aws-sdk-appmesh 1.23.0 → 1.28.0

data/lib/aws-sdk-appmesh/errors.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 # WARNING ABOUT GENERATED CODE
 #
 # This file is generated. See the contributing guide for more information:

data/lib/aws-sdk-appmesh/resource.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 # WARNING ABOUT GENERATED CODE
 #
 # This file is generated. See the contributing guide for more information:

data/lib/aws-sdk-appmesh/types.rb

@@ -1,3 +1,5 @@
+# frozen_string_literal: true
+
 # WARNING ABOUT GENERATED CODE
 #
 # This file is generated. See the contributing guide for more information:
@@ -28,6 +30,7 @@ module Aws::AppMesh
     #
     class VirtualRouterListener < Struct.new(
       :port_mapping)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -86,6 +89,7 @@ module Aws::AppMesh
       :max_retries,
       :per_retry_timeout,
       :tcp_retry_events)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -97,6 +101,7 @@ module Aws::AppMesh
     #
     class CreateVirtualNodeOutput < Struct.new(
       :virtual_node)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -121,6 +126,7 @@ module Aws::AppMesh
     #
     class Logging < Struct.new(
       :access_log)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -132,6 +138,7 @@ module Aws::AppMesh
     #
     class UpdateVirtualRouterOutput < Struct.new(
       :virtual_router)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -152,6 +159,244 @@ module Aws::AppMesh
     class ListVirtualRoutersOutput < Struct.new(
       :next_token,
       :virtual_routers)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @note When making an API call, you may pass CreateVirtualGatewayInput
+    #   data as a hash:
+    #
+    #       {
+    #         client_token: "String",
+    #         mesh_name: "ResourceName", # required
+    #         mesh_owner: "AccountId",
+    #         spec: { # required
+    #           backend_defaults: {
+    #             client_policy: {
+    #               tls: {
+    #                 enforce: false,
+    #                 ports: [1],
+    #                 validation: { # required
+    #                   trust: { # required
+    #                     acm: {
+    #                       certificate_authority_arns: ["Arn"], # required
+    #                     },
+    #                     file: {
+    #                       certificate_chain: "FilePath", # required
+    #                     },
+    #                   },
+    #                 },
+    #               },
+    #             },
+    #           },
+    #           listeners: [ # required
+    #             {
+    #               health_check: {
+    #                 healthy_threshold: 1, # required
+    #                 interval_millis: 1, # required
+    #                 path: "String",
+    #                 port: 1,
+    #                 protocol: "grpc", # required, accepts grpc, http, http2
+    #                 timeout_millis: 1, # required
+    #                 unhealthy_threshold: 1, # required
+    #               },
+    #               port_mapping: { # required
+    #                 port: 1, # required
+    #                 protocol: "grpc", # required, accepts grpc, http, http2
+    #               },
+    #               tls: {
+    #                 certificate: { # required
+    #                   acm: {
+    #                     certificate_arn: "Arn", # required
+    #                   },
+    #                   file: {
+    #                     certificate_chain: "FilePath", # required
+    #                     private_key: "FilePath", # required
+    #                   },
+    #                 },
+    #                 mode: "DISABLED", # required, accepts DISABLED, PERMISSIVE, STRICT
+    #               },
+    #             },
+    #           ],
+    #           logging: {
+    #             access_log: {
+    #               file: {
+    #                 path: "FilePath", # required
+    #               },
+    #             },
+    #           },
+    #         },
+    #         tags: [
+    #           {
+    #             key: "TagKey", # required
+    #             value: "TagValue",
+    #           },
+    #         ],
+    #         virtual_gateway_name: "ResourceName", # required
+    #       }
+    #
+    # @!attribute [rw] client_token
+    #   Unique, case-sensitive identifier that you provide to ensure the
+    #   idempotency of the request. Up to 36 letters, numbers, hyphens, and
+    #   underscores are allowed.
+    #
+    #   **A suitable default value is auto-generated.** You should normally
+    #   not need to pass this option.
+    #   @return [String]
+    #
+    # @!attribute [rw] mesh_name
+    #   The name of the service mesh to create the virtual gateway in.
+    #   @return [String]
+    #
+    # @!attribute [rw] mesh_owner
+    #   The AWS IAM account ID of the service mesh owner. If the account ID
+    #   is not your own, then the account that you specify must share the
+    #   mesh with your account before you can create the resource in the
+    #   service mesh. For more information about mesh sharing, see [Working
+    #   with shared meshes][1].
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/app-mesh/latest/userguide/sharing.html
+    #   @return [String]
+    #
+    # @!attribute [rw] spec
+    #   The virtual gateway specification to apply.
+    #   @return [Types::VirtualGatewaySpec]
+    #
+    # @!attribute [rw] tags
+    #   Optional metadata that you can apply to the virtual gateway to
+    #   assist with categorization and organization. Each tag consists of a
+    #   key and an optional value, both of which you define. Tag keys can
+    #   have a maximum character length of 128 characters, and tag values
+    #   can have a maximum length of 256 characters.
+    #   @return [Array<Types::TagRef>]
+    #
+    # @!attribute [rw] virtual_gateway_name
+    #   The name to use for the virtual gateway.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/CreateVirtualGatewayInput AWS API Documentation
+    #
+    class CreateVirtualGatewayInput < Struct.new(
+      :client_token,
+      :mesh_name,
+      :mesh_owner,
+      :spec,
+      :tags,
+      :virtual_gateway_name)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @note When making an API call, you may pass UpdateVirtualGatewayInput
+    #   data as a hash:
+    #
+    #       {
+    #         client_token: "String",
+    #         mesh_name: "ResourceName", # required
+    #         mesh_owner: "AccountId",
+    #         spec: { # required
+    #           backend_defaults: {
+    #             client_policy: {
+    #               tls: {
+    #                 enforce: false,
+    #                 ports: [1],
+    #                 validation: { # required
+    #                   trust: { # required
+    #                     acm: {
+    #                       certificate_authority_arns: ["Arn"], # required
+    #                     },
+    #                     file: {
+    #                       certificate_chain: "FilePath", # required
+    #                     },
+    #                   },
+    #                 },
+    #               },
+    #             },
+    #           },
+    #           listeners: [ # required
+    #             {
+    #               health_check: {
+    #                 healthy_threshold: 1, # required
+    #                 interval_millis: 1, # required
+    #                 path: "String",
+    #                 port: 1,
+    #                 protocol: "grpc", # required, accepts grpc, http, http2
+    #                 timeout_millis: 1, # required
+    #                 unhealthy_threshold: 1, # required
+    #               },
+    #               port_mapping: { # required
+    #                 port: 1, # required
+    #                 protocol: "grpc", # required, accepts grpc, http, http2
+    #               },
+    #               tls: {
+    #                 certificate: { # required
+    #                   acm: {
+    #                     certificate_arn: "Arn", # required
+    #                   },
+    #                   file: {
+    #                     certificate_chain: "FilePath", # required
+    #                     private_key: "FilePath", # required
+    #                   },
+    #                 },
+    #                 mode: "DISABLED", # required, accepts DISABLED, PERMISSIVE, STRICT
+    #               },
+    #             },
+    #           ],
+    #           logging: {
+    #             access_log: {
+    #               file: {
+    #                 path: "FilePath", # required
+    #               },
+    #             },
+    #           },
+    #         },
+    #         virtual_gateway_name: "ResourceName", # required
+    #       }
+    #
+    # @!attribute [rw] client_token
+    #   Unique, case-sensitive identifier that you provide to ensure the
+    #   idempotency of the request. Up to 36 letters, numbers, hyphens, and
+    #   underscores are allowed.
+    #
+    #   **A suitable default value is auto-generated.** You should normally
+    #   not need to pass this option.
+    #   @return [String]
+    #
+    # @!attribute [rw] mesh_name
+    #   The name of the service mesh that the virtual gateway resides in.
+    #   @return [String]
+    #
+    # @!attribute [rw] mesh_owner
+    #   The AWS IAM account ID of the service mesh owner. If the account ID
+    #   is not your own, then it's the ID of the account that shared the
+    #   mesh with your account. For more information about mesh sharing, see
+    #   [Working with shared meshes][1].
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/app-mesh/latest/userguide/sharing.html
+    #   @return [String]
+    #
+    # @!attribute [rw] spec
+    #   The new virtual gateway specification to apply. This overwrites the
+    #   existing data.
+    #   @return [Types::VirtualGatewaySpec]
+    #
+    # @!attribute [rw] virtual_gateway_name
+    #   The name of the virtual gateway to update.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/UpdateVirtualGatewayInput AWS API Documentation
+    #
+    class UpdateVirtualGatewayInput < Struct.new(
+      :client_token,
+      :mesh_name,
+      :mesh_owner,
+      :spec,
+      :virtual_gateway_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -175,7 +420,7 @@ module Aws::AppMesh
     #   The AWS IAM account ID of the service mesh owner. If the account ID
     #   is not your own, then it's the ID of the account that shared the
     #   mesh with your account. For more information about mesh sharing, see
-    #   [Working with Shared Meshes][1].
+    #   [Working with shared meshes][1].
     #
     #
     #
@@ -186,7 +431,7 @@ module Aws::AppMesh
     #   The AWS IAM account ID of the resource owner. If the account ID is
     #   not your own, then it's the ID of the mesh owner or of another
     #   account that the mesh is shared with. For more information about
-    #   mesh sharing, see [Working with Shared Meshes][1].
+    #   mesh sharing, see [Working with shared meshes][1].
     #
     #
     #
@@ -212,6 +457,7 @@ module Aws::AppMesh
       :resource_owner,
       :uid,
       :version)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -225,6 +471,7 @@ module Aws::AppMesh
     #
     class ResourceInUseException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -236,6 +483,7 @@ module Aws::AppMesh
     #
     class UpdateVirtualNodeOutput < Struct.new(
       :virtual_node)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -256,6 +504,7 @@ module Aws::AppMesh
     class ListRoutesOutput < Struct.new(
       :next_token,
       :routes)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -300,6 +549,7 @@ module Aws::AppMesh
     class VirtualServiceBackend < Struct.new(
       :client_policy,
       :virtual_service_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -313,6 +563,34 @@ module Aws::AppMesh
     #
     class BadRequestException < Struct.new(
       :message)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # An object that represents the criteria for determining a request
+    # match.
+    #
+    # @note When making an API call, you may pass HttpGatewayRouteMatch
+    #   data as a hash:
+    #
+    #       {
+    #         prefix: "String", # required
+    #       }
+    #
+    # @!attribute [rw] prefix
+    #   Specifies the path to match requests with. This parameter must
+    #   always start with `/`, which by itself matches all requests to the
+    #   virtual service name. You can also match for path-based routing of
+    #   requests. For example, if your virtual service name is
+    #   `my-service.local` and you want the route to match requests to
+    #   `my-service.local/metrics`, your prefix should be `/metrics`.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/HttpGatewayRouteMatch AWS API Documentation
+    #
+    class HttpGatewayRouteMatch < Struct.new(
+      :prefix)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -382,6 +660,7 @@ module Aws::AppMesh
       :protocol,
       :timeout_millis,
       :unhealthy_threshold)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -406,6 +685,7 @@ module Aws::AppMesh
     #
     class EgressFilter < Struct.new(
       :type)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -440,39 +720,362 @@ module Aws::AppMesh
     #
     class ClientPolicy < Struct.new(
       :tls)
+      SENSITIVE = []
       include Aws::Structure
     end
 
-    # @!attribute [rw] virtual_service
-    #   The full description of your virtual service.
-    #   @return [Types::VirtualServiceData]
-    #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/DescribeVirtualServiceOutput AWS API Documentation
-    #
-    class DescribeVirtualServiceOutput < Struct.new(
-      :virtual_service)
-      include Aws::Structure
-    end
-
-    # @!attribute [rw] virtual_node
-    #   The full description of your virtual node.
-    #   @return [Types::VirtualNodeData]
-    #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/DescribeVirtualNodeOutput AWS API Documentation
-    #
-    class DescribeVirtualNodeOutput < Struct.new(
-      :virtual_node)
-      include Aws::Structure
-    end
-
-    # @!attribute [rw] route
-    #   The full description of your mesh following the create call.
-    #   @return [Types::RouteData]
+    # An object that represents the specification of a service mesh
+    # resource.
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/CreateRouteOutput AWS API Documentation
+    # @note When making an API call, you may pass VirtualGatewaySpec
+    #   data as a hash:
+    #
+    #       {
+    #         backend_defaults: {
+    #           client_policy: {
+    #             tls: {
+    #               enforce: false,
+    #               ports: [1],
+    #               validation: { # required
+    #                 trust: { # required
+    #                   acm: {
+    #                     certificate_authority_arns: ["Arn"], # required
+    #                   },
+    #                   file: {
+    #                     certificate_chain: "FilePath", # required
+    #                   },
+    #                 },
+    #               },
+    #             },
+    #           },
+    #         },
+    #         listeners: [ # required
+    #           {
+    #             health_check: {
+    #               healthy_threshold: 1, # required
+    #               interval_millis: 1, # required
+    #               path: "String",
+    #               port: 1,
+    #               protocol: "grpc", # required, accepts grpc, http, http2
+    #               timeout_millis: 1, # required
+    #               unhealthy_threshold: 1, # required
+    #             },
+    #             port_mapping: { # required
+    #               port: 1, # required
+    #               protocol: "grpc", # required, accepts grpc, http, http2
+    #             },
+    #             tls: {
+    #               certificate: { # required
+    #                 acm: {
+    #                   certificate_arn: "Arn", # required
+    #                 },
+    #                 file: {
+    #                   certificate_chain: "FilePath", # required
+    #                   private_key: "FilePath", # required
+    #                 },
+    #               },
+    #               mode: "DISABLED", # required, accepts DISABLED, PERMISSIVE, STRICT
+    #             },
+    #           },
+    #         ],
+    #         logging: {
+    #           access_log: {
+    #             file: {
+    #               path: "FilePath", # required
+    #             },
+    #           },
+    #         },
+    #       }
+    #
+    # @!attribute [rw] backend_defaults
+    #   A reference to an object that represents the defaults for backends.
+    #   @return [Types::VirtualGatewayBackendDefaults]
+    #
+    # @!attribute [rw] listeners
+    #   The listeners that the mesh endpoint is expected to receive inbound
+    #   traffic from. You can specify one listener.
+    #   @return [Array<Types::VirtualGatewayListener>]
+    #
+    # @!attribute [rw] logging
+    #   An object that represents logging information.
+    #   @return [Types::VirtualGatewayLogging]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/VirtualGatewaySpec AWS API Documentation
+    #
+    class VirtualGatewaySpec < Struct.new(
+      :backend_defaults,
+      :listeners,
+      :logging)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # An object that represents an access log file.
+    #
+    # @note When making an API call, you may pass VirtualGatewayFileAccessLog
+    #   data as a hash:
+    #
+    #       {
+    #         path: "FilePath", # required
+    #       }
+    #
+    # @!attribute [rw] path
+    #   The file path to write access logs to. You can use `/dev/stdout` to
+    #   send access logs to standard out and configure your Envoy container
+    #   to use a log driver, such as `awslogs`, to export the access logs to
+    #   a log storage service such as Amazon CloudWatch Logs. You can also
+    #   specify a path in the Envoy container's file system to write the
+    #   files to disk.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/VirtualGatewayFileAccessLog AWS API Documentation
+    #
+    class VirtualGatewayFileAccessLog < Struct.new(
+      :path)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] virtual_service
+    #   The full description of your virtual service.
