diff --git a/codegen/sdk-codegen/aws-models/global-accelerator.json b/codegen/sdk-codegen/aws-models/global-accelerator.json
index 3f8300a1bc4..7374c575f08 100644
--- a/codegen/sdk-codegen/aws-models/global-accelerator.json
+++ b/codegen/sdk-codegen/aws-models/global-accelerator.json
@@ -5860,6 +5860,12 @@
                         "smithy.api#documentation": "<p>The IP address type that an accelerator supports. For a standard accelerator, the value can be IPV4 or DUAL_STACK.</p>"
                     }
                 },
+                "IpAddresses": {
+                    "target": "com.amazonaws.globalaccelerator#IpAddresses",
+                    "traits": {
+                        "smithy.api#documentation": "<p>The IP addresses for an accelerator.</p>"
+                    }
+                },
                 "Enabled": {
                     "target": "com.amazonaws.globalaccelerator#GenericBoolean",
                     "traits": {
@@ -6094,6 +6100,12 @@
                         "smithy.api#documentation": "<p>The IP address type that an accelerator supports. For a custom routing accelerator, the value must be IPV4.</p>"
                     }
                 },
+                "IpAddresses": {
+                    "target": "com.amazonaws.globalaccelerator#IpAddresses",
+                    "traits": {
+                        "smithy.api#documentation": "<p>The IP addresses for an accelerator.</p>"
+                    }
+                },
                 "Enabled": {
                     "target": "com.amazonaws.globalaccelerator#GenericBoolean",
                     "traits": {
diff --git a/codegen/sdk-codegen/aws-models/glue.json b/codegen/sdk-codegen/aws-models/glue.json
index c9158662031..ce8f37793de 100644
--- a/codegen/sdk-codegen/aws-models/glue.json
+++ b/codegen/sdk-codegen/aws-models/glue.json
@@ -1655,6 +1655,16 @@
                 }
             }
         },
+        "com.amazonaws.glue#AWSManagedClientApplicationReference": {
+            "type": "string",
+            "traits": {
+                "smithy.api#length": {
+                    "min": 0,
+                    "max": 2048
+                },
+                "smithy.api#pattern": "^\\S+$"
+            }
+        },
         "com.amazonaws.glue#AccessDeniedException": {
             "type": "structure",
             "members": {
@@ -2340,6 +2350,111 @@
                 "smithy.api#pattern": "^[\\u0020-\\uD7FF\\uE000-\\uFFFD\\uD800\\uDC00-\\uDBFF\\uDFFF\\t]*$"
             }
         },
+        "com.amazonaws.glue#AuthenticationConfiguration": {
+            "type": "structure",
+            "members": {
+                "AuthenticationType": {
+                    "target": "com.amazonaws.glue#AuthenticationType",
+                    "traits": {
+                        "smithy.api#documentation": "<p>A structure containing the authentication configuration.</p>"
+                    }
+                },
+                "SecretArn": {
+                    "target": "com.amazonaws.glue#SecretArn",
+                    "traits": {
+                        "smithy.api#documentation": "<p>The secret manager ARN to store credentials.</p>"
+                    }
+                },
+                "OAuth2Properties": {
+                    "target": "com.amazonaws.glue#OAuth2Properties",
+                    "traits": {
+                        "smithy.api#documentation": "<p>The properties for OAuth2 authentication.</p>"
+                    }
+                }
+            },
+            "traits": {
+                "smithy.api#documentation": "<p>A structure containing the authentication configuration.</p>"
+            }
+        },
+        "com.amazonaws.glue#AuthenticationConfigurationInput": {
+            "type": "structure",
+            "members": {
+                "AuthenticationType": {
+                    "target": "com.amazonaws.glue#AuthenticationType",
+                    "traits": {
+                        "smithy.api#documentation": "<p>A structure containing the authentication configuration in the CreateConnection request.</p>"
+                    }
+                },
+                "SecretArn": {
+                    "target": "com.amazonaws.glue#SecretArn",
+                    "traits": {
+                        "smithy.api#documentation": "<p>The secret manager ARN to store credentials in the CreateConnection request.</p>"
+                    }
+                },
+                "OAuth2Properties": {
+                    "target": "com.amazonaws.glue#OAuth2PropertiesInput",
+                    "traits": {
+                        "smithy.api#documentation": "<p>The properties for OAuth2 authentication in the CreateConnection request.</p>"
+                    }
+                }
+            },
+            "traits": {
+                "smithy.api#documentation": "<p>A structure containing the authentication configuration in the CreateConnection request.</p>"
+            }
+        },
+        "com.amazonaws.glue#AuthenticationType": {
+            "type": "enum",
+            "members": {
+                "BASIC": {
+                    "target": "smithy.api#Unit",
+                    "traits": {
+                        "smithy.api#enumValue": "BASIC"
+                    }
+                },
+                "OAUTH2": {
+                    "target": "smithy.api#Unit",
+                    "traits": {
+                        "smithy.api#enumValue": "OAUTH2"
+                    }
+                },
+                "CUSTOM": {
+                    "target": "smithy.api#Unit",
+                    "traits": {
+                        "smithy.api#enumValue": "CUSTOM"
+                    }
+                }
+            }
+        },
+        "com.amazonaws.glue#AuthorizationCode": {
+            "type": "string",
+            "traits": {
+                "smithy.api#length": {
+                    "min": 1,
+                    "max": 4096
+                },
+                "smithy.api#pattern": "^\\S+$"
+            }
+        },
+        "com.amazonaws.glue#AuthorizationCodeProperties": {
+            "type": "structure",
+            "members": {
+                "AuthorizationCode": {
+                    "target": "com.amazonaws.glue#AuthorizationCode",
+                    "traits": {
+                        "smithy.api#documentation": "<p>An authorization code to be used in the third leg of the <code>AUTHORIZATION_CODE</code> grant workflow. This is a single-use code which becomes invalid once exchanged for an access token, thus it is acceptable to have this value as a request parameter.</p>"
+                    }
+                },
+                "RedirectUri": {
+                    "target": "com.amazonaws.glue#RedirectUri",
+                    "traits": {
+                        "smithy.api#documentation": "<p>The redirect URI where the user gets redirected to by authorization server when issuing an authorization code. The URI is subsequently used when the authorization code is exchanged for an access token.</p>"
+                    }
+                }
+            },
+            "traits": {
+                "smithy.api#documentation": "<p>The set of properties required for the the OAuth2 <code>AUTHORIZATION_CODE</code> grant type workflow.</p>"
+            }
+        },
         "com.amazonaws.glue#BackfillError": {
             "type": "structure",
             "members": {
@@ -6490,19 +6605,19 @@
                 "PhysicalConnectionRequirements": {
                     "target": "com.amazonaws.glue#PhysicalConnectionRequirements",
                     "traits": {
-                        "smithy.api#documentation": "<p>A map of physical connection requirements, such as virtual private cloud (VPC) and\n        <code>SecurityGroup</code>, that are needed to make this connection successfully.</p>"
+                        "smithy.api#documentation": "<p>The physical connection requirements, such as virtual private cloud (VPC) and <code>SecurityGroup</code>, that are needed to make this connection successfully.</p>"
                     }
                 },
                 "CreationTime": {
                     "target": "com.amazonaws.glue#Timestamp",
                     "traits": {
-                        "smithy.api#documentation": "<p>The time that this connection definition was created.</p>"
+                        "smithy.api#documentation": "<p>The timestamp of the time that this connection definition was created.</p>"
                     }
                 },
                 "LastUpdatedTime": {
                     "target": "com.amazonaws.glue#Timestamp",
                     "traits": {
