diff --git a/.changes/1.27.13.json b/.changes/1.27.13.json
new file mode 100644
index 0000000000..413ba8c5f3
--- /dev/null
+++ b/.changes/1.27.13.json
@@ -0,0 +1,17 @@
+[
+  {
+    "category": "``ds``",
+    "description": "This release adds support for describing and updating AWS Managed Microsoft AD settings",
+    "type": "api-change"
+  },
+  {
+    "category": "``kafka``",
+    "description": "Documentation updates to use Az Id during cluster creation.",
+    "type": "api-change"
+  },
+  {
+    "category": "``outposts``",
+    "description": "This release adds the AssetLocation structure to the ListAssets response. AssetLocation includes the RackElevation for an Asset.",
+    "type": "api-change"
+  }
+]
\ No newline at end of file
diff --git a/CHANGELOG.rst b/CHANGELOG.rst
index 5a9fcb0065..2a7b9c4de9 100644
--- a/CHANGELOG.rst
+++ b/CHANGELOG.rst
@@ -2,6 +2,14 @@
 CHANGELOG
 =========
 
+1.27.13
+=======
+
+* api-change:``ds``: This release adds support for describing and updating AWS Managed Microsoft AD settings
+* api-change:``kafka``: Documentation updates to use Az Id during cluster creation.
+* api-change:``outposts``: This release adds the AssetLocation structure to the ListAssets response. AssetLocation includes the RackElevation for an Asset.
+
+
 1.27.12
 =======
 
diff --git a/botocore/__init__.py b/botocore/__init__.py
index 83837f15f8..1bb08bf9ad 100644
--- a/botocore/__init__.py
+++ b/botocore/__init__.py
@@ -16,7 +16,7 @@
 import os
 import re
 
-__version__ = '1.27.12'
+__version__ = '1.27.13'
 
 
 class NullHandler(logging.Handler):
diff --git a/botocore/data/ds/2015-04-16/service-2.json b/botocore/data/ds/2015-04-16/service-2.json
index 5d857ffc50..8acca1e9f3 100644
--- a/botocore/data/ds/2015-04-16/service-2.json
+++ b/botocore/data/ds/2015-04-16/service-2.json
@@ -521,6 +521,24 @@
       ],
       "documentation":"<p>Provides information about the Regions that are configured for multi-Region replication.</p>"
     },
+    "DescribeSettings":{
+      "name":"DescribeSettings",
+      "http":{
+        "method":"POST",
+        "requestUri":"/"
+      },
+      "input":{"shape":"DescribeSettingsRequest"},
+      "output":{"shape":"DescribeSettingsResult"},
+      "errors":[
+        {"shape":"DirectoryDoesNotExistException"},
+        {"shape":"UnsupportedOperationException"},
+        {"shape":"InvalidParameterException"},
+        {"shape":"InvalidNextTokenException"},
+        {"shape":"ClientException"},
+        {"shape":"ServiceException"}
+      ],
+      "documentation":"<p>Retrieves information about the configurable settings for the specified directory.</p>"
+    },
     "DescribeSharedDirectories":{
       "name":"DescribeSharedDirectories",
       "http":{
@@ -1080,6 +1098,26 @@
       ],
       "documentation":"<p>Updates the Remote Authentication Dial In User Service (RADIUS) server information for an AD Connector or Microsoft AD directory.</p>"
     },
+    "UpdateSettings":{
+      "name":"UpdateSettings",
+      "http":{
+        "method":"POST",
+        "requestUri":"/"
+      },
+      "input":{"shape":"UpdateSettingsRequest"},
+      "output":{"shape":"UpdateSettingsResult"},
+      "errors":[
+        {"shape":"DirectoryDoesNotExistException"},
+        {"shape":"UnsupportedOperationException"},
+        {"shape":"DirectoryUnavailableException"},
+        {"shape":"IncompatibleSettingsException"},
+        {"shape":"UnsupportedSettingsException"},
+        {"shape":"InvalidParameterException"},
+        {"shape":"ClientException"},
+        {"shape":"ServiceException"}
+      ],
+      "documentation":"<p>Updates the configurable settings for the specified directory.</p>"
+    },
     "UpdateTrust":{
       "name":"UpdateTrust",
       "http":{
@@ -1470,7 +1508,10 @@
     },
     "ClientAuthenticationType":{
       "type":"string",
-      "enum":["SmartCard"]
+      "enum":[
+        "SmartCard",
+        "SmartCardOrPassword"
+      ]
     },
     "ClientCertAuthSettings":{
       "type":"structure",
