diff --git a/amazonka-rds.cabal b/amazonka-rds.cabal
--- a/amazonka-rds.cabal
+++ b/amazonka-rds.cabal
@@ -1,5 +1,5 @@
 name:                  amazonka-rds
-version:               0.2.0
+version:               0.2.1
 synopsis:              Amazon Relational Database Service SDK.
 homepage:              https://github.com/brendanhay/amazonka
 license:               OtherLicense
@@ -39,6 +39,7 @@
           Network.AWS.RDS
         , Network.AWS.RDS.AddSourceIdentifierToSubscription
         , Network.AWS.RDS.AddTagsToResource
+        , Network.AWS.RDS.ApplyPendingMaintenanceAction
         , Network.AWS.RDS.AuthorizeDBSecurityGroupIngress
         , Network.AWS.RDS.CopyDBParameterGroup
         , Network.AWS.RDS.CopyDBSnapshot
@@ -73,6 +74,7 @@
         , Network.AWS.RDS.DescribeOptionGroupOptions
         , Network.AWS.RDS.DescribeOptionGroups
         , Network.AWS.RDS.DescribeOrderableDBInstanceOptions
+        , Network.AWS.RDS.DescribePendingMaintenanceActions
         , Network.AWS.RDS.DescribeReservedDBInstances
         , Network.AWS.RDS.DescribeReservedDBInstancesOfferings
         , Network.AWS.RDS.DownloadDBLogFilePortion
@@ -97,5 +99,5 @@
     other-modules:
 
     build-depends:
-          amazonka-core == 0.2.0.*
+          amazonka-core == 0.2.1.*
         , base          >= 4.7     && < 5
diff --git a/gen/Network/AWS/RDS.hs b/gen/Network/AWS/RDS.hs
--- a/gen/Network/AWS/RDS.hs
+++ b/gen/Network/AWS/RDS.hs
@@ -18,6 +18,7 @@
 module Network.AWS.RDS
     ( module Network.AWS.RDS.AddSourceIdentifierToSubscription
     , module Network.AWS.RDS.AddTagsToResource
+    , module Network.AWS.RDS.ApplyPendingMaintenanceAction
     , module Network.AWS.RDS.AuthorizeDBSecurityGroupIngress
     , module Network.AWS.RDS.CopyDBParameterGroup
     , module Network.AWS.RDS.CopyDBSnapshot
@@ -52,6 +53,7 @@
     , module Network.AWS.RDS.DescribeOptionGroupOptions
     , module Network.AWS.RDS.DescribeOptionGroups
     , module Network.AWS.RDS.DescribeOrderableDBInstanceOptions
+    , module Network.AWS.RDS.DescribePendingMaintenanceActions
     , module Network.AWS.RDS.DescribeReservedDBInstances
     , module Network.AWS.RDS.DescribeReservedDBInstancesOfferings
     , module Network.AWS.RDS.DownloadDBLogFilePortion
@@ -76,6 +78,7 @@
 
 import Network.AWS.RDS.AddSourceIdentifierToSubscription
 import Network.AWS.RDS.AddTagsToResource
+import Network.AWS.RDS.ApplyPendingMaintenanceAction
 import Network.AWS.RDS.AuthorizeDBSecurityGroupIngress
 import Network.AWS.RDS.CopyDBParameterGroup
 import Network.AWS.RDS.CopyDBSnapshot
@@ -110,6 +113,7 @@
 import Network.AWS.RDS.DescribeOptionGroupOptions
 import Network.AWS.RDS.DescribeOptionGroups
 import Network.AWS.RDS.DescribeOrderableDBInstanceOptions
+import Network.AWS.RDS.DescribePendingMaintenanceActions
 import Network.AWS.RDS.DescribeReservedDBInstances
 import Network.AWS.RDS.DescribeReservedDBInstancesOfferings
 import Network.AWS.RDS.DownloadDBLogFilePortion
diff --git a/gen/Network/AWS/RDS/ApplyPendingMaintenanceAction.hs b/gen/Network/AWS/RDS/ApplyPendingMaintenanceAction.hs
new file mode 100644
--- /dev/null
+++ b/gen/Network/AWS/RDS/ApplyPendingMaintenanceAction.hs
@@ -0,0 +1,141 @@
+{-# LANGUAGE DataKinds                   #-}
+{-# LANGUAGE DeriveGeneric               #-}
+{-# LANGUAGE FlexibleInstances           #-}
+{-# LANGUAGE GeneralizedNewtypeDeriving  #-}
+{-# LANGUAGE LambdaCase                  #-}
+{-# LANGUAGE NoImplicitPrelude           #-}
+{-# LANGUAGE OverloadedStrings           #-}
+{-# LANGUAGE RecordWildCards             #-}
+{-# LANGUAGE TypeFamilies                #-}
+
+{-# OPTIONS_GHC -fno-warn-unused-imports #-}
+
+-- Module      : Network.AWS.RDS.ApplyPendingMaintenanceAction
+-- Copyright   : (c) 2013-2014 Brendan Hay <brendan.g.hay@gmail.com>
+-- License     : This Source Code Form is subject to the terms of
+--               the Mozilla Public License, v. 2.0.
+--               A copy of the MPL can be found in the LICENSE file or
+--               you can obtain it at http://mozilla.org/MPL/2.0/.
+-- Maintainer  : Brendan Hay <brendan.g.hay@gmail.com>
+-- Stability   : experimental
+-- Portability : non-portable (GHC extensions)
+--
+-- Derived from AWS service descriptions, licensed under Apache 2.0.
+
+-- | Applies a pending maintenance action to a resource.
+--
+-- <http://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_ApplyPendingMaintenanceAction.html>
+module Network.AWS.RDS.ApplyPendingMaintenanceAction
+    (
+    -- * Request
+      ApplyPendingMaintenanceAction
+    -- ** Request constructor
+    , applyPendingMaintenanceAction
+    -- ** Request lenses
+    , apmaApplyAction
+    , apmaOptInType
+    , apmaResourceIdentifier
+
+    -- * Response
+    , ApplyPendingMaintenanceActionResponse
+    -- ** Response constructor
+    , applyPendingMaintenanceActionResponse
+    -- ** Response lenses
+    , apmarResourcePendingMaintenanceActions
+    ) where
+
+import Network.AWS.Prelude
+import Network.AWS.Request.Query
+import Network.AWS.RDS.Types
+import qualified GHC.Exts
+
+data ApplyPendingMaintenanceAction = ApplyPendingMaintenanceAction
+    { _apmaApplyAction        :: Text
+    , _apmaOptInType          :: Text
+    , _apmaResourceIdentifier :: Text
+    } deriving (Eq, Ord, Show)
+
+-- | 'ApplyPendingMaintenanceAction' constructor.
+--
+-- The fields accessible through corresponding lenses are:
+--
+-- * 'apmaApplyAction' @::@ 'Text'
+--
+-- * 'apmaOptInType' @::@ 'Text'
+--
+-- * 'apmaResourceIdentifier' @::@ 'Text'
+--
+applyPendingMaintenanceAction :: Text -- ^ 'apmaResourceIdentifier'
+                              -> Text -- ^ 'apmaApplyAction'
+                              -> Text -- ^ 'apmaOptInType'
+                              -> ApplyPendingMaintenanceAction
+applyPendingMaintenanceAction p1 p2 p3 = ApplyPendingMaintenanceAction
+    { _apmaResourceIdentifier = p1
+    , _apmaApplyAction        = p2
+    , _apmaOptInType          = p3
+    }
+
+-- | The pending maintenance action to apply to this resource.
+apmaApplyAction :: Lens' ApplyPendingMaintenanceAction Text
+apmaApplyAction = lens _apmaApplyAction (\s a -> s { _apmaApplyAction = a })
+
+-- | Specify an opt-in request, or undo an opt-in request. An opt-in request of
+-- type 'immediate' cannot be undone.
+--
+-- Valid values:
+--
+-- 'immediate' - Apply the maintenance action immediately.  'next-maintenance' -
+-- Apply the maintenance action during the next maintenance window for the
+-- resource.  'undo-opt-in' - Cancel any existing 'next-maintenance' opt-in requests.
+--
+apmaOptInType :: Lens' ApplyPendingMaintenanceAction Text
+apmaOptInType = lens _apmaOptInType (\s a -> s { _apmaOptInType = a })
+
+-- | The ARN of the resource (for example, a DB Instance) that the pending
+-- maintenance action applies to.
+apmaResourceIdentifier :: Lens' ApplyPendingMaintenanceAction Text
+apmaResourceIdentifier =
+    lens _apmaResourceIdentifier (\s a -> s { _apmaResourceIdentifier = a })
+
+newtype ApplyPendingMaintenanceActionResponse = ApplyPendingMaintenanceActionResponse
+    { _apmarResourcePendingMaintenanceActions :: Maybe ResourcePendingMaintenanceActions
+    } deriving (Eq, Show)
+
+-- | 'ApplyPendingMaintenanceActionResponse' constructor.
+--
+-- The fields accessible through corresponding lenses are:
+--
+-- * 'apmarResourcePendingMaintenanceActions' @::@ 'Maybe' 'ResourcePendingMaintenanceActions'
+--
+applyPendingMaintenanceActionResponse :: ApplyPendingMaintenanceActionResponse
+applyPendingMaintenanceActionResponse = ApplyPendingMaintenanceActionResponse
+    { _apmarResourcePendingMaintenanceActions = Nothing
+    }
+
+apmarResourcePendingMaintenanceActions :: Lens' ApplyPendingMaintenanceActionResponse (Maybe ResourcePendingMaintenanceActions)
+apmarResourcePendingMaintenanceActions =
+    lens _apmarResourcePendingMaintenanceActions
+        (\s a -> s { _apmarResourcePendingMaintenanceActions = a })
+
+instance ToPath ApplyPendingMaintenanceAction where
+    toPath = const "/"
+
+instance ToQuery ApplyPendingMaintenanceAction where
+    toQuery ApplyPendingMaintenanceAction{..} = mconcat
+        [ "ApplyAction"        =? _apmaApplyAction
+        , "OptInType"          =? _apmaOptInType
+        , "ResourceIdentifier" =? _apmaResourceIdentifier
+        ]
+
+instance ToHeaders ApplyPendingMaintenanceAction
+
+instance AWSRequest ApplyPendingMaintenanceAction where
+    type Sv ApplyPendingMaintenanceAction = RDS
+    type Rs ApplyPendingMaintenanceAction = ApplyPendingMaintenanceActionResponse
+
+    request  = post "ApplyPendingMaintenanceAction"
+    response = xmlResponse
+
+instance FromXML ApplyPendingMaintenanceActionResponse where
+    parseXML = withElement "ApplyPendingMaintenanceActionResult" $ \x -> ApplyPendingMaintenanceActionResponse
+        <$> x .@? "ResourcePendingMaintenanceActions"
diff --git a/gen/Network/AWS/RDS/AuthorizeDBSecurityGroupIngress.hs b/gen/Network/AWS/RDS/AuthorizeDBSecurityGroupIngress.hs
--- a/gen/Network/AWS/RDS/AuthorizeDBSecurityGroupIngress.hs
+++ b/gen/Network/AWS/RDS/AuthorizeDBSecurityGroupIngress.hs
@@ -31,7 +31,10 @@
 -- (EC2SecurityGroupOwnerId and either EC2SecurityGroupName or
 -- EC2SecurityGroupId for non-VPC).
 --
--- For an overview of CIDR ranges, go to the <http://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing Wikipedia Tutorial>.
+-- You cannot authorize ingress from an EC2 security group in one Region to an
+-- Amazon RDS DB instance in another. You cannot authorize ingress from a VPC
+-- security group in one VPC to an Amazon RDS DB instance in another.  For an
+-- overview of CIDR ranges, go to the <http://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing Wikipedia Tutorial>.
 --
 -- <http://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_AuthorizeDBSecurityGroupIngress.html>
 module Network.AWS.RDS.AuthorizeDBSecurityGroupIngress
diff --git a/gen/Network/AWS/RDS/CopyDBParameterGroup.hs b/gen/Network/AWS/RDS/CopyDBParameterGroup.hs
--- a/gen/Network/AWS/RDS/CopyDBParameterGroup.hs
+++ b/gen/Network/AWS/RDS/CopyDBParameterGroup.hs
@@ -22,7 +22,7 @@
 --
 -- Derived from AWS service descriptions, licensed under Apache 2.0.
 
