aws-sdk-ec2 1.230.0 → 1.235.0

data/lib/aws-sdk-ec2/instance.rb

@@ -973,10 +973,10 @@ module Aws::EC2
     #   This option is supported only for HVM instances. Specifying this
     #   option with a PV instance can make it unreachable.
     # @option options [Array<String>] :groups
-    #   \[EC2-VPC\] Changes the security groups of the instance. You must
-    #   specify at least one security group, even if it's just the default
-    #   security group for the VPC. You must specify the security group ID,
-    #   not the security group name.
+    #   \[EC2-VPC\] Replaces the security groups of the instance with the
+    #   specified security groups. You must specify at least one security
+    #   group, even if it's just the default security group for the VPC. You
+    #   must specify the security group ID, not the security group name.
     # @option options [Types::AttributeValue] :instance_initiated_shutdown_behavior
     #   Specifies whether an instance stops or terminates when you initiate
     #   shutdown from the instance (using the operating system command for

data/lib/aws-sdk-ec2/network_interface.rb

@@ -120,7 +120,7 @@ module Aws::EC2
       data[:requester_managed]
     end
 
-    # Indicates whether traffic to or from the instance is validated.
+    # Indicates whether source/destination checking is enabled.
     # @return [Boolean]
     def source_dest_check
       data[:source_dest_check]
@@ -535,15 +535,12 @@ module Aws::EC2
     #   one group, even if it's just the default security group in the VPC.
     #   You must specify the ID of the security group, not the name.
     # @option options [Types::AttributeBooleanValue] :source_dest_check
-    #   Indicates whether source/destination checking is enabled. A value of
-    #   `true` means checking is enabled, and `false` means checking is
-    #   disabled. This value must be `false` for a NAT instance to perform
-    #   NAT. For more information, see [NAT Instances][1] in the *Amazon
-    #   Virtual Private Cloud User Guide*.
-    #
-    #
-    #
-    #   [1]: https://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_NAT_Instance.html
+    #   Enable or disable source/destination checks, which ensure that the
+    #   instance is either the source or the destination of any traffic that
+    #   it receives. If the value is `true`, source/destination checks are
+    #   enabled; otherwise, they are disabled. The default value is `true`.
+    #   You must disable source/destination checks if the instance runs
+    #   services such as network address translation, routing, or firewalls.
     # @return [EmptyStructure]
     def modify_attribute(options = {})
       options = options.merge(network_interface_id: @id)

data/lib/aws-sdk-ec2/resource.rb

@@ -3229,6 +3229,8 @@ module Aws::EC2
     #   * `ipv6-cidr-block-association.state` - The state of an IPv6 CIDR
     #     block associated with the subnet.
     #
+    #   * `outpost-arn` - The Amazon Resource Name (ARN) of the Outpost.
+    #
     #   * `owner-id` - The ID of the AWS account that owns the subnet.
     #
     #   * `state` - The state of the subnet (`pending` \| `available`).

data/lib/aws-sdk-ec2/types.rb

@@ -1944,6 +1944,46 @@ module Aws::EC2
       include Aws::Structure
     end
 
+    # Describes integration options for Amazon Athena.
+    #
+    # @note When making an API call, you may pass AthenaIntegration
+    #   data as a hash:
+    #
+    #       {
+    #         integration_result_s3_destination_arn: "String", # required
+    #         partition_load_frequency: "none", # required, accepts none, daily, weekly, monthly
+    #         partition_start_date: Time.now,
+    #         partition_end_date: Time.now,
+    #       }
+    #
+    # @!attribute [rw] integration_result_s3_destination_arn
+    #   The location in Amazon S3 to store the generated CloudFormation
+    #   template.
+    #   @return [String]
+    #
+    # @!attribute [rw] partition_load_frequency
+    #   The schedule for adding new partitions to the table.
+    #   @return [String]
+    #
+    # @!attribute [rw] partition_start_date
+    #   The start date for the partition.
+    #   @return [Time]
+    #
+    # @!attribute [rw] partition_end_date
+    #   The end date for the partition.
+    #   @return [Time]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/AthenaIntegration AWS API Documentation
+    #
+    class AthenaIntegration < Struct.new(
+      :integration_result_s3_destination_arn,
+      :partition_load_frequency,
+      :partition_start_date,
+      :partition_end_date)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @note When making an API call, you may pass AttachClassicLinkVpcRequest
     #   data as a hash:
     #
@@ -8380,6 +8420,86 @@ module Aws::EC2
       include Aws::Structure
     end
 
