aws-sdk-appmesh 1.26.0 → 1.31.0

data/lib/aws-sdk-appmesh/types.rb

@@ -30,6 +30,7 @@ module Aws::AppMesh
     #
     class VirtualRouterListener < Struct.new(
       :port_mapping)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -88,6 +89,7 @@ module Aws::AppMesh
       :max_retries,
       :per_retry_timeout,
       :tcp_retry_events)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -99,6 +101,7 @@ module Aws::AppMesh
     #
     class CreateVirtualNodeOutput < Struct.new(
       :virtual_node)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -123,6 +126,7 @@ module Aws::AppMesh
     #
     class Logging < Struct.new(
       :access_log)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -134,6 +138,7 @@ module Aws::AppMesh
     #
     class UpdateVirtualRouterOutput < Struct.new(
       :virtual_router)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -154,6 +159,244 @@ module Aws::AppMesh
     class ListVirtualRoutersOutput < Struct.new(
       :next_token,
       :virtual_routers)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @note When making an API call, you may pass CreateVirtualGatewayInput
+    #   data as a hash:
+    #
+    #       {
+    #         client_token: "String",
+    #         mesh_name: "ResourceName", # required
+    #         mesh_owner: "AccountId",
+    #         spec: { # required
+    #           backend_defaults: {
+    #             client_policy: {
+    #               tls: {
+    #                 enforce: false,
+    #                 ports: [1],
+    #                 validation: { # required
+    #                   trust: { # required
+    #                     acm: {
+    #                       certificate_authority_arns: ["Arn"], # required
+    #                     },
+    #                     file: {
+    #                       certificate_chain: "FilePath", # required
+    #                     },
+    #                   },
+    #                 },
+    #               },
+    #             },
+    #           },
+    #           listeners: [ # required
+    #             {
+    #               health_check: {
+    #                 healthy_threshold: 1, # required
+    #                 interval_millis: 1, # required
+    #                 path: "String",
+    #                 port: 1,
+    #                 protocol: "grpc", # required, accepts grpc, http, http2
+    #                 timeout_millis: 1, # required
+    #                 unhealthy_threshold: 1, # required
+    #               },
+    #               port_mapping: { # required
+    #                 port: 1, # required
+    #                 protocol: "grpc", # required, accepts grpc, http, http2
+    #               },
+    #               tls: {
+    #                 certificate: { # required
+    #                   acm: {
+    #                     certificate_arn: "Arn", # required
+    #                   },
+    #                   file: {
+    #                     certificate_chain: "FilePath", # required
+    #                     private_key: "FilePath", # required
+    #                   },
+    #                 },
+    #                 mode: "DISABLED", # required, accepts DISABLED, PERMISSIVE, STRICT
+    #               },
+    #             },
+    #           ],
+    #           logging: {
+    #             access_log: {
+    #               file: {
+    #                 path: "FilePath", # required
+    #               },
+    #             },
+    #           },
+    #         },
+    #         tags: [
+    #           {
+    #             key: "TagKey", # required
+    #             value: "TagValue",
+    #           },
+    #         ],
+    #         virtual_gateway_name: "ResourceName", # required
+    #       }
+    #
+    # @!attribute [rw] client_token
+    #   Unique, case-sensitive identifier that you provide to ensure the
+    #   idempotency of the request. Up to 36 letters, numbers, hyphens, and
+    #   underscores are allowed.
+    #
+    #   **A suitable default value is auto-generated.** You should normally
+    #   not need to pass this option.
+    #   @return [String]
+    #
+    # @!attribute [rw] mesh_name
+    #   The name of the service mesh to create the virtual gateway in.
+    #   @return [String]
+    #
+    # @!attribute [rw] mesh_owner
+    #   The AWS IAM account ID of the service mesh owner. If the account ID
+    #   is not your own, then the account that you specify must share the
+    #   mesh with your account before you can create the resource in the
+    #   service mesh. For more information about mesh sharing, see [Working
+    #   with shared meshes][1].
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/app-mesh/latest/userguide/sharing.html
+    #   @return [String]
+    #
+    # @!attribute [rw] spec
+    #   The virtual gateway specification to apply.
+    #   @return [Types::VirtualGatewaySpec]
+    #
+    # @!attribute [rw] tags
+    #   Optional metadata that you can apply to the virtual gateway to
+    #   assist with categorization and organization. Each tag consists of a
+    #   key and an optional value, both of which you define. Tag keys can
+    #   have a maximum character length of 128 characters, and tag values
+    #   can have a maximum length of 256 characters.
+    #   @return [Array<Types::TagRef>]
+    #
+    # @!attribute [rw] virtual_gateway_name
+    #   The name to use for the virtual gateway.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/CreateVirtualGatewayInput AWS API Documentation
+    #
+    class CreateVirtualGatewayInput < Struct.new(
+      :client_token,
+      :mesh_name,
+      :mesh_owner,
+      :spec,
+      :tags,
+      :virtual_gateway_name)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @note When making an API call, you may pass UpdateVirtualGatewayInput
+    #   data as a hash:
+    #
+    #       {
+    #         client_token: "String",
+    #         mesh_name: "ResourceName", # required
+    #         mesh_owner: "AccountId",
+    #         spec: { # required
+    #           backend_defaults: {
+    #             client_policy: {
+    #               tls: {
+    #                 enforce: false,
+    #                 ports: [1],
+    #                 validation: { # required
+    #                   trust: { # required
+    #                     acm: {
+    #                       certificate_authority_arns: ["Arn"], # required
+    #                     },
+    #                     file: {
+    #                       certificate_chain: "FilePath", # required
+    #                     },
+    #                   },
+    #                 },
+    #               },
+    #             },
+    #           },
+    #           listeners: [ # required
+    #             {
+    #               health_check: {
+    #                 healthy_threshold: 1, # required
+    #                 interval_millis: 1, # required
+    #                 path: "String",
+    #                 port: 1,
+    #                 protocol: "grpc", # required, accepts grpc, http, http2
+    #                 timeout_millis: 1, # required
+    #                 unhealthy_threshold: 1, # required
+    #               },
+    #               port_mapping: { # required
+    #                 port: 1, # required
+    #                 protocol: "grpc", # required, accepts grpc, http, http2
+    #               },
+    #               tls: {
+    #                 certificate: { # required
+    #                   acm: {
+    #                     certificate_arn: "Arn", # required
+    #                   },
+    #                   file: {
+    #                     certificate_chain: "FilePath", # required
+    #                     private_key: "FilePath", # required
+    #                   },
+    #                 },
+    #                 mode: "DISABLED", # required, accepts DISABLED, PERMISSIVE, STRICT
+    #               },
+    #             },
+    #           ],
+    #           logging: {
+    #             access_log: {
+    #               file: {
+    #                 path: "FilePath", # required
+    #               },
+    #             },
+    #           },
+    #         },
+    #         virtual_gateway_name: "ResourceName", # required
+    #       }
+    #
+    # @!attribute [rw] client_token
+    #   Unique, case-sensitive identifier that you provide to ensure the
+    #   idempotency of the request. Up to 36 letters, numbers, hyphens, and
+    #   underscores are allowed.
+    #
+    #   **A suitable default value is auto-generated.** You should normally
+    #   not need to pass this option.
+    #   @return [String]
+    #
+    # @!attribute [rw] mesh_name
+    #   The name of the service mesh that the virtual gateway resides in.
+    #   @return [String]
+    #
+    # @!attribute [rw] mesh_owner
+    #   The AWS IAM account ID of the service mesh owner. If the account ID
+    #   is not your own, then it's the ID of the account that shared the
+    #   mesh with your account. For more information about mesh sharing, see
+    #   [Working with shared meshes][1].
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/app-mesh/latest/userguide/sharing.html
+    #   @return [String]
+    #
+    # @!attribute [rw] spec
+    #   The new virtual gateway specification to apply. This overwrites the
+    #   existing data.
+    #   @return [Types::VirtualGatewaySpec]
+    #
+    # @!attribute [rw] virtual_gateway_name
+    #   The name of the virtual gateway to update.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/UpdateVirtualGatewayInput AWS API Documentation
+    #
+    class UpdateVirtualGatewayInput < Struct.new(
+      :client_token,
+      :mesh_name,
+      :mesh_owner,
+      :spec,
+      :virtual_gateway_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -214,6 +457,7 @@ module Aws::AppMesh
       :resource_owner,
       :uid,
       :version)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -227,6 +471,7 @@ module Aws::AppMesh
     #
     class ResourceInUseException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -238,6 +483,7 @@ module Aws::AppMesh
     #
     class UpdateVirtualNodeOutput < Struct.new(
       :virtual_node)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -258,6 +504,7 @@ module Aws::AppMesh
     class ListRoutesOutput < Struct.new(
       :next_token,
       :routes)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -302,6 +549,7 @@ module Aws::AppMesh
     class VirtualServiceBackend < Struct.new(
       :client_policy,
       :virtual_service_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -315,6 +563,34 @@ module Aws::AppMesh
     #
     class BadRequestException < Struct.new(
       :message)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # An object that represents the criteria for determining a request
+    # match.
+    #
+    # @note When making an API call, you may pass HttpGatewayRouteMatch
+    #   data as a hash:
+    #
+    #       {
+    #         prefix: "String", # required
+    #       }
+    #
+    # @!attribute [rw] prefix
+    #   Specifies the path to match requests with. This parameter must
+    #   always start with `/`, which by itself matches all requests to the
+    #   virtual service name. You can also match for path-based routing of
+    #   requests. For example, if your virtual service name is
+    #   `my-service.local` and you want the route to match requests to
+    #   `my-service.local/metrics`, your prefix should be `/metrics`.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/HttpGatewayRouteMatch AWS API Documentation
+    #
+    class HttpGatewayRouteMatch < Struct.new(
+      :prefix)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -384,6 +660,7 @@ module Aws::AppMesh
       :protocol,
       :timeout_millis,
       :unhealthy_threshold)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -408,6 +685,7 @@ module Aws::AppMesh
     #
     class EgressFilter < Struct.new(
       :type)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -442,6 +720,119 @@ module Aws::AppMesh
     #
     class ClientPolicy < Struct.new(
       :tls)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # An object that represents the specification of a service mesh
+    # resource.
