aws-sdk-ec2 1.369.0 → 1.371.0

data/lib/aws-sdk-ec2/types.rb

@@ -103,7 +103,7 @@ module Aws::EC2
     #   @return [String]
     #
     # @!attribute [rw] tag_specifications
-    #   `tag`\:<key> - The key/value combination of a tag assigned to
+    #   `tag`:<key> - The key/value combination of a tag assigned to
     #   the resource. Use the tag key in the filter name and the tag value
     #   as the filter value. For example, to find all resources that have a
     #   tag with the key `Owner` and the value `TeamA`, specify `tag:Owner`
@@ -576,21 +576,56 @@ module Aws::EC2
       include Aws::Structure
     end
 
-    # Describes an additional detail for a path analysis.
+    # Describes an additional detail for a path analysis. For more
+    # information, see [Reachability Analyzer additional detail codes][1].
+    #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com/vpc/latest/reachability/additional-detail-codes.html
     #
     # @!attribute [rw] additional_detail_type
-    #   The information type.
+    #   The additional detail code.
     #   @return [String]
     #
     # @!attribute [rw] component
     #   The path component.
     #   @return [Types::AnalysisComponent]
     #
+    # @!attribute [rw] vpc_endpoint_service
+    #   The VPC endpoint service.
+    #   @return [Types::AnalysisComponent]
+    #
+    # @!attribute [rw] rule_options
+    #   The rule options.
+    #   @return [Array<Types::RuleOption>]
+    #
+    # @!attribute [rw] rule_group_type_pairs
+    #   The rule group type.
+    #   @return [Array<Types::RuleGroupTypePair>]
+    #
+    # @!attribute [rw] rule_group_rule_options_pairs
+    #   The rule options.
+    #   @return [Array<Types::RuleGroupRuleOptionsPair>]
+    #
+    # @!attribute [rw] service_name
+    #   The name of the VPC endpoint service.
+    #   @return [String]
+    #
+    # @!attribute [rw] load_balancers
+    #   The load balancers.
+    #   @return [Array<Types::AnalysisComponent>]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/AdditionalDetail AWS API Documentation
     #
     class AdditionalDetail < Struct.new(
       :additional_detail_type,
-      :component)
+      :component,
+      :vpc_endpoint_service,
+      :rule_options,
+      :rule_group_type_pairs,
+      :rule_group_rule_options_pairs,
+      :service_name,
+      :load_balancers)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -1389,6 +1424,18 @@ module Aws::EC2
     #   * blackhole
     #   @return [String]
     #
+    # @!attribute [rw] carrier_gateway_id
+    #   The ID of a carrier gateway.
+    #   @return [String]
+    #
+    # @!attribute [rw] core_network_arn
+    #   The Amazon Resource Name (ARN) of a core network.
+    #   @return [String]
+    #
+    # @!attribute [rw] local_gateway_id
+    #   The ID of a local gateway.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/AnalysisRouteTableRoute AWS API Documentation
     #
     class AnalysisRouteTableRoute < Struct.new(
@@ -1402,7 +1449,10 @@ module Aws::EC2
       :origin,
       :transit_gateway_id,
       :vpc_peering_connection_id,
-      :state)
+      :state,
+      :carrier_gateway_id,
+      :core_network_arn,
+      :local_gateway_id)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -7315,13 +7365,13 @@ module Aws::EC2
     #
     # @!attribute [rw] valid_from
     #   The start date and time of the request, in UTC format (for example,
-    #   *YYYY*-*MM*-*DD*T*HH*\:*MM*\:*SS*Z). The default is to start
+    #   *YYYY*-*MM*-*DD*T*HH*:*MM*:*SS*Z). The default is to start
     #   fulfilling the request immediately.
     #   @return [Time]
     #
     # @!attribute [rw] valid_until
     #   The end date and time of the request, in UTC format (for example,
-    #   *YYYY*-*MM*-*DD*T*HH*\:*MM*\:*SS*Z). At this point, no new EC2 Fleet
+    #   *YYYY*-*MM*-*DD*T*HH*:*MM*:*SS*Z). At this point, no new EC2 Fleet
     #   requests are placed or able to fulfill the request. If no value is
     #   specified, the request remains until you cancel it.
     #   @return [Time]
@@ -7472,7 +7522,7 @@ module Aws::EC2
     #   * If the destination type is `cloud-watch-logs`, specify the ARN of
     #     a CloudWatch Logs log group. For example:
     #
-    #     arn:aws:logs:*region*\:*account\_id*\:log-group:*my\_group*
+    #     arn:aws:logs:*region*:*account\_id*:log-group:*my\_group*
     #
     #     Alternatively, use the `LogGroupName` parameter.
     #
@@ -7487,7 +7537,7 @@ module Aws::EC2
     #   * If the destination type is `kinesis-data-firehose`, specify the
     #     ARN of a Kinesis Data Firehose delivery stream. For example:
     #
-    #     arn:aws:firehose:*region*\:*account\_id*\:deliverystream:*my\_stream*
+    #     arn:aws:firehose:*region*:*account\_id*:deliverystream:*my\_stream*
     #   @return [String]
     #
     # @!attribute [rw] log_format
@@ -9013,22 +9063,21 @@ module Aws::EC2
     end
 
