RubyGems - aws-sdk-ec2 - Versions diffs - 1.369.0 → 1.371.0 - Mend

aws-sdk-ec2 1.369.0 → 1.371.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (15) hide show

checksums.yaml +4 -4
data/CHANGELOG.md +10 -0
data/VERSION +1 -1
data/lib/aws-sdk-ec2/client.rb +753 -151
data/lib/aws-sdk-ec2/client_api.rb +98 -2
data/lib/aws-sdk-ec2/image.rb +6 -6
data/lib/aws-sdk-ec2/instance.rb +11 -11
data/lib/aws-sdk-ec2/nat_gateway.rb +7 -7
data/lib/aws-sdk-ec2/resource.rb +24 -24
data/lib/aws-sdk-ec2/subnet.rb +2 -2
data/lib/aws-sdk-ec2/types.rb +686 -298
data/lib/aws-sdk-ec2/volume.rb +5 -5
data/lib/aws-sdk-ec2/vpc.rb +9 -9
data/lib/aws-sdk-ec2.rb +1 -1
metadata +2 -2

data/lib/aws-sdk-ec2/types.rb CHANGED Viewed

@@ -103,7 +103,7 @@ module Aws::EC2
     #   @return [String]
     #
     # @!attribute [rw] tag_specifications
-    #   `tag`\:&lt;key&gt; - The key/value combination of a tag assigned to
+    #   `tag`:&lt;key&gt; - The key/value combination of a tag assigned to
     #   the resource. Use the tag key in the filter name and the tag value
     #   as the filter value. For example, to find all resources that have a
     #   tag with the key `Owner` and the value `TeamA`, specify `tag:Owner`
@@ -576,21 +576,56 @@ module Aws::EC2
       include Aws::Structure
     end
-    # Describes an additional detail for a path analysis.
+    # Describes an additional detail for a path analysis. For more
+    # information, see [Reachability Analyzer additional detail codes][1].
+    #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com/vpc/latest/reachability/additional-detail-codes.html
     #
     # @!attribute [rw] additional_detail_type
-    #   The information type.
+    #   The additional detail code.
     #   @return [String]
     #
     # @!attribute [rw] component
     #   The path component.
     #   @return [Types::AnalysisComponent]
     #
+    # @!attribute [rw] vpc_endpoint_service
+    #   The VPC endpoint service.
+    #   @return [Types::AnalysisComponent]
+    #
+    # @!attribute [rw] rule_options
+    #   The rule options.
+    #   @return [Array<Types::RuleOption>]
+    #
+    # @!attribute [rw] rule_group_type_pairs
+    #   The rule group type.
+    #   @return [Array<Types::RuleGroupTypePair>]
+    #
+    # @!attribute [rw] rule_group_rule_options_pairs
+    #   The rule options.
+    #   @return [Array<Types::RuleGroupRuleOptionsPair>]
+    #
+    # @!attribute [rw] service_name
+    #   The name of the VPC endpoint service.
+    #   @return [String]
+    #
+    # @!attribute [rw] load_balancers
+    #   The load balancers.
+    #   @return [Array<Types::AnalysisComponent>]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/AdditionalDetail AWS API Documentation
     #
     class AdditionalDetail < Struct.new(
       :additional_detail_type,
-      :component)
+      :component,
+      :vpc_endpoint_service,
+      :rule_options,
+      :rule_group_type_pairs,
+      :rule_group_rule_options_pairs,
+      :service_name,
+      :load_balancers)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -1389,6 +1424,18 @@ module Aws::EC2
     #   * blackhole
     #   @return [String]
     #
+    # @!attribute [rw] carrier_gateway_id
+    #   The ID of a carrier gateway.
+    #   @return [String]
+    #
+    # @!attribute [rw] core_network_arn
+    #   The Amazon Resource Name (ARN) of a core network.
+    #   @return [String]
+    #
+    # @!attribute [rw] local_gateway_id
+    #   The ID of a local gateway.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/AnalysisRouteTableRoute AWS API Documentation
     #
     class AnalysisRouteTableRoute < Struct.new(
@@ -1402,7 +1449,10 @@ module Aws::EC2
       :origin,
       :transit_gateway_id,
       :vpc_peering_connection_id,
-      :state)
+      :state,
+      :carrier_gateway_id,
+      :core_network_arn,
+      :local_gateway_id)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -7315,13 +7365,13 @@ module Aws::EC2
     #
     # @!attribute [rw] valid_from
     #   The start date and time of the request, in UTC format (for example,
-    #   *YYYY*-*MM*-*DD*T*HH*\:*MM*\:*SS*Z). The default is to start
+    #   *YYYY*-*MM*-*DD*T*HH*:*MM*:*SS*Z). The default is to start
     #   fulfilling the request immediately.
     #   @return [Time]
     #
     # @!attribute [rw] valid_until
     #   The end date and time of the request, in UTC format (for example,
-    #   *YYYY*-*MM*-*DD*T*HH*\:*MM*\:*SS*Z). At this point, no new EC2 Fleet
+    #   *YYYY*-*MM*-*DD*T*HH*:*MM*:*SS*Z). At this point, no new EC2 Fleet
     #   requests are placed or able to fulfill the request. If no value is
     #   specified, the request remains until you cancel it.
     #   @return [Time]
@@ -7472,7 +7522,7 @@ module Aws::EC2
     #   * If the destination type is `cloud-watch-logs`, specify the ARN of
     #     a CloudWatch Logs log group. For example:
     #
-    #     arn:aws:logs:*region*\:*account\_id*\:log-group:*my\_group*
+    #     arn:aws:logs:*region*:*account\_id*:log-group:*my\_group*
     #
     #     Alternatively, use the `LogGroupName` parameter.
     #
@@ -7487,7 +7537,7 @@ module Aws::EC2
     #   * If the destination type is `kinesis-data-firehose`, specify the
     #     ARN of a Kinesis Data Firehose delivery stream. For example:
     #
-    #     arn:aws:firehose:*region*\:*account\_id*\:deliverystream:*my\_stream*
+    #     arn:aws:firehose:*region*:*account\_id*:deliverystream:*my\_stream*
     #   @return [String]
     #
     # @!attribute [rw] log_format
@@ -9013,22 +9063,21 @@ module Aws::EC2
     end
     # @!attribute [rw] source_ip
-    #   The IP address of the Amazon Web Services resource that is the
-    #   source of the path.
+    #   The IP address of the source.
     #   @return [String]
     #
     # @!attribute [rw] destination_ip
-    #   The IP address of the Amazon Web Services resource that is the
-    #   destination of the path.
+    #   The IP address of the destination.
     #   @return [String]
     #
     # @!attribute [rw] source
-    #   The Amazon Web Services resource that is the source of the path.
+    #   The ID or ARN of the source. If the resource is in another account,
+    #   you must specify an ARN.
     #   @return [String]
     #
     # @!attribute [rw] destination
-    #   The Amazon Web Services resource that is the destination of the
-    #   path.
+    #   The ID or ARN of the destination. If the resource is in another
+    #   account, you must specify an ARN.
     #   @return [String]
     #
     # @!attribute [rw] protocol
@@ -9063,6 +9112,18 @@ module Aws::EC2
     #   [1]: https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Run_Instance_Idempotency.html
     #   @return [String]
     #
+    # @!attribute [rw] filter_at_source
+    #   Scopes the analysis to network paths that match specific filters at
+    #   the source. If you specify this parameter, you can't specify the
+    #   parameters for the source IP address or the destination port.
+    #   @return [Types::PathRequestFilter]
+    #
+    # @!attribute [rw] filter_at_destination
+    #   Scopes the analysis to network paths that match specific filters at
+    #   the destination. If you specify this parameter, you can't specify
+    #   the parameter for the destination IP address.
+    #   @return [Types::PathRequestFilter]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/CreateNetworkInsightsPathRequest AWS API Documentation
     #
     class CreateNetworkInsightsPathRequest < Struct.new(
@@ -9074,7 +9135,9 @@ module Aws::EC2
       :destination_port,
       :tag_specifications,
       :dry_run,
-      :client_token)
+      :client_token,
+      :filter_at_source,
+      :filter_at_destination)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -9750,7 +9813,7 @@ module Aws::EC2
     end
     # @!attribute [rw] description
-    #   A description for the security group. This is informational only.
+    #   A description for the security group.
     #
     #   Constraints: Up to 255 characters in length
     #
@@ -10053,14 +10116,14 @@ module Aws::EC2
     #
     #   The following are valid values:
     #
-    #   * `prefix`\: The Amazon EC2 Prefix Delegation feature assigns the IP
+    #   * `prefix`: The Amazon EC2 Prefix Delegation feature assigns the IP
     #     addresses to network interfaces that are associated with an
     #     instance. For information about Prefix Delegation, see [Prefix
     #     Delegation for Amazon EC2 network interfaces][1] in the *Amazon
     #     Elastic Compute Cloud User Guide*.
     #
-    #   * `explicit`\: You manually assign the IP addresses to resources
-    #     that reside in your subnet.
+    #   * `explicit`: You manually assign the IP addresses to resources that
+    #     reside in your subnet.
     #
     #
     #
@@ -11689,11 +11752,11 @@ module Aws::EC2
     #
     #   The following are the supported values for each volume type:
     #
-    #   * `gp3`\: 3,000-16,000 IOPS
+    #   * `gp3`: 3,000-16,000 IOPS
     #
-    #   * `io1`\: 100-64,000 IOPS
+    #   * `io1`: 100-64,000 IOPS
     #
-    #   * `io2`\: 100-64,000 IOPS
+    #   * `io2`: 100-64,000 IOPS
     #
     #   `io1` and `io2` volumes support up to 64,000 IOPS only on [Instances
     #   built on the Nitro System][1]. Other instance families support
@@ -11743,13 +11806,13 @@ module Aws::EC2
     #
     #   The following are the supported volumes sizes for each volume type:
     #
-    #   * `gp2` and `gp3`\: 1-16,384
+    #   * `gp2` and `gp3`: 1-16,384
     #
-    #   * `io1` and `io2`\: 4-16,384
+    #   * `io1` and `io2`: 4-16,384
     #
-    #   * `st1` and `sc1`\: 125-16,384
+    #   * `st1` and `sc1`: 125-16,384
     #
-    #   * `standard`\: 1-1,024
+    #   * `standard`: 1-1,024
     #   @return [Integer]
     #
     # @!attribute [rw] snapshot_id
@@ -11988,7 +12051,7 @@ module Aws::EC2
     #   names that are automatically generated by the VPC endpoint service.
     #
     #   To use a private hosted zone, you must set the following VPC
-    #   attributes to `true`\: `enableDnsHostnames` and `enableDnsSupport`.