+    # @note When making an API call, you may pass CreateReplaceRootVolumeTaskRequest
+    #   data as a hash:
+    #
+    #       {
+    #         instance_id: "InstanceId", # required
+    #         snapshot_id: "SnapshotId",
+    #         client_token: "String",
+    #         dry_run: false,
+    #         tag_specifications: [
+    #           {
+    #             resource_type: "client-vpn-endpoint", # accepts client-vpn-endpoint, customer-gateway, dedicated-host, dhcp-options, egress-only-internet-gateway, elastic-ip, elastic-gpu, export-image-task, export-instance-task, fleet, fpga-image, host-reservation, image, import-image-task, import-snapshot-task, instance, internet-gateway, key-pair, launch-template, local-gateway-route-table-vpc-association, natgateway, network-acl, network-interface, network-insights-analysis, network-insights-path, placement-group, reserved-instances, route-table, security-group, snapshot, spot-fleet-request, spot-instances-request, subnet, traffic-mirror-filter, traffic-mirror-session, traffic-mirror-target, transit-gateway, transit-gateway-attachment, transit-gateway-connect-peer, transit-gateway-multicast-domain, transit-gateway-route-table, volume, vpc, vpc-peering-connection, vpn-connection, vpn-gateway, vpc-flow-log
+    #             tags: [
+    #               {
+    #                 key: "String",
+    #                 value: "String",
+    #               },
+    #             ],
+    #           },
+    #         ],
+    #       }
+    #
+    # @!attribute [rw] instance_id
+    #   The ID of the instance for which to replace the root volume.
+    #   @return [String]
+    #
+    # @!attribute [rw] snapshot_id
+    #   The ID of the snapshot from which to restore the replacement root
+    #   volume. If you want to restore the volume to the initial launch
+    #   state, omit this parameter.
+    #   @return [String]
+    #
+    # @!attribute [rw] client_token
+    #   Unique, case-sensitive identifier you provide to ensure the
+    #   idempotency of the request. If you do not specify a client token, a
+    #   randomly generated token is used for the request to ensure
+    #   idempotency. For more information, see [Ensuring Idempotency][1].
+    #
+    #   **A suitable default value is auto-generated.** You should normally
+    #   not need to pass this option.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Run_Instance_Idempotency.html
+    #   @return [String]
+    #
+    # @!attribute [rw] dry_run
+    #   Checks whether you have the required permissions for the action,
+    #   without actually making the request, and provides an error response.
+    #   If you have the required permissions, the error response is
+    #   `DryRunOperation`. Otherwise, it is `UnauthorizedOperation`.
+    #   @return [Boolean]
+    #
+    # @!attribute [rw] tag_specifications
+    #   The tags to apply to the root volume replacement task.
+    #   @return [Array<Types::TagSpecification>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/CreateReplaceRootVolumeTaskRequest AWS API Documentation
+    #
+    class CreateReplaceRootVolumeTaskRequest < Struct.new(
+      :instance_id,
+      :snapshot_id,
+      :client_token,
+      :dry_run,
+      :tag_specifications)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] replace_root_volume_task
+    #   Information about the root volume replacement task.
+    #   @return [Types::ReplaceRootVolumeTask]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/CreateReplaceRootVolumeTaskResult AWS API Documentation
+    #
+    class CreateReplaceRootVolumeTaskResult < Struct.new(
+      :replace_root_volume_task)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # Contains the parameters for CreateReservedInstancesListing.
     #
     # @note When making an API call, you may pass CreateReservedInstancesListingRequest
@@ -8449,6 +8569,83 @@ module Aws::EC2
       include Aws::Structure
     end
 
+    # @note When making an API call, you may pass CreateRestoreImageTaskRequest
+    #   data as a hash:
+    #
+    #       {
+    #         bucket: "String", # required
+    #         object_key: "String", # required
+    #         name: "String",
+    #         tag_specifications: [
+    #           {
+    #             resource_type: "client-vpn-endpoint", # accepts client-vpn-endpoint, customer-gateway, dedicated-host, dhcp-options, egress-only-internet-gateway, elastic-ip, elastic-gpu, export-image-task, export-instance-task, fleet, fpga-image, host-reservation, image, import-image-task, import-snapshot-task, instance, internet-gateway, key-pair, launch-template, local-gateway-route-table-vpc-association, natgateway, network-acl, network-interface, network-insights-analysis, network-insights-path, placement-group, reserved-instances, route-table, security-group, snapshot, spot-fleet-request, spot-instances-request, subnet, traffic-mirror-filter, traffic-mirror-session, traffic-mirror-target, transit-gateway, transit-gateway-attachment, transit-gateway-connect-peer, transit-gateway-multicast-domain, transit-gateway-route-table, volume, vpc, vpc-peering-connection, vpn-connection, vpn-gateway, vpc-flow-log
+    #             tags: [
+    #               {
+    #                 key: "String",
+    #                 value: "String",
+    #               },
+    #             ],
+    #           },
+    #         ],
+    #         dry_run: false,
+    #       }
+    #
+    # @!attribute [rw] bucket
+    #   The name of the S3 bucket that contains the stored AMI object.
+    #   @return [String]
+    #
+    # @!attribute [rw] object_key
+    #   The name of the stored AMI object in the bucket.
+    #   @return [String]
+    #
+    # @!attribute [rw] name
+    #   The name for the restored AMI. The name must be unique for AMIs in
+    #   the Region for this account. If you do not provide a name, the new
+    #   AMI gets the same name as the original AMI.
+    #   @return [String]
+    #
+    # @!attribute [rw] tag_specifications
+    #   The tags to apply to the AMI and snapshots on restoration. You can
+    #   tag the AMI, the snapshots, or both.
+    #
+    #   * To tag the AMI, the value for `ResourceType` must be `image`.
+    #
+    #   * To tag the snapshots, the value for `ResourceType` must be
+    #     `snapshot`. The same tag is applied to all of the snapshots that
+    #     are created.
+    #   @return [Array<Types::TagSpecification>]
+    #
+    # @!attribute [rw] dry_run
+    #   Checks whether you have the required permissions for the action,
+    #   without actually making the request, and provides an error response.
+    #   If you have the required permissions, the error response is
+    #   `DryRunOperation`. Otherwise, it is `UnauthorizedOperation`.
+    #   @return [Boolean]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/CreateRestoreImageTaskRequest AWS API Documentation
+    #
+    class CreateRestoreImageTaskRequest < Struct.new(
+      :bucket,
+      :object_key,
+      :name,
+      :tag_specifications,
+      :dry_run)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] image_id
+    #   The AMI ID.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/CreateRestoreImageTaskResult AWS API Documentation
+    #
+    class CreateRestoreImageTaskResult < Struct.new(
+      :image_id)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @note When making an API call, you may pass CreateRouteRequest
     #   data as a hash:
     #
@@ -8956,6 +9153,67 @@ module Aws::EC2
       include Aws::Structure
     end
 
