aws-sdk-ec2 1.362.0 → 1.364.0

data/lib/aws-sdk-ec2/client.rb

@@ -697,7 +697,7 @@ module Aws::EC2
     #   If you have the required permissions, the error response is
     #   `DryRunOperation`. Otherwise, it is `UnauthorizedOperation`.
     #
-    # @option params [String] :vpc_peering_connection_id
+    # @option params [required, String] :vpc_peering_connection_id
     #   The ID of the VPC peering connection. You must specify this parameter
     #   in the request.
     #
@@ -709,7 +709,7 @@ module Aws::EC2
     #
     #   resp = client.accept_vpc_peering_connection({
     #     dry_run: false,
-    #     vpc_peering_connection_id: "VpcPeeringConnectionIdWithResolver",
+    #     vpc_peering_connection_id: "VpcPeeringConnectionIdWithResolver", # required
     #   })
     #
     # @example Response structure
@@ -1454,6 +1454,68 @@ module Aws::EC2
       req.send_request(options)
     end
 
+    # Assigns one or more private IPv4 addresses to a private NAT gateway.
+    # For more information, see [Work with NAT gateways][1] in the *Amazon
+    # Virtual Private Cloud User Guide*.
+    #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com/vpc/latest/userguide/vpc-nat-gateway.html#nat-gateway-working-with
+    #
+    # @option params [required, String] :nat_gateway_id
+    #   The NAT gateway ID.
+    #
+    # @option params [Array<String>] :private_ip_addresses
+    #   The private IPv4 addresses you want to assign to the private NAT
+    #   gateway.
+    #
+    # @option params [Integer] :private_ip_address_count
+    #   The number of private IP addresses to assign to the NAT gateway. You
+    #   can't specify this parameter when also specifying private IP
+    #   addresses.
+    #
+    # @option params [Boolean] :dry_run
+    #   Checks whether you have the required permissions for the action,
+    #   without actually making the request, and provides an error response.
+    #   If you have the required permissions, the error response is
+    #   `DryRunOperation`. Otherwise, it is `UnauthorizedOperation`.
+    #
+    # @return [Types::AssignPrivateNatGatewayAddressResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::AssignPrivateNatGatewayAddressResult#nat_gateway_id #nat_gateway_id} => String
+    #   * {Types::AssignPrivateNatGatewayAddressResult#nat_gateway_addresses #nat_gateway_addresses} => Array&lt;Types::NatGatewayAddress&gt;
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.assign_private_nat_gateway_address({
+    #     nat_gateway_id: "NatGatewayId", # required
+    #     private_ip_addresses: ["String"],
+    #     private_ip_address_count: 1,
+    #     dry_run: false,
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.nat_gateway_id #=> String
+    #   resp.nat_gateway_addresses #=> Array
+    #   resp.nat_gateway_addresses[0].allocation_id #=> String
+    #   resp.nat_gateway_addresses[0].network_interface_id #=> String
+    #   resp.nat_gateway_addresses[0].private_ip #=> String
+    #   resp.nat_gateway_addresses[0].public_ip #=> String
+    #   resp.nat_gateway_addresses[0].association_id #=> String
+    #   resp.nat_gateway_addresses[0].is_primary #=> Boolean
+    #   resp.nat_gateway_addresses[0].failure_message #=> String
+    #   resp.nat_gateway_addresses[0].status #=> String, one of "assigning", "unassigning", "associating", "disassociating", "succeeded", "failed"
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/AssignPrivateNatGatewayAddress AWS API Documentation
+    #
+    # @overload assign_private_nat_gateway_address(params = {})
+    # @param [Hash] params ({})
+    def assign_private_nat_gateway_address(params = {}, options = {})
+      req = build_request(:assign_private_nat_gateway_address, params)
+      req.send_request(options)