-                        "smithy.api#documentation": "<p>The last time that this connection definition was updated.</p>"
+                        "smithy.api#documentation": "<p>The timestamp of the last time the connection definition was updated.</p>"
                     }
                 },
                 "LastUpdatedBy": {
@@ -6510,6 +6625,30 @@
                     "traits": {
                         "smithy.api#documentation": "<p>The user, group, or role that last updated this connection definition.</p>"
                     }
+                },
+                "Status": {
+                    "target": "com.amazonaws.glue#ConnectionStatus",
+                    "traits": {
+                        "smithy.api#documentation": "<p>The status of the connection. Can be one of: <code>READY</code>, <code>IN_PROGRESS</code>, or <code>FAILED</code>.</p>"
+                    }
+                },
+                "StatusReason": {
+                    "target": "com.amazonaws.glue#LongValueString",
+                    "traits": {
+                        "smithy.api#documentation": "<p>The reason for the connection status.</p>"
+                    }
+                },
+                "LastConnectionValidationTime": {
+                    "target": "com.amazonaws.glue#Timestamp",
+                    "traits": {
+                        "smithy.api#documentation": "<p>A timestamp of the time this connection was last validated.</p>"
+                    }
+                },
+                "AuthenticationConfiguration": {
+                    "target": "com.amazonaws.glue#AuthenticationConfiguration",
+                    "traits": {
+                        "smithy.api#documentation": "<p>The authentication properties of the connection.</p>"
+                    }
                 }
             },
             "traits": {
@@ -6522,7 +6661,7 @@
                 "Name": {
                     "target": "com.amazonaws.glue#NameString",
                     "traits": {
-                        "smithy.api#documentation": "<p>The name of the connection. Connection will not function as expected without a name.</p>",
+                        "smithy.api#documentation": "<p>The name of the connection.</p>",
                         "smithy.api#required": {}
                     }
                 },
@@ -6535,7 +6674,7 @@
                 "ConnectionType": {
                     "target": "com.amazonaws.glue#ConnectionType",
                     "traits": {
-                        "smithy.api#documentation": "<p>The type of the connection. Currently, these types are supported:</p>\n         <ul>\n            <li>\n               <p>\n                  <code>JDBC</code> - Designates a connection to a database through Java Database Connectivity (JDBC).</p>\n               <p>\n                  <code>JDBC</code> Connections use the following ConnectionParameters.</p>\n               <ul>\n                  <li>\n                     <p>Required: All of (<code>HOST</code>, <code>PORT</code>, <code>JDBC_ENGINE</code>) or <code>JDBC_CONNECTION_URL</code>.</p>\n                  </li>\n                  <li>\n                     <p>Required: All of (<code>USERNAME</code>, <code>PASSWORD</code>) or <code>SECRET_ID</code>.</p>\n                  </li>\n                  <li>\n                     <p>Optional: <code>JDBC_ENFORCE_SSL</code>, <code>CUSTOM_JDBC_CERT</code>, <code>CUSTOM_JDBC_CERT_STRING</code>, <code>SKIP_CUSTOM_JDBC_CERT_VALIDATION</code>.  These parameters are used to configure SSL with JDBC.</p>\n                  </li>\n               </ul>\n            </li>\n            <li>\n               <p>\n                  <code>KAFKA</code> - Designates a connection to an Apache Kafka streaming platform.</p>\n               <p>\n                  <code>KAFKA</code> Connections use the following ConnectionParameters.</p>\n               <ul>\n                  <li>\n                     <p>Required: <code>KAFKA_BOOTSTRAP_SERVERS</code>.</p>\n                  </li>\n                  <li>\n                     <p>Optional: <code>KAFKA_SSL_ENABLED</code>, <code>KAFKA_CUSTOM_CERT</code>, <code>KAFKA_SKIP_CUSTOM_CERT_VALIDATION</code>. These parameters are used to configure SSL with <code>KAFKA</code>.</p>\n                  </li>\n                  <li>\n                     <p>Optional: <code>KAFKA_CLIENT_KEYSTORE</code>, <code>KAFKA_CLIENT_KEYSTORE_PASSWORD</code>, <code>KAFKA_CLIENT_KEY_PASSWORD</code>, <code>ENCRYPTED_KAFKA_CLIENT_KEYSTORE_PASSWORD</code>, <code>ENCRYPTED_KAFKA_CLIENT_KEY_PASSWORD</code>. These parameters are used to configure TLS client configuration with SSL in <code>KAFKA</code>.</p>\n                  </li>\n                  <li>\n                     <p>Optional: <code>KAFKA_SASL_MECHANISM</code>. Can be specified as <code>SCRAM-SHA-512</code>, <code>GSSAPI</code>, or <code>AWS_MSK_IAM</code>.</p>\n                  </li>\n                  <li>\n                     <p>Optional: <code>KAFKA_SASL_SCRAM_USERNAME</code>, <code>KAFKA_SASL_SCRAM_PASSWORD</code>, <code>ENCRYPTED_KAFKA_SASL_SCRAM_PASSWORD</code>. These parameters are used to configure SASL/SCRAM-SHA-512 authentication with <code>KAFKA</code>.</p>\n                  </li>\n                  <li>\n                     <p>Optional: <code>KAFKA_SASL_GSSAPI_KEYTAB</code>, <code>KAFKA_SASL_GSSAPI_KRB5_CONF</code>, <code>KAFKA_SASL_GSSAPI_SERVICE</code>, <code>KAFKA_SASL_GSSAPI_PRINCIPAL</code>. These parameters are used to configure SASL/GSSAPI authentication with <code>KAFKA</code>.</p>\n                  </li>\n               </ul>\n            </li>\n            <li>\n               <p>\n                  <code>MONGODB</code> - Designates a connection to a MongoDB document database.</p>\n               <p>\n                  <code>MONGODB</code> Connections use the following ConnectionParameters.</p>\n               <ul>\n                  <li>\n                     <p>Required: <code>CONNECTION_URL</code>.</p>\n                  </li>\n                  <li>\n                     <p>Required: All of (<code>USERNAME</code>, <code>PASSWORD</code>) or <code>SECRET_ID</code>.</p>\n                  </li>\n               </ul>\n            </li>\n            <li>\n               <p>\n                  <code>NETWORK</code> - Designates a network connection to a data source within an Amazon Virtual Private Cloud environment (Amazon VPC).</p>\n               <p>\n                  <code>NETWORK</code> Connections do not require ConnectionParameters. Instead, provide a PhysicalConnectionRequirements.</p>\n            </li>\n            <li>\n               <p>\n                  <code>MARKETPLACE</code> - Uses configuration settings contained in a connector purchased from Amazon Web Services Marketplace to read from and write to data stores that are not natively supported by Glue.</p>\n               <p>\n                  <code>MARKETPLACE</code> Connections use the following ConnectionParameters.</p>\n               <ul>\n                  <li>\n                     <p>Required: <code>CONNECTOR_TYPE</code>, <code>CONNECTOR_URL</code>, <code>CONNECTOR_CLASS_NAME</code>, <code>CONNECTION_URL</code>.</p>\n                  </li>\n                  <li>\n                     <p>Required for <code>JDBC</code>\n                        <code>CONNECTOR_TYPE</code> connections: All of (<code>USERNAME</code>, <code>PASSWORD</code>) or <code>SECRET_ID</code>.</p>\n                  </li>\n               </ul>\n            </li>\n            <li>\n               <p>\n                  <code>CUSTOM</code> - Uses configuration settings contained in a custom connector to read from and write to data stores that are not natively supported by Glue.</p>\n            </li>\n         </ul>\n         <p>\n            <code>SFTP</code> is not supported.</p>\n         <p>For more information about how optional ConnectionProperties are used to configure features in Glue, consult <a href=\"https://docs.aws.amazon.com/glue/latest/dg/connection-defining.html\">Glue connection properties</a>.</p>\n         <p>For more information about how optional ConnectionProperties are used to configure features in Glue Studio, consult <a href=\"https://docs.aws.amazon.com/glue/latest/ug/connectors-chapter.html\">Using connectors and connections</a>.</p>",