+    # @note When making an API call, you may pass CreateStoreImageTaskRequest
+    #   data as a hash:
+    #
+    #       {
+    #         image_id: "ImageId", # required
+    #         bucket: "String", # required
+    #         s3_object_tags: [
+    #           {
+    #             key: "String",
+    #             value: "String",
+    #           },
+    #         ],
+    #         dry_run: false,
+    #       }
+    #
+    # @!attribute [rw] image_id
+    #   The ID of the AMI.
+    #   @return [String]
+    #
+    # @!attribute [rw] bucket
+    #   The name of the S3 bucket in which the AMI object will be stored.
+    #   The bucket must be in the Region in which the request is being made.
+    #   The AMI object appears in the bucket only after the upload task has
+    #   completed.
+    #   @return [String]
+    #
+    # @!attribute [rw] s3_object_tags
+    #   The tags to apply to the AMI object that will be stored in the S3
+    #   bucket.
+    #   @return [Array<Types::S3ObjectTag>]
+    #
+    # @!attribute [rw] dry_run
+    #   Checks whether you have the required permissions for the action,
+    #   without actually making the request, and provides an error response.
+    #   If you have the required permissions, the error response is
+    #   `DryRunOperation`. Otherwise, it is `UnauthorizedOperation`.
+    #   @return [Boolean]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/CreateStoreImageTaskRequest AWS API Documentation
+    #
+    class CreateStoreImageTaskRequest < Struct.new(
+      :image_id,
+      :bucket,
+      :s3_object_tags,
+      :dry_run)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] object_key
+    #   The name of the stored AMI object in the S3 bucket.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/CreateStoreImageTaskResult AWS API Documentation
+    #
+    class CreateStoreImageTaskResult < Struct.new(
+      :object_key)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @note When making an API call, you may pass CreateSubnetRequest
     #   data as a hash:
     #
@@ -14436,6 +14694,9 @@ module Aws::EC2
     #       constraints, or instance limit constraints. Failed requests are
     #       retained for 60 minutes.
     #
+    #   * `start-date` - The date and time at which the Capacity Reservation
+    #     was started.
+    #
     #   * `end-date` - The date and time at which the Capacity Reservation
     #     expires. When a Capacity Reservation expires, the reserved
     #     capacity is released and you can no longer launch instances into
@@ -17659,8 +17920,7 @@ module Aws::EC2
     #   * `memory-info.size-in-mib` - The memory size.
     #
     #   * `network-info.efa-info.maximum-efa-interfaces` - The maximum
-    #     number of Elastic Fabric Adapters (EFAs) per instance. (`true` \|
-    #     `false`).
+    #     number of Elastic Fabric Adapters (EFAs) per instance.
     #
     #   * `network-info.efa-supported` - Indicates whether the instance type
     #     supports Elastic Fabric Adapter (EFA) (`true` \| `false`).
@@ -20320,6 +20580,82 @@ module Aws::EC2
       include Aws::Structure
     end
 