+    #   attributes to `true`: `enableDnsHostnames` and `enableDnsSupport`.
     #   Use ModifyVpcAttribute to set the VPC attributes.
     #
     #   Default: `true`
@@ -15571,10 +15634,10 @@ module Aws::EC2
     #
     #   * `public-ip` - The Elastic IP address, or the carrier IP address.
     #
-    #   * `tag`\:&lt;key&gt; - The key/value combination of a tag assigned
-    #     to the resource. Use the tag key in the filter name and the tag
-    #     value as the filter value. For example, to find all resources that
-    #     have a tag with the key `Owner` and the value `TeamA`, specify
+    #   * `tag`:&lt;key&gt; - The key/value combination of a tag assigned to
+    #     the resource. Use the tag key in the filter name and the tag value
+    #     as the filter value. For example, to find all resources that have
+    #     a tag with the key `Owner` and the value `TeamA`, specify
     #     `tag:Owner` for the filter name and `TeamA` for the filter value.
     #
     #   * `tag-key` - The key of a tag assigned to the resource. Use this
@@ -16130,10 +16193,10 @@ module Aws::EC2
     #   * `owner-id` - The Amazon Web Services account ID of the owner of
     #     the carrier gateway.
     #
-    #   * `tag`\:&lt;key&gt; - The key/value combination of a tag assigned
-    #     to the resource. Use the tag key in the filter name and the tag
-    #     value as the filter value. For example, to find all resources that
-    #     have a tag with the key `Owner` and the value `TeamA`, specify
+    #   * `tag`:&lt;key&gt; - The key/value combination of a tag assigned to
+    #     the resource. Use the tag key in the filter name and the tag value
+    #     as the filter value. For example, to find all resources that have
+    #     a tag with the key `Owner` and the value `TeamA`, specify
     #     `tag:Owner` for the filter name and `TeamA` for the filter value.
     #
     #   * `tag-key` - The key of a tag assigned to the resource. Use this
@@ -16198,10 +16261,10 @@ module Aws::EC2
     #
     #   * `instance-id` - The ID of the instance.
     #
-    #   * `tag`\:&lt;key&gt; - The key/value combination of a tag assigned
-    #     to the resource. Use the tag key in the filter name and the tag
-    #     value as the filter value. For example, to find all resources that
-    #     have a tag with the key `Owner` and the value `TeamA`, specify
+    #   * `tag`:&lt;key&gt; - The key/value combination of a tag assigned to
+    #     the resource. Use the tag key in the filter name and the tag value
+    #     as the filter value. For example, to find all resources that have
+    #     a tag with the key `Owner` and the value `TeamA`, specify
     #     `tag:Owner` for the filter name and `TeamA` for the filter value.
     #
     #   * `tag-key` - The key of a tag assigned to the resource. Use this
@@ -16704,10 +16767,10 @@ module Aws::EC2
     #   * `type` - The type of customer gateway. Currently, the only
     #     supported type is `ipsec.1`.
     #
-    #   * `tag`\:&lt;key&gt; - The key/value combination of a tag assigned
-    #     to the resource. Use the tag key in the filter name and the tag
-    #     value as the filter value. For example, to find all resources that
-    #     have a tag with the key `Owner` and the value `TeamA`, specify
+    #   * `tag`:&lt;key&gt; - The key/value combination of a tag assigned to
+    #     the resource. Use the tag key in the filter name and the tag value
+    #     as the filter value. For example, to find all resources that have
+    #     a tag with the key `Owner` and the value `TeamA`, specify
     #     `tag:Owner` for the filter name and `TeamA` for the filter value.
     #
     #   * `tag-key` - The key of a tag assigned to the resource. Use this
@@ -16765,10 +16828,10 @@ module Aws::EC2
     #   * `owner-id` - The ID of the Amazon Web Services account that owns
     #     the DHCP options set.
     #
-    #   * `tag`\:&lt;key&gt; - The key/value combination of a tag assigned
-    #     to the resource. Use the tag key in the filter name and the tag
-    #     value as the filter value. For example, to find all resources that
-    #     have a tag with the key `Owner` and the value `TeamA`, specify
+    #   * `tag`:&lt;key&gt; - The key/value combination of a tag assigned to
+    #     the resource. Use the tag key in the filter name and the tag value
+    #     as the filter value. For example, to find all resources that have
+    #     a tag with the key `Owner` and the value `TeamA`, specify
     #     `tag:Owner` for the filter name and `TeamA` for the filter value.
     #
     #   * `tag-key` - The key of a tag assigned to the resource. Use this
@@ -16859,10 +16922,10 @@ module Aws::EC2
     # @!attribute [rw] filters
     #   One or more filters.
     #
-    #   * `tag`\:&lt;key&gt; - The key/value combination of a tag assigned
-    #     to the resource. Use the tag key in the filter name and the tag
-    #     value as the filter value. For example, to find all resources that
-    #     have a tag with the key `Owner` and the value `TeamA`, specify
+    #   * `tag`:&lt;key&gt; - The key/value combination of a tag assigned to
+    #     the resource. Use the tag key in the filter name and the tag value
+    #     as the filter value. For example, to find all resources that have
+    #     a tag with the key `Owner` and the value `TeamA`, specify
     #     `tag:Owner` for the filter name and `TeamA` for the filter value.
     #
     #   * `tag-key` - The key of a tag assigned to the resource. Use this
@@ -17277,14 +17340,14 @@ module Aws::EC2
     # @!attribute [rw] filters
     #   The filters. The possible values are:
     #
-    #   * `availability-zone`\: The Availability Zone of the snapshot.
+    #   * `availability-zone`: The Availability Zone of the snapshot.
     #
-    #   * `owner-id`\: The ID of the Amazon Web Services account that
-    #     enabled fast snapshot restore on the snapshot.
+    #   * `owner-id`: The ID of the Amazon Web Services account that enabled
+    #     fast snapshot restore on the snapshot.
     #
-    #   * `snapshot-id`\: The ID of the snapshot.
+    #   * `snapshot-id`: The ID of the snapshot.
     #
-    #   * `state`\: The state of fast snapshot restores for the snapshot
+    #   * `state`: The state of fast snapshot restores for the snapshot
     #     (`enabling` \| `optimizing` \| `enabled` \| `disabling` \|
     #     `disabled`).
     #   @return [Array<Types::Filter>]
@@ -17419,7 +17482,7 @@ module Aws::EC2
     #
     # @!attribute [rw] start_time
     #   The start date and time for the events, in UTC format (for example,
-    #   *YYYY*-*MM*-*DD*T*HH*\:*MM*\:*SS*Z).
+    #   *YYYY*-*MM*-*DD*T*HH*:*MM*:*SS*Z).
     #   @return [Time]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/DescribeFleetHistoryRequest AWS API Documentation
@@ -17441,8 +17504,8 @@ module Aws::EC2
     #
     # @!attribute [rw] last_evaluated_time
     #   The last date and time for the events, in UTC format (for example,
-    #   *YYYY*-*MM*-*DD*T*HH*\:*MM*\:*SS*Z). All records up to this time
-    #   were retrieved.
+    #   *YYYY*-*MM*-*DD*T*HH*:*MM*:*SS*Z). All records up to this time were
+    #   retrieved.
     #
     #   If `nextToken` indicates that there are more items, this value is
     #   not present.
@@ -17459,7 +17522,7 @@ module Aws::EC2
     #
     # @!attribute [rw] start_time
     #   The start date and time for the events, in UTC format (for example,
-    #   *YYYY*-*MM*-*DD*T*HH*\:*MM*\:*SS*Z).
+    #   *YYYY*-*MM*-*DD*T*HH*:*MM*:*SS*Z).