+    #
+    # @note When making an API call, you may pass VirtualGatewaySpec
+    #   data as a hash:
+    #
+    #       {
+    #         backend_defaults: {
+    #           client_policy: {
+    #             tls: {
+    #               enforce: false,
+    #               ports: [1],
+    #               validation: { # required
+    #                 trust: { # required
+    #                   acm: {
+    #                     certificate_authority_arns: ["Arn"], # required
+    #                   },
+    #                   file: {
+    #                     certificate_chain: "FilePath", # required
+    #                   },
+    #                 },
+    #               },
+    #             },
+    #           },
+    #         },
+    #         listeners: [ # required
+    #           {
+    #             health_check: {
+    #               healthy_threshold: 1, # required
+    #               interval_millis: 1, # required
+    #               path: "String",
+    #               port: 1,
+    #               protocol: "grpc", # required, accepts grpc, http, http2
+    #               timeout_millis: 1, # required
+    #               unhealthy_threshold: 1, # required
+    #             },
+    #             port_mapping: { # required
+    #               port: 1, # required
+    #               protocol: "grpc", # required, accepts grpc, http, http2
+    #             },
+    #             tls: {
+    #               certificate: { # required
+    #                 acm: {
+    #                   certificate_arn: "Arn", # required
+    #                 },
+    #                 file: {
+    #                   certificate_chain: "FilePath", # required
+    #                   private_key: "FilePath", # required
+    #                 },
+    #               },
+    #               mode: "DISABLED", # required, accepts DISABLED, PERMISSIVE, STRICT
+    #             },
+    #           },
+    #         ],
+    #         logging: {
+    #           access_log: {
+    #             file: {
+    #               path: "FilePath", # required
+    #             },
+    #           },
+    #         },
+    #       }
+    #
+    # @!attribute [rw] backend_defaults
+    #   A reference to an object that represents the defaults for backends.
+    #   @return [Types::VirtualGatewayBackendDefaults]
+    #
+    # @!attribute [rw] listeners
+    #   The listeners that the mesh endpoint is expected to receive inbound
+    #   traffic from. You can specify one listener.
+    #   @return [Array<Types::VirtualGatewayListener>]
+    #
+    # @!attribute [rw] logging
+    #   An object that represents logging information.
+    #   @return [Types::VirtualGatewayLogging]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/VirtualGatewaySpec AWS API Documentation
+    #
+    class VirtualGatewaySpec < Struct.new(
+      :backend_defaults,
+      :listeners,
+      :logging)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # An object that represents an access log file.
+    #
+    # @note When making an API call, you may pass VirtualGatewayFileAccessLog
+    #   data as a hash:
+    #
+    #       {
+    #         path: "FilePath", # required
+    #       }
+    #
+    # @!attribute [rw] path
+    #   The file path to write access logs to. You can use `/dev/stdout` to
+    #   send access logs to standard out and configure your Envoy container
+    #   to use a log driver, such as `awslogs`, to export the access logs to
+    #   a log storage service such as Amazon CloudWatch Logs. You can also
+    #   specify a path in the Envoy container's file system to write the
+    #   files to disk.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/VirtualGatewayFileAccessLog AWS API Documentation
+    #
+    class VirtualGatewayFileAccessLog < Struct.new(
+      :path)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -453,6 +844,123 @@ module Aws::AppMesh
     #
     class DescribeVirtualServiceOutput < Struct.new(
       :virtual_service)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @note When making an API call, you may pass CreateGatewayRouteInput
+    #   data as a hash:
+    #
+    #       {
+    #         client_token: "String",
+    #         gateway_route_name: "ResourceName", # required
+    #         mesh_name: "ResourceName", # required
+    #         mesh_owner: "AccountId",
+    #         spec: { # required
+    #           grpc_route: {
+    #             action: { # required
+    #               target: { # required
+    #                 virtual_service: { # required
+    #                   virtual_service_name: "ResourceName", # required
+    #                 },
+    #               },
+    #             },
+    #             match: { # required
+    #               service_name: "ServiceName",
+    #             },
+    #           },
+    #           http2_route: {
+    #             action: { # required
+    #               target: { # required
+    #                 virtual_service: { # required
+    #                   virtual_service_name: "ResourceName", # required
+    #                 },
+    #               },
+    #             },
+    #             match: { # required
+    #               prefix: "String", # required
+    #             },
+    #           },
+    #           http_route: {
+    #             action: { # required
+    #               target: { # required
+    #                 virtual_service: { # required
+    #                   virtual_service_name: "ResourceName", # required
+    #                 },
+    #               },
+    #             },
+    #             match: { # required
+    #               prefix: "String", # required
+    #             },
+    #           },
+    #         },
+    #         tags: [
+    #           {
+    #             key: "TagKey", # required
+    #             value: "TagValue",
+    #           },
+    #         ],
+    #         virtual_gateway_name: "ResourceName", # required
+    #       }
+    #
+    # @!attribute [rw] client_token
+    #   Unique, case-sensitive identifier that you provide to ensure the
+    #   idempotency of the request. Up to 36 letters, numbers, hyphens, and
+    #   underscores are allowed.
+    #
+    #   **A suitable default value is auto-generated.** You should normally
+    #   not need to pass this option.
+    #   @return [String]
+    #
+    # @!attribute [rw] gateway_route_name
+    #   The name to use for the gateway route.
+    #   @return [String]
+    #
+    # @!attribute [rw] mesh_name
+    #   The name of the service mesh to create the gateway route in.
+    #   @return [String]
+    #
+    # @!attribute [rw] mesh_owner
+    #   The AWS IAM account ID of the service mesh owner. If the account ID
+    #   is not your own, then the account that you specify must share the
+    #   mesh with your account before you can create the resource in the
+    #   service mesh. For more information about mesh sharing, see [Working
+    #   with shared meshes][1].
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/app-mesh/latest/userguide/sharing.html
+    #   @return [String]
+    #
+    # @!attribute [rw] spec
+    #   The gateway route specification to apply.
+    #   @return [Types::GatewayRouteSpec]
+    #
+    # @!attribute [rw] tags
+    #   Optional metadata that you can apply to the gateway route to assist
+    #   with categorization and organization. Each tag consists of a key and
+    #   an optional value, both of which you define. Tag keys can have a
+    #   maximum character length of 128 characters, and tag values can have
+    #   a maximum length of 256 characters.
+    #   @return [Array<Types::TagRef>]
+    #
+    # @!attribute [rw] virtual_gateway_name
+    #   The name of the virtual gateway to associate the gateway route with.
+    #   If the virtual gateway is in a shared mesh, then you must be the
+    #   owner of the virtual gateway resource.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/CreateGatewayRouteInput AWS API Documentation
+    #
+    class CreateGatewayRouteInput < Struct.new(
+      :client_token,
+      :gateway_route_name,
+      :mesh_name,
+      :mesh_owner,
+      :spec,
+      :tags,
+      :virtual_gateway_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -460,21 +968,114 @@ module Aws::AppMesh
     #   The full description of your virtual node.
     #   @return [Types::VirtualNodeData]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/DescribeVirtualNodeOutput AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/DescribeVirtualNodeOutput AWS API Documentation
+    #
+    class DescribeVirtualNodeOutput < Struct.new(
+      :virtual_node)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # An object that represents a virtual gateway returned by a describe
+    # operation.
+    #
+    # @!attribute [rw] mesh_name
+    #   The name of the service mesh that the virtual gateway resides in.
+    #   @return [String]
+    #
+    # @!attribute [rw] metadata
+    #   An object that represents metadata for a resource.
+    #   @return [Types::ResourceMetadata]
+    #
+    # @!attribute [rw] spec
+    #   The specifications of the virtual gateway.
+    #   @return [Types::VirtualGatewaySpec]
+    #
+    # @!attribute [rw] status
+    #   The current status of the virtual gateway.
+    #   @return [Types::VirtualGatewayStatus]
+    #
+    # @!attribute [rw] virtual_gateway_name
+    #   The name of the virtual gateway.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/VirtualGatewayData AWS API Documentation
+    #
+    class VirtualGatewayData < Struct.new(
+      :mesh_name,
+      :metadata,
+      :spec,
+      :status,
+      :virtual_gateway_name)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] route
+    #   The full description of your mesh following the create call.
+    #   @return [Types::RouteData]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/CreateRouteOutput AWS API Documentation
+    #
+    class CreateRouteOutput < Struct.new(
+      :route)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # An object that represents a listener for a virtual gateway.
+    #
+    # @note When making an API call, you may pass VirtualGatewayListener
+    #   data as a hash:
+    #
+    #       {
+    #         health_check: {
+    #           healthy_threshold: 1, # required
+    #           interval_millis: 1, # required
+    #           path: "String",
+    #           port: 1,
+    #           protocol: "grpc", # required, accepts grpc, http, http2
+    #           timeout_millis: 1, # required
+    #           unhealthy_threshold: 1, # required
+    #         },
+    #         port_mapping: { # required
+    #           port: 1, # required
+    #           protocol: "grpc", # required, accepts grpc, http, http2
+    #         },
+    #         tls: {
+    #           certificate: { # required
+    #             acm: {
+    #               certificate_arn: "Arn", # required
+    #             },
+    #             file: {
+    #               certificate_chain: "FilePath", # required
+    #               private_key: "FilePath", # required
+    #             },
+    #           },
+    #           mode: "DISABLED", # required, accepts DISABLED, PERMISSIVE, STRICT
+    #         },
+    #       }
+    #
+    # @!attribute [rw] health_check
+    #   The health check information for the listener.
+    #   @return [Types::VirtualGatewayHealthCheckPolicy]
     #
-    class DescribeVirtualNodeOutput < Struct.new(
-      :virtual_node)
-      include Aws::Structure
-    end
-
-    # @!attribute [rw] route
-    #   The full description of your mesh following the create call.
-    #   @return [Types::RouteData]
+    # @!attribute [rw] port_mapping
+    #   The port mapping information for the listener.
+    #   @return [Types::VirtualGatewayPortMapping]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/CreateRouteOutput AWS API Documentation
+    # @!attribute [rw] tls
+    #   A reference to an object that represents the Transport Layer
+    #   Security (TLS) properties for the listener.
+    #   @return [Types::VirtualGatewayListenerTls]
     #
-    class CreateRouteOutput < Struct.new(
-      :route)
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/VirtualGatewayListener AWS API Documentation
+    #
+    class VirtualGatewayListener < Struct.new(
+      :health_check,
+      :port_mapping,
+      :tls)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -496,6 +1097,46 @@ module Aws::AppMesh
     #
     class DnsServiceDiscovery < Struct.new(
       :hostname)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # An object that represents a port mapping.
+    #
+    # @note When making an API call, you may pass VirtualGatewayPortMapping
+    #   data as a hash:
+    #
+    #       {
+    #         port: 1, # required
+    #         protocol: "grpc", # required, accepts grpc, http, http2
+    #       }
+    #
+    # @!attribute [rw] port
+    #   The port used for the port mapping. Specify one protocol.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] protocol
+    #   The protocol used for the port mapping.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/VirtualGatewayPortMapping AWS API Documentation
+    #
+    class VirtualGatewayPortMapping < Struct.new(
+      :port,
+      :protocol)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] virtual_gateway
+    #   The virtual gateway that was deleted.
