From ae9d6422f7b6f945bc66ab87bc18cba57840a410 Mon Sep 17 00:00:00 2001
From: aws-sdk-go-automation
 <43143561+aws-sdk-go-automation@users.noreply.github.com>
Date: Wed, 1 Jul 2020 11:59:31 -0700
Subject: [PATCH] Release v1.33.0 (2020-07-01) (#3405)

Release v1.33.0 (2020-07-01)
===

### Service Client Updates
* `service/appsync`: Updates service API and documentation
* `service/chime`: Updates service API and documentation
  * This release supports third party emergency call routing configuration for Amazon Chime Voice Connectors.
* `service/codebuild`: Updates service API and documentation
  * Support build status config in project source
* `service/imagebuilder`: Updates service API and documentation
* `service/rds`: Updates service API
  * This release adds the exceptions KMSKeyNotAccessibleFault and InvalidDBClusterStateFault to the Amazon RDS ModifyDBInstance API.
* `service/securityhub`: Updates service API and documentation

### SDK Features
* `service/s3/s3crypto`: Introduces `EncryptionClientV2` and `DecryptionClientV2` encryption and decryption clients which support a new key wrapping algorithm `kms+context`. ([#3403](https://github.com/aws/aws-sdk-go/pull/3403))
  * `DecryptionClientV2` maintains the ability to decrypt objects encrypted using the `EncryptionClient`.
  * Please see `s3crypto` documentation for migration details.
---
 CHANGELOG.md                                  |  19 +
 CHANGELOG_PENDING.md                          |   3 -
 aws/version.go                                |   2 +-
 models/apis/appsync/2017-07-25/api-2.json     |  10 +-
 models/apis/appsync/2017-07-25/docs-2.json    |   8 +-
 models/apis/chime/2018-05-01/api-2.json       | 156 +++-
 models/apis/chime/2018-05-01/docs-2.json      |  67 +-
 models/apis/codebuild/2016-10-06/api-2.json   |   9 +
 models/apis/codebuild/2016-10-06/docs-2.json  |  15 +-
 .../apis/imagebuilder/2019-12-02/api-2.json   |   1 +
 .../apis/imagebuilder/2019-12-02/docs-2.json  |   3 +-
 models/apis/rds/2014-10-31/api-2.json         |   4 +-
 models/apis/securityhub/2018-10-26/api-2.json | 168 +++-
 .../apis/securityhub/2018-10-26/docs-2.json   | 184 +++-
 service/appsync/api.go                        |  98 ++-
 service/chime/api.go                          | 660 +++++++++++++-
 service/chime/chimeiface/interface.go         |  12 +
 service/codebuild/api.go                      | 106 ++-
 service/imagebuilder/api.go                   |  16 +-
 service/rds/api.go                            |   6 +
 service/rds/examples_test.go                  |   4 +
 service/securityhub/api.go                    | 822 ++++++++++++++++++
 22 files changed, 2331 insertions(+), 42 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index d67993ba39..acacf310e2 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,22 @@
+Release v1.33.0 (2020-07-01)
+===
+
+### Service Client Updates
+* `service/appsync`: Updates service API and documentation
+* `service/chime`: Updates service API and documentation
+  * This release supports third party emergency call routing configuration for Amazon Chime Voice Connectors.
+* `service/codebuild`: Updates service API and documentation
+  * Support build status config in project source
+* `service/imagebuilder`: Updates service API and documentation
+* `service/rds`: Updates service API
+  * This release adds the exceptions KMSKeyNotAccessibleFault and InvalidDBClusterStateFault to the Amazon RDS ModifyDBInstance API.
+* `service/securityhub`: Updates service API and documentation
+
+### SDK Features
+* `service/s3/s3crypto`: Introduces `EncryptionClientV2` and `DecryptionClientV2` encryption and decryption clients which support a new key wrapping algorithm `kms+context`. ([#3403](https://github.com/aws/aws-sdk-go/pull/3403))
+  * `DecryptionClientV2` maintains the ability to decrypt objects encrypted using the `EncryptionClient`.
+  * Please see `s3crypto` documentation for migration details.
+
 Release v1.32.13 (2020-06-30)
 ===
 
diff --git a/CHANGELOG_PENDING.md b/CHANGELOG_PENDING.md
index a9084206aa..8a1927a39c 100644
--- a/CHANGELOG_PENDING.md
+++ b/CHANGELOG_PENDING.md
@@ -1,7 +1,4 @@
 ### SDK Features
-* `service/s3/s3crypto`: Introduces `EncryptionClientV2` and `DecryptionClientV2` encryption and decryption clients which support a new key wrapping algorithm `kms+context`. ([#3403](https://github.com/aws/aws-sdk-go/pull/3403))
-  * `DecryptionClientV2` maintains the ability to decrypt objects encrypted using the `EncryptionClient`.
-  * Please see `s3crypto` documentation for migration details.
 
 ### SDK Enhancements
 
diff --git a/aws/version.go b/aws/version.go
index cb17e594ef..6610f6382b 100644
--- a/aws/version.go
+++ b/aws/version.go
@@ -5,4 +5,4 @@ package aws
 const SDKName = "aws-sdk-go"
 
