aws-sdk-ec2 1.355.0 → 1.357.0

data/lib/aws-sdk-ec2/types.rb

@@ -301,7 +301,7 @@ module Aws::EC2
     #   @return [String]
     #
     # @!attribute [rw] vpc_endpoint_ids
-    #   The IDs of one or more interface VPC endpoints.
+    #   The IDs of the interface VPC endpoints.
     #   @return [Array<String>]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/AcceptVpcEndpointConnectionsRequest AWS API Documentation
@@ -2947,9 +2947,10 @@ module Aws::EC2
     #   @return [String]
     #
     # @!attribute [rw] from_port
-    #   The start of port range for the TCP and UDP protocols, or an ICMP
-    #   type number. For the ICMP type number, use `-1` to specify all
-    #   types. If you specify all ICMP types, you must specify all codes.
+    #   If the protocol is TCP or UDP, this is the start of the port range.
+    #   If the protocol is ICMP, this is the type number. A value of -1
+    #   indicates all ICMP types. If you specify all ICMP types, you must
+    #   specify all ICMP codes.
     #
     #   Alternatively, use a set of IP permissions to specify multiple rules
     #   and a description for the rule.
@@ -3011,9 +3012,10 @@ module Aws::EC2
     #   @return [String]
     #
     # @!attribute [rw] to_port
-    #   The end of port range for the TCP and UDP protocols, or an ICMP code
-    #   number. For the ICMP code number, use `-1` to specify all codes. If
-    #   you specify all ICMP types, you must specify all codes.
+    #   If the protocol is TCP or UDP, this is the end of the port range. If
+    #   the protocol is ICMP, this is the code. A value of -1 indicates all
+    #   ICMP codes. If you specify all ICMP types, you must specify all ICMP
+    #   codes.
     #
     #   Alternatively, use a set of IP permissions to specify multiple rules
     #   and a description for the rule.
@@ -5719,7 +5721,7 @@ module Aws::EC2
     #   snapshot. The default KMS key for Amazon EBS is used unless you
     #   specify a non-default Key Management Service (KMS) KMS key using
     #   `KmsKeyId`. For more information, see [Amazon EBS encryption][1] in
-    #   the *Amazon Elastic Compute Cloud User Guide*.
+    #   the *Amazon EC2 User Guide*.
     #
     #
     #
@@ -5774,8 +5776,7 @@ module Aws::EC2
     #   Region, from one Outpost to another, or within the same Outpost.
     #
     #   For more information, see [ Copy AMIs from an Amazon Web Services
-    #   Region to an Outpost][1] in the *Amazon Elastic Compute Cloud User
-    #   Guide*.
+    #   Region to an Outpost][1] in the *Amazon EC2 User Guide*.
     #
     #
     #
@@ -6428,8 +6429,8 @@ module Aws::EC2
     #   client IP addresses. The address range cannot overlap with the local
     #   CIDR of the VPC in which the associated subnet is located, or the
     #   routes that you add manually. The address range cannot be changed
-    #   after the Client VPN endpoint has been created. The CIDR block
-    #   should be /22 or greater.
+    #   after the Client VPN endpoint has been created. Client CIDR range
+    #   must have a size of at least /22 and must not be greater than /12.
     #   @return [String]
     #
     # @!attribute [rw] server_certificate_arn
@@ -11574,8 +11575,8 @@ module Aws::EC2
     #   @return [String]
     #
     # @!attribute [rw] connection_events
-    #   One or more endpoint events for which to receive notifications.
-    #   Valid values are `Accept`, `Connect`, `Delete`, and `Reject`.
+    #   The endpoint events for which to receive notifications. Valid values
+    #   are `Accept`, `Connect`, `Delete`, and `Reject`.
     #   @return [Array<String>]
     #
     # @!attribute [rw] client_token
@@ -11619,8 +11620,6 @@ module Aws::EC2
       include Aws::Structure
     end
 
-    # Contains the parameters for CreateVpcEndpoint.
-    #
     # @!attribute [rw] dry_run
     #   Checks whether you have the required permissions for the action,
     #   without actually making the request, and provides an error response.
@@ -11635,13 +11634,11 @@ module Aws::EC2
     #   @return [String]
     #
     # @!attribute [rw] vpc_id
-    #   The ID of the VPC in which the endpoint will be used.
+    #   The ID of the VPC for the endpoint.
     #   @return [String]
     #
     # @!attribute [rw] service_name
-    #   The service name. To get a list of available services, use the
-    #   DescribeVpcEndpointServices request, or get the name from the
-    #   service provider.
+    #   The service name.
     #   @return [String]
     #
     # @!attribute [rw] policy_document
@@ -11652,18 +11649,19 @@ module Aws::EC2
     #   @return [String]
     #
     # @!attribute [rw] route_table_ids
-    #   (Gateway endpoint) One or more route table IDs.
+    #   (Gateway endpoint) The route table IDs.
     #   @return [Array<String>]
     #
     # @!attribute [rw] subnet_ids
-    #   (Interface and Gateway Load Balancer endpoints) The ID of one or
-    #   more subnets in which to create an endpoint network interface. For a
-    #   Gateway Load Balancer endpoint, you can specify one subnet only.
+    #   (Interface and Gateway Load Balancer endpoints) The IDs of the
+    #   subnets in which to create an endpoint network interface. For a
+    #   Gateway Load Balancer endpoint, you can specify only one subnet.
     #   @return [Array<String>]
     #
     # @!attribute [rw] security_group_ids
-    #   (Interface endpoint) The ID of one or more security groups to
-    #   associate with the endpoint network interface.
+    #   (Interface endpoint) The IDs of the security groups to associate
+    #   with the endpoint network interface. If this parameter is not
+    #   specified, we use the default security group for the VPC.
     #   @return [Array<String>]
     #
     # @!attribute [rw] ip_address_type
@@ -11725,8 +11723,6 @@ module Aws::EC2
       include Aws::Structure
     end
 