+    #   @return [Types::VirtualGatewayData]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/DeleteVirtualGatewayOutput AWS API Documentation
+    #
+    class DeleteVirtualGatewayOutput < Struct.new(
+      :virtual_gateway)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -539,6 +1180,7 @@ module Aws::AppMesh
       :mesh_owner,
       :route_name,
       :virtual_router_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -573,6 +1215,7 @@ module Aws::AppMesh
       :spec,
       :status,
       :virtual_node_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -580,6 +1223,50 @@ module Aws::AppMesh
     #
     class UntagResourceOutput < Aws::EmptyStructure; end
 
+    # An object that represents the Transport Layer Security (TLS)
+    # properties for a listener.
+    #
+    # @note When making an API call, you may pass VirtualGatewayListenerTls
+    #   data as a hash:
+    #
+    #       {
+    #         certificate: { # required
+    #           acm: {
+    #             certificate_arn: "Arn", # required
+    #           },
+    #           file: {
+    #             certificate_chain: "FilePath", # required
+    #             private_key: "FilePath", # required
+    #           },
+    #         },
+    #         mode: "DISABLED", # required, accepts DISABLED, PERMISSIVE, STRICT
+    #       }
+    #
+    # @!attribute [rw] certificate
+    #   An object that represents a Transport Layer Security (TLS)
+    #   certificate.
+    #   @return [Types::VirtualGatewayListenerTlsCertificate]
+    #
+    # @!attribute [rw] mode
+    #   Specify one of the following modes.
+    #
+    #   * ****STRICT – Listener only accepts connections with TLS enabled.
+    #
+    #   * ****PERMISSIVE – Listener accepts connections with or without TLS
+    #     enabled.
+    #
+    #   * ****DISABLED – Listener only accepts connections without TLS.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/VirtualGatewayListenerTls AWS API Documentation
+    #
+    class VirtualGatewayListenerTls < Struct.new(
+      :certificate,
+      :mode)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # An object that represents the backends that a virtual node is expected
     # to send outbound traffic to.
     #
@@ -616,6 +1303,7 @@ module Aws::AppMesh
     #
     class Backend < Struct.new(
       :virtual_service)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -656,6 +1344,102 @@ module Aws::AppMesh
     class ListMeshesInput < Struct.new(
       :limit,
       :next_token)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # An object that represents a local file certificate. The certificate
+    # must meet specific requirements and you must have proxy authorization
+    # enabled. For more information, see [Transport Layer Security
+    # (TLS)][1].
+    #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com/app-mesh/latest/userguide/tls.html#virtual-node-tls-prerequisites
+    #
+    # @note When making an API call, you may pass VirtualGatewayListenerTlsFileCertificate
+    #   data as a hash:
+    #
+    #       {
+    #         certificate_chain: "FilePath", # required
+    #         private_key: "FilePath", # required
+    #       }
+    #
+    # @!attribute [rw] certificate_chain
+    #   The certificate chain for the certificate.
+    #   @return [String]
+    #
+    # @!attribute [rw] private_key
+    #   The private key for a certificate stored on the file system of the
+    #   mesh endpoint that the proxy is running on.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/VirtualGatewayListenerTlsFileCertificate AWS API Documentation
+    #
+    class VirtualGatewayListenerTlsFileCertificate < Struct.new(
+      :certificate_chain,
+      :private_key)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @note When making an API call, you may pass ListGatewayRoutesInput
+    #   data as a hash:
+    #
+    #       {
+    #         limit: 1,
+    #         mesh_name: "ResourceName", # required
+    #         mesh_owner: "AccountId",
+    #         next_token: "String",
+    #         virtual_gateway_name: "ResourceName", # required
+    #       }
+    #
+    # @!attribute [rw] limit
+    #   The maximum number of results returned by `ListGatewayRoutes` in
+    #   paginated output. When you use this parameter, `ListGatewayRoutes`
+    #   returns only `limit` results in a single page along with a
+    #   `nextToken` response element. You can see the remaining results of
+    #   the initial request by sending another `ListGatewayRoutes` request
+    #   with the returned `nextToken` value. This value can be between 1 and
+    #   100. If you don't use this parameter, `ListGatewayRoutes` returns
+    #   up to 100 results and a `nextToken` value if applicable.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] mesh_name
+    #   The name of the service mesh to list gateway routes in.
+    #   @return [String]
+    #
+    # @!attribute [rw] mesh_owner
+    #   The AWS IAM account ID of the service mesh owner. If the account ID
+    #   is not your own, then it's the ID of the account that shared the
+    #   mesh with your account. For more information about mesh sharing, see
+    #   [Working with shared meshes][1].
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/app-mesh/latest/userguide/sharing.html
+    #   @return [String]
+    #
+    # @!attribute [rw] next_token
+    #   The `nextToken` value returned from a previous paginated
+    #   `ListGatewayRoutes` request where `limit` was used and the results
+    #   exceeded the value of that parameter. Pagination continues from the
+    #   end of the previous results that returned the `nextToken` value.
+    #   @return [String]
+    #
+    # @!attribute [rw] virtual_gateway_name
+    #   The name of the virtual gateway to list gateway routes in.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/ListGatewayRoutesInput AWS API Documentation
+    #
+    class ListGatewayRoutesInput < Struct.new(
+      :limit,
+      :mesh_name,
+      :mesh_owner,
+      :next_token,
+      :virtual_gateway_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -690,6 +1474,7 @@ module Aws::AppMesh
       :spec,
       :status,
       :virtual_router_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -729,6 +1514,77 @@ module Aws::AppMesh
       :client_token,
       :mesh_name,
       :spec)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # An object that represents the health check policy for a virtual
+    # gateway's listener.
+    #
+    # @note When making an API call, you may pass VirtualGatewayHealthCheckPolicy
+    #   data as a hash:
+    #
+    #       {
+    #         healthy_threshold: 1, # required
+    #         interval_millis: 1, # required
+    #         path: "String",
+    #         port: 1,
+    #         protocol: "grpc", # required, accepts grpc, http, http2
+    #         timeout_millis: 1, # required
+    #         unhealthy_threshold: 1, # required
+    #       }
+    #
+    # @!attribute [rw] healthy_threshold
+    #   The number of consecutive successful health checks that must occur
+    #   before declaring the listener healthy.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] interval_millis
+    #   The time period in milliseconds between each health check execution.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] path
+    #   The destination path for the health check request. This value is
+    #   only used if the specified protocol is HTTP or HTTP/2. For any other
+    #   protocol, this value is ignored.
+    #   @return [String]
+    #
+    # @!attribute [rw] port
+    #   The destination port for the health check request. This port must
+    #   match the port defined in the PortMapping for the listener.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] protocol
+    #   The protocol for the health check request. If you specify `grpc`,
+    #   then your service must conform to the [GRPC Health Checking
+    #   Protocol][1].
+    #
+    #
+    #
+    #   [1]: https://github.com/grpc/grpc/blob/master/doc/health-checking.md
+    #   @return [String]
+    #
+    # @!attribute [rw] timeout_millis
+    #   The amount of time to wait when receiving a response from the health
+    #   check, in milliseconds.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] unhealthy_threshold
+    #   The number of consecutive failed health checks that must occur
+    #   before declaring a virtual gateway unhealthy.
+    #   @return [Integer]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/VirtualGatewayHealthCheckPolicy AWS API Documentation
+    #
+    class VirtualGatewayHealthCheckPolicy < Struct.new(
+      :healthy_threshold,
+      :interval_millis,
+      :path,
+      :port,
+      :protocol,
+      :timeout_millis,
+      :unhealthy_threshold)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -808,6 +1664,7 @@ module Aws::AppMesh
       :spec,
       :tags,
       :virtual_router_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -819,6 +1676,7 @@ module Aws::AppMesh
     #
     class DescribeVirtualRouterOutput < Struct.new(
       :virtual_router)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -830,6 +1688,7 @@ module Aws::AppMesh
     #
     class CreateMeshOutput < Struct.new(
       :mesh)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -840,21 +1699,57 @@ module Aws::AppMesh
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/CreateVirtualRouterOutput AWS API Documentation
     #
-    class CreateVirtualRouterOutput < Struct.new(
-      :virtual_router)
-      include Aws::Structure
-    end
-
-    # An object that represents the status of a virtual service.
+    class CreateVirtualRouterOutput < Struct.new(
+      :virtual_router)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # An object that represents the status of a virtual service.
+    #
+    # @!attribute [rw] status
+    #   The current status of the virtual service.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/VirtualServiceStatus AWS API Documentation
+    #
+    class VirtualServiceStatus < Struct.new(
+      :status)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # An object that represents a listener's Transport Layer Security (TLS)
+    # certificate.
+    #
+    # @note When making an API call, you may pass VirtualGatewayListenerTlsCertificate
+    #   data as a hash:
+    #
+    #       {
+    #         acm: {
+    #           certificate_arn: "Arn", # required
+    #         },
+    #         file: {
+    #           certificate_chain: "FilePath", # required
+    #           private_key: "FilePath", # required
+    #         },
+    #       }
+    #
+    # @!attribute [rw] acm
+    #   A reference to an object that represents an AWS Certicate Manager
+    #   (ACM) certificate.
+    #   @return [Types::VirtualGatewayListenerTlsAcmCertificate]
     #
-    # @!attribute [rw] status
-    #   The current status of the virtual service.
-    #   @return [String]
+    # @!attribute [rw] file
+    #   A reference to an object that represents a local file certificate.
+    #   @return [Types::VirtualGatewayListenerTlsFileCertificate]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/VirtualServiceStatus AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/VirtualGatewayListenerTlsCertificate AWS API Documentation
     #
-    class VirtualServiceStatus < Struct.new(
-      :status)
+    class VirtualGatewayListenerTlsCertificate < Struct.new(
+      :acm,
+      :file)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -888,6 +1783,7 @@ module Aws::AppMesh
     class ListenerTlsCertificate < Struct.new(
       :acm,
       :file)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -916,6 +1812,29 @@ module Aws::AppMesh
     #
     class VirtualRouterSpec < Struct.new(
       :listeners)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # An object that represents the virtual service that traffic is routed
+    # to.
+    #
+    # @note When making an API call, you may pass GatewayRouteVirtualService
+    #   data as a hash:
+    #
+    #       {
+    #         virtual_service_name: "ResourceName", # required
+    #       }
+    #
+    # @!attribute [rw] virtual_service_name
+    #   The name of the virtual service that traffic is routed to.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/GatewayRouteVirtualService AWS API Documentation
+    #
+    class GatewayRouteVirtualService < Struct.new(
+      :virtual_service_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1091,6 +2010,7 @@ module Aws::AppMesh
       :listeners,
       :logging,
       :service_discovery)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1110,6 +2030,76 @@ module Aws::AppMesh
     class ListMeshesOutput < Struct.new(
       :meshes,
       :next_token)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # An object that represents a gateway route specification. Specify one
+    # gateway route type.
