aws-sdk-ec2 1.206.0 → 1.211.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: a4d23597e7cc0b278ec9aa8144ece74dda08269049f8b1afdfbfdf350db1e6de
-  data.tar.gz: 99658a12bf6e214b9c76db9604f534aac72d8ea9cc8a9b48ee9b77a6a2909af4
+  metadata.gz: 345b6cd4201d5f051fb4b111c2cc9a5f550e67f8294695a0a03ef2afabed5370
+  data.tar.gz: 290ecca4cf105014634641f2e8b79109019d335fb599e4d0590404d25f116d6a
 SHA512:
-  metadata.gz: b0c7bd41d8472816f18d275605b2a918606550e6ce2ee1f34131607d66f173c55fb3099832b76bd71dbcde35820af93cbb597aa3efb5a9b131778c2013288192
-  data.tar.gz: 41f480046d6ed342c109ca4ecf805cf75d575e60fe83109ec2ad4bd378622814c7f86648a36ea480f4ccf06fb019a3a96040be35d6f9fb101583ceba146fdf1d
+  metadata.gz: a4f071726e751a1c14329ed91a91633adf969c8ddcba42c35f3781eb4b285b9663975acd06aa00ac6a5c38f8984f035e3b39abbb8a1d924b5b152bb9b79f9977
+  data.tar.gz: 943637f87af460c3dc829a3b0be0554c34b5a3635da61ba5ba39f948e8032742493968db2fd8e50b667aa3a4664297e0613b0bde32298218aef86a9194079364

data/lib/aws-sdk-ec2.rb

@@ -72,6 +72,6 @@ require_relative 'aws-sdk-ec2/customizations'
 # @!group service
 module Aws::EC2
 
-  GEM_VERSION = '1.206.0'
+  GEM_VERSION = '1.211.0'
 
 end

data/lib/aws-sdk-ec2/client.rb

@@ -777,7 +777,7 @@ module Aws::EC2
     #   resp = client.allocate_address({
     #     domain: "vpc", # accepts vpc, standard
     #     address: "PublicIpAddress",
-    #     public_ipv_4_pool: "String",
+    #     public_ipv_4_pool: "Ipv4PoolEc2Id",
     #     network_border_group: "String",
     #     customer_owned_ipv_4_pool: "String",
     #     dry_run: false,
@@ -1406,22 +1406,21 @@ module Aws::EC2
     # AWS Certificate Manager (ACM) certificate. This enables the
     # certificate to be used by the ACM for Nitro Enclaves application
     # inside an enclave. For more information, see [AWS Certificate Manager
-    # for Nitro Enclaves][1] in the *Amazon Elastic Compute Cloud User
-    # Guide*.
+    # for Nitro Enclaves][1] in the *AWS Nitro Enclaves User Guide*.
     #
     # When the IAM role is associated with the ACM certificate, places the
     # certificate, certificate chain, and encrypted private key in an Amazon
     # S3 bucket that only the associated IAM role can access. The private
-    # key of the certificate is encrypted with an AWS-managed KMS key that
-    # has an attached attestation-based key policy.
+    # key of the certificate is encrypted with an AWS-managed KMS customer
+    # master (CMK) that has an attached attestation-based CMK policy.
     #
     # To enable the IAM role to access the Amazon S3 object, you must grant
     # it permission to call `s3:GetObject` on the Amazon S3 bucket returned
-    # by the command. To enable the IAM role to access the AWS KMS key, you
-    # must grant it permission to call `kms:Decrypt` on AWS KMS key returned
+    # by the command. To enable the IAM role to access the AWS KMS CMK, you
+    # must grant it permission to call `kms:Decrypt` on AWS KMS CMK returned
     # by the command. For more information, see [ Grant the role permission
-    # to access the certificate and encryption key][2] in the *Amazon
-    # Elastic Compute Cloud User Guide*.
+    # to access the certificate and encryption key][2] in the *AWS Nitro
+    # Enclaves User Guide*.
     #
     #
     #
@@ -3303,31 +3302,28 @@ module Aws::EC2
     #   [1]: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSEncryption.html
     #
     # @option params [String] :kms_key_id
-    #   An identifier for the symmetric AWS Key Management Service (AWS KMS)
-    #   customer master key (CMK) to use when creating the encrypted volume.
-    #   This parameter is only required if you want to use a non-default CMK;
-    #   if this parameter is not specified, the default CMK for EBS is used.
-    #   If a `KmsKeyId` is specified, the `Encrypted` flag must also be set.
+    #   The identifier of the symmetric AWS Key Management Service (AWS KMS)
+    #   customer master key (CMK) to use when creating encrypted volumes. If
+    #   this parameter is not specified, your AWS managed CMK for EBS is used.
+    #   If you specify a CMK, you must also set the encrypted state to `true`.
     #
-    #   To specify a CMK, use its key ID, Amazon Resource Name (ARN), alias
-    #   name, or alias ARN. When using an alias name, prefix it with
-    #   "alias/". For example:
+    #   You can specify a CMK using any of the following:
     #
-    #   * Key ID: `1234abcd-12ab-34cd-56ef-1234567890ab`
+    #   * Key ID. For example, 1234abcd-12ab-34cd-56ef-1234567890ab.
     #
-    #   * Key ARN:
-    #     `arn:aws:kms:us-east-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab`
+    #   * Key alias. For example, alias/ExampleAlias.
     #
-    #   * Alias name: `alias/ExampleAlias`
+    #   * Key ARN. For example,
+    #     arn:aws:kms:us-east-1:012345678910:key/1234abcd-12ab-34cd-56ef-1234567890ab.