-    # Contains the output of CreateVpcEndpoint.
-    #
     # @!attribute [rw] vpc_endpoint
     #   Information about the endpoint.
     #   @return [Types::VpcEndpoint]
@@ -11763,13 +11759,11 @@ module Aws::EC2
     #   @return [String]
     #
     # @!attribute [rw] network_load_balancer_arns
-    #   The Amazon Resource Names (ARNs) of one or more Network Load
-    #   Balancers for your service.
+    #   The Amazon Resource Names (ARNs) of the Network Load Balancers.
     #   @return [Array<String>]
     #
     # @!attribute [rw] gateway_load_balancer_arns
-    #   The Amazon Resource Names (ARNs) of one or more Gateway Load
-    #   Balancers.
+    #   The Amazon Resource Names (ARNs) of the Gateway Load Balancers.
     #   @return [Array<String>]
     #
     # @!attribute [rw] supported_ip_address_types
@@ -12262,19 +12256,15 @@ module Aws::EC2
     #   @return [String]
     #
     # @!attribute [rw] metric
-    #   The aggregation metric used for the data query. Currently only
-    #   `aggregation-latency` is supported, indicating network latency.
+    #   The metric, `aggregation-latency`, indicating that network latency
+    #   is aggregated for the query. This is the only supported metric.
     #   @return [String]
     #
     # @!attribute [rw] statistic
-    #   Metric data aggregations over specified periods of time. The
-    #   following are the supported Infrastructure Performance statistics:
-    #
-    #   * `p50` - The median value of the metric aggregated over a specified
-    #     start and end time. For example, a metric of `five_minutes` is the
-    #     median of all the data points gathered within those five minutes.
-    #
-    #   ^
+    #   The metric data aggregation period, `p50`, between the specified
+    #   `startDate` and `endDate`. For example, a metric of `five_minutes`
+    #   is the median of all the data points gathered within those five
+    #   minutes. `p50` is the only supported metric.
     #   @return [String]
     #
     # @!attribute [rw] period
@@ -12311,9 +12301,9 @@ module Aws::EC2
     #   @return [String]
     #
     # @!attribute [rw] metric
-    #   The metric used for the network performance request. Currently only
-    #   `aggregate-latency` is supported, showing network latency during a
-    #   specified period.
+    #   The metric used for the network performance request. Only
+    #   `aggregate-latency` is supported, which shows network latency during
+    #   a specified period.
     #   @return [String]
     #
     # @!attribute [rw] statistic
@@ -14597,7 +14587,7 @@ module Aws::EC2
     #   @return [Boolean]
     #
     # @!attribute [rw] connection_notification_ids
-    #   One or more notification IDs.
+    #   The IDs of the notifications.
     #   @return [Array<String>]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/DeleteVpcEndpointConnectionNotificationsRequest AWS API Documentation
@@ -14630,7 +14620,7 @@ module Aws::EC2
     #   @return [Boolean]
     #
     # @!attribute [rw] service_ids
-    #   The IDs of one or more services.
+    #   The IDs of the services.
     #   @return [Array<String>]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/DeleteVpcEndpointServiceConfigurationsRequest AWS API Documentation
@@ -14655,8 +14645,6 @@ module Aws::EC2
       include Aws::Structure
     end
 
-    # Contains the parameters for DeleteVpcEndpoints.
-    #
     # @!attribute [rw] dry_run
     #   Checks whether you have the required permissions for the action,
     #   without actually making the request, and provides an error response.
@@ -14665,7 +14653,7 @@ module Aws::EC2
     #   @return [Boolean]
     #
     # @!attribute [rw] vpc_endpoint_ids
-    #   One or more VPC endpoint IDs.
+    #   The IDs of the VPC endpoints.
     #   @return [Array<String>]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/DeleteVpcEndpointsRequest AWS API Documentation
@@ -14677,8 +14665,6 @@ module Aws::EC2
       include Aws::Structure
     end
 
-    # Contains the output of DeleteVpcEndpoints.
-    #
     # @!attribute [rw] unsuccessful
     #   Information about the VPC endpoints that were not successfully
     #   deleted.
@@ -18031,6 +18017,16 @@ module Aws::EC2
     #   `DryRunOperation`. Otherwise, it is `UnauthorizedOperation`.
     #   @return [Boolean]
     #
+    # @!attribute [rw] max_results
+    #   The maximum number of results to return with a single call. To
+    #   retrieve the remaining results, make another call with the returned
+    #   `nextToken` value.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] next_token
+    #   The token for the next page of results.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/DescribeImagesRequest AWS API Documentation
     #
     class DescribeImagesRequest < Struct.new(
@@ -18039,7 +18035,9 @@ module Aws::EC2
       :image_ids,
       :owners,
       :include_deprecated,
-      :dry_run)
+      :dry_run,
+      :max_results,
+      :next_token)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -18048,10 +18046,16 @@ module Aws::EC2
     #   Information about the images.
     #   @return [Array<Types::Image>]
     #
+    # @!attribute [rw] next_token
+    #   The token to use to retrieve the next page of results. This value is
+    #   `null` when there are no more results to return.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/DescribeImagesResult AWS API Documentation
     #
     class DescribeImagesResult < Struct.new(
-      :images)
+      :images,
+      :next_token)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -18865,12 +18869,16 @@ module Aws::EC2
     #   * `metadata-options.http-tokens` - The metadata request
     #     authorization state (`optional` \| `required`)
     #
-    #   * `metadata-options.http-put-response-hop-limit` - The http metadata
+    #   * `metadata-options.http-put-response-hop-limit` - The HTTP metadata
     #     request put response hop limit (integer, possible values `1` to
     #     `64`)
     #
-    #   * `metadata-options.http-endpoint` - Enable or disable metadata
-    #     access on http endpoint (`enabled` \| `disabled`)
+    #   * `metadata-options.http-endpoint` - The status of access to the
+    #     HTTP metadata endpoint on your instance (`enabled` \| `disabled`)
+    #
+    #   * `metadata-options.instance-metadata-tags` - The status of access
+    #     to instance tags from the instance metadata (`enabled` \|
+    #     `disabled`)
     #
     #   * `monitoring-state` - Indicates whether detailed monitoring is
     #     enabled (`disabled` \| `enabled`).
@@ -25173,7 +25181,7 @@ module Aws::EC2
     #   @return [String]
     #
     # @!attribute [rw] filters
-    #   One or more filters.
+    #   The filters.
     #
     #   * `connection-notification-arn` - The ARN of the SNS topic for the
     #     notification.
@@ -25214,7 +25222,7 @@ module Aws::EC2
     end
 