+    # @note When making an API call, you may pass DescribeReplaceRootVolumeTasksRequest
+    #   data as a hash:
+    #
+    #       {
+    #         replace_root_volume_task_ids: ["ReplaceRootVolumeTaskId"],
+    #         filters: [
+    #           {
+    #             name: "String",
+    #             values: ["String"],
+    #           },
+    #         ],
+    #         max_results: 1,
+    #         next_token: "NextToken",
+    #         dry_run: false,
+    #       }
+    #
+    # @!attribute [rw] replace_root_volume_task_ids
+    #   The ID of the root volume replacement task to view.
+    #   @return [Array<String>]
+    #
+    # @!attribute [rw] filters
+    #   Filter to use:
+    #
+    #   * `instance-id` - The ID of the instance for which the root volume
+    #     replacement task was created.
+    #
+    #   ^
+    #   @return [Array<Types::Filter>]
+    #
+    # @!attribute [rw] max_results
+    #   The maximum number of results to return with a single call. To
+    #   retrieve the remaining results, make another call with the returned
+    #   `nextToken` value.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] next_token
+    #   The token for the next page of results.
+    #   @return [String]
+    #
+    # @!attribute [rw] dry_run
+    #   Checks whether you have the required permissions for the action,
+    #   without actually making the request, and provides an error response.
+    #   If you have the required permissions, the error response is
+    #   `DryRunOperation`. Otherwise, it is `UnauthorizedOperation`.
+    #   @return [Boolean]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/DescribeReplaceRootVolumeTasksRequest AWS API Documentation
+    #
+    class DescribeReplaceRootVolumeTasksRequest < Struct.new(
+      :replace_root_volume_task_ids,
+      :filters,
+      :max_results,
+      :next_token,
+      :dry_run)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] replace_root_volume_tasks
+    #   Information about the root volume replacement task.
+    #   @return [Array<Types::ReplaceRootVolumeTask>]
+    #
+    # @!attribute [rw] next_token
+    #   The token to use to retrieve the next page of results. This value is
+    #   `null` when there are no more results to return.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/DescribeReplaceRootVolumeTasksResult AWS API Documentation
+    #
+    class DescribeReplaceRootVolumeTasksResult < Struct.new(
+      :replace_root_volume_tasks,
+      :next_token)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # Contains the parameters for DescribeReservedInstancesListings.
     #
     # @note When making an API call, you may pass DescribeReservedInstancesListingsRequest
@@ -20539,11 +20875,12 @@ module Aws::EC2
     #     holders and are for use with Amazon VPC. (`Linux/UNIX` \|
     #     `Linux/UNIX (Amazon VPC)` \| `SUSE Linux` \| `SUSE Linux (Amazon
     #     VPC)` \| `Red Hat Enterprise Linux` \| `Red Hat Enterprise Linux
-    #     (Amazon VPC)` \| `Windows` \| `Windows (Amazon VPC)` \| `Windows
-    #     with SQL Server Standard` \| `Windows with SQL Server Standard
-    #     (Amazon VPC)` \| `Windows with SQL Server Web` \| ` Windows with
-    #     SQL Server Web (Amazon VPC)` \| `Windows with SQL Server
-    #     Enterprise` \| `Windows with SQL Server Enterprise (Amazon VPC)`)
+    #     (Amazon VPC)` \| `Red Hat Enterprise Linux with HA (Amazon VPC)`
+    #     \| `Windows` \| `Windows (Amazon VPC)` \| `Windows with SQL Server
+    #     Standard` \| `Windows with SQL Server Standard (Amazon VPC)` \|
+    #     `Windows with SQL Server Web` \| ` Windows with SQL Server Web
+    #     (Amazon VPC)` \| `Windows with SQL Server Enterprise` \| `Windows
+    #     with SQL Server Enterprise (Amazon VPC)`)
     #
     #   * `reserved-instances-offering-id` - The Reserved Instances offering
     #     ID.
@@ -20729,11 +21066,12 @@ module Aws::EC2
     #     holders and are for use with Amazon VPC (`Linux/UNIX` \|
     #     `Linux/UNIX (Amazon VPC)` \| `SUSE Linux` \| `SUSE Linux (Amazon
     #     VPC)` \| `Red Hat Enterprise Linux` \| `Red Hat Enterprise Linux
-    #     (Amazon VPC)` \| `Windows` \| `Windows (Amazon VPC)` \| `Windows
-    #     with SQL Server Standard` \| `Windows with SQL Server Standard
-    #     (Amazon VPC)` \| `Windows with SQL Server Web` \| `Windows with
-    #     SQL Server Web (Amazon VPC)` \| `Windows with SQL Server
-    #     Enterprise` \| `Windows with SQL Server Enterprise (Amazon VPC)`).
+    #     (Amazon VPC)` \| `Red Hat Enterprise Linux with HA (Amazon VPC)`
+    #     \| `Windows` \| `Windows (Amazon VPC)` \| `Windows with SQL Server
+    #     Standard` \| `Windows with SQL Server Standard (Amazon VPC)` \|
+    #     `Windows with SQL Server Web` \| `Windows with SQL Server Web
+    #     (Amazon VPC)` \| `Windows with SQL Server Enterprise` \| `Windows
+    #     with SQL Server Enterprise (Amazon VPC)`).
     #
     #   * `reserved-instances-id` - The ID of the Reserved Instance.
     #
@@ -22221,6 +22559,86 @@ module Aws::EC2
       include Aws::Structure
     end
 