     #
-    #   * Alias ARN: `arn:aws:kms:us-east-2:111122223333:alias/ExampleAlias`
+    #   * Alias ARN. For example,
+    #     arn:aws:kms:us-east-1:012345678910:alias/ExampleAlias.
     #
-    #   AWS parses `KmsKeyId` asynchronously, meaning that the action you call
-    #   may appear to complete even though you provided an invalid identifier.
-    #   This action will eventually report failure.
+    #   AWS authenticates the CMK asynchronously. Therefore, if you specify an
+    #   identifier that is not valid, the action can appear to complete, but
+    #   eventually fails.
     #
-    #   The specified CMK must exist in the Region that the snapshot is being
-    #   copied to.
+    #   The specified CMK must exist in the destination Region.
     #
     #   Amazon EBS does not support asymmetric CMKs.
     #
@@ -3452,15 +3448,15 @@ module Aws::EC2
     #
     #   You can specify the CMK using any of the following:
     #
-    #   * Key ID. For example, key/1234abcd-12ab-34cd-56ef-1234567890ab.
+    #   * Key ID. For example, 1234abcd-12ab-34cd-56ef-1234567890ab.
     #
     #   * Key alias. For example, alias/ExampleAlias.
     #
     #   * Key ARN. For example,
-    #     arn:aws:kms:*us-east-1*\:*012345678910*\:key/*abcd1234-a123-456a-a12b-a123b4cd56ef*.
+    #     arn:aws:kms:us-east-1:012345678910:key/1234abcd-12ab-34cd-56ef-1234567890ab.
     #
     #   * Alias ARN. For example,
-    #     arn:aws:kms:*us-east-1*\:*012345678910*\:alias/*ExampleAlias*.
+    #     arn:aws:kms:us-east-1:012345678910:alias/ExampleAlias.
     #
     #   AWS authenticates the CMK asynchronously. Therefore, if you specify an
     #   ID, alias, or ARN that is not valid, the action can appear to
@@ -5270,13 +5266,13 @@ module Aws::EC2
     #   A description for the conversion task or the resource being exported.
     #   The maximum length is 255 characters.
     #
-    # @option params [Types::ExportToS3TaskSpecification] :export_to_s3_task
+    # @option params [required, Types::ExportToS3TaskSpecification] :export_to_s3_task
     #   The format and location for an instance export task.
     #
     # @option params [required, String] :instance_id
     #   The ID of the instance.
     #
-    # @option params [String] :target_environment
+    # @option params [required, String] :target_environment
     #   The target virtualization environment.
     #
     # @option params [Array<Types::TagSpecification>] :tag_specifications
@@ -5290,14 +5286,14 @@ module Aws::EC2
     #
     #   resp = client.create_instance_export_task({
     #     description: "String",
-    #     export_to_s3_task: {
+    #     export_to_s3_task: { # required
     #       container_format: "ova", # accepts ova
     #       disk_image_format: "VMDK", # accepts VMDK, RAW, VHD
     #       s3_bucket: "String",
     #       s3_prefix: "String",
     #     },
     #     instance_id: "InstanceId", # required
-    #     target_environment: "citrix", # accepts citrix, vmware, microsoft
+    #     target_environment: "citrix", # required, accepts citrix, vmware, microsoft
     #     tag_specifications: [
     #       {
     #         resource_type: "client-vpn-endpoint", # accepts client-vpn-endpoint, customer-gateway, dedicated-host, dhcp-options, egress-only-internet-gateway, elastic-ip, elastic-gpu, export-image-task, export-instance-task, fleet, fpga-image, host-reservation, image, import-image-task, import-snapshot-task, instance, internet-gateway, key-pair, launch-template, local-gateway-route-table-vpc-association, natgateway, network-acl, network-interface, placement-group, reserved-instances, route-table, security-group, snapshot, spot-fleet-request, spot-instances-request, subnet, traffic-mirror-filter, traffic-mirror-session, traffic-mirror-target, transit-gateway, transit-gateway-attachment, transit-gateway-multicast-domain, transit-gateway-route-table, volume, vpc, vpc-peering-connection, vpn-connection, vpn-gateway, vpc-flow-log
@@ -7243,6 +7239,10 @@ module Aws::EC2
     #   If you have the required permissions, the error response is
     #   `DryRunOperation`. Otherwise, it is `UnauthorizedOperation`.
     #
+    # @option params [String] :vpc_endpoint_id
+    #   The ID of a VPC endpoint. Supported for Gateway Load Balancer
+    #   endpoints only.
+    #
     # @option params [String] :egress_only_internet_gateway_id
     #   \[IPv6 traffic only\] The ID of an egress-only internet gateway.
     #
@@ -7302,6 +7302,7 @@ module Aws::EC2
     #     destination_ipv_6_cidr_block: "String",
     #     destination_prefix_list_id: "PrefixListResourceId",
     #     dry_run: false,
+    #     vpc_endpoint_id: "VpcEndpointId",
     #     egress_only_internet_gateway_id: "EgressOnlyInternetGatewayId",
     #     gateway_id: "RouteGatewayId",
     #     instance_id: "InstanceId",
@@ -9135,15 +9136,15 @@ module Aws::EC2
     #
     #   You can specify the CMK using any of the following:
     #
-    #   * Key ID. For example, key/1234abcd-12ab-34cd-56ef-1234567890ab.
+    #   * Key ID. For example, 1234abcd-12ab-34cd-56ef-1234567890ab.
     #
     #   * Key alias. For example, alias/ExampleAlias.
     #
     #   * Key ARN. For example,
-    #     arn:aws:kms:*us-east-1*\:*012345678910*\:key/*abcd1234-a123-456a-a12b-a123b4cd56ef*.
+    #     arn:aws:kms:us-east-1:012345678910:key/1234abcd-12ab-34cd-56ef-1234567890ab.