     # @!attribute [rw] connection_notification_set
-    #   One or more notifications.
+    #   The notifications.
     #   @return [Array<Types::ConnectionNotification>]
     #
     # @!attribute [rw] next_token
@@ -25239,7 +25247,7 @@ module Aws::EC2
     #   @return [Boolean]
     #
     # @!attribute [rw] filters
-    #   One or more filters.
+    #   The filters.
     #
     #   * `ip-address-type` - The IP address type (`ipv4` \| `ipv6`).
     #
@@ -25279,7 +25287,7 @@ module Aws::EC2
     end
 
     # @!attribute [rw] vpc_endpoint_connections
-    #   Information about one or more VPC endpoint connections.
+    #   Information about the VPC endpoint connections.
     #   @return [Array<Types::VpcEndpointConnection>]
     #
     # @!attribute [rw] next_token
@@ -25304,11 +25312,11 @@ module Aws::EC2
     #   @return [Boolean]
     #
     # @!attribute [rw] service_ids
-    #   The IDs of one or more services.
+    #   The IDs of the endpoint services.
     #   @return [Array<String>]
     #
     # @!attribute [rw] filters
-    #   One or more filters.
+    #   The filters.
     #
     #   * `service-name` - The name of the service.
     #
@@ -25356,7 +25364,7 @@ module Aws::EC2
     end
 
     # @!attribute [rw] service_configurations
-    #   Information about one or more services.
+    #   Information about the services.
     #   @return [Array<Types::ServiceConfiguration>]
     #
     # @!attribute [rw] next_token
@@ -25385,7 +25393,7 @@ module Aws::EC2
     #   @return [String]
     #
     # @!attribute [rw] filters
-    #   One or more filters.
+    #   The filters.
     #
     #   * `principal` - The ARN of the principal.
     #
@@ -25418,7 +25426,7 @@ module Aws::EC2
     end
 
     # @!attribute [rw] allowed_principals
-    #   Information about one or more allowed principals.
+    #   Information about the allowed principals.
     #   @return [Array<Types::AllowedPrincipal>]
     #
     # @!attribute [rw] next_token
@@ -25435,8 +25443,6 @@ module Aws::EC2
       include Aws::Structure
     end
 
-    # Contains the parameters for DescribeVpcEndpointServices.
-    #
     # @!attribute [rw] dry_run
     #   Checks whether you have the required permissions for the action,
     #   without actually making the request, and provides an error response.
@@ -25445,11 +25451,11 @@ module Aws::EC2
     #   @return [Boolean]
     #
     # @!attribute [rw] service_names
-    #   One or more service names.
+    #   The service names.
     #   @return [Array<String>]
     #
     # @!attribute [rw] filters
-    #   One or more filters.
+    #   The filters.
     #
     #   * `owner` - The ID or alias of the Amazon Web Services account that
     #     owns the service.
@@ -25499,10 +25505,8 @@ module Aws::EC2
       include Aws::Structure
     end
 
-    # Contains the output of DescribeVpcEndpointServices.
-    #
     # @!attribute [rw] service_names
-    #   A list of supported services.
+    #   The supported services.
     #   @return [Array<String>]
     #
     # @!attribute [rw] service_details
@@ -25524,8 +25528,6 @@ module Aws::EC2
       include Aws::Structure
     end
 
-    # Contains the parameters for DescribeVpcEndpoints.
-    #
     # @!attribute [rw] dry_run
     #   Checks whether you have the required permissions for the action,
     #   without actually making the request, and provides an error response.
@@ -25534,11 +25536,11 @@ module Aws::EC2
     #   @return [Boolean]
     #
     # @!attribute [rw] vpc_endpoint_ids
-    #   One or more endpoint IDs.
+    #   The IDs of the VPC endpoints.
     #   @return [Array<String>]
     #
     # @!attribute [rw] filters
-    #   One or more filters.
+    #   The filters.
     #
     #   * `ip-address-type` - The IP address type (`ipv4` \| `ipv6`).
     #
@@ -25592,8 +25594,6 @@ module Aws::EC2
       include Aws::Structure
     end
 