 // SDKVersion is the version of this SDK
-const SDKVersion = "1.32.13"
+const SDKVersion = "1.33.0"
diff --git a/models/apis/appsync/2017-07-25/api-2.json b/models/apis/appsync/2017-07-25/api-2.json
index 3364361aa0..07d35a2bd4 100644
--- a/models/apis/appsync/2017-07-25/api-2.json
+++ b/models/apis/appsync/2017-07-25/api-2.json
@@ -711,7 +711,15 @@
         "R4_XLARGE",
         "R4_2XLARGE",
         "R4_4XLARGE",
-        "R4_8XLARGE"
+        "R4_8XLARGE",
+        "SMALL",
+        "MEDIUM",
+        "LARGE",
+        "XLARGE",
+        "LARGE_2X",
+        "LARGE_4X",
+        "LARGE_8X",
+        "LARGE_12X"
       ]
     },
     "ApiCachingBehavior":{
diff --git a/models/apis/appsync/2017-07-25/docs-2.json b/models/apis/appsync/2017-07-25/docs-2.json
index 33ee12d18b..732a952ba3 100644
--- a/models/apis/appsync/2017-07-25/docs-2.json
+++ b/models/apis/appsync/2017-07-25/docs-2.json
@@ -81,9 +81,9 @@
     "ApiCacheType": {
       "base": null,
       "refs": {
-        "ApiCache$type": "<p>The cache instance type.</p> <ul> <li> <p> <b>T2_SMALL</b>: A t2.small instance type.</p> </li> <li> <p> <b>T2_MEDIUM</b>: A t2.medium instance type.</p> </li> <li> <p> <b>R4_LARGE</b>: A r4.large instance type.</p> </li> <li> <p> <b>R4_XLARGE</b>: A r4.xlarge instance type.</p> </li> <li> <p> <b>R4_2XLARGE</b>: A r4.2xlarge instance type.</p> </li> <li> <p> <b>R4_4XLARGE</b>: A r4.4xlarge instance type.</p> </li> <li> <p> <b>R4_8XLARGE</b>: A r4.8xlarge instance type.</p> </li> </ul>",
-        "CreateApiCacheRequest$type": "<p>The cache instance type.</p> <ul> <li> <p> <b>T2_SMALL</b>: A t2.small instance type.</p> </li> <li> <p> <b>T2_MEDIUM</b>: A t2.medium instance type.</p> </li> <li> <p> <b>R4_LARGE</b>: A r4.large instance type.</p> </li> <li> <p> <b>R4_XLARGE</b>: A r4.xlarge instance type.</p> </li> <li> <p> <b>R4_2XLARGE</b>: A r4.2xlarge instance type.</p> </li> <li> <p> <b>R4_4XLARGE</b>: A r4.4xlarge instance type.</p> </li> <li> <p> <b>R4_8XLARGE</b>: A r4.8xlarge instance type.</p> </li> </ul>",
-        "UpdateApiCacheRequest$type": "<p>The cache instance type.</p> <ul> <li> <p> <b>T2_SMALL</b>: A t2.small instance type.</p> </li> <li> <p> <b>T2_MEDIUM</b>: A t2.medium instance type.</p> </li> <li> <p> <b>R4_LARGE</b>: A r4.large instance type.</p> </li> <li> <p> <b>R4_XLARGE</b>: A r4.xlarge instance type.</p> </li> <li> <p> <b>R4_2XLARGE</b>: A r4.2xlarge instance type.</p> </li> <li> <p> <b>R4_4XLARGE</b>: A r4.4xlarge instance type.</p> </li> <li> <p> <b>R4_8XLARGE</b>: A r4.8xlarge instance type.</p> </li> </ul>"
+        "ApiCache$type": "<p>The cache instance type. Valid values are </p> <ul> <li> <p> <code>SMALL</code> </p> </li> <li> <p> <code>MEDIUM</code> </p> </li> <li> <p> <code>LARGE</code> </p> </li> <li> <p> <code>XLARGE</code> </p> </li> <li> <p> <code>LARGE_2X</code> </p> </li> <li> <p> <code>LARGE_4X</code> </p> </li> <li> <p> <code>LARGE_8X</code> (not available in all regions)</p> </li> <li> <p> <code>LARGE_12X</code> </p> </li> </ul> <p>Historically, instance types were identified by an EC2-style value. As of July 2020, this is deprecated, and the generic identifiers above should be used.</p> <p>The following legacy instance types are avaible, but their use is discouraged:</p> <ul> <li> <p> <b>T2_SMALL</b>: A t2.small instance type.</p> </li> <li> <p> <b>T2_MEDIUM</b>: A t2.medium instance type.</p> </li> <li> <p> <b>R4_LARGE</b>: A r4.large instance type.</p> </li> <li> <p> <b>R4_XLARGE</b>: A r4.xlarge instance type.</p> </li> <li> <p> <b>R4_2XLARGE</b>: A r4.2xlarge instance type.</p> </li> <li> <p> <b>R4_4XLARGE</b>: A r4.4xlarge instance type.</p> </li> <li> <p> <b>R4_8XLARGE</b>: A r4.8xlarge instance type.</p> </li> </ul>",
+        "CreateApiCacheRequest$type": "<p>The cache instance type. Valid values are </p> <ul> <li> <p> <code>SMALL</code> </p> </li> <li> <p> <code>MEDIUM</code> </p> </li> <li> <p> <code>LARGE</code> </p> </li> <li> <p> <code>XLARGE</code> </p> </li> <li> <p> <code>LARGE_2X</code> </p> </li> <li> <p> <code>LARGE_4X</code> </p> </li> <li> <p> <code>LARGE_8X</code> (not available in all regions)</p> </li> <li> <p> <code>LARGE_12X</code> </p> </li> </ul> <p>Historically, instance types were identified by an EC2-style value. As of July 2020, this is deprecated, and the generic identifiers above should be used.</p> <p>The following legacy instance types are avaible, but their use is discouraged:</p> <ul> <li> <p> <b>T2_SMALL</b>: A t2.small instance type.</p> </li> <li> <p> <b>T2_MEDIUM</b>: A t2.medium instance type.</p> </li> <li> <p> <b>R4_LARGE</b>: A r4.large instance type.</p> </li> <li> <p> <b>R4_XLARGE</b>: A r4.xlarge instance type.</p> </li> <li> <p> <b>R4_2XLARGE</b>: A r4.2xlarge instance type.</p> </li> <li> <p> <b>R4_4XLARGE</b>: A r4.4xlarge instance type.</p> </li> <li> <p> <b>R4_8XLARGE</b>: A r4.8xlarge instance type.</p> </li> </ul>",
+        "UpdateApiCacheRequest$type": "<p>The cache instance type. Valid values are </p> <ul> <li> <p> <code>SMALL</code> </p> </li> <li> <p> <code>MEDIUM</code> </p> </li> <li> <p> <code>LARGE</code> </p> </li> <li> <p> <code>XLARGE</code> </p> </li> <li> <p> <code>LARGE_2X</code> </p> </li> <li> <p> <code>LARGE_4X</code> </p> </li> <li> <p> <code>LARGE_8X</code> (not available in all regions)</p> </li> <li> <p> <code>LARGE_12X</code> </p> </li> </ul> <p>Historically, instance types were identified by an EC2-style value. As of July 2020, this is deprecated, and the generic identifiers above should be used.</p> <p>The following legacy instance types are avaible, but their use is discouraged:</p> <ul> <li> <p> <b>T2_SMALL</b>: A t2.small instance type.</p> </li> <li> <p> <b>T2_MEDIUM</b>: A t2.medium instance type.</p> </li> <li> <p> <b>R4_LARGE</b>: A r4.large instance type.</p> </li> <li> <p> <b>R4_XLARGE</b>: A r4.xlarge instance type.</p> </li> <li> <p> <b>R4_2XLARGE</b>: A r4.2xlarge instance type.</p> </li> <li> <p> <b>R4_4XLARGE</b>: A r4.4xlarge instance type.</p> </li> <li> <p> <b>R4_8XLARGE</b>: A r4.8xlarge instance type.</p> </li> </ul>"
       }
     },
     "ApiCachingBehavior": {
@@ -961,7 +961,7 @@
         "OpenIDConnectConfig$issuer": "<p>The issuer for the OpenID Connect configuration. The issuer returned by discovery must exactly match the value of <code>iss</code> in the ID token.</p>",
         "OpenIDConnectConfig$clientId": "<p>The client identifier of the Relying party at the OpenID identity provider. This identifier is typically obtained when the Relying party is registered with the OpenID identity provider. You can specify a regular expression so the AWS AppSync can validate against multiple client identifiers at a time.</p>",
         "RdsHttpEndpointConfig$awsRegion": "<p>AWS Region for RDS HTTP endpoint.</p>",
-        "RdsHttpEndpointConfig$dbClusterIdentifier": "<p>Amazon RDS cluster identifier.</p>",
+        "RdsHttpEndpointConfig$dbClusterIdentifier": "<p>Amazon RDS cluster ARN.</p>",
         "RdsHttpEndpointConfig$databaseName": "<p>Logical database name.</p>",
         "RdsHttpEndpointConfig$schema": "<p>Logical schema name.</p>",
         "RdsHttpEndpointConfig$awsSecretStoreArn": "<p>AWS secret store ARN for database credentials.</p>",
diff --git a/models/apis/chime/2018-05-01/api-2.json b/models/apis/chime/2018-05-01/api-2.json
index 7e0252a46b..0d2789f137 100644
--- a/models/apis/chime/2018-05-01/api-2.json
+++ b/models/apis/chime/2018-05-01/api-2.json
@@ -624,6 +624,24 @@
         {"shape":"ServiceFailureException"}
       ]
     },
+    "DeleteVoiceConnectorEmergencyCallingConfiguration":{
+      "name":"DeleteVoiceConnectorEmergencyCallingConfiguration",
+      "http":{
+        "method":"DELETE",
+        "requestUri":"/voice-connectors/{voiceConnectorId}/emergency-calling-configuration",
+        "responseCode":204
+      },
+      "input":{"shape":"DeleteVoiceConnectorEmergencyCallingConfigurationRequest"},
+      "errors":[
+        {"shape":"UnauthorizedClientException"},
+        {"shape":"NotFoundException"},
+        {"shape":"ForbiddenException"},
+        {"shape":"BadRequestException"},
+        {"shape":"ThrottledClientException"},
+        {"shape":"ServiceUnavailableException"},
+        {"shape":"ServiceFailureException"}
+      ]
+    },
     "DeleteVoiceConnectorGroup":{
       "name":"DeleteVoiceConnectorGroup",
       "http":{
@@ -1105,6 +1123,25 @@
         {"shape":"ServiceFailureException"}
       ]
     },
+    "GetVoiceConnectorEmergencyCallingConfiguration":{
+      "name":"GetVoiceConnectorEmergencyCallingConfiguration",
+      "http":{
+        "method":"GET",
+        "requestUri":"/voice-connectors/{voiceConnectorId}/emergency-calling-configuration",
+        "responseCode":200
+      },
+      "input":{"shape":"GetVoiceConnectorEmergencyCallingConfigurationRequest"},
+      "output":{"shape":"GetVoiceConnectorEmergencyCallingConfigurationResponse"},
+      "errors":[
+        {"shape":"UnauthorizedClientException"},
+        {"shape":"NotFoundException"},
+        {"shape":"ForbiddenException"},
+        {"shape":"BadRequestException"},
+        {"shape":"ThrottledClientException"},
+        {"shape":"ServiceUnavailableException"},
+        {"shape":"ServiceFailureException"}
+      ]
+    },
     "GetVoiceConnectorGroup":{
       "name":"GetVoiceConnectorGroup",
       "http":{
@@ -1610,6 +1647,25 @@
         {"shape":"ServiceFailureException"}
       ]
     },
+    "PutVoiceConnectorEmergencyCallingConfiguration":{
+      "name":"PutVoiceConnectorEmergencyCallingConfiguration",
+      "http":{
+        "method":"PUT",
+        "requestUri":"/voice-connectors/{voiceConnectorId}/emergency-calling-configuration",
+        "responseCode":200
+      },
+      "input":{"shape":"PutVoiceConnectorEmergencyCallingConfigurationRequest"},
+      "output":{"shape":"PutVoiceConnectorEmergencyCallingConfigurationResponse"},
+      "errors":[
+        {"shape":"UnauthorizedClientException"},
+        {"shape":"NotFoundException"},
+        {"shape":"ForbiddenException"},
+        {"shape":"BadRequestException"},
+        {"shape":"ThrottledClientException"},
+        {"shape":"ServiceUnavailableException"},
+        {"shape":"ServiceFailureException"}
+      ]
+    },
     "PutVoiceConnectorLoggingConfiguration":{
       "name":"PutVoiceConnectorLoggingConfiguration",
       "http":{
@@ -2252,6 +2308,10 @@
         "AlexaForBusinessRoomArn":{"shape":"SensitiveString"}
       }
     },
+    "Alpha2CountryCode":{
+      "type":"string",
+      "pattern":"[A-Z]{2}"
+    },
     "AreaCode":{
       "type":"string",
       "pattern":"^$|^[0-9]{3,3}$"
@@ -2291,7 +2351,10 @@
     },
     "AssociatePhoneNumbersWithVoiceConnectorGroupRequest":{
       "type":"structure",
-      "required":["VoiceConnectorGroupId"],
+      "required":[
+        "VoiceConnectorGroupId",
+        "E164PhoneNumbers"
+      ],
       "members":{
         "VoiceConnectorGroupId":{
           "shape":"NonEmptyString",
@@ -2310,7 +2373,10 @@
     },
     "AssociatePhoneNumbersWithVoiceConnectorRequest":{
       "type":"structure",
-      "required":["VoiceConnectorId"],
+      "required":[
+        "VoiceConnectorId",
+        "E164PhoneNumbers"
+      ],
       "members":{
         "VoiceConnectorId":{
           "shape":"NonEmptyString",
@@ -2909,6 +2975,22 @@
       "type":"list",
       "member":{"shape":"Credential"}
     },
+    "DNISEmergencyCallingConfiguration":{
+      "type":"structure",
+      "required":[
+        "EmergencyPhoneNumber",
+        "CallingCountry"
+      ],
+      "members":{
+        "EmergencyPhoneNumber":{"shape":"E164PhoneNumber"},
+        "TestPhoneNumber":{"shape":"E164PhoneNumber"},
+        "CallingCountry":{"shape":"Alpha2CountryCode"}
+      }
+    },
+    "DNISEmergencyCallingConfigurationList":{
+      "type":"list",
+      "member":{"shape":"DNISEmergencyCallingConfiguration"}
+    },
     "DataRetentionInHours":{
       "type":"integer",
       "min":0
@@ -3052,6 +3134,17 @@
         }
       }
     },
+    "DeleteVoiceConnectorEmergencyCallingConfigurationRequest":{
+      "type":"structure",
+      "required":["VoiceConnectorId"],
+      "members":{
+        "VoiceConnectorId":{
+          "shape":"NonEmptyString",
+          "location":"uri",
+          "locationName":"voiceConnectorId"
+        }
+      }
+    },
     "DeleteVoiceConnectorGroupRequest":{
       "type":"structure",
       "required":["VoiceConnectorGroupId"],
@@ -3109,7 +3202,10 @@
     },
     "DeleteVoiceConnectorTerminationCredentialsRequest":{
       "type":"structure",
-      "required":["VoiceConnectorId"],
+      "required":[
+        "Usernames",
+        "VoiceConnectorId"
+      ],
       "members":{
         "VoiceConnectorId":{
           "shape":"NonEmptyString",
@@ -3156,7 +3252,10 @@
     },
     "DisassociatePhoneNumbersFromVoiceConnectorGroupRequest":{
       "type":"structure",
-      "required":["VoiceConnectorGroupId"],
+      "required":[
+        "VoiceConnectorGroupId",
+        "E164PhoneNumbers"
+      ],
       "members":{
         "VoiceConnectorGroupId":{
           "shape":"NonEmptyString",
@@ -3174,7 +3273,10 @@
     },
     "DisassociatePhoneNumbersFromVoiceConnectorRequest":{
       "type":"structure",
-      "required":["VoiceConnectorId"],
+      "required":[
+        "VoiceConnectorId",
+        "E164PhoneNumbers"
+      ],
       "members":{
         "VoiceConnectorId":{
           "shape":"NonEmptyString",
@@ -3232,6 +3334,12 @@
         "Failed"
       ]
     },
+    "EmergencyCallingConfiguration":{
+      "type":"structure",
+      "members":{
+        "DNIS":{"shape":"DNISEmergencyCallingConfigurationList"}
+      }
+    },
     "ErrorCode":{
       "type":"string",
       "enum":[
@@ -3590,6 +3698,23 @@
         "UserSettings":{"shape":"UserSettings"}
       }
     },
+    "GetVoiceConnectorEmergencyCallingConfigurationRequest":{
+      "type":"structure",
+      "required":["VoiceConnectorId"],
+      "members":{
+        "VoiceConnectorId":{
+          "shape":"NonEmptyString",
+          "location":"uri",
+          "locationName":"voiceConnectorId"
+        }
+      }
+    },
+    "GetVoiceConnectorEmergencyCallingConfigurationResponse":{
+      "type":"structure",
+      "members":{
+        "EmergencyCallingConfiguration":{"shape":"EmergencyCallingConfiguration"}
+      }
+    },
     "GetVoiceConnectorGroupRequest":{
       "type":"structure",
       "required":["VoiceConnectorGroupId"],
@@ -4693,6 +4818,27 @@
         "InitiateDeletionTimestamp":{"shape":"Iso8601Timestamp"}
       }
     },
+    "PutVoiceConnectorEmergencyCallingConfigurationRequest":{
+      "type":"structure",
+      "required":[
+        "VoiceConnectorId",
+        "EmergencyCallingConfiguration"
+      ],
+      "members":{
+        "VoiceConnectorId":{
+          "shape":"NonEmptyString",
+          "location":"uri",
+          "locationName":"voiceConnectorId"
+        },
+        "EmergencyCallingConfiguration":{"shape":"EmergencyCallingConfiguration"}
+      }
+    },
+    "PutVoiceConnectorEmergencyCallingConfigurationResponse":{
+      "type":"structure",
+      "members":{
+        "EmergencyCallingConfiguration":{"shape":"EmergencyCallingConfiguration"}
+      }
+    },
     "PutVoiceConnectorLoggingConfigurationRequest":{
       "type":"structure",
       "required":[
diff --git a/models/apis/chime/2018-05-01/docs-2.json b/models/apis/chime/2018-05-01/docs-2.json
index 573b149a0c..017ab8a511 100644
--- a/models/apis/chime/2018-05-01/docs-2.json
+++ b/models/apis/chime/2018-05-01/docs-2.json
@@ -34,11 +34,12 @@
     "DeleteRoom": "<p>Deletes a chat room in an Amazon Chime Enterprise account.</p>",
     "DeleteRoomMembership": "<p>Removes a member from a chat room in an Amazon Chime Enterprise account.</p>",
     "DeleteVoiceConnector": "<p>Deletes the specified Amazon Chime Voice Connector. Any phone numbers associated with the Amazon Chime Voice Connector must be disassociated from it before it can be deleted.</p>",
+    "DeleteVoiceConnectorEmergencyCallingConfiguration": "<p>Deletes the emergency calling configuration details from the specified Amazon Chime Voice Connector.</p>",
     "DeleteVoiceConnectorGroup": "<p>Deletes the specified Amazon Chime Voice Connector group. Any <code>VoiceConnectorItems</code> and phone numbers associated with the group must be removed before it can be deleted.</p>",
-    "DeleteVoiceConnectorOrigination": "<p>Deletes the origination settings for the specified Amazon Chime Voice Connector.</p>",
+    "DeleteVoiceConnectorOrigination": "<p>Deletes the origination settings for the specified Amazon Chime Voice Connector.</p> <note> <p>If emergency calling is configured for the Amazon Chime Voice Connector, it must be deleted prior to deleting the origination settings.</p> </note>",
     "DeleteVoiceConnectorProxy": "<p>Deletes the proxy configuration from the specified Amazon Chime Voice Connector.</p>",
     "DeleteVoiceConnectorStreamingConfiguration": "<p>Deletes the streaming configuration for the specified Amazon Chime Voice Connector.</p>",
-    "DeleteVoiceConnectorTermination": "<p>Deletes the termination settings for the specified Amazon Chime Voice Connector.</p>",
+    "DeleteVoiceConnectorTermination": "<p>Deletes the termination settings for the specified Amazon Chime Voice Connector.</p> <note> <p>If emergency calling is configured for the Amazon Chime Voice Connector, it must be deleted prior to deleting the termination settings.</p> </note>",
     "DeleteVoiceConnectorTerminationCredentials": "<p>Deletes the specified SIP credentials used by your equipment to authenticate during call termination.</p>",
     "DisassociatePhoneNumberFromUser": "<p>Disassociates the primary provisioned phone number from the specified Amazon Chime user.</p>",
     "DisassociatePhoneNumbersFromVoiceConnector": "<p>Disassociates the specified phone numbers from the specified Amazon Chime Voice Connector.</p>",
@@ -60,6 +61,7 @@
     "GetUser": "<p>Retrieves details for the specified user ID, such as primary email address, license type, and personal meeting PIN.</p> <p>To retrieve user details with an email address instead of a user ID, use the <a>ListUsers</a> action, and then filter by email address.</p>",
     "GetUserSettings": "<p>Retrieves settings for the specified user ID, such as any associated phone number settings.</p>",
     "GetVoiceConnector": "<p>Retrieves details for the specified Amazon Chime Voice Connector, such as timestamps, name, outbound host, and encryption requirements.</p>",
+    "GetVoiceConnectorEmergencyCallingConfiguration": "<p>Gets the emergency calling configuration details for the specified Amazon Chime Voice Connector.</p>",
     "GetVoiceConnectorGroup": "<p>Retrieves details for the specified Amazon Chime Voice Connector group, such as timestamps, name, and associated <code>VoiceConnectorItems</code>.</p>",
     "GetVoiceConnectorLoggingConfiguration": "<p>Retrieves the logging configuration details for the specified Amazon Chime Voice Connector. Shows whether SIP message logs are enabled for sending to Amazon CloudWatch Logs.</p>",
     "GetVoiceConnectorOrigination": "<p>Retrieves origination setting details for the specified Amazon Chime Voice Connector.</p>",
@@ -87,11 +89,12 @@
     "LogoutUser": "<p>Logs out the specified user from all of the devices they are currently logged into.</p>",
     "PutEventsConfiguration": "<p>Creates an events configuration that allows a bot to receive outgoing events sent by Amazon Chime. Choose either an HTTPS endpoint or a Lambda function ARN. For more information, see <a>Bot</a>.</p>",
     "PutRetentionSettings": "<p>Puts retention settings for the specified Amazon Chime Enterprise account. We recommend using AWS CloudTrail to monitor usage of this API for your account. For more information, see <a href=\"https://docs.aws.amazon.com/chime/latest/ag/cloudtrail.html\">Logging Amazon Chime API Calls with AWS CloudTrail</a> in the <i>Amazon Chime Administration Guide</i>.</p> <p>To turn off existing retention settings, remove the number of days from the corresponding <b>RetentionDays</b> field in the <b>RetentionSettings</b> object. For more information about retention settings, see <a href=\"https://docs.aws.amazon.com/chime/latest/ag/chat-retention.html\">Managing Chat Retention Policies</a> in the <i>Amazon Chime Administration Guide</i>.</p>",
+    "PutVoiceConnectorEmergencyCallingConfiguration": "<p>Puts emergency calling configuration details to the specified Amazon Chime Voice Connector, such as emergency phone numbers and calling countries. Origination and termination settings must be enabled for the Amazon Chime Voice Connector before emergency calling can be configured.</p>",
     "PutVoiceConnectorLoggingConfiguration": "<p>Adds a logging configuration for the specified Amazon Chime Voice Connector. The logging configuration specifies whether SIP message logs are enabled for sending to Amazon CloudWatch Logs.</p>",
-    "PutVoiceConnectorOrigination": "<p>Adds origination settings for the specified Amazon Chime Voice Connector.</p>",
+    "PutVoiceConnectorOrigination": "<p>Adds origination settings for the specified Amazon Chime Voice Connector.</p> <note> <p>If emergency calling is configured for the Amazon Chime Voice Connector, it must be deleted prior to turning off origination settings.</p> </note>",
     "PutVoiceConnectorProxy": "<p>Puts the specified proxy configuration to the specified Amazon Chime Voice Connector.</p>",
     "PutVoiceConnectorStreamingConfiguration": "<p>Adds a streaming configuration for the specified Amazon Chime Voice Connector. The streaming configuration specifies whether media streaming is enabled for sending to Amazon Kinesis. It also sets the retention period, in hours, for the Amazon Kinesis data.</p>",
-    "PutVoiceConnectorTermination": "<p>Adds termination settings for the specified Amazon Chime Voice Connector.</p>",
+    "PutVoiceConnectorTermination": "<p>Adds termination settings for the specified Amazon Chime Voice Connector.</p> <note> <p>If emergency calling is configured for the Amazon Chime Voice Connector, it must be deleted prior to turning off termination settings.</p> </note>",
     "PutVoiceConnectorTerminationCredentials": "<p>Adds termination SIP credentials for the specified Amazon Chime Voice Connector.</p>",
     "RedactConversationMessage": "<p>Redacts the specified message from the specified Amazon Chime conversation.</p>",
     "RedactRoomMessage": "<p>Redacts the specified message from the specified Amazon Chime chat room.</p>",
@@ -169,6 +172,12 @@
         "User$AlexaForBusinessMetadata": "<p>The Alexa for Business metadata.</p>"
       }
     },
+    "Alpha2CountryCode": {
+      "base": null,
+      "refs": {
+        "DNISEmergencyCallingConfiguration$CallingCountry": "<p>The country from which emergency calls are allowed, in ISO 3166-1 alpha-2 format.</p>"
+      }
+    },
     "AreaCode": {
       "base": null,
       "refs": {
@@ -623,6 +632,18 @@
         "PutVoiceConnectorTerminationCredentialsRequest$Credentials": "<p>The termination SIP credentials.</p>"
       }
     },
+    "DNISEmergencyCallingConfiguration": {
+      "base": "<p>The Dialed Number Identification Service (DNIS) emergency calling configuration details associated with an Amazon Chime Voice Connector's emergency calling configuration.</p>",
+      "refs": {
+        "DNISEmergencyCallingConfigurationList$member": null
+      }
+    },
+    "DNISEmergencyCallingConfigurationList": {
+      "base": null,
+      "refs": {
+        "EmergencyCallingConfiguration$DNIS": "<p>The Dialed Number Identification Service (DNIS) emergency calling configuration details.</p>"
+      }
+    },
     "DataRetentionInHours": {
       "base": null,
       "refs": {
@@ -674,6 +695,11 @@
       "refs": {
       }
     },
+    "DeleteVoiceConnectorEmergencyCallingConfigurationRequest": {
+      "base": null,
+      "refs": {
+      }
+    },
     "DeleteVoiceConnectorGroupRequest": {
       "base": null,
       "refs": {
@@ -753,6 +779,8 @@
       "base": null,
       "refs": {
         "AssociatePhoneNumberWithUserRequest$E164PhoneNumber": "<p>The phone number, in E.164 format.</p>",
+        "DNISEmergencyCallingConfiguration$EmergencyPhoneNumber": "<p>The DNIS phone number to route emergency calls to, in E.164 format.</p>",
+        "DNISEmergencyCallingConfiguration$TestPhoneNumber": "<p>The DNIS phone number to route test emergency calls to, in E.164 format.</p>",
         "E164PhoneNumberList$member": null,
         "OrderedPhoneNumber$E164PhoneNumber": "<p>The phone number, in E.164 format.</p>",
         "Participant$PhoneNumber": "<p>The participant's phone number.</p>",
@@ -792,6 +820,14 @@
         "Invite$EmailStatus": "<p>The status of the invite email.</p>"
       }
     },
+    "EmergencyCallingConfiguration": {
+      "base": "<p>The emergency calling configuration details associated with an Amazon Chime Voice Connector.</p>",
+      "refs": {
+        "GetVoiceConnectorEmergencyCallingConfigurationResponse$EmergencyCallingConfiguration": "<p>The emergency calling configuration details.</p>",
+        "PutVoiceConnectorEmergencyCallingConfigurationRequest$EmergencyCallingConfiguration": "<p>The emergency calling configuration details.</p>",
+        "PutVoiceConnectorEmergencyCallingConfigurationResponse$EmergencyCallingConfiguration": "<p>The emergency calling configuration details.</p>"
+      }
+    },
     "ErrorCode": {
       "base": null,
       "refs": {
@@ -996,6 +1032,16 @@
       "refs": {
       }
     },
+    "GetVoiceConnectorEmergencyCallingConfigurationRequest": {
+      "base": null,
+      "refs": {
+      }
+    },
+    "GetVoiceConnectorEmergencyCallingConfigurationResponse": {
+      "base": null,
+      "refs": {
+      }
+    },
     "GetVoiceConnectorGroupRequest": {
       "base": null,
       "refs": {
@@ -1480,6 +1526,7 @@
         "DeleteRoomMembershipRequest$MemberId": "<p>The member ID (user ID or bot ID).</p>",
         "DeleteRoomRequest$AccountId": "<p>The Amazon Chime account ID.</p>",
         "DeleteRoomRequest$RoomId": "<p>The chat room ID.</p>",
+        "DeleteVoiceConnectorEmergencyCallingConfigurationRequest$VoiceConnectorId": "<p>The Amazon Chime Voice Connector ID.</p>",
         "DeleteVoiceConnectorGroupRequest$VoiceConnectorGroupId": "<p>The Amazon Chime Voice Connector group ID.</p>",
         "DeleteVoiceConnectorOriginationRequest$VoiceConnectorId": "<p>The Amazon Chime Voice Connector ID.</p>",
         "DeleteVoiceConnectorRequest$VoiceConnectorId": "<p>The Amazon Chime Voice Connector ID.</p>",
@@ -1500,6 +1547,7 @@
         "GetRoomRequest$RoomId": "<p>The room ID.</p>",
         "GetUserRequest$AccountId": "<p>The Amazon Chime account ID.</p>",
         "GetUserRequest$UserId": "<p>The user ID.</p>",
+        "GetVoiceConnectorEmergencyCallingConfigurationRequest$VoiceConnectorId": "<p>The Amazon Chime Voice Connector ID.</p>",
         "GetVoiceConnectorGroupRequest$VoiceConnectorGroupId": "<p>The Amazon Chime Voice Connector group ID.</p>",
         "GetVoiceConnectorLoggingConfigurationRequest$VoiceConnectorId": "<p>The Amazon Chime Voice Connector ID.</p>",
         "GetVoiceConnectorOriginationRequest$VoiceConnectorId": "<p>The Amazon Chime Voice Connector ID.</p>",
@@ -1524,6 +1572,7 @@
         "PutEventsConfigurationRequest$AccountId": "<p>The Amazon Chime account ID.</p>",
         "PutEventsConfigurationRequest$BotId": "<p>The bot ID.</p>",
         "PutRetentionSettingsRequest$AccountId": "<p>The Amazon Chime account ID.</p>",
+        "PutVoiceConnectorEmergencyCallingConfigurationRequest$VoiceConnectorId": "<p>The Amazon Chime Voice Connector ID.</p>",
         "PutVoiceConnectorLoggingConfigurationRequest$VoiceConnectorId": "<p>The Amazon Chime Voice Connector ID.</p>",
         "PutVoiceConnectorOriginationRequest$VoiceConnectorId": "<p>The Amazon Chime Voice Connector ID.</p>",
         "PutVoiceConnectorStreamingConfigurationRequest$VoiceConnectorId": "<p>The Amazon Chime Voice Connector ID.</p>",
@@ -1883,6 +1932,16 @@
       "refs": {
       }
     },
+    "PutVoiceConnectorEmergencyCallingConfigurationRequest": {
+      "base": null,
+      "refs": {
+      }
+    },
+    "PutVoiceConnectorEmergencyCallingConfigurationResponse": {
+      "base": null,
+      "refs": {
+      }
+    },
     "PutVoiceConnectorLoggingConfigurationRequest": {
       "base": null,
       "refs": {
diff --git a/models/apis/codebuild/2016-10-06/api-2.json b/models/apis/codebuild/2016-10-06/api-2.json
index c0a4608d3e..0ff70ab33d 100644
--- a/models/apis/codebuild/2016-10-06/api-2.json
+++ b/models/apis/codebuild/2016-10-06/api-2.json
@@ -648,6 +648,13 @@
       "type":"list",
       "member":{"shape":"String"}
     },
+    "BuildStatusConfig":{
+      "type":"structure",
+      "members":{
+        "context":{"shape":"String"},
+        "targetUrl":{"shape":"String"}
+      }
+    },
     "Builds":{
       "type":"list",
       "member":{"shape":"Build"}
@@ -1408,6 +1415,7 @@
         "buildspec":{"shape":"String"},
         "auth":{"shape":"SourceAuth"},
         "reportBuildStatus":{"shape":"WrapperBoolean"},
+        "buildStatusConfig":{"shape":"BuildStatusConfig"},
         "insecureSsl":{"shape":"WrapperBoolean"},
         "sourceIdentifier":{"shape":"String"}
       }
@@ -1690,6 +1698,7 @@
         "buildspecOverride":{"shape":"String"},
         "insecureSslOverride":{"shape":"WrapperBoolean"},
         "reportBuildStatusOverride":{"shape":"WrapperBoolean"},
+        "buildStatusConfigOverride":{"shape":"BuildStatusConfig"},
         "environmentTypeOverride":{"shape":"EnvironmentType"},
         "imageOverride":{"shape":"NonEmptyString"},
         "computeTypeOverride":{"shape":"ComputeType"},
diff --git a/models/apis/codebuild/2016-10-06/docs-2.json b/models/apis/codebuild/2016-10-06/docs-2.json
index ba2b505087..3ed2971c95 100644
--- a/models/apis/codebuild/2016-10-06/docs-2.json
+++ b/models/apis/codebuild/2016-10-06/docs-2.json
@@ -188,6 +188,13 @@
         "Build$reportArns": "<p> An array of the ARNs associated with this build's reports. </p>"
       }
     },
+    "BuildStatusConfig": {
+      "base": "<p>Contains information that defines how the AWS CodeBuild build project reports the build status to the source provider. </p>",
+      "refs": {
+        "ProjectSource$buildStatusConfig": "<p>Contains information that defines how the build project reports the build status to the source provider. This option is only used when the source provider is <code>GITHUB</code>, <code>GITHUB_ENTERPRISE</code>, or <code>BITBUCKET</code>.</p>",
+        "StartBuildInput$buildStatusConfigOverride": "<p>Contains information that defines how the build project reports the build status to the source provider. This option is only used when the source provider is <code>GITHUB</code>, <code>GITHUB_ENTERPRISE</code>, or <code>BITBUCKET</code>.</p>"
+      }
+    },
     "Builds": {
       "base": null,
       "refs": {
@@ -1095,7 +1102,7 @@
     "SourceType": {
       "base": null,
       "refs": {
-        "ProjectSource$type": "<p>The type of repository that contains the source code to be built. Valid values include:</p> <ul> <li> <p> <code>BITBUCKET</code>: The source code is in a Bitbucket repository.</p> </li> <li> <p> <code>CODECOMMIT</code>: The source code is in an AWS CodeCommit repository.</p> </li> <li> <p> <code>CODEPIPELINE</code>: The source code settings are specified in the source action of a pipeline in AWS CodePipeline.</p> </li> <li> <p> <code>GITHUB</code>: The source code is in a GitHub repository.</p> </li> <li> <p> <code>GITHUB_ENTERPRISE</code>: The source code is in a GitHub Enterprise repository.</p> </li> <li> <p> <code>NO_SOURCE</code>: The project does not have input source code.</p> </li> <li> <p> <code>S3</code>: The source code is in an Amazon Simple Storage Service (Amazon S3) input bucket.</p> </li> </ul>",
+        "ProjectSource$type": "<p>The type of repository that contains the source code to be built. Valid values include:</p> <ul> <li> <p> <code>BITBUCKET</code>: The source code is in a Bitbucket repository.</p> </li> <li> <p> <code>CODECOMMIT</code>: The source code is in an AWS CodeCommit repository.</p> </li> <li> <p> <code>CODEPIPELINE</code>: The source code settings are specified in the source action of a pipeline in AWS CodePipeline.</p> </li> <li> <p> <code>GITHUB</code>: The source code is in a GitHub or GitHub Enterprise Cloud repository.</p> </li> <li> <p> <code>GITHUB_ENTERPRISE</code>: The source code is in a GitHub Enterprise Server repository.</p> </li> <li> <p> <code>NO_SOURCE</code>: The project does not have input source code.</p> </li> <li> <p> <code>S3</code>: The source code is in an Amazon Simple Storage Service (Amazon S3) input bucket.</p> </li> </ul>",
         "StartBuildInput$sourceTypeOverride": "<p>A source input type, for this build, that overrides the source input defined in the build project.</p>"
       }
     },
@@ -1137,6 +1144,8 @@
         "BuildArtifacts$artifactIdentifier": "<p> An identifier for this artifact definition. </p>",
         "BuildNotDeleted$statusCode": "<p>Additional information about the build that could not be successfully deleted.</p>",
         "BuildReportArns$member": null,
+        "BuildStatusConfig$context": "<p>Specifies the context of the build status CodeBuild sends to the source provider. The usage of this parameter depends on the source provider.</p> <dl> <dt>Bitbucket</dt> <dd> <p>This parameter is used for the <code>name</code> parameter in the Bitbucket commit status. For more information, see <a href=\"https://developer.atlassian.com/bitbucket/api/2/reference/resource/repositories/%7Bworkspace%7D/%7Brepo_slug%7D/commit/%7Bnode%7D/statuses/build\">build</a> in the Bitbucket API documentation.</p> </dd> <dt>GitHub/GitHub Enterprise Server</dt> <dd> <p>This parameter is used for the <code>context</code> parameter in the GitHub commit status. For more information, see <a href=\"https://developer.github.com/v3/repos/statuses/#create-a-commit-status\">Create a commit status</a> in the GitHub developer guide.</p> </dd> </dl>",
+        "BuildStatusConfig$targetUrl": "<p>Specifies the target url of the build status CodeBuild sends to the source provider. The usage of this parameter depends on the source provider.</p> <dl> <dt>Bitbucket</dt> <dd> <p>This parameter is used for the <code>url</code> parameter in the Bitbucket commit status. For more information, see <a href=\"https://developer.atlassian.com/bitbucket/api/2/reference/resource/repositories/%7Bworkspace%7D/%7Brepo_slug%7D/commit/%7Bnode%7D/statuses/build\">build</a> in the Bitbucket API documentation.</p> </dd> <dt>GitHub/GitHub Enterprise Server</dt> <dd> <p>This parameter is used for the <code>target_url</code> parameter in the GitHub commit status. For more information, see <a href=\"https://developer.github.com/v3/repos/statuses/#create-a-commit-status\">Create a commit status</a> in the GitHub developer guide.</p> </dd> </dl>",
         "CloudWatchLogsConfig$groupName": "<p> The group name of the logs in Amazon CloudWatch Logs. For more information, see <a href=\"https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/Working-with-log-groups-and-streams.html\">Working with Log Groups and Log Streams</a>. </p>",
         "CloudWatchLogsConfig$streamName": "<p> The prefix of the stream name of the Amazon CloudWatch Logs. For more information, see <a href=\"https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/Working-with-log-groups-and-streams.html\">Working with Log Groups and Log Streams</a>. </p>",
         "CreateProjectInput$sourceVersion": "<p> A version of the build input to be built for this project. If not specified, the latest version is used. If specified, it must be one of: </p> <ul> <li> <p>For AWS CodeCommit: the commit ID, branch, or Git tag to use.</p> </li> <li> <p>For GitHub: the commit ID, pull request ID, branch name, or tag name that corresponds to the version of the source code you want to build. If a pull request ID is specified, it must use the format <code>pr/pull-request-ID</code> (for example <code>pr/25</code>). If a branch name is specified, the branch's HEAD commit ID is used. If not specified, the default branch's HEAD commit ID is used.</p> </li> <li> <p>For Bitbucket: the commit ID, branch name, or tag name that corresponds to the version of the source code you want to build. If a branch name is specified, the branch's HEAD commit ID is used. If not specified, the default branch's HEAD commit ID is used.</p> </li> <li> <p>For Amazon Simple Storage Service (Amazon S3): the version ID of the object that represents the build input ZIP file to use.</p> </li> </ul> <p> If <code>sourceVersion</code> is specified at the build level, then that version takes precedence over this <code>sourceVersion</code> (at the project level). </p> <p> For more information, see <a href=\"https://docs.aws.amazon.com/codebuild/latest/userguide/sample-source-version.html\">Source Version Sample with CodeBuild</a> in the <i>AWS CodeBuild User Guide</i>. </p>",
@@ -1200,7 +1209,7 @@
         "StartBuildInput$sourceLocationOverride": "<p>A location that overrides, for this build, the source location for the one defined in the build project.</p>",
         "StartBuildInput$buildspecOverride": "<p>A buildspec file declaration that overrides, for this build only, the latest one already defined in the build project.</p> <p> If this value is set, it can be either an inline buildspec definition, the path to an alternate buildspec file relative to the value of the built-in <code>CODEBUILD_SRC_DIR</code> environment variable, or the path to an S3 bucket. The bucket must be in the same AWS Region as the build project. Specify the buildspec file using its ARN (for example, <code>arn:aws:s3:::my-codebuild-sample2/buildspec.yml</code>). If this value is not provided or is set to an empty string, the source code must contain a buildspec file in its root directory. For more information, see <a href=\"https://docs.aws.amazon.com/codebuild/latest/userguide/build-spec-ref.html#build-spec-ref-name-storage\">Buildspec File Name and Storage Location</a>. </p>",
         "StartBuildInput$certificateOverride": "<p>The name of a certificate for this build that overrides the one specified in the build project.</p>",
-        "StartBuildInput$idempotencyToken": "<p>A unique, case sensitive identifier you provide to ensure the idempotency of the StartBuild request. The token is included in the StartBuild request and is valid for 12 hours. If you repeat the StartBuild request with the same token, but change a parameter, AWS CodeBuild returns a parameter mismatch error. </p>",
+        "StartBuildInput$idempotencyToken": "<p>A unique, case sensitive identifier you provide to ensure the idempotency of the StartBuild request. The token is included in the StartBuild request and is valid for 5 minutes. If you repeat the StartBuild request with the same token, but change a parameter, AWS CodeBuild returns a parameter mismatch error. </p>",
         "TestCase$testRawDataPath": "<p> The path to the raw data file that contains the test result. </p>",
         "TestCase$prefix": "<p> A string that is applied to a series of related test cases. CodeBuild generates the prefix. The prefix depends on the framework used to generate the tests. </p>",
         "TestCase$name": "<p> The name of the test case. </p>",
@@ -1352,7 +1361,7 @@
     "WebhookFilterType": {
       "base": null,