     #   @return [Time]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/DescribeFleetHistoryResult AWS API Documentation
@@ -17691,10 +17754,10 @@ module Aws::EC2
     #   * `traffic-type` - The type of traffic (`ACCEPT` \| `REJECT` \|
     #     `ALL`).
     #
-    #   * `tag`\:&lt;key&gt; - The key/value combination of a tag assigned
-    #     to the resource. Use the tag key in the filter name and the tag
-    #     value as the filter value. For example, to find all resources that
-    #     have a tag with the key `Owner` and the value `TeamA`, specify
+    #   * `tag`:&lt;key&gt; - The key/value combination of a tag assigned to
+    #     the resource. Use the tag key in the filter name and the tag value
+    #     as the filter value. For example, to find all resources that have
+    #     a tag with the key `Owner` and the value `TeamA`, specify
     #     `tag:Owner` for the filter name and `TeamA` for the filter value.
     #
     #   * `tag-key` - The key of a tag assigned to the resource. Use this
@@ -17830,10 +17893,10 @@ module Aws::EC2
     #   * `state` - The state of the AFI (`pending` \| `failed` \|
     #     `available` \| `unavailable`).
     #
-    #   * `tag`\:&lt;key&gt; - The key/value combination of a tag assigned
-    #     to the resource. Use the tag key in the filter name and the tag
-    #     value as the filter value. For example, to find all resources that
-    #     have a tag with the key `Owner` and the value `TeamA`, specify
+    #   * `tag`:&lt;key&gt; - The key/value combination of a tag assigned to
+    #     the resource. Use the tag key in the filter name and the tag value
+    #     as the filter value. For example, to find all resources that have
+    #     a tag with the key `Owner` and the value `TeamA`, specify
     #     `tag:Owner` for the filter name and `TeamA` for the filter value.
     #
     #   * `tag-key` - The key of a tag assigned to the resource. Use this
@@ -18233,7 +18296,7 @@ module Aws::EC2
     # @!attribute [rw] attribute
     #   The AMI attribute.
     #
-    #   **Note**\: The `blockDeviceMapping` attribute is deprecated. Using
+    #   **Note**: The `blockDeviceMapping` attribute is deprecated. Using
     #   this attribute returns the `Client.AuthFailure` error. To get
     #   information about the block device mappings for an AMI, use the
     #   DescribeImages action.
@@ -18367,10 +18430,10 @@ module Aws::EC2
     #   * `sriov-net-support` - A value of `simple` indicates that enhanced
     #     networking with the Intel 82599 VF interface is enabled.
     #
-    #   * `tag`\:&lt;key&gt; - The key/value combination of a tag assigned
-    #     to the resource. Use the tag key in the filter name and the tag
-    #     value as the filter value. For example, to find all resources that
-    #     have a tag with the key `Owner` and the value `TeamA`, specify
+    #   * `tag`:&lt;key&gt; - The key/value combination of a tag assigned to
+    #     the resource. Use the tag key in the filter name and the tag value
+    #     as the filter value. For example, to find all resources that have
+    #     a tag with the key `Owner` and the value `TeamA`, specify
     #     `tag:Owner` for the filter name and `TeamA` for the filter value.
     #
     #   * `tag-key` - The key of a tag assigned to the resource. Use this
@@ -19569,10 +19632,10 @@ module Aws::EC2
     #   * `owner-id` - The ID of the Amazon Web Services account that owns
     #     the internet gateway.
     #
-    #   * `tag`\:&lt;key&gt; - The key/value combination of a tag assigned
-    #     to the resource. Use the tag key in the filter name and the tag
-    #     value as the filter value. For example, to find all resources that
-    #     have a tag with the key `Owner` and the value `TeamA`, specify
+    #   * `tag`:&lt;key&gt; - The key/value combination of a tag assigned to
+    #     the resource. Use the tag key in the filter name and the tag value
+    #     as the filter value. For example, to find all resources that have
+    #     a tag with the key `Owner` and the value `TeamA`, specify
     #     `tag:Owner` for the filter name and `TeamA` for the filter value.
     #
     #   * `tag-key` - The key of a tag assigned to the resource. Use this
@@ -19947,10 +20010,10 @@ module Aws::EC2
     # @!attribute [rw] filters
     #   One or more filters.
     #
-    #   * `tag`\:&lt;key&gt; - The key/value combination of a tag assigned
-    #     to the resource. Use the tag key in the filter name and the tag
-    #     value as the filter value. For example, to find all resources that
-    #     have a tag with the key `Owner` and the value `TeamA`, specify
+    #   * `tag`:&lt;key&gt; - The key/value combination of a tag assigned to
+    #     the resource. Use the tag key in the filter name and the tag value
+    #     as the filter value. For example, to find all resources that have
+    #     a tag with the key `Owner` and the value `TeamA`, specify
     #     `tag:Owner` for the filter name and `TeamA` for the filter value.
     #
     #   * `tag-key` - The key of a tag assigned to the resource. Use this
@@ -20001,10 +20064,10 @@ module Aws::EC2
     #     filter to find all resources assigned a tag with a specific key,
     #     regardless of the tag value.
     #
-    #   * `tag`\:&lt;key&gt; - The key/value combination of a tag assigned
-    #     to the resource. Use the tag key in the filter name and the tag
-    #     value as the filter value. For example, to find all resources that
-    #     have a tag with the key `Owner` and the value `TeamA`, specify
+    #   * `tag`:&lt;key&gt; - The key/value combination of a tag assigned to
+    #     the resource. Use the tag key in the filter name and the tag value
+    #     as the filter value. For example, to find all resources that have
+    #     a tag with the key `Owner` and the value `TeamA`, specify
     #     `tag:Owner` for the filter name and `TeamA` for the filter value.
     #   @return [Array<Types::Filter>]
     #
@@ -20230,10 +20293,10 @@ module Aws::EC2
     #
     #   * `launch-template-name` - The name of the launch template.
     #
-    #   * `tag`\:&lt;key&gt; - The key/value combination of a tag assigned
-    #     to the resource. Use the tag key in the filter name and the tag
-    #     value as the filter value. For example, to find all resources that
-    #     have a tag with the key `Owner` and the value `TeamA`, specify
+    #   * `tag`:&lt;key&gt; - The key/value combination of a tag assigned to
+    #     the resource. Use the tag key in the filter name and the tag value
+    #     as the filter value. For example, to find all resources that have
+    #     a tag with the key `Owner` and the value `TeamA`, specify
     #     `tag:Owner` for the filter name and `TeamA` for the filter value.
     #
     #   * `tag-key` - The key of a tag assigned to the resource. Use this
@@ -20846,10 +20909,10 @@ module Aws::EC2
     #   * `subnet-id` - The ID of the subnet in which the NAT gateway
     #     resides.
     #
-    #   * `tag`\:&lt;key&gt; - The key/value combination of a tag assigned
-    #     to the resource. Use the tag key in the filter name and the tag
-    #     value as the filter value. For example, to find all resources that
-    #     have a tag with the key `Owner` and the value `TeamA`, specify
+    #   * `tag`:&lt;key&gt; - The key/value combination of a tag assigned to
+    #     the resource. Use the tag key in the filter name and the tag value
+    #     as the filter value. For example, to find all resources that have
+    #     a tag with the key `Owner` and the value `TeamA`, specify
     #     `tag:Owner` for the filter name and `TeamA` for the filter value.
     #
     #   * `tag-key` - The key of a tag assigned to the resource. Use this
@@ -20955,10 +21018,10 @@ module Aws::EC2
     #   * `owner-id` - The ID of the Amazon Web Services account that owns
     #     the network ACL.
     #
-    #   * `tag`\:&lt;key&gt; - The key/value combination of a tag assigned
-    #     to the resource. Use the tag key in the filter name and the tag
-    #     value as the filter value. For example, to find all resources that
-    #     have a tag with the key `Owner` and the value `TeamA`, specify
+    #   * `tag`:&lt;key&gt; - The key/value combination of a tag assigned to
+    #     the resource. Use the tag key in the filter name and the tag value
+    #     as the filter value. For example, to find all resources that have
+    #     a tag with the key `Owner` and the value `TeamA`, specify
     #     `tag:Owner` for the filter name and `TeamA` for the filter value.
     #
     #   * `tag-key` - The key of a tag assigned to the resource. Use this
@@ -21241,7 +21304,29 @@ module Aws::EC2
     #
     #   * destination - The ID of the resource.
     #
-    #   * destination-port - The destination port.
+    #   * filter-at-source.source-address - The source IPv4 address at the
+    #     source.
+    #
+    #   * filter-at-source.source-port-range - The source port range at the
+    #     source.
+    #
+    #   * filter-at-source.destination-address - The destination IPv4
+    #     address at the source.
+    #
+    #   * filter-at-source.destination-port-range - The destination port
+    #     range at the source.
+    #
+    #   * filter-at-destination.source-address - The source IPv4 address at
+    #     the destination.
+    #
+    #   * filter-at-destination.source-port-range - The source port range at
+    #     the destination.
+    #
+    #   * filter-at-destination.destination-address - The destination IPv4
+    #     address at the destination.
+    #
+    #   * filter-at-destination.destination-port-range - The destination
+    #     port range at the destination.
     #
     #   * protocol - The protocol.
     #
@@ -21538,10 +21623,10 @@ module Aws::EC2
     #
     #   * `subnet-id` - The ID of the subnet for the network interface.
     #
-    #   * `tag`\:&lt;key&gt; - The key/value combination of a tag assigned
-    #     to the resource. Use the tag key in the filter name and the tag
-    #     value as the filter value. For example, to find all resources that
-    #     have a tag with the key `Owner` and the value `TeamA`, specify
+    #   * `tag`:&lt;key&gt; - The key/value combination of a tag assigned to
+    #     the resource. Use the tag key in the filter name and the tag value
+    #     as the filter value. For example, to find all resources that have
+    #     a tag with the key `Owner` and the value `TeamA`, specify
     #     `tag:Owner` for the filter name and `TeamA` for the filter value.
     #
     #   * `tag-key` - The key of a tag assigned to the resource. Use this
@@ -21691,9 +21776,9 @@ module Aws::EC2
     # @!attribute [rw] filters
     #   One or more filters.
     #
-    #   * `prefix-list-id`\: The ID of a prefix list.
+    #   * `prefix-list-id`: The ID of a prefix list.
     #
-    #   * `prefix-list-name`\: The name of a prefix list.
+    #   * `prefix-list-name`: The name of a prefix list.
     #   @return [Array<Types::Filter>]
     #
     # @!attribute [rw] max_results
@@ -21816,10 +21901,10 @@ module Aws::EC2
     # @!attribute [rw] filters
     #   One or more filters.
     #
-    #   * `tag`\:&lt;key&gt; - The key/value combination of a tag assigned
-    #     to the resource. Use the tag key in the filter name and the tag
-    #     value as the filter value. For example, to find all resources that
-    #     have a tag with the key `Owner` and the value `TeamA`, specify
+    #   * `tag`:&lt;key&gt; - The key/value combination of a tag assigned to
+    #     the resource. Use the tag key in the filter name and the tag value
+    #     as the filter value. For example, to find all resources that have
+    #     a tag with the key `Owner` and the value `TeamA`, specify
     #     `tag:Owner` for the filter name and `TeamA` for the filter value.
     #
     #   * `tag-key` - The key of a tag assigned to the resource. Use this
@@ -22452,10 +22537,10 @@ module Aws::EC2
     #   * `route.vpc-peering-connection-id` - The ID of a VPC peering
     #     connection specified in a route in the table.
     #
-    #   * `tag`\:&lt;key&gt; - The key/value combination of a tag assigned
-    #     to the resource. Use the tag key in the filter name and the tag
-    #     value as the filter value. For example, to find all resources that
-    #     have a tag with the key `Owner` and the value `TeamA`, specify
+    #   * `tag`:&lt;key&gt; - The key/value combination of a tag assigned to
+    #     the resource. Use the tag key in the filter name and the tag value
+    #     as the filter value. For example, to find all resources that have
+    #     a tag with the key `Owner` and the value `TeamA`, specify
     #     `tag:Owner` for the filter name and `TeamA` for the filter value.
     #
     #   * `tag-key` - The key of a tag assigned to the resource. Use this
@@ -22729,10 +22814,10 @@ module Aws::EC2
     #
     #   * `security-group-rule-id` - The ID of the security group rule.
     #
-    #   * `tag`\:&lt;key&gt; - The key/value combination of a tag assigned
-    #     to the resource. Use the tag key in the filter name and the tag
-    #     value as the filter value. For example, to find all resources that
-    #     have a tag with the key `Owner` and the value `TeamA`, specify
+    #   * `tag`:&lt;key&gt; - The key/value combination of a tag assigned to
+    #     the resource. Use the tag key in the filter name and the tag value
+    #     as the filter value. For example, to find all resources that have
+    #     a tag with the key `Owner` and the value `TeamA`, specify
     #     `tag:Owner` for the filter name and `TeamA` for the filter value.
     #   @return [Array<Types::Filter>]
     #
@@ -22867,10 +22952,10 @@ module Aws::EC2
     #   * `owner-id` - The Amazon Web Services account ID of the owner of
     #     the security group.
     #
-    #   * `tag`\:&lt;key&gt; - The key/value combination of a tag assigned
-    #     to the resource. Use the tag key in the filter name and the tag
-    #     value as the filter value. For example, to find all resources that
-    #     have a tag with the key `Owner` and the value `TeamA`, specify
+    #   * `tag`:&lt;key&gt; - The key/value combination of a tag assigned to
+    #     the resource. Use the tag key in the filter name and the tag value
+    #     as the filter value. For example, to find all resources that have
+    #     a tag with the key `Owner` and the value `TeamA`, specify
     #     `tag:Owner` for the filter name and `TeamA` for the filter value.
     #
     #   * `tag-key` - The key of a tag assigned to the resource. Use this
@@ -23098,10 +23183,10 @@ module Aws::EC2
     #   * `storage-tier` - The storage tier of the snapshot (`archive` \|
     #     `standard`).
     #
-    #   * `tag`\:&lt;key&gt; - The key/value combination of a tag assigned
-    #     to the resource. Use the tag key in the filter name and the tag
-    #     value as the filter value. For example, to find all resources that
-    #     have a tag with the key `Owner` and the value `TeamA`, specify
+    #   * `tag`:&lt;key&gt; - The key/value combination of a tag assigned to
+    #     the resource. Use the tag key in the filter name and the tag value
+    #     as the filter value. For example, to find all resources that have
+    #     a tag with the key `Owner` and the value `TeamA`, specify
     #     `tag:Owner` for the filter name and `TeamA` for the filter value.
     #
     #   * `tag-key` - The key of a tag assigned to the resource. Use this
@@ -23321,7 +23406,7 @@ module Aws::EC2
     #
     # @!attribute [rw] start_time
     #   The starting date and time for the events, in UTC format (for
-    #   example, *YYYY*-*MM*-*DD*T*HH*\:*MM*\:*SS*Z).