+    #   @return [Types::VirtualServiceData]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/DescribeVirtualServiceOutput AWS API Documentation
+    #
+    class DescribeVirtualServiceOutput < Struct.new(
+      :virtual_service)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @note When making an API call, you may pass CreateGatewayRouteInput
+    #   data as a hash:
+    #
+    #       {
+    #         client_token: "String",
+    #         gateway_route_name: "ResourceName", # required
+    #         mesh_name: "ResourceName", # required
+    #         mesh_owner: "AccountId",
+    #         spec: { # required
+    #           grpc_route: {
+    #             action: { # required
+    #               target: { # required
+    #                 virtual_service: { # required
+    #                   virtual_service_name: "ResourceName", # required
+    #                 },
+    #               },
+    #             },
+    #             match: { # required
+    #               service_name: "ServiceName",
+    #             },
+    #           },
+    #           http2_route: {
+    #             action: { # required
+    #               target: { # required
+    #                 virtual_service: { # required
+    #                   virtual_service_name: "ResourceName", # required
+    #                 },
+    #               },
+    #             },
+    #             match: { # required
+    #               prefix: "String", # required
+    #             },
+    #           },
+    #           http_route: {
+    #             action: { # required
+    #               target: { # required
+    #                 virtual_service: { # required
+    #                   virtual_service_name: "ResourceName", # required
+    #                 },
+    #               },
+    #             },
+    #             match: { # required
+    #               prefix: "String", # required
+    #             },
+    #           },
+    #         },
+    #         tags: [
+    #           {
+    #             key: "TagKey", # required
+    #             value: "TagValue",
+    #           },
+    #         ],
+    #         virtual_gateway_name: "ResourceName", # required
+    #       }
+    #
+    # @!attribute [rw] client_token
+    #   Unique, case-sensitive identifier that you provide to ensure the
+    #   idempotency of the request. Up to 36 letters, numbers, hyphens, and
+    #   underscores are allowed.
+    #
+    #   **A suitable default value is auto-generated.** You should normally
+    #   not need to pass this option.
+    #   @return [String]
+    #
+    # @!attribute [rw] gateway_route_name
+    #   The name to use for the gateway route.
+    #   @return [String]
+    #
+    # @!attribute [rw] mesh_name
+    #   The name of the service mesh to create the gateway route in.
+    #   @return [String]
+    #
+    # @!attribute [rw] mesh_owner
+    #   The AWS IAM account ID of the service mesh owner. If the account ID
+    #   is not your own, then the account that you specify must share the
+    #   mesh with your account before you can create the resource in the
+    #   service mesh. For more information about mesh sharing, see [Working
+    #   with shared meshes][1].
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/app-mesh/latest/userguide/sharing.html
+    #   @return [String]
+    #
+    # @!attribute [rw] spec
+    #   The gateway route specification to apply.
+    #   @return [Types::GatewayRouteSpec]
+    #
+    # @!attribute [rw] tags
+    #   Optional metadata that you can apply to the gateway route to assist
+    #   with categorization and organization. Each tag consists of a key and
+    #   an optional value, both of which you define. Tag keys can have a
+    #   maximum character length of 128 characters, and tag values can have
+    #   a maximum length of 256 characters.
+    #   @return [Array<Types::TagRef>]
+    #
+    # @!attribute [rw] virtual_gateway_name
+    #   The name of the virtual gateway to associate the gateway route with.
+    #   If the virtual gateway is in a shared mesh, then you must be the
+    #   owner of the virtual gateway resource.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/CreateGatewayRouteInput AWS API Documentation
+    #
+    class CreateGatewayRouteInput < Struct.new(
+      :client_token,
+      :gateway_route_name,
+      :mesh_name,
+      :mesh_owner,
+      :spec,
+      :tags,
+      :virtual_gateway_name)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] virtual_node
+    #   The full description of your virtual node.
+    #   @return [Types::VirtualNodeData]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/DescribeVirtualNodeOutput AWS API Documentation
+    #
+    class DescribeVirtualNodeOutput < Struct.new(
+      :virtual_node)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # An object that represents a virtual gateway returned by a describe
+    # operation.
+    #
+    # @!attribute [rw] mesh_name
+    #   The name of the service mesh that the virtual gateway resides in.
+    #   @return [String]
+    #
+    # @!attribute [rw] metadata
+    #   An object that represents metadata for a resource.
+    #   @return [Types::ResourceMetadata]
+    #
+    # @!attribute [rw] spec
+    #   The specifications of the virtual gateway.
+    #   @return [Types::VirtualGatewaySpec]
+    #
+    # @!attribute [rw] status
+    #   The current status of the virtual gateway.
+    #   @return [Types::VirtualGatewayStatus]
+    #
+    # @!attribute [rw] virtual_gateway_name
+    #   The name of the virtual gateway.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/VirtualGatewayData AWS API Documentation
+    #
+    class VirtualGatewayData < Struct.new(
+      :mesh_name,
+      :metadata,
+      :spec,
+      :status,
+      :virtual_gateway_name)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] route
+    #   The full description of your mesh following the create call.
+    #   @return [Types::RouteData]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/CreateRouteOutput AWS API Documentation
     #
     class CreateRouteOutput < Struct.new(
       :route)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # An object that represents a listener for a virtual gateway.
+    #
+    # @note When making an API call, you may pass VirtualGatewayListener
+    #   data as a hash:
+    #
+    #       {
+    #         health_check: {
+    #           healthy_threshold: 1, # required
+    #           interval_millis: 1, # required
+    #           path: "String",
+    #           port: 1,
+    #           protocol: "grpc", # required, accepts grpc, http, http2
+    #           timeout_millis: 1, # required
+    #           unhealthy_threshold: 1, # required
+    #         },
+    #         port_mapping: { # required
+    #           port: 1, # required
+    #           protocol: "grpc", # required, accepts grpc, http, http2
+    #         },
+    #         tls: {
+    #           certificate: { # required
+    #             acm: {
+    #               certificate_arn: "Arn", # required
+    #             },
+    #             file: {
+    #               certificate_chain: "FilePath", # required
+    #               private_key: "FilePath", # required
+    #             },
+    #           },
+    #           mode: "DISABLED", # required, accepts DISABLED, PERMISSIVE, STRICT
+    #         },
+    #       }
+    #
+    # @!attribute [rw] health_check
+    #   The health check information for the listener.
+    #   @return [Types::VirtualGatewayHealthCheckPolicy]
+    #
+    # @!attribute [rw] port_mapping
+    #   The port mapping information for the listener.
+    #   @return [Types::VirtualGatewayPortMapping]
+    #
+    # @!attribute [rw] tls
+    #   A reference to an object that represents the Transport Layer
+    #   Security (TLS) properties for the listener.
+    #   @return [Types::VirtualGatewayListenerTls]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/VirtualGatewayListener AWS API Documentation
+    #
+    class VirtualGatewayListener < Struct.new(
+      :health_check,
+      :port_mapping,
+      :tls)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -494,6 +1097,46 @@ module Aws::AppMesh
     #
     class DnsServiceDiscovery < Struct.new(
       :hostname)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # An object that represents a port mapping.
+    #
+    # @note When making an API call, you may pass VirtualGatewayPortMapping
+    #   data as a hash:
+    #
+    #       {
+    #         port: 1, # required
+    #         protocol: "grpc", # required, accepts grpc, http, http2
+    #       }
+    #
+    # @!attribute [rw] port
+    #   The port used for the port mapping. Specify one protocol.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] protocol
+    #   The protocol used for the port mapping.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/VirtualGatewayPortMapping AWS API Documentation
+    #
+    class VirtualGatewayPortMapping < Struct.new(
+      :port,
+      :protocol)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] virtual_gateway
+    #   The virtual gateway that was deleted.
+    #   @return [Types::VirtualGatewayData]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/DeleteVirtualGatewayOutput AWS API Documentation
+    #
+    class DeleteVirtualGatewayOutput < Struct.new(
+      :virtual_gateway)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -515,7 +1158,7 @@ module Aws::AppMesh
     #   The AWS IAM account ID of the service mesh owner. If the account ID
     #   is not your own, then it's the ID of the account that shared the
     #   mesh with your account. For more information about mesh sharing, see
-    #   [Working with Shared Meshes][1].
+    #   [Working with shared meshes][1].
     #
     #
     #
@@ -537,6 +1180,7 @@ module Aws::AppMesh
       :mesh_owner,
       :route_name,
       :virtual_router_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -571,6 +1215,7 @@ module Aws::AppMesh
       :spec,
       :status,
       :virtual_node_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -578,6 +1223,50 @@ module Aws::AppMesh
     #
     class UntagResourceOutput < Aws::EmptyStructure; end
 
+    # An object that represents the Transport Layer Security (TLS)
+    # properties for a listener.
+    #
+    # @note When making an API call, you may pass VirtualGatewayListenerTls
+    #   data as a hash:
+    #
+    #       {
+    #         certificate: { # required
+    #           acm: {
+    #             certificate_arn: "Arn", # required
+    #           },
+    #           file: {
+    #             certificate_chain: "FilePath", # required
+    #             private_key: "FilePath", # required
+    #           },
+    #         },
+    #         mode: "DISABLED", # required, accepts DISABLED, PERMISSIVE, STRICT
+    #       }
+    #
+    # @!attribute [rw] certificate
+    #   An object that represents a Transport Layer Security (TLS)
+    #   certificate.
+    #   @return [Types::VirtualGatewayListenerTlsCertificate]
+    #
+    # @!attribute [rw] mode
+    #   Specify one of the following modes.
+    #
+    #   * ****STRICT – Listener only accepts connections with TLS enabled.
+    #
+    #   * ****PERMISSIVE – Listener accepts connections with or without TLS
+    #     enabled.
+    #
+    #   * ****DISABLED – Listener only accepts connections without TLS.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/VirtualGatewayListenerTls AWS API Documentation
+    #
+    class VirtualGatewayListenerTls < Struct.new(
+      :certificate,
+      :mode)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # An object that represents the backends that a virtual node is expected
     # to send outbound traffic to.
     #
@@ -614,6 +1303,7 @@ module Aws::AppMesh
     #
     class Backend < Struct.new(
       :virtual_service)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -654,6 +1344,102 @@ module Aws::AppMesh
     class ListMeshesInput < Struct.new(
       :limit,
       :next_token)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # An object that represents a local file certificate. The certificate
+    # must meet specific requirements and you must have proxy authorization
+    # enabled. For more information, see [Transport Layer Security
+    # (TLS)][1].
+    #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com/app-mesh/latest/userguide/tls.html#virtual-node-tls-prerequisites
+    #
+    # @note When making an API call, you may pass VirtualGatewayListenerTlsFileCertificate
+    #   data as a hash:
+    #
+    #       {
+    #         certificate_chain: "FilePath", # required
+    #         private_key: "FilePath", # required
+    #       }
+    #
+    # @!attribute [rw] certificate_chain
+    #   The certificate chain for the certificate.
+    #   @return [String]
+    #
+    # @!attribute [rw] private_key
+    #   The private key for a certificate stored on the file system of the
+    #   mesh endpoint that the proxy is running on.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/VirtualGatewayListenerTlsFileCertificate AWS API Documentation
+    #
+    class VirtualGatewayListenerTlsFileCertificate < Struct.new(
+      :certificate_chain,
+      :private_key)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @note When making an API call, you may pass ListGatewayRoutesInput
+    #   data as a hash:
+    #
+    #       {
+    #         limit: 1,
+    #         mesh_name: "ResourceName", # required
+    #         mesh_owner: "AccountId",
+    #         next_token: "String",
+    #         virtual_gateway_name: "ResourceName", # required
+    #       }
+    #
+    # @!attribute [rw] limit
+    #   The maximum number of results returned by `ListGatewayRoutes` in
+    #   paginated output. When you use this parameter, `ListGatewayRoutes`
+    #   returns only `limit` results in a single page along with a
+    #   `nextToken` response element. You can see the remaining results of
+    #   the initial request by sending another `ListGatewayRoutes` request
+    #   with the returned `nextToken` value. This value can be between 1 and
+    #   100. If you don't use this parameter, `ListGatewayRoutes` returns
+    #   up to 100 results and a `nextToken` value if applicable.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] mesh_name
+    #   The name of the service mesh to list gateway routes in.
+    #   @return [String]
+    #
+    # @!attribute [rw] mesh_owner
+    #   The AWS IAM account ID of the service mesh owner. If the account ID
+    #   is not your own, then it's the ID of the account that shared the
+    #   mesh with your account. For more information about mesh sharing, see
+    #   [Working with shared meshes][1].
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/app-mesh/latest/userguide/sharing.html
+    #   @return [String]
+    #
+    # @!attribute [rw] next_token
+    #   The `nextToken` value returned from a previous paginated
+    #   `ListGatewayRoutes` request where `limit` was used and the results
+    #   exceeded the value of that parameter. Pagination continues from the
+    #   end of the previous results that returned the `nextToken` value.
+    #   @return [String]
+    #
+    # @!attribute [rw] virtual_gateway_name
+    #   The name of the virtual gateway to list gateway routes in.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/ListGatewayRoutesInput AWS API Documentation
+    #
+    class ListGatewayRoutesInput < Struct.new(
+      :limit,
+      :mesh_name,
+      :mesh_owner,
+      :next_token,
+      :virtual_gateway_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -688,6 +1474,7 @@ module Aws::AppMesh
       :spec,
       :status,
       :virtual_router_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -717,16 +1504,87 @@ module Aws::AppMesh
     #   The name of the service mesh to update.
     #   @return [String]
     #
-    # @!attribute [rw] spec
-    #   The service mesh specification to apply.
-    #   @return [Types::MeshSpec]
+    # @!attribute [rw] spec
+    #   The service mesh specification to apply.
+    #   @return [Types::MeshSpec]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/UpdateMeshInput AWS API Documentation
+    #
+    class UpdateMeshInput < Struct.new(
+      :client_token,
+      :mesh_name,
+      :spec)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # An object that represents the health check policy for a virtual
+    # gateway's listener.
+    #
+    # @note When making an API call, you may pass VirtualGatewayHealthCheckPolicy
+    #   data as a hash:
+    #
+    #       {
+    #         healthy_threshold: 1, # required
+    #         interval_millis: 1, # required
+    #         path: "String",
+    #         port: 1,
+    #         protocol: "grpc", # required, accepts grpc, http, http2
+    #         timeout_millis: 1, # required
+    #         unhealthy_threshold: 1, # required
+    #       }
+    #
+    # @!attribute [rw] healthy_threshold
+    #   The number of consecutive successful health checks that must occur
+    #   before declaring the listener healthy.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] interval_millis
+    #   The time period in milliseconds between each health check execution.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] path
+    #   The destination path for the health check request. This value is
+    #   only used if the specified protocol is HTTP or HTTP/2. For any other
+    #   protocol, this value is ignored.
+    #   @return [String]
+    #
+    # @!attribute [rw] port
+    #   The destination port for the health check request. This port must
+    #   match the port defined in the PortMapping for the listener.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] protocol
+    #   The protocol for the health check request. If you specify `grpc`,
+    #   then your service must conform to the [GRPC Health Checking
+    #   Protocol][1].
+    #
+    #
+    #
+    #   [1]: https://github.com/grpc/grpc/blob/master/doc/health-checking.md
+    #   @return [String]
+    #
+    # @!attribute [rw] timeout_millis
+    #   The amount of time to wait when receiving a response from the health
+    #   check, in milliseconds.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] unhealthy_threshold
+    #   The number of consecutive failed health checks that must occur
+    #   before declaring a virtual gateway unhealthy.