-    # Contains the output of DescribeVpcEndpoints.
-    #
     # @!attribute [rw] vpc_endpoints
     #   Information about the endpoints.
     #   @return [Array<Types::VpcEndpoint>]
@@ -30826,6 +30826,7 @@ module Aws::EC2
     #   @return [Boolean]
     #
     # @!attribute [rw] instance_types
+    #   The instance types supported by the AFI.
     #   @return [Array<String>]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/FpgaImage AWS API Documentation
@@ -33831,7 +33832,7 @@ module Aws::EC2
     # @!attribute [rw] platform_details
     #   The platform details associated with the billing code of the AMI.
     #   For more information, see [Understand AMI billing information][1] in
-    #   the *Amazon Elastic Compute Cloud User Guide*.
+    #   the *Amazon EC2 User Guide*.
     #
     #
     #
@@ -33924,7 +33925,7 @@ module Aws::EC2
     #
     # @!attribute [rw] boot_mode
     #   The boot mode of the image. For more information, see [Boot
-    #   modes][1] in the *Amazon Elastic Compute Cloud User Guide*.
+    #   modes][1] in the *Amazon EC2 User Guide*.
     #
     #
     #
@@ -33933,8 +33934,8 @@ module Aws::EC2
     #
     # @!attribute [rw] tpm_support
     #   If the image is configured for NitroTPM support, the value is
-    #   `v2.0`. For more information, see [NitroTPM][1] in the *Amazon
-    #   Elastic Compute Cloud User Guide*.
+    #   `v2.0`. For more information, see [NitroTPM][1] in the *Amazon EC2
+    #   User Guide*.
     #
     #
     #
@@ -33953,8 +33954,8 @@ module Aws::EC2
     #   automatically set to `required` so that, by default, the instance
     #   requires that IMDSv2 is used when requesting instance metadata. In
     #   addition, `HttpPutResponseHopLimit` is set to `2`. For more
-    #   information, see [Configure the AMI][1] in the *Amazon Elastic
-    #   Compute Cloud User Guide*.
+    #   information, see [Configure the AMI][1] in the *Amazon EC2 User
+    #   Guide*.
     #
     #
     #
@@ -34047,7 +34048,7 @@ module Aws::EC2
     #   retrieve the UEFI data, use the [GetInstanceUefiData][1] command.
     #   You can inspect and modify the UEFI data by using the
     #   [python-uefivars tool][2] on GitHub. For more information, see [UEFI
-    #   Secure Boot][3] in the *Amazon Elastic Compute Cloud User Guide*.
+    #   Secure Boot][3] in the *Amazon EC2 User Guide*.
     #
     #
     #
@@ -34077,8 +34078,8 @@ module Aws::EC2
     #   automatically set to `required` so that, by default, the instance
     #   requires that IMDSv2 is used when requesting instance metadata. In
     #   addition, `HttpPutResponseHopLimit` is set to `2`. For more
-    #   information, see [Configure the AMI][1] in the *Amazon Elastic
-    #   Compute Cloud User Guide*.
+    #   information, see [Configure the AMI][1] in the *Amazon EC2 User
+    #   Guide*.
     #
     #
     #
@@ -36092,19 +36093,21 @@ module Aws::EC2
     # The metadata options for the instance.
     #
     # @!attribute [rw] http_tokens
-    #   The state of token usage for your instance metadata requests.
-    #
-    #   If the state is `optional`, you can choose to retrieve instance
-    #   metadata with or without a session token on your request. If you
-    #   retrieve the IAM role credentials without a token, the version 1.0
-    #   role credentials are returned. If you retrieve the IAM role
-    #   credentials using a valid session token, the version 2.0 role
-    #   credentials are returned.
-    #
-    #   If the state is `required`, you must send a session token with any
-    #   instance metadata retrieval requests. In this state, retrieving the
-    #   IAM role credentials always returns the version 2.0 credentials; the
-    #   version 1.0 credentials are not available.
+    #   IMDSv2 uses token-backed sessions. Set the use of HTTP tokens to
+    #   `optional` (in other words, set the use of IMDSv2 to `optional`) or
+    #   `required` (in other words, set the use of IMDSv2 to `required`).
+    #
+    #   * `optional` - When IMDSv2 is optional, you can choose to retrieve
+    #     instance metadata with or without a session token in your request.
+    #     If you retrieve the IAM role credentials without a token, the
+    #     IMDSv1 role credentials are returned. If you retrieve the IAM role
+    #     credentials using a valid session token, the IMDSv2 role
+    #     credentials are returned.
+    #
+    #   * `required` - When IMDSv2 is required, you must send a session
+    #     token with any instance metadata retrieval requests. In this
+    #     state, retrieving the IAM role credentials always returns IMDSv2
+    #     credentials; IMDSv1 credentials are not available.
     #
     #   Default: `optional`
     #   @return [String]
@@ -36171,19 +36174,22 @@ module Aws::EC2
     #   @return [String]
     #
     # @!attribute [rw] http_tokens
-    #   The state of token usage for your instance metadata requests.
-    #
-    #   If the state is `optional`, you can choose to retrieve instance
-    #   metadata with or without a session token on your request. If you
-    #   retrieve the IAM role credentials without a token, the version 1.0
-    #   role credentials are returned. If you retrieve the IAM role
-    #   credentials using a valid session token, the version 2.0 role
-    #   credentials are returned.
-    #
-    #   If the state is `required`, you must send a session token with any
-    #   instance metadata retrieval requests. In this state, retrieving the
-    #   IAM role credentials always returns the version 2.0 credentials; the
-    #   version 1.0 credentials are not available.
+    #   IMDSv2 uses token-backed sessions. Indicates whether the use of HTTP
+    #   tokens is `optional` (in other words, indicates whether the use of
+    #   IMDSv2 is `optional`) or `required` (in other words, indicates
+    #   whether the use of IMDSv2 is `required`).
+    #
+    #   * `optional` - When IMDSv2 is optional, you can choose to retrieve
+    #     instance metadata with or without a session token in your request.