+    #   example, *YYYY*-*MM*-*DD*T*HH*:*MM*:*SS*Z).
     #   @return [Time]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/DescribeSpotFleetRequestHistoryRequest AWS API Documentation
@@ -23346,8 +23431,8 @@ module Aws::EC2
     #
     # @!attribute [rw] last_evaluated_time
     #   The last date and time for the events, in UTC format (for example,
-    #   *YYYY*-*MM*-*DD*T*HH*\:*MM*\:*SS*Z). All records up to this time
-    #   were retrieved.
+    #   *YYYY*-*MM*-*DD*T*HH*:*MM*:*SS*Z). All records up to this time were
+    #   retrieved.
     #
     #   If `nextToken` indicates that there are more items, this value is
     #   not present.
@@ -23364,7 +23449,7 @@ module Aws::EC2
     #
     # @!attribute [rw] start_time
     #   The starting date and time for the events, in UTC format (for
-    #   example, *YYYY*-*MM*-*DD*T*HH*\:*MM*\:*SS*Z).
+    #   example, *YYYY*-*MM*-*DD*T*HH*:*MM*:*SS*Z).
     #   @return [Time]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/DescribeSpotFleetRequestHistoryResponse AWS API Documentation
@@ -23643,7 +23728,7 @@ module Aws::EC2
     #     supported).
     #
     #   * `timestamp` - The time stamp of the Spot price history, in UTC
-    #     format (for example, *YYYY*-*MM*-*DD*T*HH*\:*MM*\:*SS*Z). You can
+    #     format (for example, *YYYY*-*MM*-*DD*T*HH*:*MM*:*SS*Z). You can
     #     use wildcards (* and ?). Greater than or less than comparison is
     #     not supported.
     #   @return [Array<Types::Filter>]
@@ -23662,7 +23747,7 @@ module Aws::EC2
     # @!attribute [rw] end_time
     #   The date and time, up to the current date, from which to stop
     #   retrieving the price history data, in UTC format (for example,
-    #   *YYYY*-*MM*-*DD*T*HH*\:*MM*\:*SS*Z).
+    #   *YYYY*-*MM*-*DD*T*HH*:*MM*:*SS*Z).
     #   @return [Time]
     #
     # @!attribute [rw] instance_types
@@ -23692,7 +23777,7 @@ module Aws::EC2
     # @!attribute [rw] start_time
     #   The date and time, up to the past 90 days, from which to start
     #   retrieving the price history data, in UTC format (for example,
-    #   *YYYY*-*MM*-*DD*T*HH*\:*MM*\:*SS*Z).
+    #   *YYYY*-*MM*-*DD*T*HH*:*MM*:*SS*Z).
     #   @return [Time]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/DescribeSpotPriceHistoryRequest AWS API Documentation
@@ -23937,10 +24022,10 @@ module Aws::EC2
     #
     #   * `subnet-id` - The ID of the subnet.
     #
-    #   * `tag`\:&lt;key&gt; - The key/value combination of a tag assigned
-    #     to the resource. Use the tag key in the filter name and the tag
-    #     value as the filter value. For example, to find all resources that
-    #     have a tag with the key `Owner` and the value `TeamA`, specify
+    #   * `tag`:&lt;key&gt; - The key/value combination of a tag assigned to
+    #     the resource. Use the tag key in the filter name and the tag value
+    #     as the filter value. For example, to find all resources that have
+    #     a tag with the key `Owner` and the value `TeamA`, specify
     #     `tag:Owner` for the filter name and `TeamA` for the filter value.
     #
     #   * `tag-key` - The key of a tag assigned to the resource. Use this
@@ -24034,7 +24119,7 @@ module Aws::EC2
     #     `vpc-endpoint-service` \| `vpc-peering-connection` \|
     #     `vpn-connection` \| `vpn-gateway`).
     #
-    #   * `tag`\:&lt;key&gt; - The key/value combination of the tag. For
+    #   * `tag`:&lt;key&gt; - The key/value combination of the tag. For
     #     example, specify "tag:Owner" for the filter name and "TeamA"
     #     for the filter value to find resources with the tag
     #     "Owner=TeamA".
@@ -24102,9 +24187,9 @@ module Aws::EC2
     # @!attribute [rw] filters
     #   One or more filters. The possible values are:
     #
-    #   * `description`\: The Traffic Mirror filter description.
+    #   * `description`: The Traffic Mirror filter description.
     #
-    #   * `traffic-mirror-filter-id`\: The ID of the Traffic Mirror filter.
+    #   * `traffic-mirror-filter-id`: The ID of the Traffic Mirror filter.
     #   @return [Array<Types::Filter>]
     #
     # @!attribute [rw] max_results
@@ -24161,27 +24246,26 @@ module Aws::EC2
     # @!attribute [rw] filters
     #   One or more filters. The possible values are:
     #
-    #   * `description`\: The Traffic Mirror session description.
+    #   * `description`: The Traffic Mirror session description.
     #
-    #   * `network-interface-id`\: The ID of the Traffic Mirror session
+    #   * `network-interface-id`: The ID of the Traffic Mirror session
     #     network interface.
     #
-    #   * `owner-id`\: The ID of the account that owns the Traffic Mirror
+    #   * `owner-id`: The ID of the account that owns the Traffic Mirror
     #     session.
     #
-    #   * `packet-length`\: The assigned number of packets to mirror.
+    #   * `packet-length`: The assigned number of packets to mirror.
     #
-    #   * `session-number`\: The assigned session number.
+    #   * `session-number`: The assigned session number.
     #
-    #   * `traffic-mirror-filter-id`\: The ID of the Traffic Mirror filter.
+    #   * `traffic-mirror-filter-id`: The ID of the Traffic Mirror filter.
     #
-    #   * `traffic-mirror-session-id`\: The ID of the Traffic Mirror
-    #     session.
+    #   * `traffic-mirror-session-id`: The ID of the Traffic Mirror session.
     #
-    #   * `traffic-mirror-target-id`\: The ID of the Traffic Mirror target.
+    #   * `traffic-mirror-target-id`: The ID of the Traffic Mirror target.
     #
-    #   * `virtual-network-id`\: The virtual network ID of the Traffic
-    #     Mirror session.
+    #   * `virtual-network-id`: The virtual network ID of the Traffic Mirror
+    #     session.
     #   @return [Array<Types::Filter>]
     #
     # @!attribute [rw] max_results
@@ -24240,18 +24324,18 @@ module Aws::EC2
     # @!attribute [rw] filters
     #   One or more filters. The possible values are:
     #
-    #   * `description`\: The Traffic Mirror target description.
+    #   * `description`: The Traffic Mirror target description.
     #
-    #   * `network-interface-id`\: The ID of the Traffic Mirror session
+    #   * `network-interface-id`: The ID of the Traffic Mirror session
     #     network interface.
     #
-    #   * `network-load-balancer-arn`\: The Amazon Resource Name (ARN) of
-    #     the Network Load Balancer that is associated with the session.
+    #   * `network-load-balancer-arn`: The Amazon Resource Name (ARN) of the
+    #     Network Load Balancer that is associated with the session.
     #
-    #   * `owner-id`\: The ID of the account that owns the Traffic Mirror
+    #   * `owner-id`: The ID of the account that owns the Traffic Mirror
     #     session.
     #
-    #   * `traffic-mirror-target-id`\: The ID of the Traffic Mirror target.
+    #   * `traffic-mirror-target-id`: The ID of the Traffic Mirror target.