+                        "smithy.api#documentation": "<p>The type of the connection. Currently, these types are supported:</p>\n         <ul>\n            <li>\n               <p>\n                  <code>JDBC</code> - Designates a connection to a database through Java Database Connectivity (JDBC).</p>\n               <p>\n                  <code>JDBC</code> Connections use the following ConnectionParameters.</p>\n               <ul>\n                  <li>\n                     <p>Required: All of (<code>HOST</code>, <code>PORT</code>, <code>JDBC_ENGINE</code>) or <code>JDBC_CONNECTION_URL</code>.</p>\n                  </li>\n                  <li>\n                     <p>Required: All of (<code>USERNAME</code>, <code>PASSWORD</code>) or <code>SECRET_ID</code>.</p>\n                  </li>\n                  <li>\n                     <p>Optional: <code>JDBC_ENFORCE_SSL</code>, <code>CUSTOM_JDBC_CERT</code>, <code>CUSTOM_JDBC_CERT_STRING</code>, <code>SKIP_CUSTOM_JDBC_CERT_VALIDATION</code>.  These parameters are used to configure SSL with JDBC.</p>\n                  </li>\n               </ul>\n            </li>\n            <li>\n               <p>\n                  <code>KAFKA</code> - Designates a connection to an Apache Kafka streaming platform.</p>\n               <p>\n                  <code>KAFKA</code> Connections use the following ConnectionParameters.</p>\n               <ul>\n                  <li>\n                     <p>Required: <code>KAFKA_BOOTSTRAP_SERVERS</code>.</p>\n                  </li>\n                  <li>\n                     <p>Optional: <code>KAFKA_SSL_ENABLED</code>, <code>KAFKA_CUSTOM_CERT</code>, <code>KAFKA_SKIP_CUSTOM_CERT_VALIDATION</code>. These parameters are used to configure SSL with <code>KAFKA</code>.</p>\n                  </li>\n                  <li>\n                     <p>Optional: <code>KAFKA_CLIENT_KEYSTORE</code>, <code>KAFKA_CLIENT_KEYSTORE_PASSWORD</code>, <code>KAFKA_CLIENT_KEY_PASSWORD</code>, <code>ENCRYPTED_KAFKA_CLIENT_KEYSTORE_PASSWORD</code>, <code>ENCRYPTED_KAFKA_CLIENT_KEY_PASSWORD</code>. These parameters are used to configure TLS client configuration with SSL in <code>KAFKA</code>.</p>\n                  </li>\n                  <li>\n                     <p>Optional: <code>KAFKA_SASL_MECHANISM</code>. Can be specified as <code>SCRAM-SHA-512</code>, <code>GSSAPI</code>, or <code>AWS_MSK_IAM</code>.</p>\n                  </li>\n                  <li>\n                     <p>Optional: <code>KAFKA_SASL_SCRAM_USERNAME</code>, <code>KAFKA_SASL_SCRAM_PASSWORD</code>, <code>ENCRYPTED_KAFKA_SASL_SCRAM_PASSWORD</code>. These parameters are used to configure SASL/SCRAM-SHA-512 authentication with <code>KAFKA</code>.</p>\n                  </li>\n                  <li>\n                     <p>Optional: <code>KAFKA_SASL_GSSAPI_KEYTAB</code>, <code>KAFKA_SASL_GSSAPI_KRB5_CONF</code>, <code>KAFKA_SASL_GSSAPI_SERVICE</code>, <code>KAFKA_SASL_GSSAPI_PRINCIPAL</code>. These parameters are used to configure SASL/GSSAPI authentication with <code>KAFKA</code>.</p>\n                  </li>\n               </ul>\n            </li>\n            <li>\n               <p>\n                  <code>MONGODB</code> - Designates a connection to a MongoDB document database.</p>\n               <p>\n                  <code>MONGODB</code> Connections use the following ConnectionParameters.</p>\n               <ul>\n                  <li>\n                     <p>Required: <code>CONNECTION_URL</code>.</p>\n                  </li>\n                  <li>\n                     <p>Required: All of (<code>USERNAME</code>, <code>PASSWORD</code>) or <code>SECRET_ID</code>.</p>\n                  </li>\n               </ul>\n            </li>\n            <li>\n               <p>\n                  <code>SALESFORCE</code> - Designates a connection to Salesforce using OAuth authencation.</p>\n               <ul>\n                  <li>\n                     <p>Requires the <code>AuthenticationConfiguration</code> member to be configured.</p>\n                  </li>\n               </ul>\n            </li>\n            <li>\n               <p>\n                  <code>NETWORK</code> - Designates a network connection to a data source within an Amazon Virtual Private Cloud environment (Amazon VPC).</p>\n               <p>\n                  <code>NETWORK</code> Connections do not require ConnectionParameters. Instead, provide a PhysicalConnectionRequirements.</p>\n            </li>\n            <li>\n               <p>\n                  <code>MARKETPLACE</code> - Uses configuration settings contained in a connector purchased from Amazon Web Services Marketplace to read from and write to data stores that are not natively supported by Glue.</p>\n               <p>\n                  <code>MARKETPLACE</code> Connections use the following ConnectionParameters.</p>\n               <ul>\n                  <li>\n                     <p>Required: <code>CONNECTOR_TYPE</code>, <code>CONNECTOR_URL</code>, <code>CONNECTOR_CLASS_NAME</code>, <code>CONNECTION_URL</code>.</p>\n                  </li>\n                  <li>\n                     <p>Required for <code>JDBC</code>\n                        <code>CONNECTOR_TYPE</code> connections: All of (<code>USERNAME</code>, <code>PASSWORD</code>) or <code>SECRET_ID</code>.</p>\n                  </li>\n               </ul>\n            </li>\n            <li>\n               <p>\n                  <code>CUSTOM</code> - Uses configuration settings contained in a custom connector to read from and write to data stores that are not natively supported by Glue.</p>\n            </li>\n         </ul>\n         <p>\n            <code>SFTP</code> is not supported.</p>\n         <p>For more information about how optional ConnectionProperties are used to configure features in Glue, consult <a href=\"https://docs.aws.amazon.com/glue/latest/dg/connection-defining.html\">Glue connection properties</a>.</p>\n         <p>For more information about how optional ConnectionProperties are used to configure features in Glue Studio, consult <a href=\"https://docs.aws.amazon.com/glue/latest/ug/connectors-chapter.html\">Using connectors and connections</a>.</p>",
                         "smithy.api#required": {}
                     }
                 },
@@ -6555,7 +6694,20 @@
                 "PhysicalConnectionRequirements": {
                     "target": "com.amazonaws.glue#PhysicalConnectionRequirements",
                     "traits": {
-                        "smithy.api#documentation": "<p>A map of physical connection requirements, such as virtual private cloud (VPC) and\n        <code>SecurityGroup</code>, that are needed to successfully make this connection.</p>"
+                        "smithy.api#documentation": "<p>The physical connection requirements, such as virtual private cloud (VPC) and <code>SecurityGroup</code>, that are needed to successfully make this connection.</p>"
+                    }
+                },
+                "AuthenticationConfiguration": {
+                    "target": "com.amazonaws.glue#AuthenticationConfigurationInput",
+                    "traits": {
+                        "smithy.api#documentation": "<p>The authentication properties of the connection. Used for a Salesforce connection.</p>"
+                    }
+                },
+                "ValidateCredentials": {
+                    "target": "com.amazonaws.glue#Boolean",
+                    "traits": {
+                        "smithy.api#default": false,
+                        "smithy.api#documentation": "<p>A flag to validate the credentials during create connection. Used for a Salesforce connection. Default is true. </p>"
                     }
                 }
             },
@@ -6863,6 +7015,35 @@
                     "traits": {
                         "smithy.api#enumValue": "KAFKA_SASL_GSSAPI_PRINCIPAL"
                     }
+                },
+                "ROLE_ARN": {
+                    "target": "smithy.api#Unit",
+                    "traits": {
+                        "smithy.api#enumValue": "ROLE_ARN"
+                    }
+                }
+            }
+        },
+        "com.amazonaws.glue#ConnectionStatus": {
+            "type": "enum",
+            "members": {
+                "READY": {
+                    "target": "smithy.api#Unit",
+                    "traits": {
+                        "smithy.api#enumValue": "READY"
+                    }
+                },
+                "IN_PROGRESS": {
+                    "target": "smithy.api#Unit",
+                    "traits": {
+                        "smithy.api#enumValue": "IN_PROGRESS"
+                    }
+                },
+                "FAILED": {
+                    "target": "smithy.api#Unit",
+                    "traits": {
+                        "smithy.api#enumValue": "FAILED"
+                    }
                 }
             }
         },
@@ -6910,6 +7091,12 @@
                     "traits": {
                         "smithy.api#enumValue": "CUSTOM"