+    #     If you retrieve the IAM role credentials without a token, the
+    #     IMDSv1 role credentials are returned. If you retrieve the IAM role
+    #     credentials using a valid session token, the IMDSv2 role
+    #     credentials are returned.
+    #
+    #   * `required` - When IMDSv2 is required, you must send a session
+    #     token with any instance metadata retrieval requests. In this
+    #     state, retrieving the IAM role credentials always returns IMDSv2
+    #     credentials; IMDSv1 credentials are not available.
     #
     #   Default: `optional`
     #   @return [String]
@@ -38045,10 +38051,10 @@ module Aws::EC2
     # Describes a set of permissions for a security group rule.
     #
     # @!attribute [rw] from_port
-    #   The start of port range for the TCP and UDP protocols, or an
-    #   ICMP/ICMPv6 type number. A value of `-1` indicates all ICMP/ICMPv6
-    #   types. If you specify all ICMP/ICMPv6 types, you must specify all
-    #   codes.
+    #   If the protocol is TCP or UDP, this is the start of the port range.
+    #   If the protocol is ICMP or ICMPv6, this is the type number. A value
+    #   of -1 indicates all ICMP/ICMPv6 types. If you specify all
+    #   ICMP/ICMPv6 types, you must specify all ICMP/ICMPv6 codes.
     #   @return [Integer]
     #
     # @!attribute [rw] ip_protocol
@@ -38081,9 +38087,10 @@ module Aws::EC2
     #   @return [Array<Types::PrefixListId>]
     #
     # @!attribute [rw] to_port
-    #   The end of port range for the TCP and UDP protocols, or an
-    #   ICMP/ICMPv6 code. A value of `-1` indicates all ICMP/ICMPv6 codes.
-    #   If you specify all ICMP/ICMPv6 types, you must specify all codes.
+    #   If the protocol is TCP or UDP, this is the end of the port range. If
+    #   the protocol is ICMP or ICMPv6, this is the code. A value of -1
+    #   indicates all ICMP/ICMPv6 codes. If you specify all ICMP/ICMPv6
+    #   types, you must specify all ICMP/ICMPv6 codes.
     #   @return [Integer]
     #
     # @!attribute [rw] user_id_group_pairs
@@ -39968,21 +39975,21 @@ module Aws::EC2
     #   @return [String]
     #
     # @!attribute [rw] http_tokens
-    #   The state of token usage for your instance metadata requests. If the
-    #   parameter is not specified in the request, the default state is
-    #   `optional`.
+    #   Indicates whether IMDSv2 is `optional` or `required`.
     #
-    #   If the state is `optional`, you can choose to retrieve instance
-    #   metadata with or without a signed token header on your request. If
-    #   you retrieve the IAM role credentials without a token, the version
-    #   1.0 role credentials are returned. If you retrieve the IAM role
-    #   credentials using a valid signed token, the version 2.0 role
-    #   credentials are returned.
+    #   `optional` - When IMDSv2 is optional, you can choose to retrieve
+    #   instance metadata with or without a session token in your request.
+    #   If you retrieve the IAM role credentials without a token, the IMDSv1
+    #   role credentials are returned. If you retrieve the IAM role
+    #   credentials using a valid session token, the IMDSv2 role credentials
+    #   are returned.
+    #
+    #   `required` - When IMDSv2 is required, you must send a session token
+    #   with any instance metadata retrieval requests. In this state,
+    #   retrieving the IAM role credentials always returns IMDSv2
+    #   credentials; IMDSv1 credentials are not available.
     #
-    #   If the state is `required`, you must send a signed token header with
-    #   any instance metadata retrieval requests. In this state, retrieving
-    #   the IAM role credentials always returns the version 2.0 credentials;
-    #   the version 1.0 credentials are not available.
+    #   Default: `optional`
     #   @return [String]
     #
     # @!attribute [rw] http_put_response_hop_limit
@@ -40047,21 +40054,23 @@ module Aws::EC2
     # [1]: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-metadata.html
     #
     # @!attribute [rw] http_tokens
-    #   The state of token usage for your instance metadata requests. If the
-    #   parameter is not specified in the request, the default state is
-    #   `optional`.
+    #   IMDSv2 uses token-backed sessions. Set the use of HTTP tokens to
+    #   `optional` (in other words, set the use of IMDSv2 to `optional`) or
+    #   `required` (in other words, set the use of IMDSv2 to `required`).
+    #
+    #   * `optional` - When IMDSv2 is optional, you can choose to retrieve
+    #     instance metadata with or without a session token in your request.
+    #     If you retrieve the IAM role credentials without a token, the
+    #     IMDSv1 role credentials are returned. If you retrieve the IAM role
+    #     credentials using a valid session token, the IMDSv2 role
+    #     credentials are returned.
+    #
+    #   * `required` - When IMDSv2 is required, you must send a session
+    #     token with any instance metadata retrieval requests. In this
+    #     state, retrieving the IAM role credentials always returns IMDSv2
+    #     credentials; IMDSv1 credentials are not available.
     #
-    #   If the state is `optional`, you can choose to retrieve instance
-    #   metadata with or without a signed token header on your request. If
-    #   you retrieve the IAM role credentials without a token, the version
-    #   1.0 role credentials are returned. If you retrieve the IAM role
-    #   credentials using a valid signed token, the version 2.0 role
-    #   credentials are returned.
-    #
-    #   If the state is `required`, you must send a signed token header with
-    #   any instance metadata retrieval requests. In this state, retrieving
-    #   the IAM role credentials always returns the version 2.0 credentials;
-    #   the version 1.0 credentials are not available.
+    #   Default: `optional`
     #   @return [String]
     #
     # @!attribute [rw] http_put_response_hop_limit
@@ -41640,7 +41649,7 @@ module Aws::EC2
       include Aws::Structure
     end
 