--- | Copies the specified DBParameterGroup.
+-- | Copies the specified DB parameter group.
 --
 -- <http://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_CopyDBParameterGroup.html>
 module Network.AWS.RDS.CopyDBParameterGroup
@@ -80,17 +80,15 @@
     , _cdbpgTags                              = mempty
     }
 
--- | The identifier or ARN for the source DB Parameter Group.
+-- | The identifier or ARN for the source DB parameter group.
 --
 -- Constraints:
 --
--- Must specify a valid DB Parameter Group. If the source DB Parameter Group
--- is in the same region as the copy, specify a valid DB Parameter Group
--- identifier, or a valid ARN. If the source DB Parameter Group is in a
--- different region than the copy, specify a valid DB parameter group ARN.  Example:
--- 'my-db-param-group'
---
--- Example: 'arn:aws:rds:us-west-2:123456789012:pg:special-parameters'
+-- Must specify a valid DB parameter group. If the source DB parameter group
+-- is in the same region as the copy, specify a valid DB parameter group
+-- identifier, for example 'my-db-param-group', or a valid ARN. If the source DB
+-- parameter group is in a different region than the copy, specify a valid DB
+-- parameter group ARN, for example 'arn:aws:rds:us-west-2:123456789012:pg:special-parameters'.
 cdbpgSourceDBParameterGroupIdentifier :: Lens' CopyDBParameterGroup Text
 cdbpgSourceDBParameterGroupIdentifier =
     lens _cdbpgSourceDBParameterGroupIdentifier
@@ -99,13 +97,13 @@
 cdbpgTags :: Lens' CopyDBParameterGroup [Tag]
 cdbpgTags = lens _cdbpgTags (\s a -> s { _cdbpgTags = a }) . _List
 
--- | The description for the copied DB Parameter Group.
+-- | A description for the copied DB parameter group.
 cdbpgTargetDBParameterGroupDescription :: Lens' CopyDBParameterGroup Text
 cdbpgTargetDBParameterGroupDescription =
     lens _cdbpgTargetDBParameterGroupDescription
         (\s a -> s { _cdbpgTargetDBParameterGroupDescription = a })
 
--- | The identifier for the copied DB Parameter Group.
+-- | The identifier for the copied DB parameter group.
 --
 -- Constraints:
 --
diff --git a/gen/Network/AWS/RDS/CopyOptionGroup.hs b/gen/Network/AWS/RDS/CopyOptionGroup.hs
--- a/gen/Network/AWS/RDS/CopyOptionGroup.hs
+++ b/gen/Network/AWS/RDS/CopyOptionGroup.hs
@@ -22,7 +22,7 @@
 --
 -- Derived from AWS service descriptions, licensed under Apache 2.0.
 
--- | Copies the specified Option Group.
+-- | Copies the specified option group.
 --
 -- <http://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_CopyOptionGroup.html>
 module Network.AWS.RDS.CopyOptionGroup
@@ -80,16 +80,13 @@
     , _cog1Tags                         = mempty
     }
 
--- | The identifier or ARN for the source Option Group.
+-- | The identifier or ARN for the source option group.
 --
 -- Constraints:
 --
--- Must specify a valid Option Group. If the source Option Group is in the
--- same region as the copy, specify a valid Option Group identifier, or a valid
--- ARN. If the source Option Group is in a different region than the copy,
--- specify a valid Option group ARN.  Example: 'my-option-group'
---
--- Example: 'arn:aws:rds:us-west-2:123456789012:og:special-options'
+-- Must specify a valid option group. If the source option group is in the
+-- same region as the copy, specify a valid option group identifier, for example 'my-option-group', or a valid ARN. If the source option group is in a different
+-- region than the copy, specify a valid option group ARN, for example 'arn:aws:rds:us-west-2:123456789012:og:special-options'.
 cog1SourceOptionGroupIdentifier :: Lens' CopyOptionGroup Text
 cog1SourceOptionGroupIdentifier =
     lens _cog1SourceOptionGroupIdentifier
@@ -98,13 +95,13 @@
 cog1Tags :: Lens' CopyOptionGroup [Tag]
 cog1Tags = lens _cog1Tags (\s a -> s { _cog1Tags = a }) . _List
 
--- | The description for the copied Option Group.
+-- | The description for the copied option group.
 cog1TargetOptionGroupDescription :: Lens' CopyOptionGroup Text
 cog1TargetOptionGroupDescription =
     lens _cog1TargetOptionGroupDescription
         (\s a -> s { _cog1TargetOptionGroupDescription = a })
 
--- | The identifier for the copied Option Group.
+-- | The identifier for the copied option group.
 --
 -- Constraints:
 --
diff --git a/gen/Network/AWS/RDS/CreateDBInstance.hs b/gen/Network/AWS/RDS/CreateDBInstance.hs
--- a/gen/Network/AWS/RDS/CreateDBInstance.hs
+++ b/gen/Network/AWS/RDS/CreateDBInstance.hs
@@ -46,6 +46,7 @@
     , cdbiEngine
     , cdbiEngineVersion
     , cdbiIops
+    , cdbiKmsKeyId
     , cdbiLicenseModel
     , cdbiMasterUserPassword
     , cdbiMasterUsername
@@ -55,6 +56,7 @@
     , cdbiPreferredBackupWindow
     , cdbiPreferredMaintenanceWindow
     , cdbiPubliclyAccessible
+    , cdbiStorageEncrypted
     , cdbiStorageType
     , cdbiTags
     , cdbiTdeCredentialArn
@@ -89,6 +91,7 @@
     , _cdbiEngine                     :: Text
     , _cdbiEngineVersion              :: Maybe Text
     , _cdbiIops                       :: Maybe Int
+    , _cdbiKmsKeyId                   :: Maybe Text
     , _cdbiLicenseModel               :: Maybe Text
     , _cdbiMasterUserPassword         :: Text
     , _cdbiMasterUsername             :: Text
@@ -98,6 +101,7 @@
     , _cdbiPreferredBackupWindow      :: Maybe Text
     , _cdbiPreferredMaintenanceWindow :: Maybe Text
     , _cdbiPubliclyAccessible         :: Maybe Bool
+    , _cdbiStorageEncrypted           :: Maybe Bool
     , _cdbiStorageType                :: Maybe Text
     , _cdbiTags                       :: List "member" Tag
     , _cdbiTdeCredentialArn           :: Maybe Text
@@ -137,6 +141,8 @@
 --
 -- * 'cdbiIops' @::@ 'Maybe' 'Int'
 --
+-- * 'cdbiKmsKeyId' @::@ 'Maybe' 'Text'
+--
 -- * 'cdbiLicenseModel' @::@ 'Maybe' 'Text'
 --
 -- * 'cdbiMasterUserPassword' @::@ 'Text'
@@ -155,6 +161,8 @@
 --
 -- * 'cdbiPubliclyAccessible' @::@ 'Maybe' 'Bool'
 --
+-- * 'cdbiStorageEncrypted' @::@ 'Maybe' 'Bool'
+--
 -- * 'cdbiStorageType' @::@ 'Maybe' 'Text'
 --
 -- * 'cdbiTags' @::@ ['Tag']
@@ -201,6 +209,8 @@
     , _cdbiStorageType                = Nothing
     , _cdbiTdeCredentialArn           = Nothing
     , _cdbiTdeCredentialPassword      = Nothing
+    , _cdbiStorageEncrypted           = Nothing
+    , _cdbiKmsKeyId                   = Nothing
     }
 
 -- | The amount of storage (in gigabytes) to be initially allocated for the
@@ -223,7 +233,7 @@
 -- SQL Server
 --
 -- Constraints: Must be an integer from 200 to 1024 (Standard Edition and
--- Enterprise Edition) or from 30 to 1024 (Express Edition and Web Edition)
+-- Enterprise Edition) or from 20 to 1024 (Express Edition and Web Edition)
 cdbiAllocatedStorage :: Lens' CreateDBInstance Int
 cdbiAllocatedStorage =
     lens _cdbiAllocatedStorage (\s a -> s { _cdbiAllocatedStorage = a })
@@ -237,7 +247,8 @@
     lens _cdbiAutoMinorVersionUpgrade
         (\s a -> s { _cdbiAutoMinorVersionUpgrade = a })
 
--- | The EC2 Availability Zone that the database instance will be created in.
+-- | The EC2 Availability Zone that the database instance will be created in. For
+-- information on regions and Availability Zones, see <http://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Concepts.RegionsAndAvailabilityZones.html Regions and AvailabilityZones>.
 --
 -- Default: A random, system-chosen Availability Zone in the endpoint's
 -- region.
@@ -260,7 +271,7 @@
 -- Constraints:
 --
 -- Must be a value from 0 to 35 Cannot be set to 0 if the DB instance is a
--- source to read replicas
+-- source to Read Replicas
 cdbiBackupRetentionPeriod :: Lens' CreateDBInstance (Maybe Int)
 cdbiBackupRetentionPeriod =
     lens _cdbiBackupRetentionPeriod
@@ -358,32 +369,43 @@
 -- | The name of the database engine to be used for this instance.
 --
 -- Valid Values: 'MySQL' | 'oracle-se1' | 'oracle-se' | 'oracle-ee' | 'sqlserver-ee' | 'sqlserver-se' | 'sqlserver-ex' | 'sqlserver-web' | 'postgres'
+--
+-- Not every database engine is available for every AWS region.
 cdbiEngine :: Lens' CreateDBInstance Text
 cdbiEngine = lens _cdbiEngine (\s a -> s { _cdbiEngine = a })
 
 -- | The version number of the database engine to use.
 --
+-- The following are the database engines and major and minor versions that
+-- are available with Amazon RDS. Not every database engine is available for
+-- every AWS region.
+--
 -- MySQL
 --
--- Example: '5.1.42'
+-- Version 5.1: ' 5.1.45 | 5.1.49 | 5.1.50 | 5.1.57 | 5.1.61 | 5.1.62 | 5.1.63| 5.1.69 | 5.1.71 | 5.1.73'   Version 5.5: ' 5.5.12 | 5.5.20 | 5.5.23 | 5.5.25a| 5.5.27 | 5.5.31 | 5.5.33 | 5.5.37 | 5.5.38 | 5.5.8'   Version 5.6: ' 5.6.12 |5.6.13 | 5.6.17 | 5.6.19 | 5.6.21'   Oracle Database Enterprise Edition
+-- (oracle-ee)
 --
--- Type: String
+-- Version 11.2: ' 11.2.0.2.v3 | 11.2.0.2.v4 | 11.2.0.2.v5 | 11.2.0.2.v6 |11.2.0.2.v7 | 11.2.0.3.v1 | 11.2.0.4.v1'   Oracle Database Standard Edition
+-- (oracle-se)
 --
--- PostgreSQL
+-- Version 11.2: ' 11.2.0.2.v3 | 11.2.0.2.v4 | 11.2.0.2.v5 | 11.2.0.2.v6 |11.2.0.2.v7 | 11.2.0.3.v1 | 11.2.0.4.v1'   Oracle Database Standard Edition
+-- One (oracle-se1)
 --
--- Example: '9.3'
+-- Version 11.2: ' 11.2.0.2.v3 | 11.2.0.2.v4 | 11.2.0.2.v5 | 11.2.0.2.v6 |11.2.0.2.v7 | 11.2.0.3.v1 | 11.2.0.4.v1'   PostgreSQL
 --
--- Type: String
+-- Version 9.3: ' 9.3.1 | 9.3.2 | 9.3.3'   Microsoft SQL Server Enterprise
+-- Edition (sqlserver-ee)
 --
--- Oracle
+-- Version 10.5: ' 10.50.2789.0.v1'   Version 11.0: ' 11.00.2100.60.v1'   Microsoft SQL Server Express Edition (sqlserver-ex)
 --
--- Example: '11.2.0.2.v2'
 --
--- Type: String
+-- Version 10.5: ' 10.50.2789.0.v1'   Version 11.0: ' 11.00.2100.60.v1'   Microsoft SQL Server Standard Edition (sqlserver-se)
 --
--- SQL Server
 --
--- Example: '10.50.2789.0.v1'
+-- Version 10.5: ' 10.50.2789.0.v1'   Version 11.0: ' 11.00.2100.60.v1'   Microsoft SQL Server Web Edition (sqlserver-web)
+--
+--
+-- Version 10.5: ' 10.50.2789.0.v1'   Version 11.0: ' 11.00.2100.60.v1'
 cdbiEngineVersion :: Lens' CreateDBInstance (Maybe Text)
 cdbiEngineVersion =
     lens _cdbiEngineVersion (\s a -> s { _cdbiEngineVersion = a })
@@ -395,6 +417,20 @@
 cdbiIops :: Lens' CreateDBInstance (Maybe Int)
 cdbiIops = lens _cdbiIops (\s a -> s { _cdbiIops = a })
 