+    #   @return [Integer]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/UpdateMeshInput AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/VirtualGatewayHealthCheckPolicy AWS API Documentation
     #
-    class UpdateMeshInput < Struct.new(
-      :client_token,
-      :mesh_name,
-      :spec)
+    class VirtualGatewayHealthCheckPolicy < Struct.new(
+      :healthy_threshold,
+      :interval_millis,
+      :path,
+      :port,
+      :protocol,
+      :timeout_millis,
+      :unhealthy_threshold)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -774,7 +1632,7 @@ module Aws::AppMesh
     #   is not your own, then the account that you specify must share the
     #   mesh with your account before you can create the resource in the
     #   service mesh. For more information about mesh sharing, see [Working
-    #   with Shared Meshes][1].
+    #   with shared meshes][1].
     #
     #
     #
@@ -806,6 +1664,7 @@ module Aws::AppMesh
       :spec,
       :tags,
       :virtual_router_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -817,6 +1676,7 @@ module Aws::AppMesh
     #
     class DescribeVirtualRouterOutput < Struct.new(
       :virtual_router)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -828,6 +1688,7 @@ module Aws::AppMesh
     #
     class CreateMeshOutput < Struct.new(
       :mesh)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -840,6 +1701,7 @@ module Aws::AppMesh
     #
     class CreateVirtualRouterOutput < Struct.new(
       :virtual_router)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -853,6 +1715,41 @@ module Aws::AppMesh
     #
     class VirtualServiceStatus < Struct.new(
       :status)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # An object that represents a listener's Transport Layer Security (TLS)
+    # certificate.
+    #
+    # @note When making an API call, you may pass VirtualGatewayListenerTlsCertificate
+    #   data as a hash:
+    #
+    #       {
+    #         acm: {
+    #           certificate_arn: "Arn", # required
+    #         },
+    #         file: {
+    #           certificate_chain: "FilePath", # required
+    #           private_key: "FilePath", # required
+    #         },
+    #       }
+    #
+    # @!attribute [rw] acm
+    #   A reference to an object that represents an AWS Certicate Manager
+    #   (ACM) certificate.
+    #   @return [Types::VirtualGatewayListenerTlsAcmCertificate]
+    #
+    # @!attribute [rw] file
+    #   A reference to an object that represents a local file certificate.
+    #   @return [Types::VirtualGatewayListenerTlsFileCertificate]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/VirtualGatewayListenerTlsCertificate AWS API Documentation
+    #
+    class VirtualGatewayListenerTlsCertificate < Struct.new(
+      :acm,
+      :file)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -886,6 +1783,7 @@ module Aws::AppMesh
     class ListenerTlsCertificate < Struct.new(
       :acm,
       :file)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -914,6 +1812,29 @@ module Aws::AppMesh
     #
     class VirtualRouterSpec < Struct.new(
       :listeners)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # An object that represents the virtual service that traffic is routed
+    # to.
+    #
+    # @note When making an API call, you may pass GatewayRouteVirtualService
+    #   data as a hash:
+    #
+    #       {
+    #         virtual_service_name: "ResourceName", # required
+    #       }
+    #
+    # @!attribute [rw] virtual_service_name
+    #   The name of the virtual service that traffic is routed to.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/GatewayRouteVirtualService AWS API Documentation
+    #
+    class GatewayRouteVirtualService < Struct.new(
+      :virtual_service_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -979,6 +1900,44 @@ module Aws::AppMesh
     #               port: 1, # required
     #               protocol: "grpc", # required, accepts grpc, http, http2, tcp
     #             },
+    #             timeout: {
+    #               grpc: {
+    #                 idle: {
+    #                   unit: "ms", # accepts ms, s
+    #                   value: 1,
+    #                 },
+    #                 per_request: {
+    #                   unit: "ms", # accepts ms, s
+    #                   value: 1,
+    #                 },
+    #               },
+    #               http: {
+    #                 idle: {
+    #                   unit: "ms", # accepts ms, s
+    #                   value: 1,
+    #                 },
+    #                 per_request: {
+    #                   unit: "ms", # accepts ms, s
+    #                   value: 1,
+    #                 },
+    #               },
+    #               http2: {
+    #                 idle: {
+    #                   unit: "ms", # accepts ms, s
+    #                   value: 1,
+    #                 },
+    #                 per_request: {
+    #                   unit: "ms", # accepts ms, s
+    #                   value: 1,
+    #                 },
+    #               },
+    #               tcp: {
+    #                 idle: {
+    #                   unit: "ms", # accepts ms, s
+    #                   value: 1,
+    #                 },
+    #               },
+    #             },
     #             tls: {
     #               certificate: { # required
     #                 acm: {
@@ -1000,90 +1959,314 @@ module Aws::AppMesh
     #             },
     #           },
     #         },
-    #         service_discovery: {
-    #           aws_cloud_map: {
-    #             attributes: [
-    #               {
-    #                 key: "AwsCloudMapInstanceAttributeKey", # required
-    #                 value: "AwsCloudMapInstanceAttributeValue", # required
-    #               },
-    #             ],
-    #             namespace_name: "AwsCloudMapName", # required
-    #             service_name: "AwsCloudMapName", # required
+    #         service_discovery: {
+    #           aws_cloud_map: {
+    #             attributes: [
+    #               {
+    #                 key: "AwsCloudMapInstanceAttributeKey", # required
+    #                 value: "AwsCloudMapInstanceAttributeValue", # required
+    #               },
+    #             ],
+    #             namespace_name: "AwsCloudMapName", # required
+    #             service_name: "AwsCloudMapName", # required
+    #           },
+    #           dns: {
+    #             hostname: "Hostname", # required
+    #           },
+    #         },
+    #       }
+    #
+    # @!attribute [rw] backend_defaults
+    #   A reference to an object that represents the defaults for backends.
+    #   @return [Types::BackendDefaults]
+    #
+    # @!attribute [rw] backends
+    #   The backends that the virtual node is expected to send outbound
+    #   traffic to.
+    #   @return [Array<Types::Backend>]
+    #
+    # @!attribute [rw] listeners
+    #   The listener that the virtual node is expected to receive inbound
+    #   traffic from. You can specify one listener.
+    #   @return [Array<Types::Listener>]
+    #
+    # @!attribute [rw] logging
+    #   The inbound and outbound access logging information for the virtual
+    #   node.
+    #   @return [Types::Logging]
+    #
+    # @!attribute [rw] service_discovery
+    #   The service discovery information for the virtual node. If your
+    #   virtual node does not expect ingress traffic, you can omit this
+    #   parameter. If you specify a `listener`, then you must specify
+    #   service discovery information.
+    #   @return [Types::ServiceDiscovery]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/VirtualNodeSpec AWS API Documentation
+    #
+    class VirtualNodeSpec < Struct.new(
+      :backend_defaults,
+      :backends,
+      :listeners,
+      :logging,
+      :service_discovery)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] meshes
+    #   The list of existing service meshes.
+    #   @return [Array<Types::MeshRef>]
+    #
+    # @!attribute [rw] next_token
+    #   The `nextToken` value to include in a future `ListMeshes` request.
+    #   When the results of a `ListMeshes` request exceed `limit`, you can
+    #   use this value to retrieve the next page of results. This value is
+    #   `null` when there are no more results to return.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/ListMeshesOutput AWS API Documentation
+    #
+    class ListMeshesOutput < Struct.new(
+      :meshes,
+      :next_token)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # An object that represents a gateway route specification. Specify one
+    # gateway route type.
+    #
+    # @note When making an API call, you may pass GatewayRouteSpec
+    #   data as a hash:
+    #
+    #       {
+    #         grpc_route: {
+    #           action: { # required
+    #             target: { # required
+    #               virtual_service: { # required
+    #                 virtual_service_name: "ResourceName", # required
+    #               },
+    #             },
+    #           },
+    #           match: { # required
+    #             service_name: "ServiceName",
+    #           },
+    #         },
+    #         http2_route: {
+    #           action: { # required
+    #             target: { # required
+    #               virtual_service: { # required
+    #                 virtual_service_name: "ResourceName", # required
+    #               },
+    #             },
+    #           },
+    #           match: { # required
+    #             prefix: "String", # required
+    #           },
+    #         },
+    #         http_route: {
+    #           action: { # required
+    #             target: { # required
+    #               virtual_service: { # required
+    #                 virtual_service_name: "ResourceName", # required
+    #               },
+    #             },
+    #           },
+    #           match: { # required
+    #             prefix: "String", # required
+    #           },
+    #         },
+    #       }
+    #
+    # @!attribute [rw] grpc_route
+    #   An object that represents the specification of a gRPC gateway route.
+    #   @return [Types::GrpcGatewayRoute]
+    #
+    # @!attribute [rw] http2_route
+    #   An object that represents the specification of an HTTP/2 gateway
+    #   route.
+    #   @return [Types::HttpGatewayRoute]
+    #
+    # @!attribute [rw] http_route
+    #   An object that represents the specification of an HTTP gateway
+    #   route.
+    #   @return [Types::HttpGatewayRoute]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/GatewayRouteSpec AWS API Documentation
+    #
+    class GatewayRouteSpec < Struct.new(
+      :grpc_route,
+      :http2_route,
+      :http_route)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # The request contains a client token that was used for a previous
+    # update resource call with different specifications. Try the request
+    # again with a new client token.
+    #
+    # @!attribute [rw] message
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/ConflictException AWS API Documentation
+    #
+    class ConflictException < Struct.new(
+      :message)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # An object that represents the default properties for a backend.
+    #
+    # @note When making an API call, you may pass VirtualGatewayBackendDefaults
+    #   data as a hash:
+    #
+    #       {
+    #         client_policy: {
+    #           tls: {
+    #             enforce: false,
+    #             ports: [1],
+    #             validation: { # required
+    #               trust: { # required
+    #                 acm: {
+    #                   certificate_authority_arns: ["Arn"], # required
+    #                 },
+    #                 file: {
+    #                   certificate_chain: "FilePath", # required
+    #                 },
+    #               },
+    #             },
+    #           },
+    #         },
+    #       }
+    #
+    # @!attribute [rw] client_policy
+    #   A reference to an object that represents a client policy.
+    #   @return [Types::VirtualGatewayClientPolicy]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/VirtualGatewayBackendDefaults AWS API Documentation
+    #
+    class VirtualGatewayBackendDefaults < Struct.new(
+      :client_policy)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # An object that represents timeouts for different protocols.
+    #
+    # @note When making an API call, you may pass ListenerTimeout
+    #   data as a hash:
+    #
+    #       {
+    #         grpc: {
+    #           idle: {
+    #             unit: "ms", # accepts ms, s
+    #             value: 1,
+    #           },
+    #           per_request: {
+    #             unit: "ms", # accepts ms, s
+    #             value: 1,
+    #           },
+    #         },
+    #         http: {
+    #           idle: {
+    #             unit: "ms", # accepts ms, s
+    #             value: 1,
+    #           },
+    #           per_request: {
+    #             unit: "ms", # accepts ms, s
+    #             value: 1,
+    #           },
+    #         },
+    #         http2: {
+    #           idle: {
+    #             unit: "ms", # accepts ms, s
+    #             value: 1,
     #           },
-    #           dns: {
-    #             hostname: "Hostname", # required
+    #           per_request: {
+    #             unit: "ms", # accepts ms, s
+    #             value: 1,
+    #           },
+    #         },
+    #         tcp: {
+    #           idle: {
+    #             unit: "ms", # accepts ms, s
+    #             value: 1,
     #           },
     #         },
     #       }
     #
-    # @!attribute [rw] backend_defaults
-    #   A reference to an object that represents the defaults for backends.
-    #   @return [Types::BackendDefaults]
-    #
-    # @!attribute [rw] backends
-    #   The backends that the virtual node is expected to send outbound
-    #   traffic to.
-    #   @return [Array<Types::Backend>]
+    # @!attribute [rw] grpc
+    #   An object that represents types of timeouts.
+    #   @return [Types::GrpcTimeout]
     #
-    # @!attribute [rw] listeners
-    #   The listener that the virtual node is expected to receive inbound
-    #   traffic from. You can specify one listener.
-    #   @return [Array<Types::Listener>]
+    # @!attribute [rw] http
+    #   An object that represents types of timeouts.
+    #   @return [Types::HttpTimeout]
     #
-    # @!attribute [rw] logging
-    #   The inbound and outbound access logging information for the virtual
-    #   node.
-    #   @return [Types::Logging]
+    # @!attribute [rw] http2
+    #   An object that represents types of timeouts.
+    #   @return [Types::HttpTimeout]
     #
-    # @!attribute [rw] service_discovery
-    #   The service discovery information for the virtual node. If your
-    #   virtual node does not expect ingress traffic, you can omit this
-    #   parameter. If you specify a `listener`, then you must specify
-    #   service discovery information.
-    #   @return [Types::ServiceDiscovery]
+    # @!attribute [rw] tcp
+    #   An object that represents types of timeouts.
+    #   @return [Types::TcpTimeout]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/VirtualNodeSpec AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/ListenerTimeout AWS API Documentation
     #
-    class VirtualNodeSpec < Struct.new(
-      :backend_defaults,
-      :backends,
-      :listeners,
-      :logging,
-      :service_discovery)
+    class ListenerTimeout < Struct.new(
+      :grpc,
+      :http,
+      :http2,
+      :tcp)
+      SENSITIVE = []
       include Aws::Structure
     end
 
-    # @!attribute [rw] meshes
-    #   The list of existing service meshes.
-    #   @return [Array<Types::MeshRef>]
+    # @note When making an API call, you may pass DescribeGatewayRouteInput
+    #   data as a hash:
     #
-    # @!attribute [rw] next_token
-    #   The `nextToken` value to include in a future `ListMeshes` request.
-    #   When the results of a `ListMeshes` request exceed `limit`, you can
-    #   use this value to retrieve the next page of results. This value is
-    #   `null` when there are no more results to return.
+    #       {
+    #         gateway_route_name: "ResourceName", # required
+    #         mesh_name: "ResourceName", # required
+    #         mesh_owner: "AccountId",
+    #         virtual_gateway_name: "ResourceName", # required
+    #       }
+    #
+    # @!attribute [rw] gateway_route_name
+    #   The name of the gateway route to describe.
     #   @return [String]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/ListMeshesOutput AWS API Documentation
+    # @!attribute [rw] mesh_name
+    #   The name of the service mesh that the gateway route resides in.
+    #   @return [String]
     #
-    class ListMeshesOutput < Struct.new(
-      :meshes,
-      :next_token)
-      include Aws::Structure
-    end
-
-    # The request contains a client token that was used for a previous
-    # update resource call with different specifications. Try the request
-    # again with a new client token.
+    # @!attribute [rw] mesh_owner
+    #   The AWS IAM account ID of the service mesh owner. If the account ID
+    #   is not your own, then it's the ID of the account that shared the
+    #   mesh with your account. For more information about mesh sharing, see
+    #   [Working with shared meshes][1].
     #
-    # @!attribute [rw] message
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/app-mesh/latest/userguide/sharing.html
     #   @return [String]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/ConflictException AWS API Documentation
+    # @!attribute [rw] virtual_gateway_name
+    #   The name of the virtual gateway that the gateway route is associated
+    #   with.