       "refs": {
-        "WebhookFilter$type": "<p> The type of webhook filter. There are five webhook filter types: <code>EVENT</code>, <code>ACTOR_ACCOUNT_ID</code>, <code>HEAD_REF</code>, <code>BASE_REF</code>, and <code>FILE_PATH</code>. </p> <dl> <dt> EVENT </dt> <dd> <p> A webhook event triggers a build when the provided <code>pattern</code> matches one of five event types: <code>PUSH</code>, <code>PULL_REQUEST_CREATED</code>, <code>PULL_REQUEST_UPDATED</code>, <code>PULL_REQUEST_REOPENED</code>, and <code>PULL_REQUEST_MERGED</code>. The <code>EVENT</code> patterns are specified as a comma-separated string. For example, <code>PUSH, PULL_REQUEST_CREATED, PULL_REQUEST_UPDATED</code> filters all push, pull request created, and pull request updated events. </p> <note> <p> The <code>PULL_REQUEST_REOPENED</code> works with GitHub and GitHub Enterprise only. </p> </note> </dd> <dt> ACTOR_ACCOUNT_ID </dt> <dd> <p> A webhook event triggers a build when a GitHub, GitHub Enterprise, or Bitbucket account ID matches the regular expression <code>pattern</code>. </p> </dd> <dt> HEAD_REF </dt> <dd> <p> A webhook event triggers a build when the head reference matches the regular expression <code>pattern</code>. For example, <code>refs/heads/branch-name</code> and <code>refs/tags/tag-name</code>. </p> <p> Works with GitHub and GitHub Enterprise push, GitHub and GitHub Enterprise pull request, Bitbucket push, and Bitbucket pull request events. </p> </dd> <dt> BASE_REF </dt> <dd> <p> A webhook event triggers a build when the base reference matches the regular expression <code>pattern</code>. For example, <code>refs/heads/branch-name</code>. </p> <note> <p> Works with pull request events only. </p> </note> </dd> <dt> FILE_PATH </dt> <dd> <p> A webhook triggers a build when the path of a changed file matches the regular expression <code>pattern</code>. </p> <note> <p> Works with GitHub and GitHub Enterprise push events only. </p> </note> </dd> </dl>"
+        "WebhookFilter$type": "<p> The type of webhook filter. There are six webhook filter types: <code>EVENT</code>, <code>ACTOR_ACCOUNT_ID</code>, <code>HEAD_REF</code>, <code>BASE_REF</code>, <code>FILE_PATH</code>, and <code>COMMIT_MESSAGE</code>. </p> <dl> <dt> EVENT </dt> <dd> <p> A webhook event triggers a build when the provided <code>pattern</code> matches one of five event types: <code>PUSH</code>, <code>PULL_REQUEST_CREATED</code>, <code>PULL_REQUEST_UPDATED</code>, <code>PULL_REQUEST_REOPENED</code>, and <code>PULL_REQUEST_MERGED</code>. The <code>EVENT</code> patterns are specified as a comma-separated string. For example, <code>PUSH, PULL_REQUEST_CREATED, PULL_REQUEST_UPDATED</code> filters all push, pull request created, and pull request updated events. </p> <note> <p> The <code>PULL_REQUEST_REOPENED</code> works with GitHub and GitHub Enterprise only. </p> </note> </dd> <dt> ACTOR_ACCOUNT_ID </dt> <dd> <p> A webhook event triggers a build when a GitHub, GitHub Enterprise, or Bitbucket account ID matches the regular expression <code>pattern</code>. </p> </dd> <dt> HEAD_REF </dt> <dd> <p> A webhook event triggers a build when the head reference matches the regular expression <code>pattern</code>. For example, <code>refs/heads/branch-name</code> and <code>refs/tags/tag-name</code>. </p> <p> Works with GitHub and GitHub Enterprise push, GitHub and GitHub Enterprise pull request, Bitbucket push, and Bitbucket pull request events. </p> </dd> <dt> BASE_REF </dt> <dd> <p> A webhook event triggers a build when the base reference matches the regular expression <code>pattern</code>. For example, <code>refs/heads/branch-name</code>. </p> <note> <p> Works with pull request events only. </p> </note> </dd> <dt> FILE_PATH </dt> <dd> <p> A webhook triggers a build when the path of a changed file matches the regular expression <code>pattern</code>. </p> <note> <p> Works with GitHub and Bitbucket events push and pull requests events. Also works with GitHub Enterprise push events, but does not work with GitHub Enterprise pull request events. </p> </note> </dd> <dt>COMMIT_MESSAGE</dt> <dd> <p>A webhook triggers a build when the head commit message matches the regular expression <code>pattern</code>.</p> <note> <p> Works with GitHub and Bitbucket events push and pull requests events. Also works with GitHub Enterprise push events, but does not work with GitHub Enterprise pull request events. </p> </note> </dd> </dl>"
       }
     },
     "WrapperBoolean": {
diff --git a/models/apis/imagebuilder/2019-12-02/api-2.json b/models/apis/imagebuilder/2019-12-02/api-2.json
index 3b534b4647..5c5bd5d254 100644
--- a/models/apis/imagebuilder/2019-12-02/api-2.json
+++ b/models/apis/imagebuilder/2019-12-02/api-2.json
@@ -804,6 +804,7 @@
         "name":{"shape":"AmiNameString"},
         "description":{"shape":"NonEmptyString"},
         "amiTags":{"shape":"TagMap"},
+        "kmsKeyId":{"shape":"NonEmptyString"},
         "launchPermission":{"shape":"LaunchPermissionConfiguration"}
       }
     },
diff --git a/models/apis/imagebuilder/2019-12-02/docs-2.json b/models/apis/imagebuilder/2019-12-02/docs-2.json
index b88a834e5d..7d1e03a226 100644
--- a/models/apis/imagebuilder/2019-12-02/docs-2.json
+++ b/models/apis/imagebuilder/2019-12-02/docs-2.json
@@ -892,7 +892,7 @@
       }
     },
     "LaunchPermissionConfiguration": {
-      "base": "<p>Describes the configuration for a launch permission. The launch permission modification request is sent to the <a href=\"https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_ModifyImageAttribute.html\">EC2 ModifyImageAttribute</a> API on behalf of the user for each Region they have selected to distribute the AMI.</p>",
+      "base": "<p>Describes the configuration for a launch permission. The launch permission modification request is sent to the <a href=\"https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_ModifyImageAttribute.html\">EC2 ModifyImageAttribute</a> API on behalf of the user for each Region they have selected to distribute the AMI. To make an AMI public, set the launch permission authorized accounts to <code>all</code>. See the examples for making an AMI public at <a href=\"https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_ModifyImageAttribute.html\">EC2 ModifyImageAttribute</a>. </p>",
       "refs": {
         "AmiDistributionConfiguration$launchPermission": "<p> Launch permissions can be used to configure which AWS accounts can use the AMI to launch instances. </p>"
       }
@@ -1014,6 +1014,7 @@
         "Ami$name": "<p>The name of the EC2 AMI. </p>",
         "Ami$description": "<p>The description of the EC2 AMI. </p>",
         "AmiDistributionConfiguration$description": "<p>The description of the distribution configuration. </p>",
+        "AmiDistributionConfiguration$kmsKeyId": "<p> The KMS key identifier used to encrypt the distributed image. </p>",
         "CancelImageCreationResponse$requestId": "<p>The request ID that uniquely identifies this request.</p>",
         "Component$description": "<p>The description of the component.</p>",
         "Component$changeDescription": "<p>The change description of the component.</p>",
diff --git a/models/apis/rds/2014-10-31/api-2.json b/models/apis/rds/2014-10-31/api-2.json
index 196cca84a3..b1494c441d 100644
--- a/models/apis/rds/2014-10-31/api-2.json
+++ b/models/apis/rds/2014-10-31/api-2.json
@@ -1573,7 +1573,9 @@
         {"shape":"AuthorizationNotFoundFault"},
         {"shape":"CertificateNotFoundFault"},
         {"shape":"DomainNotFoundFault"},
-        {"shape":"BackupPolicyNotFoundFault"}
+        {"shape":"BackupPolicyNotFoundFault"},
+        {"shape":"KMSKeyNotAccessibleFault"},
+        {"shape":"InvalidDBClusterStateFault"}
       ]
     },
     "ModifyDBParameterGroup":{
diff --git a/models/apis/securityhub/2018-10-26/api-2.json b/models/apis/securityhub/2018-10-26/api-2.json
index 420d7e53cc..1808f5c928 100644
--- a/models/apis/securityhub/2018-10-26/api-2.json
+++ b/models/apis/securityhub/2018-10-26/api-2.json
@@ -733,6 +733,16 @@
       "type":"list",
       "member":{"shape":"AvailabilityZone"}
     },
+    "AwsAutoScalingAutoScalingGroupDetails":{
+      "type":"structure",
+      "members":{
+        "LaunchConfigurationName":{"shape":"NonEmptyString"},
+        "LoadBalancerNames":{"shape":"StringList"},
+        "HealthCheckType":{"shape":"NonEmptyString"},
+        "HealthCheckGracePeriod":{"shape":"Integer"},
+        "CreatedTime":{"shape":"NonEmptyString"}
+      }
+    },
     "AwsCloudFrontDistributionDetails":{
       "type":"structure",
       "members":{
@@ -934,6 +944,40 @@
       "type":"list",
       "member":{"shape":"AwsEc2SecurityGroupUserIdGroupPair"}
     },
+    "AwsEc2VolumeAttachment":{
+      "type":"structure",
+      "members":{
+        "AttachTime":{"shape":"NonEmptyString"},
+        "DeleteOnTermination":{"shape":"Boolean"},
+        "InstanceId":{"shape":"NonEmptyString"},
+        "Status":{"shape":"NonEmptyString"}
+      }
+    },
+    "AwsEc2VolumeAttachmentList":{
+      "type":"list",
+      "member":{"shape":"AwsEc2VolumeAttachment"}
+    },
+    "AwsEc2VolumeDetails":{
+      "type":"structure",
+      "members":{
+        "CreateTime":{"shape":"NonEmptyString"},
+        "Encrypted":{"shape":"Boolean"},
+        "Size":{"shape":"Integer"},
+        "SnapshotId":{"shape":"NonEmptyString"},
+        "Status":{"shape":"NonEmptyString"},
+        "KmsKeyId":{"shape":"NonEmptyString"},
+        "Attachments":{"shape":"AwsEc2VolumeAttachmentList"}
+      }
+    },
+    "AwsEc2VpcDetails":{
+      "type":"structure",
+      "members":{
+        "CidrBlockAssociationSet":{"shape":"CidrBlockAssociationList"},
+        "Ipv6CidrBlockAssociationSet":{"shape":"Ipv6CidrBlockAssociationList"},
+        "DhcpOptionsId":{"shape":"NonEmptyString"},
+        "State":{"shape":"NonEmptyString"}
+      }
+    },
     "AwsElasticsearchDomainDetails":{
       "type":"structure",
       "members":{
@@ -1265,6 +1309,7 @@
         "UserDefinedFields":{"shape":"FieldMap"},
         "Malware":{"shape":"MalwareList"},
         "Network":{"shape":"Network"},
+        "NetworkPath":{"shape":"NetworkPathList"},
         "Process":{"shape":"ProcessDetails"},
         "ThreatIntelIndicators":{"shape":"ThreatIntelIndicatorList"},
         "Resources":{"shape":"ResourceList"},
@@ -1274,7 +1319,8 @@
         "Workflow":{"shape":"Workflow"},
         "RecordState":{"shape":"RecordState"},
         "RelatedFindings":{"shape":"RelatedFindingList"},
-        "Note":{"shape":"Note"}
+        "Note":{"shape":"Note"},
+        "Vulnerabilities":{"shape":"VulnerabilityList"}
       }
     },
     "AwsSecurityFindingFilters":{
@@ -1532,6 +1578,18 @@
       "type":"list",
       "member":{"shape":"NonEmptyString"}
     },
+    "CidrBlockAssociation":{
+      "type":"structure",
+      "members":{
+        "AssociationId":{"shape":"NonEmptyString"},
+        "CidrBlock":{"shape":"NonEmptyString"},
+        "CidrBlockState":{"shape":"NonEmptyString"}
+      }
+    },
+    "CidrBlockAssociationList":{
+      "type":"list",
+      "member":{"shape":"CidrBlockAssociation"}
+    },
     "Compliance":{
       "type":"structure",
       "members":{
@@ -1617,6 +1675,18 @@
         "UnprocessedAccounts":{"shape":"ResultList"}
       }
     },
+    "Cvss":{
+      "type":"structure",
+      "members":{
+        "Version":{"shape":"NonEmptyString"},
+        "BaseScore":{"shape":"Double"},
+        "BaseVector":{"shape":"NonEmptyString"}
+      }
+    },
+    "CvssList":{
+      "type":"list",
+      "member":{"shape":"Cvss"}
+    },
     "DateFilter":{
       "type":"structure",
       "members":{
@@ -2138,6 +2208,18 @@
       "type":"list",
       "member":{"shape":"IpFilter"}
     },
+    "Ipv6CidrBlockAssociation":{
+      "type":"structure",
+      "members":{
+        "AssociationId":{"shape":"NonEmptyString"},
+        "Ipv6CidrBlock":{"shape":"NonEmptyString"},
+        "CidrBlockState":{"shape":"NonEmptyString"}
+      }
+    },
+    "Ipv6CidrBlockAssociationList":{
+      "type":"list",
+      "member":{"shape":"Ipv6CidrBlockAssociation"}
+    },
     "KeywordFilter":{
       "type":"structure",
       "members":{
@@ -2335,6 +2417,7 @@
       "members":{
         "Direction":{"shape":"NetworkDirection"},
         "Protocol":{"shape":"NonEmptyString"},
+        "OpenPortRange":{"shape":"PortRange"},
         "SourceIpV4":{"shape":"NonEmptyString"},
         "SourceIpV6":{"shape":"NonEmptyString"},
         "SourcePort":{"shape":"Integer"},
@@ -2353,6 +2436,34 @@
         "OUT"
       ]
     },
+    "NetworkHeader":{
+      "type":"structure",
+      "members":{
+        "Protocol":{"shape":"NonEmptyString"},
+        "Destination":{"shape":"NetworkPathComponentDetails"},
+        "Source":{"shape":"NetworkPathComponentDetails"}
+      }
+    },
+    "NetworkPathComponent":{
+      "type":"structure",
+      "members":{
+        "ComponentId":{"shape":"NonEmptyString"},
+        "ComponentType":{"shape":"NonEmptyString"},
+        "Egress":{"shape":"NetworkHeader"},
+        "Ingress":{"shape":"NetworkHeader"}
+      }
+    },
+    "NetworkPathComponentDetails":{
+      "type":"structure",
+      "members":{
+        "Address":{"shape":"StringList"},
+        "PortRanges":{"shape":"PortRangeList"}
+      }
+    },
+    "NetworkPathList":{
+      "type":"list",
+      "member":{"shape":"NetworkPathComponent"}
+    },
     "NextToken":{"type":"string"},
     "NonEmptyString":{
       "type":"string",
@@ -2406,6 +2517,17 @@
         "aws-us-gov"
       ]
     },
+    "PortRange":{
+      "type":"structure",
+      "members":{
+        "Begin":{"shape":"Integer"},
+        "End":{"shape":"Integer"}
+      }
+    },
+    "PortRangeList":{
+      "type":"list",
+      "member":{"shape":"PortRange"}
+    },
     "ProcessDetails":{
       "type":"structure",
       "members":{
@@ -2515,11 +2637,14 @@
     "ResourceDetails":{
       "type":"structure",
       "members":{
+        "AwsAutoScalingAutoScalingGroup":{"shape":"AwsAutoScalingAutoScalingGroupDetails"},
         "AwsCodeBuildProject":{"shape":"AwsCodeBuildProjectDetails"},
         "AwsCloudFrontDistribution":{"shape":"AwsCloudFrontDistributionDetails"},
         "AwsEc2Instance":{"shape":"AwsEc2InstanceDetails"},
         "AwsEc2NetworkInterface":{"shape":"AwsEc2NetworkInterfaceDetails"},
         "AwsEc2SecurityGroup":{"shape":"AwsEc2SecurityGroupDetails"},
+        "AwsEc2Volume":{"shape":"AwsEc2VolumeDetails"},
+        "AwsEc2Vpc":{"shape":"AwsEc2VpcDetails"},
         "AwsElbv2LoadBalancer":{"shape":"AwsElbv2LoadBalancerDetails"},
         "AwsElasticsearchDomain":{"shape":"AwsElasticsearchDomainDetails"},
         "AwsS3Bucket":{"shape":"AwsS3BucketDetails"},
@@ -2601,6 +2726,20 @@
         "Label":{"shape":"SeverityLabel"}
       }
     },
+    "SoftwarePackage":{
+      "type":"structure",
+      "members":{
+        "Name":{"shape":"NonEmptyString"},
+        "Version":{"shape":"NonEmptyString"},
+        "Epoch":{"shape":"NonEmptyString"},
+        "Release":{"shape":"NonEmptyString"},
+        "Architecture":{"shape":"NonEmptyString"}
+      }
+    },
+    "SoftwarePackageList":{
+      "type":"list",
+      "member":{"shape":"SoftwarePackage"}
+    },
     "SortCriteria":{
       "type":"list",
       "member":{"shape":"SortCriterion"}
@@ -2934,6 +3073,33 @@
         "BENIGN_POSITIVE"
       ]
     },
+    "Vulnerability":{
+      "type":"structure",
+      "required":["Id"],
+      "members":{
+        "Id":{"shape":"NonEmptyString"},
+        "VulnerablePackages":{"shape":"SoftwarePackageList"},
+        "Cvss":{"shape":"CvssList"},
+        "RelatedVulnerabilities":{"shape":"StringList"},
+        "Vendor":{"shape":"VulnerabilityVendor"},
+        "ReferenceUrls":{"shape":"StringList"}
+      }
+    },
+    "VulnerabilityList":{
+      "type":"list",
+      "member":{"shape":"Vulnerability"}
+    },
+    "VulnerabilityVendor":{
+      "type":"structure",
+      "required":["Name"],
+      "members":{
+        "Name":{"shape":"NonEmptyString"},
+        "Url":{"shape":"NonEmptyString"},
+        "VendorSeverity":{"shape":"NonEmptyString"},
+        "VendorCreatedAt":{"shape":"NonEmptyString"},
+        "VendorUpdatedAt":{"shape":"NonEmptyString"}
+      }
+    },
     "WafAction":{
       "type":"structure",
       "members":{
diff --git a/models/apis/securityhub/2018-10-26/docs-2.json b/models/apis/securityhub/2018-10-26/docs-2.json
index a1c9021d0a..a8b6c00055 100644
--- a/models/apis/securityhub/2018-10-26/docs-2.json
+++ b/models/apis/securityhub/2018-10-26/docs-2.json
@@ -124,6 +124,12 @@
         "AwsElbv2LoadBalancerDetails$AvailabilityZones": "<p>The Availability Zones for the load balancer.</p>"
       }
     },
+    "AwsAutoScalingAutoScalingGroupDetails": {
+      "base": "<p>Provides details about an auto scaling group.</p>",
+      "refs": {
+        "ResourceDetails$AwsAutoScalingAutoScalingGroup": "<p>Details for an autoscaling group.</p>"
+      }
+    },
     "AwsCloudFrontDistributionDetails": {
       "base": "<p>A distribution configuration.</p>",
       "refs": {
@@ -281,6 +287,30 @@
         "AwsEc2SecurityGroupIpPermission$UserIdGroupPairs": "<p>The security group and AWS account ID pairs.</p>"
       }
     },
+    "AwsEc2VolumeAttachment": {
+      "base": "<p>An attachment to an AWS EC2 volume.</p>",
+      "refs": {
+        "AwsEc2VolumeAttachmentList$member": null
+      }
+    },
+    "AwsEc2VolumeAttachmentList": {
+      "base": null,
+      "refs": {
+        "AwsEc2VolumeDetails$Attachments": "<p>The volume attachments.</p>"
+      }
+    },
+    "AwsEc2VolumeDetails": {
+      "base": "<p>Details about an EC2 volume.</p>",
+      "refs": {
+        "ResourceDetails$AwsEc2Volume": "<p>Details for an EC2 volume.</p>"
+      }
+    },
+    "AwsEc2VpcDetails": {
+      "base": "<p>Details about an EC2 VPC.</p>",
+      "refs": {
+        "ResourceDetails$AwsEc2Vpc": "<p>Details for an EC2 VPC.</p>"
+      }
+    },
     "AwsElasticsearchDomainDetails": {
       "base": "<p>Information about an Elasticsearch domain.</p>",
       "refs": {
@@ -624,6 +654,8 @@
         "AwsCodeBuildProjectSource$InsecureSsl": "<p>Whether to ignore SSL warnings while connecting to the project source code.</p>",
         "AwsEc2NetworkInterfaceAttachment$DeleteOnTermination": "<p>Indicates whether the network interface is deleted when the instance is terminated.</p>",
         "AwsEc2NetworkInterfaceDetails$SourceDestCheck": "<p>Indicates whether traffic to or from the instance is validated.</p>",
+        "AwsEc2VolumeAttachment$DeleteOnTermination": "<p>Whether the EBS volume is deleted when the EC2 instance is terminated.</p>",
+        "AwsEc2VolumeDetails$Encrypted": "<p>Whether the volume is encrypted.</p>",
         "AwsElasticsearchDomainDomainEndpointOptions$EnforceHTTPS": "<p>Whether to require that all traffic to the domain arrive over HTTPS.</p>",
         "AwsElasticsearchDomainEncryptionAtRestOptions$Enabled": "<p>Whether encryption at rest is enabled.</p>",
         "AwsElasticsearchDomainNodeToNodeEncryptionOptions$Enabled": "<p>Whether node-to-node encryption is enabled.</p>",
@@ -642,6 +674,18 @@
         "Product$Categories": "<p>The categories assigned to the product.</p>"
       }
     },
+    "CidrBlockAssociation": {
+      "base": "<p>An IPv4 CIDR block association.</p>",
+      "refs": {
+        "CidrBlockAssociationList$member": null
+      }
+    },
+    "CidrBlockAssociationList": {
+      "base": null,
+      "refs": {
+        "AwsEc2VpcDetails$CidrBlockAssociationSet": "<p>Information about the IPv4 CIDR blocks associated with the VPC.</p>"
+      }
+    },
     "Compliance": {
       "base": "<p>Contains finding details that are specific to control-based findings. Only returned for findings generated from controls.</p>",
       "refs": {
@@ -697,6 +741,18 @@
       "refs": {
       }
     },
+    "Cvss": {
+      "base": "<p>CVSS scores from the advisory related to the vulnerability.</p>",
+      "refs": {
+        "CvssList$member": null
+      }
+    },
+    "CvssList": {
+      "base": null,
+      "refs": {
+        "Vulnerability$Cvss": "<p>CVSS scores from the advisory related to the vulnerability.</p>"
+      }
+    },
     "DateFilter": {
       "base": "<p>A date filter for querying findings.</p>",
       "refs": {
@@ -875,6 +931,7 @@
       "base": null,
       "refs": {
         "AwsKmsKeyDetails$CreationDate": "<p>The date and time when the CMK was created.</p>",
+        "Cvss$BaseScore": "<p>The base CVSS score.</p>",
         "NumberFilter$Gte": "<p>The greater-than-equal condition to be applied to a single field when querying for findings. </p>",
         "NumberFilter$Lte": "<p>The less-than-equal condition to be applied to a single field when querying for findings. </p>",
         "NumberFilter$Eq": "<p>The equal-to condition to be applied to a single field when querying for findings.</p>",
@@ -1029,10 +1086,12 @@
     "Integer": {
       "base": null,
       "refs": {
+        "AwsAutoScalingAutoScalingGroupDetails$HealthCheckGracePeriod": "<p>The amount of time, in seconds, that Amazon EC2 Auto Scaling waits before it checks the health status of an EC2 instance that has come into service.</p>",
         "AwsCodeBuildProjectSource$GitCloneDepth": "<p>Information about the Git clone depth for the build project.</p>",
         "AwsEc2NetworkInterfaceAttachment$DeviceIndex": "<p>The device index of the network interface attachment on the instance.</p>",
         "AwsEc2SecurityGroupIpPermission$FromPort": "<p>The start of the port range for the TCP and UDP protocols, or an ICMP/ICMPv6 type number.</p> <p>A value of -1 indicates all ICMP/ICMPv6 types. If you specify all ICMP/ICMPv6 types, you must specify all codes. </p>",
         "AwsEc2SecurityGroupIpPermission$ToPort": "<p>The end of the port range for the TCP and UDP protocols, or an ICMP/ICMPv6 code.</p> <p>A value of -1 indicates all ICMP/ICMPv6 codes. If you specify all ICMP/ICMPv6 types, you must specify all codes.</p>",
+        "AwsEc2VolumeDetails$Size": "<p>The size of the volume, in GiBs.</p>",
         "AwsIamRoleDetails$MaxSessionDuration": "<p>The maximum session duration (in seconds) that you want to set for the specified role.</p>",
         "AwsLambdaFunctionDetails$MemorySize": "<p>The memory that's allocated to the function.</p>",
         "AwsLambdaFunctionDetails$Timeout": "<p>The amount of time that Lambda allows a function to run before stopping it.</p>",
@@ -1050,6 +1109,8 @@
         "InsightResultValue$Count": "<p>The number of findings returned for each <code>GroupByAttributeValue</code>.</p>",
         "Network$SourcePort": "<p>The source port of network-related information about a finding.</p>",
         "Network$DestinationPort": "<p>The destination port of network-related information about a finding.</p>",
+        "PortRange$Begin": "<p>The first port in the port range.</p>",
+        "PortRange$End": "<p>The last port in the port range.</p>",
         "ProcessDetails$Pid": "<p>The process ID.</p>",
         "ProcessDetails$ParentPid": "<p>The parent process ID.</p>",
         "Severity$Normalized": "<p>Deprecated. This attribute is being deprecated. Instead of providing <code>Normalized</code>, provide <code>Label</code>.</p> <p>If you provide <code>Normalized</code> and do not provide <code>Label</code>, <code>Label</code> is set automatically as follows. </p> <ul> <li> <p>0 - <code>INFORMATIONAL</code> </p> </li> <li> <p>1–39 - <code>LOW</code> </p> </li> <li> <p>40–69 - <code>MEDIUM</code> </p> </li> <li> <p>70–89 - <code>HIGH</code> </p> </li> <li> <p>90–100 - <code>CRITICAL</code> </p> </li> </ul>"
@@ -1122,6 +1183,18 @@
         "AwsSecurityFindingFilters$ResourceAwsEc2InstanceIpV6Addresses": "<p>The IPv6 addresses associated with the instance.</p>"
       }
     },
+    "Ipv6CidrBlockAssociation": {
+      "base": "<p>An IPV6 CIDR block association.</p>",
+      "refs": {
+        "Ipv6CidrBlockAssociationList$member": null
+      }
+    },
+    "Ipv6CidrBlockAssociationList": {
+      "base": null,
+      "refs": {
+        "AwsEc2VpcDetails$Ipv6CidrBlockAssociationSet": "<p>Information about the IPv6 CIDR blocks associated with the VPC.</p>"
+      }
+    },
     "KeywordFilter": {
       "base": "<p>A keyword filter for querying findings.</p>",
       "refs": {
@@ -1270,6 +1343,32 @@
         "Network$Direction": "<p>The direction of network traffic associated with a finding.</p>"
       }
     },
+    "NetworkHeader": {
+      "base": "<p>Details about a network path component that occurs before or after the current component.</p>",
+      "refs": {
+        "NetworkPathComponent$Egress": "<p>Information about the component that comes after the current component in the network path.</p>",
+        "NetworkPathComponent$Ingress": "<p>Information about the component that comes before the current node in the network path.</p>"
+      }
+    },
+    "NetworkPathComponent": {
+      "base": "<p>Information about a network path component.</p>",
+      "refs": {
+        "NetworkPathList$member": null
+      }
+    },
+    "NetworkPathComponentDetails": {
+      "base": "<p>Information about the destination of the next component in the network path.</p>",
+      "refs": {
+        "NetworkHeader$Destination": "<p>Information about the destination of the component.</p>",
+        "NetworkHeader$Source": "<p>Information about the origin of the component.</p>"
+      }
+    },
+    "NetworkPathList": {
+      "base": null,
+      "refs": {
+        "AwsSecurityFinding$NetworkPath": "<p>Provides information about a network path that is relevant to a finding. Each entry under <code>NetworkPath</code> represents a component of that path.</p>"
+      }
+    },
     "NextToken": {
       "base": null,
       "refs": {
@@ -1308,6 +1407,9 @@
         "ArnList$member": null,
         "AvailabilityZone$ZoneName": "<p>The name of the Availability Zone.</p>",
         "AvailabilityZone$SubnetId": "<p>The ID of the subnet. You can specify one subnet per Availability Zone.</p>",
+        "AwsAutoScalingAutoScalingGroupDetails$LaunchConfigurationName": "<p>The name of the launch configuration.</p>",
+        "AwsAutoScalingAutoScalingGroupDetails$HealthCheckType": "<p>The service to use for the health checks.</p>",
+        "AwsAutoScalingAutoScalingGroupDetails$CreatedTime": "<p>The datetime when the auto scaling group was created.</p>",
         "AwsCloudFrontDistributionDetails$DomainName": "<p>The domain name corresponding to the distribution.</p>",
         "AwsCloudFrontDistributionDetails$ETag": "<p>The entity tag is a hash of the object.</p>",
         "AwsCloudFrontDistributionDetails$LastModifiedTime": "<p>The date and time that the distribution was last modified.</p>",
@@ -1358,6 +1460,15 @@
         "AwsEc2SecurityGroupUserIdGroupPair$UserId": "<p>The ID of an AWS account.</p> <p>For a referenced security group in another VPC, the account ID of the referenced security group is returned in the response. If the referenced security group is deleted, this value is not returned.</p> <p>[EC2-Classic] Required when adding or removing rules that reference a security group in another AWS. </p>",
         "AwsEc2SecurityGroupUserIdGroupPair$VpcId": "<p>The ID of the VPC for the referenced security group, if applicable.</p>",
         "AwsEc2SecurityGroupUserIdGroupPair$VpcPeeringConnectionId": "<p>The ID of the VPC peering connection, if applicable.</p>",
+        "AwsEc2VolumeAttachment$AttachTime": "<p>The datetime when the attachment initiated.</p>",
+        "AwsEc2VolumeAttachment$InstanceId": "<p>The identifier of the EC2 instance.</p>",
+        "AwsEc2VolumeAttachment$Status": "<p>The attachment state of the volume.</p>",
+        "AwsEc2VolumeDetails$CreateTime": "<p>The datetime when the volume was created.</p>",
+        "AwsEc2VolumeDetails$SnapshotId": "<p>The snapshot from which the volume was created.</p>",
+        "AwsEc2VolumeDetails$Status": "<p>The volume state.</p>",
+        "AwsEc2VolumeDetails$KmsKeyId": "<p>The ARN of the AWS Key Management Service (AWS KMS) customer master key (CMK) that was used to protect the volume encryption key for the volume.</p>",
+        "AwsEc2VpcDetails$DhcpOptionsId": "<p>The identifier of the set of Dynamic Host Configuration Protocol (DHCP) options that are associated with the VPC. If the default options are associated with the VPC, then this is default.</p>",
+        "AwsEc2VpcDetails$State": "<p>The current state of the VPC.</p>",
         "AwsElasticsearchDomainDetails$AccessPolicies": "<p>IAM policy document specifying the access policies for the new Amazon ES domain.</p>",
         "AwsElasticsearchDomainDetails$DomainId": "<p>Unique identifier for an Amazon ES domain.</p>",
         "AwsElasticsearchDomainDetails$DomainName": "<p>Name of an Amazon ES domain.</p> <p>Domain names are unique across all domains owned by the same account within an AWS Region.</p> <p>Domain names must start with a lowercase letter and must be between 3 and 28 characters.</p> <p>Valid characters are a-z (lowercase only), 0-9, and – (hyphen). </p>",
@@ -1467,6 +1578,9 @@
         "BatchUpdateFindingsUnprocessedFinding$ErrorCode": "<p>The code associated with the error.</p>",
         "BatchUpdateFindingsUnprocessedFinding$ErrorMessage": "<p>The message associated with the error.</p>",
         "CategoryList$member": null,
+        "CidrBlockAssociation$AssociationId": "<p>The association ID for the IPv4 CIDR block.</p>",
+        "CidrBlockAssociation$CidrBlock": "<p>The IPv4 CIDR block.</p>",
+        "CidrBlockAssociation$CidrBlockState": "<p>Information about the state of the IPv4 CIDR block.</p>",
         "ContainerDetails$Name": "<p>The name of the container related to a finding.</p>",
         "ContainerDetails$ImageId": "<p>The identifier of the image related to a finding.</p>",
         "ContainerDetails$ImageName": "<p>The name of the image related to a finding.</p>",
@@ -1478,6 +1592,8 @@
         "CreateInsightRequest$Name": "<p>The name of the custom insight to create.</p>",
         "CreateInsightRequest$GroupByAttribute": "<p>The attribute used to group the findings for the insight. The grouping attribute identifies the type of item that the insight applies to. For example, if an insight is grouped by resource identifier, then the insight produces a list of resource identifiers.</p>",
         "CreateInsightResponse$InsightArn": "<p>The ARN of the insight created.</p>",
+        "Cvss$Version": "<p>The version of CVSS for the CVSS score.</p>",
+        "Cvss$BaseVector": "<p>The base scoring vector for the CVSS score.</p>",
         "DateFilter$Start": "<p>A start date for the date filter.</p>",
         "DateFilter$End": "<p>An end date for the date filter.</p>",
         "DeleteActionTargetRequest$ActionTargetArn": "<p>The ARN of the custom action target to delete.</p>",
@@ -1512,6 +1628,9 @@
         "Invitation$InvitationId": "<p>The ID of the invitation sent to the member account.</p>",
         "Invitation$MemberStatus": "<p>The current status of the association between the member and master accounts.</p>",
         "IpFilter$Cidr": "<p>A finding's CIDR value.</p>",
+        "Ipv6CidrBlockAssociation$AssociationId": "<p>The association ID for the IPv6 CIDR block.</p>",
+        "Ipv6CidrBlockAssociation$Ipv6CidrBlock": "<p>The IPv6 CIDR block.</p>",
+        "Ipv6CidrBlockAssociation$CidrBlockState": "<p>Information about the state of the CIDR block.</p>",
         "KeywordFilter$Value": "<p>A value for the keyword.</p>",
         "LimitExceededException$Message": null,
         "LimitExceededException$Code": null,
@@ -1534,6 +1653,9 @@
         "Network$DestinationIpV4": "<p>The destination IPv4 address of network-related information about a finding.</p>",
         "Network$DestinationIpV6": "<p>The destination IPv6 address of network-related information about a finding.</p>",
         "Network$DestinationDomain": "<p>The destination domain of network-related information about a finding.</p>",
+        "NetworkHeader$Protocol": "<p>The protocol used for the component.</p>",
+        "NetworkPathComponent$ComponentId": "<p>The identifier of a component in the network path.</p>",
+        "NetworkPathComponent$ComponentType": "<p>The type of component.</p>",
         "NonEmptyStringList$member": null,
         "Note$Text": "<p>The text of a note.</p>",
         "Note$UpdatedBy": "<p>The principal that created a note.</p>",
@@ -1567,6 +1689,11 @@
         "Result$ProcessingResult": "<p>The reason that the account was not processed.</p>",
         "SecurityGroups$member": null,
         "Severity$Original": "<p>The native severity from the finding product that generated the finding.</p>",
+        "SoftwarePackage$Name": "<p>The name of the software package.</p>",
+        "SoftwarePackage$Version": "<p>The version of the software package.</p>",
+        "SoftwarePackage$Epoch": "<p>The epoch of the software package.</p>",
+        "SoftwarePackage$Release": "<p>The release of the software package.</p>",
+        "SoftwarePackage$Architecture": "<p>The architecture used for the software package.</p>",
         "SortCriterion$Field": "<p>The finding attribute used to sort findings.</p>",
         "Standard$StandardsArn": "<p>The ARN of a standard.</p>",
         "Standard$Name": "<p>The name of the standard.</p>",
@@ -1599,7 +1726,13 @@
         "UpdateInsightRequest$Name": "<p>The updated name for the insight.</p>",
         "UpdateInsightRequest$GroupByAttribute": "<p>The updated <code>GroupBy</code> attribute that defines this insight.</p>",
         "UpdateStandardsControlRequest$StandardsControlArn": "<p>The ARN of the security standard control to enable or disable.</p>",
-        "UpdateStandardsControlRequest$DisabledReason": "<p>A description of the reason why you are disabling a security standard control.</p>",
+        "UpdateStandardsControlRequest$DisabledReason": "<p>A description of the reason why you are disabling a security standard control. If you are disabling a control, then this is required.</p>",
+        "Vulnerability$Id": "<p>The identifier of the vulnerability.</p>",
+        "VulnerabilityVendor$Name": "<p>The name of the vendor.</p>",
+        "VulnerabilityVendor$Url": "<p>The URL of the vulnerability advisory.</p>",
+        "VulnerabilityVendor$VendorSeverity": "<p>The severity that the vendor assigned to the vulnerability.</p>",
+        "VulnerabilityVendor$VendorCreatedAt": "<p>The datetime when the vulnerability advisory was created.</p>",
+        "VulnerabilityVendor$VendorUpdatedAt": "<p>The datetime when the vulnerability advisory was last updated.</p>",
         "WafAction$Type": "<p>Specifies how you want AWS WAF to respond to requests that match the settings in a rule.</p> <p>Valid settings include the following:</p> <ul> <li> <p> <code>ALLOW</code> - AWS WAF allows requests</p> </li> <li> <p> <code>BLOCK</code> - AWS WAF blocks requests</p> </li> <li> <p> <code>COUNT</code> - AWS WAF increments a counter of the requests that match all of the conditions in the rule. AWS WAF then continues to inspect the web request based on the remaining rules in the web ACL. You can't specify <code>COUNT</code> for the default action for a WebACL.</p> </li> </ul>",
         "WafExcludedRule$RuleId": "<p>The unique identifier for the rule to exclude from the rule group.</p>",
         "WafOverrideAction$Type": "<p> <code>COUNT</code> overrides the action specified by the individual rule within a <code>RuleGroup</code> .</p> <p>If set to <code>NONE</code>, the rule's action takes place.</p>"
@@ -1656,6 +1789,19 @@
         "Resource$Partition": "<p>The canonical AWS partition name that the Region is assigned to.</p>"
       }
     },
+    "PortRange": {
+      "base": "<p>A range of ports.</p>",
+      "refs": {
+        "Network$OpenPortRange": "<p>The range of open ports that is present on the network.</p>",
+        "PortRangeList$member": null
+      }
+    },
+    "PortRangeList": {
+      "base": null,
+      "refs": {
+        "NetworkPathComponentDetails$PortRanges": "<p>A list of port ranges for the destination.</p>"
+      }
+    },
     "ProcessDetails": {
       "base": "<p>The details of process-related information about a finding.</p>",
       "refs": {
@@ -1811,6 +1957,18 @@
         "BatchUpdateFindingsRequest$Severity": "<p>Used to update the finding severity.</p>"
       }
     },
+    "SoftwarePackage": {
+      "base": "<p>Information about a software package.</p>",
+      "refs": {
+        "SoftwarePackageList$member": null
+      }
+    },
+    "SoftwarePackageList": {
+      "base": null,
+      "refs": {
+        "Vulnerability$VulnerablePackages": "<p>List of software packages that have the vulnerability.</p>"
+      }
+    },
     "SortCriteria": {
       "base": null,
       "refs": {
@@ -1985,8 +2143,12 @@
     "StringList": {
       "base": null,
       "refs": {
+        "AwsAutoScalingAutoScalingGroupDetails$LoadBalancerNames": "<p>The list of load balancers associated with the group.</p>",
         "AwsEc2InstanceDetails$IpV4Addresses": "<p>The IPv4 addresses associated with the instance.</p>",
-        "AwsEc2InstanceDetails$IpV6Addresses": "<p>The IPv6 addresses associated with the instance.</p>"
+        "AwsEc2InstanceDetails$IpV6Addresses": "<p>The IPv6 addresses associated with the instance.</p>",
+        "NetworkPathComponentDetails$Address": "<p>The IP addresses of the destination.</p>",
+        "Vulnerability$RelatedVulnerabilities": "<p>List of vulnerabilities that are related to this vulnerability.</p>",
+        "Vulnerability$ReferenceUrls": "<p>A list of URLs that provide additional information about the vulnerability.</p>"
       }
     },
     "TagKey": {
@@ -2123,6 +2285,24 @@
         "BatchUpdateFindingsRequest$VerificationState": "<p>Indicates the veracity of a finding.</p> <p>The available values for <code>VerificationState</code> are as follows.</p> <ul> <li> <p> <code>UNKNOWN</code> – The default disposition of a security finding</p> </li> <li> <p> <code>TRUE_POSITIVE</code> – The security finding is confirmed</p> </li> <li> <p> <code>FALSE_POSITIVE</code> – The security finding was determined to be a false alarm</p> </li> <li> <p> <code>BENIGN_POSITIVE</code> – A special case of <code>TRUE_POSITIVE</code> where the finding doesn't pose any threat, is expected, or both</p> </li> </ul>"
       }
     },
+    "Vulnerability": {
+      "base": "<p>A vulnerability associated with a finding.</p>",
+      "refs": {
+        "VulnerabilityList$member": null
+      }
+    },
+    "VulnerabilityList": {
+      "base": null,
+      "refs": {
+        "AwsSecurityFinding$Vulnerabilities": "<p>Provides a list of vulnerabilities associated with the findings.</p>"
+      }
+    },
+    "VulnerabilityVendor": {
+      "base": "<p>A vendor that generates a vulnerability report.</p>",
+      "refs": {
+        "Vulnerability$Vendor": "<p>Information about the vendor that generates the vulnerability report.</p>"
+      }
+    },
     "WafAction": {
       "base": "<p>Details about the action that CloudFront or AWS WAF takes when a web request matches the conditions in the rule. </p>",
       "refs": {
diff --git a/service/appsync/api.go b/service/appsync/api.go
index 8215648e8d..4af1265c5d 100644
--- a/service/appsync/api.go
+++ b/service/appsync/api.go
@@ -3990,7 +3990,29 @@ type ApiCache struct {
 	// Valid values are between 1 and 3600 seconds.
 	Ttl *int64 `locationName:"ttl" type:"long"`
 