+-- | The KMS key identifier for an encrypted DB instance.
+--
+-- The KMS key identifier is the Amazon Resoure Name (ARN) for the KMS
+-- encryption key. If you are creating a DB instance with the same AWS account
+-- that owns the KMS encryption key used to encrypt the new DB instance, then
+-- you can use the KMS key alias instead of the ARN for the KM encryption key.
+--
+-- If the 'StorageEncrypted' parameter is true, and you do not specify a value
+-- for the 'KmsKeyId' parameter, then Amazon RDS will use your default encryption
+-- key. AWS KMS creates the default encryption key for your AWS account. Your
+-- AWS account has a different default encryption key for each AWS region.
+cdbiKmsKeyId :: Lens' CreateDBInstance (Maybe Text)
+cdbiKmsKeyId = lens _cdbiKmsKeyId (\s a -> s { _cdbiKmsKeyId = a })
+
 -- | License model information for this DB instance.
 --
 -- Valid values: 'license-included' | 'bring-your-own-license' | 'general-public-license'
@@ -494,7 +530,8 @@
 cdbiPort = lens _cdbiPort (\s a -> s { _cdbiPort = a })
 
 -- | The daily time range during which automated backups are created if automated
--- backups are enabled, using the 'BackupRetentionPeriod' parameter.
+-- backups are enabled, using the 'BackupRetentionPeriod' parameter. For more
+-- information, see <http://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Overview.BackingUpAndRestoringAmazonRDSInstances.html DB Instance Backups>.
 --
 -- Default: A 30-minute window selected at random from an 8-hour block of time
 -- per region. See the Amazon RDS User Guide for the time blocks for each region
@@ -509,6 +546,7 @@
         (\s a -> s { _cdbiPreferredBackupWindow = a })
 
 -- | The weekly time range (in UTC) during which system maintenance can occur.
+-- For more information, see <http://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/Concepts.DBMaintenance.html DB Instance Maintenance>.
 --
 -- Format: 'ddd:hh24:mi-ddd:hh24:mi'
 --
@@ -533,20 +571,29 @@
 -- Default: The default behavior varies depending on whether a VPC has been
 -- requested or not. The following list shows the default behavior in each case.
 --
--- Default VPC:true  VPC:false   If no DB subnet group has been specified as
--- part of the request and the PubliclyAccessible value has not been set, the DB
--- instance will be publicly accessible. If a specific DB subnet group has been
--- specified as part of the request and the PubliclyAccessible value has not
--- been set, the DB instance will be private.
+-- Default VPC: true  VPC: false   If no DB subnet group has been specified
+-- as part of the request and the PubliclyAccessible value has not been set, the
+-- DB instance will be publicly accessible. If a specific DB subnet group has
+-- been specified as part of the request and the PubliclyAccessible value has
+-- not been set, the DB instance will be private.
 cdbiPubliclyAccessible :: Lens' CreateDBInstance (Maybe Bool)
 cdbiPubliclyAccessible =
     lens _cdbiPubliclyAccessible (\s a -> s { _cdbiPubliclyAccessible = a })
 
--- | Specifies storage type to be associated with the DB Instance.
+-- | Specifies whether the DB instance is encrypted.
 --
+-- Default: false
+cdbiStorageEncrypted :: Lens' CreateDBInstance (Maybe Bool)
+cdbiStorageEncrypted =
+    lens _cdbiStorageEncrypted (\s a -> s { _cdbiStorageEncrypted = a })
+
+-- | Specifies the storage type to be associated with the DB instance.
+--
 -- Valid values: 'standard | gp2 | io1'
 --
 -- If you specify 'io1', you must also include a value for the 'Iops' parameter.
+--
+-- Default: 'io1' if the 'Iops' parameter is specified; otherwise 'standard'
 cdbiStorageType :: Lens' CreateDBInstance (Maybe Text)
 cdbiStorageType = lens _cdbiStorageType (\s a -> s { _cdbiStorageType = a })
 
@@ -611,6 +658,7 @@
         , "Engine"                     =? _cdbiEngine
         , "EngineVersion"              =? _cdbiEngineVersion
         , "Iops"                       =? _cdbiIops
+        , "KmsKeyId"                   =? _cdbiKmsKeyId
         , "LicenseModel"               =? _cdbiLicenseModel
         , "MasterUserPassword"         =? _cdbiMasterUserPassword
         , "MasterUsername"             =? _cdbiMasterUsername
@@ -620,6 +668,7 @@
         , "PreferredBackupWindow"      =? _cdbiPreferredBackupWindow
         , "PreferredMaintenanceWindow" =? _cdbiPreferredMaintenanceWindow
         , "PubliclyAccessible"         =? _cdbiPubliclyAccessible
+        , "StorageEncrypted"           =? _cdbiStorageEncrypted
         , "StorageType"                =? _cdbiStorageType
         , "Tags"                       =? _cdbiTags
         , "TdeCredentialArn"           =? _cdbiTdeCredentialArn
diff --git a/gen/Network/AWS/RDS/CreateDBInstanceReadReplica.hs b/gen/Network/AWS/RDS/CreateDBInstanceReadReplica.hs
--- a/gen/Network/AWS/RDS/CreateDBInstanceReadReplica.hs
+++ b/gen/Network/AWS/RDS/CreateDBInstanceReadReplica.hs
@@ -22,9 +22,9 @@
 --
 -- Derived from AWS service descriptions, licensed under Apache 2.0.
 
--- | Creates a DB instance that acts as a read replica of a source DB instance.
+-- | Creates a DB instance that acts as a Read Replica of a source DB instance.
 --
--- All read replica DB instances are created as Single-AZ deployments with
+-- All Read Replica DB instances are created as Single-AZ deployments with
 -- backups disabled. All other DB instance attributes (including DB security
 -- groups and DB parameter groups) are inherited from the source DB instance,
 -- except as specified below.
@@ -129,7 +129,7 @@
     }
 
 -- | Indicates that minor engine upgrades will be applied automatically to the
--- read replica during the maintenance window.
+-- Read Replica during the maintenance window.
 --
 -- Default: Inherits from the source DB instance
 cdbirrAutoMinorVersionUpgrade :: Lens' CreateDBInstanceReadReplica (Maybe Bool)
@@ -137,7 +137,7 @@
     lens _cdbirrAutoMinorVersionUpgrade
         (\s a -> s { _cdbirrAutoMinorVersionUpgrade = a })
 
--- | The Amazon EC2 Availability Zone that the read replica will be created in.
+-- | The Amazon EC2 Availability Zone that the Read Replica will be created in.
 --
 -- Default: A random, system-chosen Availability Zone in the endpoint's
 -- region.
@@ -147,7 +147,7 @@
 cdbirrAvailabilityZone =
     lens _cdbirrAvailabilityZone (\s a -> s { _cdbirrAvailabilityZone = a })
 
--- | The compute and memory capacity of the read replica.
+-- | The compute and memory capacity of the Read Replica.
 --
 -- Valid Values: 'db.m1.small | db.m1.medium | db.m1.large | db.m1.xlarge |db.m2.xlarge |db.m2.2xlarge | db.m2.4xlarge | db.m3.medium | db.m3.large |db.m3.xlarge | db.m3.2xlarge | db.r3.large | db.r3.xlarge | db.r3.2xlarge |db.r3.4xlarge | db.r3.8xlarge | db.t2.micro | db.t2.small | db.t2.medium'
 --
@@ -156,7 +156,7 @@
 cdbirrDBInstanceClass =
     lens _cdbirrDBInstanceClass (\s a -> s { _cdbirrDBInstanceClass = a })
 
--- | The DB instance identifier of the read replica. This is the unique key that
+-- | The DB instance identifier of the Read Replica. This is the unique key that
 -- identifies a DB instance. This parameter is stored as a lowercase string.
 cdbirrDBInstanceIdentifier :: Lens' CreateDBInstanceReadReplica Text
 cdbirrDBInstanceIdentifier =
@@ -171,10 +171,10 @@
 --
 -- Can only be specified if the source DB instance identifier specifies a DB
 -- instance in another region. The specified DB subnet group must be in the same
--- region in which the operation is running.  All read replicas in one region
+-- region in which the operation is running.  All Read Replicas in one region
 -- that are created from the same source DB instance must either:  Specify DB
--- subnet groups from the same VPC. All these read replicas will be created in
--- the same VPC. Not specify a DB subnet group. All these read replicas will be
+-- subnet groups from the same VPC. All these Read Replicas will be created in
+-- the same VPC. Not specify a DB subnet group. All these Read Replicas will be
 -- created outside of any VPC.
 cdbirrDBSubnetGroupName :: Lens' CreateDBInstanceReadReplica (Maybe Text)
 cdbirrDBSubnetGroupName =
@@ -217,28 +217,32 @@
     lens _cdbirrPubliclyAccessible
         (\s a -> s { _cdbirrPubliclyAccessible = a })
 
--- | The identifier of the DB instance that will act as the source for the read
--- replica. Each DB instance can have up to five read replicas.
+-- | The identifier of the DB instance that will act as the source for the Read
+-- Replica. Each DB instance can have up to five Read Replicas.
 --
 -- Constraints:
 --
 -- Must be the identifier of an existing DB instance. Can specify a DB
--- instance that is a read replica only if the source is running MySQL 5.6. The
--- specified DB instance must have automatic backups enabled, its backup
--- retention period must be greater than 0. If the source DB instance is in the
--- same region as the read replica, specify a valid DB instance identifier. If
--- the source DB instance is in a different region than the read replica,
--- specify a valid DB instance ARN. For more information, go to <http://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_Tagging.html#USER_Tagging.ARN  Constructing aAmazon RDS Amazon Resource Name (ARN)>.
+-- instance that is a MySQL Read Replica only if the source is running MySQL 5.6.
+-- Can specify a DB instance that is a PostgreSQL Read Replica only if the
+-- source is running PostgreSQL 9.3.5. The specified DB instance must have
+-- automatic backups enabled, its backup retention period must be greater than 0.
+-- If the source DB instance is in the same region as the Read Replica, specify
+-- a valid DB instance identifier. If the source DB instance is in a different
+-- region than the Read Replica, specify a valid DB instance ARN. For more
+-- information, go to <http://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_Tagging.html#USER_Tagging.ARN  Constructing a Amazon RDS Amazon Resource Name (ARN)>.
 cdbirrSourceDBInstanceIdentifier :: Lens' CreateDBInstanceReadReplica Text
 cdbirrSourceDBInstanceIdentifier =
     lens _cdbirrSourceDBInstanceIdentifier
         (\s a -> s { _cdbirrSourceDBInstanceIdentifier = a })
 