+    #   @return [String]
     #
-    class ConflictException < Struct.new(
-      :message)
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/DescribeGatewayRouteInput AWS API Documentation
+    #
+    class DescribeGatewayRouteInput < Struct.new(
+      :gateway_route_name,
+      :mesh_name,
+      :mesh_owner,
+      :virtual_gateway_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1117,6 +2300,7 @@ module Aws::AppMesh
     class TlsValidationContextTrust < Struct.new(
       :acm,
       :file)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1143,6 +2327,7 @@ module Aws::AppMesh
     class PortMapping < Struct.new(
       :port,
       :protocol)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1164,6 +2349,7 @@ module Aws::AppMesh
     class ListVirtualServicesOutput < Struct.new(
       :next_token,
       :virtual_services)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1194,6 +2380,84 @@ module Aws::AppMesh
     class WeightedTarget < Struct.new(
       :virtual_node,
       :weight)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # An object that represents a gRPC gateway route.
+    #
+    # @note When making an API call, you may pass GrpcGatewayRoute
+    #   data as a hash:
+    #
+    #       {
+    #         action: { # required
+    #           target: { # required
+    #             virtual_service: { # required
+    #               virtual_service_name: "ResourceName", # required
+    #             },
+    #           },
+    #         },
+    #         match: { # required
+    #           service_name: "ServiceName",
+    #         },
+    #       }
+    #
+    # @!attribute [rw] action
+    #   An object that represents the action to take if a match is
+    #   determined.
+    #   @return [Types::GrpcGatewayRouteAction]
+    #
+    # @!attribute [rw] match
+    #   An object that represents the criteria for determining a request
+    #   match.
+    #   @return [Types::GrpcGatewayRouteMatch]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/GrpcGatewayRoute AWS API Documentation
+    #
+    class GrpcGatewayRoute < Struct.new(
+      :action,
+      :match)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # An object that represents a gateway route returned by a describe
+    # operation.
+    #
+    # @!attribute [rw] gateway_route_name
+    #   The name of the gateway route.
+    #   @return [String]
+    #
+    # @!attribute [rw] mesh_name
+    #   The name of the service mesh that the resource resides in.
+    #   @return [String]
+    #
+    # @!attribute [rw] metadata
+    #   An object that represents metadata for a resource.
+    #   @return [Types::ResourceMetadata]
+    #
+    # @!attribute [rw] spec
+    #   The specifications of the gateway route.
+    #   @return [Types::GatewayRouteSpec]
+    #
+    # @!attribute [rw] status
+    #   The status of the gateway route.
+    #   @return [Types::GatewayRouteStatus]
+    #
+    # @!attribute [rw] virtual_gateway_name
+    #   The virtual gateway that the gateway route is associated with.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/GatewayRouteData AWS API Documentation
+    #
+    class GatewayRouteData < Struct.new(
+      :gateway_route_name,
+      :mesh_name,
+      :metadata,
+      :spec,
+      :status,
+      :virtual_gateway_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1204,9 +2468,13 @@ module Aws::AppMesh
     #   @return [String]
     #
     # @!attribute [rw] created_at
+    #   The Unix epoch timestamp in seconds for when the resource was
+    #   created.
     #   @return [Time]
     #
     # @!attribute [rw] last_updated_at
+    #   The Unix epoch timestamp in seconds for when the resource was last
+    #   updated.
     #   @return [Time]
     #
     # @!attribute [rw] mesh_name
@@ -1217,7 +2485,7 @@ module Aws::AppMesh
     #   The AWS IAM account ID of the service mesh owner. If the account ID
     #   is not your own, then it's the ID of the account that shared the
     #   mesh with your account. For more information about mesh sharing, see
-    #   [Working with Shared Meshes][1].
+    #   [Working with shared meshes][1].
     #
     #
     #
@@ -1228,7 +2496,7 @@ module Aws::AppMesh
     #   The AWS IAM account ID of the resource owner. If the account ID is
     #   not your own, then it's the ID of the mesh owner or of another
     #   account that the mesh is shared with. For more information about
-    #   mesh sharing, see [Working with Shared Meshes][1].
+    #   mesh sharing, see [Working with shared meshes][1].
     #
     #
     #
@@ -1240,6 +2508,8 @@ module Aws::AppMesh
     #   @return [String]
     #
     # @!attribute [rw] version
+    #   The version of the resource. Resources are created at version 1, and
+    #   this version is incremented each time that they're updated.
     #   @return [Integer]
     #
     # @!attribute [rw] virtual_router_name
@@ -1258,6 +2528,7 @@ module Aws::AppMesh
       :route_name,
       :version,
       :virtual_router_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1278,7 +2549,7 @@ module Aws::AppMesh
     #   The AWS IAM account ID of the service mesh owner. If the account ID
     #   is not your own, then it's the ID of the account that shared the
     #   mesh with your account. For more information about mesh sharing, see
-    #   [Working with Shared Meshes][1].
+    #   [Working with shared meshes][1].
     #
     #
     #
@@ -1295,6 +2566,7 @@ module Aws::AppMesh
       :mesh_name,
       :mesh_owner,
       :virtual_node_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1333,6 +2605,7 @@ module Aws::AppMesh
       :spec,
       :status,
       :virtual_router_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1346,6 +2619,7 @@ module Aws::AppMesh
     #
     class InternalServerErrorException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1367,6 +2641,7 @@ module Aws::AppMesh
     #
     class TlsValidationContextAcmTrust < Struct.new(
       :certificate_authority_arns)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1379,6 +2654,7 @@ module Aws::AppMesh
     #
     class ForbiddenException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1428,6 +2704,7 @@ module Aws::AppMesh
       :range,
       :regex,
       :suffix)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1439,6 +2716,79 @@ module Aws::AppMesh
     #
     class DeleteMeshOutput < Struct.new(
       :mesh)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # An object that represents a Transport Layer Security (TLS) client
+    # policy.
+    #
+    # @note When making an API call, you may pass VirtualGatewayClientPolicyTls
+    #   data as a hash:
+    #
+    #       {
+    #         enforce: false,
+    #         ports: [1],
+    #         validation: { # required
+    #           trust: { # required
+    #             acm: {
+    #               certificate_authority_arns: ["Arn"], # required
+    #             },
+    #             file: {
+    #               certificate_chain: "FilePath", # required
+    #             },
+    #           },
+    #         },
+    #       }
+    #
+    # @!attribute [rw] enforce
+    #   Whether the policy is enforced. The default is `True`, if a value
+    #   isn't specified.
+    #   @return [Boolean]
+    #
+    # @!attribute [rw] ports
+    #   One or more ports that the policy is enforced for.
+    #   @return [Array<Integer>]
+    #
+    # @!attribute [rw] validation
+    #   A reference to an object that represents a TLS validation context.
+    #   @return [Types::VirtualGatewayTlsValidationContext]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/VirtualGatewayClientPolicyTls AWS API Documentation
+    #
+    class VirtualGatewayClientPolicyTls < Struct.new(
+      :enforce,
+      :ports,
+      :validation)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # An object that represents the status of the mesh resource.
+    #
+    # @!attribute [rw] status
+    #   The current status.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/VirtualGatewayStatus AWS API Documentation
+    #
+    class VirtualGatewayStatus < Struct.new(
+      :status)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # An object that represents the current status of a gateway route.
+    #
+    # @!attribute [rw] status
+    #   The current status for the gateway route.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/GatewayRouteStatus AWS API Documentation
+    #
+    class GatewayRouteStatus < Struct.new(
+      :status)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1446,31 +2796,97 @@ module Aws::AppMesh
     #   data as a hash:
     #
     #       {
-    #         resource_arn: "Arn", # required
-    #         tags: [ # required
-    #           {
-    #             key: "TagKey", # required
-    #             value: "TagValue",
+    #         resource_arn: "Arn", # required
+    #         tags: [ # required
+    #           {
+    #             key: "TagKey", # required
+    #             value: "TagValue",
+    #           },
+    #         ],
+    #       }
+    #
+    # @!attribute [rw] resource_arn
+    #   The Amazon Resource Name (ARN) of the resource to add tags to.
+    #   @return [String]
+    #
+    # @!attribute [rw] tags
+    #   The tags to add to the resource. A tag is an array of key-value
+    #   pairs. Tag keys can have a maximum character length of 128
+    #   characters, and tag values can have a maximum length of 256
+    #   characters.
+    #   @return [Array<Types::TagRef>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/TagResourceInput AWS API Documentation
+    #
+    class TagResourceInput < Struct.new(
+      :resource_arn,
+      :tags)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] virtual_gateway
+    #   The full description of your virtual gateway following the create
+    #   call.
+    #   @return [Types::VirtualGatewayData]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/CreateVirtualGatewayOutput AWS API Documentation
+    #
+    class CreateVirtualGatewayOutput < Struct.new(
+      :virtual_gateway)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] next_token
+    #   The `nextToken` value to include in a future `ListVirtualGateways`
+    #   request. When the results of a `ListVirtualGateways` request exceed
+    #   `limit`, you can use this value to retrieve the next page of
+    #   results. This value is `null` when there are no more results to
+    #   return.
+    #   @return [String]
+    #
+    # @!attribute [rw] virtual_gateways
+    #   The list of existing virtual gateways for the specified service
+    #   mesh.
+    #   @return [Array<Types::VirtualGatewayRef>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/ListVirtualGatewaysOutput AWS API Documentation
+    #
+    class ListVirtualGatewaysOutput < Struct.new(
+      :next_token,
+      :virtual_gateways)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # An object that represents a Transport Layer Security (TLS) validation
+    # context.
+    #
+    # @note When making an API call, you may pass VirtualGatewayTlsValidationContext
+    #   data as a hash:
+    #
+    #       {
+    #         trust: { # required
+    #           acm: {
+    #             certificate_authority_arns: ["Arn"], # required
     #           },
-    #         ],
+    #           file: {
+    #             certificate_chain: "FilePath", # required
+    #           },
+    #         },
     #       }
     #
-    # @!attribute [rw] resource_arn
-    #   The Amazon Resource Name (ARN) of the resource to add tags to.
-    #   @return [String]
-    #
-    # @!attribute [rw] tags
-    #   The tags to add to the resource. A tag is an array of key-value
-    #   pairs. Tag keys can have a maximum character length of 128
-    #   characters, and tag values can have a maximum length of 256
-    #   characters.
-    #   @return [Array<Types::TagRef>]
+    # @!attribute [rw] trust
+    #   A reference to an object that represents a TLS validation context
+    #   trust.
+    #   @return [Types::VirtualGatewayTlsValidationContextTrust]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/TagResourceInput AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/VirtualGatewayTlsValidationContext AWS API Documentation
     #
-    class TagResourceInput < Struct.new(
-      :resource_arn,
-      :tags)
+    class VirtualGatewayTlsValidationContext < Struct.new(
+      :trust)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1501,6 +2917,7 @@ module Aws::AppMesh
     class VirtualServiceProvider < Struct.new(
       :virtual_node,
       :virtual_router)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1551,6 +2968,7 @@ module Aws::AppMesh
       :metadata,
       :method_name,
       :service_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1592,6 +3010,7 @@ module Aws::AppMesh
       :attributes,
       :namespace_name,
       :service_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1603,6 +3022,7 @@ module Aws::AppMesh
     #
     class UpdateVirtualServiceOutput < Struct.new(
       :virtual_service)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1616,6 +3036,7 @@ module Aws::AppMesh
     #
     class MeshStatus < Struct.new(
       :status)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1683,6 +3104,44 @@ module Aws::AppMesh
     #                 port: 1, # required
     #                 protocol: "grpc", # required, accepts grpc, http, http2, tcp
     #               },
+    #               timeout: {
+    #                 grpc: {
+    #                   idle: {
+    #                     unit: "ms", # accepts ms, s
+    #                     value: 1,
+    #                   },
+    #                   per_request: {
+    #                     unit: "ms", # accepts ms, s
+    #                     value: 1,
+    #                   },
+    #                 },
+    #                 http: {
+    #                   idle: {
+    #                     unit: "ms", # accepts ms, s
+    #                     value: 1,
+    #                   },
+    #                   per_request: {
+    #                     unit: "ms", # accepts ms, s
+    #                     value: 1,
+    #                   },
+    #                 },
+    #                 http2: {
+    #                   idle: {
+    #                     unit: "ms", # accepts ms, s
+    #                     value: 1,
+    #                   },
+    #                   per_request: {
+    #                     unit: "ms", # accepts ms, s
+    #                     value: 1,
+    #                   },
+    #                 },
+    #                 tcp: {
+    #                   idle: {
+    #                     unit: "ms", # accepts ms, s
+    #                     value: 1,
+    #                   },
+    #                 },
+    #               },
     #               tls: {
     #                 certificate: { # required
     #                   acm: {
@@ -1747,7 +3206,7 @@ module Aws::AppMesh
     #   is not your own, then the account that you specify must share the
     #   mesh with your account before you can create the resource in the
     #   service mesh. For more information about mesh sharing, see [Working
-    #   with Shared Meshes][1].
+    #   with shared meshes][1].
     #
     #
     #
@@ -1779,6 +3238,7 @@ module Aws::AppMesh
       :spec,
       :tags,
       :virtual_node_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1792,6 +3252,7 @@ module Aws::AppMesh
     #
     class NotFoundException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1841,6 +3302,16 @@ module Aws::AppMesh
     #             },
     #             tcp_retry_events: ["connection-error"], # accepts connection-error
     #           },
+    #           timeout: {
+    #             idle: {
+    #               unit: "ms", # accepts ms, s
+    #               value: 1,
+    #             },
+    #             per_request: {
+    #               unit: "ms", # accepts ms, s
+    #               value: 1,
+    #             },
+    #           },
     #         },
     #         http2_route: {
     #           action: { # required
@@ -1881,6 +3352,16 @@ module Aws::AppMesh
     #             },
     #             tcp_retry_events: ["connection-error"], # accepts connection-error
     #           },
+    #           timeout: {
+    #             idle: {
+    #               unit: "ms", # accepts ms, s
+    #               value: 1,
+    #             },
+    #             per_request: {
+    #               unit: "ms", # accepts ms, s
+    #               value: 1,
+    #             },
+    #           },
     #         },
     #         http_route: {
     #           action: { # required
@@ -1921,6 +3402,16 @@ module Aws::AppMesh
     #             },
     #             tcp_retry_events: ["connection-error"], # accepts connection-error
     #           },
+    #           timeout: {
+    #             idle: {
+    #               unit: "ms", # accepts ms, s
+    #               value: 1,
+    #             },
+    #             per_request: {
+    #               unit: "ms", # accepts ms, s
+    #               value: 1,
+    #             },
+    #           },
     #         },
     #         priority: 1,
     #         tcp_route: {
@@ -1932,6 +3423,12 @@ module Aws::AppMesh
     #               },
     #             ],
     #           },
+    #           timeout: {
+    #             idle: {
+    #               unit: "ms", # accepts ms, s
+    #               value: 1,
+    #             },
+    #           },
     #         },
     #       }
     #
@@ -1964,6 +3461,129 @@ module Aws::AppMesh
       :http_route,
       :priority,
       :tcp_route)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # An object that represents a gateway route returned by a list
+    # operation.
+    #
+    # @!attribute [rw] arn
+    #   The full Amazon Resource Name (ARN) for the gateway route.
+    #   @return [String]
+    #
+    # @!attribute [rw] created_at
+    #   The Unix epoch timestamp in seconds for when the resource was
+    #   created.