+    end
+
     # Associates an Elastic IP address, or carrier IP address (for instances
     # that are in subnets in Wavelength Zones) with an instance or a network
     # interface. Before you can use an Elastic IP address, you must allocate
@@ -1771,10 +1833,10 @@ module Aws::EC2
     # [1]: https://docs.aws.amazon.com/enclaves/latest/user/nitro-enclave-refapp.html
     # [2]: https://docs.aws.amazon.com/enclaves/latest/user/nitro-enclave-refapp.html#add-policy
     #
-    # @option params [String] :certificate_arn
+    # @option params [required, String] :certificate_arn
     #   The ARN of the ACM certificate with which to associate the IAM role.
     #
-    # @option params [String] :role_arn
+    # @option params [required, String] :role_arn
     #   The ARN of the IAM role to associate with the ACM certificate. You can
     #   associate up to 16 IAM roles with an ACM certificate.
     #
@@ -1793,8 +1855,8 @@ module Aws::EC2
     # @example Request syntax with placeholder values
     #
     #   resp = client.associate_enclave_certificate_iam_role({
-    #     certificate_arn: "CertificateId",
-    #     role_arn: "RoleId",
+    #     certificate_arn: "CertificateId", # required
+    #     role_arn: "RoleId", # required
     #     dry_run: false,
     #   })
     #
@@ -1956,8 +2018,8 @@ module Aws::EC2
     end
 
     # Associates an IPAM resource discovery with an Amazon VPC IPAM. A
-    # resource discovery is an IPAM component that enables IPAM Service to
-    # manage and monitor resources that belong to the owning account.
+    # resource discovery is an IPAM component that enables IPAM to manage
+    # and monitor resources that belong to the owning account.
     #
     # @option params [Boolean] :dry_run
     #   A check for whether you have the required permissions for the action
@@ -2029,6 +2091,72 @@ module Aws::EC2
       req.send_request(options)
     end
 
+    # Associates Elastic IP addresses (EIPs) and private IPv4 addresses with
+    # a public NAT gateway. For more information, see [Work with NAT
+    # gateways][1] in the *Amazon Virtual Private Cloud User Guide*.
+    #
+    # By default, you can associate up to 2 Elastic IP addresses per public
+    # NAT gateway. You can increase the limit by requesting a quota
+    # adjustment. For more information, see [Elastic IP address quotas][2]
+    # in the *Amazon Virtual Private Cloud User Guide*.
+    #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com/vpc/latest/userguide/vpc-nat-gateway.html#nat-gateway-working-with
+    # [2]: https://docs.aws.amazon.com/vpc/latest/userguide/amazon-vpc-limits.html#vpc-limits-eips
+    #
+    # @option params [required, String] :nat_gateway_id
+    #   The NAT gateway ID.
+    #
+    # @option params [required, Array<String>] :allocation_ids
+    #   The allocation IDs of EIPs that you want to associate with your NAT
+    #   gateway.
+    #
+    # @option params [Array<String>] :private_ip_addresses
+    #   The private IPv4 addresses that you want to assign to the NAT gateway.
+    #
+    # @option params [Boolean] :dry_run
+    #   Checks whether you have the required permissions for the action,
+    #   without actually making the request, and provides an error response.
+    #   If you have the required permissions, the error response is
+    #   `DryRunOperation`. Otherwise, it is `UnauthorizedOperation`.
+    #
+    # @return [Types::AssociateNatGatewayAddressResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::AssociateNatGatewayAddressResult#nat_gateway_id #nat_gateway_id} => String
+    #   * {Types::AssociateNatGatewayAddressResult#nat_gateway_addresses #nat_gateway_addresses} => Array&lt;Types::NatGatewayAddress&gt;
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.associate_nat_gateway_address({
+    #     nat_gateway_id: "NatGatewayId", # required
+    #     allocation_ids: ["AllocationId"], # required
+    #     private_ip_addresses: ["String"],
+    #     dry_run: false,
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.nat_gateway_id #=> String
+    #   resp.nat_gateway_addresses #=> Array
+    #   resp.nat_gateway_addresses[0].allocation_id #=> String
+    #   resp.nat_gateway_addresses[0].network_interface_id #=> String
+    #   resp.nat_gateway_addresses[0].private_ip #=> String
+    #   resp.nat_gateway_addresses[0].public_ip #=> String
+    #   resp.nat_gateway_addresses[0].association_id #=> String
+    #   resp.nat_gateway_addresses[0].is_primary #=> Boolean
+    #   resp.nat_gateway_addresses[0].failure_message #=> String
+    #   resp.nat_gateway_addresses[0].status #=> String, one of "assigning", "unassigning", "associating", "disassociating", "succeeded", "failed"
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/AssociateNatGatewayAddress AWS API Documentation
+    #
+    # @overload associate_nat_gateway_address(params = {})
+    # @param [Hash] params ({})
+    def associate_nat_gateway_address(params = {}, options = {})
+      req = build_request(:associate_nat_gateway_address, params)
+      req.send_request(options)