--- | Specifies storage type to be associated with the DB Instance read replica.
+-- | Specifies the storage type to be associated with the Read Replica.
 --
 -- Valid values: 'standard | gp2 | io1'
 --
 -- If you specify 'io1', you must also include a value for the 'Iops' parameter.
+--
+-- Default: 'io1' if the 'Iops' parameter is specified; otherwise 'standard'
 cdbirrStorageType :: Lens' CreateDBInstanceReadReplica (Maybe Text)
 cdbirrStorageType =
     lens _cdbirrStorageType (\s a -> s { _cdbirrStorageType = a })
diff --git a/gen/Network/AWS/RDS/CreateDBParameterGroup.hs b/gen/Network/AWS/RDS/CreateDBParameterGroup.hs
--- a/gen/Network/AWS/RDS/CreateDBParameterGroup.hs
+++ b/gen/Network/AWS/RDS/CreateDBParameterGroup.hs
@@ -113,7 +113,7 @@
 -- Constraints:
 --
 -- Must be 1 to 255 alphanumeric characters First character must be a letter Cannot end with a hyphen or contain two consecutive hyphens
---
+-- This value is stored as a lower-case string.
 cdbpg1DBParameterGroupName :: Lens' CreateDBParameterGroup Text
 cdbpg1DBParameterGroupName =
     lens _cdbpg1DBParameterGroupName
diff --git a/gen/Network/AWS/RDS/DeleteDBInstance.hs b/gen/Network/AWS/RDS/DeleteDBInstance.hs
--- a/gen/Network/AWS/RDS/DeleteDBInstance.hs
+++ b/gen/Network/AWS/RDS/DeleteDBInstance.hs
@@ -98,10 +98,11 @@
 -- | The DBSnapshotIdentifier of the new DBSnapshot created when
 -- SkipFinalSnapshot is set to 'false'.
 --
--- Constraints:
+-- Specifying this parameter and also setting the SkipFinalShapshot parameter
+-- to true results in an error.  Constraints:
 --
 -- Must be 1 to 255 alphanumeric characters First character must be a letter Cannot end with a hyphen or contain two consecutive hyphens
--- Cannot be specified when deleting a read replica.
+-- Cannot be specified when deleting a Read Replica.
 ddbiFinalDBSnapshotIdentifier :: Lens' DeleteDBInstance (Maybe Text)
 ddbiFinalDBSnapshotIdentifier =
     lens _ddbiFinalDBSnapshotIdentifier
@@ -111,9 +112,10 @@
 -- deleted. If 'true' is specified, no DBSnapshot is created. If 'false' is
 -- specified, a DB snapshot is created before the DB instance is deleted.
 --
--- Specify 'true' when deleting a read replica.
+-- Specify 'true' when deleting a Read Replica.
 --
--- Default: 'false'
+-- The FinalDBSnapshotIdentifier parameter must be specified if
+-- SkipFinalSnapshot is 'false'. Default: 'false'
 ddbiSkipFinalSnapshot :: Lens' DeleteDBInstance (Maybe Bool)
 ddbiSkipFinalSnapshot =
     lens _ddbiSkipFinalSnapshot (\s a -> s { _ddbiSkipFinalSnapshot = a })
diff --git a/gen/Network/AWS/RDS/DeleteDBParameterGroup.hs b/gen/Network/AWS/RDS/DeleteDBParameterGroup.hs
--- a/gen/Network/AWS/RDS/DeleteDBParameterGroup.hs
+++ b/gen/Network/AWS/RDS/DeleteDBParameterGroup.hs
@@ -25,6 +25,9 @@
 -- | Deletes a specified DBParameterGroup. The DBParameterGroup to be deleted
 -- cannot be associated with any DB instances.
 --
+-- The specified DB parameter group cannot be associated with any DB
+-- instances.
+--
 -- <http://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DeleteDBParameterGroup.html>
 module Network.AWS.RDS.DeleteDBParameterGroup
     (
diff --git a/gen/Network/AWS/RDS/DeleteDBSecurityGroup.hs b/gen/Network/AWS/RDS/DeleteDBSecurityGroup.hs
--- a/gen/Network/AWS/RDS/DeleteDBSecurityGroup.hs
+++ b/gen/Network/AWS/RDS/DeleteDBSecurityGroup.hs
@@ -24,6 +24,8 @@
 
 -- | Deletes a DB security group.
 --
+-- The specified DB security group must not be associated with any DB instances.
+--
 -- <http://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DeleteDBSecurityGroup.html>
 module Network.AWS.RDS.DeleteDBSecurityGroup
     (
@@ -63,7 +65,7 @@
 
 -- | The name of the DB security group to delete.
 --
--- Constraints:
+-- You cannot delete the default DB security group.  Constraints:
 --
 -- Must be 1 to 255 alphanumeric characters First character must be a letter Cannot end with a hyphen or contain two consecutive hyphens
 -- Must not be "Default" May not contain spaces
diff --git a/gen/Network/AWS/RDS/DeleteDBSnapshot.hs b/gen/Network/AWS/RDS/DeleteDBSnapshot.hs
--- a/gen/Network/AWS/RDS/DeleteDBSnapshot.hs
+++ b/gen/Network/AWS/RDS/DeleteDBSnapshot.hs
@@ -25,6 +25,8 @@
 -- | Deletes a DBSnapshot. If the snapshot is being copied, the copy operation is
 -- terminated.
 --
+-- The DBSnapshot must be in the 'available' state to be deleted.
+--
 -- <http://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DeleteDBSnapshot.html>
 module Network.AWS.RDS.DeleteDBSnapshot
     (
diff --git a/gen/Network/AWS/RDS/DeleteDBSubnetGroup.hs b/gen/Network/AWS/RDS/DeleteDBSubnetGroup.hs
--- a/gen/Network/AWS/RDS/DeleteDBSubnetGroup.hs
+++ b/gen/Network/AWS/RDS/DeleteDBSubnetGroup.hs
@@ -24,6 +24,9 @@
 
 -- | Deletes a DB subnet group.
 --
+-- The specified database subnet group must not be associated with any DB
+-- instances.
+--
 -- <http://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DeleteDBSubnetGroup.html>
 module Network.AWS.RDS.DeleteDBSubnetGroup
     (
@@ -63,7 +66,7 @@
 
 -- | The name of the database subnet group to delete.
 --
--- Constraints:
+-- You cannot delete the default subnet group.  Constraints:
 --
 -- Must be 1 to 255 alphanumeric characters First character must be a letter Cannot end with a hyphen or contain two consecutive hyphens
 --
diff --git a/gen/Network/AWS/RDS/DeleteOptionGroup.hs b/gen/Network/AWS/RDS/DeleteOptionGroup.hs
--- a/gen/Network/AWS/RDS/DeleteOptionGroup.hs
+++ b/gen/Network/AWS/RDS/DeleteOptionGroup.hs
@@ -62,6 +62,8 @@
     }
 
 -- | The name of the option group to be deleted.
+--
+-- You cannot delete default option groups.
 dog1OptionGroupName :: Lens' DeleteOptionGroup Text
 dog1OptionGroupName =
     lens _dog1OptionGroupName (\s a -> s { _dog1OptionGroupName = a })
diff --git a/gen/Network/AWS/RDS/DescribePendingMaintenanceActions.hs b/gen/Network/AWS/RDS/DescribePendingMaintenanceActions.hs
new file mode 100644
--- /dev/null
+++ b/gen/Network/AWS/RDS/DescribePendingMaintenanceActions.hs
@@ -0,0 +1,164 @@
+{-# LANGUAGE DataKinds                   #-}
+{-# LANGUAGE DeriveGeneric               #-}
+{-# LANGUAGE FlexibleInstances           #-}
+{-# LANGUAGE GeneralizedNewtypeDeriving  #-}
+{-# LANGUAGE LambdaCase                  #-}
+{-# LANGUAGE NoImplicitPrelude           #-}
+{-# LANGUAGE OverloadedStrings           #-}
+{-# LANGUAGE RecordWildCards             #-}
+{-# LANGUAGE TypeFamilies                #-}
+
+{-# OPTIONS_GHC -fno-warn-unused-imports #-}
+
+-- Module      : Network.AWS.RDS.DescribePendingMaintenanceActions
+-- Copyright   : (c) 2013-2014 Brendan Hay <brendan.g.hay@gmail.com>
+-- License     : This Source Code Form is subject to the terms of
+--               the Mozilla Public License, v. 2.0.
+--               A copy of the MPL can be found in the LICENSE file or
+--               you can obtain it at http://mozilla.org/MPL/2.0/.
+-- Maintainer  : Brendan Hay <brendan.g.hay@gmail.com>
+-- Stability   : experimental
+-- Portability : non-portable (GHC extensions)
+--
+-- Derived from AWS service descriptions, licensed under Apache 2.0.
+
+-- | Returns a list of resources (for example, DB Instances) that have at least
+-- one pending maintenance action.
+--
+-- <http://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DescribePendingMaintenanceActions.html>
+module Network.AWS.RDS.DescribePendingMaintenanceActions
+    (
+    -- * Request
+      DescribePendingMaintenanceActions
+    -- ** Request constructor
+    , describePendingMaintenanceActions
+    -- ** Request lenses
+    , dpmaFilters
+    , dpmaMarker
+    , dpmaMaxRecords
+    , dpmaResourceIdentifier
+
+    -- * Response
+    , DescribePendingMaintenanceActionsResponse
+    -- ** Response constructor
+    , describePendingMaintenanceActionsResponse
+    -- ** Response lenses
+    , dpmarMarker
+    , dpmarPendingMaintenanceActions
+    ) where
+
+import Network.AWS.Prelude
+import Network.AWS.Request.Query
+import Network.AWS.RDS.Types
+import qualified GHC.Exts
+
+data DescribePendingMaintenanceActions = DescribePendingMaintenanceActions
+    { _dpmaFilters            :: List "member" Filter
+    , _dpmaMarker             :: Maybe Text
+    , _dpmaMaxRecords         :: Maybe Int
+    , _dpmaResourceIdentifier :: Maybe Text
+    } deriving (Eq, Show)
+
+-- | 'DescribePendingMaintenanceActions' constructor.
+--
+-- The fields accessible through corresponding lenses are:
+--
+-- * 'dpmaFilters' @::@ ['Filter']
+--
+-- * 'dpmaMarker' @::@ 'Maybe' 'Text'
+--
+-- * 'dpmaMaxRecords' @::@ 'Maybe' 'Int'
+--
+-- * 'dpmaResourceIdentifier' @::@ 'Maybe' 'Text'
+--
+describePendingMaintenanceActions :: DescribePendingMaintenanceActions
+describePendingMaintenanceActions = DescribePendingMaintenanceActions
+    { _dpmaResourceIdentifier = Nothing
+    , _dpmaFilters            = mempty
+    , _dpmaMarker             = Nothing
+    , _dpmaMaxRecords         = Nothing
+    }
+
+-- | Supported filters:
+--
+-- 'db-instance-id' - Accepts DB instance identifiers and DB instance ARNs. The
+-- result list will only include maintenance actions for the specified DB
+-- Instances.
+dpmaFilters :: Lens' DescribePendingMaintenanceActions [Filter]
+dpmaFilters = lens _dpmaFilters (\s a -> s { _dpmaFilters = a }) . _List
+
+-- | An optional pagination token provided by a previous 'DescribePendingMaintenanceActions' request. If this parameter is specified, the response includes only records
+-- beyond the marker, up to a number of records specified by 'MaxRecords' .
+dpmaMarker :: Lens' DescribePendingMaintenanceActions (Maybe Text)
+dpmaMarker = lens _dpmaMarker (\s a -> s { _dpmaMarker = a })
+
+-- | The maximum number of records to include in the response. If more records
+-- exist than the specified 'MaxRecords' value, a pagination token called a marker
+-- is included in the response so that the remaining results can be retrieved.
+--
+-- Default: 100
+--
+-- Constraints: minimum 20, maximum 100
+dpmaMaxRecords :: Lens' DescribePendingMaintenanceActions (Maybe Int)
+dpmaMaxRecords = lens _dpmaMaxRecords (\s a -> s { _dpmaMaxRecords = a })
+
+-- | The ARN of the resource to return pending maintenance actions for.
+dpmaResourceIdentifier :: Lens' DescribePendingMaintenanceActions (Maybe Text)
+dpmaResourceIdentifier =
+    lens _dpmaResourceIdentifier (\s a -> s { _dpmaResourceIdentifier = a })
+
+data DescribePendingMaintenanceActionsResponse = DescribePendingMaintenanceActionsResponse
+    { _dpmarMarker                    :: Maybe Text
+    , _dpmarPendingMaintenanceActions :: List "member" ResourcePendingMaintenanceActions
+    } deriving (Eq, Show)
+
+-- | 'DescribePendingMaintenanceActionsResponse' constructor.
+--
+-- The fields accessible through corresponding lenses are:
+--
+-- * 'dpmarMarker' @::@ 'Maybe' 'Text'
+--
+-- * 'dpmarPendingMaintenanceActions' @::@ ['ResourcePendingMaintenanceActions']
+--
+describePendingMaintenanceActionsResponse :: DescribePendingMaintenanceActionsResponse
+describePendingMaintenanceActionsResponse = DescribePendingMaintenanceActionsResponse
+    { _dpmarPendingMaintenanceActions = mempty
+    , _dpmarMarker                    = Nothing
+    }
+
+-- | An optional pagination token provided by a previous 'DescribePendingMaintenanceActions' request. If this parameter is specified, the response includes only records
+-- beyond the marker, up to a number of records specified by 'MaxRecords' .
+dpmarMarker :: Lens' DescribePendingMaintenanceActionsResponse (Maybe Text)
+dpmarMarker = lens _dpmarMarker (\s a -> s { _dpmarMarker = a })
+
+-- | Provides a list of the pending maintenance actions for the resource.
+dpmarPendingMaintenanceActions :: Lens' DescribePendingMaintenanceActionsResponse [ResourcePendingMaintenanceActions]
+dpmarPendingMaintenanceActions =
+    lens _dpmarPendingMaintenanceActions
+        (\s a -> s { _dpmarPendingMaintenanceActions = a })
+            . _List
+
+instance ToPath DescribePendingMaintenanceActions where
+    toPath = const "/"
+
+instance ToQuery DescribePendingMaintenanceActions where
+    toQuery DescribePendingMaintenanceActions{..} = mconcat
+        [ "Filters"            =? _dpmaFilters
+        , "Marker"             =? _dpmaMarker
+        , "MaxRecords"         =? _dpmaMaxRecords
+        , "ResourceIdentifier" =? _dpmaResourceIdentifier
+        ]
+
+instance ToHeaders DescribePendingMaintenanceActions
+
+instance AWSRequest DescribePendingMaintenanceActions where
+    type Sv DescribePendingMaintenanceActions = RDS
+    type Rs DescribePendingMaintenanceActions = DescribePendingMaintenanceActionsResponse
+
+    request  = post "DescribePendingMaintenanceActions"
+    response = xmlResponse
+
+instance FromXML DescribePendingMaintenanceActionsResponse where
+    parseXML = withElement "DescribePendingMaintenanceActionsResult" $ \x -> DescribePendingMaintenanceActionsResponse
+        <$> x .@? "Marker"
+        <*> x .@? "PendingMaintenanceActions" .!@ mempty
diff --git a/gen/Network/AWS/RDS/ModifyDBInstance.hs b/gen/Network/AWS/RDS/ModifyDBInstance.hs
--- a/gen/Network/AWS/RDS/ModifyDBInstance.hs
+++ b/gen/Network/AWS/RDS/ModifyDBInstance.hs
@@ -218,7 +218,7 @@
 -- performance degradation. While the migration takes place, nightly backups for
 -- the instance will be suspended. No other Amazon RDS operations can take place
 -- for the instance, including modifying the instance, rebooting the instance,
--- deleting the instance, creating a read replica for the instance, and creating
+-- deleting the instance, creating a Read Replica for the instance, and creating
 -- a DB snapshot of the instance.
 mdbiAllocatedStorage :: Lens' ModifyDBInstance (Maybe Int)
 mdbiAllocatedStorage =
@@ -278,9 +278,10 @@
 --
 -- Constraints:
 --
--- Must be a value from 0 to 35 Can be specified for a read replica only if
--- the source is running MySQL 5.6 Cannot be set to 0 if the DB instance is a
--- source to read replicas
+-- Must be a value from 0 to 35 Can be specified for a MySQL Read Replica only
+-- if the source is running MySQL 5.6 Can be specified for a PostgreSQL Read
+-- Replica only if the source is running PostgreSQL 9.3.5 Cannot be set to 0 if
+-- the DB instance is a source to Read Replicas
 mdbiBackupRetentionPeriod :: Lens' ModifyDBInstance (Maybe Int)
 mdbiBackupRetentionPeriod =
     lens _mdbiBackupRetentionPeriod
@@ -351,7 +352,7 @@
 -- for the new engine version must be specified. The new DB parameter group can
 -- be the default for that DB parameter group family.
 --
--- Example: '5.1.42'
+-- For a list of valid engine versions, see 'CreateDBInstance'.
 mdbiEngineVersion :: Lens' ModifyDBInstance (Maybe Text)
 mdbiEngineVersion =
     lens _mdbiEngineVersion (\s a -> s { _mdbiEngineVersion = a })
@@ -387,7 +388,7 @@
 -- performance degradation. While the migration takes place, nightly backups for
 -- the instance will be suspended. No other Amazon RDS operations can take place
 -- for the instance, including modifying the instance, rebooting the instance,
--- deleting the instance, creating a read replica for the instance, and creating
+-- deleting the instance, creating a Read Replica for the instance, and creating
 -- a DB snapshot of the instance.
 mdbiIops :: Lens' ModifyDBInstance (Maybe Int)
 mdbiIops = lens _mdbiIops (\s a -> s { _mdbiIops = a })
@@ -405,6 +406,10 @@
 -- Constraints: Must be 8 to 41 alphanumeric characters (MySQL), 8 to 30
 -- alphanumeric characters (Oracle), or 8 to 128 alphanumeric characters (SQL
 -- Server).
+--
+-- Amazon RDS API actions never return the password, so this action provides a
+-- way to regain access to a master instance user if the password is lost. This
+-- includes restoring privileges that may have been accidentally revoked.
 mdbiMasterUserPassword :: Lens' ModifyDBInstance (Maybe Text)
 mdbiMasterUserPassword =
     lens _mdbiMasterUserPassword (\s a -> s { _mdbiMasterUserPassword = a })
@@ -414,7 +419,7 @@
 -- next maintenance window unless the 'ApplyImmediately' parameter is set to 'true'
 -- for this request.
 --
--- Constraints: Cannot be specified if the DB instance is a read replica.
+-- Constraints: Cannot be specified if the DB instance is a Read Replica.
 mdbiMultiAZ :: Lens' ModifyDBInstance (Maybe Bool)
 mdbiMultiAZ = lens _mdbiMultiAZ (\s a -> s { _mdbiMultiAZ = a })
 