     #   @return [Array<Types::Filter>]
     #
     # @!attribute [rw] max_results
@@ -24590,10 +24674,10 @@ module Aws::EC2
     #     `initiatingRequest` \| `modifying` \| `pendingAcceptance` \|
     #     `pending` \| `rollingBack` \| `rejected` \| `rejecting`).
     #
-    #   * `tag`\:&lt;key&gt; - The key/value combination of a tag assigned
-    #     to the resource. Use the tag key in the filter name and the tag
-    #     value as the filter value. For example, to find all resources that
-    #     have a tag with the key `Owner` and the value `TeamA`, specify
+    #   * `tag`:&lt;key&gt; - The key/value combination of a tag assigned to
+    #     the resource. Use the tag key in the filter name and the tag value
+    #     as the filter value. For example, to find all resources that have
+    #     a tag with the key `Owner` and the value `TeamA`, specify
     #     `tag:Owner` for the filter name and `TeamA` for the filter value.
     #
     #   * `tag-key` - The key of a tag assigned to the resource. Use this
@@ -25400,8 +25484,8 @@ module Aws::EC2
     #
     #   * `event.event-id` - The event ID.
     #
-    #   * `event.event-type` - The event type (for `io-enabled`\: `passed`
-    #     \| `failed`; for `io-performance`\: `io-performance:degraded` \|
+    #   * `event.event-type` - The event type (for `io-enabled`: `passed` \|
+    #     `failed`; for `io-performance`: `io-performance:degraded` \|
     #     `io-performance:severely-degraded` \| `io-performance:stalled`).
     #
     #   * `event.not-after` - The latest end time for the event.
@@ -25412,8 +25496,8 @@ module Aws::EC2
     #     `volume-status.status` (`io-enabled` \| `io-performance`).
     #
     #   * `volume-status.details-status` - The status of
-    #     `volume-status.details-name` (for `io-enabled`\: `passed` \|
-    #     `failed`; for `io-performance`\: `normal` \| `degraded` \|
+    #     `volume-status.details-name` (for `io-enabled`: `passed` \|
+    #     `failed`; for `io-performance`: `normal` \| `degraded` \|
     #     `severely-degraded` \| `stalled`).
     #
     #   * `volume-status.status` - The status of the volume (`ok` \|
@@ -25610,10 +25694,10 @@ module Aws::EC2
     #   * `status` - The state of the volume (`creating` \| `available` \|
     #     `in-use` \| `deleting` \| `deleted` \| `error`).
     #
-    #   * `tag`\:&lt;key&gt; - The key/value combination of a tag assigned
-    #     to the resource. Use the tag key in the filter name and the tag
-    #     value as the filter value. For example, to find all resources that
-    #     have a tag with the key `Owner` and the value `TeamA`, specify
+    #   * `tag`:&lt;key&gt; - The key/value combination of a tag assigned to
+    #     the resource. Use the tag key in the filter name and the tag value
+    #     as the filter value. For example, to find all resources that have
+    #     a tag with the key `Owner` and the value `TeamA`, specify
     #     `tag:Owner` for the filter name and `TeamA` for the filter value.
     #
     #   * `tag-key` - The key of a tag assigned to the resource. Use this
@@ -25798,10 +25882,10 @@ module Aws::EC2
     #   * `is-classic-link-enabled` - Whether the VPC is enabled for
     #     ClassicLink (`true` \| `false`).
     #
-    #   * `tag`\:&lt;key&gt; - The key/value combination of a tag assigned
-    #     to the resource. Use the tag key in the filter name and the tag
-    #     value as the filter value. For example, to find all resources that
-    #     have a tag with the key `Owner` and the value `TeamA`, specify
+    #   * `tag`:&lt;key&gt; - The key/value combination of a tag assigned to
+    #     the resource. Use the tag key in the filter name and the tag value
+    #     as the filter value. For example, to find all resources that have
+    #     a tag with the key `Owner` and the value `TeamA`, specify
     #     `tag:Owner` for the filter name and `TeamA` for the filter value.
     #
     #   * `tag-key` - The key of a tag assigned to the resource. Use this
@@ -26002,10 +26086,10 @@ module Aws::EC2
     #   * `supported-ip-address-types` - The IP address type (`ipv4` \|
     #     `ipv6`).
     #
-    #   * `tag`\:&lt;key&gt; - The key/value combination of a tag assigned
-    #     to the resource. Use the tag key in the filter name and the tag
-    #     value as the filter value. For example, to find all resources that
-    #     have a tag with the key `Owner` and the value `TeamA`, specify
+    #   * `tag`:&lt;key&gt; - The key/value combination of a tag assigned to
+    #     the resource. Use the tag key in the filter name and the tag value
+    #     as the filter value. For example, to find all resources that have
+    #     a tag with the key `Owner` and the value `TeamA`, specify
     #     `tag:Owner` for the filter name and `TeamA` for the filter value.
     #
     #   * `tag-key` - The key of a tag assigned to the resource. Use this
@@ -26142,10 +26226,10 @@ module Aws::EC2
     #   * `supported-ip-address-types` - The IP address type (`ipv4` \|
     #     `ipv6`).
     #
-    #   * `tag`\:&lt;key&gt; - The key/value combination of a tag assigned
-    #     to the resource. Use the tag key in the filter name and the tag
-    #     value as the filter value. For example, to find all resources that
-    #     have a tag with the key `Owner` and the value `TeamA`, specify
+    #   * `tag`:&lt;key&gt; - The key/value combination of a tag assigned to
+    #     the resource. Use the tag key in the filter name and the tag value
+    #     as the filter value. For example, to find all resources that have
+    #     a tag with the key `Owner` and the value `TeamA`, specify
     #     `tag:Owner` for the filter name and `TeamA` for the filter value.
     #
     #   * `tag-key` - The key of a tag assigned to the resource. Use this
@@ -26220,10 +26304,10 @@ module Aws::EC2
     #
     #   * `service-name` - The name of the service.
     #
-    #   * `tag`\:&lt;key&gt; - The key/value combination of a tag assigned
-    #     to the resource. Use the tag key in the filter name and the tag
-    #     value as the filter value. For example, to find all resources that
-    #     have a tag with the key `Owner` and the value `TeamA`, specify
+    #   * `tag`:&lt;key&gt; - The key/value combination of a tag assigned to
+    #     the resource. Use the tag key in the filter name and the tag value
+    #     as the filter value. For example, to find all resources that have
+    #     a tag with the key `Owner` and the value `TeamA`, specify
     #     `tag:Owner` for the filter name and `TeamA` for the filter value.
     #
     #   * `tag-key` - The key of a tag assigned to the resource. Use this
@@ -26315,10 +26399,10 @@ module Aws::EC2
     #   * `status-message` - A message that provides more information about
     #     the status of the VPC peering connection, if applicable.
     #
-    #   * `tag`\:&lt;key&gt; - The key/value combination of a tag assigned
-    #     to the resource. Use the tag key in the filter name and the tag
-    #     value as the filter value. For example, to find all resources that
-    #     have a tag with the key `Owner` and the value `TeamA`, specify
+    #   * `tag`:&lt;key&gt; - The key/value combination of a tag assigned to
+    #     the resource. Use the tag key in the filter name and the tag value
+    #     as the filter value. For example, to find all resources that have
+    #     a tag with the key `Owner` and the value `TeamA`, specify
     #     `tag:Owner` for the filter name and `TeamA` for the filter value.
     #
     #   * `tag-key` - The key of a tag assigned to the resource. Use this
@@ -26426,10 +26510,10 @@ module Aws::EC2
     #
     #   * `state` - The state of the VPC (`pending` \| `available`).
     #
-    #   * `tag`\:&lt;key&gt; - The key/value combination of a tag assigned
-    #     to the resource. Use the tag key in the filter name and the tag
-    #     value as the filter value. For example, to find all resources that
-    #     have a tag with the key `Owner` and the value `TeamA`, specify
+    #   * `tag`:&lt;key&gt; - The key/value combination of a tag assigned to
+    #     the resource. Use the tag key in the filter name and the tag value
+    #     as the filter value. For example, to find all resources that have
+    #     a tag with the key `Owner` and the value `TeamA`, specify
     #     `tag:Owner` for the filter name and `TeamA` for the filter value.
     #
     #   * `tag-key` - The key of a tag assigned to the resource. Use this
@@ -26522,10 +26606,10 @@ module Aws::EC2
     #   * `bgp-asn` - The BGP Autonomous System Number (ASN) associated with
     #     a BGP device.
     #
-    #   * `tag`\:&lt;key&gt; - The key/value combination of a tag assigned
-    #     to the resource. Use the tag key in the filter name and the tag
-    #     value as the filter value. For example, to find all resources that
-    #     have a tag with the key `Owner` and the value `TeamA`, specify
+    #   * `tag`:&lt;key&gt; - The key/value combination of a tag assigned to
+    #     the resource. Use the tag key in the filter name and the tag value
+    #     as the filter value. For example, to find all resources that have
+    #     a tag with the key `Owner` and the value `TeamA`, specify
     #     `tag:Owner` for the filter name and `TeamA` for the filter value.
     #
     #   * `tag-key` - The key of a tag assigned to the resource. Use this
@@ -26601,10 +26685,10 @@ module Aws::EC2
     #   * `state` - The state of the virtual private gateway (`pending` \|
     #     `available` \| `deleting` \| `deleted`).
     #
-    #   * `tag`\:&lt;key&gt; - The key/value combination of a tag assigned
-    #     to the resource. Use the tag key in the filter name and the tag
-    #     value as the filter value. For example, to find all resources that
-    #     have a tag with the key `Owner` and the value `TeamA`, specify
+    #   * `tag`:&lt;key&gt; - The key/value combination of a tag assigned to
+    #     the resource. Use the tag key in the filter name and the tag value
+    #     as the filter value. For example, to find all resources that have
+    #     a tag with the key `Owner` and the value `TeamA`, specify
     #     `tag:Owner` for the filter name and `TeamA` for the filter value.
     #
     #   * `tag-key` - The key of a tag assigned to the resource. Use this
@@ -28245,7 +28329,7 @@ module Aws::EC2
       :bytes,
       :format,
       :import_manifest_url)
-      SENSITIVE = []
+      SENSITIVE = [:import_manifest_url]
       include Aws::Structure
     end
@@ -28317,10 +28401,15 @@ module Aws::EC2
     #   The DNS records created for the endpoint.
     #   @return [String]
     #
+    # @!attribute [rw] private_dns_only_for_inbound_resolver_endpoint
+    #   Indicates whether to enable private DNS only for inbound endpoints.
+    #   @return [Boolean]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/DnsOptions AWS API Documentation
     #
     class DnsOptions < Struct.new(
-      :dns_record_ip_type)
+      :dns_record_ip_type,
+      :private_dns_only_for_inbound_resolver_endpoint)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -28331,10 +28420,19 @@ module Aws::EC2
     #   The DNS records created for the endpoint.
     #   @return [String]
     #
+    # @!attribute [rw] private_dns_only_for_inbound_resolver_endpoint
+    #   Indicates whether to enable private DNS only for inbound endpoints.
+    #   This option is available only for services that support both gateway
+    #   and interface endpoints. It routes traffic that originates from the
+    #   VPC to the gateway endpoint and traffic that originates from
+    #   on-premises to the interface endpoint.
+    #   @return [Boolean]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/DnsOptionsSpecification AWS API Documentation
     #
     class DnsOptionsSpecification < Struct.new(
-      :dns_record_ip_type)
+      :dns_record_ip_type,
+      :private_dns_only_for_inbound_resolver_endpoint)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -28383,11 +28481,11 @@ module Aws::EC2
     #
     #   The following are the supported values for each volume type:
     #
-    #   * `gp3`\: 3,000-16,000 IOPS
+    #   * `gp3`: 3,000-16,000 IOPS
     #
-    #   * `io1`\: 100-64,000 IOPS
+    #   * `io1`: 100-64,000 IOPS
     #
-    #   * `io2`\: 100-64,000 IOPS
+    #   * `io2`: 100-64,000 IOPS
     #
     #   For `io1` and `io2` volumes, we guarantee 64,000 IOPS only for
     #   [Instances built on the Nitro System][1]. Other instance families
@@ -28414,13 +28512,13 @@ module Aws::EC2
     #
     #   The following are the supported volumes sizes for each volume type:
     #
-    #   * `gp2` and `gp3`\:1-16,384
+    #   * `gp2` and `gp3`:1-16,384
     #
-    #   * `io1` and `io2`\: 4-16,384
+    #   * `io1` and `io2`: 4-16,384
     #
-    #   * `st1` and `sc1`\: 125-16,384
+    #   * `st1` and `sc1`: 125-16,384
     #
-    #   * `standard`\: 1-1,024
+    #   * `standard`: 1-1,024
     #   @return [Integer]
     #
     # @!attribute [rw] volume_type
@@ -29349,8 +29447,8 @@ module Aws::EC2
     #
     # @!attribute [rw] deprecate_at
     #   The date and time to deprecate the AMI, in UTC, in the following
-    #   format: *YYYY*-*MM*-*DD*T*HH*\:*MM*\:*SS*Z. If you specify a value
-    #   for seconds, Amazon EC2 rounds the seconds to the nearest minute.
