Output[Optional[bool]]:
+        """
+        Modify the PgBouncer feature of the RDS PostgreSQL instance. Valid values:
+        - true: enable.
+        - false: disable.
+        """
+        return pulumi.get(self, "pg_bouncer_enabled")
+
     @property
     @pulumi.getter(name="pgHbaConfs")
     def pg_hba_confs(self) -> pulumi.Output[Sequence['outputs.InstancePgHbaConf']]:
@@ -4405,6 +4693,16 @@ class Instance(pulumi.CustomResource):
         """
         return pulumi.get(self, "private_ip_address")
 
+    @property
+    @pulumi.getter(name="recoveryModel")
+    def recovery_model(self) -> pulumi.Output[str]:
+        """
+        Enable the Simple Recovery Model for an RDS SQL Server Instance.The Simple Recovery Model feature is only supported by the Basic Series of RDS SQL Server instances. Once this feature is enabled, it cannot be disabled.Valid values:
+        - simple: Enable Simple Recovery.
+        > **NOTE:** If you set this parameter to Manual, you must specify the ManualHATime parameter.
+        """
+        return pulumi.get(self, "recovery_model")
+
     @property
     @pulumi.getter(name="releasedKeepPolicy")
     def released_keep_policy(self) -> pulumi.Output[Optional[str]]:
@@ -4443,25 +4741,26 @@ class Instance(pulumi.CustomResource):
     def role_arn(self) -> pulumi.Output[str]:
         """
         The Alibaba Cloud Resource Name (ARN) of the RAM role.
+
+        > **NOTE:**  This parameter is not required when you create an instance that runs MySQL, PostgreSQL, or SQL Server. You need to only specify the RoleARN parameter to create an instance that has cloud disk encryption enabled by using the obtained key ID.
+        You can configure RAM authorization to require a RAM user to enable cloud disk encryption when the RAM user is used to create an instance. If cloud disk encryption is disabled during the instance creation, the creation operation fails. To complete the configuration, you can attach the following policy to the RAM user: {"Version":"1","Statement":[{"Effect":"Deny","Action":"rds:CreateDBInstance","Resource":"*","Condition":{"StringEquals":{"rds:DiskEncryptionRequired":"false"}}}]}
         """
         return pulumi.get(self, "role_arn")
 
     @property
     @pulumi.getter(name="securityGroupId")
+    @_utilities.deprecated("""Attribute `security_group_id` has been deprecated from 1.69.0 and use `security_group_ids` instead.""")
     def security_group_id(self) -> pulumi.Output[str]:
         """
         It has been deprecated from 1.69.0 and use `security_group_ids` instead.
         """
-        warnings.warn("""Attribute `security_group_id` has been deprecated from 1.69.0 and use `security_group_ids` instead.""", DeprecationWarning)
-        pulumi.log.warn("""security_group_id is deprecated: Attribute `security_group_id` has been deprecated from 1.69.0 and use `security_group_ids` instead.""")
-
         return pulumi.get(self, "security_group_id")
 
     @property
     @pulumi.getter(name="securityGroupIds")
     def security_group_ids(self) -> pulumi.Output[Sequence[str]]:
         """
-        , Available in 1.69.0+) The list IDs to join ECS Security Group. At most supports three security groups.
+        , Available since 1.69.0) The list IDs to join ECS Security Group. At most supports three security groups.
         """
         return pulumi.get(self, "security_group_ids")
 
@@ -4493,7 +4792,7 @@ class Instance(pulumi.CustomResource):
     @pulumi.getter(name="serverCert")
     def server_cert(self) -> pulumi.Output[str]:
         """
-        The content of the server certificate. This parameter is supported only when the instance runs PostgreSQL with standard or enhanced SSDs. If you set the CAType parameter to custom, you must also specify this parameter.
+        The content of the server certificate. This parameter is supported only when the instance runs PostgreSQL or MySQL with standard or enhanced SSDs. If you set the CAType parameter to custom, you must also specify this parameter. **NOTE:** From version 1.231.0, `server_cert` start  support `MySQL` engine.
         """
         return pulumi.get(self, "server_cert")
 