     #
     #   * Alias ARN. For example,
-    #     arn:aws:kms:*us-east-1*\:*012345678910*\:alias/*ExampleAlias*.
+    #     arn:aws:kms:us-east-1:012345678910:alias/ExampleAlias.
     #
     #   AWS authenticates the CMK asynchronously. Therefore, if you specify an
     #   ID, alias, or ARN that is not valid, the action can appear to
@@ -9503,6 +9504,10 @@ module Aws::EC2
     # You can specify the subnets in which to create an endpoint, and the
     # security groups to associate with the endpoint network interface.
     #
+    # A `GatewayLoadBalancer` endpoint is a network interface in your subnet
+    # that serves an endpoint for communicating with a Gateway Load Balancer
+    # that you've configured as a VPC endpoint service.
+    #
     # Use DescribeVpcEndpointServices to get a list of supported services.
     #
     #
@@ -9529,17 +9534,18 @@ module Aws::EC2
     #   provider.
     #
     # @option params [String] :policy_document
-    #   A policy to attach to the endpoint that controls access to the
-    #   service. The policy must be in valid JSON format. If this parameter is
-    #   not specified, we attach a default policy that allows full access to
-    #   the service.
+    #   (Interface and gateway endpoints) A policy to attach to the endpoint
+    #   that controls access to the service. The policy must be in valid JSON
+    #   format. If this parameter is not specified, we attach a default policy
+    #   that allows full access to the service.
     #
     # @option params [Array<String>] :route_table_ids
     #   (Gateway endpoint) One or more route table IDs.
     #
     # @option params [Array<String>] :subnet_ids
-    #   (Interface endpoint) The ID of one or more subnets in which to create
-    #   an endpoint network interface.
+    #   (Interface and Gateway Load Balancer endpoints) The ID of one or more
+    #   subnets in which to create an endpoint network interface. For a
+    #   Gateway Load Balancer endpoint, you can specify one subnet only.
     #
     # @option params [Array<String>] :security_group_ids
     #   (Interface endpoint) The ID of one or more security groups to
@@ -9582,7 +9588,7 @@ module Aws::EC2
     #
     #   resp = client.create_vpc_endpoint({
     #     dry_run: false,
-    #     vpc_endpoint_type: "Interface", # accepts Interface, Gateway
+    #     vpc_endpoint_type: "Interface", # accepts Interface, Gateway, GatewayLoadBalancer
     #     vpc_id: "VpcId", # required
     #     service_name: "String", # required
     #     policy_document: "String",
@@ -9607,7 +9613,7 @@ module Aws::EC2
     # @example Response structure
     #
     #   resp.vpc_endpoint.vpc_endpoint_id #=> String
-    #   resp.vpc_endpoint.vpc_endpoint_type #=> String, one of "Interface", "Gateway"
+    #   resp.vpc_endpoint.vpc_endpoint_type #=> String, one of "Interface", "Gateway", "GatewayLoadBalancer"
     #   resp.vpc_endpoint.vpc_id #=> String
     #   resp.vpc_endpoint.service_name #=> String
     #   resp.vpc_endpoint.state #=> String, one of "PendingAcceptance", "Pending", "Available", "Deleting", "Deleted", "Rejected", "Failed", "Expired"
@@ -9723,23 +9729,30 @@ module Aws::EC2
 
     # Creates a VPC endpoint service configuration to which service
     # consumers (AWS accounts, IAM users, and IAM roles) can connect.
-    # Service consumers can create an interface VPC endpoint to connect to
-    # your service.
     #
-    # To create an endpoint service configuration, you must first create a
-    # Network Load Balancer for your service. For more information, see [VPC
-    # Endpoint Services][1] in the *Amazon Virtual Private Cloud User
-    # Guide*.
+    # To create an endpoint service configuration, you must first create one
+    # of the following for your service:
+    #
+    # * A [Network Load Balancer][1]. Service consumers connect to your
+    #   service using an interface endpoint.
+    #
+    # * A [Gateway Load Balancer][2]. Service consumers connect to your
+    #   service using a Gateway Load Balancer endpoint.
+    #
+    # For more information, see [VPC Endpoint Services][3] in the *Amazon
+    # Virtual Private Cloud User Guide*.
     #
     # If you set the private DNS name, you must prove that you own the
     # private DNS domain name. For more information, see [VPC Endpoint
-    # Service Private DNS Name Verification][2] in the *Amazon Virtual
+    # Service Private DNS Name Verification][4] in the *Amazon Virtual
     # Private Cloud User Guide*.
     #
     #
     #
-    # [1]: https://docs.aws.amazon.com/vpc/latest/userguide/endpoint-service.html
-    # [2]: https://docs.aws.amazon.com/vpc/latest/userguide/endpoint-services-dns-validation.html
+    # [1]: https://docs.aws.amazon.com/elasticloadbalancing/latest/network/introduction.html
+    # [2]: https://docs.aws.amazon.com/elasticloadbalancing/latest/gateway/introduction.html
+    # [3]: https://docs.aws.amazon.com/vpc/latest/userguide/endpoint-service.html
+    # [4]: https://docs.aws.amazon.com/vpc/latest/userguide/endpoint-services-dns-validation.html
     #
     # @option params [Boolean] :dry_run
     #   Checks whether you have the required permissions for the action,
@@ -9753,12 +9766,17 @@ module Aws::EC2
     #   AcceptVpcEndpointConnections.
     #
     # @option params [String] :private_dns_name
-    #   The private DNS name to assign to the VPC endpoint service.
+    #   (Interface endpoint configuration) The private DNS name to assign to
+    #   the VPC endpoint service.