@@ -486,11 +491,13 @@
     lens _mdbiPreferredMaintenanceWindow
         (\s a -> s { _mdbiPreferredMaintenanceWindow = a })
 
--- | Specifies storage type to be associated with the DB Instance.
+-- | Specifies the storage type to be associated with the DB instance.
 --
 -- Valid values: 'standard | gp2 | io1'
 --
 -- If you specify 'io1', you must also include a value for the 'Iops' parameter.
+--
+-- Default: 'io1' if the 'Iops' parameter is specified; otherwise 'standard'
 mdbiStorageType :: Lens' ModifyDBInstance (Maybe Text)
 mdbiStorageType = lens _mdbiStorageType (\s a -> s { _mdbiStorageType = a })
 
diff --git a/gen/Network/AWS/RDS/ModifyDBParameterGroup.hs b/gen/Network/AWS/RDS/ModifyDBParameterGroup.hs
--- a/gen/Network/AWS/RDS/ModifyDBParameterGroup.hs
+++ b/gen/Network/AWS/RDS/ModifyDBParameterGroup.hs
@@ -25,6 +25,10 @@
 -- | Modifies the parameters of a DB parameter group. To modify more than one
 -- parameter, submit a list of the following: 'ParameterName', 'ParameterValue', and 'ApplyMethod'. A maximum of 20 parameters can be modified in a single request.
 --
+-- Changes to dynamic parameters are applied immediately. Changes to static
+-- parameters require a reboot without failover to the DB instance associated
+-- with the parameter group before the change can take effect.
+--
 -- After you modify a DB parameter group, you should wait at least 5 minutes
 -- before creating your first DB instance that uses that DB parameter group as
 -- the default parameter group. This allows Amazon RDS to fully complete the
@@ -98,6 +102,10 @@
 -- be modified in a single request.
 --
 -- Valid Values (for the application method): 'immediate | pending-reboot'
+--
+-- You can use the immediate value with dynamic parameters only. You can use
+-- the pending-reboot value for both dynamic and static parameters, and changes
+-- are applied when you reboot the DB instance without failover.
 mdbpgParameters :: Lens' ModifyDBParameterGroup [Parameter]
 mdbpgParameters = lens _mdbpgParameters (\s a -> s { _mdbpgParameters = a }) . _List
 
diff --git a/gen/Network/AWS/RDS/PromoteReadReplica.hs b/gen/Network/AWS/RDS/PromoteReadReplica.hs
--- a/gen/Network/AWS/RDS/PromoteReadReplica.hs
+++ b/gen/Network/AWS/RDS/PromoteReadReplica.hs
@@ -22,8 +22,14 @@
 --
 -- Derived from AWS service descriptions, licensed under Apache 2.0.
 
--- | Promotes a read replica DB instance to a standalone DB instance.
+-- | Promotes a Read Replica DB instance to a standalone DB instance.
 --
+-- We recommend that you enable automated backups on your Read Replica before
+-- promoting the Read Replica. This ensures that no backup is taken during the
+-- promotion process. Once the instance is promoted to a primary instance,
+-- backups are taken based on your backup settings.
+--
+--
 -- <http://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_PromoteReadReplica.html>
 module Network.AWS.RDS.PromoteReadReplica
     (
@@ -91,7 +97,7 @@
 --
 -- Constraints:
 --
--- Must be the identifier for an existing read replica DB instance Must
+-- Must be the identifier for an existing Read Replica DB instance Must
 -- contain from 1 to 63 alphanumeric characters or hyphens First character must
 -- be a letter Cannot end with a hyphen or contain two consecutive hyphens  Example:
 -- mydbinstance
diff --git a/gen/Network/AWS/RDS/RestoreDBInstanceFromDBSnapshot.hs b/gen/Network/AWS/RDS/RestoreDBInstanceFromDBSnapshot.hs
--- a/gen/Network/AWS/RDS/RestoreDBInstanceFromDBSnapshot.hs
+++ b/gen/Network/AWS/RDS/RestoreDBInstanceFromDBSnapshot.hs
@@ -27,6 +27,15 @@
 -- original source database, except that the new RDS instance is created with
 -- the default security group.
 --
+-- If your intent is to replace your original DB instance with the new,
+-- restored DB instance, then rename your original DB instance before you call
+-- the RestoreDBInstanceFromDBSnapshot action. RDS does not allow two DB
+-- instances with the same name. Once you have renamed your original DB instance
+-- with a different identifier, then you can pass the original name of the DB
+-- instance as the DBInstanceIdentifier in the call to the
+-- RestoreDBInstanceFromDBSnapshot action. The result is that you will replace
+-- the original DB instance with the DB instance created from the snapshot.
+--
 -- <http://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_RestoreDBInstanceFromDBSnapshot.html>
 module Network.AWS.RDS.RestoreDBInstanceFromDBSnapshot
     (
@@ -193,6 +202,10 @@
         (\s a -> s { _rdbifdbsDBInstanceIdentifier = a })
 
 -- | The database name for the restored DB instance.
+--
+-- This parameter doesn't apply to the MySQL engine.
+--
+--
 rdbifdbsDBName :: Lens' RestoreDBInstanceFromDBSnapshot (Maybe Text)
 rdbifdbsDBName = lens _rdbifdbsDBName (\s a -> s { _rdbifdbsDBName = a })
 
@@ -220,7 +233,7 @@
 --
 -- Constraint: Must be compatible with the engine of the source
 --
--- Example: 'oracle-ee'
+-- Valid Values: 'MySQL' | 'oracle-se1' | 'oracle-se' | 'oracle-ee' | 'sqlserver-ee' | 'sqlserver-se' | 'sqlserver-ex' | 'sqlserver-web' | 'postgres'
 rdbifdbsEngine :: Lens' RestoreDBInstanceFromDBSnapshot (Maybe Text)
 rdbifdbsEngine = lens _rdbifdbsEngine (\s a -> s { _rdbifdbsEngine = a })
 
@@ -280,21 +293,23 @@
 -- Default: The default behavior varies depending on whether a VPC has been
 -- requested or not. The following list shows the default behavior in each case.
 --
--- Default VPC:true  VPC:false   If no DB subnet group has been specified as
--- part of the request and the PubliclyAccessible value has not been set, the DB
--- instance will be publicly accessible. If a specific DB subnet group has been
--- specified as part of the request and the PubliclyAccessible value has not
--- been set, the DB instance will be private.
+-- Default VPC: true  VPC: false   If no DB subnet group has been specified
+-- as part of the request and the PubliclyAccessible value has not been set, the
+-- DB instance will be publicly accessible. If a specific DB subnet group has
+-- been specified as part of the request and the PubliclyAccessible value has
+-- not been set, the DB instance will be private.
 rdbifdbsPubliclyAccessible :: Lens' RestoreDBInstanceFromDBSnapshot (Maybe Bool)
 rdbifdbsPubliclyAccessible =
     lens _rdbifdbsPubliclyAccessible
         (\s a -> s { _rdbifdbsPubliclyAccessible = a })
 
--- | Specifies storage type to be associated with the DB Instance.
+-- | Specifies the storage type to be associated with the DB instance.
 --
 -- Valid values: 'standard | gp2 | io1'
 --
 -- If you specify 'io1', you must also include a value for the 'Iops' parameter.
+--
+-- Default: 'io1' if the 'Iops' parameter is specified; otherwise 'standard'
 rdbifdbsStorageType :: Lens' RestoreDBInstanceFromDBSnapshot (Maybe Text)
 rdbifdbsStorageType =
     lens _rdbifdbsStorageType (\s a -> s { _rdbifdbsStorageType = a })
diff --git a/gen/Network/AWS/RDS/RestoreDBInstanceToPointInTime.hs b/gen/Network/AWS/RDS/RestoreDBInstanceToPointInTime.hs
--- a/gen/Network/AWS/RDS/RestoreDBInstanceToPointInTime.hs
+++ b/gen/Network/AWS/RDS/RestoreDBInstanceToPointInTime.hs
@@ -23,8 +23,8 @@
 -- Derived from AWS service descriptions, licensed under Apache 2.0.
 