+    end
+
     # Associates a subnet in your VPC or an internet gateway or virtual
     # private gateway attached to your VPC with a route table in your VPC.
     # This association causes traffic from the subnet or gateway to be
@@ -2153,14 +2281,14 @@ module Aws::EC2
     #
     # [1]: https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeTransitGatewayAttachments.html
     #
-    # @option params [String] :transit_gateway_multicast_domain_id
+    # @option params [required, String] :transit_gateway_multicast_domain_id
     #   The ID of the transit gateway multicast domain.
     #
-    # @option params [String] :transit_gateway_attachment_id
+    # @option params [required, String] :transit_gateway_attachment_id
     #   The ID of the transit gateway attachment to associate with the transit
     #   gateway multicast domain.
     #
-    # @option params [Array<String>] :subnet_ids
+    # @option params [required, Array<String>] :subnet_ids
     #   The IDs of the subnets to associate with the transit gateway multicast
     #   domain.
     #
@@ -2177,9 +2305,9 @@ module Aws::EC2
     # @example Request syntax with placeholder values
     #
     #   resp = client.associate_transit_gateway_multicast_domain({
-    #     transit_gateway_multicast_domain_id: "TransitGatewayMulticastDomainId",
-    #     transit_gateway_attachment_id: "TransitGatewayAttachmentId",
-    #     subnet_ids: ["SubnetId"],
+    #     transit_gateway_multicast_domain_id: "TransitGatewayMulticastDomainId", # required
+    #     transit_gateway_attachment_id: "TransitGatewayAttachmentId", # required
+    #     subnet_ids: ["SubnetId"], # required
     #     dry_run: false,
     #   })
     #
@@ -4595,7 +4723,7 @@ module Aws::EC2
     #     destination_region: "String",
     #     encrypted: false,
     #     kms_key_id: "KmsKeyId",
-    #     presigned_url: "String",
+    #     presigned_url: "CopySnapshotRequestPSU",
     #     source_region: "String", # required
     #     source_snapshot_id: "String", # required
     #     tag_specifications: [
@@ -6027,6 +6155,8 @@ module Aws::EC2
     #   target capacity of the EC2 Fleet is decreased below the current size
     #   of the EC2 Fleet.
     #
+    #   Supported only for fleets of type `maintain`.
+    #
     # @option params [required, Array<Types::FleetLaunchTemplateConfigRequest>] :launch_template_configs
     #   The configuration for the EC2 Fleet.
     #
@@ -7454,8 +7584,8 @@ module Aws::EC2
     end
 
     # Creates an IPAM resource discovery. A resource discovery is an IPAM
-    # component that enables IPAM Service to manage and monitor resources
-    # that belong to the owning account.
+    # component that enables IPAM to manage and monitor resources that
+    # belong to the owning account.
     #
     # @option params [Boolean] :dry_run
     #   A check for whether you have the required permissions for the action
@@ -9019,7 +9149,7 @@ module Aws::EC2
     #   `DryRunOperation`. Otherwise, it is `UnauthorizedOperation`.
     #
     # @option params [required, String] :subnet_id
-    #   The subnet in which to create the NAT gateway.
+    #   The ID of the subnet in which to create the NAT gateway.
     #
     # @option params [Array<Types::TagSpecification>] :tag_specifications
     #   The tags to assign to the NAT gateway.
@@ -9033,6 +9163,34 @@ module Aws::EC2
     #   provide an address, a private IPv4 address will be automatically
     #   assigned.
     #
+    # @option params [Array<String>] :secondary_allocation_ids
+    #   Secondary EIP allocation IDs. For more information about secondary
+    #   addresses, see [Create a NAT gateway][1] in the *Amazon Virtual
+    #   Private Cloud User Guide*.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/vpc/latest/userguide/vpc-nat-gateway.html#nat-gateway-creating
+    #
+    # @option params [Array<String>] :secondary_private_ip_addresses
+    #   Secondary private IPv4 addresses. For more information about secondary
+    #   addresses, see [Create a NAT gateway][1] in the *Amazon Virtual
+    #   Private Cloud User Guide*.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/vpc/latest/userguide/vpc-nat-gateway.html#nat-gateway-creating
+    #
+    # @option params [Integer] :secondary_private_ip_address_count
+    #   \[Private NAT gateway only\] The number of secondary private IPv4
+    #   addresses you want to assign to the NAT gateway. For more information
+    #   about secondary addresses, see [Create a NAT gateway][1] in the
+    #   *Amazon Virtual Private Cloud User Guide*.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/vpc/latest/userguide/vpc-nat-gateway.html#nat-gateway-creating
+    #
     # @return [Types::CreateNatGatewayResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::CreateNatGatewayResult#client_token #client_token} => String
@@ -9085,6 +9243,9 @@ module Aws::EC2
     #     ],
     #     connectivity_type: "private", # accepts private, public
     #     private_ip_address: "String",
+    #     secondary_allocation_ids: ["AllocationId"],
+    #     secondary_private_ip_addresses: ["String"],
+    #     secondary_private_ip_address_count: 1,
     #   })
     #
     # @example Response structure
@@ -9099,6 +9260,10 @@ module Aws::EC2
     #   resp.nat_gateway.nat_gateway_addresses[0].network_interface_id #=> String
     #   resp.nat_gateway.nat_gateway_addresses[0].private_ip #=> String
     #   resp.nat_gateway.nat_gateway_addresses[0].public_ip #=> String
+    #   resp.nat_gateway.nat_gateway_addresses[0].association_id #=> String
+    #   resp.nat_gateway.nat_gateway_addresses[0].is_primary #=> Boolean
+    #   resp.nat_gateway.nat_gateway_addresses[0].failure_message #=> String
+    #   resp.nat_gateway.nat_gateway_addresses[0].status #=> String, one of "assigning", "unassigning", "associating", "disassociating", "succeeded", "failed"
     #   resp.nat_gateway.nat_gateway_id #=> String
     #   resp.nat_gateway.provisioned_bandwidth.provision_time #=> Time
     #   resp.nat_gateway.provisioned_bandwidth.provisioned #=> String
@@ -13554,6 +13719,9 @@ module Aws::EC2
     #
     #   * Magnetic: `standard`
     #
+    #   Throughput Optimized HDD (`st1`) and Cold HDD (`sc1`) volumes can't
+    #   be used as boot volumes.