                     }
+                },
+                "SALESFORCE": {
+                    "target": "smithy.api#Unit",
+                    "traits": {
+                        "smithy.api#enumValue": "SALESFORCE"
+                    }
                 }
             }
         },
@@ -7847,7 +8034,14 @@
         },
         "com.amazonaws.glue#CreateConnectionResponse": {
             "type": "structure",
-            "members": {},
+            "members": {
+                "CreateConnectionStatus": {
+                    "target": "com.amazonaws.glue#ConnectionStatus",
+                    "traits": {
+                        "smithy.api#documentation": "<p>The status of the connection creation request. The request can take some time for certain authentication types, for example when creating an OAuth connection with token exchange over VPC.</p>"
+                    }
+                }
+            },
             "traits": {
                 "smithy.api#output": {}
             }
@@ -8719,7 +8913,7 @@
                 "Timeout": {
                     "target": "com.amazonaws.glue#Timeout",
                     "traits": {
-                        "smithy.api#documentation": "<p>The job timeout in minutes.  This is the maximum time that a job run\n      can consume resources before it is terminated and enters <code>TIMEOUT</code>\n      status. The default is 2,880 minutes (48 hours).</p>"
+                        "smithy.api#documentation": "<p>The job timeout in minutes.  This is the maximum time that a job run\n      can consume resources before it is terminated and enters <code>TIMEOUT</code>\n      status. The default is 2,880 minutes (48 hours) for batch jobs.</p>\n         <p>Streaming jobs must have timeout values less than 7 days or 10080 minutes. When the value is left blank, the job will be restarted after 7 days based if you have not setup a maintenance window. If you have setup maintenance window, it will be restarted during the maintenance window after 7 days.</p>"
                     }
                 },
                 "MaxCapacity": {
@@ -14413,6 +14607,30 @@
         "com.amazonaws.glue#FederationSourceErrorCode": {
             "type": "enum",
             "members": {
+                "AccessDeniedException": {
+                    "target": "smithy.api#Unit",
+                    "traits": {
+                        "smithy.api#enumValue": "AccessDeniedException"
+                    }
+                },
+                "EntityNotFoundException": {
+                    "target": "smithy.api#Unit",
+                    "traits": {
+                        "smithy.api#enumValue": "EntityNotFoundException"
+                    }
+                },
+                "InvalidCredentialsException": {
+                    "target": "smithy.api#Unit",
+                    "traits": {
+                        "smithy.api#enumValue": "InvalidCredentialsException"
+                    }
+                },
+                "InvalidInputException": {
+                    "target": "smithy.api#Unit",
+                    "traits": {
+                        "smithy.api#enumValue": "InvalidInputException"
+                    }
+                },
                 "InvalidResponseException": {
                     "target": "smithy.api#Unit",
                     "traits": {
@@ -14437,6 +14655,12 @@
                         "smithy.api#enumValue": "InternalServiceException"
                     }
                 },
+                "PartialFailureException": {
+                    "target": "smithy.api#Unit",
+                    "traits": {
+                        "smithy.api#enumValue": "PartialFailureException"
+                    }
+                },
                 "ThrottlingException": {
                     "target": "smithy.api#Unit",
                     "traits": {
@@ -21999,7 +22223,7 @@
                 "Timeout": {
                     "target": "com.amazonaws.glue#Timeout",
                     "traits": {
-                        "smithy.api#documentation": "<p>The job timeout in minutes.  This is the maximum time that a job run\n      can consume resources before it is terminated and enters <code>TIMEOUT</code>\n      status. The default is 2,880 minutes (48 hours).</p>"
+                        "smithy.api#documentation": "<p>The job timeout in minutes.  This is the maximum time that a job run\n      can consume resources before it is terminated and enters <code>TIMEOUT</code>\n      status. The default is 2,880 minutes (48 hours) for batch jobs.</p>\n         <p>Streaming jobs must have timeout values less than 7 days or 10080 minutes. When the value is left blank, the job will be restarted after 7 days based if you have not setup a maintenance window. If you have setup maintenance window, it will be restarted during the maintenance window after 7 days.</p>"
                     }
                 },
                 "MaxCapacity": {
@@ -22343,7 +22567,7 @@
                 "Timeout": {
                     "target": "com.amazonaws.glue#Timeout",
                     "traits": {
-                        "smithy.api#documentation": "<p>The <code>JobRun</code> timeout in minutes. This is the maximum time that a job run can\n      consume resources before it is terminated and enters <code>TIMEOUT</code> status. This value overrides the timeout value set in the parent job.</p>\n         <p>The maximum value for timeout for batch jobs is 7 days or 10080 minutes. The default is 2880 minutes (48 hours) for batch jobs.</p>\n         <p>Any existing Glue jobs that have a greater timeout value are defaulted to 7 days. For instance you have specified a timeout of 20 days for a batch job, it will be stopped on the 7th day.</p>\n         <p>Streaming jobs must have timeout values less than 7 days or 10080 minutes. When the value is left blank, the job will be restarted after 7 days based if you have not setup a maintenance window. If you have setup maintenance window, it will be restarted during the maintenance window after 7 days.</p>"
+                        "smithy.api#documentation": "<p>The <code>JobRun</code> timeout in minutes. This is the maximum time that a job run can\n      consume resources before it is terminated and enters <code>TIMEOUT</code> status. This value overrides the timeout value set in the parent job.</p>\n         <p>Streaming jobs must have timeout values less than 7 days or 10080 minutes. When the value is left blank, the job will be restarted after 7 days based if you have not setup a maintenance window. If you have setup maintenance window, it will be restarted during the maintenance window after 7 days.</p>"
                     }
                 },
                 "MaxCapacity": {
@@ -22559,7 +22783,7 @@
                 "Timeout": {
                     "target": "com.amazonaws.glue#Timeout",
                     "traits": {
-                        "smithy.api#documentation": "<p>The job timeout in minutes.  This is the maximum time that a job run\n      can consume resources before it is terminated and enters <code>TIMEOUT</code>\n      status. The default is 2,880 minutes (48 hours).</p>"
+                        "smithy.api#documentation": "<p>The job timeout in minutes.  This is the maximum time that a job run\n      can consume resources before it is terminated and enters <code>TIMEOUT</code>\n      status. The default is 2,880 minutes (48 hours) for batch jobs.</p>\n         <p>Streaming jobs must have timeout values less than 7 days or 10080 minutes. When the value is left blank, the job will be restarted after 7 days based if you have not setup a maintenance window. If you have setup maintenance window, it will be restarted during the maintenance window after 7 days.</p>"
                     }
                 },
                 "MaxCapacity": {
@@ -25014,6 +25238,15 @@
                 "smithy.api#default": 0
             }
         },
+        "com.amazonaws.glue#LongValueString": {
+            "type": "string",
+            "traits": {
+                "smithy.api#length": {
+                    "min": 1,
+                    "max": 16384
+                }
+            }
+        },
         "com.amazonaws.glue#MLTransform": {
             "type": "structure",
             "members": {
@@ -25964,6 +26197,119 @@
         "com.amazonaws.glue#NullableString": {
             "type": "string"
         },
+        "com.amazonaws.glue#OAuth2ClientApplication": {
+            "type": "structure",
+            "members": {
+                "UserManagedClientApplicationClientId": {
+                    "target": "com.amazonaws.glue#UserManagedClientApplicationClientId",
+                    "traits": {