@@ -2306,6 +2347,41 @@
         }
       }
     },
+    "DescribeSettingsRequest":{
+      "type":"structure",
+      "required":["DirectoryId"],
+      "members":{
+        "DirectoryId":{
+          "shape":"DirectoryId",
+          "documentation":"<p>The identifier of the directory for which to retrieve information.</p>"
+        },
+        "Status":{
+          "shape":"DirectoryConfigurationStatus",
+          "documentation":"<p>The status of the directory settings for which to retrieve information.</p>"
+        },
+        "NextToken":{
+          "shape":"NextToken",
+          "documentation":"<p>The <code>DescribeSettingsResult.NextToken</code> value from a previous call to <a>DescribeSettings</a>. Pass null if this is the first call.</p>"
+        }
+      }
+    },
+    "DescribeSettingsResult":{
+      "type":"structure",
+      "members":{
+        "DirectoryId":{
+          "shape":"DirectoryId",
+          "documentation":"<p>The identifier of the directory.</p>"
+        },
+        "SettingEntries":{
+          "shape":"SettingEntries",
+          "documentation":"<p>The list of <a>SettingEntry</a> objects that were retrieved.</p> <p>It is possible that this list contains less than the number of items specified in the <code>Limit</code> member of the request. This occurs if there are less than the requested number of items left to retrieve, or if the limitations of the operation have been exceeded.</p>"
+        },
+        "NextToken":{
+          "shape":"NextToken",
+          "documentation":"<p>If not null, token that indicates that more results are available. Pass this value for the <code>NextToken</code> parameter in a subsequent call to <code>DescribeSettings</code> to retrieve the next set of items. </p>"
+        }
+      }
+    },
     "DescribeSharedDirectoriesRequest":{
       "type":"structure",
       "required":["OwnerDirectoryId"],
@@ -2441,6 +2517,38 @@
       "documentation":"<p>The specified directory has already been shared with this Amazon Web Services account.</p>",
       "exception":true
     },
+    "DirectoryConfigurationSettingAllowedValues":{"type":"string"},
+    "DirectoryConfigurationSettingLastRequestedDateTime":{"type":"timestamp"},
+    "DirectoryConfigurationSettingLastUpdatedDateTime":{"type":"timestamp"},
+    "DirectoryConfigurationSettingName":{
+      "type":"string",
+      "max":255,
+      "min":1,
+      "pattern":"^[a-zA-Z0-9-/. _]*$"
+    },
+    "DirectoryConfigurationSettingRequestDetailedStatus":{
+      "type":"map",
+      "key":{"shape":"RegionName"},
+      "value":{"shape":"DirectoryConfigurationStatus"}
+    },
+    "DirectoryConfigurationSettingRequestStatusMessage":{"type":"string"},
+    "DirectoryConfigurationSettingType":{"type":"string"},
+    "DirectoryConfigurationSettingValue":{
+      "type":"string",
+      "max":255,
+      "min":1,
+      "pattern":"^[a-zA-Z0-9]*$"
+    },
+    "DirectoryConfigurationStatus":{
+      "type":"string",
+      "enum":[
+        "Requested",
+        "Updating",
+        "Updated",
+        "Failed",
+        "Default"
+      ]
+    },
     "DirectoryConnectSettings":{
       "type":"structure",
       "required":[
@@ -3137,6 +3245,15 @@
       },
       "documentation":"<p>Contains the results of the <a>GetSnapshotLimits</a> operation.</p>"
     },
+    "IncompatibleSettingsException":{
+      "type":"structure",
+      "members":{
+        "Message":{"shape":"ExceptionMessage"},
+        "RequestId":{"shape":"RequestId"}
+      },
+      "documentation":"<p>The specified directory setting is not compatible with other settings.</p>",
+      "exception":true
+    },
     "InsufficientPermissionsException":{
       "type":"structure",
       "members":{
@@ -4049,6 +4166,78 @@
       "exception":true,
       "fault":true
     },
+    "Setting":{
+      "type":"structure",
+      "required":[
+        "Name",
+        "Value"
+      ],
+      "members":{
+        "Name":{
+          "shape":"DirectoryConfigurationSettingName",