+    #
+    # @note When making an API call, you may pass GatewayRouteSpec
+    #   data as a hash:
+    #
+    #       {
+    #         grpc_route: {
+    #           action: { # required
+    #             target: { # required
+    #               virtual_service: { # required
+    #                 virtual_service_name: "ResourceName", # required
+    #               },
+    #             },
+    #           },
+    #           match: { # required
+    #             service_name: "ServiceName",
+    #           },
+    #         },
+    #         http2_route: {
+    #           action: { # required
+    #             target: { # required
+    #               virtual_service: { # required
+    #                 virtual_service_name: "ResourceName", # required
+    #               },
+    #             },
+    #           },
+    #           match: { # required
+    #             prefix: "String", # required
+    #           },
+    #         },
+    #         http_route: {
+    #           action: { # required
+    #             target: { # required
+    #               virtual_service: { # required
+    #                 virtual_service_name: "ResourceName", # required
+    #               },
+    #             },
+    #           },
+    #           match: { # required
+    #             prefix: "String", # required
+    #           },
+    #         },
+    #       }
+    #
+    # @!attribute [rw] grpc_route
+    #   An object that represents the specification of a gRPC gateway route.
+    #   @return [Types::GrpcGatewayRoute]
+    #
+    # @!attribute [rw] http2_route
+    #   An object that represents the specification of an HTTP/2 gateway
+    #   route.
+    #   @return [Types::HttpGatewayRoute]
+    #
+    # @!attribute [rw] http_route
+    #   An object that represents the specification of an HTTP gateway
+    #   route.
+    #   @return [Types::HttpGatewayRoute]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/GatewayRouteSpec AWS API Documentation
+    #
+    class GatewayRouteSpec < Struct.new(
+      :grpc_route,
+      :http2_route,
+      :http_route)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1124,9 +2114,48 @@ module Aws::AppMesh
     #
     class ConflictException < Struct.new(
       :message)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # An object that represents the default properties for a backend.
+    #
+    # @note When making an API call, you may pass VirtualGatewayBackendDefaults
+    #   data as a hash:
+    #
+    #       {
+    #         client_policy: {
+    #           tls: {
+    #             enforce: false,
+    #             ports: [1],
+    #             validation: { # required
+    #               trust: { # required
+    #                 acm: {
+    #                   certificate_authority_arns: ["Arn"], # required
+    #                 },
+    #                 file: {
+    #                   certificate_chain: "FilePath", # required
+    #                 },
+    #               },
+    #             },
+    #           },
+    #         },
+    #       }
+    #
+    # @!attribute [rw] client_policy
+    #   A reference to an object that represents a client policy.
+    #   @return [Types::VirtualGatewayClientPolicy]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/VirtualGatewayBackendDefaults AWS API Documentation
+    #
+    class VirtualGatewayBackendDefaults < Struct.new(
+      :client_policy)
+      SENSITIVE = []
       include Aws::Structure
     end
 
+    # An object that represents timeouts for different protocols.
+    #
     # @note When making an API call, you may pass ListenerTimeout
     #   data as a hash:
     #
@@ -1170,15 +2199,19 @@ module Aws::AppMesh
     #       }
     #
     # @!attribute [rw] grpc
+    #   An object that represents types of timeouts.
     #   @return [Types::GrpcTimeout]
     #
     # @!attribute [rw] http
+    #   An object that represents types of timeouts.
     #   @return [Types::HttpTimeout]
     #
     # @!attribute [rw] http2
+    #   An object that represents types of timeouts.
     #   @return [Types::HttpTimeout]
     #
     # @!attribute [rw] tcp
+    #   An object that represents types of timeouts.
     #   @return [Types::TcpTimeout]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/ListenerTimeout AWS API Documentation
@@ -1188,6 +2221,52 @@ module Aws::AppMesh
       :http,
       :http2,
       :tcp)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @note When making an API call, you may pass DescribeGatewayRouteInput
+    #   data as a hash:
+    #
+    #       {
+    #         gateway_route_name: "ResourceName", # required
+    #         mesh_name: "ResourceName", # required
+    #         mesh_owner: "AccountId",
+    #         virtual_gateway_name: "ResourceName", # required
+    #       }
+    #
+    # @!attribute [rw] gateway_route_name
+    #   The name of the gateway route to describe.
+    #   @return [String]
+    #
+    # @!attribute [rw] mesh_name
+    #   The name of the service mesh that the gateway route resides in.
+    #   @return [String]
+    #
+    # @!attribute [rw] mesh_owner
+    #   The AWS IAM account ID of the service mesh owner. If the account ID
+    #   is not your own, then it's the ID of the account that shared the
+    #   mesh with your account. For more information about mesh sharing, see
+    #   [Working with shared meshes][1].
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/app-mesh/latest/userguide/sharing.html
+    #   @return [String]
+    #
+    # @!attribute [rw] virtual_gateway_name
+    #   The name of the virtual gateway that the gateway route is associated
+    #   with.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/DescribeGatewayRouteInput AWS API Documentation
+    #
+    class DescribeGatewayRouteInput < Struct.new(
+      :gateway_route_name,
+      :mesh_name,
+      :mesh_owner,
+      :virtual_gateway_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1221,6 +2300,7 @@ module Aws::AppMesh
     class TlsValidationContextTrust < Struct.new(
       :acm,
       :file)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1247,6 +2327,7 @@ module Aws::AppMesh
     class PortMapping < Struct.new(
       :port,
       :protocol)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1268,6 +2349,7 @@ module Aws::AppMesh
     class ListVirtualServicesOutput < Struct.new(
       :next_token,
       :virtual_services)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1298,6 +2380,84 @@ module Aws::AppMesh
     class WeightedTarget < Struct.new(
       :virtual_node,
       :weight)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # An object that represents a gRPC gateway route.
+    #
+    # @note When making an API call, you may pass GrpcGatewayRoute
+    #   data as a hash:
+    #
+    #       {
+    #         action: { # required
+    #           target: { # required
+    #             virtual_service: { # required
+    #               virtual_service_name: "ResourceName", # required
+    #             },
+    #           },
+    #         },
+    #         match: { # required
+    #           service_name: "ServiceName",
+    #         },
+    #       }
+    #
+    # @!attribute [rw] action
+    #   An object that represents the action to take if a match is
+    #   determined.
+    #   @return [Types::GrpcGatewayRouteAction]
+    #
+    # @!attribute [rw] match
+    #   An object that represents the criteria for determining a request
+    #   match.
+    #   @return [Types::GrpcGatewayRouteMatch]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/GrpcGatewayRoute AWS API Documentation
+    #
+    class GrpcGatewayRoute < Struct.new(
+      :action,
+      :match)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # An object that represents a gateway route returned by a describe
+    # operation.
+    #
+    # @!attribute [rw] gateway_route_name
+    #   The name of the gateway route.
+    #   @return [String]
+    #
+    # @!attribute [rw] mesh_name
+    #   The name of the service mesh that the resource resides in.
+    #   @return [String]
+    #
+    # @!attribute [rw] metadata
+    #   An object that represents metadata for a resource.
+    #   @return [Types::ResourceMetadata]
+    #
+    # @!attribute [rw] spec
+    #   The specifications of the gateway route.
+    #   @return [Types::GatewayRouteSpec]
+    #
+    # @!attribute [rw] status
+    #   The status of the gateway route.
+    #   @return [Types::GatewayRouteStatus]
+    #
+    # @!attribute [rw] virtual_gateway_name
+    #   The virtual gateway that the gateway route is associated with.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/GatewayRouteData AWS API Documentation
+    #
+    class GatewayRouteData < Struct.new(
+      :gateway_route_name,
+      :mesh_name,
+      :metadata,
+      :spec,
+      :status,
+      :virtual_gateway_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1368,6 +2528,7 @@ module Aws::AppMesh
       :route_name,
       :version,
       :virtual_router_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1405,6 +2566,7 @@ module Aws::AppMesh
       :mesh_name,
       :mesh_owner,
       :virtual_node_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1443,6 +2605,7 @@ module Aws::AppMesh
       :spec,
       :status,
       :virtual_router_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1456,6 +2619,7 @@ module Aws::AppMesh
     #
     class InternalServerErrorException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1477,6 +2641,7 @@ module Aws::AppMesh
     #
     class TlsValidationContextAcmTrust < Struct.new(
       :certificate_authority_arns)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1489,6 +2654,7 @@ module Aws::AppMesh
     #
     class ForbiddenException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1509,46 +2675,120 @@ module Aws::AppMesh
     #         suffix: "HeaderMatch",
     #       }
     #
-    # @!attribute [rw] exact
-    #   The value sent by the client must match the specified value exactly.
-    #   @return [String]
+    # @!attribute [rw] exact
+    #   The value sent by the client must match the specified value exactly.
+    #   @return [String]
+    #
+    # @!attribute [rw] prefix
+    #   The value sent by the client must begin with the specified
+    #   characters.
+    #   @return [String]
+    #
+    # @!attribute [rw] range
+    #   An object that represents the range of values to match on.
+    #   @return [Types::MatchRange]
+    #
+    # @!attribute [rw] regex
+    #   The value sent by the client must include the specified characters.
+    #   @return [String]
+    #
+    # @!attribute [rw] suffix
+    #   The value sent by the client must end with the specified characters.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/HeaderMatchMethod AWS API Documentation
+    #
+    class HeaderMatchMethod < Struct.new(
+      :exact,
+      :prefix,
+      :range,
+      :regex,
+      :suffix)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] mesh
+    #   The service mesh that was deleted.
+    #   @return [Types::MeshData]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/DeleteMeshOutput AWS API Documentation
+    #
+    class DeleteMeshOutput < Struct.new(
+      :mesh)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # An object that represents a Transport Layer Security (TLS) client
+    # policy.
+    #
+    # @note When making an API call, you may pass VirtualGatewayClientPolicyTls
+    #   data as a hash:
+    #
+    #       {
+    #         enforce: false,
+    #         ports: [1],
+    #         validation: { # required
+    #           trust: { # required
+    #             acm: {
+    #               certificate_authority_arns: ["Arn"], # required
+    #             },
+    #             file: {
+    #               certificate_chain: "FilePath", # required
+    #             },
+    #           },
+    #         },
+    #       }
+    #
+    # @!attribute [rw] enforce
+    #   Whether the policy is enforced. The default is `True`, if a value
+    #   isn't specified.