+    # @note When making an API call, you may pass DescribeStoreImageTasksRequest
+    #   data as a hash:
+    #
+    #       {
+    #         image_ids: ["ImageId"],
+    #         dry_run: false,
+    #         filters: [
+    #           {
+    #             name: "String",
+    #             values: ["String"],
+    #           },
+    #         ],
+    #         next_token: "String",
+    #         max_results: 1,
+    #       }
+    #
+    # @!attribute [rw] image_ids
+    #   The AMI IDs for which to show progress. Up to 20 AMI IDs can be
+    #   included in a request.
+    #   @return [Array<String>]
+    #
+    # @!attribute [rw] dry_run
+    #   Checks whether you have the required permissions for the action,
+    #   without actually making the request, and provides an error response.
+    #   If you have the required permissions, the error response is
+    #   `DryRunOperation`. Otherwise, it is `UnauthorizedOperation`.
+    #   @return [Boolean]
+    #
+    # @!attribute [rw] filters
+    #   The filters.
+    #
+    #   * `task-state` - Returns tasks in a certain state (`InProgress` \|
+    #     `Completed` \| `Failed`)
+    #
+    #   * `bucket` - Returns task information for tasks that targeted a
+    #     specific bucket. For the filter value, specify the bucket name.
+    #   @return [Array<Types::Filter>]
+    #
+    # @!attribute [rw] next_token
+    #   The token for the next page of results.
+    #   @return [String]
+    #
+    # @!attribute [rw] max_results
+    #   The maximum number of results to return in a single call. To
+    #   retrieve the remaining results, make another call with the returned
+    #   `NextToken` value. This value can be between 1 and 200. You cannot
+    #   specify this parameter and the `ImageIDs` parameter in the same
+    #   call.
+    #   @return [Integer]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/DescribeStoreImageTasksRequest AWS API Documentation
+    #
+    class DescribeStoreImageTasksRequest < Struct.new(
+      :image_ids,
+      :dry_run,
+      :filters,
+      :next_token,
+      :max_results)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] store_image_task_results
+    #   The information about the AMI store tasks.
+    #   @return [Array<Types::StoreImageTaskResult>]
+    #
+    # @!attribute [rw] next_token
+    #   The token to use to retrieve the next page of results. This value is
+    #   `null` when there are no more results to return.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/DescribeStoreImageTasksResult AWS API Documentation
+    #
+    class DescribeStoreImageTasksResult < Struct.new(
+      :store_image_task_results,
+      :next_token)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @note When making an API call, you may pass DescribeSubnetsRequest
     #   data as a hash:
     #
@@ -22267,6 +22685,8 @@ module Aws::EC2
     #   * `ipv6-cidr-block-association.state` - The state of an IPv6 CIDR
     #     block associated with the subnet.
     #
+    #   * `outpost-arn` - The Amazon Resource Name (ARN) of the Outpost.
+    #
     #   * `owner-id` - The ID of the AWS account that owns the subnet.
     #
     #   * `state` - The state of the subnet (`pending` \| `available`).
@@ -25459,6 +25879,42 @@ module Aws::EC2
       include Aws::Structure
     end
 
+    # @note When making an API call, you may pass DisableSerialConsoleAccessRequest
+    #   data as a hash:
+    #
+    #       {
+    #         dry_run: false,
+    #       }
+    #
+    # @!attribute [rw] dry_run
+    #   Checks whether you have the required permissions for the action,
+    #   without actually making the request, and provides an error response.
+    #   If you have the required permissions, the error response is
+    #   `DryRunOperation`. Otherwise, it is `UnauthorizedOperation`.
+    #   @return [Boolean]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/DisableSerialConsoleAccessRequest AWS API Documentation
+    #
+    class DisableSerialConsoleAccessRequest < Struct.new(
+      :dry_run)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] serial_console_access_enabled
+    #   If `true`, access to the EC2 serial console of all instances is
+    #   enabled for your account. If `false`, access to the EC2 serial
+    #   console of all instances is disabled for your account.
+    #   @return [Boolean]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/DisableSerialConsoleAccessResult AWS API Documentation
+    #
+    class DisableSerialConsoleAccessResult < Struct.new(
+      :serial_console_access_enabled)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @note When making an API call, you may pass DisableTransitGatewayRouteTablePropagationRequest
     #   data as a hash:
     #
@@ -26954,6 +27410,42 @@ module Aws::EC2
       include Aws::Structure
     end
 
+    # @note When making an API call, you may pass EnableSerialConsoleAccessRequest
+    #   data as a hash:
+    #
+    #       {
+    #         dry_run: false,
+    #       }
+    #
+    # @!attribute [rw] dry_run
+    #   Checks whether you have the required permissions for the action,
+    #   without actually making the request, and provides an error response.
+    #   If you have the required permissions, the error response is
+    #   `DryRunOperation`. Otherwise, it is `UnauthorizedOperation`.
+    #   @return [Boolean]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/EnableSerialConsoleAccessRequest AWS API Documentation
+    #
+    class EnableSerialConsoleAccessRequest < Struct.new(
+      :dry_run)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] serial_console_access_enabled
+    #   If `true`, access to the EC2 serial console of all instances is
+    #   enabled for your account. If `false`, access to the EC2 serial
+    #   console of all instances is disabled for your account.
+    #   @return [Boolean]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/EnableSerialConsoleAccessResult AWS API Documentation
+    #
+    class EnableSerialConsoleAccessResult < Struct.new(
+      :serial_console_access_enabled)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @note When making an API call, you may pass EnableTransitGatewayRouteTablePropagationRequest
     #   data as a hash:
     #
@@ -28408,7 +28900,7 @@ module Aws::EC2
     #   If the Spot `AllocationStrategy` is set to
     #   `capacity-optimized-prioritized`, EC2 Fleet uses priority on a
     #   best-effort basis to determine which launch template override to use
-    #   first in fulfilling Spot capacity, but optimizes for capacity first.
+    #   in fulfilling Spot capacity, but optimizes for capacity first.
     #
     #   Valid values are whole numbers starting at `0`. The lower the
     #   number, the higher the priority. If no number is set, the override
@@ -28493,7 +28985,7 @@ module Aws::EC2
     #   If the Spot `AllocationStrategy` is set to
     #   `capacity-optimized-prioritized`, EC2 Fleet uses priority on a
     #   best-effort basis to determine which launch template override to use
-    #   first in fulfilling Spot capacity, but optimizes for capacity first.
+    #   in fulfilling Spot capacity, but optimizes for capacity first.
     #
     #   Valid values are whole numbers starting at `0`. The lower the
     #   number, the higher the priority. If no number is set, the launch
@@ -29564,6 +30056,68 @@ module Aws::EC2
       include Aws::Structure
     end
 