     #
-    # @option params [required, Array<String>] :network_load_balancer_arns
+    # @option params [Array<String>] :network_load_balancer_arns
     #   The Amazon Resource Names (ARNs) of one or more Network Load Balancers
     #   for your service.
     #
+    # @option params [Array<String>] :gateway_load_balancer_arns
+    #   The Amazon Resource Names (ARNs) of one or more Gateway Load
+    #   Balancers.
+    #
     # @option params [String] :client_token
     #   Unique, case-sensitive identifier that you provide to ensure the
     #   idempotency of the request. For more information, see [How to Ensure
@@ -9782,7 +9800,8 @@ module Aws::EC2
     #     dry_run: false,
     #     acceptance_required: false,
     #     private_dns_name: "String",
-    #     network_load_balancer_arns: ["String"], # required
+    #     network_load_balancer_arns: ["String"],
+    #     gateway_load_balancer_arns: ["String"],
     #     client_token: "String",
     #     tag_specifications: [
     #       {
@@ -9800,7 +9819,7 @@ module Aws::EC2
     # @example Response structure
     #
     #   resp.service_configuration.service_type #=> Array
-    #   resp.service_configuration.service_type[0].service_type #=> String, one of "Interface", "Gateway"
+    #   resp.service_configuration.service_type[0].service_type #=> String, one of "Interface", "Gateway", "GatewayLoadBalancer"
     #   resp.service_configuration.service_id #=> String
     #   resp.service_configuration.service_name #=> String
     #   resp.service_configuration.service_state #=> String, one of "Pending", "Available", "Deleting", "Deleted", "Failed"
@@ -9810,6 +9829,8 @@ module Aws::EC2
     #   resp.service_configuration.manages_vpc_endpoints #=> Boolean
     #   resp.service_configuration.network_load_balancer_arns #=> Array
     #   resp.service_configuration.network_load_balancer_arns[0] #=> String
+    #   resp.service_configuration.gateway_load_balancer_arns #=> Array
+    #   resp.service_configuration.gateway_load_balancer_arns[0] #=> String
     #   resp.service_configuration.base_endpoint_dns_names #=> Array
     #   resp.service_configuration.base_endpoint_dns_names[0] #=> String
     #   resp.service_configuration.private_dns_name #=> String
@@ -10522,12 +10543,34 @@ module Aws::EC2
 
     # Deletes the specified EC2 Fleet.
     #
-    # After you delete an EC2 Fleet, it launches no new instances. You must
-    # specify whether an EC2 Fleet should also terminate its instances. If
-    # you terminate the instances, the EC2 Fleet enters the
-    # `deleted_terminating` state. Otherwise, the EC2 Fleet enters the
-    # `deleted_running` state, and the instances continue to run until they
-    # are interrupted or you terminate them manually.
+    # After you delete an EC2 Fleet, it launches no new instances.
+    #
+    # You must specify whether a deleted EC2 Fleet should also terminate its
+    # instances. If you choose to terminate the instances, the EC2 Fleet
+    # enters the `deleted_terminating` state. Otherwise, the EC2 Fleet
+    # enters the `deleted_running` state, and the instances continue to run
+    # until they are interrupted or you terminate them manually.
+    #
+    # For `instant` fleets, EC2 Fleet must terminate the instances when the
+    # fleet is deleted. A deleted `instant` fleet with running instances is
+    # not supported.
+    #
+    # **Restrictions**
+    #
+    # * You can delete up to 25 `instant` fleets in a single request. If you
+    #   exceed this number, no `instant` fleets are deleted and an error is
+    #   returned. There is no restriction on the number of fleets of type
+    #   `maintain` or `request` that can be deleted in a single request.
+    #
+    # * Up to 1000 instances can be terminated in a single request to delete
+    #   `instant` fleets.
+    #
+    # For more information, see [Deleting an EC2 Fleet][1] in the *Amazon
+    # Elastic Compute Cloud User Guide*.
+    #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/manage-ec2-fleet.html#delete-fleet
     #
     # @option params [Boolean] :dry_run
     #   Checks whether you have the required permissions for the action,
@@ -10539,8 +10582,15 @@ module Aws::EC2
     #   The IDs of the EC2 Fleets.
     #
     # @option params [required, Boolean] :terminate_instances
-    #   Indicates whether to terminate instances for an EC2 Fleet if it is
-    #   deleted successfully.
+    #   Indicates whether to terminate the instances when the EC2 Fleet is
+    #   deleted. The default is to terminate the instances.
+    #
+    #   To let the instances continue to run after the EC2 Fleet is deleted,
+    #   specify `NoTerminateInstances`. Supported only for fleets of type
+    #   `maintain` and `request`.
+    #
+    #   For `instant` fleets, you cannot specify `NoTerminateInstances`. A
+    #   deleted `instant` fleet with running instances is not supported.
     #
     # @return [Types::DeleteFleetsResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
@@ -12344,8 +12394,10 @@ module Aws::EC2
 
     # Deletes one or more specified VPC endpoints. Deleting a gateway
     # endpoint also deletes the endpoint routes in the route tables that
-    # were associated with the endpoint. Deleting an interface endpoint
-    # deletes the endpoint network interfaces.
+    # were associated with the endpoint. Deleting an interface endpoint or a
+    # Gateway Load Balancer endpoint deletes the endpoint network
+    # interfaces. Gateway Load Balancer endpoints can only be deleted if the
+    # routes that are associated with the endpoint are deleted.
     #
     # @option params [Boolean] :dry_run
     #   Checks whether you have the required permissions for the action,
@@ -15276,7 +15328,7 @@ module Aws::EC2
     #
     #   * `log-destination-type` - The type of destination to which the flow
     #     log publishes data. Possible destination types include
-    #     `cloud-watch-logs` and `S3`.
+    #     `cloud-watch-logs` and `s3`.