+    #   @return [Boolean]
+    #
+    # @!attribute [rw] ports
+    #   One or more ports that the policy is enforced for.
+    #   @return [Array<Integer>]
     #
-    # @!attribute [rw] prefix
-    #   The value sent by the client must begin with the specified
-    #   characters.
-    #   @return [String]
+    # @!attribute [rw] validation
+    #   A reference to an object that represents a TLS validation context.
+    #   @return [Types::VirtualGatewayTlsValidationContext]
     #
-    # @!attribute [rw] range
-    #   An object that represents the range of values to match on.
-    #   @return [Types::MatchRange]
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/VirtualGatewayClientPolicyTls AWS API Documentation
     #
-    # @!attribute [rw] regex
-    #   The value sent by the client must include the specified characters.
-    #   @return [String]
+    class VirtualGatewayClientPolicyTls < Struct.new(
+      :enforce,
+      :ports,
+      :validation)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # An object that represents the status of the mesh resource.
     #
-    # @!attribute [rw] suffix
-    #   The value sent by the client must end with the specified characters.
+    # @!attribute [rw] status
+    #   The current status.
     #   @return [String]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/HeaderMatchMethod AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/VirtualGatewayStatus AWS API Documentation
     #
-    class HeaderMatchMethod < Struct.new(
-      :exact,
-      :prefix,
-      :range,
-      :regex,
-      :suffix)
+    class VirtualGatewayStatus < Struct.new(
+      :status)
+      SENSITIVE = []
       include Aws::Structure
     end
 
-    # @!attribute [rw] mesh
-    #   The service mesh that was deleted.
-    #   @return [Types::MeshData]
+    # An object that represents the current status of a gateway route.
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/DeleteMeshOutput AWS API Documentation
+    # @!attribute [rw] status
+    #   The current status for the gateway route.
+    #   @return [String]
     #
-    class DeleteMeshOutput < Struct.new(
-      :mesh)
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/GatewayRouteStatus AWS API Documentation
+    #
+    class GatewayRouteStatus < Struct.new(
+      :status)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1581,6 +2821,72 @@ module Aws::AppMesh
     class TagResourceInput < Struct.new(
       :resource_arn,
       :tags)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] virtual_gateway
+    #   The full description of your virtual gateway following the create
+    #   call.
+    #   @return [Types::VirtualGatewayData]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/CreateVirtualGatewayOutput AWS API Documentation
+    #
+    class CreateVirtualGatewayOutput < Struct.new(
+      :virtual_gateway)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] next_token
+    #   The `nextToken` value to include in a future `ListVirtualGateways`
+    #   request. When the results of a `ListVirtualGateways` request exceed
+    #   `limit`, you can use this value to retrieve the next page of
+    #   results. This value is `null` when there are no more results to
+    #   return.
+    #   @return [String]
+    #
+    # @!attribute [rw] virtual_gateways
+    #   The list of existing virtual gateways for the specified service
+    #   mesh.
+    #   @return [Array<Types::VirtualGatewayRef>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/ListVirtualGatewaysOutput AWS API Documentation
+    #
+    class ListVirtualGatewaysOutput < Struct.new(
+      :next_token,
+      :virtual_gateways)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # An object that represents a Transport Layer Security (TLS) validation
+    # context.
+    #
+    # @note When making an API call, you may pass VirtualGatewayTlsValidationContext
+    #   data as a hash:
+    #
+    #       {
+    #         trust: { # required
+    #           acm: {
+    #             certificate_authority_arns: ["Arn"], # required
+    #           },
+    #           file: {
+    #             certificate_chain: "FilePath", # required
+    #           },
+    #         },
+    #       }
+    #
+    # @!attribute [rw] trust
+    #   A reference to an object that represents a TLS validation context
+    #   trust.
+    #   @return [Types::VirtualGatewayTlsValidationContextTrust]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/VirtualGatewayTlsValidationContext AWS API Documentation
+    #
+    class VirtualGatewayTlsValidationContext < Struct.new(
+      :trust)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1611,6 +2917,7 @@ module Aws::AppMesh
     class VirtualServiceProvider < Struct.new(
       :virtual_node,
       :virtual_router)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1661,6 +2968,7 @@ module Aws::AppMesh
       :metadata,
       :method_name,
       :service_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1702,6 +3010,7 @@ module Aws::AppMesh
       :attributes,
       :namespace_name,
       :service_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1713,6 +3022,7 @@ module Aws::AppMesh
     #
     class UpdateVirtualServiceOutput < Struct.new(
       :virtual_service)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1726,6 +3036,7 @@ module Aws::AppMesh
     #
     class MeshStatus < Struct.new(
       :status)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1927,6 +3238,7 @@ module Aws::AppMesh
       :spec,
       :tags,
       :virtual_node_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -1940,6 +3252,7 @@ module Aws::AppMesh
     #
     class NotFoundException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2148,6 +3461,129 @@ module Aws::AppMesh
       :http_route,
       :priority,
       :tcp_route)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # An object that represents a gateway route returned by a list
+    # operation.
+    #
+    # @!attribute [rw] arn
+    #   The full Amazon Resource Name (ARN) for the gateway route.
+    #   @return [String]
+    #
+    # @!attribute [rw] created_at
+    #   The Unix epoch timestamp in seconds for when the resource was
+    #   created.
+    #   @return [Time]
+    #
+    # @!attribute [rw] gateway_route_name
+    #   The name of the gateway route.
+    #   @return [String]
+    #
+    # @!attribute [rw] last_updated_at
+    #   The Unix epoch timestamp in seconds for when the resource was last
+    #   updated.
+    #   @return [Time]
+    #
+    # @!attribute [rw] mesh_name
+    #   The name of the service mesh that the resource resides in.
+    #   @return [String]
+    #
+    # @!attribute [rw] mesh_owner
+    #   The AWS IAM account ID of the service mesh owner. If the account ID
+    #   is not your own, then it's the ID of the account that shared the
+    #   mesh with your account. For more information about mesh sharing, see
+    #   [Working with shared meshes][1].
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/app-mesh/latest/userguide/sharing.html
+    #   @return [String]
+    #
+    # @!attribute [rw] resource_owner
+    #   The AWS IAM account ID of the resource owner. If the account ID is
+    #   not your own, then it's the ID of the mesh owner or of another
+    #   account that the mesh is shared with. For more information about
+    #   mesh sharing, see [Working with shared meshes][1].
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/app-mesh/latest/userguide/sharing.html
+    #   @return [String]
+    #
+    # @!attribute [rw] version
+    #   The version of the resource. Resources are created at version 1, and
+    #   this version is incremented each time that they're updated.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] virtual_gateway_name
+    #   The virtual gateway that the gateway route is associated with.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/GatewayRouteRef AWS API Documentation
+    #
+    class GatewayRouteRef < Struct.new(
+      :arn,
+      :created_at,
+      :gateway_route_name,
+      :last_updated_at,
+      :mesh_name,
+      :mesh_owner,
+      :resource_owner,
+      :version,
+      :virtual_gateway_name)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # An object that represents an AWS Certicate Manager (ACM) certificate.
+    #
+    # @note When making an API call, you may pass VirtualGatewayListenerTlsAcmCertificate
+    #   data as a hash:
+    #
+    #       {
+    #         certificate_arn: "Arn", # required
+    #       }
+    #
+    # @!attribute [rw] certificate_arn
+    #   The Amazon Resource Name (ARN) for the certificate. The certificate
+    #   must meet specific requirements and you must have proxy
+    #   authorization enabled. For more information, see [Transport Layer
+    #   Security (TLS)][1].
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/app-mesh/latest/userguide/tls.html#virtual-node-tls-prerequisites
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/VirtualGatewayListenerTlsAcmCertificate AWS API Documentation
+    #
+    class VirtualGatewayListenerTlsAcmCertificate < Struct.new(
+      :certificate_arn)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] gateway_routes
+    #   The list of existing gateway routes for the specified service mesh
+    #   and virtual gateway.
+    #   @return [Array<Types::GatewayRouteRef>]
+    #
+    # @!attribute [rw] next_token
+    #   The `nextToken` value to include in a future `ListGatewayRoutes`
+    #   request. When the results of a `ListGatewayRoutes` request exceed
+    #   `limit`, you can use this value to retrieve the next page of
+    #   results. This value is `null` when there are no more results to
+    #   return.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/ListGatewayRoutesOutput AWS API Documentation
+    #
+    class ListGatewayRoutesOutput < Struct.new(
+      :gateway_routes,
+      :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2160,6 +3596,7 @@ module Aws::AppMesh
     #
     class CreateVirtualServiceOutput < Struct.new(
       :virtual_service)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2190,6 +3627,7 @@ module Aws::AppMesh
     #
     class FileAccessLog < Struct.new(
       :path)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2210,9 +3648,12 @@ module Aws::AppMesh
     #
     class VirtualRouterServiceProvider < Struct.new(
       :virtual_router_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
+    # An object that represents types of timeouts.
+    #
     # @note When making an API call, you may pass HttpTimeout
     #   data as a hash:
     #
@@ -2240,6 +3681,7 @@ module Aws::AppMesh
     class HttpTimeout < Struct.new(
       :idle,
       :per_request)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2277,46 +3719,113 @@ module Aws::AppMesh
       :mesh_name,
       :mesh_owner,
       :virtual_service_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
     # An object that represents a Transport Layer Security (TLS) validation
     # context.
     #
-    # @note When making an API call, you may pass TlsValidationContext
+    # @note When making an API call, you may pass TlsValidationContext
+    #   data as a hash:
+    #
+    #       {
+    #         trust: { # required
+    #           acm: {
+    #             certificate_authority_arns: ["Arn"], # required
+    #           },
+    #           file: {
+    #             certificate_chain: "FilePath", # required
+    #           },
+    #         },
+    #       }
+    #
+    # @!attribute [rw] trust
+    #   A reference to an object that represents a TLS validation context
+    #   trust.
+    #   @return [Types::TlsValidationContextTrust]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/TlsValidationContext AWS API Documentation
+    #
+    class TlsValidationContext < Struct.new(
+      :trust)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] virtual_router
+    #   The virtual router that was deleted.
+    #   @return [Types::VirtualRouterData]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/DeleteVirtualRouterOutput AWS API Documentation
+    #
+    class DeleteVirtualRouterOutput < Struct.new(
+      :virtual_router)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @note When making an API call, you may pass DescribeVirtualGatewayInput
+    #   data as a hash:
+    #
+    #       {
+    #         mesh_name: "ResourceName", # required
+    #         mesh_owner: "AccountId",
+    #         virtual_gateway_name: "ResourceName", # required
+    #       }
+    #
+    # @!attribute [rw] mesh_name
+    #   The name of the service mesh that the gateway route resides in.