-    # Indicates whether the network was healthy or unhealthy at a particular
+    # Indicates whether the network was healthy or degraded at a particular
     # point. The value is aggregated from the `startDate` to the `endDate`.
     # Currently only `five_minutes` is supported.
     #
@@ -42909,21 +42918,23 @@ module Aws::EC2
     #   @return [String]
     #
     # @!attribute [rw] http_tokens
-    #   The state of token usage for your instance metadata requests. If the
-    #   parameter is not specified in the request, the default state is
-    #   `optional`.
+    #   IMDSv2 uses token-backed sessions. Set the use of HTTP tokens to
+    #   `optional` (in other words, set the use of IMDSv2 to `optional`) or
+    #   `required` (in other words, set the use of IMDSv2 to `required`).
+    #
+    #   * `optional` - When IMDSv2 is optional, you can choose to retrieve
+    #     instance metadata with or without a session token in your request.
+    #     If you retrieve the IAM role credentials without a token, the
+    #     IMDSv1 role credentials are returned. If you retrieve the IAM role
+    #     credentials using a valid session token, the IMDSv2 role
+    #     credentials are returned.
+    #
+    #   * `required` - When IMDSv2 is required, you must send a session
+    #     token with any instance metadata retrieval requests. In this
+    #     state, retrieving the IAM role credentials always returns IMDSv2
+    #     credentials; IMDSv1 credentials are not available.
     #
-    #   If the state is `optional`, you can choose to retrieve instance
-    #   metadata with or without a session token on your request. If you
-    #   retrieve the IAM role credentials without a token, the version 1.0
-    #   role credentials are returned. If you retrieve the IAM role
-    #   credentials using a valid session token, the version 2.0 role
-    #   credentials are returned.
-    #
-    #   If the state is `required`, you must send a session token with any
-    #   instance metadata retrieval requests. In this state, retrieving the
-    #   IAM role credentials always returns the version 2.0 credentials; the
-    #   version 1.0 credentials are not available.
+    #   Default: `optional`
     #   @return [String]
     #
     # @!attribute [rw] http_put_response_hop_limit
@@ -45042,8 +45053,8 @@ module Aws::EC2
     #   @return [String]
     #
     # @!attribute [rw] connection_events
-    #   One or more events for the endpoint. Valid values are `Accept`,
-    #   `Connect`, `Delete`, and `Reject`.
+    #   The events for the endpoint. Valid values are `Accept`, `Connect`,
+    #   `Delete`, and `Reject`.
     #   @return [Array<String>]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/ModifyVpcEndpointConnectionNotificationRequest AWS API Documentation
@@ -45070,8 +45081,6 @@ module Aws::EC2
       include Aws::Structure
     end
 