+    #   format: *YYYY*-*MM*-*DD*T*HH*:*MM*:*SS*Z. If you specify a value for
+    #   seconds, Amazon EC2 rounds the seconds to the nearest minute.
     #
     #   You can’t specify a date in the past. The upper limit for
     #   `DeprecateAt` is 10 years from now, except for public AMIs, where
@@ -29994,6 +30092,14 @@ module Aws::EC2
     #   The Region for the component.
     #   @return [String]
     #
+    # @!attribute [rw] firewall_stateless_rule
+    #   The Network Firewall stateless rule.
+    #   @return [Types::FirewallStatelessRule]
+    #
+    # @!attribute [rw] firewall_stateful_rule
+    #   The Network Firewall stateful rule.
+    #   @return [Types::FirewallStatefulRule]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/Explanation AWS API Documentation
     #
     class Explanation < Struct.new(
@@ -30047,7 +30153,9 @@ module Aws::EC2
       :transit_gateway_route_table_route,
       :transit_gateway_attachment,
       :component_account,
-      :component_region)
+      :component_region,
+      :firewall_stateless_rule,
+      :firewall_stateful_rule)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -30718,6 +30826,125 @@ module Aws::EC2
       include Aws::Structure
     end
+    # Describes a port range.
+    #
+    # @!attribute [rw] from_port
+    #   The first port in the range.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] to_port
+    #   The last port in the range.
+    #   @return [Integer]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/FilterPortRange AWS API Documentation
+    #
+    class FilterPortRange < Struct.new(
+      :from_port,
+      :to_port)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+    # Describes a stateful rule.
+    #
+    # @!attribute [rw] rule_group_arn
+    #   The ARN of the stateful rule group.
+    #   @return [String]
+    #
+    # @!attribute [rw] sources
+    #   The source IP addresses, in CIDR notation.
+    #   @return [Array<String>]
+    #
+    # @!attribute [rw] destinations
+    #   The destination IP addresses, in CIDR notation.
+    #   @return [Array<String>]
+    #
+    # @!attribute [rw] source_ports
+    #   The source ports.
+    #   @return [Array<Types::PortRange>]
+    #
+    # @!attribute [rw] destination_ports
+    #   The destination ports.
+    #   @return [Array<Types::PortRange>]
+    #
+    # @!attribute [rw] protocol
+    #   The protocol.
+    #   @return [String]
+    #
+    # @!attribute [rw] rule_action
+    #   The rule action. The possible values are `pass`, `drop`, and
+    #   `alert`.
+    #   @return [String]
+    #
+    # @!attribute [rw] direction
+    #   The direction. The possible values are `FORWARD` and `ANY`.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/FirewallStatefulRule AWS API Documentation
+    #
+    class FirewallStatefulRule < Struct.new(
+      :rule_group_arn,
+      :sources,
+      :destinations,
+      :source_ports,
+      :destination_ports,
+      :protocol,
+      :rule_action,
+      :direction)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+    # Describes a stateless rule.
+    #
+    # @!attribute [rw] rule_group_arn
+    #   The ARN of the stateless rule group.
+    #   @return [String]
+    #
+    # @!attribute [rw] sources
+    #   The source IP addresses, in CIDR notation.
+    #   @return [Array<String>]
+    #
+    # @!attribute [rw] destinations
+    #   The destination IP addresses, in CIDR notation.
+    #   @return [Array<String>]
+    #
+    # @!attribute [rw] source_ports
+    #   The source ports.
+    #   @return [Array<Types::PortRange>]
+    #
+    # @!attribute [rw] destination_ports
+    #   The destination ports.
+    #   @return [Array<Types::PortRange>]
+    #
+    # @!attribute [rw] protocols
+    #   The protocols.
+    #   @return [Array<Integer>]
+    #
+    # @!attribute [rw] rule_action
+    #   The rule action. The possible values are `pass`, `drop`, and
+    #   `forward_to_site`.
+    #   @return [String]
+    #
+    # @!attribute [rw] priority
+    #   The rule priority.
+    #   @return [Integer]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/FirewallStatelessRule AWS API Documentation
+    #
+    class FirewallStatelessRule < Struct.new(
+      :rule_group_arn,
+      :sources,
+      :destinations,
+      :source_ports,
+      :destination_ports,
+      :protocols,
+      :rule_action,
+      :priority)
+      SENSITIVE = []
+      include Aws::Structure
+    end
     # Information about a Capacity Reservation in a Capacity Reservation
     # Fleet.
     #
@@ -30891,13 +31118,13 @@ module Aws::EC2
     #
     # @!attribute [rw] valid_from
     #   The start date and time of the request, in UTC format (for example,
-    #   *YYYY*-*MM*-*DD*T*HH*\:*MM*\:*SS*Z). The default is to start
+    #   *YYYY*-*MM*-*DD*T*HH*:*MM*:*SS*Z). The default is to start
     #   fulfilling the request immediately.
     #   @return [Time]
     #
     # @!attribute [rw] valid_until
     #   The end date and time of the request, in UTC format (for example,
-    #   *YYYY*-*MM*-*DD*T*HH*\:*MM*\:*SS*Z). At this point, no new instance
+    #   *YYYY*-*MM*-*DD*T*HH*:*MM*:*SS*Z). At this point, no new instance
     #   requests are placed or able to fulfill the request. The default end
     #   date is 7 days from the current date.
     #   @return [Time]
@@ -33398,10 +33625,10 @@ module Aws::EC2
     #
     #   * `subnet-id` - The ID of the subnet.
     #
-    #   * `tag`\:&lt;key&gt; - The key/value combination of a tag assigned
-    #     to the resource. Use the tag key in the filter name and the tag
-    #     value as the filter value. For example, to find all resources that
-    #     have a tag with the key `Owner` and the value `TeamA`, specify
+    #   * `tag`:&lt;key&gt; - The key/value combination of a tag assigned to
+    #     the resource. Use the tag key in the filter name and the tag value
+    #     as the filter value. For example, to find all resources that have
+    #     a tag with the key `Owner` and the value `TeamA`, specify
     #     `tag:Owner` for the filter name and `TeamA` for the filter value.
     #
     #   * `tag-key` - The key of a tag assigned to the resource. Use this
@@ -34225,7 +34452,7 @@ module Aws::EC2
     #
     # @!attribute [rw] timestamp
     #   The date and time of the event, in UTC format (for example,
-    #   *YYYY*-*MM*-*DD*T*HH*\:*MM*\:*SS*Z).
+    #   *YYYY*-*MM*-*DD*T*HH*:*MM*:*SS*Z).
     #   @return [Time]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/HistoryRecord AWS API Documentation
@@ -34250,7 +34477,7 @@ module Aws::EC2
     #
     # @!attribute [rw] timestamp
     #   The date and time of the event, in UTC format (for example,
-    #   *YYYY*-*MM*-*DD*T*HH*\:*MM*\:*SS*Z).
+    #   *YYYY*-*MM*-*DD*T*HH*:*MM*:*SS*Z).
     #   @return [Time]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/HistoryRecordEntry AWS API Documentation
@@ -34885,7 +35112,7 @@ module Aws::EC2
     #
     # @!attribute [rw] deprecation_time
     #   The date and time to deprecate the AMI, in UTC, in the following
-    #   format: *YYYY*-*MM*-*DD*T*HH*\:*MM*\:*SS*Z. If you specified a value
+    #   format: *YYYY*-*MM*-*DD*T*HH*:*MM*:*SS*Z. If you specified a value
     #   for seconds, Amazon EC2 rounds the seconds to the nearest minute.
     #   @return [String]
     #
@@ -35260,19 +35487,19 @@ module Aws::EC2
     #     followed by the Region of the key, the Amazon Web Services account
     #     ID of the key owner, the `alias` namespace, and then the key
     #     alias. For example,
-    #     arn:aws:kms:*us-east-1*\:*012345678910*\:alias/*ExampleAlias*.
+    #     arn:aws:kms:*us-east-1*:*012345678910*:alias/*ExampleAlias*.
     #
     #   * ARN using key ID. The ID ARN contains the `arn:aws:kms` namespace,
     #     followed by the Region of the key, the Amazon Web Services account
     #     ID of the key owner, the `key` namespace, and then the key ID. For
     #     example,
-    #     arn:aws:kms:*us-east-1*\:*012345678910*\:key/*abcd1234-a123-456a-a12b-a123b4cd56ef*.
+    #     arn:aws:kms:*us-east-1*:*012345678910*:key/*abcd1234-a123-456a-a12b-a123b4cd56ef*.
     #
     #   * ARN using key alias. The alias ARN contains the `arn:aws:kms`
     #     namespace, followed by the Region of the key, the Amazon Web
     #     Services account ID of the key owner, the `alias` namespace, and
     #     then the key alias. For example,
-    #     arn:aws:kms:*us-east-1*\:*012345678910*\:alias/*ExampleAlias*.
+    #     arn:aws:kms:*us-east-1*:*012345678910*:alias/*ExampleAlias*.
     #
     #   Amazon Web Services parses `KmsKeyId` asynchronously, meaning that
     #   the action you call may appear to complete even though you provided
@@ -35860,19 +36087,19 @@ module Aws::EC2
     #     followed by the Region of the key, the Amazon Web Services account
     #     ID of the key owner, the `alias` namespace, and then the key
     #     alias. For example,
-    #     arn:aws:kms:*us-east-1*\:*012345678910*\:alias/*ExampleAlias*.
+    #     arn:aws:kms:*us-east-1*:*012345678910*:alias/*ExampleAlias*.
     #
     #   * ARN using key ID. The ID ARN contains the `arn:aws:kms` namespace,
     #     followed by the Region of the key, the Amazon Web Services account
     #     ID of the key owner, the `key` namespace, and then the key ID. For
     #     example,
-    #     arn:aws:kms:*us-east-1*\:*012345678910*\:key/*abcd1234-a123-456a-a12b-a123b4cd56ef*.
+    #     arn:aws:kms:*us-east-1*:*012345678910*:key/*abcd1234-a123-456a-a12b-a123b4cd56ef*.