+    #
     #   For more information, see [Amazon EBS volume types][1] in the *Amazon
     #   Elastic Compute Cloud User Guide*.
     #
@@ -14344,7 +14512,7 @@ module Aws::EC2
     #   The ID of the VPC with which you are creating the VPC peering
     #   connection. You must specify this parameter in the request.
     #
-    # @option params [String] :vpc_id
+    # @option params [required, String] :vpc_id
     #   The ID of the requester VPC. You must specify this parameter in the
     #   request.
     #
@@ -14367,7 +14535,7 @@ module Aws::EC2
     #     dry_run: false,
     #     peer_owner_id: "String",
     #     peer_vpc_id: "String",
-    #     vpc_id: "VpcId",
+    #     vpc_id: "VpcId", # required
     #     peer_region: "String",
     #     tag_specifications: [
     #       {
@@ -15502,8 +15670,8 @@ module Aws::EC2
     end
 
     # Deletes an IPAM resource discovery. A resource discovery is an IPAM
-    # component that enables IPAM Service to manage and monitor resources
-    # that belong to the owning account.
+    # component that enables IPAM to manage and monitor resources that
+    # belong to the owning account.
     #
     # @option params [Boolean] :dry_run
     #   A check for whether you have the required permissions for the action
@@ -24794,8 +24962,8 @@ module Aws::EC2
     end
 
     # Describes IPAM resource discoveries. A resource discovery is an IPAM
-    # component that enables IPAM Service to manage and monitor resources
-    # that belong to the owning account.
+    # component that enables IPAM to manage and monitor resources that
+    # belong to the owning account.
     #
     # @option params [Boolean] :dry_run
     #   A check for whether you have the required permissions for the action
@@ -26542,6 +26710,10 @@ module Aws::EC2
     #   resp.nat_gateways[0].nat_gateway_addresses[0].network_interface_id #=> String
     #   resp.nat_gateways[0].nat_gateway_addresses[0].private_ip #=> String
     #   resp.nat_gateways[0].nat_gateway_addresses[0].public_ip #=> String
+    #   resp.nat_gateways[0].nat_gateway_addresses[0].association_id #=> String
+    #   resp.nat_gateways[0].nat_gateway_addresses[0].is_primary #=> Boolean
+    #   resp.nat_gateways[0].nat_gateway_addresses[0].failure_message #=> String
+    #   resp.nat_gateways[0].nat_gateway_addresses[0].status #=> String, one of "assigning", "unassigning", "associating", "disassociating", "succeeded", "failed"
     #   resp.nat_gateways[0].nat_gateway_id #=> String
     #   resp.nat_gateways[0].provisioned_bandwidth.provision_time #=> Time
     #   resp.nat_gateways[0].provisioned_bandwidth.provisioned #=> String
@@ -36935,11 +37107,11 @@ module Aws::EC2
     # used to encrypt the private key. This effectively revokes the role's
     # permission to use the certificate.
     #
-    # @option params [String] :certificate_arn
+    # @option params [required, String] :certificate_arn
     #   The ARN of the ACM certificate from which to disassociate the IAM
     #   role.
     #
-    # @option params [String] :role_arn
+    # @option params [required, String] :role_arn
     #   The ARN of the IAM role to disassociate.
     #
     # @option params [Boolean] :dry_run
@@ -36955,8 +37127,8 @@ module Aws::EC2
     # @example Request syntax with placeholder values
     #
     #   resp = client.disassociate_enclave_certificate_iam_role({
-    #     certificate_arn: "CertificateId",
-    #     role_arn: "RoleId",
+    #     certificate_arn: "CertificateId", # required
+    #     role_arn: "RoleId", # required
     #     dry_run: false,
     #   })
     #
@@ -37105,8 +37277,8 @@ module Aws::EC2
     end
 
     # Disassociates a resource discovery from an Amazon VPC IPAM. A resource
-    # discovery is an IPAM component that enables IPAM Service to manage and
-    # monitor resources that belong to the owning account.