-    # Contains the parameters for ModifyVpcEndpoint.
-    #
     # @!attribute [rw] dry_run
     #   Checks whether you have the required permissions for the action,
     #   without actually making the request, and provides an error response.
@@ -45096,33 +45105,33 @@ module Aws::EC2
     #   @return [String]
     #
     # @!attribute [rw] add_route_table_ids
-    #   (Gateway endpoint) One or more route tables IDs to associate with
-    #   the endpoint.
+    #   (Gateway endpoint) The IDs of the route tables to associate with the
+    #   endpoint.
     #   @return [Array<String>]
     #
     # @!attribute [rw] remove_route_table_ids
-    #   (Gateway endpoint) One or more route table IDs to disassociate from
+    #   (Gateway endpoint) The IDs of the route tables to disassociate from
     #   the endpoint.
     #   @return [Array<String>]
     #
     # @!attribute [rw] add_subnet_ids
-    #   (Interface and Gateway Load Balancer endpoints) One or more subnet
-    #   IDs in which to serve the endpoint. For a Gateway Load Balancer
+    #   (Interface and Gateway Load Balancer endpoints) The IDs of the
+    #   subnets in which to serve the endpoint. For a Gateway Load Balancer
     #   endpoint, you can specify only one subnet.
     #   @return [Array<String>]
     #
     # @!attribute [rw] remove_subnet_ids
-    #   (Interface endpoint) One or more subnets IDs in which to remove the
+    #   (Interface endpoint) The IDs of the subnets from which to remove the
     #   endpoint.
     #   @return [Array<String>]
     #
     # @!attribute [rw] add_security_group_ids
-    #   (Interface endpoint) One or more security group IDs to associate
+    #   (Interface endpoint) The IDs of the security groups to associate
     #   with the network interface.
     #   @return [Array<String>]
     #
     # @!attribute [rw] remove_security_group_ids
-    #   (Interface endpoint) One or more security group IDs to disassociate
+    #   (Interface endpoint) The IDs of the security groups to disassociate
     #   from the network interface.
     #   @return [Array<String>]
     #
@@ -45309,14 +45318,14 @@ module Aws::EC2
     #   @return [String]
     #
     # @!attribute [rw] add_allowed_principals
-    #   The Amazon Resource Names (ARN) of one or more principals.
-    #   Permissions are granted to the principals in this list. To grant
-    #   permissions to all principals, specify an asterisk (*).
+    #   The Amazon Resource Names (ARN) of the principals. Permissions are
+    #   granted to the principals in this list. To grant permissions to all
+    #   principals, specify an asterisk (*).
     #   @return [Array<String>]
     #
     # @!attribute [rw] remove_allowed_principals
-    #   The Amazon Resource Names (ARN) of one or more principals.
-    #   Permissions are revoked for principals in this list.
+    #   The Amazon Resource Names (ARN) of the principals. Permissions are
+    #   revoked for principals in this list.
     #   @return [Array<String>]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/ModifyVpcEndpointServicePermissionsRequest AWS API Documentation
@@ -49223,9 +49232,8 @@ module Aws::EC2
     #   If you create an AMI on an Outpost, then all backing snapshots must
     #   be on the same Outpost or in the Region of that Outpost. AMIs on an
     #   Outpost that include local snapshots can be used to launch instances
-    #   on the same Outpost only. For more information, [ Amazon EBS local
-    #   snapshots on Outposts][1] in the *Amazon Elastic Compute Cloud User
-    #   Guide*.
+    #   on the same Outpost only. For more information, [Amazon EBS local
+    #   snapshots on Outposts][1] in the *Amazon EC2 User Guide*.
     #
     #
     #
@@ -49265,8 +49273,19 @@ module Aws::EC2
     #
     # @!attribute [rw] billing_products
     #   The billing product codes. Your account must be authorized to
-    #   specify billing product codes. Otherwise, you can use the Amazon Web
-    #   Services Marketplace to bill for the use of an AMI.
+    #   specify billing product codes.
+    #
+    #   If your account is not authorized to specify billing product codes,
+    #   you can publish AMIs that include billable software and list them on
+    #   the Amazon Web Services Marketplace. You must first register as a
+    #   seller on the Amazon Web Services Marketplace. For more information,
+    #   see [Getting started as a seller][1] and [AMI-based products][2] in
+    #   the *Amazon Web Services Marketplace Seller Guide*.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/marketplace/latest/userguide/user-guide-for-sellers.html
+    #   [2]: https://docs.aws.amazon.com/marketplace/latest/userguide/ami-products.html
     #   @return [Array<String>]
     #
     # @!attribute [rw] ramdisk_id
@@ -49297,7 +49316,7 @@ module Aws::EC2
     #
     # @!attribute [rw] boot_mode
     #   The boot mode of the AMI. For more information, see [Boot modes][1]
-    #   in the *Amazon Elastic Compute Cloud User Guide*.
+    #   in the *Amazon EC2 User Guide*.
     #
     #
     #
@@ -49306,8 +49325,7 @@ module Aws::EC2
     #
     # @!attribute [rw] tpm_support
     #   Set to `v2.0` to enable Trusted Platform Module (TPM) support. For
-    #   more information, see [NitroTPM][1] in the *Amazon Elastic Compute
-    #   Cloud User Guide*.
+    #   more information, see [NitroTPM][1] in the *Amazon EC2 User Guide*.
     #
     #
     #
@@ -49319,7 +49337,7 @@ module Aws::EC2
     #   retrieve the UEFI data, use the [GetInstanceUefiData][1] command.
     #   You can inspect and modify the UEFI data by using the
     #   [python-uefivars tool][2] on GitHub. For more information, see [UEFI
-    #   Secure Boot][3] in the *Amazon Elastic Compute Cloud User Guide*.
+    #   Secure Boot][3] in the *Amazon EC2 User Guide*.
     #
     #
     #
@@ -49334,8 +49352,8 @@ module Aws::EC2
     #   automatically set to `required` so that, by default, the instance
     #   requires that IMDSv2 is used when requesting instance metadata. In
     #   addition, `HttpPutResponseHopLimit` is set to `2`. For more
-    #   information, see [Configure the AMI][1] in the *Amazon Elastic
-    #   Compute Cloud User Guide*.
+    #   information, see [Configure the AMI][1] in the *Amazon EC2 User
+    #   Guide*.
     #
     #   <note markdown="1"> If you set the value to `v2.0`, make sure that your AMI software can
     #   support IMDSv2.
@@ -49646,7 +49664,7 @@ module Aws::EC2
     #   @return [String]
     #
     # @!attribute [rw] vpc_endpoint_ids
-    #   The IDs of one or more VPC endpoints.
+    #   The IDs of the VPC endpoints.
     #   @return [Array<String>]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/RejectVpcEndpointConnectionsRequest AWS API Documentation
@@ -50627,7 +50645,8 @@ module Aws::EC2
     #
     # @!attribute [rw] disable_api_stop
     #   Indicates whether to enable the instance for stop protection. For
-    #   more information, see [Stop Protection][1].
+    #   more information, see [Stop protection][1] in the *Amazon Elastic
+    #   Compute Cloud User Guide*.
     #
     #
     #
@@ -51975,7 +51994,8 @@ module Aws::EC2
     #
     # @!attribute [rw] disable_api_stop
     #   Indicates whether the instance is enabled for stop protection. For
-    #   more information, see [Stop Protection][1].