+                        "smithy.api#documentation": "<p>The client application clientID if the ClientAppType is <code>USER_MANAGED</code>.</p>"
+                    }
+                },
+                "AWSManagedClientApplicationReference": {
+                    "target": "com.amazonaws.glue#AWSManagedClientApplicationReference",
+                    "traits": {
+                        "smithy.api#documentation": "<p>The reference to the SaaS-side client app that is Amazon Web Services managed.</p>"
+                    }
+                }
+            },
+            "traits": {
+                "smithy.api#documentation": "<p>The OAuth2 client app used for the connection.</p>"
+            }
+        },
+        "com.amazonaws.glue#OAuth2GrantType": {
+            "type": "enum",
+            "members": {
+                "AUTHORIZATION_CODE": {
+                    "target": "smithy.api#Unit",
+                    "traits": {
+                        "smithy.api#enumValue": "AUTHORIZATION_CODE"
+                    }
+                },
+                "CLIENT_CREDENTIALS": {
+                    "target": "smithy.api#Unit",
+                    "traits": {
+                        "smithy.api#enumValue": "CLIENT_CREDENTIALS"
+                    }
+                },
+                "JWT_BEARER": {
+                    "target": "smithy.api#Unit",
+                    "traits": {
+                        "smithy.api#enumValue": "JWT_BEARER"
+                    }
+                }
+            }
+        },
+        "com.amazonaws.glue#OAuth2Properties": {
+            "type": "structure",
+            "members": {
+                "OAuth2GrantType": {
+                    "target": "com.amazonaws.glue#OAuth2GrantType",
+                    "traits": {
+                        "smithy.api#documentation": "<p>The OAuth2 grant type. For example, <code>AUTHORIZATION_CODE</code>, <code>JWT_BEARER</code>, or <code>CLIENT_CREDENTIALS</code>.</p>"
+                    }
+                },
+                "OAuth2ClientApplication": {
+                    "target": "com.amazonaws.glue#OAuth2ClientApplication",
+                    "traits": {
+                        "smithy.api#documentation": "<p>The client application type. For example, AWS_MANAGED or USER_MANAGED.</p>"
+                    }
+                },
+                "TokenUrl": {
+                    "target": "com.amazonaws.glue#TokenUrl",
+                    "traits": {
+                        "smithy.api#documentation": "<p>The URL of the provider's authentication server, to exchange an authorization code for an access token.</p>"
+                    }
+                },
+                "TokenUrlParametersMap": {
+                    "target": "com.amazonaws.glue#TokenUrlParametersMap",
+                    "traits": {
+                        "smithy.api#documentation": "<p>A map of parameters that are added to the token <code>GET</code> request.</p>"
+                    }
+                }
+            },
+            "traits": {
+                "smithy.api#documentation": "<p>A structure containing properties for OAuth2 authentication.</p>"
+            }
+        },
+        "com.amazonaws.glue#OAuth2PropertiesInput": {
+            "type": "structure",
+            "members": {
+                "OAuth2GrantType": {
+                    "target": "com.amazonaws.glue#OAuth2GrantType",
+                    "traits": {
+                        "smithy.api#documentation": "<p>The OAuth2 grant type in the CreateConnection request. For example, <code>AUTHORIZATION_CODE</code>, <code>JWT_BEARER</code>, or <code>CLIENT_CREDENTIALS</code>.</p>"
+                    }
+                },
+                "OAuth2ClientApplication": {
+                    "target": "com.amazonaws.glue#OAuth2ClientApplication",
+                    "traits": {
+                        "smithy.api#documentation": "<p>The client application type in the CreateConnection request. For example, <code>AWS_MANAGED</code> or <code>USER_MANAGED</code>.</p>"
+                    }
+                },
+                "TokenUrl": {
+                    "target": "com.amazonaws.glue#TokenUrl",
+                    "traits": {
+                        "smithy.api#documentation": "<p>The URL of the provider's authentication server, to exchange an authorization code for an access token.</p>"
+                    }
+                },
+                "TokenUrlParametersMap": {
+                    "target": "com.amazonaws.glue#TokenUrlParametersMap",
+                    "traits": {
+                        "smithy.api#documentation": "<p>A map of parameters that are added to the token <code>GET</code> request.</p>"
+                    }
+                },
+                "AuthorizationCodeProperties": {
+                    "target": "com.amazonaws.glue#AuthorizationCodeProperties",
+                    "traits": {
+                        "smithy.api#documentation": "<p>The set of properties required for the the OAuth2 <code>AUTHORIZATION_CODE</code> grant type.</p>"
+                    }
+                }
+            },
+            "traits": {
+                "smithy.api#documentation": "<p>A structure containing properties for OAuth2 in the CreateConnection request.</p>"
+            }
+        },
         "com.amazonaws.glue#OneInput": {
             "type": "list",
             "member": {
@@ -26847,12 +27193,12 @@
                 "AvailabilityZone": {
                     "target": "com.amazonaws.glue#NameString",
                     "traits": {
-                        "smithy.api#documentation": "<p>The connection's Availability Zone. This field is redundant because the specified subnet\n      implies the Availability Zone to be used. Currently the field must be populated, but it will\n      be deprecated in the future.</p>"
+                        "smithy.api#documentation": "<p>The connection's Availability Zone.</p>"
                     }
                 }
             },
             "traits": {
-                "smithy.api#documentation": "<p>Specifies the physical requirements for a connection.</p>"
+                "smithy.api#documentation": "<p>The OAuth client app in GetConnection response.</p>"
             }
         },
         "com.amazonaws.glue#PiiType": {
@@ -27735,6 +28081,16 @@
                 "smithy.api#documentation": "<p>When crawling an Amazon S3 data source after the first crawl is complete, specifies whether to crawl the entire dataset again or to crawl only folders that were added since the last crawler run. For more information, see <a href=\"https://docs.aws.amazon.com/glue/latest/dg/incremental-crawls.html\">Incremental Crawls in Glue</a> in the developer guide.</p>"
             }
         },
+        "com.amazonaws.glue#RedirectUri": {
+            "type": "string",
+            "traits": {
+                "smithy.api#length": {
+                    "min": 0,
+                    "max": 512
+                },
+                "smithy.api#pattern": "^(https?):\\/\\/[^\\s/$.?#].[^\\s]*$"
+            }
+        },
         "com.amazonaws.glue#RedshiftSource": {
             "type": "structure",
             "members": {
@@ -30190,6 +30546,12 @@
                 "smithy.api#output": {}
             }
         },
+        "com.amazonaws.glue#SecretArn": {
+            "type": "string",
+            "traits": {
+                "smithy.api#pattern": "^arn:aws(-(cn|us-gov|iso(-[bef])?))?:secretsmanager:.*$"
+            }
+        },
         "com.amazonaws.glue#SecurityConfiguration": {
             "type": "structure",
             "members": {
@@ -31869,7 +32231,7 @@
                 "Timeout": {
                     "target": "com.amazonaws.glue#Timeout",
                     "traits": {
-                        "smithy.api#documentation": "<p>The <code>JobRun</code> timeout in minutes. This is the maximum time that a job run can\n      consume resources before it is terminated and enters <code>TIMEOUT</code> status. This value overrides the timeout value set in the parent job.</p>\n         <p>Streaming jobs do not have a timeout. The default for non-streaming jobs is 2,880 minutes (48 hours).</p>"
+                        "smithy.api#documentation": "<p>The <code>JobRun</code> timeout in minutes. This is the maximum time that a job run can\n      consume resources before it is terminated and enters <code>TIMEOUT</code> status. This value overrides the timeout value set in the parent job. </p>\n         <p>Streaming jobs must have timeout values less than 7 days or 10080 minutes. When the value is left blank, the job will be restarted after 7 days based if you have not setup a maintenance window. If you have setup maintenance window, it will be restarted during the maintenance window after 7 days.</p>"