 -- | Restores a DB instance to an arbitrary point-in-time. Users can restore to
--- any point in time before the latestRestorableTime for up to
--- backupRetentionPeriod days. The target database is created from the source
+-- any point in time before the LatestRestorableTime for up to
+-- BackupRetentionPeriod days. The target database is created from the source
 -- database with the same configuration as the original database except that the
 -- DB instance is created with the default DB security group.
 --
@@ -193,6 +193,10 @@
     lens _rdbitpitDBInstanceClass (\s a -> s { _rdbitpitDBInstanceClass = a })
 
 -- | The database name for the restored DB instance.
+--
+-- This parameter is not used for the MySQL engine.
+--
+--
 rdbitpitDBName :: Lens' RestoreDBInstanceToPointInTime (Maybe Text)
 rdbitpitDBName = lens _rdbitpitDBName (\s a -> s { _rdbitpitDBName = a })
 
@@ -208,7 +212,7 @@
 --
 -- Constraint: Must be compatible with the engine of the source
 --
--- Example: 'oracle-ee'
+-- Valid Values: 'MySQL' | 'oracle-se1' | 'oracle-se' | 'oracle-ee' | 'sqlserver-ee' | 'sqlserver-se' | 'sqlserver-ex' | 'sqlserver-web' | 'postgres'
 rdbitpitEngine :: Lens' RestoreDBInstanceToPointInTime (Maybe Text)
 rdbitpitEngine = lens _rdbitpitEngine (\s a -> s { _rdbitpitEngine = a })
 
@@ -299,11 +303,13 @@
     lens _rdbitpitSourceDBInstanceIdentifier
         (\s a -> s { _rdbitpitSourceDBInstanceIdentifier = a })
 
--- | Specifies storage type to be associated with the DB Instance.
+-- | Specifies the storage type to be associated with the DB instance.
 --
 -- Valid values: 'standard | gp2 | io1'
 --
 -- If you specify 'io1', you must also include a value for the 'Iops' parameter.
+--
+-- Default: 'io1' if the 'Iops' parameter is specified; otherwise 'standard'
 rdbitpitStorageType :: Lens' RestoreDBInstanceToPointInTime (Maybe Text)
 rdbitpitStorageType =
     lens _rdbitpitStorageType (\s a -> s { _rdbitpitStorageType = a })
diff --git a/gen/Network/AWS/RDS/Types.hs b/gen/Network/AWS/RDS/Types.hs
--- a/gen/Network/AWS/RDS/Types.hs
+++ b/gen/Network/AWS/RDS/Types.hs
@@ -32,6 +32,15 @@
     -- ** XML
     , ns
 
+    -- * PendingMaintenanceAction
+    , PendingMaintenanceAction
+    , pendingMaintenanceAction
+    , pmaAction
+    , pmaAutoAppliedAfterDate
+    , pmaCurrentApplyDate
+    , pmaForcedApplyDate
+    , pmaOptInStatus
+
     -- * OptionGroup
     , OptionGroup
     , optionGroup
@@ -92,10 +101,12 @@
     , dbsAvailabilityZone
     , dbsDBInstanceIdentifier
     , dbsDBSnapshotIdentifier
+    , dbsEncrypted
     , dbsEngine
     , dbsEngineVersion
     , dbsInstanceCreateTime
     , dbsIops
+    , dbsKmsKeyId
     , dbsLicenseModel
     , dbsMasterUsername
     , dbsOptionGroupName
@@ -126,6 +137,12 @@
     -- * SourceType
     , SourceType (..)
 
+    -- * ResourcePendingMaintenanceActions
+    , ResourcePendingMaintenanceActions
+    , resourcePendingMaintenanceActions
+    , rpmaPendingMaintenanceActionDetails
+    , rpmaResourceIdentifier
+
     -- * DBParameterGroup
     , DBParameterGroup
     , dbparameterGroup
@@ -223,11 +240,13 @@
     , dbiDBParameterGroups
     , dbiDBSecurityGroups
     , dbiDBSubnetGroup
+    , dbiDbiResourceId
     , dbiEndpoint
     , dbiEngine
     , dbiEngineVersion
     , dbiInstanceCreateTime
     , dbiIops
+    , dbiKmsKeyId
     , dbiLatestRestorableTime
     , dbiLicenseModel
     , dbiMasterUsername
@@ -241,6 +260,7 @@
     , dbiReadReplicaSourceDBInstanceIdentifier
     , dbiSecondaryAvailabilityZone
     , dbiStatusInfos
+    , dbiStorageEncrypted
     , dbiStorageType
     , dbiTdeCredentialArn
     , dbiVpcSecurityGroups
@@ -312,6 +332,7 @@
     , odbioReadReplicaCapable
     , odbioStorageType
     , odbioSupportsIops
+    , odbioSupportsStorageEncryption
     , odbioVpc
 
     -- * Filter
@@ -420,7 +441,7 @@
 import Network.AWS.Signing
 import qualified GHC.Exts
 
--- | Version @2014-09-01@ of the Amazon Relational Database Service service.
+-- | Version @2014-10-31@ of the Amazon Relational Database Service service.
 data RDS
 
 instance AWSService RDS where
@@ -433,7 +454,7 @@
         service' = Service
             { _svcAbbrev       = "RDS"
             , _svcPrefix       = "rds"
-            , _svcVersion      = "2014-09-01"
+            , _svcVersion      = "2014-10-31"
             , _svcTargetPrefix = Nothing
             , _svcJSONVersion  = Nothing
             , _svcHandle       = handle
@@ -463,9 +484,90 @@
             | otherwise = False
 
 ns :: Text
-ns = "http://rds.amazonaws.com/doc/2014-09-01/"
+ns = "http://rds.amazonaws.com/doc/2014-10-31/"
 {-# INLINE ns #-}
 
+data PendingMaintenanceAction = PendingMaintenanceAction
+    { _pmaAction               :: Maybe Text
+    , _pmaAutoAppliedAfterDate :: Maybe ISO8601
+    , _pmaCurrentApplyDate     :: Maybe ISO8601
+    , _pmaForcedApplyDate      :: Maybe ISO8601
+    , _pmaOptInStatus          :: Maybe Text
+    } deriving (Eq, Ord, Show)
+
+-- | 'PendingMaintenanceAction' constructor.
+--
+-- The fields accessible through corresponding lenses are:
+--
+-- * 'pmaAction' @::@ 'Maybe' 'Text'
+--
+-- * 'pmaAutoAppliedAfterDate' @::@ 'Maybe' 'UTCTime'
+--
+-- * 'pmaCurrentApplyDate' @::@ 'Maybe' 'UTCTime'
+--
+-- * 'pmaForcedApplyDate' @::@ 'Maybe' 'UTCTime'
+--
+-- * 'pmaOptInStatus' @::@ 'Maybe' 'Text'
+--
+pendingMaintenanceAction :: PendingMaintenanceAction
+pendingMaintenanceAction = PendingMaintenanceAction
+    { _pmaAction               = Nothing
+    , _pmaAutoAppliedAfterDate = Nothing
+    , _pmaForcedApplyDate      = Nothing
+    , _pmaOptInStatus          = Nothing
+    , _pmaCurrentApplyDate     = Nothing
+    }
+
+-- | The type of pending maintenance action that is available for the resource.
+pmaAction :: Lens' PendingMaintenanceAction (Maybe Text)
+pmaAction = lens _pmaAction (\s a -> s { _pmaAction = a })
+
+-- | The date of the maintenance window when the action will be applied. The
+-- maintenance action will be applied to the resource during its first
+-- maintenance window after this date. If this date is specified, any 'next-maintenance' opt-in requests are ignored.
+pmaAutoAppliedAfterDate :: Lens' PendingMaintenanceAction (Maybe UTCTime)
+pmaAutoAppliedAfterDate =
+    lens _pmaAutoAppliedAfterDate (\s a -> s { _pmaAutoAppliedAfterDate = a })
+        . mapping _Time
+
+-- | The effective date when the pending maintenance action will be applied to the
+-- resource. This takes into account opt-in requests received from the 'ApplyPendingMaintenanceAction' API, the 'AutoAppliedAfterDate', and the 'ForcedApplyDate'. This value is blank
+-- if an opt-in request has not been received and no value has been specified
+-- for the 'AutoAppliedAfterDate' or 'ForcedApplyDate'.
+pmaCurrentApplyDate :: Lens' PendingMaintenanceAction (Maybe UTCTime)
+pmaCurrentApplyDate =
+    lens _pmaCurrentApplyDate (\s a -> s { _pmaCurrentApplyDate = a })
+        . mapping _Time
+
+-- | The date when the maintenance action will be automatically applied. The
+-- maintenance action will be applied to the resource on this date regardless of
+-- the maintenance window for the resource. If this date is specified, any 'immediate' opt-in requests are ignored.
+pmaForcedApplyDate :: Lens' PendingMaintenanceAction (Maybe UTCTime)
+pmaForcedApplyDate =
+    lens _pmaForcedApplyDate (\s a -> s { _pmaForcedApplyDate = a })
+        . mapping _Time
+
+-- | Indicates the type of opt-in request that has been received for the resource.
+pmaOptInStatus :: Lens' PendingMaintenanceAction (Maybe Text)
+pmaOptInStatus = lens _pmaOptInStatus (\s a -> s { _pmaOptInStatus = a })
+
+instance FromXML PendingMaintenanceAction where
+    parseXML x = PendingMaintenanceAction
+        <$> x .@? "Action"
+        <*> x .@? "AutoAppliedAfterDate"
+        <*> x .@? "CurrentApplyDate"
+        <*> x .@? "ForcedApplyDate"
+        <*> x .@? "OptInStatus"
+
+instance ToQuery PendingMaintenanceAction where
+    toQuery PendingMaintenanceAction{..} = mconcat
+        [ "Action"               =? _pmaAction
+        , "AutoAppliedAfterDate" =? _pmaAutoAppliedAfterDate
+        , "CurrentApplyDate"     =? _pmaCurrentApplyDate
+        , "ForcedApplyDate"      =? _pmaForcedApplyDate
+        , "OptInStatus"          =? _pmaOptInStatus
+        ]
+
 data OptionGroup = OptionGroup
     { _ogAllowsVpcAndNonVpcInstanceMemberships :: Maybe Bool
     , _ogEngineName                            :: Maybe Text
@@ -522,7 +624,7 @@
 ogMajorEngineVersion =
     lens _ogMajorEngineVersion (\s a -> s { _ogMajorEngineVersion = a })
 
--- | Provides the description of the option group.
+-- | Provides a description of the option group.
 ogOptionGroupDescription :: Lens' OptionGroup (Maybe Text)
 ogOptionGroupDescription =
     lens _ogOptionGroupDescription
@@ -537,11 +639,11 @@
 ogOptions :: Lens' OptionGroup [Option]
 ogOptions = lens _ogOptions (\s a -> s { _ogOptions = a }) . _List
 
--- | If AllowsVpcAndNonVpcInstanceMemberships is 'false', this field is blank. If
--- AllowsVpcAndNonVpcInstanceMemberships is 'true' and this field is blank, then
--- this option group can be applied to both VPC and non-VPC instances. If this
--- field contains a value, then this option group can only be applied to
--- instances that are in the VPC indicated by this field.
+-- | If AllowsVpcAndNonVpcInstanceMemberships is 'false', this field is blank. If AllowsVpcAndNonVpcInstanceMemberships
+-- is 'true' and this field is blank, then this option group can be applied to
+-- both VPC and non-VPC instances. If this field contains a value, then this
+-- option group can only be applied to instances that are in the VPC indicated
+-- by this field.
 ogVpcId :: Lens' OptionGroup (Maybe Text)
 ogVpcId = lens _ogVpcId (\s a -> s { _ogVpcId = a })
 