+    #   more information, see [Stop protection][1] in the *Amazon Elastic
+    #   Compute Cloud User Guide*.
     #
     #
     #
@@ -52423,9 +52443,9 @@ module Aws::EC2
     #   @return [String]
     #
     # @!attribute [rw] from_port
-    #   The start of port range for the TCP and UDP protocols, or an ICMP
-    #   type number. For the ICMP type number, use `-1` to specify all ICMP
-    #   types.
+    #   If the protocol is TCP or UDP, this is the start of the port range.
+    #   If the protocol is ICMP, this is the type number. A value of -1
+    #   indicates all ICMP types.
     #   @return [Integer]
     #
     # @!attribute [rw] group_id
@@ -52476,9 +52496,9 @@ module Aws::EC2
     #   @return [String]
     #
     # @!attribute [rw] to_port
-    #   The end of port range for the TCP and UDP protocols, or an ICMP code
-    #   number. For the ICMP code number, use `-1` to specify all ICMP codes
-    #   for the ICMP type.
+    #   If the protocol is TCP or UDP, this is the end of the port range. If
+    #   the protocol is ICMP, this is the code. A value of -1 indicates all
+    #   ICMP codes.
     #   @return [Integer]
     #
     # @!attribute [rw] dry_run
@@ -52894,8 +52914,7 @@ module Aws::EC2
     #   @return [Array<String>]
     #
     # @!attribute [rw] security_groups
-    #   \[EC2-Classic, default VPC\] The names of the security groups. For a
-    #   nondefault VPC, you must use security group IDs instead.
+    #   \[EC2-Classic, default VPC\] The names of the security groups.
     #
     #   If you specify a network interface, you must specify any security
     #   groups as part of the network interface.
@@ -54303,15 +54322,17 @@ module Aws::EC2
     #   @return [String]
     #
     # @!attribute [rw] from_port
-    #   The start of port range for the TCP and UDP protocols, or an
-    #   ICMP/ICMPv6 type. A value of -1 indicates all ICMP/ICMPv6 types. If
-    #   you specify all ICMP/ICMPv6 types, you must specify all codes.
+    #   If the protocol is TCP or UDP, this is the start of the port range.
+    #   If the protocol is ICMP or ICMPv6, this is the type number. A value
+    #   of -1 indicates all ICMP/ICMPv6 types. If you specify all
+    #   ICMP/ICMPv6 types, you must specify all ICMP/ICMPv6 codes.
     #   @return [Integer]
     #
     # @!attribute [rw] to_port
-    #   The end of port range for the TCP and UDP protocols, or an
-    #   ICMP/ICMPv6 code. A value of `-1` indicates all ICMP/ICMPv6 codes.
-    #   If you specify all ICMP/ICMPv6 types, you must specify all codes.
+    #   If the protocol is TCP or UDP, this is the end of the port range. If
+    #   the protocol is ICMP or ICMPv6, this is the type number. A value of
+    #   -1 indicates all ICMP/ICMPv6 codes. If you specify all ICMP/ICMPv6
+    #   types, you must specify all ICMP/ICMPv6 codes.
     #   @return [Integer]
     #
     # @!attribute [rw] cidr_ipv_4
@@ -54409,15 +54430,17 @@ module Aws::EC2
     #   @return [String]
     #
     # @!attribute [rw] from_port
-    #   The start of port range for the TCP and UDP protocols, or an
-    #   ICMP/ICMPv6 type. A value of -1 indicates all ICMP/ICMPv6 types. If
-    #   you specify all ICMP/ICMPv6 types, you must specify all codes.
+    #   If the protocol is TCP or UDP, this is the start of the port range.
+    #   If the protocol is ICMP or ICMPv6, this is the type number. A value
+    #   of -1 indicates all ICMP/ICMPv6 types. If you specify all
+    #   ICMP/ICMPv6 types, you must specify all ICMP/ICMPv6 codes.
     #   @return [Integer]
     #
     # @!attribute [rw] to_port
-    #   The end of port range for the TCP and UDP protocols, or an
-    #   ICMP/ICMPv6 code. A value of `-1` indicates all ICMP/ICMPv6 codes.
-    #   If you specify all ICMP/ICMPv6 types, you must specify all codes.
+    #   If the protocol is TCP or UDP, this is the end of the port range. If
+    #   the protocol is ICMP or ICMPv6, this is the code. A value of -1
+    #   indicates all ICMP/ICMPv6 codes. If you specify all ICMP/ICMPv6
+    #   types, you must specify all ICMP/ICMPv6 codes.
     #   @return [Integer]
     #
     # @!attribute [rw] cidr_ipv_4
@@ -54562,7 +54585,7 @@ module Aws::EC2
     #   @return [String]
     #
     # @!attribute [rw] tags
-    #   Any tags assigned to the service.
+    #   The tags assigned to the service.
     #   @return [Array<Types::Tag>]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/ServiceConfiguration AWS API Documentation
@@ -54641,7 +54664,7 @@ module Aws::EC2
     #   @return [String]
     #
     # @!attribute [rw] tags
-    #   Any tags assigned to the service.
+    #   The tags assigned to the service.
     #   @return [Array<Types::Tag>]
     #
     # @!attribute [rw] private_dns_name_verification_state
@@ -55767,7 +55790,8 @@ module Aws::EC2
     #   @return [String]
     #
     # @!attribute [rw] target_capacity_unit_type
-    #   The unit for the target capacity.
+    #   The unit for the target capacity. `TargetCapacityUnitType` can only
+    #   be specified when `InstanceRequirements` is specified.
     #
     #   Default: `units` (translates to number of instances)
     #   @return [String]
@@ -56497,7 +56521,7 @@ module Aws::EC2
     #
     # @!attribute [rw] from_port
     #   The start of the port range for the TCP and UDP protocols, or an
-    #   ICMP type number. A value of `-1` indicates all ICMP types.
+    #   ICMP type number. A value of -1 indicates all ICMP types.
     #   @return [Integer]
     #
     # @!attribute [rw] ip_protocol
@@ -57385,7 +57409,8 @@ module Aws::EC2
     #   @return [String]
     #
     # @!attribute [rw] target_capacity_unit_type
-    #   The unit for the target capacity.
+    #   The unit for the target capacity. `TargetCapacityUnitType` can only
+    #   be specified when `InstanceRequirements` is specified.
     #
     #   Default: `units` (translates to number of instances)
     #   @return [String]
@@ -57443,7 +57468,8 @@ module Aws::EC2
     #   @return [String]
     #
     # @!attribute [rw] target_capacity_unit_type
-    #   The unit for the target capacity.
+    #   The unit for the target capacity. `TargetCapacityUnitType` can only
+    #   be specified when `InstanceRequirements` is specified.
     #
     #   Default: `units` (translates to number of instances)
     #   @return [String]
@@ -61512,7 +61538,7 @@ module Aws::EC2
     #   @return [String]
     #
     # @!attribute [rw] route_table_ids
-    #   (Gateway endpoint) One or more route tables associated with the
+    #   (Gateway endpoint) The IDs of the route tables associated with the
     #   endpoint.
     #   @return [Array<String>]
     #
@@ -61543,8 +61569,7 @@ module Aws::EC2
     #   @return [Boolean]
     #
     # @!attribute [rw] network_interface_ids
-    #   (Interface endpoint) One or more network interfaces for the
-    #   endpoint.
+    #   (Interface endpoint) The network interfaces for the endpoint.
     #   @return [Array<String>]
     #
     # @!attribute [rw] dns_entries
@@ -61556,7 +61581,7 @@ module Aws::EC2
     #   @return [Time]
     #
     # @!attribute [rw] tags
-    #   Any tags assigned to the endpoint.
+    #   The tags assigned to the endpoint.
     #   @return [Array<Types::Tag>]
     #
     # @!attribute [rw] owner_id