                     }
                 },
                 "MaxCapacity": {
@@ -33848,6 +34210,43 @@
         "com.amazonaws.glue#Token": {
             "type": "string"
         },
+        "com.amazonaws.glue#TokenUrl": {
+            "type": "string",
+            "traits": {
+                "smithy.api#length": {
+                    "min": 0,
+                    "max": 256
+                },
+                "smithy.api#pattern": "^(https?)://[-a-zA-Z0-9+&@#/%?=~_|!:,.;]*[-a-zA-Z0-9+&@#/%=~_|]$"
+            }
+        },
+        "com.amazonaws.glue#TokenUrlParameterKey": {
+            "type": "string",
+            "traits": {
+                "smithy.api#length": {
+                    "min": 1,
+                    "max": 128
+                }
+            }
+        },
+        "com.amazonaws.glue#TokenUrlParameterValue": {
+            "type": "string",
+            "traits": {
+                "smithy.api#length": {
+                    "min": 1,
+                    "max": 512
+                }
+            }
+        },
+        "com.amazonaws.glue#TokenUrlParametersMap": {
+            "type": "map",
+            "key": {
+                "target": "com.amazonaws.glue#TokenUrlParameterKey"
+            },
+            "value": {
+                "target": "com.amazonaws.glue#TokenUrlParameterValue"
+            }
+        },
         "com.amazonaws.glue#Topk": {
             "type": "integer",
             "traits": {
@@ -36685,6 +37084,16 @@
                 "target": "com.amazonaws.glue#UserDefinedFunction"
             }
         },
+        "com.amazonaws.glue#UserManagedClientApplicationClientId": {
+            "type": "string",
+            "traits": {
+                "smithy.api#length": {
+                    "min": 0,
+                    "max": 2048
+                },
+                "smithy.api#pattern": "^\\S+$"
+            }
+        },
         "com.amazonaws.glue#ValidationException": {
             "type": "structure",
             "members": {
@@ -36853,7 +37262,7 @@
                 "ViewExpandedText": {
                     "target": "com.amazonaws.glue#ViewTextString",
                     "traits": {
-                        "smithy.api#documentation": "<p>The expanded SQL for the view. This SQL is used by engines while processing a query on a view. Engines may perform operations during view creation to transform <code>ViewOriginalText</code> to <code>ViewExpandedText</code>. For example:</p>\n         <ul>\n            <li>\n               <p>Fully qualify identifiers: <code>SELECT * from table1 → SELECT * from db1.table1</code>\n               </p>\n            </li>\n         </ul>"
+                        "smithy.api#documentation": "<p>The expanded SQL for the view. This SQL is used by engines while processing a query on a view. Engines may perform operations during view creation to transform <code>ViewOriginalText</code> to <code>ViewExpandedText</code>. For example:</p>\n         <ul>\n            <li>\n               <p>Fully qualified identifiers: <code>SELECT * from table1 -> SELECT * from db1.table1</code>\n               </p>\n            </li>\n         </ul>"
                     }
                 },
                 "IsStale": {
diff --git a/codegen/sdk-codegen/aws-models/s3.json b/codegen/sdk-codegen/aws-models/s3.json
index 7279b69e8f5..3b48bc38581 100644
--- a/codegen/sdk-codegen/aws-models/s3.json
+++ b/codegen/sdk-codegen/aws-models/s3.json
@@ -647,6 +647,11 @@
                             "documentation": "The S3 Prefix used to send the request. This is an optional parameter that will be set automatically for operations that are scoped to an S3 Prefix.",
                             "type": "String"
                         },
+                        "CopySource": {
+                            "required": false,
+                            "documentation": "The Copy Source used for Copy Object request. This is an optional parameter that will be set automatically for operations that are scoped to Copy Source.",
+                            "type": "String"
+                        },
                         "DisableAccessPoints": {
                             "required": false,
                             "documentation": "Internal parameter to disable Access Point Buckets",
@@ -10663,6 +10668,33 @@
                                 "Key": "key"
                             }
                         },
+                        {
+                            "documentation": "virtual addressing, aws-global region with Copy Source, and Key uses the global endpoint. Copy Source and Key parameters should not be used in endpoint evaluation.",
+                            "expect": {
+                                "endpoint": {
+                                    "properties": {
+                                        "authSchemes": [
+                                            {
+                                                "name": "sigv4",
+                                                "signingName": "s3",
+                                                "signingRegion": "us-east-1",
+                                                "disableDoubleEncoding": true
+                                            }
+                                        ]
+                                    },
+                                    "url": "https://bucket-name.s3.amazonaws.com"
+                                }
+                            },
+                            "params": {
+                                "Region": "aws-global",
+                                "Bucket": "bucket-name",
+                                "UseFIPS": false,
+                                "UseDualStack": false,
+                                "Accelerate": false,
+                                "CopySource": "/copy/source",
+                                "Key": "key"
+                            }
+                        },
                         {
                             "documentation": "virtual addressing, aws-global region with fips uses the regional fips endpoint",
                             "expect": {
@@ -18844,7 +18876,10 @@
                     "traits": {
                         "smithy.api#documentation": "<p>Specifies the source object for the copy operation. The source object \n         can be up to 5 GB. If the source object is an object that was uploaded by using a multipart upload, the object copy will be a single part object after the source object is copied to the destination bucket.</p>\n         <p>You specify the value of the copy source in one of two\n         formats, depending on whether you want to access the source object through an <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/userguide/access-points.html\">access point</a>:</p>\n         <ul>\n            <li>\n               <p>For objects not accessed through an access point, specify the name of the source bucket\n               and the key of the source object, separated by a slash (/). For example, to copy the\n               object <code>reports/january.pdf</code> from the general purpose bucket \n               <code>awsexamplebucket</code>, use <code>awsexamplebucket/reports/january.pdf</code>.\n               The value must be URL-encoded. To copy the\n               object <code>reports/january.pdf</code> from the directory bucket \n               <code>awsexamplebucket--use1-az5--x-s3</code>, use <code>awsexamplebucket--use1-az5--x-s3/reports/january.pdf</code>.\n               The value must be URL-encoded.</p>\n            </li>\n            <li>\n               <p>For objects accessed through access points, specify the Amazon Resource Name (ARN) of the object as accessed through the access point, in the format <code>arn:aws:s3:<Region>:<account-id>:accesspoint/<access-point-name>/object/<key></code>. For example, to copy the object <code>reports/january.pdf</code> through access point <code>my-access-point</code> owned by account <code>123456789012</code> in Region <code>us-west-2</code>, use the URL encoding of <code>arn:aws:s3:us-west-2:123456789012:accesspoint/my-access-point/object/reports/january.pdf</code>. The value must be URL encoded.</p>\n               <note>\n                  <ul>\n                     <li>\n                        <p>Amazon S3 supports copy operations using Access points only when the source and destination buckets are in the same Amazon Web Services Region.