     #
     #   * `flow-log-id` - The ID of the flow log.
     #
@@ -17073,7 +17125,7 @@ module Aws::EC2
     #     location type is `region` (default), the location is the Region code
     #     (for example, `us-east-2`.)
     #
-    #   * `instance-type` - The instance type.
+    #   * `instance-type` - The instance type. For example, `c5.2xlarge`.
     #
     # @option params [Integer] :max_results
     #   The maximum number of results to return for the request in a single
@@ -17144,17 +17196,17 @@ module Aws::EC2
     #   One or more filters. Filter names and values are case-sensitive.
     #
     #   * `auto-recovery-supported` - Indicates whether auto recovery is
-    #     supported. (`true` \| `false`)
+    #     supported (`true` \| `false`).
     #
-    #   * `bare-metal` - Indicates whether it is a bare metal instance type.
-    #     (`true` \| `false`)
+    #   * `bare-metal` - Indicates whether it is a bare metal instance type
+    #     (`true` \| `false`).
     #
     #   * `burstable-performance-supported` - Indicates whether it is a
-    #     burstable performance instance type. (`true` \| `false`)
+    #     burstable performance instance type (`true` \| `false`).
     #
     #   * `current-generation` - Indicates whether this instance type is the
-    #     latest generation instance type of an instance family. (`true` \|
-    #     `false`)
+    #     latest generation instance type of an instance family (`true` \|
+    #     `false`).
     #
     #   * `ebs-info.ebs-optimized-info.baseline-bandwidth-in-mbps` - The
     #     baseline bandwidth performance for an EBS-optimized instance type,
@@ -17166,7 +17218,7 @@ module Aws::EC2
     #
     #   * `ebs-info.ebs-optimized-info.baseline-throughput-in-mbps` - The
     #     baseline throughput performance for an EBS-optimized instance type,
-    #     in MBps.
+    #     in MB/s.
     #
     #   * `ebs-info.ebs-optimized-info.maximum-bandwidth-in-mbps` - The
     #     maximum bandwidth performance for an EBS-optimized instance type, in
@@ -17178,25 +17230,25 @@ module Aws::EC2
     #
     #   * `ebs-info.ebs-optimized-info.maximum-throughput-in-mbps` - The
     #     maximum throughput performance for an EBS-optimized instance type,
-    #     in MBps.
+    #     in MB/s.
     #
     #   * `ebs-info.ebs-optimized-support` - Indicates whether the instance
-    #     type is EBS-optimized. (`supported` \| `unsupported` \| `default`)
+    #     type is EBS-optimized (`supported` \| `unsupported` \| `default`).
     #
     #   * `ebs-info.encryption-support` - Indicates whether EBS encryption is
-    #     supported. (`supported` \| `unsupported`)
+    #     supported (`supported` \| `unsupported`).
     #
     #   * `ebs-info.nvme-support` - Indicates whether non-volatile memory
-    #     express (NVMe) is supported for EBS volumes. (`required` \|
-    #     `supported` \| `unsupported`)
+    #     express (NVMe) is supported for EBS volumes (`required` \|
+    #     `supported` \| `unsupported`).
     #
     #   * `free-tier-eligible` - Indicates whether the instance type is
-    #     eligible to use in the free tier. (`true` \| `false`)
+    #     eligible to use in the free tier (`true` \| `false`).
     #
     #   * `hibernation-supported` - Indicates whether On-Demand hibernation is
-    #     supported. (`true` \| `false`)
+    #     supported (`true` \| `false`).
     #
-    #   * `hypervisor` - The hypervisor. (`nitro` \| `xen`)
+    #   * `hypervisor` - The hypervisor (`nitro` \| `xen`).
     #
     #   * `instance-storage-info.disk.count` - The number of local disks.
     #
@@ -17204,17 +17256,17 @@ module Aws::EC2
     #     instance storage disk, in GB.
     #
     #   * `instance-storage-info.disk.type` - The storage technology for the
-    #     local instance storage disks. (`hdd` \| `ssd`)
+    #     local instance storage disks (`hdd` \| `ssd`).
     #
     #   * `instance-storage-info.nvme-support` - Indicates whether
-    #     non-volatile memory express (NVMe) is supported for instance store.
-    #     (`required` \| `supported`) \| `unsupported`)
+    #     non-volatile memory express (NVMe) is supported for instance store
+    #     (`required` \| `supported`) \| `unsupported`).
     #
     #   * `instance-storage-info.total-size-in-gb` - The total amount of
     #     storage available from all local instance storage, in GB.
     #
     #   * `instance-storage-supported` - Indicates whether the instance type
-    #     has local instance storage. (`true` \| `false`)
+    #     has local instance storage (`true` \| `false`).
     #
     #   * `instance-type` - The instance type (for example `c5.2xlarge` or
     #     c5*).
@@ -17222,11 +17274,11 @@ module Aws::EC2
     #   * `memory-info.size-in-mib` - The memory size.
     #
     #   * `network-info.efa-supported` - Indicates whether the instance type
-    #     supports Elastic Fabric Adapter (EFA). (`true` \| `false`)
+    #     supports Elastic Fabric Adapter (EFA) (`true` \| `false`).
     #
     #   * `network-info.ena-support` - Indicates whether Elastic Network
-    #     Adapter (ENA) is supported or required. (`required` \| `supported`
-    #     \| `unsupported`)
+    #     Adapter (ENA) is supported or required (`required` \| `supported` \|
+    #     `unsupported`).
     #
     #   * `network-info.ipv4-addresses-per-interface` - The maximum number of
     #     private IPv4 addresses per network interface.
@@ -17235,7 +17287,7 @@ module Aws::EC2
     #     private IPv6 addresses per network interface.
     #
     #   * `network-info.ipv6-supported` - Indicates whether the instance type
-    #     supports IPv6. (`true` \| `false`)
+    #     supports IPv6 (`true` \| `false`).