+    # discovery is an IPAM component that enables IPAM to manage and monitor
+    # resources that belong to the owning account.
     #
     # @option params [Boolean] :dry_run
     #   A check for whether you have the required permissions for the action
@@ -37153,6 +37325,80 @@ module Aws::EC2
       req.send_request(options)
     end
 
+    # Disassociates secondary Elastic IP addresses (EIPs) from a public NAT
+    # gateway. You cannot disassociate your primary EIP. For more
+    # information, see [Edit secondary IP address associations][1] in the
+    # *Amazon Virtual Private Cloud User Guide*.
+    #
+    # While disassociating is in progress, you cannot associate/disassociate
+    # additional EIPs while the connections are being drained. You are,
+    # however, allowed to delete the NAT gateway.
+    #
+    # An EIP will only be released at the end of MaxDrainDurationSeconds.
+    # The EIPs stay associated and support the existing connections but do
+    # not support any new connections (new connections are distributed
+    # across the remaining associated EIPs). As the existing connections
+    # drain out, the EIPs (and the corresponding private IPs mapped to them)
+    # get released.
+    #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com/vpc/latest/userguide/vpc-nat-gateway.html#nat-gateway-edit-secondary
+    #
+    # @option params [required, String] :nat_gateway_id
+    #   The NAT gateway ID.
+    #
+    # @option params [required, Array<String>] :association_ids
+    #   The association IDs of EIPs that have been associated with the NAT
+    #   gateway.
+    #
+    # @option params [Integer] :max_drain_duration_seconds
+    #   The maximum amount of time to wait (in seconds) before forcibly
+    #   releasing the IP addresses if connections are still in progress.
+    #   Default value is 350 seconds.
+    #
+    # @option params [Boolean] :dry_run
+    #   Checks whether you have the required permissions for the action,
+    #   without actually making the request, and provides an error response.
+    #   If you have the required permissions, the error response is
+    #   `DryRunOperation`. Otherwise, it is `UnauthorizedOperation`.
+    #
+    # @return [Types::DisassociateNatGatewayAddressResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::DisassociateNatGatewayAddressResult#nat_gateway_id #nat_gateway_id} => String
+    #   * {Types::DisassociateNatGatewayAddressResult#nat_gateway_addresses #nat_gateway_addresses} => Array&lt;Types::NatGatewayAddress&gt;
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.disassociate_nat_gateway_address({
+    #     nat_gateway_id: "NatGatewayId", # required
+    #     association_ids: ["ElasticIpAssociationId"], # required
+    #     max_drain_duration_seconds: 1,
+    #     dry_run: false,
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.nat_gateway_id #=> String
+    #   resp.nat_gateway_addresses #=> Array
+    #   resp.nat_gateway_addresses[0].allocation_id #=> String
+    #   resp.nat_gateway_addresses[0].network_interface_id #=> String
+    #   resp.nat_gateway_addresses[0].private_ip #=> String
+    #   resp.nat_gateway_addresses[0].public_ip #=> String
+    #   resp.nat_gateway_addresses[0].association_id #=> String
+    #   resp.nat_gateway_addresses[0].is_primary #=> Boolean
+    #   resp.nat_gateway_addresses[0].failure_message #=> String
+    #   resp.nat_gateway_addresses[0].status #=> String, one of "assigning", "unassigning", "associating", "disassociating", "succeeded", "failed"
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/DisassociateNatGatewayAddress AWS API Documentation
+    #
+    # @overload disassociate_nat_gateway_address(params = {})
+    # @param [Hash] params ({})
+    def disassociate_nat_gateway_address(params = {}, options = {})
+      req = build_request(:disassociate_nat_gateway_address, params)
+      req.send_request(options)