+    #   @return [Time]
+    #
+    # @!attribute [rw] gateway_route_name
+    #   The name of the gateway route.
+    #   @return [String]
+    #
+    # @!attribute [rw] last_updated_at
+    #   The Unix epoch timestamp in seconds for when the resource was last
+    #   updated.
+    #   @return [Time]
+    #
+    # @!attribute [rw] mesh_name
+    #   The name of the service mesh that the resource resides in.
+    #   @return [String]
+    #
+    # @!attribute [rw] mesh_owner
+    #   The AWS IAM account ID of the service mesh owner. If the account ID
+    #   is not your own, then it's the ID of the account that shared the
+    #   mesh with your account. For more information about mesh sharing, see
+    #   [Working with shared meshes][1].
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/app-mesh/latest/userguide/sharing.html
+    #   @return [String]
+    #
+    # @!attribute [rw] resource_owner
+    #   The AWS IAM account ID of the resource owner. If the account ID is
+    #   not your own, then it's the ID of the mesh owner or of another
+    #   account that the mesh is shared with. For more information about
+    #   mesh sharing, see [Working with shared meshes][1].
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/app-mesh/latest/userguide/sharing.html
+    #   @return [String]
+    #
+    # @!attribute [rw] version
+    #   The version of the resource. Resources are created at version 1, and
+    #   this version is incremented each time that they're updated.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] virtual_gateway_name
+    #   The virtual gateway that the gateway route is associated with.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/GatewayRouteRef AWS API Documentation
+    #
+    class GatewayRouteRef < Struct.new(
+      :arn,
+      :created_at,
+      :gateway_route_name,
+      :last_updated_at,
+      :mesh_name,
+      :mesh_owner,
+      :resource_owner,
+      :version,
+      :virtual_gateway_name)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # An object that represents an AWS Certicate Manager (ACM) certificate.
+    #
+    # @note When making an API call, you may pass VirtualGatewayListenerTlsAcmCertificate
+    #   data as a hash:
+    #
+    #       {
+    #         certificate_arn: "Arn", # required
+    #       }
+    #
+    # @!attribute [rw] certificate_arn
+    #   The Amazon Resource Name (ARN) for the certificate. The certificate
+    #   must meet specific requirements and you must have proxy
+    #   authorization enabled. For more information, see [Transport Layer
+    #   Security (TLS)][1].
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/app-mesh/latest/userguide/tls.html#virtual-node-tls-prerequisites
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/VirtualGatewayListenerTlsAcmCertificate AWS API Documentation
+    #
+    class VirtualGatewayListenerTlsAcmCertificate < Struct.new(
+      :certificate_arn)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] gateway_routes
+    #   The list of existing gateway routes for the specified service mesh
+    #   and virtual gateway.
+    #   @return [Array<Types::GatewayRouteRef>]
+    #
+    # @!attribute [rw] next_token
+    #   The `nextToken` value to include in a future `ListGatewayRoutes`
+    #   request. When the results of a `ListGatewayRoutes` request exceed
+    #   `limit`, you can use this value to retrieve the next page of
+    #   results. This value is `null` when there are no more results to
+    #   return.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/ListGatewayRoutesOutput AWS API Documentation
+    #
+    class ListGatewayRoutesOutput < Struct.new(
+      :gateway_routes,
+      :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1976,6 +3596,7 @@ module Aws::AppMesh
     #
     class CreateVirtualServiceOutput < Struct.new(
       :virtual_service)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2006,6 +3627,7 @@ module Aws::AppMesh
     #
     class FileAccessLog < Struct.new(
       :path)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2026,6 +3648,40 @@ module Aws::AppMesh
     #
     class VirtualRouterServiceProvider < Struct.new(
       :virtual_router_name)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # An object that represents types of timeouts.
+    #
+    # @note When making an API call, you may pass HttpTimeout
+    #   data as a hash:
+    #
+    #       {
+    #         idle: {
+    #           unit: "ms", # accepts ms, s
+    #           value: 1,
+    #         },
+    #         per_request: {
+    #           unit: "ms", # accepts ms, s
+    #           value: 1,
+    #         },
+    #       }
+    #
+    # @!attribute [rw] idle
+    #   An object that represents a duration of time.
+    #   @return [Types::Duration]
+    #
+    # @!attribute [rw] per_request
+    #   An object that represents a duration of time.
+    #   @return [Types::Duration]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/HttpTimeout AWS API Documentation
+    #
+    class HttpTimeout < Struct.new(
+      :idle,
+      :per_request)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2046,7 +3702,7 @@ module Aws::AppMesh
     #   The AWS IAM account ID of the service mesh owner. If the account ID
     #   is not your own, then it's the ID of the account that shared the
     #   mesh with your account. For more information about mesh sharing, see
-    #   [Working with Shared Meshes][1].
+    #   [Working with shared meshes][1].
     #
     #
     #
@@ -2057,52 +3713,119 @@ module Aws::AppMesh
     #   The name of the virtual service to delete.
     #   @return [String]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/DeleteVirtualServiceInput AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/DeleteVirtualServiceInput AWS API Documentation
+    #
+    class DeleteVirtualServiceInput < Struct.new(
+      :mesh_name,
+      :mesh_owner,
+      :virtual_service_name)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # An object that represents a Transport Layer Security (TLS) validation
+    # context.
+    #
+    # @note When making an API call, you may pass TlsValidationContext
+    #   data as a hash:
+    #
+    #       {
+    #         trust: { # required
+    #           acm: {
+    #             certificate_authority_arns: ["Arn"], # required
+    #           },
+    #           file: {
+    #             certificate_chain: "FilePath", # required
+    #           },
+    #         },
+    #       }
+    #
+    # @!attribute [rw] trust
+    #   A reference to an object that represents a TLS validation context
+    #   trust.
+    #   @return [Types::TlsValidationContextTrust]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/TlsValidationContext AWS API Documentation
+    #
+    class TlsValidationContext < Struct.new(
+      :trust)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] virtual_router
+    #   The virtual router that was deleted.
+    #   @return [Types::VirtualRouterData]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/DeleteVirtualRouterOutput AWS API Documentation
+    #
+    class DeleteVirtualRouterOutput < Struct.new(
+      :virtual_router)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @note When making an API call, you may pass DescribeVirtualGatewayInput
+    #   data as a hash:
+    #
+    #       {
+    #         mesh_name: "ResourceName", # required
+    #         mesh_owner: "AccountId",
+    #         virtual_gateway_name: "ResourceName", # required
+    #       }
+    #
+    # @!attribute [rw] mesh_name
+    #   The name of the service mesh that the gateway route resides in.
+    #   @return [String]
+    #
+    # @!attribute [rw] mesh_owner
+    #   The AWS IAM account ID of the service mesh owner. If the account ID
+    #   is not your own, then it's the ID of the account that shared the
+    #   mesh with your account. For more information about mesh sharing, see
+    #   [Working with shared meshes][1].
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/app-mesh/latest/userguide/sharing.html
+    #   @return [String]
+    #
+    # @!attribute [rw] virtual_gateway_name
+    #   The name of the virtual gateway to describe.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/DescribeVirtualGatewayInput AWS API Documentation
     #
-    class DeleteVirtualServiceInput < Struct.new(
+    class DescribeVirtualGatewayInput < Struct.new(
       :mesh_name,
       :mesh_owner,
-      :virtual_service_name)
+      :virtual_gateway_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
-    # An object that represents a Transport Layer Security (TLS) validation
-    # context.
+    # An object that represents the action to take if a match is determined.
     #
-    # @note When making an API call, you may pass TlsValidationContext
+    # @note When making an API call, you may pass GrpcGatewayRouteAction
     #   data as a hash:
     #
     #       {
-    #         trust: { # required
-    #           acm: {
-    #             certificate_authority_arns: ["Arn"], # required
-    #           },
-    #           file: {
-    #             certificate_chain: "FilePath", # required
+    #         target: { # required
+    #           virtual_service: { # required
+    #             virtual_service_name: "ResourceName", # required
     #           },
     #         },
     #       }
     #
-    # @!attribute [rw] trust
-    #   A reference to an object that represents a TLS validation context
-    #   trust.
-    #   @return [Types::TlsValidationContextTrust]
-    #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/TlsValidationContext AWS API Documentation
-    #
-    class TlsValidationContext < Struct.new(
-      :trust)
-      include Aws::Structure
-    end
-
-    # @!attribute [rw] virtual_router
-    #   The virtual router that was deleted.
-    #   @return [Types::VirtualRouterData]
+    # @!attribute [rw] target
+    #   An object that represents the target that traffic is routed to when
+    #   a request matches the gateway route.
+    #   @return [Types::GatewayRouteTarget]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/DeleteVirtualRouterOutput AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/GrpcGatewayRouteAction AWS API Documentation
     #
-    class DeleteVirtualRouterOutput < Struct.new(
-      :virtual_router)
+    class GrpcGatewayRouteAction < Struct.new(
+      :target)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2114,6 +3837,7 @@ module Aws::AppMesh
     #
     class DeleteVirtualNodeOutput < Struct.new(
       :virtual_node)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2181,6 +3905,44 @@ module Aws::AppMesh
     #                 port: 1, # required
     #                 protocol: "grpc", # required, accepts grpc, http, http2, tcp
     #               },
+    #               timeout: {
+    #                 grpc: {
+    #                   idle: {
+    #                     unit: "ms", # accepts ms, s
+    #                     value: 1,
+    #                   },
+    #                   per_request: {
+    #                     unit: "ms", # accepts ms, s
+    #                     value: 1,
+    #                   },
+    #                 },
+    #                 http: {
+    #                   idle: {
+    #                     unit: "ms", # accepts ms, s
+    #                     value: 1,
+    #                   },
+    #                   per_request: {
+    #                     unit: "ms", # accepts ms, s
+    #                     value: 1,
+    #                   },
+    #                 },
+    #                 http2: {
+    #                   idle: {
+    #                     unit: "ms", # accepts ms, s
+    #                     value: 1,
+    #                   },
+    #                   per_request: {
+    #                     unit: "ms", # accepts ms, s
+    #                     value: 1,
+    #                   },
+    #                 },
+    #                 tcp: {
+    #                   idle: {
+    #                     unit: "ms", # accepts ms, s
+    #                     value: 1,
+    #                   },
+    #                 },
+    #               },
     #               tls: {
     #                 certificate: { # required
     #                   acm: {
@@ -2238,7 +4000,7 @@ module Aws::AppMesh
     #   The AWS IAM account ID of the service mesh owner. If the account ID
     #   is not your own, then it's the ID of the account that shared the
     #   mesh with your account. For more information about mesh sharing, see
-    #   [Working with Shared Meshes][1].
+    #   [Working with shared meshes][1].
     #
     #
     #
@@ -2262,6 +4024,7 @@ module Aws::AppMesh
       :mesh_owner,
       :spec,
       :virtual_node_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2305,6 +4068,7 @@ module Aws::AppMesh
     class ListenerTls < Struct.new(
       :certificate,
       :mode)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2323,6 +4087,7 @@ module Aws::AppMesh
     #
     class DeleteMeshInput < Struct.new(
       :mesh_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2370,7 +4135,7 @@ module Aws::AppMesh
     #   is not your own, then the account that you specify must share the
     #   mesh with your account before you can create the resource in the
     #   service mesh. For more information about mesh sharing, see [Working
-    #   with Shared Meshes][1].
+    #   with shared meshes][1].
     #
     #
     #
@@ -2402,6 +4167,7 @@ module Aws::AppMesh
       :spec,
       :tags,
       :virtual_service_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2442,7 +4208,7 @@ module Aws::AppMesh
     #   The AWS IAM account ID of the service mesh owner. If the account ID
     #   is not your own, then it's the ID of the account that shared the
     #   mesh with your account. For more information about mesh sharing, see
-    #   [Working with Shared Meshes][1].
+    #   [Working with shared meshes][1].
     #
     #
     #
@@ -2466,6 +4232,56 @@ module Aws::AppMesh
       :mesh_owner,
       :spec,
       :virtual_router_name)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # An object that represents the action to take if a match is determined.
+    #
+    # @note When making an API call, you may pass HttpGatewayRouteAction
+    #   data as a hash:
+    #
+    #       {
+    #         target: { # required
+    #           virtual_service: { # required
+    #             virtual_service_name: "ResourceName", # required
+    #           },
+    #         },
+    #       }
+    #
+    # @!attribute [rw] target
+    #   An object that represents the target that traffic is routed to when
+    #   a request matches the gateway route.
+    #   @return [Types::GatewayRouteTarget]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/HttpGatewayRouteAction AWS API Documentation
+    #
+    class HttpGatewayRouteAction < Struct.new(
+      :target)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # An object that represents the criteria for determining a request
+    # match.
+    #
+    # @note When making an API call, you may pass GrpcGatewayRouteMatch
+    #   data as a hash:
+    #
+    #       {
+    #         service_name: "ServiceName",
+    #       }
+    #
+    # @!attribute [rw] service_name
+    #   The fully qualified domain name for the service to match from the
+    #   request.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/GrpcGatewayRouteMatch AWS API Documentation
+    #
+    class GrpcGatewayRouteMatch < Struct.new(
+      :service_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2508,6 +4324,7 @@ module Aws::AppMesh
       :limit,
       :next_token,
       :resource_arn)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2520,6 +4337,7 @@ module Aws::AppMesh
     #
     class ServiceUnavailableException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2531,6 +4349,7 @@ module Aws::AppMesh
     #
     class DescribeMeshOutput < Struct.new(
       :mesh)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2551,7 +4370,7 @@ module Aws::AppMesh
     #   The AWS IAM account ID of the service mesh owner. If the account ID
     #   is not your own, then it's the ID of the account that shared the
     #   mesh with your account. For more information about mesh sharing, see
-    #   [Working with Shared Meshes][1].
+    #   [Working with shared meshes][1].
     #
     #
     #
@@ -2568,6 +4387,19 @@ module Aws::AppMesh
       :mesh_name,
       :mesh_owner,
       :virtual_router_name)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] gateway_route
+    #   A full description of the gateway route that was updated.
+    #   @return [Types::GatewayRouteData]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/UpdateGatewayRouteOutput AWS API Documentation
+    #
+    class UpdateGatewayRouteOutput < Struct.new(
+      :gateway_route)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2589,7 +4421,7 @@ module Aws::AppMesh
     #   The AWS IAM account ID of the service mesh owner. If the account ID
     #   is not your own, then it's the ID of the account that shared the
     #   mesh with your account. For more information about mesh sharing, see
-    #   [Working with Shared Meshes][1].
+    #   [Working with shared meshes][1].
     #
     #
     #
@@ -2611,6 +4443,7 @@ module Aws::AppMesh
       :mesh_owner,
       :route_name,
       :virtual_router_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2622,6 +4455,19 @@ module Aws::AppMesh
     #
     class DeleteRouteOutput < Struct.new(
       :route)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] gateway_route
+    #   The gateway route that was deleted.
+    #   @return [Types::GatewayRouteData]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/DeleteGatewayRouteOutput AWS API Documentation
+    #
+    class DeleteGatewayRouteOutput < Struct.new(
+      :gateway_route)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2662,7 +4508,7 @@ module Aws::AppMesh
     #   The AWS IAM account ID of the service mesh owner. If the account ID
     #   is not your own, then it's the ID of the account that shared the
     #   mesh with your account. For more information about mesh sharing, see
-    #   [Working with Shared Meshes][1].
+    #   [Working with shared meshes][1].