     #
     #   * `network-info.maximum-network-interfaces` - The maximum number of
     #     network interfaces per instance.
@@ -17243,19 +17295,19 @@ module Aws::EC2
     #   * `network-info.network-performance` - The network performance (for
     #     example, "25 Gigabit").
     #
-    #   * `processor-info.supported-architecture` - The CPU architecture.
-    #     (`arm64` \| `i386` \| `x86_64`)
+    #   * `processor-info.supported-architecture` - The CPU architecture
+    #     (`arm64` \| `i386` \| `x86_64`).
     #
     #   * `processor-info.sustained-clock-speed-in-ghz` - The CPU clock speed,
     #     in GHz.
     #
-    #   * `supported-root-device-type` - The root device type. (`ebs` \|
-    #     `instance-store`)
+    #   * `supported-root-device-type` - The root device type (`ebs` \|
+    #     `instance-store`).
     #
-    #   * `supported-usage-class` - The usage class. (`on-demand` \| `spot`)
+    #   * `supported-usage-class` - The usage class (`on-demand` \| `spot`).
     #
-    #   * `supported-virtualization-type` - The virtualization type. (`hvm` \|
-    #     `paravirtual`)
+    #   * `supported-virtualization-type` - The virtualization type (`hvm` \|
+    #     `paravirtual`).
     #
     #   * `vcpu-info.default-cores` - The default number of cores for the
     #     instance type.
@@ -17346,6 +17398,12 @@ module Aws::EC2
     #   resp.instance_types[0].ebs_info.nvme_support #=> String, one of "unsupported", "supported", "required"
     #   resp.instance_types[0].network_info.network_performance #=> String
     #   resp.instance_types[0].network_info.maximum_network_interfaces #=> Integer
+    #   resp.instance_types[0].network_info.maximum_network_cards #=> Integer
+    #   resp.instance_types[0].network_info.default_network_card_index #=> Integer
+    #   resp.instance_types[0].network_info.network_cards #=> Array
+    #   resp.instance_types[0].network_info.network_cards[0].network_card_index #=> Integer
+    #   resp.instance_types[0].network_info.network_cards[0].network_performance #=> String
+    #   resp.instance_types[0].network_info.network_cards[0].maximum_network_interfaces #=> Integer
     #   resp.instance_types[0].network_info.ipv_4_addresses_per_interface #=> Integer
     #   resp.instance_types[0].network_info.ipv_6_addresses_per_interface #=> Integer
     #   resp.instance_types[0].network_info.ipv_6_supported #=> Boolean
@@ -24009,6 +24067,16 @@ module Aws::EC2
     #     `initiatingRequest` \| `modifying` \| `pendingAcceptance` \|
     #     `pending` \| `rollingBack` \| `rejected` \| `rejecting`).
     #
+    #   * `tag`\:&lt;key&gt; - The key/value combination of a tag assigned to
+    #     the resource. Use the tag key in the filter name and the tag value
+    #     as the filter value. For example, to find all resources that have a
+    #     tag with the key `Owner` and the value `TeamA`, specify `tag:Owner`
+    #     for the filter name and `TeamA` for the filter value.
+    #
+    #   * `tag-key` - The key of a tag assigned to the resource. Use this
+    #     filter to find all resources that have a tag with a specific key,
+    #     regardless of the tag value.
+    #
     #   * `transit-gateway-id` - The ID of the transit gateway.
     #
     # @option params [Integer] :max_results
@@ -25362,6 +25430,8 @@ module Aws::EC2
     #   resp.vpc_endpoint_connections[0].dns_entries[0].hosted_zone_id #=> String
     #   resp.vpc_endpoint_connections[0].network_load_balancer_arns #=> Array
     #   resp.vpc_endpoint_connections[0].network_load_balancer_arns[0] #=> String
+    #   resp.vpc_endpoint_connections[0].gateway_load_balancer_arns #=> Array
+    #   resp.vpc_endpoint_connections[0].gateway_load_balancer_arns[0] #=> String
     #   resp.next_token #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/DescribeVpcEndpointConnections AWS API Documentation
@@ -25441,7 +25511,7 @@ module Aws::EC2
     #
     #   resp.service_configurations #=> Array
     #   resp.service_configurations[0].service_type #=> Array
-    #   resp.service_configurations[0].service_type[0].service_type #=> String, one of "Interface", "Gateway"
+    #   resp.service_configurations[0].service_type[0].service_type #=> String, one of "Interface", "Gateway", "GatewayLoadBalancer"
     #   resp.service_configurations[0].service_id #=> String
     #   resp.service_configurations[0].service_name #=> String
     #   resp.service_configurations[0].service_state #=> String, one of "Pending", "Available", "Deleting", "Deleted", "Failed"
@@ -25451,6 +25521,8 @@ module Aws::EC2
     #   resp.service_configurations[0].manages_vpc_endpoints #=> Boolean
     #   resp.service_configurations[0].network_load_balancer_arns #=> Array
     #   resp.service_configurations[0].network_load_balancer_arns[0] #=> String
+    #   resp.service_configurations[0].gateway_load_balancer_arns #=> Array
+    #   resp.service_configurations[0].gateway_load_balancer_arns[0] #=> String
     #   resp.service_configurations[0].base_endpoint_dns_names #=> Array
     #   resp.service_configurations[0].base_endpoint_dns_names[0] #=> String
     #   resp.service_configurations[0].private_dns_name #=> String
@@ -25542,6 +25614,14 @@ module Aws::EC2
 
     # Describes available services to which you can create a VPC endpoint.
     #
+    # When the service provider and the consumer have different accounts
+    # multiple Availability Zones, and the consumer views the VPC endpoint
+    # service information, the response only includes the common
+    # Availability Zones. For example, when the service provider account
+    # uses `us-east-1a` and `us-east-1c` and the consumer uses `us-east-1a`
+    # and us-east-1a and us-east-1b, the response includes the VPC endpoint
+    # services in the common Availability Zone, `us-east-1a`.