-	// The cache instance type.
+	// The cache instance type. Valid values are
+	//
+	//    * SMALL
+	//
+	//    * MEDIUM
+	//
+	//    * LARGE
+	//
+	//    * XLARGE
+	//
+	//    * LARGE_2X
+	//
+	//    * LARGE_4X
+	//
+	//    * LARGE_8X (not available in all regions)
+	//
+	//    * LARGE_12X
+	//
+	// Historically, instance types were identified by an EC2-style value. As of
+	// July 2020, this is deprecated, and the generic identifiers above should be
+	// used.
+	//
+	// The following legacy instance types are avaible, but their use is discouraged:
 	//
 	//    * T2_SMALL: A t2.small instance type.
 	//
@@ -4633,7 +4655,29 @@ type CreateApiCacheInput struct {
 	// Ttl is a required field
 	Ttl *int64 `locationName:"ttl" type:"long" required:"true"`
 
-	// The cache instance type.
+	// The cache instance type. Valid values are
+	//
+	//    * SMALL
+	//
+	//    * MEDIUM
+	//
+	//    * LARGE
+	//
+	//    * XLARGE
+	//
+	//    * LARGE_2X
+	//
+	//    * LARGE_4X
+	//
+	//    * LARGE_8X (not available in all regions)
+	//
+	//    * LARGE_12X
+	//
+	// Historically, instance types were identified by an EC2-style value. As of
+	// July 2020, this is deprecated, and the generic identifiers above should be
+	// used.
+	//
+	// The following legacy instance types are avaible, but their use is discouraged:
 	//
 	//    * T2_SMALL: A t2.small instance type.
 	//
@@ -8585,7 +8629,7 @@ type RdsHttpEndpointConfig struct {
 	// Logical database name.
 	DatabaseName *string `locationName:"databaseName" type:"string"`
 