@@ -4501,7 +4800,7 @@ class Instance(pulumi.CustomResource):
     @pulumi.getter(name="serverKey")
     def server_key(self) -> pulumi.Output[str]:
         """
-        The private key of the server certificate. This parameter is supported only when the instance runs PostgreSQL with standard or enhanced SSDs. If you set the CAType parameter to custom, you must also specify this parameter.
+        The private key of the server certificate. This parameter is supported only when the instance runs PostgreSQL or MySQL with standard or enhanced SSDs. If you set the CAType parameter to custom, you must also specify this parameter. **NOTE:** From version 1.231.0, `server_key` start support `MySQL` engine.
         """
         return pulumi.get(self, "server_key")
 
@@ -4563,7 +4862,7 @@ class Instance(pulumi.CustomResource):
     @pulumi.getter
     def status(self) -> pulumi.Output[str]:
         """
-        (Available in 1.204.1+) The status of db instance.
+        (Available since 1.204.1) The status of db instance.
         """
         return pulumi.get(self, "status")
 
@@ -4583,7 +4882,7 @@ class Instance(pulumi.CustomResource):
     @pulumi.getter(name="storageThreshold")
     def storage_threshold(self) -> pulumi.Output[Optional[int]]:
         """
-        The trigger threshold (percentage) for automatic storage space expansion.
+        The threshold in percentage based on which an automatic storage expansion is triggered. If the available storage reaches the threshold, ApsaraDB RDS increases the storage capacity of the instance.
         Valid values: [10, 20, 30, 40, 50].
 
         > **NOTE:** This parameter only takes effect when the StorageAutoScale parameter is set to Enable. The value must be greater than or equal to the total size of the current storage space of the instance.
@@ -4612,7 +4911,7 @@ class Instance(pulumi.CustomResource):
 
     @property
     @pulumi.getter
-    def tags(self) -> pulumi.Output[Optional[Mapping[str, Any]]]:
+    def tags(self) -> pulumi.Output[Optional[Mapping[str, str]]]:
         """
         A mapping of tags to assign to the resource.
         - Key: It can be up to 64 characters in length. It cannot begin with "aliyun", "acs:", "http://", or "https://". It cannot be a null string.
@@ -4648,25 +4947,32 @@ class Instance(pulumi.CustomResource):
         """
         return pulumi.get(self, "tcp_connection_type")
 
+    @property
+    @pulumi.getter(name="tdeEncryptionKey")
+    def tde_encryption_key(self) -> pulumi.Output[Optional[str]]:
+        """
+        The ID of the custom key.
+        """
+        return pulumi.get(self, "tde_encryption_key")
+
     @property
     @pulumi.getter(name="tdeStatus")
     def tde_status(self) -> pulumi.Output[str]:
         """
         The TDE(Transparent Data Encryption) status. After TDE is turned on, it cannot be turned off. See more [engine and engineVersion limitation](https://www.alibabacloud.com/help/zh/doc-detail/26256.htm).
+        > **NOTE:** When creating an instance and enabling disk encryption, you can only use the Key ID; you cannot use the ServiceKey.
         """
         return pulumi.get(self, "tde_status")
 
     @property
     @pulumi.getter(name="upgradeDbInstanceKernelVersion")
+    @_utilities.deprecated("""Attribute `upgrade_db_instance_kernel_version` has been deprecated from 1.198.0 and use `target_minor_version` instead.""")
     def upgrade_db_instance_kernel_version(self) -> pulumi.Output[Optional[bool]]:
         """
         Whether to upgrade a minor version of the kernel. Valid values:
         - true: upgrade
         - false: not to upgrade
         """
-        warnings.warn("""Attribute `upgrade_db_instance_kernel_version` has been deprecated from 1.198.0 and use `target_minor_version` instead.""", DeprecationWarning)
-        pulumi.log.warn("""upgrade_db_instance_kernel_version is deprecated: Attribute `upgrade_db_instance_kernel_version` has been deprecated from 1.198.0 and use `target_minor_version` instead.""")
-
         return pulumi.get(self, "upgrade_db_instance_kernel_version")
 
     @property
@@ -4730,3 +5036,11 @@ class Instance(pulumi.CustomResource):
         """
         return pulumi.get(self, "zone_id_slave_a")
 
+    @property
+    @pulumi.getter(name="zoneIdSlaveB")
+    def zone_id_slave_b(self) -> pulumi.Output[str]:
+        """
+        RDS MySQL Cluster series instances support creating 1 to 2 secondary nodes at the same time when establishing a new instance. If you have this requirement, you can use this parameter to specify the availability zone for the second secondary node.
+        """
+        return pulumi.get(self, "zone_id_slave_b")
+