@@ -909,10 +1011,12 @@
     , _dbsAvailabilityZone     :: Maybe Text
     , _dbsDBInstanceIdentifier :: Maybe Text
     , _dbsDBSnapshotIdentifier :: Maybe Text
+    , _dbsEncrypted            :: Maybe Bool
     , _dbsEngine               :: Maybe Text
     , _dbsEngineVersion        :: Maybe Text
     , _dbsInstanceCreateTime   :: Maybe ISO8601
     , _dbsIops                 :: Maybe Int
+    , _dbsKmsKeyId             :: Maybe Text
     , _dbsLicenseModel         :: Maybe Text
     , _dbsMasterUsername       :: Maybe Text
     , _dbsOptionGroupName      :: Maybe Text
@@ -939,6 +1043,8 @@
 --
 -- * 'dbsDBSnapshotIdentifier' @::@ 'Maybe' 'Text'
 --
+-- * 'dbsEncrypted' @::@ 'Maybe' 'Bool'
+--
 -- * 'dbsEngine' @::@ 'Maybe' 'Text'
 --
 -- * 'dbsEngineVersion' @::@ 'Maybe' 'Text'
@@ -947,6 +1053,8 @@
 --
 -- * 'dbsIops' @::@ 'Maybe' 'Int'
 --
+-- * 'dbsKmsKeyId' @::@ 'Maybe' 'Text'
+--
 -- * 'dbsLicenseModel' @::@ 'Maybe' 'Text'
 --
 -- * 'dbsMasterUsername' @::@ 'Maybe' 'Text'
@@ -993,6 +1101,8 @@
     , _dbsSourceRegion         = Nothing
     , _dbsStorageType          = Nothing
     , _dbsTdeCredentialArn     = Nothing
+    , _dbsEncrypted            = Nothing
+    , _dbsKmsKeyId             = Nothing
     }
 
 -- | Specifies the allocated storage size in gigabytes (GB).
@@ -1017,6 +1127,10 @@
 dbsDBSnapshotIdentifier =
     lens _dbsDBSnapshotIdentifier (\s a -> s { _dbsDBSnapshotIdentifier = a })
 
+-- | Specifies whether the DB snapshot is encrypted.
+dbsEncrypted :: Lens' DBSnapshot (Maybe Bool)
+dbsEncrypted = lens _dbsEncrypted (\s a -> s { _dbsEncrypted = a })
+
 -- | Specifies the name of the database engine.
 dbsEngine :: Lens' DBSnapshot (Maybe Text)
 dbsEngine = lens _dbsEngine (\s a -> s { _dbsEngine = a })
@@ -1036,6 +1150,10 @@
 dbsIops :: Lens' DBSnapshot (Maybe Int)
 dbsIops = lens _dbsIops (\s a -> s { _dbsIops = a })
 
+-- | If 'Encrypted' is true, the KMS key identifier for the encrypted DB snapshot.
+dbsKmsKeyId :: Lens' DBSnapshot (Maybe Text)
+dbsKmsKeyId = lens _dbsKmsKeyId (\s a -> s { _dbsKmsKeyId = a })
+
 -- | License model information for the restored DB instance.
 dbsLicenseModel :: Lens' DBSnapshot (Maybe Text)
 dbsLicenseModel = lens _dbsLicenseModel (\s a -> s { _dbsLicenseModel = a })
@@ -1078,7 +1196,7 @@
 dbsStatus :: Lens' DBSnapshot (Maybe Text)
 dbsStatus = lens _dbsStatus (\s a -> s { _dbsStatus = a })
 
--- | Specifies storage type associated with DB Snapshot.
+-- | Specifies the storage type associated with DB Snapshot.
 dbsStorageType :: Lens' DBSnapshot (Maybe Text)
 dbsStorageType = lens _dbsStorageType (\s a -> s { _dbsStorageType = a })
 
@@ -1098,10 +1216,12 @@
         <*> x .@? "AvailabilityZone"
         <*> x .@? "DBInstanceIdentifier"
         <*> x .@? "DBSnapshotIdentifier"
+        <*> x .@? "Encrypted"
         <*> x .@? "Engine"
         <*> x .@? "EngineVersion"
         <*> x .@? "InstanceCreateTime"
         <*> x .@? "Iops"
+        <*> x .@? "KmsKeyId"
         <*> x .@? "LicenseModel"
         <*> x .@? "MasterUsername"
         <*> x .@? "OptionGroupName"
@@ -1121,10 +1241,12 @@
         , "AvailabilityZone"     =? _dbsAvailabilityZone
         , "DBInstanceIdentifier" =? _dbsDBInstanceIdentifier
         , "DBSnapshotIdentifier" =? _dbsDBSnapshotIdentifier
+        , "Encrypted"            =? _dbsEncrypted
         , "Engine"               =? _dbsEngine
         , "EngineVersion"        =? _dbsEngineVersion
         , "InstanceCreateTime"   =? _dbsInstanceCreateTime
         , "Iops"                 =? _dbsIops
+        , "KmsKeyId"             =? _dbsKmsKeyId
         , "LicenseModel"         =? _dbsLicenseModel
         , "MasterUsername"       =? _dbsMasterUsername
         , "OptionGroupName"      =? _dbsOptionGroupName
@@ -1275,6 +1397,48 @@
 instance FromXML SourceType where
     parseXML = parseXMLText "SourceType"
 
+data ResourcePendingMaintenanceActions = ResourcePendingMaintenanceActions
+    { _rpmaPendingMaintenanceActionDetails :: List "member" PendingMaintenanceAction
+    , _rpmaResourceIdentifier              :: Maybe Text
+    } deriving (Eq, Show)
+
+-- | 'ResourcePendingMaintenanceActions' constructor.
+--
+-- The fields accessible through corresponding lenses are:
+--
+-- * 'rpmaPendingMaintenanceActionDetails' @::@ ['PendingMaintenanceAction']
+--
+-- * 'rpmaResourceIdentifier' @::@ 'Maybe' 'Text'
+--
+resourcePendingMaintenanceActions :: ResourcePendingMaintenanceActions
+resourcePendingMaintenanceActions = ResourcePendingMaintenanceActions
+    { _rpmaResourceIdentifier              = Nothing
+    , _rpmaPendingMaintenanceActionDetails = mempty
+    }
+
+-- | Provides details about the pending maintenance actions for the resource.
+rpmaPendingMaintenanceActionDetails :: Lens' ResourcePendingMaintenanceActions [PendingMaintenanceAction]
+rpmaPendingMaintenanceActionDetails =
+    lens _rpmaPendingMaintenanceActionDetails
+        (\s a -> s { _rpmaPendingMaintenanceActionDetails = a })
+            . _List
+
+-- | The ARN of this resource that has pending maintenance actions.
+rpmaResourceIdentifier :: Lens' ResourcePendingMaintenanceActions (Maybe Text)
+rpmaResourceIdentifier =
+    lens _rpmaResourceIdentifier (\s a -> s { _rpmaResourceIdentifier = a })
+
+instance FromXML ResourcePendingMaintenanceActions where
+    parseXML x = ResourcePendingMaintenanceActions
+        <$> x .@? "PendingMaintenanceActionDetails" .!@ mempty
+        <*> x .@? "ResourceIdentifier"
+
+instance ToQuery ResourcePendingMaintenanceActions where
+    toQuery ResourcePendingMaintenanceActions{..} = mconcat
+        [ "PendingMaintenanceActionDetails" =? _rpmaPendingMaintenanceActionDetails
+        , "ResourceIdentifier"              =? _rpmaResourceIdentifier
+        ]
+
 data DBParameterGroup = DBParameterGroup
     { _dbpgDBParameterGroupFamily :: Maybe Text
     , _dbpgDBParameterGroupName   :: Maybe Text
@@ -1883,7 +2047,7 @@
 ogoDescription :: Lens' OptionGroupOption (Maybe Text)
 ogoDescription = lens _ogoDescription (\s a -> s { _ogoDescription = a })
 
--- | Engine name that this option can be applied to.
+-- | The name of the engine that this option can be applied to.
 ogoEngineName :: Lens' OptionGroupOption (Maybe Text)
 ogoEngineName = lens _ogoEngineName (\s a -> s { _ogoEngineName = a })
 
@@ -1975,11 +2139,13 @@
     , _dbiDBParameterGroups                     :: List "member" DBParameterGroupStatus
     , _dbiDBSecurityGroups                      :: List "member" DBSecurityGroupMembership
     , _dbiDBSubnetGroup                         :: Maybe DBSubnetGroup
+    , _dbiDbiResourceId                         :: Maybe Text
     , _dbiEndpoint                              :: Maybe Endpoint
     , _dbiEngine                                :: Maybe Text
     , _dbiEngineVersion                         :: Maybe Text
     , _dbiInstanceCreateTime                    :: Maybe ISO8601
     , _dbiIops                                  :: Maybe Int
+    , _dbiKmsKeyId                              :: Maybe Text
     , _dbiLatestRestorableTime                  :: Maybe ISO8601
     , _dbiLicenseModel                          :: Maybe Text
     , _dbiMasterUsername                        :: Maybe Text
@@ -1993,6 +2159,7 @@
     , _dbiReadReplicaSourceDBInstanceIdentifier :: Maybe Text
     , _dbiSecondaryAvailabilityZone             :: Maybe Text
     , _dbiStatusInfos                           :: List "member" DBInstanceStatusInfo
+    , _dbiStorageEncrypted                      :: Maybe Bool
     , _dbiStorageType                           :: Maybe Text
     , _dbiTdeCredentialArn                      :: Maybe Text
     , _dbiVpcSecurityGroups                     :: List "member" VpcSecurityGroupMembership
@@ -2026,6 +2193,8 @@
 --
 -- * 'dbiDBSubnetGroup' @::@ 'Maybe' 'DBSubnetGroup'
 --
+-- * 'dbiDbiResourceId' @::@ 'Maybe' 'Text'
+--
 -- * 'dbiEndpoint' @::@ 'Maybe' 'Endpoint'
 --
 -- * 'dbiEngine' @::@ 'Maybe' 'Text'
@@ -2036,6 +2205,8 @@
 --
 -- * 'dbiIops' @::@ 'Maybe' 'Int'
 --
+-- * 'dbiKmsKeyId' @::@ 'Maybe' 'Text'
+--
 -- * 'dbiLatestRestorableTime' @::@ 'Maybe' 'UTCTime'
 --
 -- * 'dbiLicenseModel' @::@ 'Maybe' 'Text'
@@ -2062,6 +2233,8 @@
 --
 -- * 'dbiStatusInfos' @::@ ['DBInstanceStatusInfo']
 --
+-- * 'dbiStorageEncrypted' @::@ 'Maybe' 'Bool'
+--
 -- * 'dbiStorageType' @::@ 'Maybe' 'Text'
 --
 -- * 'dbiTdeCredentialArn' @::@ 'Maybe' 'Text'
@@ -2103,6 +2276,9 @@
     , _dbiStatusInfos                           = mempty
     , _dbiStorageType                           = Nothing
     , _dbiTdeCredentialArn                      = Nothing
+    , _dbiStorageEncrypted                      = Nothing
+    , _dbiKmsKeyId                              = Nothing
+    , _dbiDbiResourceId                         = Nothing
     }
 
 -- | Specifies the allocated storage size specified in gigabytes.
@@ -2151,11 +2327,11 @@
     lens _dbiDBInstanceStatus (\s a -> s { _dbiDBInstanceStatus = a })
 
 -- | The meaning of this parameter differs according to the database engine you
--- use. For example, this value returns only MySQL information when returning
--- values from CreateDBInstanceReadReplica since read replicas are only
--- supported for MySQL.
+-- use. For example, this value returns either MySQL or PostgreSQL information
+-- when returning values from CreateDBInstanceReadReplica since Read Replicas
+-- are only supported for MySQL and PostgreSQL.
 --
--- MySQL
+-- MySQL, SQL Server, PostgreSQL
 --
 -- Contains the name of the initial database of this instance that was
 -- provided at create time, if one was specified when the DB instance was
@@ -2187,6 +2363,12 @@
 dbiDBSubnetGroup :: Lens' DBInstance (Maybe DBSubnetGroup)
 dbiDBSubnetGroup = lens _dbiDBSubnetGroup (\s a -> s { _dbiDBSubnetGroup = a })
 