-	// Amazon RDS cluster identifier.
+	// Amazon RDS cluster ARN.
 	DbClusterIdentifier *string `locationName:"dbClusterIdentifier" type:"string"`
 
 	// Logical schema name.
@@ -9204,7 +9248,29 @@ type UpdateApiCacheInput struct {
 	// Ttl is a required field
 	Ttl *int64 `locationName:"ttl" type:"long" required:"true"`
 
-	// The cache instance type.
+	// The cache instance type. Valid values are
+	//
+	//    * SMALL
+	//
+	//    * MEDIUM
+	//
+	//    * LARGE
+	//
+	//    * XLARGE
+	//
+	//    * LARGE_2X
+	//
+	//    * LARGE_4X
+	//
+	//    * LARGE_8X (not available in all regions)
+	//
+	//    * LARGE_12X
+	//
+	// Historically, instance types were identified by an EC2-style value. As of
+	// July 2020, this is deprecated, and the generic identifiers above should be
+	// used.
+	//
+	// The following legacy instance types are avaible, but their use is discouraged:
 	//
 	//    * T2_SMALL: A t2.small instance type.
 	//
@@ -10315,6 +10381,30 @@ const (
 
 	// ApiCacheTypeR48xlarge is a ApiCacheType enum value
 	ApiCacheTypeR48xlarge = "R4_8XLARGE"
+
+	// ApiCacheTypeSmall is a ApiCacheType enum value
+	ApiCacheTypeSmall = "SMALL"
+
+	// ApiCacheTypeMedium is a ApiCacheType enum value
+	ApiCacheTypeMedium = "MEDIUM"
+
+	// ApiCacheTypeLarge is a ApiCacheType enum value
+	ApiCacheTypeLarge = "LARGE"
+
+	// ApiCacheTypeXlarge is a ApiCacheType enum value
+	ApiCacheTypeXlarge = "XLARGE"
+
+	// ApiCacheTypeLarge2x is a ApiCacheType enum value
+	ApiCacheTypeLarge2x = "LARGE_2X"
+
+	// ApiCacheTypeLarge4x is a ApiCacheType enum value
+	ApiCacheTypeLarge4x = "LARGE_4X"
+
+	// ApiCacheTypeLarge8x is a ApiCacheType enum value
+	ApiCacheTypeLarge8x = "LARGE_8X"
+
+	// ApiCacheTypeLarge12x is a ApiCacheType enum value
+	ApiCacheTypeLarge12x = "LARGE_12X"
 )
 
 const (
diff --git a/service/chime/api.go b/service/chime/api.go
index 75be94d1c7..4b393ef00e 100644
--- a/service/chime/api.go
+++ b/service/chime/api.go
@@ -3311,6 +3311,106 @@ func (c *Chime) DeleteVoiceConnectorWithContext(ctx aws.Context, input *DeleteVo
 	return out, req.Send()
 }
 
+const opDeleteVoiceConnectorEmergencyCallingConfiguration = "DeleteVoiceConnectorEmergencyCallingConfiguration"
+
+// DeleteVoiceConnectorEmergencyCallingConfigurationRequest generates a "aws/request.Request" representing the
+// client's request for the DeleteVoiceConnectorEmergencyCallingConfiguration operation. The "output" return
+// value will be populated with the request's response once the request completes
+// successfully.
+//
+// Use "Send" method on the returned Request to send the API call to the service.
+// the "output" return value is not valid until after Send returns without error.
+//
+// See DeleteVoiceConnectorEmergencyCallingConfiguration for more information on using the DeleteVoiceConnectorEmergencyCallingConfiguration
+// API call, and error handling.
+//
+// This method is useful when you want to inject custom logic or configuration
+// into the SDK's request lifecycle. Such as custom headers, or retry logic.
+//
+//
+//    // Example sending a request using the DeleteVoiceConnectorEmergencyCallingConfigurationRequest method.
+//    req, resp := client.DeleteVoiceConnectorEmergencyCallingConfigurationRequest(params)
+//
+//    err := req.Send()
+//    if err == nil { // resp is now filled
+//        fmt.Println(resp)
+//    }
+//
+// See also, https://docs.aws.amazon.com/goto/WebAPI/chime-2018-05-01/DeleteVoiceConnectorEmergencyCallingConfiguration
+func (c *Chime) DeleteVoiceConnectorEmergencyCallingConfigurationRequest(input *DeleteVoiceConnectorEmergencyCallingConfigurationInput) (req *request.Request, output *DeleteVoiceConnectorEmergencyCallingConfigurationOutput) {
+	op := &request.Operation{
+		Name:       opDeleteVoiceConnectorEmergencyCallingConfiguration,
+		HTTPMethod: "DELETE",
+		HTTPPath:   "/voice-connectors/{voiceConnectorId}/emergency-calling-configuration",
+	}
+
+	if input == nil {
+		input = &DeleteVoiceConnectorEmergencyCallingConfigurationInput{}
+	}
+
+	output = &DeleteVoiceConnectorEmergencyCallingConfigurationOutput{}
+	req = c.newRequest(op, input, output)
+	req.Handlers.Unmarshal.Swap(restjson.UnmarshalHandler.Name, protocol.UnmarshalDiscardBodyHandler)
+	return
+}
+
+// DeleteVoiceConnectorEmergencyCallingConfiguration API operation for Amazon Chime.
+//
+// Deletes the emergency calling configuration details from the specified Amazon
+// Chime Voice Connector.
+//
+// Returns awserr.Error for service API and SDK errors. Use runtime type assertions
+// with awserr.Error's Code and Message methods to get detailed information about
+// the error.
+//
+// See the AWS API reference guide for Amazon Chime's
+// API operation DeleteVoiceConnectorEmergencyCallingConfiguration for usage and error information.
+//
+// Returned Error Types:
+//   * UnauthorizedClientException
+//   The client is not currently authorized to make the request.
+//
+//   * NotFoundException
+//   One or more of the resources in the request does not exist in the system.
+//
+//   * ForbiddenException
+//   The client is permanently forbidden from making the request. For example,
+//   when a user tries to create an account from an unsupported Region.
+//
+//   * BadRequestException
+//   The input parameters don't match the service's restrictions.
+//
+//   * ThrottledClientException
+//   The client exceeded its request rate limit.
+//
+//   * ServiceUnavailableException
+//   The service is currently unavailable.
+//
+//   * ServiceFailureException
+//   The service encountered an unexpected error.
+//
+// See also, https://docs.aws.amazon.com/goto/WebAPI/chime-2018-05-01/DeleteVoiceConnectorEmergencyCallingConfiguration
+func (c *Chime) DeleteVoiceConnectorEmergencyCallingConfiguration(input *DeleteVoiceConnectorEmergencyCallingConfigurationInput) (*DeleteVoiceConnectorEmergencyCallingConfigurationOutput, error) {
+	req, out := c.DeleteVoiceConnectorEmergencyCallingConfigurationRequest(input)
+	return out, req.Send()
+}
+
+// DeleteVoiceConnectorEmergencyCallingConfigurationWithContext is the same as DeleteVoiceConnectorEmergencyCallingConfiguration with the addition of
+// the ability to pass a context and additional request options.
+//
+// See DeleteVoiceConnectorEmergencyCallingConfiguration for details on how to use this API operation.
+//
+// The context must be non-nil and will be used for request cancellation. If
+// the context is nil a panic will occur. In the future the SDK may create
+// sub-contexts for http.Requests. See https://golang.org/pkg/context/
+// for more information on using Contexts.
+func (c *Chime) DeleteVoiceConnectorEmergencyCallingConfigurationWithContext(ctx aws.Context, input *DeleteVoiceConnectorEmergencyCallingConfigurationInput, opts ...request.Option) (*DeleteVoiceConnectorEmergencyCallingConfigurationOutput, error) {
+	req, out := c.DeleteVoiceConnectorEmergencyCallingConfigurationRequest(input)
+	req.SetContext(ctx)
+	req.ApplyOptions(opts...)
+	return out, req.Send()
+}
+
 const opDeleteVoiceConnectorGroup = "DeleteVoiceConnectorGroup"
 
 // DeleteVoiceConnectorGroupRequest generates a "aws/request.Request" representing the
@@ -3463,6 +3563,9 @@ func (c *Chime) DeleteVoiceConnectorOriginationRequest(input *DeleteVoiceConnect
 //
 // Deletes the origination settings for the specified Amazon Chime Voice Connector.
 //
+// If emergency calling is configured for the Amazon Chime Voice Connector,
+// it must be deleted prior to deleting the origination settings.
+//
 // Returns awserr.Error for service API and SDK errors. Use runtime type assertions
 // with awserr.Error's Code and Message methods to get detailed information about
 // the error.
@@ -3761,6 +3864,9 @@ func (c *Chime) DeleteVoiceConnectorTerminationRequest(input *DeleteVoiceConnect
 //
 // Deletes the termination settings for the specified Amazon Chime Voice Connector.
 //
+// If emergency calling is configured for the Amazon Chime Voice Connector,
+// it must be deleted prior to deleting the termination settings.
+//
 // Returns awserr.Error for service API and SDK errors. Use runtime type assertions
 // with awserr.Error's Code and Message methods to get detailed information about
 // the error.
@@ -5900,6 +6006,105 @@ func (c *Chime) GetVoiceConnectorWithContext(ctx aws.Context, input *GetVoiceCon
 	return out, req.Send()
 }
 
+const opGetVoiceConnectorEmergencyCallingConfiguration = "GetVoiceConnectorEmergencyCallingConfiguration"
+
+// GetVoiceConnectorEmergencyCallingConfigurationRequest generates a "aws/request.Request" representing the
+// client's request for the GetVoiceConnectorEmergencyCallingConfiguration operation. The "output" return
+// value will be populated with the request's response once the request completes
+// successfully.
+//
+// Use "Send" method on the returned Request to send the API call to the service.
+// the "output" return value is not valid until after Send returns without error.
+//
+// See GetVoiceConnectorEmergencyCallingConfiguration for more information on using the GetVoiceConnectorEmergencyCallingConfiguration
+// API call, and error handling.
+//
+// This method is useful when you want to inject custom logic or configuration
+// into the SDK's request lifecycle. Such as custom headers, or retry logic.
+//
+//
+//    // Example sending a request using the GetVoiceConnectorEmergencyCallingConfigurationRequest method.
+//    req, resp := client.GetVoiceConnectorEmergencyCallingConfigurationRequest(params)
+//
+//    err := req.Send()
+//    if err == nil { // resp is now filled
+//        fmt.Println(resp)
+//    }
+//
+// See also, https://docs.aws.amazon.com/goto/WebAPI/chime-2018-05-01/GetVoiceConnectorEmergencyCallingConfiguration
+func (c *Chime) GetVoiceConnectorEmergencyCallingConfigurationRequest(input *GetVoiceConnectorEmergencyCallingConfigurationInput) (req *request.Request, output *GetVoiceConnectorEmergencyCallingConfigurationOutput) {
+	op := &request.Operation{
+		Name:       opGetVoiceConnectorEmergencyCallingConfiguration,
+		HTTPMethod: "GET",
+		HTTPPath:   "/voice-connectors/{voiceConnectorId}/emergency-calling-configuration",
+	}
+
+	if input == nil {
+		input = &GetVoiceConnectorEmergencyCallingConfigurationInput{}
+	}
+
+	output = &GetVoiceConnectorEmergencyCallingConfigurationOutput{}
+	req = c.newRequest(op, input, output)
+	return
+}
+
+// GetVoiceConnectorEmergencyCallingConfiguration API operation for Amazon Chime.
+//
+// Gets the emergency calling configuration details for the specified Amazon
+// Chime Voice Connector.
+//
+// Returns awserr.Error for service API and SDK errors. Use runtime type assertions
+// with awserr.Error's Code and Message methods to get detailed information about
+// the error.
+//
+// See the AWS API reference guide for Amazon Chime's
+// API operation GetVoiceConnectorEmergencyCallingConfiguration for usage and error information.
+//
+// Returned Error Types:
+//   * UnauthorizedClientException
+//   The client is not currently authorized to make the request.
+//
+//   * NotFoundException
+//   One or more of the resources in the request does not exist in the system.
+//
+//   * ForbiddenException
+//   The client is permanently forbidden from making the request. For example,
+//   when a user tries to create an account from an unsupported Region.
+//
+//   * BadRequestException
+//   The input parameters don't match the service's restrictions.
+//
+//   * ThrottledClientException
+//   The client exceeded its request rate limit.
+//
+//   * ServiceUnavailableException
+//   The service is currently unavailable.
+//
+//   * ServiceFailureException
+//   The service encountered an unexpected error.
+//
+// See also, https://docs.aws.amazon.com/goto/WebAPI/chime-2018-05-01/GetVoiceConnectorEmergencyCallingConfiguration
+func (c *Chime) GetVoiceConnectorEmergencyCallingConfiguration(input *GetVoiceConnectorEmergencyCallingConfigurationInput) (*GetVoiceConnectorEmergencyCallingConfigurationOutput, error) {
+	req, out := c.GetVoiceConnectorEmergencyCallingConfigurationRequest(input)
+	return out, req.Send()
+}
+
+// GetVoiceConnectorEmergencyCallingConfigurationWithContext is the same as GetVoiceConnectorEmergencyCallingConfiguration with the addition of
+// the ability to pass a context and additional request options.
+//
+// See GetVoiceConnectorEmergencyCallingConfiguration for details on how to use this API operation.
+//
+// The context must be non-nil and will be used for request cancellation. If
+// the context is nil a panic will occur. In the future the SDK may create
+// sub-contexts for http.Requests. See https://golang.org/pkg/context/
+// for more information on using Contexts.
+func (c *Chime) GetVoiceConnectorEmergencyCallingConfigurationWithContext(ctx aws.Context, input *GetVoiceConnectorEmergencyCallingConfigurationInput, opts ...request.Option) (*GetVoiceConnectorEmergencyCallingConfigurationOutput, error) {
+	req, out := c.GetVoiceConnectorEmergencyCallingConfigurationRequest(input)
+	req.SetContext(ctx)
+	req.ApplyOptions(opts...)
+	return out, req.Send()
+}
+
 const opGetVoiceConnectorGroup = "GetVoiceConnectorGroup"
 
 // GetVoiceConnectorGroupRequest generates a "aws/request.Request" representing the
@@ -9269,6 +9474,107 @@ func (c *Chime) PutRetentionSettingsWithContext(ctx aws.Context, input *PutReten
 	return out, req.Send()
 }
 
+const opPutVoiceConnectorEmergencyCallingConfiguration = "PutVoiceConnectorEmergencyCallingConfiguration"
+
+// PutVoiceConnectorEmergencyCallingConfigurationRequest generates a "aws/request.Request" representing the
+// client's request for the PutVoiceConnectorEmergencyCallingConfiguration operation. The "output" return
+// value will be populated with the request's response once the request completes
+// successfully.
+//
+// Use "Send" method on the returned Request to send the API call to the service.
+// the "output" return value is not valid until after Send returns without error.
+//
+// See PutVoiceConnectorEmergencyCallingConfiguration for more information on using the PutVoiceConnectorEmergencyCallingConfiguration
+// API call, and error handling.
+//
+// This method is useful when you want to inject custom logic or configuration
+// into the SDK's request lifecycle. Such as custom headers, or retry logic.
+//
+//
+//    // Example sending a request using the PutVoiceConnectorEmergencyCallingConfigurationRequest method.
+//    req, resp := client.PutVoiceConnectorEmergencyCallingConfigurationRequest(params)
+//
+//    err := req.Send()
+//    if err == nil { // resp is now filled
+//        fmt.Println(resp)
+//    }
+//
+// See also, https://docs.aws.amazon.com/goto/WebAPI/chime-2018-05-01/PutVoiceConnectorEmergencyCallingConfiguration
+func (c *Chime) PutVoiceConnectorEmergencyCallingConfigurationRequest(input *PutVoiceConnectorEmergencyCallingConfigurationInput) (req *request.Request, output *PutVoiceConnectorEmergencyCallingConfigurationOutput) {
+	op := &request.Operation{
+		Name:       opPutVoiceConnectorEmergencyCallingConfiguration,
+		HTTPMethod: "PUT",
+		HTTPPath:   "/voice-connectors/{voiceConnectorId}/emergency-calling-configuration",
+	}
+
+	if input == nil {
+		input = &PutVoiceConnectorEmergencyCallingConfigurationInput{}
+	}
+
+	output = &PutVoiceConnectorEmergencyCallingConfigurationOutput{}
+	req = c.newRequest(op, input, output)
+	return
+}
+
+// PutVoiceConnectorEmergencyCallingConfiguration API operation for Amazon Chime.
+//
+// Puts emergency calling configuration details to the specified Amazon Chime
+// Voice Connector, such as emergency phone numbers and calling countries. Origination
+// and termination settings must be enabled for the Amazon Chime Voice Connector
+// before emergency calling can be configured.
+//
+// Returns awserr.Error for service API and SDK errors. Use runtime type assertions
+// with awserr.Error's Code and Message methods to get detailed information about
+// the error.
+//
+// See the AWS API reference guide for Amazon Chime's
+// API operation PutVoiceConnectorEmergencyCallingConfiguration for usage and error information.
+//
+// Returned Error Types:
+//   * UnauthorizedClientException
+//   The client is not currently authorized to make the request.
+//
+//   * NotFoundException
+//   One or more of the resources in the request does not exist in the system.
+//
+//   * ForbiddenException
+//   The client is permanently forbidden from making the request. For example,
+//   when a user tries to create an account from an unsupported Region.
+//
+//   * BadRequestException
+//   The input parameters don't match the service's restrictions.
+//
+//   * ThrottledClientException
+//   The client exceeded its request rate limit.
+//
+//   * ServiceUnavailableException
+//   The service is currently unavailable.
+//
+//   * ServiceFailureException
+//   The service encountered an unexpected error.
+//
+// See also, https://docs.aws.amazon.com/goto/WebAPI/chime-2018-05-01/PutVoiceConnectorEmergencyCallingConfiguration
+func (c *Chime) PutVoiceConnectorEmergencyCallingConfiguration(input *PutVoiceConnectorEmergencyCallingConfigurationInput) (*PutVoiceConnectorEmergencyCallingConfigurationOutput, error) {
+	req, out := c.PutVoiceConnectorEmergencyCallingConfigurationRequest(input)
+	return out, req.Send()
+}
+
+// PutVoiceConnectorEmergencyCallingConfigurationWithContext is the same as PutVoiceConnectorEmergencyCallingConfiguration with the addition of
+// the ability to pass a context and additional request options.
+//
+// See PutVoiceConnectorEmergencyCallingConfiguration for details on how to use this API operation.
+//
+// The context must be non-nil and will be used for request cancellation. If
+// the context is nil a panic will occur. In the future the SDK may create
+// sub-contexts for http.Requests. See https://golang.org/pkg/context/
+// for more information on using Contexts.
+func (c *Chime) PutVoiceConnectorEmergencyCallingConfigurationWithContext(ctx aws.Context, input *PutVoiceConnectorEmergencyCallingConfigurationInput, opts ...request.Option) (*PutVoiceConnectorEmergencyCallingConfigurationOutput, error) {
+	req, out := c.PutVoiceConnectorEmergencyCallingConfigurationRequest(input)
+	req.SetContext(ctx)
+	req.ApplyOptions(opts...)
+	return out, req.Send()
+}
+
 const opPutVoiceConnectorLoggingConfiguration = "PutVoiceConnectorLoggingConfiguration"
 
 // PutVoiceConnectorLoggingConfigurationRequest generates a "aws/request.Request" representing the
@@ -9415,6 +9721,9 @@ func (c *Chime) PutVoiceConnectorOriginationRequest(input *PutVoiceConnectorOrig
 //
 // Adds origination settings for the specified Amazon Chime Voice Connector.
 //
+// If emergency calling is configured for the Amazon Chime Voice Connector,
+// it must be deleted prior to turning off origination settings.
+//
 // Returns awserr.Error for service API and SDK errors. Use runtime type assertions
 // with awserr.Error's Code and Message methods to get detailed information about
 // the error.
@@ -9716,6 +10025,9 @@ func (c *Chime) PutVoiceConnectorTerminationRequest(input *PutVoiceConnectorTerm
 //
 // Adds termination settings for the specified Amazon Chime Voice Connector.
 //
+// If emergency calling is configured for the Amazon Chime Voice Connector,
+// it must be deleted prior to turning off termination settings.
+//
 // Returns awserr.Error for service API and SDK errors. Use runtime type assertions
 // with awserr.Error's Code and Message methods to get detailed information about
 // the error.
@@ -12680,7 +12992,9 @@ type AssociatePhoneNumbersWithVoiceConnectorGroupInput struct {
 	_ struct{} `type:"structure"`
 
 	// List of phone numbers, in E.164 format.
-	E164PhoneNumbers []*string `type:"list"`
+	//
+	// E164PhoneNumbers is a required field
+	E164PhoneNumbers []*string `type:"list" required:"true"`
 
 	// If true, associates the provided phone numbers with the provided Amazon Chime
 	// Voice Connector Group and removes any previously existing associations. If
@@ -12707,6 +13021,9 @@ func (s AssociatePhoneNumbersWithVoiceConnectorGroupInput) GoString() string {
 // Validate inspects the fields of the type to determine if they are valid.
 func (s *AssociatePhoneNumbersWithVoiceConnectorGroupInput) Validate() error {
 	invalidParams := request.ErrInvalidParams{Context: "AssociatePhoneNumbersWithVoiceConnectorGroupInput"}
+	if s.E164PhoneNumbers == nil {
+		invalidParams.Add(request.NewErrParamRequired("E164PhoneNumbers"))
+	}
 	if s.VoiceConnectorGroupId == nil {
 		invalidParams.Add(request.NewErrParamRequired("VoiceConnectorGroupId"))
 	}
@@ -12767,7 +13084,9 @@ type AssociatePhoneNumbersWithVoiceConnectorInput struct {
 	_ struct{} `type:"structure"`
 
 	// List of phone numbers, in E.164 format.
-	E164PhoneNumbers []*string `type:"list"`
+	//
+	// E164PhoneNumbers is a required field
+	E164PhoneNumbers []*string `type:"list" required:"true"`
 