+    end
+
     # Disassociates a subnet or gateway from a route table.
     #
     # After you perform this action, the subnet no longer uses the routes in
@@ -37240,13 +37486,13 @@ module Aws::EC2
     # Disassociates the specified subnets from the transit gateway multicast
     # domain.
     #
-    # @option params [String] :transit_gateway_multicast_domain_id
+    # @option params [required, String] :transit_gateway_multicast_domain_id
     #   The ID of the transit gateway multicast domain.
     #
-    # @option params [String] :transit_gateway_attachment_id
+    # @option params [required, String] :transit_gateway_attachment_id
     #   The ID of the attachment.
     #
-    # @option params [Array<String>] :subnet_ids
+    # @option params [required, Array<String>] :subnet_ids
     #   The IDs of the subnets;
     #
     # @option params [Boolean] :dry_run
@@ -37262,9 +37508,9 @@ module Aws::EC2
     # @example Request syntax with placeholder values
     #
     #   resp = client.disassociate_transit_gateway_multicast_domain({
-    #     transit_gateway_multicast_domain_id: "TransitGatewayMulticastDomainId",
-    #     transit_gateway_attachment_id: "TransitGatewayAttachmentId",
-    #     subnet_ids: ["SubnetId"],
+    #     transit_gateway_multicast_domain_id: "TransitGatewayMulticastDomainId", # required
+    #     transit_gateway_attachment_id: "TransitGatewayAttachmentId", # required
+    #     subnet_ids: ["SubnetId"], # required
     #     dry_run: false,
     #   })
     #
@@ -38479,7 +38725,7 @@ module Aws::EC2
     # encrypted private key bundle are stored, and the ARN of the KMS key
     # that's used to encrypt the private key.
     #
-    # @option params [String] :certificate_arn
+    # @option params [required, String] :certificate_arn
     #   The ARN of the ACM certificate for which to view the associated IAM
     #   roles, encryption keys, and Amazon S3 object information.
     #
@@ -38496,7 +38742,7 @@ module Aws::EC2
     # @example Request syntax with placeholder values
     #
     #   resp = client.get_associated_enclave_certificate_iam_roles({
-    #     certificate_arn: "CertificateId",
+    #     certificate_arn: "CertificateId", # required
     #     dry_run: false,
     #   })
     #
@@ -39784,8 +40030,8 @@ module Aws::EC2
     # Returns resource CIDRs managed by IPAM in a given scope. If an IPAM is
     # associated with more than one resource discovery, the resource CIDRs
     # across all of the resource discoveries is returned. A resource
-    # discovery is an IPAM component that enables IPAM Service to manage and
-    # monitor resources that belong to the owning account.
+    # discovery is an IPAM component that enables IPAM to manage and monitor
+    # resources that belong to the owning account.
     #
     # @option params [Boolean] :dry_run
     #   A check for whether you have the required permissions for the action
@@ -41154,7 +41400,7 @@ module Aws::EC2
     # Gets information about the associations for the transit gateway
     # multicast domain.
     #
-    # @option params [String] :transit_gateway_multicast_domain_id
+    # @option params [required, String] :transit_gateway_multicast_domain_id
     #   The ID of the transit gateway multicast domain.
     #
     # @option params [Array<Types::Filter>] :filters
@@ -41197,7 +41443,7 @@ module Aws::EC2
     # @example Request syntax with placeholder values
     #
     #   resp = client.get_transit_gateway_multicast_domain_associations({
-    #     transit_gateway_multicast_domain_id: "TransitGatewayMulticastDomainId",
+    #     transit_gateway_multicast_domain_id: "TransitGatewayMulticastDomainId", # required
     #     filters: [
     #       {
     #         name: "String",
@@ -43245,6 +43491,8 @@ module Aws::EC2
     #   target capacity of the EC2 Fleet is decreased below the current size
     #   of the EC2 Fleet.
     #
+    #   Supported only for fleets of type `maintain`.
+    #
     # @option params [Array<Types::FleetLaunchTemplateConfigRequest>] :launch_template_configs
     #   The launch template and overrides.
     #
@@ -44161,7 +44409,7 @@ module Aws::EC2
     #     client_token: "String",
     #     instance_credit_specifications: [ # required
     #       {
-    #         instance_id: "InstanceId",
+    #         instance_id: "InstanceId", # required
     #         cpu_credits: "String",
     #       },
     #     ],
@@ -44908,8 +45156,8 @@ module Aws::EC2
     end
 
     # Modifies a resource discovery. A resource discovery is an IPAM
-    # component that enables IPAM Service to manage and monitor resources
-    # that belong to the owning account.
+    # component that enables IPAM to manage and monitor resources that
+    # belong to the owning account.