+    # @note When making an API call, you may pass GetFlowLogsIntegrationTemplateRequest
+    #   data as a hash:
+    #
+    #       {
+    #         dry_run: false,
+    #         flow_log_id: "VpcFlowLogId", # required
+    #         config_delivery_s3_destination_arn: "String", # required
+    #         integrate_services: { # required
+    #           athena_integrations: [
+    #             {
+    #               integration_result_s3_destination_arn: "String", # required
+    #               partition_load_frequency: "none", # required, accepts none, daily, weekly, monthly
+    #               partition_start_date: Time.now,
+    #               partition_end_date: Time.now,
+    #             },
+    #           ],
+    #         },
+    #       }
+    #
+    # @!attribute [rw] dry_run
+    #   Checks whether you have the required permissions for the action,
+    #   without actually making the request, and provides an error response.
+    #   If you have the required permissions, the error response is
+    #   `DryRunOperation`. Otherwise, it is `UnauthorizedOperation`.
+    #   @return [Boolean]
+    #
+    # @!attribute [rw] flow_log_id
+    #   The ID of the flow log.
+    #   @return [String]
+    #
+    # @!attribute [rw] config_delivery_s3_destination_arn
+    #   To store the CloudFormation template in Amazon S3, specify the
+    #   location in Amazon S3.
+    #   @return [String]
+    #
+    # @!attribute [rw] integrate_services
+    #   Information about the service integration.
+    #   @return [Types::IntegrateServices]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/GetFlowLogsIntegrationTemplateRequest AWS API Documentation
+    #
+    class GetFlowLogsIntegrationTemplateRequest < Struct.new(
+      :dry_run,
+      :flow_log_id,
+      :config_delivery_s3_destination_arn,
+      :integrate_services)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] result
+    #   The generated CloudFormation template.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/GetFlowLogsIntegrationTemplateResult AWS API Documentation
+    #
+    class GetFlowLogsIntegrationTemplateResult < Struct.new(
+      :result)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @note When making an API call, you may pass GetGroupsForCapacityReservationRequest
     #   data as a hash:
     #
@@ -29998,6 +30552,42 @@ module Aws::EC2
       include Aws::Structure
     end
 
+    # @note When making an API call, you may pass GetSerialConsoleAccessStatusRequest
+    #   data as a hash:
+    #
+    #       {
+    #         dry_run: false,
+    #       }
+    #
+    # @!attribute [rw] dry_run
+    #   Checks whether you have the required permissions for the action,
+    #   without actually making the request, and provides an error response.
+    #   If you have the required permissions, the error response is
+    #   `DryRunOperation`. Otherwise, it is `UnauthorizedOperation`.
+    #   @return [Boolean]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/GetSerialConsoleAccessStatusRequest AWS API Documentation
+    #
+    class GetSerialConsoleAccessStatusRequest < Struct.new(
+      :dry_run)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] serial_console_access_enabled
+    #   If `true`, access to the EC2 serial console of all instances is
+    #   enabled for your account. If `false`, access to the EC2 serial
+    #   console of all instances is disabled for your account.
+    #   @return [Boolean]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/GetSerialConsoleAccessStatusResult AWS API Documentation
+    #
+    class GetSerialConsoleAccessStatusResult < Struct.new(
+      :serial_console_access_enabled)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @note When making an API call, you may pass GetTransitGatewayAttachmentPropagationsRequest
     #   data as a hash:
     #
@@ -33358,8 +33948,7 @@ module Aws::EC2
     #   @return [Array<Types::InstancePrivateIpAddress>]
     #
     # @!attribute [rw] source_dest_check
-    #   Indicates whether to validate network traffic to or from this
-    #   network interface.
+    #   Indicates whether source/destination checking is enabled.
     #   @return [Boolean]
     #
     # @!attribute [rw] status
@@ -34157,6 +34746,34 @@ module Aws::EC2
       include Aws::Structure
     end
 