 	// If true, associates the provided phone numbers with the provided Amazon Chime
 	// Voice Connector and removes any previously existing associations. If false,
@@ -12793,6 +13112,9 @@ func (s AssociatePhoneNumbersWithVoiceConnectorInput) GoString() string {
 // Validate inspects the fields of the type to determine if they are valid.
 func (s *AssociatePhoneNumbersWithVoiceConnectorInput) Validate() error {
 	invalidParams := request.ErrInvalidParams{Context: "AssociatePhoneNumbersWithVoiceConnectorInput"}
+	if s.E164PhoneNumbers == nil {
+		invalidParams.Add(request.NewErrParamRequired("E164PhoneNumbers"))
+	}
 	if s.VoiceConnectorId == nil {
 		invalidParams.Add(request.NewErrParamRequired("VoiceConnectorId"))
 	}
@@ -15223,6 +15545,71 @@ func (s *Credential) SetUsername(v string) *Credential {
 	return s
 }
 
+// The Dialed Number Identification Service (DNIS) emergency calling configuration
+// details associated with an Amazon Chime Voice Connector's emergency calling
+// configuration.
+type DNISEmergencyCallingConfiguration struct {
+	_ struct{} `type:"structure"`
+
+	// The country from which emergency calls are allowed, in ISO 3166-1 alpha-2
+	// format.
+	//
+	// CallingCountry is a required field
+	CallingCountry *string `type:"string" required:"true"`
+
+	// The DNIS phone number to route emergency calls to, in E.164 format.
+	//
+	// EmergencyPhoneNumber is a required field
+	EmergencyPhoneNumber *string `type:"string" required:"true" sensitive:"true"`
+
+	// The DNIS phone number to route test emergency calls to, in E.164 format.
+	TestPhoneNumber *string `type:"string" sensitive:"true"`
+}
+
+// String returns the string representation
+func (s DNISEmergencyCallingConfiguration) String() string {
+	return awsutil.Prettify(s)
+}
+
+// GoString returns the string representation
+func (s DNISEmergencyCallingConfiguration) GoString() string {
+	return s.String()
+}
+
+// Validate inspects the fields of the type to determine if they are valid.
+func (s *DNISEmergencyCallingConfiguration) Validate() error {
+	invalidParams := request.ErrInvalidParams{Context: "DNISEmergencyCallingConfiguration"}
+	if s.CallingCountry == nil {
+		invalidParams.Add(request.NewErrParamRequired("CallingCountry"))
+	}
+	if s.EmergencyPhoneNumber == nil {
+		invalidParams.Add(request.NewErrParamRequired("EmergencyPhoneNumber"))
+	}
+
+	if invalidParams.Len() > 0 {
+		return invalidParams
+	}
+	return nil
+}
+
+// SetCallingCountry sets the CallingCountry field's value.
+func (s *DNISEmergencyCallingConfiguration) SetCallingCountry(v string) *DNISEmergencyCallingConfiguration {
+	s.CallingCountry = &v
+	return s
+}
+
+// SetEmergencyPhoneNumber sets the EmergencyPhoneNumber field's value.
+func (s *DNISEmergencyCallingConfiguration) SetEmergencyPhoneNumber(v string) *DNISEmergencyCallingConfiguration {
+	s.EmergencyPhoneNumber = &v
+	return s
+}
+
+// SetTestPhoneNumber sets the TestPhoneNumber field's value.
+func (s *DNISEmergencyCallingConfiguration) SetTestPhoneNumber(v string) *DNISEmergencyCallingConfiguration {
+	s.TestPhoneNumber = &v
+	return s
+}
+
 type DeleteAccountInput struct {
 	_ struct{} `type:"structure"`
 
@@ -15765,6 +16152,61 @@ func (s DeleteRoomOutput) GoString() string {
 	return s.String()
 }
 
+type DeleteVoiceConnectorEmergencyCallingConfigurationInput struct {
+	_ struct{} `type:"structure"`
+
+	// The Amazon Chime Voice Connector ID.
+	//
+	// VoiceConnectorId is a required field
+	VoiceConnectorId *string `location:"uri" locationName:"voiceConnectorId" type:"string" required:"true"`
+}
+
+// String returns the string representation
+func (s DeleteVoiceConnectorEmergencyCallingConfigurationInput) String() string {
+	return awsutil.Prettify(s)
+}
+
+// GoString returns the string representation
+func (s DeleteVoiceConnectorEmergencyCallingConfigurationInput) GoString() string {
+	return s.String()
+}
+
+// Validate inspects the fields of the type to determine if they are valid.
+func (s *DeleteVoiceConnectorEmergencyCallingConfigurationInput) Validate() error {
+	invalidParams := request.ErrInvalidParams{Context: "DeleteVoiceConnectorEmergencyCallingConfigurationInput"}
+	if s.VoiceConnectorId == nil {
+		invalidParams.Add(request.NewErrParamRequired("VoiceConnectorId"))
+	}
+	if s.VoiceConnectorId != nil && len(*s.VoiceConnectorId) < 1 {
+		invalidParams.Add(request.NewErrParamMinLen("VoiceConnectorId", 1))
+	}
+
+	if invalidParams.Len() > 0 {
+		return invalidParams
+	}
+	return nil
+}
+
+// SetVoiceConnectorId sets the VoiceConnectorId field's value.
+func (s *DeleteVoiceConnectorEmergencyCallingConfigurationInput) SetVoiceConnectorId(v string) *DeleteVoiceConnectorEmergencyCallingConfigurationInput {
+	s.VoiceConnectorId = &v
+	return s
+}
+
+type DeleteVoiceConnectorEmergencyCallingConfigurationOutput struct {
+	_ struct{} `type:"structure"`
+}
+
+// String returns the string representation
+func (s DeleteVoiceConnectorEmergencyCallingConfigurationOutput) String() string {
+	return awsutil.Prettify(s)
+}
+
+// GoString returns the string representation
+func (s DeleteVoiceConnectorEmergencyCallingConfigurationOutput) GoString() string {
+	return s.String()
+}
+
 type DeleteVoiceConnectorGroupInput struct {
 	_ struct{} `type:"structure"`
 
@@ -16045,7 +16487,9 @@ type DeleteVoiceConnectorTerminationCredentialsInput struct {
 
 	// The RFC2617 compliant username associated with the SIP credentials, in US-ASCII
 	// format.
-	Usernames []*string `type:"list"`
+	//
+	// Usernames is a required field
+	Usernames []*string `type:"list" required:"true"`
 
 	// The Amazon Chime Voice Connector ID.
 	//
@@ -16066,6 +16510,9 @@ func (s DeleteVoiceConnectorTerminationCredentialsInput) GoString() string {
 // Validate inspects the fields of the type to determine if they are valid.
 func (s *DeleteVoiceConnectorTerminationCredentialsInput) Validate() error {
 	invalidParams := request.ErrInvalidParams{Context: "DeleteVoiceConnectorTerminationCredentialsInput"}
+	if s.Usernames == nil {
+		invalidParams.Add(request.NewErrParamRequired("Usernames"))
+	}
 	if s.VoiceConnectorId == nil {
 		invalidParams.Add(request.NewErrParamRequired("VoiceConnectorId"))
 	}
@@ -16236,7 +16683,9 @@ type DisassociatePhoneNumbersFromVoiceConnectorGroupInput struct {
 	_ struct{} `type:"structure"`
 
 	// List of phone numbers, in E.164 format.
-	E164PhoneNumbers []*string `type:"list"`
+	//
+	// E164PhoneNumbers is a required field
+	E164PhoneNumbers []*string `type:"list" required:"true"`
 
 	// The Amazon Chime Voice Connector group ID.
 	//
@@ -16257,6 +16706,9 @@ func (s DisassociatePhoneNumbersFromVoiceConnectorGroupInput) GoString() string
 // Validate inspects the fields of the type to determine if they are valid.
 func (s *DisassociatePhoneNumbersFromVoiceConnectorGroupInput) Validate() error {
 	invalidParams := request.ErrInvalidParams{Context: "DisassociatePhoneNumbersFromVoiceConnectorGroupInput"}
+	if s.E164PhoneNumbers == nil {
+		invalidParams.Add(request.NewErrParamRequired("E164PhoneNumbers"))
+	}
 	if s.VoiceConnectorGroupId == nil {
 		invalidParams.Add(request.NewErrParamRequired("VoiceConnectorGroupId"))
 	}
@@ -16311,7 +16763,9 @@ type DisassociatePhoneNumbersFromVoiceConnectorInput struct {
 	_ struct{} `type:"structure"`
 
 	// List of phone numbers, in E.164 format.
-	E164PhoneNumbers []*string `type:"list"`
+	//
+	// E164PhoneNumbers is a required field
+	E164PhoneNumbers []*string `type:"list" required:"true"`
 
 	// The Amazon Chime Voice Connector ID.
 	//
@@ -16332,6 +16786,9 @@ func (s DisassociatePhoneNumbersFromVoiceConnectorInput) GoString() string {
 // Validate inspects the fields of the type to determine if they are valid.
 func (s *DisassociatePhoneNumbersFromVoiceConnectorInput) Validate() error {
 	invalidParams := request.ErrInvalidParams{Context: "DisassociatePhoneNumbersFromVoiceConnectorInput"}
+	if s.E164PhoneNumbers == nil {
+		invalidParams.Add(request.NewErrParamRequired("E164PhoneNumbers"))
+	}
 	if s.VoiceConnectorId == nil {
 		invalidParams.Add(request.NewErrParamRequired("VoiceConnectorId"))
 	}
@@ -16454,6 +16911,52 @@ func (s DisassociateSigninDelegateGroupsFromAccountOutput) GoString() string {
 	return s.String()
 }
 
+// The emergency calling configuration details associated with an Amazon Chime
+// Voice Connector.
+type EmergencyCallingConfiguration struct {
+	_ struct{} `type:"structure"`
+
+	// The Dialed Number Identification Service (DNIS) emergency calling configuration
+	// details.
+	DNIS []*DNISEmergencyCallingConfiguration `type:"list"`
+}
+
+// String returns the string representation
+func (s EmergencyCallingConfiguration) String() string {
+	return awsutil.Prettify(s)
+}
+
+// GoString returns the string representation
+func (s EmergencyCallingConfiguration) GoString() string {
+	return s.String()
+}
+
+// Validate inspects the fields of the type to determine if they are valid.
+func (s *EmergencyCallingConfiguration) Validate() error {
+	invalidParams := request.ErrInvalidParams{Context: "EmergencyCallingConfiguration"}
+	if s.DNIS != nil {
+		for i, v := range s.DNIS {
+			if v == nil {
+				continue
+			}
+			if err := v.Validate(); err != nil {
+				invalidParams.AddNested(fmt.Sprintf("%s[%v]", "DNIS", i), err.(request.ErrInvalidParams))
+			}
+		}
+	}
+
+	if invalidParams.Len() > 0 {
+		return invalidParams
+	}
+	return nil
+}
+
+// SetDNIS sets the DNIS field's value.
+func (s *EmergencyCallingConfiguration) SetDNIS(v []*DNISEmergencyCallingConfiguration) *EmergencyCallingConfiguration {
+	s.DNIS = v
+	return s
+}
+
 // The configuration that allows a bot to receive outgoing events. Can be either
 // an HTTPS endpoint or a Lambda function ARN.
 type EventsConfiguration struct {
@@ -17662,6 +18165,70 @@ func (s *GetUserSettingsOutput) SetUserSettings(v *UserSettings) *GetUserSetting
 	return s
 }
 
+type GetVoiceConnectorEmergencyCallingConfigurationInput struct {
+	_ struct{} `type:"structure"`
+
+	// The Amazon Chime Voice Connector ID.
+	//
+	// VoiceConnectorId is a required field
+	VoiceConnectorId *string `location:"uri" locationName:"voiceConnectorId" type:"string" required:"true"`
+}
+
+// String returns the string representation
+func (s GetVoiceConnectorEmergencyCallingConfigurationInput) String() string {
+	return awsutil.Prettify(s)
+}
+
+// GoString returns the string representation
+func (s GetVoiceConnectorEmergencyCallingConfigurationInput) GoString() string {
+	return s.String()
+}
+
+// Validate inspects the fields of the type to determine if they are valid.
+func (s *GetVoiceConnectorEmergencyCallingConfigurationInput) Validate() error {
+	invalidParams := request.ErrInvalidParams{Context: "GetVoiceConnectorEmergencyCallingConfigurationInput"}
+	if s.VoiceConnectorId == nil {
+		invalidParams.Add(request.NewErrParamRequired("VoiceConnectorId"))
+	}
+	if s.VoiceConnectorId != nil && len(*s.VoiceConnectorId) < 1 {
+		invalidParams.Add(request.NewErrParamMinLen("VoiceConnectorId", 1))
+	}
+
+	if invalidParams.Len() > 0 {
+		return invalidParams
+	}
+	return nil
+}
+
+// SetVoiceConnectorId sets the VoiceConnectorId field's value.
+func (s *GetVoiceConnectorEmergencyCallingConfigurationInput) SetVoiceConnectorId(v string) *GetVoiceConnectorEmergencyCallingConfigurationInput {
+	s.VoiceConnectorId = &v
+	return s
+}
+
+type GetVoiceConnectorEmergencyCallingConfigurationOutput struct {
+	_ struct{} `type:"structure"`
+
+	// The emergency calling configuration details.
+	EmergencyCallingConfiguration *EmergencyCallingConfiguration `type:"structure"`
+}
+
+// String returns the string representation
+func (s GetVoiceConnectorEmergencyCallingConfigurationOutput) String() string {
+	return awsutil.Prettify(s)
+}
+
+// GoString returns the string representation
+func (s GetVoiceConnectorEmergencyCallingConfigurationOutput) GoString() string {
+	return s.String()
+}
+
+// SetEmergencyCallingConfiguration sets the EmergencyCallingConfiguration field's value.
+func (s *GetVoiceConnectorEmergencyCallingConfigurationOutput) SetEmergencyCallingConfiguration(v *EmergencyCallingConfiguration) *GetVoiceConnectorEmergencyCallingConfigurationOutput {
+	s.EmergencyCallingConfiguration = v
+	return s
+}
+
 type GetVoiceConnectorGroupInput struct {
 	_ struct{} `type:"structure"`
 
@@ -21133,6 +21700,89 @@ func (s *PutRetentionSettingsOutput) SetRetentionSettings(v *RetentionSettings)
 	return s
 }
 
+type PutVoiceConnectorEmergencyCallingConfigurationInput struct {
+	_ struct{} `type:"structure"`
+
+	// The emergency calling configuration details.
+	//
+	// EmergencyCallingConfiguration is a required field
+	EmergencyCallingConfiguration *EmergencyCallingConfiguration `type:"structure" required:"true"`
+
+	// The Amazon Chime Voice Connector ID.
+	//
+	// VoiceConnectorId is a required field
+	VoiceConnectorId *string `location:"uri" locationName:"voiceConnectorId" type:"string" required:"true"`
+}
+
+// String returns the string representation
+func (s PutVoiceConnectorEmergencyCallingConfigurationInput) String() string {
+	return awsutil.Prettify(s)
+}
+
+// GoString returns the string representation
+func (s PutVoiceConnectorEmergencyCallingConfigurationInput) GoString() string {
+	return s.String()
+}
+
+// Validate inspects the fields of the type to determine if they are valid.
+func (s *PutVoiceConnectorEmergencyCallingConfigurationInput) Validate() error {
+	invalidParams := request.ErrInvalidParams{Context: "PutVoiceConnectorEmergencyCallingConfigurationInput"}
+	if s.EmergencyCallingConfiguration == nil {
+		invalidParams.Add(request.NewErrParamRequired("EmergencyCallingConfiguration"))
+	}
+	if s.VoiceConnectorId == nil {
+		invalidParams.Add(request.NewErrParamRequired("VoiceConnectorId"))
+	}
+	if s.VoiceConnectorId != nil && len(*s.VoiceConnectorId) < 1 {
+		invalidParams.Add(request.NewErrParamMinLen("VoiceConnectorId", 1))
+	}
+	if s.EmergencyCallingConfiguration != nil {
+		if err := s.EmergencyCallingConfiguration.Validate(); err != nil {
+			invalidParams.AddNested("EmergencyCallingConfiguration", err.(request.ErrInvalidParams))
+		}
+	}
+
+	if invalidParams.Len() > 0 {
+		return invalidParams
+	}
+	return nil
+}
+
+// SetEmergencyCallingConfiguration sets the EmergencyCallingConfiguration field's value.
+func (s *PutVoiceConnectorEmergencyCallingConfigurationInput) SetEmergencyCallingConfiguration(v *EmergencyCallingConfiguration) *PutVoiceConnectorEmergencyCallingConfigurationInput {
+	s.EmergencyCallingConfiguration = v
+	return s
+}
+
+// SetVoiceConnectorId sets the VoiceConnectorId field's value.
+func (s *PutVoiceConnectorEmergencyCallingConfigurationInput) SetVoiceConnectorId(v string) *PutVoiceConnectorEmergencyCallingConfigurationInput {
+	s.VoiceConnectorId = &v
+	return s
+}
+
+type PutVoiceConnectorEmergencyCallingConfigurationOutput struct {
+	_ struct{} `type:"structure"`
+
+	// The emergency calling configuration details.
+	EmergencyCallingConfiguration *EmergencyCallingConfiguration `type:"structure"`
+}
+
+// String returns the string representation
+func (s PutVoiceConnectorEmergencyCallingConfigurationOutput) String() string {
+	return awsutil.Prettify(s)
+}
+
+// GoString returns the string representation
+func (s PutVoiceConnectorEmergencyCallingConfigurationOutput) GoString() string {
+	return s.String()
+}
+
+// SetEmergencyCallingConfiguration sets the EmergencyCallingConfiguration field's value.
+func (s *PutVoiceConnectorEmergencyCallingConfigurationOutput) SetEmergencyCallingConfiguration(v *EmergencyCallingConfiguration) *PutVoiceConnectorEmergencyCallingConfigurationOutput {
+	s.EmergencyCallingConfiguration = v
+	return s
+}
+
 type PutVoiceConnectorLoggingConfigurationInput struct {
 	_ struct{} `type:"structure"`
 
diff --git a/service/chime/chimeiface/interface.go b/service/chime/chimeiface/interface.go
index d0aa492d40..392f1efed0 100644
--- a/service/chime/chimeiface/interface.go
+++ b/service/chime/chimeiface/interface.go
@@ -188,6 +188,10 @@ type ChimeAPI interface {
 	DeleteVoiceConnectorWithContext(aws.Context, *chime.DeleteVoiceConnectorInput, ...request.Option) (*chime.DeleteVoiceConnectorOutput, error)
 	DeleteVoiceConnectorRequest(*chime.DeleteVoiceConnectorInput) (*request.Request, *chime.DeleteVoiceConnectorOutput)
 
+	DeleteVoiceConnectorEmergencyCallingConfiguration(*chime.DeleteVoiceConnectorEmergencyCallingConfigurationInput) (*chime.DeleteVoiceConnectorEmergencyCallingConfigurationOutput, error)
+	DeleteVoiceConnectorEmergencyCallingConfigurationWithContext(aws.Context, *chime.DeleteVoiceConnectorEmergencyCallingConfigurationInput, ...request.Option) (*chime.DeleteVoiceConnectorEmergencyCallingConfigurationOutput, error)
+	DeleteVoiceConnectorEmergencyCallingConfigurationRequest(*chime.DeleteVoiceConnectorEmergencyCallingConfigurationInput) (*request.Request, *chime.DeleteVoiceConnectorEmergencyCallingConfigurationOutput)
+
 	DeleteVoiceConnectorGroup(*chime.DeleteVoiceConnectorGroupInput) (*chime.DeleteVoiceConnectorGroupOutput, error)
 	DeleteVoiceConnectorGroupWithContext(aws.Context, *chime.DeleteVoiceConnectorGroupInput, ...request.Option) (*chime.DeleteVoiceConnectorGroupOutput, error)
 	DeleteVoiceConnectorGroupRequest(*chime.DeleteVoiceConnectorGroupInput) (*request.Request, *chime.DeleteVoiceConnectorGroupOutput)
@@ -292,6 +296,10 @@ type ChimeAPI interface {
 	GetVoiceConnectorWithContext(aws.Context, *chime.GetVoiceConnectorInput, ...request.Option) (*chime.GetVoiceConnectorOutput, error)
 	GetVoiceConnectorRequest(*chime.GetVoiceConnectorInput) (*request.Request, *chime.GetVoiceConnectorOutput)
 
+	GetVoiceConnectorEmergencyCallingConfiguration(*chime.GetVoiceConnectorEmergencyCallingConfigurationInput) (*chime.GetVoiceConnectorEmergencyCallingConfigurationOutput, error)
+	GetVoiceConnectorEmergencyCallingConfigurationWithContext(aws.Context, *chime.GetVoiceConnectorEmergencyCallingConfigurationInput, ...request.Option) (*chime.GetVoiceConnectorEmergencyCallingConfigurationOutput, error)
+	GetVoiceConnectorEmergencyCallingConfigurationRequest(*chime.GetVoiceConnectorEmergencyCallingConfigurationInput) (*request.Request, *chime.GetVoiceConnectorEmergencyCallingConfigurationOutput)
+
 	GetVoiceConnectorGroup(*chime.GetVoiceConnectorGroupInput) (*chime.GetVoiceConnectorGroupOutput, error)
 	GetVoiceConnectorGroupWithContext(aws.Context, *chime.GetVoiceConnectorGroupInput, ...request.Option) (*chime.GetVoiceConnectorGroupOutput, error)
 	GetVoiceConnectorGroupRequest(*chime.GetVoiceConnectorGroupInput) (*request.Request, *chime.GetVoiceConnectorGroupOutput)
@@ -436,6 +444,10 @@ type ChimeAPI interface {
 	PutRetentionSettingsWithContext(aws.Context, *chime.PutRetentionSettingsInput, ...request.Option) (*chime.PutRetentionSettingsOutput, error)
 	PutRetentionSettingsRequest(*chime.PutRetentionSettingsInput) (*request.Request, *chime.PutRetentionSettingsOutput)
 
+	PutVoiceConnectorEmergencyCallingConfiguration(*chime.PutVoiceConnectorEmergencyCallingConfigurationInput) (*chime.PutVoiceConnectorEmergencyCallingConfigurationOutput, error)
+	PutVoiceConnectorEmergencyCallingConfigurationWithContext(aws.Context, *chime.PutVoiceConnectorEmergencyCallingConfigurationInput, ...request.Option) (*chime.PutVoiceConnectorEmergencyCallingConfigurationOutput, error)
+	PutVoiceConnectorEmergencyCallingConfigurationRequest(*chime.PutVoiceConnectorEmergencyCallingConfigurationInput) (*request.Request, *chime.PutVoiceConnectorEmergencyCallingConfigurationOutput)
+
 	PutVoiceConnectorLoggingConfiguration(*chime.PutVoiceConnectorLoggingConfigurationInput) (*chime.PutVoiceConnectorLoggingConfigurationOutput, error)
 	PutVoiceConnectorLoggingConfigurationWithContext(aws.Context, *chime.PutVoiceConnectorLoggingConfigurationInput, ...request.Option) (*chime.PutVoiceConnectorLoggingConfigurationOutput, error)
 	PutVoiceConnectorLoggingConfigurationRequest(*chime.PutVoiceConnectorLoggingConfigurationInput) (*request.Request, *chime.PutVoiceConnectorLoggingConfigurationOutput)
diff --git a/service/codebuild/api.go b/service/codebuild/api.go
index add39aea14..d38ab73b33 100644
--- a/service/codebuild/api.go
+++ b/service/codebuild/api.go
@@ -4322,6 +4322,66 @@ func (s *BuildPhase) SetStartTime(v time.Time) *BuildPhase {
 	return s
 }
 