     #
     # @option params [Boolean] :dry_run
     #   A check for whether you have the required permissions for the action
@@ -45405,7 +45653,7 @@ module Aws::EC2
     #   If you have the required permissions, the error response is
     #   `DryRunOperation`. Otherwise, it is `UnauthorizedOperation`.
     #
-    # @option params [String] :instance_id
+    # @option params [required, String] :instance_id
     #   The ID of the instance.
     #
     # @option params [String] :private_dns_hostname_type
@@ -45431,7 +45679,7 @@ module Aws::EC2
     #
     #   resp = client.modify_private_dns_name_options({
     #     dry_run: false,
-    #     instance_id: "InstanceId",
+    #     instance_id: "InstanceId", # required
     #     private_dns_hostname_type: "ip-name", # accepts ip-name, resource-name
     #     enable_resource_name_dns_a_record: false,
     #     enable_resource_name_dns_aaaa_record: false,
@@ -45542,7 +45790,7 @@ module Aws::EC2
     #     group_id: "SecurityGroupId", # required
     #     security_group_rules: [ # required
     #       {
-    #         security_group_rule_id: "SecurityGroupRuleId",
+    #         security_group_rule_id: "SecurityGroupRuleId", # required
     #         security_group_rule: {
     #           ip_protocol: "String",
     #           from_port: 1,
@@ -45772,9 +46020,11 @@ module Aws::EC2
     # again later, you can set the target capacity to 0.
     #
     # @option params [String] :excess_capacity_termination_policy
-    #   Indicates whether running Spot Instances should be terminated if the
-    #   target capacity of the Spot Fleet request is decreased below the
-    #   current size of the Spot Fleet.
+    #   Indicates whether running instances should be terminated if the target
+    #   capacity of the Spot Fleet request is decreased below the current size
+    #   of the Spot Fleet.
+    #
+    #   Supported only for fleets of type `maintain`.
     #
     # @option params [Array<Types::LaunchTemplateConfig>] :launch_template_configs
     #   The launch template and overrides. You can only use this parameter if
@@ -49479,13 +49729,13 @@ module Aws::EC2
     # [1]: https://docs.aws.amazon.com/vpc/latest/tgw/transit-gateway-limits.html#multicast-limits
     # [2]: https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_SearchTransitGatewayMulticastGroups.html
     #
-    # @option params [String] :transit_gateway_multicast_domain_id
+    # @option params [required, String] :transit_gateway_multicast_domain_id
     #   The ID of the transit gateway multicast domain.
     #
     # @option params [String] :group_ip_address
     #   The IP address assigned to the transit gateway multicast group.
     #
-    # @option params [Array<String>] :network_interface_ids
+    # @option params [required, Array<String>] :network_interface_ids
     #   The group members' network interface IDs to register with the transit
     #   gateway multicast group.
     #
@@ -49502,9 +49752,9 @@ module Aws::EC2
     # @example Request syntax with placeholder values
     #
     #   resp = client.register_transit_gateway_multicast_group_members({
-    #     transit_gateway_multicast_domain_id: "TransitGatewayMulticastDomainId",
+    #     transit_gateway_multicast_domain_id: "TransitGatewayMulticastDomainId", # required
     #     group_ip_address: "String",
-    #     network_interface_ids: ["NetworkInterfaceId"],
+    #     network_interface_ids: ["NetworkInterfaceId"], # required
     #     dry_run: false,
     #   })
     #
@@ -49540,13 +49790,13 @@ module Aws::EC2
     # [1]: https://docs.aws.amazon.com/vpc/latest/tgw/transit-gateway-limits.html#multicast-limits
     # [2]: https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_SearchTransitGatewayMulticastGroups.html
     #
-    # @option params [String] :transit_gateway_multicast_domain_id
+    # @option params [required, String] :transit_gateway_multicast_domain_id
     #   The ID of the transit gateway multicast domain.
     #
     # @option params [String] :group_ip_address
     #   The IP address assigned to the transit gateway multicast group.
     #
-    # @option params [Array<String>] :network_interface_ids
+    # @option params [required, Array<String>] :network_interface_ids
     #   The group sources' network interface IDs to register with the transit
     #   gateway multicast group.
     #
@@ -49563,9 +49813,9 @@ module Aws::EC2
     # @example Request syntax with placeholder values
     #
     #   resp = client.register_transit_gateway_multicast_group_sources({
-    #     transit_gateway_multicast_domain_id: "TransitGatewayMulticastDomainId",
+    #     transit_gateway_multicast_domain_id: "TransitGatewayMulticastDomainId", # required