+          "documentation":"<p>The name of the directory setting. For example:</p> <p> <code>TLS_1_0</code> </p>"
+        },
+        "Value":{
+          "shape":"DirectoryConfigurationSettingValue",
+          "documentation":"<p>The value of the directory setting for which to retrieve information. For example, for <code>TLS_1_0</code>, the valid values are: <code>Enable</code> and <code>Disable</code>.</p>"
+        }
+      },
+      "documentation":"<p>Contains information about the configurable settings for a directory.</p>"
+    },
+    "SettingEntries":{
+      "type":"list",
+      "member":{"shape":"SettingEntry"}
+    },
+    "SettingEntry":{
+      "type":"structure",
+      "members":{
+        "Type":{
+          "shape":"DirectoryConfigurationSettingType",
+          "documentation":"<p>The type of directory setting. For example, <code>Protocol</code> or <code>Cipher</code>.</p>"
+        },
+        "Name":{
+          "shape":"DirectoryConfigurationSettingName",
+          "documentation":"<p>The name of the directory setting. For example:</p> <p> <code>TLS_1_0</code> </p>"
+        },
+        "AllowedValues":{
+          "shape":"DirectoryConfigurationSettingAllowedValues",
+          "documentation":"<p>The valid range of values for the directory setting.</p>"
+        },
+        "AppliedValue":{
+          "shape":"DirectoryConfigurationSettingValue",
+          "documentation":"<p>The value of the directory setting that is applied to the directory.</p>"
+        },
+        "RequestedValue":{
+          "shape":"DirectoryConfigurationSettingValue",
+          "documentation":"<p>The value that was last requested for the directory setting.</p>"
+        },
+        "RequestStatus":{
+          "shape":"DirectoryConfigurationStatus",
+          "documentation":"<p>The overall status of the request to update the directory setting request. If the directory setting is deployed in more than one region, and the request fails in any region, the overall status is <code>Failed</code>.</p>"
+        },
+        "RequestDetailedStatus":{
+          "shape":"DirectoryConfigurationSettingRequestDetailedStatus",
+          "documentation":"<p>Details about the status of the request to update the directory setting. If the directory setting is deployed in more than one region, status is returned for the request in each region where the setting is deployed.</p>"
+        },
+        "RequestStatusMessage":{
+          "shape":"DirectoryConfigurationSettingRequestStatusMessage",
+          "documentation":"<p>The last status message for the directory status request.</p>"
+        },
+        "LastUpdatedDateTime":{
+          "shape":"DirectoryConfigurationSettingLastUpdatedDateTime",
+          "documentation":"<p>The date and time when the directory setting was last updated.</p>"
+        },
+        "LastRequestedDateTime":{
+          "shape":"DirectoryConfigurationSettingLastRequestedDateTime",
+          "documentation":"<p>The date and time when the request to update a directory setting was last submitted.</p>"
+        }
+      },
+      "documentation":"<p>Contains information about the specified configurable setting for a directory.</p>"
+    },
+    "Settings":{
+      "type":"list",
+      "member":{"shape":"Setting"}
+    },
     "ShareDirectoryRequest":{
       "type":"structure",
       "required":[
@@ -4466,7 +4655,7 @@
       "type":"string",
       "max":128,
       "min":1,
-      "pattern":"(.|\\s)*\\S(.|\\s)*",
+      "pattern":"^(\\p{LD}|\\p{Punct}| )+$",
       "sensitive":true
     },
     "TrustState":{
@@ -4550,6 +4739,15 @@
       "documentation":"<p>The operation is not supported.</p>",
       "exception":true
     },
+    "UnsupportedSettingsException":{
+      "type":"structure",
+      "members":{
+        "Message":{"shape":"ExceptionMessage"},
+        "RequestId":{"shape":"RequestId"}
+      },
+      "documentation":"<p>The specified directory setting is not supported.</p>",
+      "exception":true
+    },
     "UpdateConditionalForwarderRequest":{