+-- | If 'StorageEncrypted' is true, the region-unique, immutable identifier for the
+-- encrypted DB instance. This identifier is found in AWS CloudTrail log entries
+-- whenever the KMS key for the DB instance is accessed.
+dbiDbiResourceId :: Lens' DBInstance (Maybe Text)
+dbiDbiResourceId = lens _dbiDbiResourceId (\s a -> s { _dbiDbiResourceId = a })
+
 -- | Specifies the connection endpoint.
 dbiEndpoint :: Lens' DBInstance (Maybe Endpoint)
 dbiEndpoint = lens _dbiEndpoint (\s a -> s { _dbiEndpoint = a })
@@ -2209,6 +2391,11 @@
 dbiIops :: Lens' DBInstance (Maybe Int)
 dbiIops = lens _dbiIops (\s a -> s { _dbiIops = a })
 
+-- | If 'StorageEncrypted' is true, the KMS key identifier for the encrypted DB
+-- instance.
+dbiKmsKeyId :: Lens' DBInstance (Maybe Text)
+dbiKmsKeyId = lens _dbiKmsKeyId (\s a -> s { _dbiKmsKeyId = a })
+
 -- | Specifies the latest time to which a database can be restored with
 -- point-in-time restore.
 dbiLatestRestorableTime :: Lens' DBInstance (Maybe UTCTime)
@@ -2275,7 +2462,7 @@
 dbiPubliclyAccessible =
     lens _dbiPubliclyAccessible (\s a -> s { _dbiPubliclyAccessible = a })
 
--- | Contains one or more identifiers of the read replicas associated with this
+-- | Contains one or more identifiers of the Read Replicas associated with this
 -- DB instance.
 dbiReadReplicaDBInstanceIdentifiers :: Lens' DBInstance [Text]
 dbiReadReplicaDBInstanceIdentifiers =
@@ -2284,7 +2471,7 @@
             . _List
 
 -- | Contains the identifier of the source DB instance if this DB instance is a
--- read replica.
+-- Read Replica.
 dbiReadReplicaSourceDBInstanceIdentifier :: Lens' DBInstance (Maybe Text)
 dbiReadReplicaSourceDBInstanceIdentifier =
     lens _dbiReadReplicaSourceDBInstanceIdentifier
@@ -2297,12 +2484,17 @@
     lens _dbiSecondaryAvailabilityZone
         (\s a -> s { _dbiSecondaryAvailabilityZone = a })
 
--- | The status of a read replica. If the instance is not a read replica, this
+-- | The status of a Read Replica. If the instance is not a Read Replica, this
 -- will be blank.
 dbiStatusInfos :: Lens' DBInstance [DBInstanceStatusInfo]
 dbiStatusInfos = lens _dbiStatusInfos (\s a -> s { _dbiStatusInfos = a }) . _List
 
--- | Specifies storage type associated with DB Instance.
+-- | Specifies whether the DB instance is encrypted.
+dbiStorageEncrypted :: Lens' DBInstance (Maybe Bool)
+dbiStorageEncrypted =
+    lens _dbiStorageEncrypted (\s a -> s { _dbiStorageEncrypted = a })
+
+-- | Specifies the storage type associated with DB instance.
 dbiStorageType :: Lens' DBInstance (Maybe Text)
 dbiStorageType = lens _dbiStorageType (\s a -> s { _dbiStorageType = a })
 
@@ -2333,11 +2525,13 @@
         <*> x .@? "DBParameterGroups" .!@ mempty
         <*> x .@? "DBSecurityGroups" .!@ mempty
         <*> x .@? "DBSubnetGroup"
+        <*> x .@? "DbiResourceId"
         <*> x .@? "Endpoint"
         <*> x .@? "Engine"
         <*> x .@? "EngineVersion"
         <*> x .@? "InstanceCreateTime"
         <*> x .@? "Iops"
+        <*> x .@? "KmsKeyId"
         <*> x .@? "LatestRestorableTime"
         <*> x .@? "LicenseModel"
         <*> x .@? "MasterUsername"
@@ -2351,6 +2545,7 @@
         <*> x .@? "ReadReplicaSourceDBInstanceIdentifier"
         <*> x .@? "SecondaryAvailabilityZone"
         <*> x .@? "StatusInfos" .!@ mempty
+        <*> x .@? "StorageEncrypted"
         <*> x .@? "StorageType"
         <*> x .@? "TdeCredentialArn"
         <*> x .@? "VpcSecurityGroups" .!@ mempty
@@ -2369,11 +2564,13 @@
         , "DBParameterGroups"                     =? _dbiDBParameterGroups
         , "DBSecurityGroups"                      =? _dbiDBSecurityGroups
         , "DBSubnetGroup"                         =? _dbiDBSubnetGroup
+        , "DbiResourceId"                         =? _dbiDbiResourceId
         , "Endpoint"                              =? _dbiEndpoint
         , "Engine"                                =? _dbiEngine
         , "EngineVersion"                         =? _dbiEngineVersion
         , "InstanceCreateTime"                    =? _dbiInstanceCreateTime
         , "Iops"                                  =? _dbiIops
+        , "KmsKeyId"                              =? _dbiKmsKeyId
         , "LatestRestorableTime"                  =? _dbiLatestRestorableTime
         , "LicenseModel"                          =? _dbiLicenseModel
         , "MasterUsername"                        =? _dbiMasterUsername
@@ -2387,6 +2584,7 @@
         , "ReadReplicaSourceDBInstanceIdentifier" =? _dbiReadReplicaSourceDBInstanceIdentifier
         , "SecondaryAvailabilityZone"             =? _dbiSecondaryAvailabilityZone
         , "StatusInfos"                           =? _dbiStatusInfos
+        , "StorageEncrypted"                      =? _dbiStorageEncrypted
         , "StorageType"                           =? _dbiStorageType
         , "TdeCredentialArn"                      =? _dbiTdeCredentialArn
         , "VpcSecurityGroups"                     =? _dbiVpcSecurityGroups
@@ -2837,16 +3035,17 @@
         ]
 
 data OrderableDBInstanceOption = OrderableDBInstanceOption
-    { _odbioAvailabilityZones  :: List "member" AvailabilityZone
-    , _odbioDBInstanceClass    :: Maybe Text
-    , _odbioEngine             :: Maybe Text
-    , _odbioEngineVersion      :: Maybe Text
-    , _odbioLicenseModel       :: Maybe Text
-    , _odbioMultiAZCapable     :: Maybe Bool
-    , _odbioReadReplicaCapable :: Maybe Bool
-    , _odbioStorageType        :: Maybe Text
-    , _odbioSupportsIops       :: Maybe Bool
-    , _odbioVpc                :: Maybe Bool
+    { _odbioAvailabilityZones         :: List "member" AvailabilityZone
+    , _odbioDBInstanceClass           :: Maybe Text
+    , _odbioEngine                    :: Maybe Text
+    , _odbioEngineVersion             :: Maybe Text
+    , _odbioLicenseModel              :: Maybe Text
+    , _odbioMultiAZCapable            :: Maybe Bool
+    , _odbioReadReplicaCapable        :: Maybe Bool
+    , _odbioStorageType               :: Maybe Text
+    , _odbioSupportsIops              :: Maybe Bool
+    , _odbioSupportsStorageEncryption :: Maybe Bool
+    , _odbioVpc                       :: Maybe Bool
     } deriving (Eq, Show)
 
 -- | 'OrderableDBInstanceOption' constructor.
@@ -2871,20 +3070,23 @@
 --
 -- * 'odbioSupportsIops' @::@ 'Maybe' 'Bool'
 --
+-- * 'odbioSupportsStorageEncryption' @::@ 'Maybe' 'Bool'
+--
 -- * 'odbioVpc' @::@ 'Maybe' 'Bool'
 --
 orderableDBInstanceOption :: OrderableDBInstanceOption
 orderableDBInstanceOption = OrderableDBInstanceOption
-    { _odbioEngine             = Nothing
-    , _odbioEngineVersion      = Nothing
-    , _odbioDBInstanceClass    = Nothing
-    , _odbioLicenseModel       = Nothing
-    , _odbioAvailabilityZones  = mempty
-    , _odbioMultiAZCapable     = Nothing
-    , _odbioReadReplicaCapable = Nothing
-    , _odbioVpc                = Nothing
-    , _odbioStorageType        = Nothing
-    , _odbioSupportsIops       = Nothing
+    { _odbioEngine                    = Nothing
+    , _odbioEngineVersion             = Nothing
+    , _odbioDBInstanceClass           = Nothing
+    , _odbioLicenseModel              = Nothing
+    , _odbioAvailabilityZones         = mempty
+    , _odbioMultiAZCapable            = Nothing
+    , _odbioReadReplicaCapable        = Nothing
+    , _odbioVpc                       = Nothing
+    , _odbioSupportsStorageEncryption = Nothing
+    , _odbioStorageType               = Nothing
+    , _odbioSupportsIops              = Nothing
     }
 
 -- | A list of availability zones for the orderable DB instance.
@@ -2917,7 +3119,7 @@
 odbioMultiAZCapable =
     lens _odbioMultiAZCapable (\s a -> s { _odbioMultiAZCapable = a })
 
--- | Indicates whether this orderable DB instance can have a read replica.
+-- | Indicates whether this orderable DB instance can have a Read Replica.
 odbioReadReplicaCapable :: Lens' OrderableDBInstanceOption (Maybe Bool)
 odbioReadReplicaCapable =
     lens _odbioReadReplicaCapable (\s a -> s { _odbioReadReplicaCapable = a })
@@ -2931,6 +3133,12 @@
 odbioSupportsIops =
     lens _odbioSupportsIops (\s a -> s { _odbioSupportsIops = a })
 
+-- | Indicates whether this orderable DB instance supports encrypted storage.
+odbioSupportsStorageEncryption :: Lens' OrderableDBInstanceOption (Maybe Bool)
+odbioSupportsStorageEncryption =
+    lens _odbioSupportsStorageEncryption
+        (\s a -> s { _odbioSupportsStorageEncryption = a })
+
 -- | Indicates whether this is a VPC orderable DB instance.
 odbioVpc :: Lens' OrderableDBInstanceOption (Maybe Bool)
 odbioVpc = lens _odbioVpc (\s a -> s { _odbioVpc = a })
@@ -2946,20 +3154,22 @@
         <*> x .@? "ReadReplicaCapable"
         <*> x .@? "StorageType"
         <*> x .@? "SupportsIops"
+        <*> x .@? "SupportsStorageEncryption"
         <*> x .@? "Vpc"
 
 instance ToQuery OrderableDBInstanceOption where
     toQuery OrderableDBInstanceOption{..} = mconcat
-        [ "AvailabilityZones"  =? _odbioAvailabilityZones
-        , "DBInstanceClass"    =? _odbioDBInstanceClass
-        , "Engine"             =? _odbioEngine
-        , "EngineVersion"      =? _odbioEngineVersion
-        , "LicenseModel"       =? _odbioLicenseModel
-        , "MultiAZCapable"     =? _odbioMultiAZCapable
-        , "ReadReplicaCapable" =? _odbioReadReplicaCapable
-        , "StorageType"        =? _odbioStorageType
-        , "SupportsIops"       =? _odbioSupportsIops
-        , "Vpc"                =? _odbioVpc
+        [ "AvailabilityZones"         =? _odbioAvailabilityZones
+        , "DBInstanceClass"           =? _odbioDBInstanceClass
+        , "Engine"                    =? _odbioEngine
+        , "EngineVersion"             =? _odbioEngineVersion
+        , "LicenseModel"              =? _odbioLicenseModel
+        , "MultiAZCapable"            =? _odbioMultiAZCapable
+        , "ReadReplicaCapable"        =? _odbioReadReplicaCapable
+        , "StorageType"               =? _odbioStorageType
+        , "SupportsIops"              =? _odbioSupportsIops
+        , "SupportsStorageEncryption" =? _odbioSupportsStorageEncryption
+        , "Vpc"                       =? _odbioVpc
         ]
 
 data Filter = Filter
@@ -3481,7 +3691,7 @@
 pmvPort :: Lens' PendingModifiedValues (Maybe Int)
 pmvPort = lens _pmvPort (\s a -> s { _pmvPort = a })
 
--- | Specifies storage type to be associated with the DB instance.
+-- | Specifies the storage type to be associated with the DB instance.
 pmvStorageType :: Lens' PendingModifiedValues (Maybe Text)
 pmvStorageType = lens _pmvStorageType (\s a -> s { _pmvStorageType = a })
 