     #
     #   * ARN using key alias. The alias ARN contains the `arn:aws:kms`
     #     namespace, followed by the Region of the key, the Amazon Web
     #     Services account ID of the key owner, the `alias` namespace, and
     #     then the key alias. For example,
-    #     arn:aws:kms:*us-east-1*\:*012345678910*\:alias/*ExampleAlias*.
+    #     arn:aws:kms:*us-east-1*:*012345678910*:alias/*ExampleAlias*.
     #
     #   Amazon Web Services parses `KmsKeyId` asynchronously, meaning that
     #   the action you call may appear to complete even though you provided
@@ -38496,17 +38723,17 @@ module Aws::EC2
     #   The valid values for instance-state-code will all be in the range of
     #   the low byte and they are:
     #
-    #   * `0`\: `pending`
+    #   * `0` : `pending`
     #
-    #   * `16`\: `running`
+    #   * `16` : `running`
     #
-    #   * `32`\: `shutting-down`
+    #   * `32` : `shutting-down`
     #
-    #   * `48`\: `terminated`
+    #   * `48` : `terminated`
     #
-    #   * `64`\: `stopping`
+    #   * `64` : `stopping`
     #
-    #   * `80`\: `stopped`
+    #   * `80` : `stopped`
     #
     #   You can ignore the high byte value by zeroing out all of the bits
     #   above 2^8 or 256 in decimal.
@@ -41011,11 +41238,11 @@ module Aws::EC2
     #
     #   The following are the supported values for each volume type:
     #
-    #   * `gp3`\: 3,000-16,000 IOPS
+    #   * `gp3`: 3,000-16,000 IOPS
     #
-    #   * `io1`\: 100-64,000 IOPS
+    #   * `io1`: 100-64,000 IOPS
     #
-    #   * `io2`\: 100-64,000 IOPS
+    #   * `io2`: 100-64,000 IOPS
     #
     #   For `io1` and `io2` volumes, we guarantee 64,000 IOPS only for
     #   [Instances built on the Nitro System][1]. Other instance families
@@ -41044,13 +41271,13 @@ module Aws::EC2
     #   ID or a volume size. The following are the supported volumes sizes
     #   for each volume type:
     #
-    #   * `gp2` and `gp3`\: 1-16,384
+    #   * `gp2` and `gp3`: 1-16,384
     #
-    #   * `io1` and `io2`\: 4-16,384
+    #   * `io1` and `io2`: 4-16,384
     #
-    #   * `st1` and `sc1`\: 125-16,384
+    #   * `st1` and `sc1`: 125-16,384
     #
-    #   * `standard`\: 1-1,024
+    #   * `standard`: 1-1,024
     #   @return [Integer]
     #
     # @!attribute [rw] volume_type
@@ -46369,13 +46596,13 @@ module Aws::EC2
     #
     #   The following are the supported volumes sizes for each volume type:
     #
-    #   * `gp2` and `gp3`\: 1-16,384
+    #   * `gp2` and `gp3`: 1-16,384
     #
-    #   * `io1` and `io2`\: 4-16,384
+    #   * `io1` and `io2`: 4-16,384
     #
-    #   * `st1` and `sc1`\: 125-16,384
+    #   * `st1` and `sc1`: 125-16,384
     #
-    #   * `standard`\: 1-1,024
+    #   * `standard`: 1-1,024
     #
     #   Default: The existing size is retained.
     #   @return [Integer]
@@ -46398,11 +46625,11 @@ module Aws::EC2
     #
     #   The following are the supported values for each volume type:
     #
-    #   * `gp3`\: 3,000-16,000 IOPS
+    #   * `gp3`: 3,000-16,000 IOPS
     #
-    #   * `io1`\: 100-64,000 IOPS
+    #   * `io1`: 100-64,000 IOPS
     #
-    #   * `io2`\: 100-64,000 IOPS
+    #   * `io2`: 100-64,000 IOPS
     #
     #   Default: The existing value is retained if you keep the same volume
     #   type. If you change the volume type to `io1`, `io2`, or `gp3`, the
@@ -47515,20 +47742,20 @@ module Aws::EC2
     # @!attribute [rw] state
     #   The state of the NAT gateway.
     #
-    #   * `pending`\: The NAT gateway is being created and is not ready to
+    #   * `pending`: The NAT gateway is being created and is not ready to
     #     process traffic.
     #
-    #   * `failed`\: The NAT gateway could not be created. Check the
+    #   * `failed`: The NAT gateway could not be created. Check the
     #     `failureCode` and `failureMessage` fields for the reason.
     #
-    #   * `available`\: The NAT gateway is able to process traffic. This
+    #   * `available`: The NAT gateway is able to process traffic. This
     #     status remains until you delete the NAT gateway, and does not
     #     indicate the health of the NAT gateway.
     #
-    #   * `deleting`\: The NAT gateway is in the process of being terminated
+    #   * `deleting`: The NAT gateway is in the process of being terminated
     #     and may still be processing traffic.
     #
-    #   * `deleted`\: The NAT gateway has been terminated and is no longer
+    #   * `deleted`: The NAT gateway has been terminated and is no longer
     #     processing traffic.
     #   @return [String]
     #
@@ -48056,8 +48283,8 @@ module Aws::EC2
     #   @return [Array<String>]
     #
     # @!attribute [rw] filter_in_arns
-    #   The Amazon Resource Names (ARN) of the Amazon Web Services resources
-    #   that the path must traverse.
+    #   The Amazon Resource Names (ARN) of the resources that the path must
+    #   traverse.
     #   @return [Array<String>]
     #
     # @!attribute [rw] start_date
@@ -48147,12 +48374,11 @@ module Aws::EC2
     #   @return [Time]
     #
     # @!attribute [rw] source
-    #   The Amazon Web Services resource that is the source of the path.
+    #   The ID of the source.
     #   @return [String]
     #
     # @!attribute [rw] destination
-    #   The Amazon Web Services resource that is the destination of the
-    #   path.
+    #   The ID of the destination.
     #   @return [String]
     #
     # @!attribute [rw] source_arn
@@ -48164,13 +48390,11 @@ module Aws::EC2
     #   @return [String]
     #
     # @!attribute [rw] source_ip
-    #   The IP address of the Amazon Web Services resource that is the
-    #   source of the path.
+    #   The IP address of the source.
     #   @return [String]
     #
     # @!attribute [rw] destination_ip
-    #   The IP address of the Amazon Web Services resource that is the
-    #   destination of the path.
+    #   The IP address of the destination.
     #   @return [String]
     #
     # @!attribute [rw] protocol
@@ -48185,6 +48409,16 @@ module Aws::EC2
     #   The tags associated with the path.
     #   @return [Array<Types::Tag>]
     #
+    # @!attribute [rw] filter_at_source
+    #   Scopes the analysis to network paths that match specific filters at
+    #   the source.
+    #   @return [Types::PathFilter]
+    #
+    # @!attribute [rw] filter_at_destination
+    #   Scopes the analysis to network paths that match specific filters at
+    #   the destination.
+    #   @return [Types::PathFilter]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/NetworkInsightsPath AWS API Documentation
     #
     class NetworkInsightsPath < Struct.new(
@@ -48199,7 +48433,9 @@ module Aws::EC2
       :destination_ip,
       :protocol,
       :destination_port,
-      :tags)
+      :tags,
+      :filter_at_source,
+      :filter_at_destination)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -48972,6 +49208,18 @@ module Aws::EC2
     #   The load balancer listener.
     #   @return [Types::AnalysisComponent]
     #
+    # @!attribute [rw] firewall_stateless_rule
+    #   The Network Firewall stateless rule.
+    #   @return [Types::FirewallStatelessRule]
+    #
+    # @!attribute [rw] firewall_stateful_rule
+    #   The Network Firewall stateful rule.
+    #   @return [Types::FirewallStatefulRule]
+    #
+    # @!attribute [rw] service_name
+    #   The name of the VPC endpoint service.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/PathComponent AWS API Documentation
     #
     class PathComponent < Struct.new(
@@ -48991,7 +49239,70 @@ module Aws::EC2
       :transit_gateway,
       :transit_gateway_route_table_route,
       :explanations,
-      :elastic_load_balancer_listener)
+      :elastic_load_balancer_listener,
+      :firewall_stateless_rule,
+      :firewall_stateful_rule,
+      :service_name)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+    # Describes a set of filters for a path analysis. Use path filters to
+    # scope the analysis when there can be multiple resulting paths.
+    #
+    # @!attribute [rw] source_address
+    #   The source IPv4 address.
+    #   @return [String]
+    #
+    # @!attribute [rw] source_port_range
+    #   The source port range.
+    #   @return [Types::FilterPortRange]
+    #
+    # @!attribute [rw] destination_address
+    #   The destination IPv4 address.
+    #   @return [String]
+    #
+    # @!attribute [rw] destination_port_range
+    #   The destination port range.
+    #   @return [Types::FilterPortRange]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/PathFilter AWS API Documentation
+    #
+    class PathFilter < Struct.new(
+      :source_address,
+      :source_port_range,
+      :destination_address,
+      :destination_port_range)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+    # Describes a set of filters for a path analysis. Use path filters to
+    # scope the analysis when there can be multiple resulting paths.
+    #
+    # @!attribute [rw] source_address
+    #   The source IPv4 address.
+    #   @return [String]
+    #
+    # @!attribute [rw] source_port_range
+    #   The source port range.
+    #   @return [Types::RequestFilterPortRange]
+    #
+    # @!attribute [rw] destination_address
+    #   The destination IPv4 address.
+    #   @return [String]
+    #
+    # @!attribute [rw] destination_port_range
+    #   The destination port range.
+    #   @return [Types::RequestFilterPortRange]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/PathRequestFilter AWS API Documentation
+    #
+    class PathRequestFilter < Struct.new(
+      :source_address,
+      :source_port_range,
+      :destination_address,
+      :destination_port_range)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -50529,7 +50840,7 @@ module Aws::EC2
     #
     # @!attribute [rw] purchase_time
     #   The time at which to purchase the Reserved Instance, in UTC format
-    #   (for example, *YYYY*-*MM*-*DD*T*HH*\:*MM*\:*SS*Z).
+    #   (for example, *YYYY*-*MM*-*DD*T*HH*:*MM*:*SS*Z).
     #   @return [Time]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/PurchaseReservedInstancesOfferingRequest AWS API Documentation
@@ -51822,30 +52133,30 @@ module Aws::EC2
     # @!attribute [rw] reason_codes
     #   The reason codes that describe the health state of your instance.
     #
-    #   * `instance-stuck-in-state`\: My instance is stuck in a state.
+    #   * `instance-stuck-in-state`: My instance is stuck in a state.
     #
-    #   * `unresponsive`\: My instance is unresponsive.