</p>\n                     </li>\n                     <li>\n                        <p>Access points are not supported by directory buckets.</p>\n                     </li>\n                  </ul>\n               </note>\n               <p>Alternatively, for objects accessed through Amazon S3 on Outposts, specify the ARN of the object as accessed in the format <code>arn:aws:s3-outposts:<Region>:<account-id>:outpost/<outpost-id>/object/<key></code>. For example, to copy the object <code>reports/january.pdf</code> through outpost <code>my-outpost</code> owned by account <code>123456789012</code> in Region <code>us-west-2</code>, use the URL encoding of <code>arn:aws:s3-outposts:us-west-2:123456789012:outpost/my-outpost/object/reports/january.pdf</code>. The value must be URL-encoded.  </p>\n            </li>\n         </ul>\n         <p>If your source bucket versioning is enabled, the <code>x-amz-copy-source</code> header by default identifies the current\n         version of an object to copy. If the current version is a delete marker, Amazon S3\n         behaves as if the object was deleted. To copy a different version, use the\n         <code>versionId</code> query parameter. Specifically, append <code>?versionId=<version-id></code>\n         to the value (for example,\n         <code>awsexamplebucket/reports/january.pdf?versionId=QUpfdndhfd8438MNFDN93jdnJFkdmqnh893</code>).\n         If you don't specify a version ID, Amazon S3 copies the latest version of the source\n         object.</p>\n         <p>If you enable versioning on the destination bucket, Amazon S3 generates a unique version\n         ID for the copied object. This version ID is different from the version ID\n         of the source object. Amazon S3 returns the version ID of the copied object in the\n         <code>x-amz-version-id</code> response header in the response.</p>\n         <p>If you do not enable versioning or suspend it on the destination bucket, the version\n         ID that Amazon S3 generates in the\n         <code>x-amz-version-id</code> response header is always null.</p>\n         <note>\n            <p>\n               <b>Directory buckets</b> - S3 Versioning isn't enabled and supported for directory buckets.</p>\n         </note>",
                         "smithy.api#httpHeader": "x-amz-copy-source",
-                        "smithy.api#required": {}
+                        "smithy.api#required": {},
+                        "smithy.rules#contextParam": {
+                            "name": "CopySource"
+                        }
                     }
                 },
                 "CopySourceIfMatch": {
@@ -18915,7 +18950,10 @@
                     "traits": {
                         "smithy.api#documentation": "<p>The key of the destination object.</p>",
                         "smithy.api#httpLabel": {},
-                        "smithy.api#required": {}
+                        "smithy.api#required": {},
+                        "smithy.rules#contextParam": {
+                            "name": "Key"
+                        }
                     }
                 },
                 "Metadata": {
@@ -30612,19 +30650,31 @@
                 "smithy.api#documentation": "<p>Adds an object to a bucket.</p>\n         <note>\n            <ul>\n               <li>\n                  <p>Amazon S3 never adds partial objects; if you receive a success response, Amazon S3 added the\n               entire object to the bucket. You cannot use <code>PutObject</code> to only update a\n               single piece of metadata for an existing object. You must put the entire object with\n               updated metadata if you want to update some values.</p>\n               </li>\n               <li>\n                  <p>If your bucket uses the bucket owner enforced setting for Object Ownership, ACLs are disabled and no longer affect permissions. All\n                  objects written to the bucket by any account will be owned by the bucket owner.</p>\n               </li>\n               <li>\n                  <p>\n                     <b>Directory buckets</b> - For directory buckets, you must make requests for this API operation to the Zonal endpoint. These endpoints support virtual-hosted-style requests in the format <code>https://<i>bucket_name</i>.s3express-<i>az_id</i>.<i>region</i>.amazonaws.com/<i>key-name</i>\n                     </code>. Path-style requests are not supported. For more information, see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-express-Regions-and-Zones.html\">Regional and Zonal endpoints</a> in the\n    <i>Amazon S3 User Guide</i>.</p>\n               </li>\n            </ul>\n         </note>\n         <p>Amazon S3 is a distributed system. If it receives multiple write requests for the same object\n         simultaneously, it overwrites all but the last object written. However, Amazon S3 provides features that can modify this behavior:</p>\n         <ul>\n            <li>\n               <p>\n                  <b>S3 Object Lock</b> - To prevent objects from\n            being deleted or overwritten, you can use <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/userguide/object-lock.html\">Amazon S3 Object\n               Lock</a> in the <i>Amazon S3 User Guide</i>.</p>\n               <note>\n                  <p>This functionality is not supported for directory buckets.</p>\n               </note>\n            </li>\n            <li>\n               <p>\n                  <b>S3 Versioning</b> - When you enable\n            versioning for a bucket, if Amazon S3 receives multiple write requests for the same object\n            simultaneously, it stores all versions of the objects. For each write request that is made to the same object, Amazon S3 automatically generates a unique version ID\n            of that object being stored in Amazon S3. \n           You can retrieve, replace, or delete any version of the object. For more information about versioning, see\n            <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/dev/AddingObjectstoVersioningEnabledBuckets.html\">Adding Objects to\n               Versioning-Enabled Buckets</a> in the <i>Amazon S3\n                  User Guide</i>. For information about returning the versioning state\n            of a bucket, see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketVersioning.html\">GetBucketVersioning</a>. </p>\n               <note>\n                  <p>This functionality is not supported for directory buckets.</p>\n               </note>\n            </li>\n         </ul>\n         <dl>\n            <dt>Permissions</dt>\n            <dd>\n               <ul>\n                  <li>\n                     <p>\n                        <b>General purpose bucket permissions</b> - The following permissions are required in your policies when your \n                        <code>PutObject</code> request includes specific headers.</p>\n                     <ul>\n                        <li>\n                           <p>\n                              <b>\n                                 <code>s3:PutObject</code>\n                              </b> - To successfully complete the <code>PutObject</code> request, you must always have the <code>s3:PutObject</code> permission on a bucket to add an object\n                                 to it.</p>\n                        </li>\n                        <li>\n                           <p>\n                              <b>\n                                 <code>s3:PutObjectAcl</code>\n                              </b> - To successfully change the objects ACL of your <code>PutObject</code> request, you must have the <code>s3:PutObjectAcl</code>.</p>\n                        </li>\n                        <li>\n                           <p>\n                              <b>\n                                 <code>s3:PutObjectTagging</code>\n                              </b> - To successfully set the tag-set with your <code>PutObject</code> request, you\n                                 must have the <code>s3:PutObjectTagging</code>.