+    #
     # @option params [Boolean] :dry_run
     #   Checks whether you have the required permissions for the action,
     #   without actually making the request, and provides an error response.
@@ -25607,13 +25687,15 @@ module Aws::EC2
     #   resp.service_details[0].service_name #=> String
     #   resp.service_details[0].service_id #=> String
     #   resp.service_details[0].service_type #=> Array
-    #   resp.service_details[0].service_type[0].service_type #=> String, one of "Interface", "Gateway"
+    #   resp.service_details[0].service_type[0].service_type #=> String, one of "Interface", "Gateway", "GatewayLoadBalancer"
     #   resp.service_details[0].availability_zones #=> Array
     #   resp.service_details[0].availability_zones[0] #=> String
     #   resp.service_details[0].owner #=> String
     #   resp.service_details[0].base_endpoint_dns_names #=> Array
     #   resp.service_details[0].base_endpoint_dns_names[0] #=> String
     #   resp.service_details[0].private_dns_name #=> String
+    #   resp.service_details[0].private_dns_names #=> Array
+    #   resp.service_details[0].private_dns_names[0].private_dns_name #=> String
     #   resp.service_details[0].vpc_endpoint_policy_supported #=> Boolean
     #   resp.service_details[0].acceptance_required #=> Boolean
     #   resp.service_details[0].manages_vpc_endpoints #=> Boolean
@@ -25656,6 +25738,9 @@ module Aws::EC2
     #     (`pendingAcceptance` \| `pending` \| `available` \| `deleting` \|
     #     `deleted` \| `rejected` \| `failed`).
     #
+    #   * `vpc-endpoint-type` - The type of VPC endpoint (`Interface` \|
+    #     `Gateway` \| `GatewayLoadBalancer`).
+    #
     #   * `tag`\:&lt;key&gt; - The key/value combination of a tag assigned to
     #     the resource. Use the tag key in the filter name and the tag value
     #     as the filter value. For example, to find all resources that have a
@@ -25704,7 +25789,7 @@ module Aws::EC2
     #
     #   resp.vpc_endpoints #=> Array
     #   resp.vpc_endpoints[0].vpc_endpoint_id #=> String
-    #   resp.vpc_endpoints[0].vpc_endpoint_type #=> String, one of "Interface", "Gateway"
+    #   resp.vpc_endpoints[0].vpc_endpoint_type #=> String, one of "Interface", "Gateway", "GatewayLoadBalancer"
     #   resp.vpc_endpoints[0].vpc_id #=> String
     #   resp.vpc_endpoints[0].service_name #=> String
     #   resp.vpc_endpoints[0].state #=> String, one of "PendingAcceptance", "Pending", "Available", "Deleting", "Deleted", "Rejected", "Failed", "Expired"
@@ -26964,8 +27049,9 @@ module Aws::EC2
     # removes the Amazon S3 object that contains the certificate,
     # certificate chain, and encrypted private key from the Amazon S3
     # bucket. It also revokes the IAM role's permission to use the AWS Key
-    # Management Service (KMS) key used to encrypt the private key. This
-    # effectively revokes the role's permission to use the certificate.
+    # Management Service (KMS) customer master key (CMK) used to encrypt the
+    # private key. This effectively revokes the role's permission to use
+    # the certificate.
     #
     # @option params [String] :certificate_arn
     #   The ARN of the ACM certificate from which to disassociate the IAM
@@ -27903,8 +27989,8 @@ module Aws::EC2
     # Certificate Manager (ACM) certificate. It also returns the name of the
     # Amazon S3 bucket and the Amazon S3 object key where the certificate,
     # certificate chain, and encrypted private key bundle are stored, and
-    # the ARN of the AWS Key Management Service (KMS) key that's used to
-    # encrypt the private key.
+    # the ARN of the AWS Key Management Service (KMS) customer master key
+    # (CMK) that's used to encrypt the private key.
     #
     # @option params [String] :certificate_arn
     #   The ARN of the ACM certificate for which to view the associated IAM
@@ -30364,15 +30450,15 @@ module Aws::EC2
     #
     #   You can specify the CMK using any of the following:
     #
-    #   * Key ID. For example, key/1234abcd-12ab-34cd-56ef-1234567890ab.
+    #   * Key ID. For example, 1234abcd-12ab-34cd-56ef-1234567890ab.
     #
     #   * Key alias. For example, alias/ExampleAlias.
     #
     #   * Key ARN. For example,
-    #     arn:aws:kms:*us-east-1*\:*012345678910*\:key/*abcd1234-a123-456a-a12b-a123b4cd56ef*.
+    #     arn:aws:kms:us-east-1:012345678910:key/1234abcd-12ab-34cd-56ef-1234567890ab.
     #
     #   * Alias ARN. For example,
-    #     arn:aws:kms:*us-east-1*\:*012345678910*\:alias/*ExampleAlias*.
+    #     arn:aws:kms:us-east-1:012345678910:alias/ExampleAlias.
     #
     #   AWS authenticates the CMK asynchronously. Therefore, if you specify an
     #   ID, alias, or ARN that is not valid, the action can appear to
@@ -32923,9 +33009,9 @@ module Aws::EC2
     end
 
     # Modifies attributes of a specified VPC endpoint. The attributes that
-    # you can modify depend on the type of VPC endpoint (interface or
-    # gateway). For more information, see [VPC Endpoints][1] in the *Amazon
-    # Virtual Private Cloud User Guide*.