       "type":"structure",
       "required":[
@@ -4626,6 +4824,32 @@
       "documentation":"<p>Contains the results of the <a>UpdateRadius</a> operation.</p>"
     },
     "UpdateSecurityGroupForDirectoryControllers":{"type":"boolean"},
+    "UpdateSettingsRequest":{
+      "type":"structure",
+      "required":[
+        "DirectoryId",
+        "Settings"
+      ],
+      "members":{
+        "DirectoryId":{
+          "shape":"DirectoryId",
+          "documentation":"<p>The identifier of the directory for which to update settings.</p>"
+        },
+        "Settings":{
+          "shape":"Settings",
+          "documentation":"<p>The list of <a>Setting</a> objects.</p>"
+        }
+      }
+    },
+    "UpdateSettingsResult":{
+      "type":"structure",
+      "members":{
+        "DirectoryId":{
+          "shape":"DirectoryId",
+          "documentation":"<p>The identifier of the directory.</p>"
+        }
+      }
+    },
     "UpdateTrustRequest":{
       "type":"structure",
       "required":["TrustId"],
diff --git a/botocore/data/kafka/2018-11-14/service-2.json b/botocore/data/kafka/2018-11-14/service-2.json
index 9f929f44c5..bb1f873a8e 100644
--- a/botocore/data/kafka/2018-11-14/service-2.json
+++ b/botocore/data/kafka/2018-11-14/service-2.json
@@ -1467,7 +1467,7 @@
         "ClientSubnets": {
           "shape": "__listOf__string",
           "locationName": "clientSubnets",
-          "documentation": "\n            <p>The list of subnets to connect to in the client virtual private cloud (VPC). AWS creates elastic network interfaces inside these subnets. Client applications use elastic network interfaces to produce and consume data. Client subnets can't be in Availability Zone us-east-1e.</p>\n         "
+          "documentation": "\n            <p>The list of subnets to connect to in the client virtual private cloud (VPC). AWS creates elastic network interfaces inside these subnets. Client applications use elastic network interfaces to produce and consume data. Client subnets can't occupy the Availability Zone with ID use use1-az3.</p>\n         "
         },
         "InstanceType": {
           "shape": "__stringMin5Max32",
diff --git a/botocore/data/outposts/2019-12-03/service-2.json b/botocore/data/outposts/2019-12-03/service-2.json
index e691b60b89..348496a3d7 100644
--- a/botocore/data/outposts/2019-12-03/service-2.json
+++ b/botocore/data/outposts/2019-12-03/service-2.json
@@ -562,6 +562,10 @@
         "ComputeAttributes":{
           "shape":"ComputeAttributes",
           "documentation":"<p> Information about compute hardware assets. </p>"
+        },
+        "AssetLocation":{
+          "shape":"AssetLocation",
+          "documentation":"<p> The position of an asset in a rack. </p>"
         }
       },
       "documentation":"<p> Information about hardware assets. </p>"
@@ -570,6 +574,16 @@
       "type":"list",
       "member":{"shape":"AssetInfo"}
     },
+    "AssetLocation":{
+      "type":"structure",
+      "members":{
+        "RackElevation":{
+          "shape":"RackElevation",
+          "documentation":"<p> The position of an asset in a rack measured in rack units. </p>"
+        }
+      },
+      "documentation":"<p> Information about the position of the asset in a rack. </p>"
+    },
     "AssetType":{
       "type":"string",
       "enum":["COMPUTE"]
@@ -1760,6 +1774,12 @@
       ]
     },
     "Quantity":{"type":"string"},
+    "RackElevation":{
+      "type":"float",
+      "box":true,
+      "max":99,
+      "min":0
+    },
     "RackId":{
       "type":"string",
       "max":20,
diff --git a/docs/source/conf.py b/docs/source/conf.py
index 84f53ccf2a..b2c4b0330a 100644
--- a/docs/source/conf.py
+++ b/docs/source/conf.py
@@ -54,7 +54,7 @@
 # The short X.Y version.
 version = '1.27.'
 # The full version, including alpha/beta/rc tags.
-release = '1.27.12'
+release = '1.27.13'
 
 # The language for content autogenerated by Sphinx. Refer to documentation
 # for a list of supported languages.