     #     group_ip_address: "String",
-    #     network_interface_ids: ["NetworkInterfaceId"],
+    #     network_interface_ids: ["NetworkInterfaceId"], # required
     #     dry_run: false,
     #   })
     #
@@ -53583,7 +53833,7 @@ module Aws::EC2
     # Searches one or more transit gateway multicast groups and returns the
     # group membership information.
     #
-    # @option params [String] :transit_gateway_multicast_domain_id
+    # @option params [required, String] :transit_gateway_multicast_domain_id
     #   The ID of the transit gateway multicast domain.
     #
     # @option params [Array<Types::Filter>] :filters
@@ -53638,7 +53888,7 @@ module Aws::EC2
     # @example Request syntax with placeholder values
     #
     #   resp = client.search_transit_gateway_multicast_groups({
-    #     transit_gateway_multicast_domain_id: "TransitGatewayMulticastDomainId",
+    #     transit_gateway_multicast_domain_id: "TransitGatewayMulticastDomainId", # required
     #     filters: [
     #       {
     #         name: "String",
@@ -55164,6 +55414,83 @@ module Aws::EC2
       req.send_request(options)
     end
 
+    # Unassigns secondary private NAT gateway IPv4 addresses from a private
+    # NAT gateway. You cannot unassign your primary private IP. For more
+    # information, see [Edit secondary IP address associations][1] in the
+    # *Amazon Virtual Private Cloud User Guide*.
+    #
+    # While unassigning is in progress, you cannot assign/unassign
+    # additional IP addresses while the connections are being drained. You
+    # are, however, allowed to delete the NAT gateway.
+    #
+    # A private IP address will only be released at the end of
+    # MaxDrainDurationSeconds. The private IP addresses stay associated and
+    # support the existing connections but do not support any new
+    # connections (new connections are distributed across the remaining
+    # assigned private IP address). After the existing connections drain
+    # out, the private IP addresses get released.
+    #
+    #
+    #
+    #
+    #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com/vpc/latest/userguide/vpc-nat-gateway.html#nat-gateway-edit-secondary
+    #
+    # @option params [required, String] :nat_gateway_id
+    #   The NAT gateway ID.
+    #
+    # @option params [required, Array<String>] :private_ip_addresses
+    #   The private IPv4 addresses you want to unassign.
+    #
+    # @option params [Integer] :max_drain_duration_seconds
+    #   The maximum amount of time to wait (in seconds) before forcibly
+    #   releasing the IP addresses if connections are still in progress.
+    #   Default value is 350 seconds.
+    #
+    # @option params [Boolean] :dry_run
+    #   Checks whether you have the required permissions for the action,
+    #   without actually making the request, and provides an error response.
+    #   If you have the required permissions, the error response is
+    #   `DryRunOperation`. Otherwise, it is `UnauthorizedOperation`.
+    #
+    # @return [Types::UnassignPrivateNatGatewayAddressResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::UnassignPrivateNatGatewayAddressResult#nat_gateway_id #nat_gateway_id} => String
+    #   * {Types::UnassignPrivateNatGatewayAddressResult#nat_gateway_addresses #nat_gateway_addresses} => Array&lt;Types::NatGatewayAddress&gt;
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.unassign_private_nat_gateway_address({
+    #     nat_gateway_id: "NatGatewayId", # required
+    #     private_ip_addresses: ["String"], # required
+    #     max_drain_duration_seconds: 1,
+    #     dry_run: false,
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.nat_gateway_id #=> String
+    #   resp.nat_gateway_addresses #=> Array
+    #   resp.nat_gateway_addresses[0].allocation_id #=> String
+    #   resp.nat_gateway_addresses[0].network_interface_id #=> String
+    #   resp.nat_gateway_addresses[0].private_ip #=> String
+    #   resp.nat_gateway_addresses[0].public_ip #=> String
+    #   resp.nat_gateway_addresses[0].association_id #=> String
+    #   resp.nat_gateway_addresses[0].is_primary #=> Boolean
+    #   resp.nat_gateway_addresses[0].failure_message #=> String
+    #   resp.nat_gateway_addresses[0].status #=> String, one of "assigning", "unassigning", "associating", "disassociating", "succeeded", "failed"
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/UnassignPrivateNatGatewayAddress AWS API Documentation
+    #
+    # @overload unassign_private_nat_gateway_address(params = {})
+    # @param [Hash] params ({})
+    def unassign_private_nat_gateway_address(params = {}, options = {})
+      req = build_request(:unassign_private_nat_gateway_address, params)
+      req.send_request(options)
+    end
+
     # Disables detailed monitoring for a running instance. For more
     # information, see [Monitoring your instances and volumes][1] in the
     # *Amazon EC2 User Guide*.
@@ -55513,7 +55840,7 @@ module Aws::EC2
         params: params,
         config: config)
       context[:gem_name] = 'aws-sdk-ec2'
-      context[:gem_version] = '1.362.0'
+      context[:gem_version] = '1.364.0'
       Seahorse::Client::Request.new(handlers, context)
     end