     #
     #
     #
@@ -2686,6 +4532,7 @@ module Aws::AppMesh
       :mesh_owner,
       :spec,
       :virtual_service_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2697,6 +4544,7 @@ module Aws::AppMesh
     #
     class UpdateRouteOutput < Struct.new(
       :route)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2723,6 +4571,7 @@ module Aws::AppMesh
     #
     class HttpRouteAction < Struct.new(
       :weighted_targets)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2756,7 +4605,7 @@ module Aws::AppMesh
     #   The AWS IAM account ID of the service mesh owner. If the account ID
     #   is not your own, then it's the ID of the account that shared the
     #   mesh with your account. For more information about mesh sharing, see
-    #   [Working with Shared Meshes][1].
+    #   [Working with shared meshes][1].
     #
     #
     #
@@ -2782,6 +4631,7 @@ module Aws::AppMesh
       :mesh_owner,
       :next_token,
       :virtual_router_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2793,9 +4643,13 @@ module Aws::AppMesh
     #   @return [String]
     #
     # @!attribute [rw] created_at
+    #   The Unix epoch timestamp in seconds for when the resource was
+    #   created.
     #   @return [Time]
     #
     # @!attribute [rw] last_updated_at
+    #   The Unix epoch timestamp in seconds for when the resource was last
+    #   updated.
     #   @return [Time]
     #
     # @!attribute [rw] mesh_name
@@ -2806,7 +4660,7 @@ module Aws::AppMesh
     #   The AWS IAM account ID of the service mesh owner. If the account ID
     #   is not your own, then it's the ID of the account that shared the
     #   mesh with your account. For more information about mesh sharing, see
-    #   [Working with Shared Meshes][1].
+    #   [Working with shared meshes][1].
     #
     #
     #
@@ -2817,7 +4671,7 @@ module Aws::AppMesh
     #   The AWS IAM account ID of the resource owner. If the account ID is
     #   not your own, then it's the ID of the mesh owner or of another
     #   account that the mesh is shared with. For more information about
-    #   mesh sharing, see [Working with Shared Meshes][1].
+    #   mesh sharing, see [Working with shared meshes][1].
     #
     #
     #
@@ -2825,6 +4679,8 @@ module Aws::AppMesh
     #   @return [String]
     #
     # @!attribute [rw] version
+    #   The version of the resource. Resources are created at version 1, and
+    #   this version is incremented each time that they're updated.
     #   @return [Integer]
     #
     # @!attribute [rw] virtual_service_name
@@ -2842,6 +4698,48 @@ module Aws::AppMesh
       :resource_owner,
       :version,
       :virtual_service_name)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # An object that represents types of timeouts.
+    #
+    # @note When making an API call, you may pass GrpcTimeout
+    #   data as a hash:
+    #
+    #       {
+    #         idle: {
+    #           unit: "ms", # accepts ms, s
+    #           value: 1,
+    #         },
+    #         per_request: {
+    #           unit: "ms", # accepts ms, s
+    #           value: 1,
+    #         },
+    #       }
+    #
+    # @!attribute [rw] idle
+    #   An object that represents an idle timeout. An idle timeout bounds
+    #   the amount of time that a connection may be idle. The default value
+    #   is none.
+    #   @return [Types::Duration]
+    #
+    # @!attribute [rw] per_request
+    #   An object that represents a per request timeout. The default value
+    #   is 15 seconds. If you set a higher timeout, then make sure that the
+    #   higher value is set for each App Mesh resource in a conversation.
+    #   For example, if a virtual node backend uses a virtual router
+    #   provider to route to another virtual node, then the timeout should
+    #   be greater than 15 seconds for the source and destination virtual
+    #   node and the route.
+    #   @return [Types::Duration]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/GrpcTimeout AWS API Documentation
+    #
+    class GrpcTimeout < Struct.new(
+      :idle,
+      :per_request)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2855,6 +4753,7 @@ module Aws::AppMesh
     #
     class VirtualNodeStatus < Struct.new(
       :status)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2866,9 +4765,13 @@ module Aws::AppMesh
     #   @return [String]
     #
     # @!attribute [rw] created_at
+    #   The Unix epoch timestamp in seconds for when the resource was
+    #   created.
     #   @return [Time]
     #
     # @!attribute [rw] last_updated_at
+    #   The Unix epoch timestamp in seconds for when the resource was last
+    #   updated.
     #   @return [Time]
     #
     # @!attribute [rw] mesh_name
@@ -2879,7 +4782,7 @@ module Aws::AppMesh
     #   The AWS IAM account ID of the service mesh owner. If the account ID
     #   is not your own, then it's the ID of the account that shared the
     #   mesh with your account. For more information about mesh sharing, see
-    #   [Working with Shared Meshes][1].
+    #   [Working with shared meshes][1].
     #
     #
     #
@@ -2890,7 +4793,7 @@ module Aws::AppMesh
     #   The AWS IAM account ID of the resource owner. If the account ID is
     #   not your own, then it's the ID of the mesh owner or of another
     #   account that the mesh is shared with. For more information about
-    #   mesh sharing, see [Working with Shared Meshes][1].
+    #   mesh sharing, see [Working with shared meshes][1].
     #
     #
     #
@@ -2898,6 +4801,8 @@ module Aws::AppMesh
     #   @return [String]
     #
     # @!attribute [rw] version
+    #   The version of the resource. Resources are created at version 1, and
+    #   this version is incremented each time that they're updated.
     #   @return [Integer]
     #
     # @!attribute [rw] virtual_router_name
@@ -2915,6 +4820,7 @@ module Aws::AppMesh
       :resource_owner,
       :version,
       :virtual_router_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2949,6 +4855,7 @@ module Aws::AppMesh
       :spec,
       :status,
       :virtual_service_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2992,6 +4899,7 @@ module Aws::AppMesh
       :invert,
       :match,
       :name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3002,9 +4910,13 @@ module Aws::AppMesh
     #   @return [String]
     #
     # @!attribute [rw] created_at
+    #   The Unix epoch timestamp in seconds for when the resource was
+    #   created.
     #   @return [Time]
     #
     # @!attribute [rw] last_updated_at
+    #   The Unix epoch timestamp in seconds for when the resource was last
+    #   updated.
     #   @return [Time]
     #
     # @!attribute [rw] mesh_name
@@ -3015,7 +4927,7 @@ module Aws::AppMesh
     #   The AWS IAM account ID of the service mesh owner. If the account ID
     #   is not your own, then it's the ID of the account that shared the
     #   mesh with your account. For more information about mesh sharing, see
-    #   [Working with Shared Meshes][1].
+    #   [Working with shared meshes][1].
     #
     #
     #
@@ -3026,7 +4938,7 @@ module Aws::AppMesh
     #   The AWS IAM account ID of the resource owner. If the account ID is
     #   not your own, then it's the ID of the mesh owner or of another
     #   account that the mesh is shared with. For more information about
-    #   mesh sharing, see [Working with Shared Meshes][1].
+    #   mesh sharing, see [Working with shared meshes][1].
     #
     #
     #
@@ -3034,6 +4946,8 @@ module Aws::AppMesh
     #   @return [String]
     #
     # @!attribute [rw] version
+    #   The version of the resource. Resources are created at version 1, and
+    #   this version is incremented each time that they're updated.
     #   @return [Integer]
     #
     # @!attribute [rw] virtual_node_name
@@ -3051,6 +4965,7 @@ module Aws::AppMesh
       :resource_owner,
       :version,
       :virtual_node_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3105,6 +5020,7 @@ module Aws::AppMesh
       :mesh_name,
       :spec,
       :tags)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3131,6 +5047,30 @@ module Aws::AppMesh
     #
     class GrpcRouteAction < Struct.new(
       :weighted_targets)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # An object that represents a Transport Layer Security (TLS) validation
+    # context trust for a local file.
+    #
+    # @note When making an API call, you may pass VirtualGatewayTlsValidationContextFileTrust
+    #   data as a hash:
+    #
+    #       {
+    #         certificate_chain: "FilePath", # required
+    #       }
+    #
+    # @!attribute [rw] certificate_chain
+    #   The certificate trust chain for a certificate stored on the file
+    #   system of the virtual node that the proxy is running on.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/VirtualGatewayTlsValidationContextFileTrust AWS API Documentation
+    #
+    class VirtualGatewayTlsValidationContextFileTrust < Struct.new(
+      :certificate_chain)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3148,6 +5088,7 @@ module Aws::AppMesh
     #
     class LimitExceededException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3160,6 +5101,7 @@ module Aws::AppMesh
     #
     class UpdateMeshOutput < Struct.new(
       :mesh)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3209,6 +5151,7 @@ module Aws::AppMesh
       :range,
       :regex,
       :suffix)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3229,7 +5172,7 @@ module Aws::AppMesh
     #   The AWS IAM account ID of the service mesh owner. If the account ID
     #   is not your own, then it's the ID of the account that shared the
     #   mesh with your account. For more information about mesh sharing, see
-    #   [Working with Shared Meshes][1].
+    #   [Working with shared meshes][1].
     #
     #
     #
@@ -3246,6 +5189,7 @@ module Aws::AppMesh
       :mesh_name,
       :mesh_owner,
       :virtual_service_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3277,6 +5221,7 @@ module Aws::AppMesh
     class AwsCloudMapInstanceAttribute < Struct.new(
       :key,
       :value)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3305,6 +5250,52 @@ module Aws::AppMesh
     #
     class VirtualServiceSpec < Struct.new(
       :provider)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # An object that represents a TLS validation context trust for an AWS
+    # Certicate Manager (ACM) certificate.
+    #
+    # @note When making an API call, you may pass VirtualGatewayTlsValidationContextAcmTrust
+    #   data as a hash:
+    #
+    #       {
+    #         certificate_authority_arns: ["Arn"], # required
+    #       }
+    #
+    # @!attribute [rw] certificate_authority_arns
+    #   One or more ACM Amazon Resource Name (ARN)s.
+    #   @return [Array<String>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/VirtualGatewayTlsValidationContextAcmTrust AWS API Documentation
+    #
+    class VirtualGatewayTlsValidationContextAcmTrust < Struct.new(
+      :certificate_authority_arns)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # The access log configuration for a virtual gateway.
+    #
+    # @note When making an API call, you may pass VirtualGatewayAccessLog
+    #   data as a hash:
+    #
+    #       {
+    #         file: {
+    #           path: "FilePath", # required
+    #         },
+    #       }
+    #
+    # @!attribute [rw] file
+    #   The file object to send virtual gateway access logs to.
+    #   @return [Types::VirtualGatewayFileAccessLog]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/VirtualGatewayAccessLog AWS API Documentation
+    #
+    class VirtualGatewayAccessLog < Struct.new(
+      :file)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3334,6 +5325,7 @@ module Aws::AppMesh
     class MatchRange < Struct.new(
       :end,
       :start)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3351,16 +5343,40 @@ module Aws::AppMesh
     #             },
     #           ],
     #         },
+    #         timeout: {
+    #           idle: {
+    #             unit: "ms", # accepts ms, s
+    #             value: 1,
+    #           },
+    #         },
     #       }
     #
     # @!attribute [rw] action
     #   The action to take if a match is determined.
     #   @return [Types::TcpRouteAction]
     #
+    # @!attribute [rw] timeout
+    #   An object that represents types of timeouts.
+    #   @return [Types::TcpTimeout]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/TcpRoute AWS API Documentation
     #
     class TcpRoute < Struct.new(
-      :action)
+      :action,
+      :timeout)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] virtual_gateway
+    #   A full description of the virtual gateway that was updated.
+    #   @return [Types::VirtualGatewayData]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/UpdateVirtualGatewayOutput AWS API Documentation
+    #
+    class UpdateVirtualGatewayOutput < Struct.new(
+      :virtual_gateway)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3393,7 +5409,7 @@ module Aws::AppMesh
     #   The AWS IAM account ID of the service mesh owner. If the account ID
     #   is not your own, then it's the ID of the account that shared the
     #   mesh with your account. For more information about mesh sharing, see
-    #   [Working with Shared Meshes][1].
+    #   [Working with shared meshes][1].
     #
     #
     #
@@ -3414,6 +5430,7 @@ module Aws::AppMesh
       :mesh_name,
       :mesh_owner,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3446,7 +5463,7 @@ module Aws::AppMesh
     #   The AWS IAM account ID of the service mesh owner. If the account ID
     #   is not your own, then it's the ID of the account that shared the
     #   mesh with your account. For more information about mesh sharing, see
-    #   [Working with Shared Meshes][1].
+    #   [Working with shared meshes][1].
     #
     #
     #
@@ -3467,6 +5484,7 @@ module Aws::AppMesh
       :mesh_name,
       :mesh_owner,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3490,6 +5508,7 @@ module Aws::AppMesh
     #
     class AccessLog < Struct.new(
       :file)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3522,7 +5541,7 @@ module Aws::AppMesh
     #   The AWS IAM account ID of the service mesh owner. If the account ID
     #   is not your own, then it's the ID of the account that shared the
     #   mesh with your account. For more information about mesh sharing, see
-    #   [Working with Shared Meshes][1].
+    #   [Working with shared meshes][1].
     #
     #
     #
@@ -3543,6 +5562,42 @@ module Aws::AppMesh
       :mesh_name,
       :mesh_owner,
       :next_token)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # An object that represents a client policy.
+    #
+    # @note When making an API call, you may pass VirtualGatewayClientPolicy
+    #   data as a hash:
+    #
+    #       {
+    #         tls: {
+    #           enforce: false,
+    #           ports: [1],
+    #           validation: { # required
+    #             trust: { # required
+    #               acm: {
+    #                 certificate_authority_arns: ["Arn"], # required
+    #               },
+    #               file: {
+    #                 certificate_chain: "FilePath", # required
+    #               },
+    #             },
+    #           },
+    #         },
+    #       }
+    #
+    # @!attribute [rw] tls
+    #   A reference to an object that represents a Transport Layer Security
+    #   (TLS) client policy.
+    #   @return [Types::VirtualGatewayClientPolicyTls]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/VirtualGatewayClientPolicy AWS API Documentation
+    #
+    class VirtualGatewayClientPolicy < Struct.new(
+      :tls)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3557,6 +5612,55 @@ module Aws::AppMesh
     #
     class TooManyRequestsException < Struct.new(
       :message)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # An object that represents logging information.
+    #
+    # @note When making an API call, you may pass VirtualGatewayLogging
+    #   data as a hash:
+    #
+    #       {
+    #         access_log: {
+    #           file: {
+    #             path: "FilePath", # required
+    #           },
+    #         },
+    #       }
+    #
+    # @!attribute [rw] access_log
+    #   The access log configuration.
+    #   @return [Types::VirtualGatewayAccessLog]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/VirtualGatewayLogging AWS API Documentation
+    #
+    class VirtualGatewayLogging < Struct.new(
+      :access_log)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # An object that represents a gateway route target.
+    #
+    # @note When making an API call, you may pass GatewayRouteTarget
+    #   data as a hash:
+    #
+    #       {
+    #         virtual_service: { # required
+    #           virtual_service_name: "ResourceName", # required
+    #         },
+    #       }
+    #
+    # @!attribute [rw] virtual_service
+    #   An object that represents a virtual service gateway route target.