+// Contains information that defines how the AWS CodeBuild build project reports
+// the build status to the source provider.
+type BuildStatusConfig struct {
+	_ struct{} `type:"structure"`
+
+	// Specifies the context of the build status CodeBuild sends to the source provider.
+	// The usage of this parameter depends on the source provider.
+	//
+	// Bitbucket
+	//
+	// This parameter is used for the name parameter in the Bitbucket commit status.
+	// For more information, see build (https://developer.atlassian.com/bitbucket/api/2/reference/resource/repositories/%7Bworkspace%7D/%7Brepo_slug%7D/commit/%7Bnode%7D/statuses/build)
+	// in the Bitbucket API documentation.
+	//
+	// GitHub/GitHub Enterprise Server
+	//
+	// This parameter is used for the context parameter in the GitHub commit status.
+	// For more information, see Create a commit status (https://developer.github.com/v3/repos/statuses/#create-a-commit-status)
+	// in the GitHub developer guide.
+	Context *string `locationName:"context" type:"string"`
+
+	// Specifies the target url of the build status CodeBuild sends to the source
+	// provider. The usage of this parameter depends on the source provider.
+	//
+	// Bitbucket
+	//
+	// This parameter is used for the url parameter in the Bitbucket commit status.
+	// For more information, see build (https://developer.atlassian.com/bitbucket/api/2/reference/resource/repositories/%7Bworkspace%7D/%7Brepo_slug%7D/commit/%7Bnode%7D/statuses/build)
+	// in the Bitbucket API documentation.
+	//
+	// GitHub/GitHub Enterprise Server
+	//
+	// This parameter is used for the target_url parameter in the GitHub commit
+	// status. For more information, see Create a commit status (https://developer.github.com/v3/repos/statuses/#create-a-commit-status)
+	// in the GitHub developer guide.
+	TargetUrl *string `locationName:"targetUrl" type:"string"`
+}
+
+// String returns the string representation
+func (s BuildStatusConfig) String() string {
+	return awsutil.Prettify(s)
+}
+
+// GoString returns the string representation
+func (s BuildStatusConfig) GoString() string {
+	return s.String()
+}
+
+// SetContext sets the Context field's value.
+func (s *BuildStatusConfig) SetContext(v string) *BuildStatusConfig {
+	s.Context = &v
+	return s
+}
+
+// SetTargetUrl sets the TargetUrl field's value.
+func (s *BuildStatusConfig) SetTargetUrl(v string) *BuildStatusConfig {
+	s.TargetUrl = &v
+	return s
+}
+
 // Information about Amazon CloudWatch Logs for a build project.
 type CloudWatchLogsConfig struct {
 	_ struct{} `type:"structure"`
@@ -8124,6 +8184,11 @@ type ProjectSource struct {
 	// not get or set this information directly.
 	Auth *SourceAuth `locationName:"auth" type:"structure"`
 
+	// Contains information that defines how the build project reports the build
+	// status to the source provider. This option is only used when the source provider
+	// is GITHUB, GITHUB_ENTERPRISE, or BITBUCKET.
+	BuildStatusConfig *BuildStatusConfig `locationName:"buildStatusConfig" type:"structure"`
+
 	// The buildspec file declaration to use for the builds in this build project.
 	//
 	// If this value is set, it can be either an inline buildspec definition, the
@@ -8210,9 +8275,10 @@ type ProjectSource struct {
 	//    * CODEPIPELINE: The source code settings are specified in the source action
 	//    of a pipeline in AWS CodePipeline.
 	//
-	//    * GITHUB: The source code is in a GitHub repository.
+	//    * GITHUB: The source code is in a GitHub or GitHub Enterprise Cloud repository.
 	//
-	//    * GITHUB_ENTERPRISE: The source code is in a GitHub Enterprise repository.
+	//    * GITHUB_ENTERPRISE: The source code is in a GitHub Enterprise Server
+	//    repository.
 	//
 	//    * NO_SOURCE: The project does not have input source code.
 	//
@@ -8262,6 +8328,12 @@ func (s *ProjectSource) SetAuth(v *SourceAuth) *ProjectSource {
 	return s
 }
 
+// SetBuildStatusConfig sets the BuildStatusConfig field's value.
+func (s *ProjectSource) SetBuildStatusConfig(v *BuildStatusConfig) *ProjectSource {
+	s.BuildStatusConfig = v
+	return s
+}
+
 // SetBuildspec sets the Buildspec field's value.
 func (s *ProjectSource) SetBuildspec(v string) *ProjectSource {
 	s.Buildspec = &v
@@ -9189,6 +9261,11 @@ type StartBuildInput struct {
 	// ones already defined in the build project.
 	ArtifactsOverride *ProjectArtifacts `locationName:"artifactsOverride" type:"structure"`
 
+	// Contains information that defines how the build project reports the build
+	// status to the source provider. This option is only used when the source provider
+	// is GITHUB, GITHUB_ENTERPRISE, or BITBUCKET.
+	BuildStatusConfigOverride *BuildStatusConfig `locationName:"buildStatusConfigOverride" type:"structure"`
+
 	// A buildspec file declaration that overrides, for this build only, the latest
 	// one already defined in the build project.
 	//
@@ -9243,7 +9320,7 @@ type StartBuildInput struct {
 
 	// A unique, case sensitive identifier you provide to ensure the idempotency
 	// of the StartBuild request. The token is included in the StartBuild request
-	// and is valid for 12 hours. If you repeat the StartBuild request with the
+	// and is valid for 5 minutes. If you repeat the StartBuild request with the
 	// same token, but change a parameter, AWS CodeBuild returns a parameter mismatch
 	// error.
 	IdempotencyToken *string `locationName:"idempotencyToken" type:"string"`
@@ -9475,6 +9552,12 @@ func (s *StartBuildInput) SetArtifactsOverride(v *ProjectArtifacts) *StartBuildI
 	return s
 }
 
+// SetBuildStatusConfigOverride sets the BuildStatusConfigOverride field's value.
+func (s *StartBuildInput) SetBuildStatusConfigOverride(v *BuildStatusConfig) *StartBuildInput {
+	s.BuildStatusConfigOverride = v
+	return s
+}
+
 // SetBuildspecOverride sets the BuildspecOverride field's value.
 func (s *StartBuildInput) SetBuildspecOverride(v string) *StartBuildInput {
 	s.BuildspecOverride = &v
@@ -10667,8 +10750,8 @@ type WebhookFilter struct {
 	// Pattern is a required field
 	Pattern *string `locationName:"pattern" type:"string" required:"true"`
 
-	// The type of webhook filter. There are five webhook filter types: EVENT, ACTOR_ACCOUNT_ID,
-	// HEAD_REF, BASE_REF, and FILE_PATH.
+	// The type of webhook filter. There are six webhook filter types: EVENT, ACTOR_ACCOUNT_ID,
+	// HEAD_REF, BASE_REF, FILE_PATH, and COMMIT_MESSAGE.
 	//
 	// EVENT
 	//
@@ -10705,7 +10788,18 @@ type WebhookFilter struct {
 	// A webhook triggers a build when the path of a changed file matches the regular
 	// expression pattern.
 	//
-	// Works with GitHub and GitHub Enterprise push events only.
+	// Works with GitHub and Bitbucket events push and pull requests events. Also
+	// works with GitHub Enterprise push events, but does not work with GitHub Enterprise
+	// pull request events.
+	//
+	// COMMIT_MESSAGE
+	//
+	// A webhook triggers a build when the head commit message matches the regular
+	// expression pattern.
+	//
+	// Works with GitHub and Bitbucket events push and pull requests events. Also
+	// works with GitHub Enterprise push events, but does not work with GitHub Enterprise
+	// pull request events.
 	//
 	// Type is a required field
 	Type *string `locationName:"type" type:"string" required:"true" enum:"WebhookFilterType"`
diff --git a/service/imagebuilder/api.go b/service/imagebuilder/api.go
index 9241f58c9a..349ae50b8a 100644
--- a/service/imagebuilder/api.go
+++ b/service/imagebuilder/api.go
@@ -4859,6 +4859,9 @@ type AmiDistributionConfiguration struct {
 	// The description of the distribution configuration.
 	Description *string `locationName:"description" min:"1" type:"string"`
 
+	// The KMS key identifier used to encrypt the distributed image.
+	KmsKeyId *string `locationName:"kmsKeyId" min:"1" type:"string"`
+
 	// Launch permissions can be used to configure which AWS accounts can use the
 	// AMI to launch instances.
 	LaunchPermission *LaunchPermissionConfiguration `locationName:"launchPermission" type:"structure"`
@@ -4886,6 +4889,9 @@ func (s *AmiDistributionConfiguration) Validate() error {
 	if s.Description != nil && len(*s.Description) < 1 {
 		invalidParams.Add(request.NewErrParamMinLen("Description", 1))
 	}
+	if s.KmsKeyId != nil && len(*s.KmsKeyId) < 1 {
+		invalidParams.Add(request.NewErrParamMinLen("KmsKeyId", 1))
+	}
 	if s.Name != nil && len(*s.Name) < 1 {
 		invalidParams.Add(request.NewErrParamMinLen("Name", 1))
 	}
@@ -4908,6 +4914,12 @@ func (s *AmiDistributionConfiguration) SetDescription(v string) *AmiDistribution
 	return s
 }
 
+// SetKmsKeyId sets the KmsKeyId field's value.
+func (s *AmiDistributionConfiguration) SetKmsKeyId(v string) *AmiDistributionConfiguration {
+	s.KmsKeyId = &v
+	return s
+}
+
 // SetLaunchPermission sets the LaunchPermission field's value.
 func (s *AmiDistributionConfiguration) SetLaunchPermission(v *LaunchPermissionConfiguration) *AmiDistributionConfiguration {
 	s.LaunchPermission = v
@@ -9877,7 +9889,9 @@ func (s *InvalidVersionNumberException) RequestID() string {
 // Describes the configuration for a launch permission. The launch permission
 // modification request is sent to the EC2 ModifyImageAttribute (https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_ModifyImageAttribute.html)
 // API on behalf of the user for each Region they have selected to distribute
-// the AMI.
+// the AMI. To make an AMI public, set the launch permission authorized accounts
+// to all. See the examples for making an AMI public at EC2 ModifyImageAttribute
+// (https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_ModifyImageAttribute.html).
 type LaunchPermissionConfiguration struct {
 	_ struct{} `type:"structure"`
 
diff --git a/service/rds/api.go b/service/rds/api.go
index c3e53ef8d1..f44e2c21f1 100644
--- a/service/rds/api.go
+++ b/service/rds/api.go
@@ -10634,6 +10634,12 @@ func (c *RDS) ModifyDBInstanceRequest(input *ModifyDBInstanceInput) (req *reques
 //
 //   * ErrCodeBackupPolicyNotFoundFault "BackupPolicyNotFoundFault"
 //
+//   * ErrCodeKMSKeyNotAccessibleFault "KMSKeyNotAccessibleFault"
+//   An error occurred accessing an AWS KMS key.
+//
+//   * ErrCodeInvalidDBClusterStateFault "InvalidDBClusterStateFault"
+//   The requested operation can't be performed while the cluster is in this state.
+//
 // See also, https://docs.aws.amazon.com/goto/WebAPI/rds-2014-10-31/ModifyDBInstance
 func (c *RDS) ModifyDBInstance(input *ModifyDBInstanceInput) (*ModifyDBInstanceOutput, error) {
 	req, out := c.ModifyDBInstanceRequest(input)
diff --git a/service/rds/examples_test.go b/service/rds/examples_test.go
index a62c24eb19..2480294f32 100644
--- a/service/rds/examples_test.go
+++ b/service/rds/examples_test.go
@@ -2334,6 +2334,10 @@ func ExampleRDS_ModifyDBInstance_shared00() {
 				fmt.Println(rds.ErrCodeDomainNotFoundFault, aerr.Error())
 			case rds.ErrCodeBackupPolicyNotFoundFault:
 				fmt.Println(rds.ErrCodeBackupPolicyNotFoundFault, aerr.Error())
+			case rds.ErrCodeKMSKeyNotAccessibleFault:
+				fmt.Println(rds.ErrCodeKMSKeyNotAccessibleFault, aerr.Error())
+			case rds.ErrCodeInvalidDBClusterStateFault:
+				fmt.Println(rds.ErrCodeInvalidDBClusterStateFault, aerr.Error())
 			default:
 				fmt.Println(aerr.Error())
 			}
diff --git a/service/securityhub/api.go b/service/securityhub/api.go
index b5119d0d2d..7388b8233a 100644
--- a/service/securityhub/api.go
+++ b/service/securityhub/api.go
@@ -4822,6 +4822,67 @@ func (s *AvailabilityZone) SetZoneName(v string) *AvailabilityZone {
 	return s
 }
 
+// Provides details about an auto scaling group.
+type AwsAutoScalingAutoScalingGroupDetails struct {
+	_ struct{} `type:"structure"`
+
+	// The datetime when the auto scaling group was created.
+	CreatedTime *string `type:"string"`
+
+	// The amount of time, in seconds, that Amazon EC2 Auto Scaling waits before
+	// it checks the health status of an EC2 instance that has come into service.
+	HealthCheckGracePeriod *int64 `type:"integer"`
+
+	// The service to use for the health checks.
+	HealthCheckType *string `type:"string"`
+
+	// The name of the launch configuration.
+	LaunchConfigurationName *string `type:"string"`
+
+	// The list of load balancers associated with the group.
+	LoadBalancerNames []*string `type:"list"`
+}
+
+// String returns the string representation
+func (s AwsAutoScalingAutoScalingGroupDetails) String() string {
+	return awsutil.Prettify(s)
+}
+
+// GoString returns the string representation
+func (s AwsAutoScalingAutoScalingGroupDetails) GoString() string {
+	return s.String()
+}
+
+// SetCreatedTime sets the CreatedTime field's value.
+func (s *AwsAutoScalingAutoScalingGroupDetails) SetCreatedTime(v string) *AwsAutoScalingAutoScalingGroupDetails {
+	s.CreatedTime = &v
+	return s
+}
+
+// SetHealthCheckGracePeriod sets the HealthCheckGracePeriod field's value.
+func (s *AwsAutoScalingAutoScalingGroupDetails) SetHealthCheckGracePeriod(v int64) *AwsAutoScalingAutoScalingGroupDetails {
+	s.HealthCheckGracePeriod = &v
+	return s
+}
+
+// SetHealthCheckType sets the HealthCheckType field's value.
+func (s *AwsAutoScalingAutoScalingGroupDetails) SetHealthCheckType(v string) *AwsAutoScalingAutoScalingGroupDetails {
+	s.HealthCheckType = &v
+	return s
+}
+
+// SetLaunchConfigurationName sets the LaunchConfigurationName field's value.
+func (s *AwsAutoScalingAutoScalingGroupDetails) SetLaunchConfigurationName(v string) *AwsAutoScalingAutoScalingGroupDetails {
+	s.LaunchConfigurationName = &v
+	return s
+}
+
+// SetLoadBalancerNames sets the LoadBalancerNames field's value.
+func (s *AwsAutoScalingAutoScalingGroupDetails) SetLoadBalancerNames(v []*string) *AwsAutoScalingAutoScalingGroupDetails {
+	s.LoadBalancerNames = v
+	return s
+}
+
 // A distribution configuration.
 type AwsCloudFrontDistributionDetails struct {
 	_ struct{} `type:"structure"`
@@ -5931,6 +5992,189 @@ func (s *AwsEc2SecurityGroupUserIdGroupPair) SetVpcPeeringConnectionId(v string)
 	return s
 }
 
+// An attachment to an AWS EC2 volume.
+type AwsEc2VolumeAttachment struct {
+	_ struct{} `type:"structure"`
+
+	// The datetime when the attachment initiated.
+	AttachTime *string `type:"string"`
+
+	// Whether the EBS volume is deleted when the EC2 instance is terminated.
+	DeleteOnTermination *bool `type:"boolean"`
+
+	// The identifier of the EC2 instance.
+	InstanceId *string `type:"string"`
+
+	// The attachment state of the volume.
+	Status *string `type:"string"`
+}
+
+// String returns the string representation
+func (s AwsEc2VolumeAttachment) String() string {
+	return awsutil.Prettify(s)
+}
+
+// GoString returns the string representation
+func (s AwsEc2VolumeAttachment) GoString() string {
+	return s.String()
+}
+
+// SetAttachTime sets the AttachTime field's value.
+func (s *AwsEc2VolumeAttachment) SetAttachTime(v string) *AwsEc2VolumeAttachment {
+	s.AttachTime = &v
+	return s
+}
+
+// SetDeleteOnTermination sets the DeleteOnTermination field's value.
+func (s *AwsEc2VolumeAttachment) SetDeleteOnTermination(v bool) *AwsEc2VolumeAttachment {
+	s.DeleteOnTermination = &v
+	return s
+}
+
+// SetInstanceId sets the InstanceId field's value.
+func (s *AwsEc2VolumeAttachment) SetInstanceId(v string) *AwsEc2VolumeAttachment {
+	s.InstanceId = &v
+	return s
+}
+
+// SetStatus sets the Status field's value.
+func (s *AwsEc2VolumeAttachment) SetStatus(v string) *AwsEc2VolumeAttachment {
+	s.Status = &v
+	return s
+}
+
+// Details about an EC2 volume.
+type AwsEc2VolumeDetails struct {
+	_ struct{} `type:"structure"`
+
+	// The volume attachments.
+	Attachments []*AwsEc2VolumeAttachment `type:"list"`
+
+	// The datetime when the volume was created.
+	CreateTime *string `type:"string"`
+
+	// Whether the volume is encrypted.
+	Encrypted *bool `type:"boolean"`
+
+	// The ARN of the AWS Key Management Service (AWS KMS) customer master key (CMK)
+	// that was used to protect the volume encryption key for the volume.
+	KmsKeyId *string `type:"string"`
+
+	// The size of the volume, in GiBs.
+	Size *int64 `type:"integer"`
+
+	// The snapshot from which the volume was created.
+	SnapshotId *string `type:"string"`
+
+	// The volume state.
+	Status *string `type:"string"`
+}
+
+// String returns the string representation
+func (s AwsEc2VolumeDetails) String() string {
+	return awsutil.Prettify(s)
+}
+
+// GoString returns the string representation
+func (s AwsEc2VolumeDetails) GoString() string {
+	return s.String()
+}
+
+// SetAttachments sets the Attachments field's value.
+func (s *AwsEc2VolumeDetails) SetAttachments(v []*AwsEc2VolumeAttachment) *AwsEc2VolumeDetails {
+	s.Attachments = v
+	return s
+}
+
+// SetCreateTime sets the CreateTime field's value.
+func (s *AwsEc2VolumeDetails) SetCreateTime(v string) *AwsEc2VolumeDetails {
+	s.CreateTime = &v
+	return s
+}
+
+// SetEncrypted sets the Encrypted field's value.
+func (s *AwsEc2VolumeDetails) SetEncrypted(v bool) *AwsEc2VolumeDetails {
+	s.Encrypted = &v
+	return s
+}
+
+// SetKmsKeyId sets the KmsKeyId field's value.
+func (s *AwsEc2VolumeDetails) SetKmsKeyId(v string) *AwsEc2VolumeDetails {
+	s.KmsKeyId = &v
+	return s
+}
+
+// SetSize sets the Size field's value.
+func (s *AwsEc2VolumeDetails) SetSize(v int64) *AwsEc2VolumeDetails {
+	s.Size = &v
+	return s
+}
+
+// SetSnapshotId sets the SnapshotId field's value.
+func (s *AwsEc2VolumeDetails) SetSnapshotId(v string) *AwsEc2VolumeDetails {
+	s.SnapshotId = &v
+	return s
+}
+
+// SetStatus sets the Status field's value.
+func (s *AwsEc2VolumeDetails) SetStatus(v string) *AwsEc2VolumeDetails {
+	s.Status = &v
+	return s
+}
+
+// Details about an EC2 VPC.
+type AwsEc2VpcDetails struct {
+	_ struct{} `type:"structure"`
+
+	// Information about the IPv4 CIDR blocks associated with the VPC.
+	CidrBlockAssociationSet []*CidrBlockAssociation `type:"list"`
+
+	// The identifier of the set of Dynamic Host Configuration Protocol (DHCP) options
+	// that are associated with the VPC. If the default options are associated with
+	// the VPC, then this is default.
+	DhcpOptionsId *string `type:"string"`
+
+	// Information about the IPv6 CIDR blocks associated with the VPC.
+	Ipv6CidrBlockAssociationSet []*Ipv6CidrBlockAssociation `type:"list"`
+
+	// The current state of the VPC.
+	State *string `type:"string"`
+}
+
+// String returns the string representation
+func (s AwsEc2VpcDetails) String() string {
+	return awsutil.Prettify(s)
+}
+
+// GoString returns the string representation
+func (s AwsEc2VpcDetails) GoString() string {
+	return s.String()
+}
+
+// SetCidrBlockAssociationSet sets the CidrBlockAssociationSet field's value.
+func (s *AwsEc2VpcDetails) SetCidrBlockAssociationSet(v []*CidrBlockAssociation) *AwsEc2VpcDetails {
+	s.CidrBlockAssociationSet = v
+	return s
+}
+
+// SetDhcpOptionsId sets the DhcpOptionsId field's value.
+func (s *AwsEc2VpcDetails) SetDhcpOptionsId(v string) *AwsEc2VpcDetails {
+	s.DhcpOptionsId = &v
+	return s
+}
+
+// SetIpv6CidrBlockAssociationSet sets the Ipv6CidrBlockAssociationSet field's value.
+func (s *AwsEc2VpcDetails) SetIpv6CidrBlockAssociationSet(v []*Ipv6CidrBlockAssociation) *AwsEc2VpcDetails {
+	s.Ipv6CidrBlockAssociationSet = v
+	return s
+}
+
+// SetState sets the State field's value.
+func (s *AwsEc2VpcDetails) SetState(v string) *AwsEc2VpcDetails {
+	s.State = &v
+	return s
+}
+
 // Information about an Elasticsearch domain.
 type AwsElasticsearchDomainDetails struct {
 	_ struct{} `type:"structure"`
@@ -7640,6 +7884,10 @@ type AwsSecurityFinding struct {
 	// The details of network-related information about a finding.
 	Network *Network `type:"structure"`
 
+	// Provides information about a network path that is relevant to a finding.
+	// Each entry under NetworkPath represents a component of that path.
+	NetworkPath []*NetworkPathComponent `type:"list"`
+
 	// A user-defined note added to a finding.
 	Note *Note `type:"structure"`
 
@@ -7718,6 +7966,9 @@ type AwsSecurityFinding struct {
 	// Indicates the veracity of a finding.
 	VerificationState *string `type:"string" enum:"VerificationState"`
 