+    #   @return [String]
+    #
+    # @!attribute [rw] mesh_owner
+    #   The AWS IAM account ID of the service mesh owner. If the account ID
+    #   is not your own, then it's the ID of the account that shared the
+    #   mesh with your account. For more information about mesh sharing, see
+    #   [Working with shared meshes][1].
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/app-mesh/latest/userguide/sharing.html
+    #   @return [String]
+    #
+    # @!attribute [rw] virtual_gateway_name
+    #   The name of the virtual gateway to describe.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/DescribeVirtualGatewayInput AWS API Documentation
+    #
+    class DescribeVirtualGatewayInput < Struct.new(
+      :mesh_name,
+      :mesh_owner,
+      :virtual_gateway_name)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # An object that represents the action to take if a match is determined.
+    #
+    # @note When making an API call, you may pass GrpcGatewayRouteAction
     #   data as a hash:
     #
     #       {
-    #         trust: { # required
-    #           acm: {
-    #             certificate_authority_arns: ["Arn"], # required
-    #           },
-    #           file: {
-    #             certificate_chain: "FilePath", # required
+    #         target: { # required
+    #           virtual_service: { # required
+    #             virtual_service_name: "ResourceName", # required
     #           },
     #         },
     #       }
     #
-    # @!attribute [rw] trust
-    #   A reference to an object that represents a TLS validation context
-    #   trust.
-    #   @return [Types::TlsValidationContextTrust]
-    #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/TlsValidationContext AWS API Documentation
-    #
-    class TlsValidationContext < Struct.new(
-      :trust)
-      include Aws::Structure
-    end
-
-    # @!attribute [rw] virtual_router
-    #   The virtual router that was deleted.
-    #   @return [Types::VirtualRouterData]
+    # @!attribute [rw] target
+    #   An object that represents the target that traffic is routed to when
+    #   a request matches the gateway route.
+    #   @return [Types::GatewayRouteTarget]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/DeleteVirtualRouterOutput AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/GrpcGatewayRouteAction AWS API Documentation
     #
-    class DeleteVirtualRouterOutput < Struct.new(
-      :virtual_router)
+    class GrpcGatewayRouteAction < Struct.new(
+      :target)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2328,6 +3837,7 @@ module Aws::AppMesh
     #
     class DeleteVirtualNodeOutput < Struct.new(
       :virtual_node)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2514,6 +4024,7 @@ module Aws::AppMesh
       :mesh_owner,
       :spec,
       :virtual_node_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2557,6 +4068,7 @@ module Aws::AppMesh
     class ListenerTls < Struct.new(
       :certificate,
       :mode)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2575,6 +4087,7 @@ module Aws::AppMesh
     #
     class DeleteMeshInput < Struct.new(
       :mesh_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2654,6 +4167,7 @@ module Aws::AppMesh
       :spec,
       :tags,
       :virtual_service_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2718,6 +4232,56 @@ module Aws::AppMesh
       :mesh_owner,
       :spec,
       :virtual_router_name)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # An object that represents the action to take if a match is determined.
+    #
+    # @note When making an API call, you may pass HttpGatewayRouteAction
+    #   data as a hash:
+    #
+    #       {
+    #         target: { # required
+    #           virtual_service: { # required
+    #             virtual_service_name: "ResourceName", # required
+    #           },
+    #         },
+    #       }
+    #
+    # @!attribute [rw] target
+    #   An object that represents the target that traffic is routed to when
+    #   a request matches the gateway route.
+    #   @return [Types::GatewayRouteTarget]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/HttpGatewayRouteAction AWS API Documentation
+    #
+    class HttpGatewayRouteAction < Struct.new(
+      :target)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # An object that represents the criteria for determining a request
+    # match.
+    #
+    # @note When making an API call, you may pass GrpcGatewayRouteMatch
+    #   data as a hash:
+    #
+    #       {
+    #         service_name: "ServiceName",
+    #       }
+    #
+    # @!attribute [rw] service_name
+    #   The fully qualified domain name for the service to match from the
+    #   request.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/GrpcGatewayRouteMatch AWS API Documentation
+    #
+    class GrpcGatewayRouteMatch < Struct.new(
+      :service_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2760,6 +4324,7 @@ module Aws::AppMesh
       :limit,
       :next_token,
       :resource_arn)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2772,6 +4337,7 @@ module Aws::AppMesh
     #
     class ServiceUnavailableException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2783,6 +4349,7 @@ module Aws::AppMesh
     #
     class DescribeMeshOutput < Struct.new(
       :mesh)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2820,6 +4387,19 @@ module Aws::AppMesh
       :mesh_name,
       :mesh_owner,
       :virtual_router_name)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] gateway_route
+    #   A full description of the gateway route that was updated.
+    #   @return [Types::GatewayRouteData]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/UpdateGatewayRouteOutput AWS API Documentation
+    #
+    class UpdateGatewayRouteOutput < Struct.new(
+      :gateway_route)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2863,6 +4443,7 @@ module Aws::AppMesh
       :mesh_owner,
       :route_name,
       :virtual_router_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2874,6 +4455,19 @@ module Aws::AppMesh
     #
     class DeleteRouteOutput < Struct.new(
       :route)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] gateway_route
+    #   The gateway route that was deleted.
+    #   @return [Types::GatewayRouteData]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/DeleteGatewayRouteOutput AWS API Documentation
+    #
+    class DeleteGatewayRouteOutput < Struct.new(
+      :gateway_route)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2938,6 +4532,7 @@ module Aws::AppMesh
       :mesh_owner,
       :spec,
       :virtual_service_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2949,6 +4544,7 @@ module Aws::AppMesh
     #
     class UpdateRouteOutput < Struct.new(
       :route)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -2975,6 +4571,7 @@ module Aws::AppMesh
     #
     class HttpRouteAction < Struct.new(
       :weighted_targets)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3034,6 +4631,7 @@ module Aws::AppMesh
       :mesh_owner,
       :next_token,
       :virtual_router_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3100,9 +4698,12 @@ module Aws::AppMesh
       :resource_owner,
       :version,
       :virtual_service_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
+    # An object that represents types of timeouts.
+    #
     # @note When making an API call, you may pass GrpcTimeout
     #   data as a hash:
     #
@@ -3118,11 +4719,19 @@ module Aws::AppMesh
     #       }
     #
     # @!attribute [rw] idle
-    #   An object that represents a duration of time.
+    #   An object that represents an idle timeout. An idle timeout bounds
+    #   the amount of time that a connection may be idle. The default value
+    #   is none.
     #   @return [Types::Duration]
     #
     # @!attribute [rw] per_request
-    #   An object that represents a duration of time.
+    #   An object that represents a per request timeout. The default value
+    #   is 15 seconds. If you set a higher timeout, then make sure that the
+    #   higher value is set for each App Mesh resource in a conversation.
+    #   For example, if a virtual node backend uses a virtual router
+    #   provider to route to another virtual node, then the timeout should
+    #   be greater than 15 seconds for the source and destination virtual
+    #   node and the route.
     #   @return [Types::Duration]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/GrpcTimeout AWS API Documentation
@@ -3130,6 +4739,7 @@ module Aws::AppMesh
     class GrpcTimeout < Struct.new(
       :idle,
       :per_request)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3143,6 +4753,7 @@ module Aws::AppMesh
     #
     class VirtualNodeStatus < Struct.new(
       :status)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3209,6 +4820,7 @@ module Aws::AppMesh
       :resource_owner,
       :version,
       :virtual_router_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3243,6 +4855,7 @@ module Aws::AppMesh
       :spec,
       :status,
       :virtual_service_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3286,6 +4899,7 @@ module Aws::AppMesh
       :invert,
       :match,
       :name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3351,6 +4965,7 @@ module Aws::AppMesh
       :resource_owner,
       :version,
       :virtual_node_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3405,6 +5020,7 @@ module Aws::AppMesh
       :mesh_name,
       :spec,
       :tags)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3431,6 +5047,30 @@ module Aws::AppMesh
     #
     class GrpcRouteAction < Struct.new(
       :weighted_targets)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # An object that represents a Transport Layer Security (TLS) validation
+    # context trust for a local file.
+    #
+    # @note When making an API call, you may pass VirtualGatewayTlsValidationContextFileTrust
+    #   data as a hash:
+    #
+    #       {
+    #         certificate_chain: "FilePath", # required
+    #       }
+    #
+    # @!attribute [rw] certificate_chain
+    #   The certificate trust chain for a certificate stored on the file
+    #   system of the virtual node that the proxy is running on.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/VirtualGatewayTlsValidationContextFileTrust AWS API Documentation
+    #
+    class VirtualGatewayTlsValidationContextFileTrust < Struct.new(
+      :certificate_chain)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3448,6 +5088,7 @@ module Aws::AppMesh
     #
     class LimitExceededException < Struct.new(
       :message)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3460,6 +5101,7 @@ module Aws::AppMesh
     #
     class UpdateMeshOutput < Struct.new(
       :mesh)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3509,6 +5151,7 @@ module Aws::AppMesh
       :range,
       :regex,
       :suffix)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3546,6 +5189,7 @@ module Aws::AppMesh
       :mesh_name,
       :mesh_owner,
       :virtual_service_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3577,6 +5221,7 @@ module Aws::AppMesh
     class AwsCloudMapInstanceAttribute < Struct.new(
       :key,
       :value)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3605,6 +5250,52 @@ module Aws::AppMesh
     #
     class VirtualServiceSpec < Struct.new(
       :provider)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # An object that represents a TLS validation context trust for an AWS
+    # Certicate Manager (ACM) certificate.
+    #
+    # @note When making an API call, you may pass VirtualGatewayTlsValidationContextAcmTrust
+    #   data as a hash:
+    #
+    #       {
+    #         certificate_authority_arns: ["Arn"], # required
+    #       }
+    #
+    # @!attribute [rw] certificate_authority_arns
+    #   One or more ACM Amazon Resource Name (ARN)s.
+    #   @return [Array<String>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/VirtualGatewayTlsValidationContextAcmTrust AWS API Documentation
+    #
+    class VirtualGatewayTlsValidationContextAcmTrust < Struct.new(
+      :certificate_authority_arns)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # The access log configuration for a virtual gateway.
+    #
+    # @note When making an API call, you may pass VirtualGatewayAccessLog
+    #   data as a hash:
+    #
+    #       {
+    #         file: {
+    #           path: "FilePath", # required
+    #         },
+    #       }
+    #
+    # @!attribute [rw] file
+    #   The file object to send virtual gateway access logs to.