+    #   * `unresponsive`: My instance is unresponsive.
     #
-    #   * `not-accepting-credentials`\: My instance is not accepting my
+    #   * `not-accepting-credentials`: My instance is not accepting my
     #     credentials.
     #
-    #   * `password-not-available`\: A password is not available for my
+    #   * `password-not-available`: A password is not available for my
     #     instance.
     #
-    #   * `performance-network`\: My instance is experiencing performance
+    #   * `performance-network`: My instance is experiencing performance
     #     problems that I believe are network related.
     #
-    #   * `performance-instance-store`\: My instance is experiencing
+    #   * `performance-instance-store`: My instance is experiencing
     #     performance problems that I believe are related to the instance
     #     stores.
     #
-    #   * `performance-ebs-volume`\: My instance is experiencing performance
+    #   * `performance-ebs-volume`: My instance is experiencing performance
     #     problems that I believe are related to an EBS volume.
     #
-    #   * `performance-other`\: My instance is experiencing performance
+    #   * `performance-other`: My instance is experiencing performance
     #     problems.
     #
-    #   * `other`\: \[explain using the description parameter\]
+    #   * `other`: \[explain using the description parameter\]
     #   @return [Array<String>]
     #
     # @!attribute [rw] start_time
@@ -51870,6 +52181,25 @@ module Aws::EC2
       include Aws::Structure
     end
+    # Describes a port range.
+    #
+    # @!attribute [rw] from_port
+    #   The first port in the range.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] to_port
+    #   The last port in the range.
+    #   @return [Integer]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/RequestFilterPortRange AWS API Documentation
+    #
+    class RequestFilterPortRange < Struct.new(
+      :from_port,
+      :to_port)
+      SENSITIVE = []
+      include Aws::Structure
+    end
     # A tag on an IPAM resource.
     #
     # @!attribute [rw] key
@@ -52360,7 +52690,7 @@ module Aws::EC2
     #
     # @!attribute [rw] valid_until
     #   The end date of the request, in UTC format
-    #   (*YYYY*-*MM*-*DD*T*HH*\:*MM*\:*SS*Z).
+    #   (*YYYY*-*MM*-*DD*T*HH*:*MM*:*SS*Z).
     #
     #   * For a persistent request, the request remains active until the
     #     `ValidUntil` date and time is reached. Otherwise, the request
@@ -54315,6 +54645,64 @@ module Aws::EC2
       include Aws::Structure
     end
+    # Describes the rule options for a stateful rule group.
+    #
+    # @!attribute [rw] rule_group_arn
+    #   The ARN of the rule group.
+    #   @return [String]
+    #
+    # @!attribute [rw] rule_options
+    #   The rule options.
+    #   @return [Array<Types::RuleOption>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/RuleGroupRuleOptionsPair AWS API Documentation
+    #
+    class RuleGroupRuleOptionsPair < Struct.new(
+      :rule_group_arn,
+      :rule_options)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+    # Describes the type of a stateful rule group.
+    #
+    # @!attribute [rw] rule_group_arn
+    #   The ARN of the rule group.
+    #   @return [String]
+    #
+    # @!attribute [rw] rule_group_type
+    #   The rule group type. The possible values are `Domain List` and
+    #   `Suricata`.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/RuleGroupTypePair AWS API Documentation
+    #
+    class RuleGroupTypePair < Struct.new(
+      :rule_group_arn,
+      :rule_group_type)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+    # Describes additional settings for a stateful rule.
+    #
+    # @!attribute [rw] keyword
+    #   The Suricata keyword.
+    #   @return [String]
+    #
+    # @!attribute [rw] settings
+    #   The settings for the keyword.
+    #   @return [Array<String>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/RuleOption AWS API Documentation
+    #
+    class RuleOption < Struct.new(
+      :keyword,
+      :settings)
+      SENSITIVE = []
+      include Aws::Structure
+    end
     # Describes the monitoring of an instance.
     #
     # @!attribute [rw] enabled
@@ -54866,7 +55254,7 @@ module Aws::EC2
     #   The key of the tag.
     #
     #   Constraints: Tag keys are case-sensitive and can be up to 128
-    #   Unicode characters in length. May not begin with `aws`\:.
+    #   Unicode characters in length. May not begin with `aws`:.
     #   @return [String]
     #
     # @!attribute [rw] value
@@ -57301,14 +57689,14 @@ module Aws::EC2
     #
     # @!attribute [rw] valid_from
     #   The start date and time of the request, in UTC format
-    #   (*YYYY*-*MM*-*DD*T*HH*\:*MM*\:*SS*Z). By default, Amazon EC2 starts
+    #   (*YYYY*-*MM*-*DD*T*HH*:*MM*:*SS*Z). By default, Amazon EC2 starts
     #   fulfilling the request immediately.
     #   @return [Time]
     #
     # @!attribute [rw] valid_until
     #   The end date and time of the request, in UTC format
-    #   (*YYYY*-*MM*-*DD*T*HH*\:*MM*\:*SS*Z). After the end date and time,
-    #   no new Spot Instance requests are placed or able to fulfill the
+    #   (*YYYY*-*MM*-*DD*T*HH*:*MM*:*SS*Z). After the end date and time, no
+    #   new Spot Instance requests are placed or able to fulfill the
     #   request. If no value is specified, the Spot Fleet request remains
     #   until you cancel it.
     #   @return [Time]
@@ -57450,7 +57838,7 @@ module Aws::EC2
     #
     # @!attribute [rw] create_time
     #   The date and time when the Spot Instance request was created, in UTC
-    #   format (for example, *YYYY*-*MM*-*DD*T*HH*\:*MM*\:*SS*Z).
+    #   format (for example, *YYYY*-*MM*-*DD*T*HH*:*MM*:*SS*Z).
     #   @return [Time]
     #
     # @!attribute [rw] fault
@@ -57519,13 +57907,13 @@ module Aws::EC2
     #
     # @!attribute [rw] valid_from
     #   The start date of the request, in UTC format (for example,
-    #   *YYYY*-*MM*-*DD*T*HH*\:*MM*\:*SS*Z). The request becomes active at
+    #   *YYYY*-*MM*-*DD*T*HH*:*MM*:*SS*Z). The request becomes active at
     #   this date and time.
     #   @return [Time]
     #
     # @!attribute [rw] valid_until
     #   The end date of the request, in UTC format
-    #   (*YYYY*-*MM*-*DD*T*HH*\:*MM*\:*SS*Z).
+    #   (*YYYY*-*MM*-*DD*T*HH*:*MM*:*SS*Z).
     #
     #   * For a persistent request, the request remains active until the
     #     `validUntil` date and time is reached. Otherwise, the request
@@ -57603,7 +57991,7 @@ module Aws::EC2
     #
     # @!attribute [rw] update_time
     #   The date and time of the most recent status update, in UTC format
-    #   (for example, *YYYY*-*MM*-*DD*T*HH*\:*MM*\:*SS*Z).
+    #   (for example, *YYYY*-*MM*-*DD*T*HH*:*MM*:*SS*Z).
     #   @return [Time]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/SpotInstanceStatus AWS API Documentation
@@ -57667,7 +58055,7 @@ module Aws::EC2
     #
     # @!attribute [rw] valid_until
     #   The end date of the request, in UTC format
-    #   (*YYYY*-*MM*-*DD*T*HH*\:*MM*\:*SS*Z). Supported only for persistent
+    #   (*YYYY*-*MM*-*DD*T*HH*:*MM*:*SS*Z). Supported only for persistent
     #   requests.
     #
     #   * For a persistent request, the request remains active until the
@@ -58068,7 +58456,7 @@ module Aws::EC2
     #
     # @!attribute [rw] timestamp
     #   The date and time the request was created, in UTC format (for
-    #   example, *YYYY*-*MM*-*DD*T*HH*\:*MM*\:*SS*Z).
+    #   example, *YYYY*-*MM*-*DD*T*HH*:*MM*:*SS*Z).
     #   @return [Time]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/SpotPrice AWS API Documentation
@@ -58363,44 +58751,44 @@ module Aws::EC2
     # @!attribute [rw] message
     #   The message for the state change.
     #
-    #   * `Server.InsufficientInstanceCapacity`\: There was insufficient
+    #   * `Server.InsufficientInstanceCapacity`: There was insufficient
     #     capacity available to satisfy the launch request.
     #
-    #   * `Server.InternalError`\: An internal error caused the instance to
+    #   * `Server.InternalError`: An internal error caused the instance to
     #     terminate during launch.
     #
-    #   * `Server.ScheduledStop`\: The instance was stopped due to a
+    #   * `Server.ScheduledStop`: The instance was stopped due to a
     #     scheduled retirement.
     #
-    #   * `Server.SpotInstanceShutdown`\: The instance was stopped because
+    #   * `Server.SpotInstanceShutdown`: The instance was stopped because
     #     the number of Spot requests with a maximum price equal to or
     #     higher than the Spot price exceeded available capacity or because
     #     of an increase in the Spot price.
     #
-    #   * `Server.SpotInstanceTermination`\: The instance was terminated
+    #   * `Server.SpotInstanceTermination`: The instance was terminated
     #     because the number of Spot requests with a maximum price equal to
     #     or higher than the Spot price exceeded available capacity or
     #     because of an increase in the Spot price.
     #
-    #   * `Client.InstanceInitiatedShutdown`\: The instance was shut down
+    #   * `Client.InstanceInitiatedShutdown`: The instance was shut down
     #     using the `shutdown -h` command from the instance.
     #
-    #   * `Client.InstanceTerminated`\: The instance was terminated or
+    #   * `Client.InstanceTerminated`: The instance was terminated or
     #     rebooted during AMI creation.
     #
-    #   * `Client.InternalError`\: A client error caused the instance to
+    #   * `Client.InternalError`: A client error caused the instance to
     #     terminate during launch.
     #
-    #   * `Client.InvalidSnapshot.NotFound`\: The specified snapshot was not
+    #   * `Client.InvalidSnapshot.NotFound`: The specified snapshot was not
     #     found.
     #
-    #   * `Client.UserInitiatedHibernate`\: Hibernation was initiated on the
+    #   * `Client.UserInitiatedHibernate`: Hibernation was initiated on the
     #     instance.
     #
-    #   * `Client.UserInitiatedShutdown`\: The instance was shut down using
+    #   * `Client.UserInitiatedShutdown`: The instance was shut down using
     #     the Amazon EC2 API.
     #
-    #   * `Client.VolumeLimitExceeded`\: The limit on the number of EBS
+    #   * `Client.VolumeLimitExceeded`: The limit on the number of EBS
     #     volumes or total storage was exceeded. Decrease usage or request
     #     an increase in your account limits.
     #   @return [String]