</p>\n                        </li>\n                     </ul>\n                  </li>\n                  <li>\n                     <p>\n                        <b>Directory bucket permissions</b> - To grant access to this API operation on a directory bucket, we recommend that you use the <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_CreateSession.html\">\n                           <code>CreateSession</code>\n                        </a> API operation for session-based authorization. Specifically, you grant the <code>s3express:CreateSession</code> permission to the directory bucket in a bucket policy or an IAM identity-based policy. Then, you make the <code>CreateSession</code> API call on the bucket to obtain a session token. With the session token in your request header, you can make API requests to this operation. After the session token expires, you make another <code>CreateSession</code> API call to generate a new session token for use. \nAmazon Web Services CLI or SDKs create session and refresh the session token automatically to avoid service interruptions when a session expires. For more information about authorization, see <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_CreateSession.html\">\n                           <code>CreateSession</code>\n                        </a>.</p>\n                  </li>\n               </ul>\n            </dd>\n            <dt>Data integrity with Content-MD5</dt>\n            <dd>\n               <ul>\n                  <li>\n                     <p>\n                        <b>General purpose bucket</b> - To ensure that data is not corrupted traversing the network, use the\n                    <code>Content-MD5</code> header. When you use this header, Amazon S3 checks the object\n                    against the provided MD5 value and, if they do not match, Amazon S3 returns an error. Alternatively, when the object's ETag is its MD5 digest, \n                    you can calculate the MD5 while putting the object to Amazon S3 and compare the returned ETag to\n                    the calculated MD5 value.</p>\n                  </li>\n                  <li>\n                     <p>\n                        <b>Directory bucket</b> - This functionality is not supported for directory buckets.</p>\n                  </li>\n               </ul>\n            </dd>\n            <dt>HTTP Host header syntax</dt>\n            <dd>\n               <p>\n                  <b>Directory buckets </b> - The HTTP Host header syntax is <code>\n                     <i>Bucket_name</i>.s3express-<i>az_id</i>.<i>region</i>.amazonaws.com</code>.</p>\n            </dd>\n         </dl>\n         <p>For more information about related Amazon S3 APIs, see the following:</p>\n         <ul>\n            <li>\n               <p>\n                  <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_CopyObject.html\">CopyObject</a>\n               </p>\n            </li>\n            <li>\n               <p>\n                  <a href=\"https://docs.aws.amazon.com/AmazonS3/latest/API/API_DeleteObject.html\">DeleteObject</a>\n               </p>\n            </li>\n         </ul>",
                 "smithy.api#examples": [
                     {
-                        "title": "To upload object and specify user-defined metadata",
-                        "documentation": "The following example creates an object. The request also specifies optional metadata. If the bucket is versioning enabled, S3 returns version ID in response.",
+                        "title": "To upload an object and specify server-side encryption and object tags",
+                        "documentation": "The following example uploads an object. The request specifies the optional server-side encryption option. The request also specifies optional object tags. If the bucket is versioning enabled, S3 returns version ID in response.",
                         "input": {
                             "Body": "filetoupload",
                             "Bucket": "examplebucket",
                             "Key": "exampleobject",
-                            "Metadata": {
-                                "metadata1": "value1",
-                                "metadata2": "value2"
-                            }
+                            "ServerSideEncryption": "AES256",
+                            "Tagging": "key1=value1&key2=value2"
                         },
                         "output": {
-                            "VersionId": "pSKidl4pHBiNwukdbcPXAIs.sshFFOc0",
+                            "VersionId": "Ri.vC6qVlA4dEnjgRV4ZHsHoFIjqEMNt",
+                            "ETag": "\"6805f2cfc46c0f04559748bb039d69ae\"",
+                            "ServerSideEncryption": "AES256"
+                        }
+                    },
+                    {
+                        "title": "To create an object.",
+                        "documentation": "The following example creates an object. If the bucket is versioning enabled, S3 returns version ID in response.",
+                        "input": {
+                            "Body": "filetoupload",
+                            "Bucket": "examplebucket",
+                            "Key": "objectkey"
+                        },
+                        "output": {
+                            "VersionId": "Bvq0EDKxOcXLJXNo_Lkz37eM3R4pfzyQ",
                             "ETag": "\"6805f2cfc46c0f04559748bb039d69ae\""
                         }
                     },
@@ -30659,28 +30709,19 @@
                         }
                     },
                     {
-                        "title": "To create an object.",
-                        "documentation": "The following example creates an object. If the bucket is versioning enabled, S3 returns version ID in response.",
+                        "title": "To upload object and specify user-defined metadata",
+                        "documentation": "The following example creates an object. The request also specifies optional metadata. If the bucket is versioning enabled, S3 returns version ID in response.",
                         "input": {
                             "Body": "filetoupload",
                             "Bucket": "examplebucket",
-                            "Key": "objectkey"
-                        },
-                        "output": {
-                            "VersionId": "Bvq0EDKxOcXLJXNo_Lkz37eM3R4pfzyQ",
-                            "ETag": "\"6805f2cfc46c0f04559748bb039d69ae\""
-                        }
-                    },
-                    {
-                        "title": "To upload an object",
-                        "documentation": "The following example uploads an object to a versioning-enabled bucket. The source file is specified using Windows file syntax. S3 returns VersionId of the newly created object.",
-                        "input": {
-                            "Body": "HappyFace.jpg",
-                            "Bucket": "examplebucket",
-                            "Key": "HappyFace.jpg"
+                            "Key": "exampleobject",
+                            "Metadata": {
+                                "metadata1": "value1",
+                                "metadata2": "value2"
+                            }
                         },
                         "output": {
-                            "VersionId": "tpf3zF08nBplQK1XLOefGskR7mGDwcDk",
+                            "VersionId": "pSKidl4pHBiNwukdbcPXAIs.sshFFOc0",
                             "ETag": "\"6805f2cfc46c0f04559748bb039d69ae\""
                         }
                     },
@@ -30699,19 +30740,16 @@
                         }
                     },
                     {
-                        "title": "To upload an object and specify server-side encryption and object tags",
-                        "documentation": "The following example uploads an object. The request specifies the optional server-side encryption option. The request also specifies optional object tags. If the bucket is versioning enabled, S3 returns version ID in response.",
+                        "title": "To upload an object",
+                        "documentation": "The following example uploads an object to a versioning-enabled bucket. The source file is specified using Windows file syntax. S3 returns VersionId of the newly created object.",
                         "input": {
-                            "Body": "filetoupload",
+                            "Body": "HappyFace.jpg",
                             "Bucket": "examplebucket",
-                            "Key": "exampleobject",
-                            "ServerSideEncryption": "AES256",
-                            "Tagging": "key1=value1&key2=value2"
+                            "Key": "HappyFace.jpg"
                         },
                         "output": {
-                            "VersionId": "Ri.vC6qVlA4dEnjgRV4ZHsHoFIjqEMNt",
-                            "ETag": "\"6805f2cfc46c0f04559748bb039d69ae\"",
-                            "ServerSideEncryption": "AES256"
+                            "VersionId": "tpf3zF08nBplQK1XLOefGskR7mGDwcDk",
+                            "ETag": "\"6805f2cfc46c0f04559748bb039d69ae\""
                         }
                     }
                 ],