+    # Describes service integrations with VPC Flow logs.
+    #
+    # @note When making an API call, you may pass IntegrateServices
+    #   data as a hash:
+    #
+    #       {
+    #         athena_integrations: [
+    #           {
+    #             integration_result_s3_destination_arn: "String", # required
+    #             partition_load_frequency: "none", # required, accepts none, daily, weekly, monthly
+    #             partition_start_date: Time.now,
+    #             partition_end_date: Time.now,
+    #           },
+    #         ],
+    #       }
+    #
+    # @!attribute [rw] athena_integrations
+    #   Information about the integration with Amazon Athena.
+    #   @return [Array<Types::AthenaIntegration>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/IntegrateServices AWS API Documentation
+    #
+    class IntegrateServices < Struct.new(
+      :athena_integrations)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # Describes an internet gateway.
     #
     # @!attribute [rw] attachments
@@ -35856,7 +36473,7 @@ module Aws::EC2
     #   If the Spot `AllocationStrategy` is set to
     #   `capacityOptimizedPrioritized`, Spot Fleet uses priority on a
     #   best-effort basis to determine which launch template override to use
-    #   first in fulfilling Spot capacity, but optimizes for capacity first.
+    #   in fulfilling Spot capacity, but optimizes for capacity first.
     #
     #   Valid values are whole numbers starting at `0`. The lower the
     #   number, the higher the priority. If no number is set, the launch
@@ -37818,10 +38435,10 @@ module Aws::EC2
     #   @return [Types::AttributeBooleanValue]
     #
     # @!attribute [rw] groups
-    #   \[EC2-VPC\] Changes the security groups of the instance. You must
-    #   specify at least one security group, even if it's just the default
-    #   security group for the VPC. You must specify the security group ID,
-    #   not the security group name.
+    #   \[EC2-VPC\] Replaces the security groups of the instance with the
+    #   specified security groups. You must specify at least one security
+    #   group, even if it's just the default security group for the VPC.
+    #   You must specify the security group ID, not the security group name.
     #   @return [Array<String>]
     #
     # @!attribute [rw] instance_id
@@ -38434,15 +39051,12 @@ module Aws::EC2
     #   @return [String]
     #
     # @!attribute [rw] source_dest_check
-    #   Indicates whether source/destination checking is enabled. A value of
-    #   `true` means checking is enabled, and `false` means checking is
-    #   disabled. This value must be `false` for a NAT instance to perform
-    #   NAT. For more information, see [NAT Instances][1] in the *Amazon
-    #   Virtual Private Cloud User Guide*.
-    #
-    #
-    #
-    #   [1]: https://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_NAT_Instance.html
+    #   Enable or disable source/destination checks, which ensure that the
+    #   instance is either the source or the destination of any traffic that
+    #   it receives. If the value is `true`, source/destination checks are
+    #   enabled; otherwise, they are disabled. The default value is `true`.
+    #   You must disable source/destination checks if the instance runs
+    #   services such as network address translation, routing, or firewalls.
     #   @return [Types::AttributeBooleanValue]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/ModifyNetworkInterfaceAttributeRequest AWS API Documentation
@@ -39402,7 +40016,8 @@ module Aws::EC2
     #   * `io2`\: 100-64,000 IOPS
     #
     #   Default: If no IOPS value is specified, the existing value is
-    #   retained.
+    #   retained, unless a volume type is modified that supports different
+    #   values.
     #   @return [Integer]
     #
     # @!attribute [rw] throughput
@@ -41129,7 +41744,7 @@ module Aws::EC2
     #   @return [Boolean]
     #
     # @!attribute [rw] source_dest_check
-    #   Indicates whether traffic to or from the instance is validated.
+    #   Indicates whether source/destination checking is enabled.
     #   @return [Boolean]
     #
     # @!attribute [rw] status
@@ -44078,6 +44693,66 @@ module Aws::EC2
       include Aws::Structure
     end
 
+    # Information about a root volume replacement task.
+    #
+    # @!attribute [rw] replace_root_volume_task_id
+    #   The ID of the root volume replacement task.
+    #   @return [String]
+    #
+    # @!attribute [rw] instance_id
+    #   The ID of the instance for which the root volume replacement task
+    #   was created.
+    #   @return [String]
+    #
+    # @!attribute [rw] task_state
+    #   The state of the task. The task can be in one of the following
+    #   states:
+    #
+    #   * `pending` - the replacement volume is being created.
+    #
+    #   * `in-progress` - the original volume is being detached and the
+    #     replacement volume is being attached.
+    #
+    #   * `succeeded` - the replacement volume has been successfully
+    #     attached to the instance and the instance is available.
+    #
+    #   * `failing` - the replacement task is in the process of failing.
+    #
+    #   * `failed` - the replacement task has failed but the original root
+    #     volume is still attached.
+    #
+    #   * `failing-detached` - the replacement task is in the process of
+    #     failing. The instance might have no root volume attached.
+    #
+    #   * `failed-detached` - the replacement task has failed and the
+    #     instance has no root volume attached.
+    #   @return [String]
+    #
+    # @!attribute [rw] start_time
+    #   The time the task was started.
+    #   @return [String]
+    #
+    # @!attribute [rw] complete_time
+    #   The time the task completed.
+    #   @return [String]
+    #
+    # @!attribute [rw] tags
+    #   The tags assigned to the task.
+    #   @return [Array<Types::Tag>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/ReplaceRootVolumeTask AWS API Documentation
+    #
+    class ReplaceRootVolumeTask < Struct.new(
+      :replace_root_volume_task_id,
+      :instance_id,
+      :task_state,
+      :start_time,
+      :complete_time,
+      :tags)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @note When making an API call, you may pass ReplaceRouteRequest
     #   data as a hash:
     #
@@ -45002,7 +45677,7 @@ module Aws::EC2
     #         launch_group: "String",
     #         launch_specification: {
     #           security_group_ids: ["SecurityGroupId"],
-    #           security_groups: ["SecurityGroupName"],
+    #           security_groups: ["String"],
     #           addressing_type: "String",
     #           block_device_mappings: [
     #             {
@@ -45263,7 +45938,7 @@ module Aws::EC2
     #
     #       {
     #         security_group_ids: ["SecurityGroupId"],
-    #         security_groups: ["SecurityGroupName"],
+    #         security_groups: ["String"],
     #         addressing_type: "String",
     #         block_device_mappings: [
     #           {
@@ -45409,9 +46084,7 @@ module Aws::EC2
     #   @return [String]
     #
     # @!attribute [rw] subnet_id
-    #   The IDs of the subnets in which to launch the instance. To specify
-    #   multiple subnets, separate them using commas; for example,
-    #   "subnet-1234abcdeexample1, subnet-0987cdef6example2".
+    #   The ID of the subnet in which to launch the instance.
     #   @return [String]
     #
     # @!attribute [rw] user_data
@@ -47799,6 +48472,45 @@ module Aws::EC2
       include Aws::Structure
     end
 