+    #   @return [Types::VirtualGatewayFileAccessLog]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/VirtualGatewayAccessLog AWS API Documentation
+    #
+    class VirtualGatewayAccessLog < Struct.new(
+      :file)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3634,6 +5325,7 @@ module Aws::AppMesh
     class MatchRange < Struct.new(
       :end,
       :start)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3664,6 +5356,7 @@ module Aws::AppMesh
     #   @return [Types::TcpRouteAction]
     #
     # @!attribute [rw] timeout
+    #   An object that represents types of timeouts.
     #   @return [Types::TcpTimeout]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/TcpRoute AWS API Documentation
@@ -3671,6 +5364,19 @@ module Aws::AppMesh
     class TcpRoute < Struct.new(
       :action,
       :timeout)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] virtual_gateway
+    #   A full description of the virtual gateway that was updated.
+    #   @return [Types::VirtualGatewayData]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/UpdateVirtualGatewayOutput AWS API Documentation
+    #
+    class UpdateVirtualGatewayOutput < Struct.new(
+      :virtual_gateway)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3724,6 +5430,7 @@ module Aws::AppMesh
       :mesh_name,
       :mesh_owner,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3777,6 +5484,7 @@ module Aws::AppMesh
       :mesh_name,
       :mesh_owner,
       :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3800,6 +5508,7 @@ module Aws::AppMesh
     #
     class AccessLog < Struct.new(
       :file)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3853,6 +5562,42 @@ module Aws::AppMesh
       :mesh_name,
       :mesh_owner,
       :next_token)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # An object that represents a client policy.
+    #
+    # @note When making an API call, you may pass VirtualGatewayClientPolicy
+    #   data as a hash:
+    #
+    #       {
+    #         tls: {
+    #           enforce: false,
+    #           ports: [1],
+    #           validation: { # required
+    #             trust: { # required
+    #               acm: {
+    #                 certificate_authority_arns: ["Arn"], # required
+    #               },
+    #               file: {
+    #                 certificate_chain: "FilePath", # required
+    #               },
+    #             },
+    #           },
+    #         },
+    #       }
+    #
+    # @!attribute [rw] tls
+    #   A reference to an object that represents a Transport Layer Security
+    #   (TLS) client policy.
+    #   @return [Types::VirtualGatewayClientPolicyTls]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/VirtualGatewayClientPolicy AWS API Documentation
+    #
+    class VirtualGatewayClientPolicy < Struct.new(
+      :tls)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3867,6 +5612,55 @@ module Aws::AppMesh
     #
     class TooManyRequestsException < Struct.new(
       :message)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # An object that represents logging information.
+    #
+    # @note When making an API call, you may pass VirtualGatewayLogging
+    #   data as a hash:
+    #
+    #       {
+    #         access_log: {
+    #           file: {
+    #             path: "FilePath", # required
+    #           },
+    #         },
+    #       }
+    #
+    # @!attribute [rw] access_log
+    #   The access log configuration.
+    #   @return [Types::VirtualGatewayAccessLog]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/VirtualGatewayLogging AWS API Documentation
+    #
+    class VirtualGatewayLogging < Struct.new(
+      :access_log)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # An object that represents a gateway route target.
+    #
+    # @note When making an API call, you may pass GatewayRouteTarget
+    #   data as a hash:
+    #
+    #       {
+    #         virtual_service: { # required
+    #           virtual_service_name: "ResourceName", # required
+    #         },
+    #       }
+    #
+    # @!attribute [rw] virtual_service
+    #   An object that represents a virtual service gateway route target.
+    #   @return [Types::GatewayRouteVirtualService]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/GatewayRouteTarget AWS API Documentation
+    #
+    class GatewayRouteTarget < Struct.new(
+      :virtual_service)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3893,6 +5687,7 @@ module Aws::AppMesh
     class Duration < Struct.new(
       :unit,
       :value)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3904,6 +5699,7 @@ module Aws::AppMesh
     #
     class DescribeRouteOutput < Struct.new(
       :route)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3963,6 +5759,7 @@ module Aws::AppMesh
       :method,
       :prefix,
       :scheme)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -3996,6 +5793,7 @@ module Aws::AppMesh
     class TagRef < Struct.new(
       :key,
       :value)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4056,6 +5854,7 @@ module Aws::AppMesh
       :mesh_owner,
       :resource_owner,
       :version)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4085,6 +5884,20 @@ module Aws::AppMesh
       :metadata,
       :spec,
       :status)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] gateway_route
+    #   The full description of your gateway route following the create
+    #   call.
+    #   @return [Types::GatewayRouteData]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/CreateGatewayRouteOutput AWS API Documentation
+    #
+    class CreateGatewayRouteOutput < Struct.new(
+      :gateway_route)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4098,6 +5911,7 @@ module Aws::AppMesh
     #
     class VirtualRouterStatus < Struct.new(
       :status)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4124,6 +5938,45 @@ module Aws::AppMesh
     #
     class TcpRouteAction < Struct.new(
       :weighted_targets)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @note When making an API call, you may pass DeleteVirtualGatewayInput
+    #   data as a hash:
+    #
+    #       {
+    #         mesh_name: "ResourceName", # required
+    #         mesh_owner: "AccountId",
+    #         virtual_gateway_name: "ResourceName", # required
+    #       }
+    #
+    # @!attribute [rw] mesh_name
+    #   The name of the service mesh to delete the virtual gateway from.
+    #   @return [String]
+    #
+    # @!attribute [rw] mesh_owner
+    #   The AWS IAM account ID of the service mesh owner. If the account ID
+    #   is not your own, then it's the ID of the account that shared the
+    #   mesh with your account. For more information about mesh sharing, see
+    #   [Working with shared meshes][1].
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/app-mesh/latest/userguide/sharing.html
+    #   @return [String]
+    #
+    # @!attribute [rw] virtual_gateway_name
+    #   The name of the virtual gateway to delete.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/DeleteVirtualGatewayInput AWS API Documentation
+    #
+    class DeleteVirtualGatewayInput < Struct.new(
+      :mesh_name,
+      :mesh_owner,
+      :virtual_gateway_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4161,6 +6014,7 @@ module Aws::AppMesh
       :mesh_name,
       :mesh_owner,
       :virtual_node_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4174,6 +6028,7 @@ module Aws::AppMesh
     #
     class RouteStatus < Struct.new(
       :status)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4257,6 +6112,7 @@ module Aws::AppMesh
     #   @return [Types::PortMapping]
     #
     # @!attribute [rw] timeout
+    #   An object that represents timeouts for different protocols.
     #   @return [Types::ListenerTimeout]
     #
     # @!attribute [rw] tls
@@ -4271,6 +6127,7 @@ module Aws::AppMesh
       :port_mapping,
       :timeout,
       :tls)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4345,6 +6202,7 @@ module Aws::AppMesh
     #   @return [Types::GrpcRetryPolicy]
     #
     # @!attribute [rw] timeout
+    #   An object that represents types of timeouts.
     #   @return [Types::GrpcTimeout]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/GrpcRoute AWS API Documentation
@@ -4354,6 +6212,7 @@ module Aws::AppMesh
       :match,
       :retry_policy,
       :timeout)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4391,12 +6250,47 @@ module Aws::AppMesh
     #   A reference to an object that represents a TLS validation context.
     #   @return [Types::TlsValidationContext]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/ClientPolicyTls AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/ClientPolicyTls AWS API Documentation
+    #
+    class ClientPolicyTls < Struct.new(
+      :enforce,
+      :ports,
+      :validation)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # An object that represents a Transport Layer Security (TLS) validation
+    # context trust.
+    #
+    # @note When making an API call, you may pass VirtualGatewayTlsValidationContextTrust
+    #   data as a hash:
+    #
+    #       {
+    #         acm: {
+    #           certificate_authority_arns: ["Arn"], # required
+    #         },
+    #         file: {
+    #           certificate_chain: "FilePath", # required
+    #         },
+    #       }
+    #
+    # @!attribute [rw] acm
+    #   A reference to an object that represents a TLS validation context
+    #   trust for an AWS Certicate Manager (ACM) certificate.
+    #   @return [Types::VirtualGatewayTlsValidationContextAcmTrust]
+    #
+    # @!attribute [rw] file
+    #   An object that represents a TLS validation context trust for a local
+    #   file.
+    #   @return [Types::VirtualGatewayTlsValidationContextFileTrust]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/VirtualGatewayTlsValidationContextTrust AWS API Documentation
     #
-    class ClientPolicyTls < Struct.new(
-      :enforce,
-      :ports,
-      :validation)
+    class VirtualGatewayTlsValidationContextTrust < Struct.new(
+      :acm,
+      :file)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4408,6 +6302,7 @@ module Aws::AppMesh
     #
     class DeleteVirtualServiceOutput < Struct.new(
       :virtual_service)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4428,6 +6323,44 @@ module Aws::AppMesh
     #
     class VirtualNodeServiceProvider < Struct.new(
       :virtual_node_name)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # An object that represents an HTTP gateway route.
+    #
+    # @note When making an API call, you may pass HttpGatewayRoute
+    #   data as a hash:
+    #
+    #       {
+    #         action: { # required
+    #           target: { # required
+    #             virtual_service: { # required
+    #               virtual_service_name: "ResourceName", # required
+    #             },
+    #           },
+    #         },
+    #         match: { # required
+    #           prefix: "String", # required
+    #         },
+    #       }
+    #
+    # @!attribute [rw] action
+    #   An object that represents the action to take if a match is
+    #   determined.
+    #   @return [Types::HttpGatewayRouteAction]
+    #
+    # @!attribute [rw] match
+    #   An object that represents the criteria for determining a request
+    #   match.