+	// Provides a list of vulnerabilities associated with the findings.
+	Vulnerabilities []*Vulnerability `type:"list"`
+
 	// Provides information about the status of the investigation into a finding.
 	Workflow *Workflow `type:"structure"`
 
@@ -7814,6 +8065,16 @@ func (s *AwsSecurityFinding) Validate() error {
 			}
 		}
 	}
+	if s.Vulnerabilities != nil {
+		for i, v := range s.Vulnerabilities {
+			if v == nil {
+				continue
+			}
+			if err := v.Validate(); err != nil {
+				invalidParams.AddNested(fmt.Sprintf("%s[%v]", "Vulnerabilities", i), err.(request.ErrInvalidParams))
+			}
+		}
+	}
 
 	if invalidParams.Len() > 0 {
 		return invalidParams
@@ -7893,6 +8154,12 @@ func (s *AwsSecurityFinding) SetNetwork(v *Network) *AwsSecurityFinding {
 	return s
 }
 
+// SetNetworkPath sets the NetworkPath field's value.
+func (s *AwsSecurityFinding) SetNetworkPath(v []*NetworkPathComponent) *AwsSecurityFinding {
+	s.NetworkPath = v
+	return s
+}
+
 // SetNote sets the Note field's value.
 func (s *AwsSecurityFinding) SetNote(v *Note) *AwsSecurityFinding {
 	s.Note = v
@@ -7995,6 +8262,12 @@ func (s *AwsSecurityFinding) SetVerificationState(v string) *AwsSecurityFinding
 	return s
 }
 
+// SetVulnerabilities sets the Vulnerabilities field's value.
+func (s *AwsSecurityFinding) SetVulnerabilities(v []*Vulnerability) *AwsSecurityFinding {
+	s.Vulnerabilities = v
+	return s
+}
+
 // SetWorkflow sets the Workflow field's value.
 func (s *AwsSecurityFinding) SetWorkflow(v *Workflow) *AwsSecurityFinding {
 	s.Workflow = v
@@ -9661,6 +9934,48 @@ func (s *BatchUpdateFindingsUnprocessedFinding) SetFindingIdentifier(v *AwsSecur
 	return s
 }
 
+// An IPv4 CIDR block association.
+type CidrBlockAssociation struct {
+	_ struct{} `type:"structure"`
+
+	// The association ID for the IPv4 CIDR block.
+	AssociationId *string `type:"string"`
+
+	// The IPv4 CIDR block.
+	CidrBlock *string `type:"string"`
+
+	// Information about the state of the IPv4 CIDR block.
+	CidrBlockState *string `type:"string"`
+}
+
+// String returns the string representation
+func (s CidrBlockAssociation) String() string {
+	return awsutil.Prettify(s)
+}
+
+// GoString returns the string representation
+func (s CidrBlockAssociation) GoString() string {
+	return s.String()
+}
+
+// SetAssociationId sets the AssociationId field's value.
+func (s *CidrBlockAssociation) SetAssociationId(v string) *CidrBlockAssociation {
+	s.AssociationId = &v
+	return s
+}
+
+// SetCidrBlock sets the CidrBlock field's value.
+func (s *CidrBlockAssociation) SetCidrBlock(v string) *CidrBlockAssociation {
+	s.CidrBlock = &v
+	return s
+}
+
+// SetCidrBlockState sets the CidrBlockState field's value.
+func (s *CidrBlockAssociation) SetCidrBlockState(v string) *CidrBlockAssociation {
+	s.CidrBlockState = &v
+	return s
+}
+
 // Contains finding details that are specific to control-based findings. Only
 // returned for findings generated from controls.
 type Compliance struct {
@@ -10025,6 +10340,48 @@ func (s *CreateMembersOutput) SetUnprocessedAccounts(v []*Result) *CreateMembers
 	return s
 }
 
+// CVSS scores from the advisory related to the vulnerability.
+type Cvss struct {
+	_ struct{} `type:"structure"`
+
+	// The base CVSS score.
+	BaseScore *float64 `type:"double"`
+
+	// The base scoring vector for the CVSS score.
+	BaseVector *string `type:"string"`
+
+	// The version of CVSS for the CVSS score.
+	Version *string `type:"string"`
+}
+
+// String returns the string representation
+func (s Cvss) String() string {
+	return awsutil.Prettify(s)
+}
+
+// GoString returns the string representation
+func (s Cvss) GoString() string {
+	return s.String()
+}
+
+// SetBaseScore sets the BaseScore field's value.
+func (s *Cvss) SetBaseScore(v float64) *Cvss {
+	s.BaseScore = &v
+	return s
+}
+
+// SetBaseVector sets the BaseVector field's value.
+func (s *Cvss) SetBaseVector(v string) *Cvss {
+	s.BaseVector = &v
+	return s
+}
+
+// SetVersion sets the Version field's value.
+func (s *Cvss) SetVersion(v string) *Cvss {
+	s.Version = &v
+	return s
+}
+
 // A date filter for querying findings.
 type DateFilter struct {
 	_ struct{} `type:"structure"`
@@ -12089,6 +12446,48 @@ func (s *IpFilter) SetCidr(v string) *IpFilter {
 	return s
 }
 
+// An IPV6 CIDR block association.
+type Ipv6CidrBlockAssociation struct {
+	_ struct{} `type:"structure"`
+
+	// The association ID for the IPv6 CIDR block.
+	AssociationId *string `type:"string"`
+
+	// Information about the state of the CIDR block.
+	CidrBlockState *string `type:"string"`
+
+	// The IPv6 CIDR block.
+	Ipv6CidrBlock *string `type:"string"`
+}
+
+// String returns the string representation
+func (s Ipv6CidrBlockAssociation) String() string {
+	return awsutil.Prettify(s)
+}
+
+// GoString returns the string representation
+func (s Ipv6CidrBlockAssociation) GoString() string {
+	return s.String()
+}
+
+// SetAssociationId sets the AssociationId field's value.
+func (s *Ipv6CidrBlockAssociation) SetAssociationId(v string) *Ipv6CidrBlockAssociation {
+	s.AssociationId = &v
+	return s
+}
+
+// SetCidrBlockState sets the CidrBlockState field's value.
+func (s *Ipv6CidrBlockAssociation) SetCidrBlockState(v string) *Ipv6CidrBlockAssociation {
+	s.CidrBlockState = &v
+	return s
+}
+
+// SetIpv6CidrBlock sets the Ipv6CidrBlock field's value.
+func (s *Ipv6CidrBlockAssociation) SetIpv6CidrBlock(v string) *Ipv6CidrBlockAssociation {
+	s.Ipv6CidrBlock = &v
+	return s
+}
+
 // A keyword filter for querying findings.
 type KeywordFilter struct {
 	_ struct{} `type:"structure"`
@@ -12733,6 +13132,9 @@ type Network struct {
 	// The direction of network traffic associated with a finding.
 	Direction *string `type:"string" enum:"NetworkDirection"`
 
+	// The range of open ports that is present on the network.
+	OpenPortRange *PortRange `type:"structure"`
+
 	// The protocol of network-related information about a finding.
 	Protocol *string `type:"string"`
 
@@ -12793,6 +13195,12 @@ func (s *Network) SetDirection(v string) *Network {
 	return s
 }
 
+// SetOpenPortRange sets the OpenPortRange field's value.
+func (s *Network) SetOpenPortRange(v *PortRange) *Network {
+	s.OpenPortRange = v
+	return s
+}
+
 // SetProtocol sets the Protocol field's value.
 func (s *Network) SetProtocol(v string) *Network {
 	s.Protocol = &v
@@ -12829,6 +13237,135 @@ func (s *Network) SetSourcePort(v int64) *Network {
 	return s
 }
 
+// Details about a network path component that occurs before or after the current
+// component.
+type NetworkHeader struct {
+	_ struct{} `type:"structure"`
+
+	// Information about the destination of the component.
+	Destination *NetworkPathComponentDetails `type:"structure"`
+
+	// The protocol used for the component.
+	Protocol *string `type:"string"`
+
+	// Information about the origin of the component.
+	Source *NetworkPathComponentDetails `type:"structure"`
+}
+
+// String returns the string representation
+func (s NetworkHeader) String() string {
+	return awsutil.Prettify(s)
+}
+
+// GoString returns the string representation
+func (s NetworkHeader) GoString() string {
+	return s.String()
+}
+
+// SetDestination sets the Destination field's value.
+func (s *NetworkHeader) SetDestination(v *NetworkPathComponentDetails) *NetworkHeader {
+	s.Destination = v
+	return s
+}
+
+// SetProtocol sets the Protocol field's value.
+func (s *NetworkHeader) SetProtocol(v string) *NetworkHeader {
+	s.Protocol = &v
+	return s
+}
+
+// SetSource sets the Source field's value.
+func (s *NetworkHeader) SetSource(v *NetworkPathComponentDetails) *NetworkHeader {
+	s.Source = v
+	return s
+}
+
+// Information about a network path component.
+type NetworkPathComponent struct {
+	_ struct{} `type:"structure"`
+
+	// The identifier of a component in the network path.
+	ComponentId *string `type:"string"`
+
+	// The type of component.
+	ComponentType *string `type:"string"`
+
+	// Information about the component that comes after the current component in
+	// the network path.
+	Egress *NetworkHeader `type:"structure"`
+
+	// Information about the component that comes before the current node in the
+	// network path.
+	Ingress *NetworkHeader `type:"structure"`
+}
+
+// String returns the string representation
+func (s NetworkPathComponent) String() string {
+	return awsutil.Prettify(s)
+}
+
+// GoString returns the string representation
+func (s NetworkPathComponent) GoString() string {
+	return s.String()
+}
+
+// SetComponentId sets the ComponentId field's value.
+func (s *NetworkPathComponent) SetComponentId(v string) *NetworkPathComponent {
+	s.ComponentId = &v
+	return s
+}
+
+// SetComponentType sets the ComponentType field's value.
+func (s *NetworkPathComponent) SetComponentType(v string) *NetworkPathComponent {
+	s.ComponentType = &v
+	return s
+}
+
+// SetEgress sets the Egress field's value.
+func (s *NetworkPathComponent) SetEgress(v *NetworkHeader) *NetworkPathComponent {
+	s.Egress = v
+	return s
+}
+
+// SetIngress sets the Ingress field's value.
+func (s *NetworkPathComponent) SetIngress(v *NetworkHeader) *NetworkPathComponent {
+	s.Ingress = v
+	return s
+}
+
+// Information about the destination of the next component in the network path.
+type NetworkPathComponentDetails struct {
+	_ struct{} `type:"structure"`
+
+	// The IP addresses of the destination.
+	Address []*string `type:"list"`
+
+	// A list of port ranges for the destination.
+	PortRanges []*PortRange `type:"list"`
+}
+
+// String returns the string representation
+func (s NetworkPathComponentDetails) String() string {
+	return awsutil.Prettify(s)
+}
+
+// GoString returns the string representation
+func (s NetworkPathComponentDetails) GoString() string {
+	return s.String()
+}
+
+// SetAddress sets the Address field's value.
+func (s *NetworkPathComponentDetails) SetAddress(v []*string) *NetworkPathComponentDetails {
+	s.Address = v
+	return s
+}
+
+// SetPortRanges sets the PortRanges field's value.
+func (s *NetworkPathComponentDetails) SetPortRanges(v []*PortRange) *NetworkPathComponentDetails {
+	s.PortRanges = v
+	return s
+}
+
 // A user-defined note added to a finding.
 type Note struct {
 	_ struct{} `type:"structure"`
@@ -12994,6 +13531,39 @@ func (s *NumberFilter) SetLte(v float64) *NumberFilter {
 	return s
 }
 
+// A range of ports.
+type PortRange struct {
+	_ struct{} `type:"structure"`
+
+	// The first port in the port range.
+	Begin *int64 `type:"integer"`
+
+	// The last port in the port range.
+	End *int64 `type:"integer"`
+}
+
+// String returns the string representation
+func (s PortRange) String() string {
+	return awsutil.Prettify(s)
+}
+
+// GoString returns the string representation
+func (s PortRange) GoString() string {
+	return s.String()
+}
+
+// SetBegin sets the Begin field's value.
+func (s *PortRange) SetBegin(v int64) *PortRange {
+	s.Begin = &v
+	return s
+}
+
+// SetEnd sets the End field's value.
+func (s *PortRange) SetEnd(v int64) *PortRange {
+	s.End = &v
+	return s
+}
+
 // The details of process-related information about a finding.
 type ProcessDetails struct {
 	_ struct{} `type:"structure"`
@@ -13453,6 +14023,9 @@ func (s *ResourceConflictException) RequestID() string {
 type ResourceDetails struct {
 	_ struct{} `type:"structure"`
 
+	// Details for an autoscaling group.
+	AwsAutoScalingAutoScalingGroup *AwsAutoScalingAutoScalingGroupDetails `type:"structure"`
+
 	// Details about a CloudFront distribution.
 	AwsCloudFrontDistribution *AwsCloudFrontDistributionDetails `type:"structure"`
 
@@ -13468,6 +14041,12 @@ type ResourceDetails struct {
 	// Details for an EC2 security group.
 	AwsEc2SecurityGroup *AwsEc2SecurityGroupDetails `type:"structure"`
 
+	// Details for an EC2 volume.
+	AwsEc2Volume *AwsEc2VolumeDetails `type:"structure"`
+
+	// Details for an EC2 VPC.
+	AwsEc2Vpc *AwsEc2VpcDetails `type:"structure"`
+
 	// Details for an Elasticsearch domain.
 	AwsElasticsearchDomain *AwsElasticsearchDomainDetails `type:"structure"`
 
@@ -13548,6 +14127,12 @@ func (s *ResourceDetails) Validate() error {
 	return nil
 }
 
+// SetAwsAutoScalingAutoScalingGroup sets the AwsAutoScalingAutoScalingGroup field's value.
+func (s *ResourceDetails) SetAwsAutoScalingAutoScalingGroup(v *AwsAutoScalingAutoScalingGroupDetails) *ResourceDetails {
+	s.AwsAutoScalingAutoScalingGroup = v
+	return s
+}
+
 // SetAwsCloudFrontDistribution sets the AwsCloudFrontDistribution field's value.
 func (s *ResourceDetails) SetAwsCloudFrontDistribution(v *AwsCloudFrontDistributionDetails) *ResourceDetails {
 	s.AwsCloudFrontDistribution = v
@@ -13578,6 +14163,18 @@ func (s *ResourceDetails) SetAwsEc2SecurityGroup(v *AwsEc2SecurityGroupDetails)
 	return s
 }
 
+// SetAwsEc2Volume sets the AwsEc2Volume field's value.
+func (s *ResourceDetails) SetAwsEc2Volume(v *AwsEc2VolumeDetails) *ResourceDetails {
+	s.AwsEc2Volume = v
+	return s
+}
+
+// SetAwsEc2Vpc sets the AwsEc2Vpc field's value.
+func (s *ResourceDetails) SetAwsEc2Vpc(v *AwsEc2VpcDetails) *ResourceDetails {
+	s.AwsEc2Vpc = v
+	return s
+}
+
 // SetAwsElasticsearchDomain sets the AwsElasticsearchDomain field's value.
 func (s *ResourceDetails) SetAwsElasticsearchDomain(v *AwsElasticsearchDomainDetails) *ResourceDetails {
 	s.AwsElasticsearchDomain = v
@@ -13905,6 +14502,66 @@ func (s *SeverityUpdate) SetProduct(v float64) *SeverityUpdate {
 	return s
 }
 
+// Information about a software package.
+type SoftwarePackage struct {
+	_ struct{} `type:"structure"`
+
+	// The architecture used for the software package.
+	Architecture *string `type:"string"`
+
+	// The epoch of the software package.
+	Epoch *string `type:"string"`
+
+	// The name of the software package.
+	Name *string `type:"string"`
+
+	// The release of the software package.
+	Release *string `type:"string"`
+
+	// The version of the software package.
+	Version *string `type:"string"`
+}
+
+// String returns the string representation
+func (s SoftwarePackage) String() string {
+	return awsutil.Prettify(s)
+}
+
+// GoString returns the string representation
+func (s SoftwarePackage) GoString() string {
+	return s.String()
+}
+
+// SetArchitecture sets the Architecture field's value.
+func (s *SoftwarePackage) SetArchitecture(v string) *SoftwarePackage {
+	s.Architecture = &v
+	return s
+}
+
+// SetEpoch sets the Epoch field's value.
+func (s *SoftwarePackage) SetEpoch(v string) *SoftwarePackage {
+	s.Epoch = &v
+	return s
+}
+
+// SetName sets the Name field's value.
+func (s *SoftwarePackage) SetName(v string) *SoftwarePackage {
+	s.Name = &v
+	return s
+}
+
+// SetRelease sets the Release field's value.
+func (s *SoftwarePackage) SetRelease(v string) *SoftwarePackage {
+	s.Release = &v
+	return s
+}
+
+// SetVersion sets the Version field's value.
+func (s *SoftwarePackage) SetVersion(v string) *SoftwarePackage {
+	s.Version = &v
+	return s
+}
+
 // A collection of finding attributes used to sort findings.
 type SortCriterion struct {
 	_ struct{} `type:"structure"`
@@ -14751,6 +15408,7 @@ type UpdateStandardsControlInput struct {
 	ControlStatus *string `type:"string" enum:"ControlStatus"`
 
 	// A description of the reason why you are disabling a security standard control.
+	// If you are disabling a control, then this is required.
 	DisabledReason *string `type:"string"`
 
 	// The ARN of the security standard control to enable or disable.
@@ -14817,6 +15475,170 @@ func (s UpdateStandardsControlOutput) GoString() string {
 	return s.String()
 }
 
+// A vulnerability associated with a finding.
+type Vulnerability struct {
+	_ struct{} `type:"structure"`
+
+	// CVSS scores from the advisory related to the vulnerability.
+	Cvss []*Cvss `type:"list"`
+
+	// The identifier of the vulnerability.
+	//
+	// Id is a required field
+	Id *string `type:"string" required:"true"`
+
+	// A list of URLs that provide additional information about the vulnerability.
+	ReferenceUrls []*string `type:"list"`
+
+	// List of vulnerabilities that are related to this vulnerability.
+	RelatedVulnerabilities []*string `type:"list"`
+
+	// Information about the vendor that generates the vulnerability report.
+	Vendor *VulnerabilityVendor `type:"structure"`
+
+	// List of software packages that have the vulnerability.
+	VulnerablePackages []*SoftwarePackage `type:"list"`
+}
+
+// String returns the string representation
+func (s Vulnerability) String() string {
+	return awsutil.Prettify(s)
+}
+
+// GoString returns the string representation
+func (s Vulnerability) GoString() string {
+	return s.String()
+}
+
+// Validate inspects the fields of the type to determine if they are valid.
+func (s *Vulnerability) Validate() error {
+	invalidParams := request.ErrInvalidParams{Context: "Vulnerability"}
+	if s.Id == nil {
+		invalidParams.Add(request.NewErrParamRequired("Id"))
+	}
+	if s.Vendor != nil {
+		if err := s.Vendor.Validate(); err != nil {
+			invalidParams.AddNested("Vendor", err.(request.ErrInvalidParams))
+		}
+	}
+
+	if invalidParams.Len() > 0 {
+		return invalidParams
+	}
+	return nil
+}
+
+// SetCvss sets the Cvss field's value.
+func (s *Vulnerability) SetCvss(v []*Cvss) *Vulnerability {
+	s.Cvss = v
+	return s
+}
+
+// SetId sets the Id field's value.
+func (s *Vulnerability) SetId(v string) *Vulnerability {
+	s.Id = &v
+	return s
+}
+
+// SetReferenceUrls sets the ReferenceUrls field's value.
+func (s *Vulnerability) SetReferenceUrls(v []*string) *Vulnerability {
+	s.ReferenceUrls = v
+	return s
+}
+
+// SetRelatedVulnerabilities sets the RelatedVulnerabilities field's value.
+func (s *Vulnerability) SetRelatedVulnerabilities(v []*string) *Vulnerability {
+	s.RelatedVulnerabilities = v
+	return s
+}
+
+// SetVendor sets the Vendor field's value.
+func (s *Vulnerability) SetVendor(v *VulnerabilityVendor) *Vulnerability {
+	s.Vendor = v
+	return s
+}
+
+// SetVulnerablePackages sets the VulnerablePackages field's value.
+func (s *Vulnerability) SetVulnerablePackages(v []*SoftwarePackage) *Vulnerability {
+	s.VulnerablePackages = v
+	return s
+}
+
+// A vendor that generates a vulnerability report.
+type VulnerabilityVendor struct {
+	_ struct{} `type:"structure"`
+
+	// The name of the vendor.
+	//
+	// Name is a required field
+	Name *string `type:"string" required:"true"`
+
+	// The URL of the vulnerability advisory.
+	Url *string `type:"string"`
+
+	// The datetime when the vulnerability advisory was created.
+	VendorCreatedAt *string `type:"string"`
+
+	// The severity that the vendor assigned to the vulnerability.
+	VendorSeverity *string `type:"string"`
+
+	// The datetime when the vulnerability advisory was last updated.
+	VendorUpdatedAt *string `type:"string"`
+}
+
+// String returns the string representation
+func (s VulnerabilityVendor) String() string {
+	return awsutil.Prettify(s)
+}
+
+// GoString returns the string representation
+func (s VulnerabilityVendor) GoString() string {
+	return s.String()
+}
+
+// Validate inspects the fields of the type to determine if they are valid.
+func (s *VulnerabilityVendor) Validate() error {
+	invalidParams := request.ErrInvalidParams{Context: "VulnerabilityVendor"}
+	if s.Name == nil {
+		invalidParams.Add(request.NewErrParamRequired("Name"))
+	}
+
+	if invalidParams.Len() > 0 {
+		return invalidParams
+	}
+	return nil
+}
+
+// SetName sets the Name field's value.
+func (s *VulnerabilityVendor) SetName(v string) *VulnerabilityVendor {
+	s.Name = &v
+	return s
+}
+
+// SetUrl sets the Url field's value.
+func (s *VulnerabilityVendor) SetUrl(v string) *VulnerabilityVendor {
+	s.Url = &v
+	return s
+}
+
+// SetVendorCreatedAt sets the VendorCreatedAt field's value.
+func (s *VulnerabilityVendor) SetVendorCreatedAt(v string) *VulnerabilityVendor {
+	s.VendorCreatedAt = &v
+	return s
+}
+
+// SetVendorSeverity sets the VendorSeverity field's value.
+func (s *VulnerabilityVendor) SetVendorSeverity(v string) *VulnerabilityVendor {
+	s.VendorSeverity = &v
+	return s
+}
+
+// SetVendorUpdatedAt sets the VendorUpdatedAt field's value.
+func (s *VulnerabilityVendor) SetVendorUpdatedAt(v string) *VulnerabilityVendor {
+	s.VendorUpdatedAt = &v
+	return s
+}
+
 // Details about the action that CloudFront or AWS WAF takes when a web request
 // matches the conditions in the rule.
 type WafAction struct {