+    # you can modify depend on the type of VPC endpoint (interface, gateway,
+    # or Gateway Load Balancer). For more information, see [VPC
+    # Endpoints][1] in the *Amazon Virtual Private Cloud User Guide*.
     #
     #
     #
@@ -32945,8 +33031,9 @@ module Aws::EC2
     #   default policy. The default policy allows full access to the service.
     #
     # @option params [String] :policy_document
-    #   A policy to attach to the endpoint that controls access to the
-    #   service. The policy must be in valid JSON format.
+    #   (Interface and gateway endpoints) A policy to attach to the endpoint
+    #   that controls access to the service. The policy must be in valid JSON
+    #   format.
     #
     # @option params [Array<String>] :add_route_table_ids
     #   (Gateway endpoint) One or more route tables IDs to associate with the
@@ -32957,8 +33044,9 @@ module Aws::EC2
     #   the endpoint.
     #
     # @option params [Array<String>] :add_subnet_ids
-    #   (Interface endpoint) One or more subnet IDs in which to serve the
-    #   endpoint.
+    #   (Interface and Gateway Load Balancer endpoints) One or more subnet IDs
+    #   in which to serve the endpoint. For a Gateway Load Balancer endpoint,
+    #   you can specify only one subnet.
     #
     # @option params [Array<String>] :remove_subnet_ids
     #   (Interface endpoint) One or more subnets IDs in which to remove the
@@ -33056,9 +33144,10 @@ module Aws::EC2
     end
 
     # Modifies the attributes of your VPC endpoint service configuration.
-    # You can change the Network Load Balancers for your service, and you
-    # can specify whether acceptance is required for requests to connect to
-    # your endpoint service through an interface VPC endpoint.
+    # You can change the Network Load Balancers or Gateway Load Balancers
+    # for your service, and you can specify whether acceptance is required
+    # for requests to connect to your endpoint service through an interface
+    # VPC endpoint.
     #
     # If you set or modify the private DNS name, you must prove that you own
     # the private DNS domain name. For more information, see [VPC Endpoint
@@ -33079,10 +33168,12 @@ module Aws::EC2
     #   The ID of the service.
     #
     # @option params [String] :private_dns_name
-    #   The private DNS name to assign to the endpoint service.
+    #   (Interface endpoint configuration) The private DNS name to assign to
+    #   the endpoint service.
     #
     # @option params [Boolean] :remove_private_dns_name
-    #   Removes the private DNS name of the endpoint service.
+    #   (Interface endpoint configuration) Removes the private DNS name of the
+    #   endpoint service.
     #
     # @option params [Boolean] :acceptance_required
     #   Indicates whether requests to create an endpoint to your service must
@@ -33096,6 +33187,14 @@ module Aws::EC2
     #   The Amazon Resource Names (ARNs) of Network Load Balancers to remove
     #   from your service configuration.
     #
+    # @option params [Array<String>] :add_gateway_load_balancer_arns
+    #   The Amazon Resource Names (ARNs) of Gateway Load Balancers to add to
+    #   your service configuration.
+    #
+    # @option params [Array<String>] :remove_gateway_load_balancer_arns
+    #   The Amazon Resource Names (ARNs) of Gateway Load Balancers to remove
+    #   from your service configuration.
+    #
     # @return [Types::ModifyVpcEndpointServiceConfigurationResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::ModifyVpcEndpointServiceConfigurationResult#return #return} => Boolean
@@ -33110,6 +33209,8 @@ module Aws::EC2
     #     acceptance_required: false,
     #     add_network_load_balancer_arns: ["String"],
     #     remove_network_load_balancer_arns: ["String"],
+    #     add_gateway_load_balancer_arns: ["String"],
+    #     remove_gateway_load_balancer_arns: ["String"],
     #   })
     #
     # @example Response structure
@@ -35289,6 +35390,10 @@ module Aws::EC2
     #   If you have the required permissions, the error response is
     #   `DryRunOperation`. Otherwise, it is `UnauthorizedOperation`.
     #
+    # @option params [String] :vpc_endpoint_id
+    #   The ID of a VPC endpoint. Supported for Gateway Load Balancer
+    #   endpoints only.
+    #
     # @option params [String] :egress_only_internet_gateway_id
     #   \[IPv6 traffic only\] The ID of an egress-only internet gateway.
     #
@@ -35344,6 +35449,7 @@ module Aws::EC2
     #     destination_ipv_6_cidr_block: "String",
     #     destination_prefix_list_id: "PrefixListResourceId",
     #     dry_run: false,
+    #     vpc_endpoint_id: "VpcEndpointId",
     #     egress_only_internet_gateway_id: "EgressOnlyInternetGatewayId",
     #     gateway_id: "RouteGatewayId",
     #     instance_id: "InstanceId",
@@ -38438,7 +38544,7 @@ module Aws::EC2
     #
     #
     #
-    # [1]: https://docs.aws.amazon.com/vpc/latest/userguide/ndpoint-services-dns-validation.html#add-dns-txt-record
+    # [1]: https://docs.aws.amazon.com/vpc/latest/userguide/endpoint-services-dns-validation.html#add-dns-txt-record
     #
     # @option params [Boolean] :dry_run
     #   Checks whether you have the required permissions for the action,
@@ -39180,7 +39286,7 @@ module Aws::EC2
         params: params,
         config: config)
       context[:gem_name] = 'aws-sdk-ec2'
-      context[:gem_version] = '1.206.0'
+      context[:gem_version] = '1.211.0'
       Seahorse::Client::Request.new(handlers, context)
     end