+    #   @return [Types::GatewayRouteVirtualService]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/GatewayRouteTarget AWS API Documentation
+    #
+    class GatewayRouteTarget < Struct.new(
+      :virtual_service)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3583,6 +5687,7 @@ module Aws::AppMesh
     class Duration < Struct.new(
       :unit,
       :value)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3594,6 +5699,7 @@ module Aws::AppMesh
     #
     class DescribeRouteOutput < Struct.new(
       :route)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3653,6 +5759,7 @@ module Aws::AppMesh
       :method,
       :prefix,
       :scheme)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3686,6 +5793,7 @@ module Aws::AppMesh
     class TagRef < Struct.new(
       :key,
       :value)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3696,9 +5804,13 @@ module Aws::AppMesh
     #   @return [String]
     #
     # @!attribute [rw] created_at
+    #   The Unix epoch timestamp in seconds for when the resource was
+    #   created.
     #   @return [Time]
     #
     # @!attribute [rw] last_updated_at
+    #   The Unix epoch timestamp in seconds for when the resource was last
+    #   updated.
     #   @return [Time]
     #
     # @!attribute [rw] mesh_name
@@ -3709,7 +5821,7 @@ module Aws::AppMesh
     #   The AWS IAM account ID of the service mesh owner. If the account ID
     #   is not your own, then it's the ID of the account that shared the
     #   mesh with your account. For more information about mesh sharing, see
-    #   [Working with Shared Meshes][1].
+    #   [Working with shared meshes][1].
     #
     #
     #
@@ -3720,7 +5832,7 @@ module Aws::AppMesh
     #   The AWS IAM account ID of the resource owner. If the account ID is
     #   not your own, then it's the ID of the mesh owner or of another
     #   account that the mesh is shared with. For more information about
-    #   mesh sharing, see [Working with Shared Meshes][1].
+    #   mesh sharing, see [Working with shared meshes][1].
     #
     #
     #
@@ -3728,6 +5840,8 @@ module Aws::AppMesh
     #   @return [String]
     #
     # @!attribute [rw] version
+    #   The version of the resource. Resources are created at version 1, and
+    #   this version is incremented each time that they're updated.
     #   @return [Integer]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/MeshRef AWS API Documentation
@@ -3740,6 +5854,7 @@ module Aws::AppMesh
       :mesh_owner,
       :resource_owner,
       :version)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3769,6 +5884,20 @@ module Aws::AppMesh
       :metadata,
       :spec,
       :status)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] gateway_route
+    #   The full description of your gateway route following the create
+    #   call.
+    #   @return [Types::GatewayRouteData]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/CreateGatewayRouteOutput AWS API Documentation
+    #
+    class CreateGatewayRouteOutput < Struct.new(
+      :gateway_route)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3782,6 +5911,7 @@ module Aws::AppMesh
     #
     class VirtualRouterStatus < Struct.new(
       :status)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3808,6 +5938,45 @@ module Aws::AppMesh
     #
     class TcpRouteAction < Struct.new(
       :weighted_targets)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @note When making an API call, you may pass DeleteVirtualGatewayInput
+    #   data as a hash:
+    #
+    #       {
+    #         mesh_name: "ResourceName", # required
+    #         mesh_owner: "AccountId",
+    #         virtual_gateway_name: "ResourceName", # required
+    #       }
+    #
+    # @!attribute [rw] mesh_name
+    #   The name of the service mesh to delete the virtual gateway from.
+    #   @return [String]
+    #
+    # @!attribute [rw] mesh_owner
+    #   The AWS IAM account ID of the service mesh owner. If the account ID
+    #   is not your own, then it's the ID of the account that shared the
+    #   mesh with your account. For more information about mesh sharing, see
+    #   [Working with shared meshes][1].
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/app-mesh/latest/userguide/sharing.html
+    #   @return [String]
+    #
+    # @!attribute [rw] virtual_gateway_name
+    #   The name of the virtual gateway to delete.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/DeleteVirtualGatewayInput AWS API Documentation
+    #
+    class DeleteVirtualGatewayInput < Struct.new(
+      :mesh_name,
+      :mesh_owner,
+      :virtual_gateway_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3828,7 +5997,7 @@ module Aws::AppMesh
     #   The AWS IAM account ID of the service mesh owner. If the account ID
     #   is not your own, then it's the ID of the account that shared the
     #   mesh with your account. For more information about mesh sharing, see
-    #   [Working with Shared Meshes][1].
+    #   [Working with shared meshes][1].
     #
     #
     #
@@ -3845,6 +6014,7 @@ module Aws::AppMesh
       :mesh_name,
       :mesh_owner,
       :virtual_node_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3858,6 +6028,7 @@ module Aws::AppMesh
     #
     class RouteStatus < Struct.new(
       :status)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3880,6 +6051,44 @@ module Aws::AppMesh
     #           port: 1, # required
     #           protocol: "grpc", # required, accepts grpc, http, http2, tcp
     #         },
+    #         timeout: {
+    #           grpc: {
+    #             idle: {
+    #               unit: "ms", # accepts ms, s
+    #               value: 1,
+    #             },
+    #             per_request: {
+    #               unit: "ms", # accepts ms, s
+    #               value: 1,
+    #             },
+    #           },
+    #           http: {
+    #             idle: {
+    #               unit: "ms", # accepts ms, s
+    #               value: 1,
+    #             },
+    #             per_request: {
+    #               unit: "ms", # accepts ms, s
+    #               value: 1,
+    #             },
+    #           },
+    #           http2: {
+    #             idle: {
+    #               unit: "ms", # accepts ms, s
+    #               value: 1,
+    #             },
+    #             per_request: {
+    #               unit: "ms", # accepts ms, s
+    #               value: 1,
+    #             },
+    #           },
+    #           tcp: {
+    #             idle: {
+    #               unit: "ms", # accepts ms, s
+    #               value: 1,
+    #             },
+    #           },
+    #         },
     #         tls: {
     #           certificate: { # required
     #             acm: {
@@ -3902,6 +6111,10 @@ module Aws::AppMesh
     #   The port mapping information for the listener.
     #   @return [Types::PortMapping]
     #
+    # @!attribute [rw] timeout
+    #   An object that represents timeouts for different protocols.
+    #   @return [Types::ListenerTimeout]
+    #
     # @!attribute [rw] tls
     #   A reference to an object that represents the Transport Layer
     #   Security (TLS) properties for a listener.
@@ -3912,7 +6125,9 @@ module Aws::AppMesh
     class Listener < Struct.new(
       :health_check,
       :port_mapping,
+      :timeout,
       :tls)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3960,6 +6175,16 @@ module Aws::AppMesh
     #           },
     #           tcp_retry_events: ["connection-error"], # accepts connection-error
     #         },
+    #         timeout: {
+    #           idle: {
+    #             unit: "ms", # accepts ms, s
+    #             value: 1,
+    #           },
+    #           per_request: {
+    #             unit: "ms", # accepts ms, s
+    #             value: 1,
+    #           },
+    #         },
     #       }
     #
     # @!attribute [rw] action
@@ -3976,12 +6201,18 @@ module Aws::AppMesh
     #   An object that represents a retry policy.
     #   @return [Types::GrpcRetryPolicy]
     #
+    # @!attribute [rw] timeout
+    #   An object that represents types of timeouts.
+    #   @return [Types::GrpcTimeout]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/GrpcRoute AWS API Documentation
     #
     class GrpcRoute < Struct.new(
       :action,
       :match,
-      :retry_policy)
+      :retry_policy,
+      :timeout)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4025,6 +6256,41 @@ module Aws::AppMesh
       :enforce,
       :ports,
       :validation)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # An object that represents a Transport Layer Security (TLS) validation
+    # context trust.
+    #
+    # @note When making an API call, you may pass VirtualGatewayTlsValidationContextTrust
+    #   data as a hash:
+    #
+    #       {
+    #         acm: {
+    #           certificate_authority_arns: ["Arn"], # required
+    #         },
+    #         file: {
+    #           certificate_chain: "FilePath", # required
+    #         },
+    #       }
+    #
+    # @!attribute [rw] acm
+    #   A reference to an object that represents a TLS validation context
+    #   trust for an AWS Certicate Manager (ACM) certificate.
+    #   @return [Types::VirtualGatewayTlsValidationContextAcmTrust]
+    #
+    # @!attribute [rw] file
+    #   An object that represents a TLS validation context trust for a local
+    #   file.
+    #   @return [Types::VirtualGatewayTlsValidationContextFileTrust]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/VirtualGatewayTlsValidationContextTrust AWS API Documentation
+    #
+    class VirtualGatewayTlsValidationContextTrust < Struct.new(
+      :acm,
+      :file)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4036,6 +6302,7 @@ module Aws::AppMesh
     #
     class DeleteVirtualServiceOutput < Struct.new(
       :virtual_service)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4056,6 +6323,44 @@ module Aws::AppMesh
     #
     class VirtualNodeServiceProvider < Struct.new(
       :virtual_node_name)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # An object that represents an HTTP gateway route.
+    #
+    # @note When making an API call, you may pass HttpGatewayRoute
+    #   data as a hash:
+    #
+    #       {
+    #         action: { # required
+    #           target: { # required
+    #             virtual_service: { # required
+    #               virtual_service_name: "ResourceName", # required
+    #             },
+    #           },
+    #         },
+    #         match: { # required
+    #           prefix: "String", # required
+    #         },
+    #       }
+    #
+    # @!attribute [rw] action
+    #   An object that represents the action to take if a match is
+    #   determined.
+    #   @return [Types::HttpGatewayRouteAction]
+    #
+    # @!attribute [rw] match
+    #   An object that represents the criteria for determining a request
+    #   match.
+    #   @return [Types::HttpGatewayRouteMatch]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/HttpGatewayRoute AWS API Documentation
+    #
+    class HttpGatewayRoute < Struct.new(
+      :action,
+      :match)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4091,6 +6396,7 @@ module Aws::AppMesh
     #
     class BackendDefaults < Struct.new(
       :client_policy)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4125,6 +6431,7 @@ module Aws::AppMesh
     class ListenerTlsFileCertificate < Struct.new(
       :certificate_chain,
       :private_key)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4145,94 +6452,251 @@ module Aws::AppMesh
     #         tcp_retry_events: ["connection-error"], # accepts connection-error
     #       }
     #
-    # @!attribute [rw] http_retry_events
-    #   Specify at least one of the following values.
+    # @!attribute [rw] http_retry_events
+    #   Specify at least one of the following values.
+    #
+    #   * **server-error** – HTTP status codes 500, 501, 502, 503, 504, 505,
+    #     506, 507, 508, 510, and 511
+    #
+    #   * **gateway-error** – HTTP status codes 502, 503, and 504
+    #
+    #   * **client-error** – HTTP status code 409
+    #
+    #   * **stream-error** – Retry on refused stream
+    #   @return [Array<String>]
+    #
+    # @!attribute [rw] max_retries
+    #   The maximum number of retry attempts.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] per_retry_timeout
+    #   An object that represents a duration of time.
+    #   @return [Types::Duration]
+    #
+    # @!attribute [rw] tcp_retry_events
+    #   Specify a valid value.
+    #   @return [Array<String>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/HttpRetryPolicy AWS API Documentation
+    #
+    class HttpRetryPolicy < Struct.new(
+      :http_retry_events,
+      :max_retries,
+      :per_retry_timeout,
+      :tcp_retry_events)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @note When making an API call, you may pass DescribeVirtualRouterInput
+    #   data as a hash:
+    #
+    #       {
+    #         mesh_name: "ResourceName", # required
+    #         mesh_owner: "AccountId",
+    #         virtual_router_name: "ResourceName", # required
+    #       }
+    #
+    # @!attribute [rw] mesh_name
+    #   The name of the service mesh that the virtual router resides in.
+    #   @return [String]
+    #
+    # @!attribute [rw] mesh_owner
+    #   The AWS IAM account ID of the service mesh owner. If the account ID
+    #   is not your own, then it's the ID of the account that shared the
+    #   mesh with your account. For more information about mesh sharing, see
+    #   [Working with shared meshes][1].
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/app-mesh/latest/userguide/sharing.html
+    #   @return [String]
+    #
+    # @!attribute [rw] virtual_router_name
+    #   The name of the virtual router to describe.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/DescribeVirtualRouterInput AWS API Documentation
+    #
+    class DescribeVirtualRouterInput < Struct.new(
+      :mesh_name,
+      :mesh_owner,
+      :virtual_router_name)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/TagResourceOutput AWS API Documentation
+    #
+    class TagResourceOutput < Aws::EmptyStructure; end
+
+    # The request exceeds the maximum allowed number of tags allowed per
+    # resource. The current limit is 50 user tags per resource. You must
+    # reduce the number of tags in the request. None of the tags in this
+    # request were applied.
+    #
+    # @!attribute [rw] message
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/TooManyTagsException AWS API Documentation
+    #
+    class TooManyTagsException < Struct.new(
+      :message)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @note When making an API call, you may pass UpdateGatewayRouteInput
+    #   data as a hash:
+    #
+    #       {
+    #         client_token: "String",
+    #         gateway_route_name: "ResourceName", # required
+    #         mesh_name: "ResourceName", # required
+    #         mesh_owner: "AccountId",
+    #         spec: { # required
+    #           grpc_route: {
+    #             action: { # required
+    #               target: { # required
+    #                 virtual_service: { # required
+    #                   virtual_service_name: "ResourceName", # required
+    #                 },
+    #               },
+    #             },
+    #             match: { # required
+    #               service_name: "ServiceName",
+    #             },
+    #           },
+    #           http2_route: {
+    #             action: { # required
+    #               target: { # required
+    #                 virtual_service: { # required
+    #                   virtual_service_name: "ResourceName", # required
+    #                 },
+    #               },
+    #             },
+    #             match: { # required
+    #               prefix: "String", # required
+    #             },
+    #           },
+    #           http_route: {
+    #             action: { # required
+    #               target: { # required
+    #                 virtual_service: { # required
+    #                   virtual_service_name: "ResourceName", # required
+    #                 },
+    #               },
+    #             },
+    #             match: { # required
+    #               prefix: "String", # required
+    #             },
+    #           },
+    #         },
+    #         virtual_gateway_name: "ResourceName", # required
+    #       }
+    #
+    # @!attribute [rw] client_token
+    #   Unique, case-sensitive identifier that you provide to ensure the
+    #   idempotency of the request. Up to 36 letters, numbers, hyphens, and
+    #   underscores are allowed.
+    #
+    #   **A suitable default value is auto-generated.** You should normally
+    #   not need to pass this option.
+    #   @return [String]
     #
-    #   * **server-error** – HTTP status codes 500, 501, 502, 503, 504, 505,
-    #     506, 507, 508, 510, and 511
+    # @!attribute [rw] gateway_route_name
+    #   The name of the gateway route to update.
+    #   @return [String]
     #
-    #   * **gateway-error** – HTTP status codes 502, 503, and 504
+    # @!attribute [rw] mesh_name
+    #   The name of the service mesh that the gateway route resides in.
+    #   @return [String]
     #
-    #   * **client-error** – HTTP status code 409
+    # @!attribute [rw] mesh_owner
+    #   The AWS IAM account ID of the service mesh owner. If the account ID
+    #   is not your own, then it's the ID of the account that shared the
+    #   mesh with your account. For more information about mesh sharing, see
+    #   [Working with shared meshes][1].
     #
-    #   * **stream-error** – Retry on refused stream
-    #   @return [Array<String>]
     #
-    # @!attribute [rw] max_retries
-    #   The maximum number of retry attempts.
-    #   @return [Integer]
     #
-    # @!attribute [rw] per_retry_timeout
-    #   An object that represents a duration of time.