+    #   @return [Types::HttpGatewayRouteMatch]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/HttpGatewayRoute AWS API Documentation
+    #
+    class HttpGatewayRoute < Struct.new(
+      :action,
+      :match)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4463,6 +6396,7 @@ module Aws::AppMesh
     #
     class BackendDefaults < Struct.new(
       :client_policy)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4497,6 +6431,7 @@ module Aws::AppMesh
     class ListenerTlsFileCertificate < Struct.new(
       :certificate_chain,
       :private_key)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4549,6 +6484,7 @@ module Aws::AppMesh
       :max_retries,
       :per_retry_timeout,
       :tcp_retry_events)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4586,6 +6522,7 @@ module Aws::AppMesh
       :mesh_name,
       :mesh_owner,
       :virtual_router_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4605,6 +6542,161 @@ module Aws::AppMesh
     #
     class TooManyTagsException < Struct.new(
       :message)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @note When making an API call, you may pass UpdateGatewayRouteInput
+    #   data as a hash:
+    #
+    #       {
+    #         client_token: "String",
+    #         gateway_route_name: "ResourceName", # required
+    #         mesh_name: "ResourceName", # required
+    #         mesh_owner: "AccountId",
+    #         spec: { # required
+    #           grpc_route: {
+    #             action: { # required
+    #               target: { # required
+    #                 virtual_service: { # required
+    #                   virtual_service_name: "ResourceName", # required
+    #                 },
+    #               },
+    #             },
+    #             match: { # required
+    #               service_name: "ServiceName",
+    #             },
+    #           },
+    #           http2_route: {
+    #             action: { # required
+    #               target: { # required
+    #                 virtual_service: { # required
+    #                   virtual_service_name: "ResourceName", # required
+    #                 },
+    #               },
+    #             },
+    #             match: { # required
+    #               prefix: "String", # required
+    #             },
+    #           },
+    #           http_route: {
+    #             action: { # required
+    #               target: { # required
+    #                 virtual_service: { # required
+    #                   virtual_service_name: "ResourceName", # required
+    #                 },
+    #               },
+    #             },
+    #             match: { # required
+    #               prefix: "String", # required
+    #             },
+    #           },
+    #         },
+    #         virtual_gateway_name: "ResourceName", # required
+    #       }
+    #
+    # @!attribute [rw] client_token
+    #   Unique, case-sensitive identifier that you provide to ensure the
+    #   idempotency of the request. Up to 36 letters, numbers, hyphens, and
+    #   underscores are allowed.
+    #
+    #   **A suitable default value is auto-generated.** You should normally
+    #   not need to pass this option.
+    #   @return [String]
+    #
+    # @!attribute [rw] gateway_route_name
+    #   The name of the gateway route to update.
+    #   @return [String]
+    #
+    # @!attribute [rw] mesh_name
+    #   The name of the service mesh that the gateway route resides in.
+    #   @return [String]
+    #
+    # @!attribute [rw] mesh_owner
+    #   The AWS IAM account ID of the service mesh owner. If the account ID
+    #   is not your own, then it's the ID of the account that shared the
+    #   mesh with your account. For more information about mesh sharing, see
+    #   [Working with shared meshes][1].
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/app-mesh/latest/userguide/sharing.html
+    #   @return [String]
+    #
+    # @!attribute [rw] spec
+    #   The new gateway route specification to apply. This overwrites the
+    #   existing data.
+    #   @return [Types::GatewayRouteSpec]
+    #
+    # @!attribute [rw] virtual_gateway_name
+    #   The name of the virtual gateway that the gateway route is associated
+    #   with.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/UpdateGatewayRouteInput AWS API Documentation
+    #
+    class UpdateGatewayRouteInput < Struct.new(
+      :client_token,
+      :gateway_route_name,
+      :mesh_name,
+      :mesh_owner,
+      :spec,
+      :virtual_gateway_name)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @note When making an API call, you may pass ListVirtualGatewaysInput
+    #   data as a hash:
+    #
+    #       {
+    #         limit: 1,
+    #         mesh_name: "ResourceName", # required
+    #         mesh_owner: "AccountId",
+    #         next_token: "String",
+    #       }
+    #
+    # @!attribute [rw] limit
+    #   The maximum number of results returned by `ListVirtualGateways` in
+    #   paginated output. When you use this parameter, `ListVirtualGateways`
+    #   returns only `limit` results in a single page along with a
+    #   `nextToken` response element. You can see the remaining results of
+    #   the initial request by sending another `ListVirtualGateways` request
+    #   with the returned `nextToken` value. This value can be between 1 and
+    #   100. If you don't use this parameter, `ListVirtualGateways` returns
+    #   up to 100 results and a `nextToken` value if applicable.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] mesh_name
+    #   The name of the service mesh to list virtual gateways in.
+    #   @return [String]
+    #
+    # @!attribute [rw] mesh_owner
+    #   The AWS IAM account ID of the service mesh owner. If the account ID
+    #   is not your own, then it's the ID of the account that shared the
+    #   mesh with your account. For more information about mesh sharing, see
+    #   [Working with shared meshes][1].
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/app-mesh/latest/userguide/sharing.html
+    #   @return [String]
+    #
+    # @!attribute [rw] next_token
+    #   The `nextToken` value returned from a previous paginated
+    #   `ListVirtualGateways` request where `limit` was used and the results
+    #   exceeded the value of that parameter. Pagination continues from the
+    #   end of the previous results that returned the `nextToken` value.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/ListVirtualGatewaysInput AWS API Documentation
+    #
+    class ListVirtualGatewaysInput < Struct.new(
+      :limit,
+      :mesh_name,
+      :mesh_owner,
+      :next_token)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4627,6 +6719,7 @@ module Aws::AppMesh
     #
     class TlsValidationContextFileTrust < Struct.new(
       :certificate_chain)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4669,6 +6762,7 @@ module Aws::AppMesh
       :invert,
       :match,
       :name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -4915,9 +7009,12 @@ module Aws::AppMesh
       :spec,
       :tags,
       :virtual_router_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
+    # An object that represents types of timeouts.
+    #
     # @note When making an API call, you may pass TcpTimeout
     #   data as a hash:
     #
@@ -4936,6 +7033,51 @@ module Aws::AppMesh
     #
     class TcpTimeout < Struct.new(
       :idle)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @note When making an API call, you may pass DeleteGatewayRouteInput
+    #   data as a hash:
+    #
+    #       {
+    #         gateway_route_name: "ResourceName", # required
+    #         mesh_name: "ResourceName", # required
+    #         mesh_owner: "AccountId",
+    #         virtual_gateway_name: "ResourceName", # required
+    #       }
+    #
+    # @!attribute [rw] gateway_route_name
+    #   The name of the gateway route to delete.
+    #   @return [String]
+    #
+    # @!attribute [rw] mesh_name
+    #   The name of the service mesh to delete the gateway route from.
+    #   @return [String]
+    #
+    # @!attribute [rw] mesh_owner
+    #   The AWS IAM account ID of the service mesh owner. If the account ID
+    #   is not your own, then it's the ID of the account that shared the
+    #   mesh with your account. For more information about mesh sharing, see
+    #   [Working with shared meshes][1].
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/app-mesh/latest/userguide/sharing.html
+    #   @return [String]
+    #
+    # @!attribute [rw] virtual_gateway_name
+    #   The name of the virtual gateway to delete the route from.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/DeleteGatewayRouteInput AWS API Documentation
+    #
+    class DeleteGatewayRouteInput < Struct.new(
+      :gateway_route_name,
+      :mesh_name,
+      :mesh_owner,
+      :virtual_gateway_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -5165,6 +7307,7 @@ module Aws::AppMesh
       :route_name,
       :spec,
       :virtual_router_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -5239,6 +7382,7 @@ module Aws::AppMesh
     #   @return [Types::HttpRetryPolicy]
     #
     # @!attribute [rw] timeout
+    #   An object that represents types of timeouts.
     #   @return [Types::HttpTimeout]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/HttpRoute AWS API Documentation
@@ -5248,6 +7392,7 @@ module Aws::AppMesh
       :match,
       :retry_policy,
       :timeout)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -5279,6 +7424,74 @@ module Aws::AppMesh
     class DescribeMeshInput < Struct.new(
       :mesh_name,
       :mesh_owner)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # An object that represents a virtual gateway returned by a list
+    # operation.
+    #
+    # @!attribute [rw] arn
+    #   The full Amazon Resource Name (ARN) for the resource.
+    #   @return [String]
+    #
+    # @!attribute [rw] created_at
+    #   The Unix epoch timestamp in seconds for when the resource was
+    #   created.
+    #   @return [Time]
+    #
+    # @!attribute [rw] last_updated_at
+    #   The Unix epoch timestamp in seconds for when the resource was last
+    #   updated.
+    #   @return [Time]
+    #
+    # @!attribute [rw] mesh_name
+    #   The name of the service mesh that the resource resides in.
+    #   @return [String]
+    #
+    # @!attribute [rw] mesh_owner
+    #   The AWS IAM account ID of the service mesh owner. If the account ID
+    #   is not your own, then it's the ID of the account that shared the
+    #   mesh with your account. For more information about mesh sharing, see
+    #   [Working with shared meshes][1].
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/app-mesh/latest/userguide/sharing.html
+    #   @return [String]
+    #
+    # @!attribute [rw] resource_owner
+    #   The AWS IAM account ID of the resource owner. If the account ID is
+    #   not your own, then it's the ID of the mesh owner or of another
+    #   account that the mesh is shared with. For more information about
+    #   mesh sharing, see [Working with shared meshes][1].
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/app-mesh/latest/userguide/sharing.html
+    #   @return [String]
+    #
+    # @!attribute [rw] version
+    #   The version of the resource. Resources are created at version 1, and
+    #   this version is incremented each time that they're updated.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] virtual_gateway_name
+    #   The name of the resource.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/VirtualGatewayRef AWS API Documentation
+    #
+    class VirtualGatewayRef < Struct.new(
+      :arn,
+      :created_at,
+      :last_updated_at,
+      :mesh_name,
+      :mesh_owner,
+      :resource_owner,
+      :version,
+      :virtual_gateway_name)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -5301,6 +7514,31 @@ module Aws::AppMesh
     #
     class MeshSpec < Struct.new(
       :egress_filter)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] virtual_gateway
+    #   The full description of your virtual gateway.
+    #   @return [Types::VirtualGatewayData]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/DescribeVirtualGatewayOutput AWS API Documentation
+    #
+    class DescribeVirtualGatewayOutput < Struct.new(
+      :virtual_gateway)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] gateway_route
+    #   The full description of your gateway route.
+    #   @return [Types::GatewayRouteData]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/appmesh-2019-01-25/DescribeGatewayRouteOutput AWS API Documentation
+    #
+    class DescribeGatewayRouteOutput < Struct.new(
+      :gateway_route)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -5321,6 +7559,7 @@ module Aws::AppMesh
     class ListTagsForResourceOutput < Struct.new(
       :next_token,
       :tags)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -5359,6 +7598,7 @@ module Aws::AppMesh
     class ServiceDiscovery < Struct.new(
       :aws_cloud_map,
       :dns)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -5379,6 +7619,7 @@ module Aws::AppMesh
     class ListVirtualNodesOutput < Struct.new(
       :next_token,
       :virtual_nodes)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -5403,6 +7644,7 @@ module Aws::AppMesh
     class UntagResourceInput < Struct.new(
       :resource_arn,
       :tag_keys)
+      SENSITIVE = []
       include Aws::Structure
     end
 
@@ -5430,6 +7672,7 @@ module Aws::AppMesh
     #
     class ListenerTlsAcmCertificate < Struct.new(
       :certificate_arn)
+      SENSITIVE = []
       include Aws::Structure
     end