+    # The tags to apply to the AMI object that will be stored in the S3
+    # bucket. For more information, see [Categorizing your storage using
+    # tags][1] in the *Amazon Simple Storage Service User Guide*.
+    #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com/AmazonS3/latest/userguide/object-tagging.html
+    #
+    # @note When making an API call, you may pass S3ObjectTag
+    #   data as a hash:
+    #
+    #       {
+    #         key: "String",
+    #         value: "String",
+    #       }
+    #
+    # @!attribute [rw] key
+    #   The key of the tag.
+    #
+    #   Constraints: Tag keys are case-sensitive and can be up to 128
+    #   Unicode characters in length. May not begin with `aws`\:.
+    #   @return [String]
+    #
+    # @!attribute [rw] value
+    #   The value of the tag.
+    #
+    #   Constraints: Tag values are case-sensitive and can be up to 256
+    #   Unicode characters in length.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/S3ObjectTag AWS API Documentation
+    #
+    class S3ObjectTag < Struct.new(
+      :key,
+      :value)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # Describes the storage parameters for S3 and S3 buckets for an instance
     # store-backed AMI.
     #
@@ -51404,6 +52116,53 @@ module Aws::EC2
       include Aws::Structure
     end
 
+    # The information about the AMI store task, including the progress of
+    # the task.
+    #
+    # @!attribute [rw] ami_id
+    #   The ID of the AMI that is being stored.
+    #   @return [String]
+    #
+    # @!attribute [rw] task_start_time
+    #   The time the task started.
+    #   @return [Time]
+    #
+    # @!attribute [rw] bucket
+    #   The name of the S3 bucket that contains the stored AMI object.
+    #   @return [String]
+    #
+    # @!attribute [rw] s3object_key
+    #   The name of the stored AMI object in the bucket.
+    #   @return [String]
+    #
+    # @!attribute [rw] progress_percentage
+    #   The progress of the task as a percentage.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] store_task_state
+    #   The state of the store task (`InProgress`, `Completed`, or
+    #   `Failed`).
+    #   @return [String]
+    #
+    # @!attribute [rw] store_task_failure_reason
+    #   If the tasks fails, the reason for the failure is returned. If the
+    #   task succeeds, `null` is returned.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/StoreImageTaskResult AWS API Documentation
+    #
+    class StoreImageTaskResult < Struct.new(
+      :ami_id,
+      :task_start_time,
+      :bucket,
+      :s3object_key,
+      :progress_percentage,
+      :store_task_state,
+      :store_task_failure_reason)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # Describes a subnet.
     #
     # @!attribute [rw] availability_zone
@@ -53727,23 +54486,23 @@ module Aws::EC2
     #   data as a hash:
     #
     #       {
-    #         ipv_6_addresses: ["String"], # required
     #         network_interface_id: "NetworkInterfaceId", # required
+    #         ipv_6_addresses: ["String"], # required
     #       }
     #
-    # @!attribute [rw] ipv_6_addresses
-    #   The IPv6 addresses to unassign from the network interface.
-    #   @return [Array<String>]
-    #
     # @!attribute [rw] network_interface_id
     #   The ID of the network interface.
     #   @return [String]
     #
+    # @!attribute [rw] ipv_6_addresses
+    #   The IPv6 addresses to unassign from the network interface.
+    #   @return [Array<String>]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/UnassignIpv6AddressesRequest AWS API Documentation
     #
     class UnassignIpv6AddressesRequest < Struct.new(
-      :ipv_6_addresses,
-      :network_interface_id)
+      :network_interface_id,
+      :ipv_6_addresses)
       SENSITIVE = []
       include Aws::Structure
     end