-    #   @return [Types::Duration]
+    #   [1]: https://docs.aws.amazon.com/app-mesh/latest/userguide/sharing.html
+    #   @return [String]
     #
-    # @!attribute [rw] tcp_retry_events
-    #   Specify a valid value.
-    #   @return [Array<String>]
+    # @!attribute [rw] spec
+    #   The new gateway route specification to apply. This overwrites the
+    #   existing data.
+    #   @return [Types::GatewayRouteSpec]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/HttpRetryPolicy AWS API Documentation
+    # @!attribute [rw] virtual_gateway_name
+    #   The name of the virtual gateway that the gateway route is associated
+    #   with.
+    #   @return [String]
     #
-    class HttpRetryPolicy < Struct.new(
-      :http_retry_events,
-      :max_retries,
-      :per_retry_timeout,
-      :tcp_retry_events)
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/UpdateGatewayRouteInput AWS API Documentation
+    #
+    class UpdateGatewayRouteInput < Struct.new(
+      :client_token,
+      :gateway_route_name,
+      :mesh_name,
+      :mesh_owner,
+      :spec,
+      :virtual_gateway_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
-    # @note When making an API call, you may pass DescribeVirtualRouterInput
+    # @note When making an API call, you may pass ListVirtualGatewaysInput
     #   data as a hash:
     #
     #       {
+    #         limit: 1,
     #         mesh_name: "ResourceName", # required
     #         mesh_owner: "AccountId",
-    #         virtual_router_name: "ResourceName", # required
+    #         next_token: "String",
     #       }
     #
+    # @!attribute [rw] limit
+    #   The maximum number of results returned by `ListVirtualGateways` in
+    #   paginated output. When you use this parameter, `ListVirtualGateways`
+    #   returns only `limit` results in a single page along with a
+    #   `nextToken` response element. You can see the remaining results of
+    #   the initial request by sending another `ListVirtualGateways` request
+    #   with the returned `nextToken` value. This value can be between 1 and
+    #   100. If you don't use this parameter, `ListVirtualGateways` returns
+    #   up to 100 results and a `nextToken` value if applicable.
+    #   @return [Integer]
+    #
     # @!attribute [rw] mesh_name
-    #   The name of the service mesh that the virtual router resides in.
+    #   The name of the service mesh to list virtual gateways in.
     #   @return [String]
     #
     # @!attribute [rw] mesh_owner
     #   The AWS IAM account ID of the service mesh owner. If the account ID
     #   is not your own, then it's the ID of the account that shared the
     #   mesh with your account. For more information about mesh sharing, see
-    #   [Working with Shared Meshes][1].
+    #   [Working with shared meshes][1].
     #
     #
     #
     #   [1]: https://docs.aws.amazon.com/app-mesh/latest/userguide/sharing.html
     #   @return [String]
     #
-    # @!attribute [rw] virtual_router_name
-    #   The name of the virtual router to describe.
+    # @!attribute [rw] next_token
+    #   The `nextToken` value returned from a previous paginated
+    #   `ListVirtualGateways` request where `limit` was used and the results
+    #   exceeded the value of that parameter. Pagination continues from the
+    #   end of the previous results that returned the `nextToken` value.
     #   @return [String]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/DescribeVirtualRouterInput AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/ListVirtualGatewaysInput AWS API Documentation
     #
-    class DescribeVirtualRouterInput < Struct.new(
+    class ListVirtualGatewaysInput < Struct.new(
+      :limit,
       :mesh_name,
       :mesh_owner,
-      :virtual_router_name)
-      include Aws::Structure
-    end
-
-    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/TagResourceOutput AWS API Documentation
-    #
-    class TagResourceOutput < Aws::EmptyStructure; end
-
-    # The request exceeds the maximum allowed number of tags allowed per
-    # resource. The current limit is 50 user tags per resource. You must
-    # reduce the number of tags in the request. None of the tags in this
-    # request were applied.
-    #
-    # @!attribute [rw] message
-    #   @return [String]
-    #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/TooManyTagsException AWS API Documentation
-    #
-    class TooManyTagsException < Struct.new(
-      :message)
+      :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4255,6 +6719,7 @@ module Aws::AppMesh
     #
     class TlsValidationContextFileTrust < Struct.new(
       :certificate_chain)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4297,6 +6762,7 @@ module Aws::AppMesh
       :invert,
       :match,
       :name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4348,6 +6814,16 @@ module Aws::AppMesh
     #               },
     #               tcp_retry_events: ["connection-error"], # accepts connection-error
     #             },
+    #             timeout: {
+    #               idle: {
+    #                 unit: "ms", # accepts ms, s
+    #                 value: 1,
+    #               },
+    #               per_request: {
+    #                 unit: "ms", # accepts ms, s
+    #                 value: 1,
+    #               },
+    #             },
     #           },
     #           http2_route: {
     #             action: { # required
@@ -4388,6 +6864,16 @@ module Aws::AppMesh
     #               },
     #               tcp_retry_events: ["connection-error"], # accepts connection-error
     #             },
+    #             timeout: {
+    #               idle: {
+    #                 unit: "ms", # accepts ms, s
+    #                 value: 1,
+    #               },
+    #               per_request: {
+    #                 unit: "ms", # accepts ms, s
+    #                 value: 1,
+    #               },
+    #             },
     #           },
     #           http_route: {
     #             action: { # required
@@ -4428,6 +6914,16 @@ module Aws::AppMesh
     #               },
     #               tcp_retry_events: ["connection-error"], # accepts connection-error
     #             },
+    #             timeout: {
+    #               idle: {
+    #                 unit: "ms", # accepts ms, s
+    #                 value: 1,
+    #               },
+    #               per_request: {
+    #                 unit: "ms", # accepts ms, s
+    #                 value: 1,
+    #               },
+    #             },
     #           },
     #           priority: 1,
     #           tcp_route: {
@@ -4439,6 +6935,12 @@ module Aws::AppMesh
     #                 },
     #               ],
     #             },
+    #             timeout: {
+    #               idle: {
+    #                 unit: "ms", # accepts ms, s
+    #                 value: 1,
+    #               },
+    #             },
     #           },
     #         },
     #         tags: [
@@ -4468,7 +6970,7 @@ module Aws::AppMesh
     #   is not your own, then the account that you specify must share the
     #   mesh with your account before you can create the resource in the
     #   service mesh. For more information about mesh sharing, see [Working
-    #   with Shared Meshes][1].
+    #   with shared meshes][1].
     #
     #
     #
@@ -4507,6 +7009,75 @@ module Aws::AppMesh
       :spec,
       :tags,
       :virtual_router_name)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # An object that represents types of timeouts.
+    #
+    # @note When making an API call, you may pass TcpTimeout
+    #   data as a hash:
+    #
+    #       {
+    #         idle: {
+    #           unit: "ms", # accepts ms, s
+    #           value: 1,
+    #         },
+    #       }
+    #
+    # @!attribute [rw] idle
+    #   An object that represents a duration of time.
+    #   @return [Types::Duration]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/TcpTimeout AWS API Documentation
+    #
+    class TcpTimeout < Struct.new(
+      :idle)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @note When making an API call, you may pass DeleteGatewayRouteInput
+    #   data as a hash:
+    #
+    #       {
+    #         gateway_route_name: "ResourceName", # required
+    #         mesh_name: "ResourceName", # required
+    #         mesh_owner: "AccountId",
+    #         virtual_gateway_name: "ResourceName", # required
+    #       }
+    #
+    # @!attribute [rw] gateway_route_name
+    #   The name of the gateway route to delete.
+    #   @return [String]
+    #
+    # @!attribute [rw] mesh_name
+    #   The name of the service mesh to delete the gateway route from.
+    #   @return [String]
+    #
+    # @!attribute [rw] mesh_owner
+    #   The AWS IAM account ID of the service mesh owner. If the account ID
+    #   is not your own, then it's the ID of the account that shared the
+    #   mesh with your account. For more information about mesh sharing, see
+    #   [Working with shared meshes][1].
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/app-mesh/latest/userguide/sharing.html
+    #   @return [String]
+    #
+    # @!attribute [rw] virtual_gateway_name
+    #   The name of the virtual gateway to delete the route from.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/DeleteGatewayRouteInput AWS API Documentation
+    #
+    class DeleteGatewayRouteInput < Struct.new(
+      :gateway_route_name,
+      :mesh_name,
+      :mesh_owner,
+      :virtual_gateway_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4558,6 +7129,16 @@ module Aws::AppMesh
     #               },
     #               tcp_retry_events: ["connection-error"], # accepts connection-error
     #             },
+    #             timeout: {
+    #               idle: {
+    #                 unit: "ms", # accepts ms, s
+    #                 value: 1,
+    #               },
+    #               per_request: {
+    #                 unit: "ms", # accepts ms, s
+    #                 value: 1,
+    #               },
+    #             },
     #           },
     #           http2_route: {
     #             action: { # required
@@ -4598,6 +7179,16 @@ module Aws::AppMesh
     #               },
     #               tcp_retry_events: ["connection-error"], # accepts connection-error
     #             },
+    #             timeout: {
+    #               idle: {
+    #                 unit: "ms", # accepts ms, s
+    #                 value: 1,
+    #               },
+    #               per_request: {
+    #                 unit: "ms", # accepts ms, s
+    #                 value: 1,
+    #               },
+    #             },
     #           },
     #           http_route: {
     #             action: { # required
@@ -4638,6 +7229,16 @@ module Aws::AppMesh
     #               },
     #               tcp_retry_events: ["connection-error"], # accepts connection-error
     #             },
+    #             timeout: {
+    #               idle: {
+    #                 unit: "ms", # accepts ms, s
+    #                 value: 1,
+    #               },
+    #               per_request: {
+    #                 unit: "ms", # accepts ms, s
+    #                 value: 1,
+    #               },
+    #             },
     #           },
     #           priority: 1,
     #           tcp_route: {
@@ -4649,6 +7250,12 @@ module Aws::AppMesh
     #                 },
     #               ],
     #             },
+    #             timeout: {
+    #               idle: {
+    #                 unit: "ms", # accepts ms, s
+    #                 value: 1,
+    #               },
+    #             },
     #           },
     #         },
     #         virtual_router_name: "ResourceName", # required
@@ -4671,7 +7278,7 @@ module Aws::AppMesh
     #   The AWS IAM account ID of the service mesh owner. If the account ID
     #   is not your own, then it's the ID of the account that shared the
     #   mesh with your account. For more information about mesh sharing, see
-    #   [Working with Shared Meshes][1].
+    #   [Working with shared meshes][1].
     #
     #
     #
@@ -4700,6 +7307,7 @@ module Aws::AppMesh
       :route_name,
       :spec,
       :virtual_router_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4747,6 +7355,16 @@ module Aws::AppMesh
     #           },
     #           tcp_retry_events: ["connection-error"], # accepts connection-error
     #         },
+    #         timeout: {
+    #           idle: {
+    #             unit: "ms", # accepts ms, s
+    #             value: 1,
+    #           },
+    #           per_request: {
+    #             unit: "ms", # accepts ms, s
+    #             value: 1,
+    #           },
+    #         },
     #       }
     #
     # @!attribute [rw] action
@@ -4763,12 +7381,18 @@ module Aws::AppMesh
     #   An object that represents a retry policy.
     #   @return [Types::HttpRetryPolicy]
     #
+    # @!attribute [rw] timeout
+    #   An object that represents types of timeouts.
+    #   @return [Types::HttpTimeout]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/HttpRoute AWS API Documentation
     #
     class HttpRoute < Struct.new(
       :action,
       :match,
-      :retry_policy)
+      :retry_policy,
+      :timeout)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4788,7 +7412,7 @@ module Aws::AppMesh
     #   The AWS IAM account ID of the service mesh owner. If the account ID
     #   is not your own, then it's the ID of the account that shared the
     #   mesh with your account. For more information about mesh sharing, see
-    #   [Working with Shared Meshes][1].
+    #   [Working with shared meshes][1].
     #
     #
     #
@@ -4800,6 +7424,74 @@ module Aws::AppMesh
     class DescribeMeshInput < Struct.new(
       :mesh_name,
       :mesh_owner)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # An object that represents a virtual gateway returned by a list
+    # operation.
+    #
+    # @!attribute [rw] arn
+    #   The full Amazon Resource Name (ARN) for the resource.
+    #   @return [String]
+    #
+    # @!attribute [rw] created_at
+    #   The Unix epoch timestamp in seconds for when the resource was
+    #   created.
+    #   @return [Time]
+    #
+    # @!attribute [rw] last_updated_at
+    #   The Unix epoch timestamp in seconds for when the resource was last
+    #   updated.
+    #   @return [Time]
+    #
+    # @!attribute [rw] mesh_name
+    #   The name of the service mesh that the resource resides in.
+    #   @return [String]
+    #
+    # @!attribute [rw] mesh_owner
+    #   The AWS IAM account ID of the service mesh owner. If the account ID
+    #   is not your own, then it's the ID of the account that shared the
+    #   mesh with your account. For more information about mesh sharing, see
+    #   [Working with shared meshes][1].
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/app-mesh/latest/userguide/sharing.html
+    #   @return [String]
+    #
+    # @!attribute [rw] resource_owner
+    #   The AWS IAM account ID of the resource owner. If the account ID is
+    #   not your own, then it's the ID of the mesh owner or of another
+    #   account that the mesh is shared with. For more information about
+    #   mesh sharing, see [Working with shared meshes][1].
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/app-mesh/latest/userguide/sharing.html
+    #   @return [String]
+    #
+    # @!attribute [rw] version
+    #   The version of the resource. Resources are created at version 1, and
+    #   this version is incremented each time that they're updated.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] virtual_gateway_name
+    #   The name of the resource.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/VirtualGatewayRef AWS API Documentation
+    #
+    class VirtualGatewayRef < Struct.new(
+      :arn,
+      :created_at,
+      :last_updated_at,
+      :mesh_name,
+      :mesh_owner,
+      :resource_owner,
+      :version,
+      :virtual_gateway_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4822,6 +7514,31 @@ module Aws::AppMesh
     #
     class MeshSpec < Struct.new(
       :egress_filter)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] virtual_gateway
+    #   The full description of your virtual gateway.
+    #   @return [Types::VirtualGatewayData]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/DescribeVirtualGatewayOutput AWS API Documentation
+    #
+    class DescribeVirtualGatewayOutput < Struct.new(
+      :virtual_gateway)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] gateway_route
+    #   The full description of your gateway route.
+    #   @return [Types::GatewayRouteData]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/DescribeGatewayRouteOutput AWS API Documentation
+    #
+    class DescribeGatewayRouteOutput < Struct.new(
+      :gateway_route)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4842,6 +7559,7 @@ module Aws::AppMesh
     class ListTagsForResourceOutput < Struct.new(
       :next_token,
       :tags)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4880,6 +7598,7 @@ module Aws::AppMesh
     class ServiceDiscovery < Struct.new(
       :aws_cloud_map,
       :dns)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4900,6 +7619,7 @@ module Aws::AppMesh
     class ListVirtualNodesOutput < Struct.new(
       :next_token,
       :virtual_nodes)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4924,6 +7644,7 @@ module Aws::AppMesh
     class UntagResourceInput < Struct.new(
       :resource_arn,
       :tag_keys)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4951,6 +7672,7 @@ module Aws::AppMesh
     #
     class ListenerTlsAcmCertificate < Struct.new(
       :certificate_arn)
+      SENSITIVE = []
       include Aws::Structure
     end