     # @!attribute [rw] source_ip
-    #   The IP address of the Amazon Web Services resource that is the
-    #   source of the path.
+    #   The IP address of the source.
     #   @return [String]
     #
     # @!attribute [rw] destination_ip
-    #   The IP address of the Amazon Web Services resource that is the
-    #   destination of the path.
+    #   The IP address of the destination.
     #   @return [String]
     #
     # @!attribute [rw] source
-    #   The Amazon Web Services resource that is the source of the path.
+    #   The ID or ARN of the source. If the resource is in another account,
+    #   you must specify an ARN.
     #   @return [String]
     #
     # @!attribute [rw] destination
-    #   The Amazon Web Services resource that is the destination of the
-    #   path.
+    #   The ID or ARN of the destination. If the resource is in another
+    #   account, you must specify an ARN.
     #   @return [String]
     #
     # @!attribute [rw] protocol
@@ -9063,6 +9112,18 @@ module Aws::EC2
     #   [1]: https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Run_Instance_Idempotency.html
     #   @return [String]
     #
+    # @!attribute [rw] filter_at_source
+    #   Scopes the analysis to network paths that match specific filters at
+    #   the source. If you specify this parameter, you can't specify the
+    #   parameters for the source IP address or the destination port.
+    #   @return [Types::PathRequestFilter]
+    #
+    # @!attribute [rw] filter_at_destination
+    #   Scopes the analysis to network paths that match specific filters at
+    #   the destination. If you specify this parameter, you can't specify
+    #   the parameter for the destination IP address.
+    #   @return [Types::PathRequestFilter]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/CreateNetworkInsightsPathRequest AWS API Documentation
     #
     class CreateNetworkInsightsPathRequest < Struct.new(
@@ -9074,7 +9135,9 @@ module Aws::EC2
       :destination_port,
       :tag_specifications,
       :dry_run,
-      :client_token)
+      :client_token,
+      :filter_at_source,
+      :filter_at_destination)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -9750,7 +9813,7 @@ module Aws::EC2
     end
 
     # @!attribute [rw] description
-    #   A description for the security group. This is informational only.
+    #   A description for the security group.
     #
     #   Constraints: Up to 255 characters in length
     #
@@ -10053,14 +10116,14 @@ module Aws::EC2
     #
     #   The following are valid values:
     #
-    #   * `prefix`\: The Amazon EC2 Prefix Delegation feature assigns the IP
+    #   * `prefix`: The Amazon EC2 Prefix Delegation feature assigns the IP
     #     addresses to network interfaces that are associated with an
     #     instance. For information about Prefix Delegation, see [Prefix
     #     Delegation for Amazon EC2 network interfaces][1] in the *Amazon
     #     Elastic Compute Cloud User Guide*.
     #
-    #   * `explicit`\: You manually assign the IP addresses to resources
-    #     that reside in your subnet.
+    #   * `explicit`: You manually assign the IP addresses to resources that
+    #     reside in your subnet.
     #
     #
     #
@@ -11689,11 +11752,11 @@ module Aws::EC2
     #
     #   The following are the supported values for each volume type:
     #
-    #   * `gp3`\: 3,000-16,000 IOPS
+    #   * `gp3`: 3,000-16,000 IOPS
     #
-    #   * `io1`\: 100-64,000 IOPS
+    #   * `io1`: 100-64,000 IOPS
     #
-    #   * `io2`\: 100-64,000 IOPS
+    #   * `io2`: 100-64,000 IOPS
     #
     #   `io1` and `io2` volumes support up to 64,000 IOPS only on [Instances
     #   built on the Nitro System][1]. Other instance families support
@@ -11743,13 +11806,13 @@ module Aws::EC2
     #
     #   The following are the supported volumes sizes for each volume type:
     #
-    #   * `gp2` and `gp3`\: 1-16,384
+    #   * `gp2` and `gp3`: 1-16,384
     #
-    #   * `io1` and `io2`\: 4-16,384
+    #   * `io1` and `io2`: 4-16,384
     #
-    #   * `st1` and `sc1`\: 125-16,384
+    #   * `st1` and `sc1`: 125-16,384
     #
-    #   * `standard`\: 1-1,024
+    #   * `standard`: 1-1,024
     #   @return [Integer]
     #
     # @!attribute [rw] snapshot_id
@@ -11988,7 +12051,7 @@ module Aws::EC2
     #   names that are automatically generated by the VPC endpoint service.
     #
     #   To use a private hosted zone, you must set the following VPC
-    #   attributes to `true`\: `enableDnsHostnames` and `enableDnsSupport`.
+    #   attributes to `true`: `enableDnsHostnames` and `enableDnsSupport`.
     #   Use ModifyVpcAttribute to set the VPC attributes.
     #
     #   Default: `true`
@@ -15571,10 +15634,10 @@ module Aws::EC2
     #
     #   * `public-ip` - The Elastic IP address, or the carrier IP address.
     #
-    #   * `tag`\:&lt;key&gt; - The key/value combination of a tag assigned
-    #     to the resource. Use the tag key in the filter name and the tag
-    #     value as the filter value. For example, to find all resources that
-    #     have a tag with the key `Owner` and the value `TeamA`, specify
+    #   * `tag`:&lt;key&gt; - The key/value combination of a tag assigned to
+    #     the resource. Use the tag key in the filter name and the tag value
+    #     as the filter value. For example, to find all resources that have
+    #     a tag with the key `Owner` and the value `TeamA`, specify
     #     `tag:Owner` for the filter name and `TeamA` for the filter value.
     #
     #   * `tag-key` - The key of a tag assigned to the resource. Use this
@@ -16130,10 +16193,10 @@ module Aws::EC2
     #   * `owner-id` - The Amazon Web Services account ID of the owner of
     #     the carrier gateway.
     #
-    #   * `tag`\:&lt;key&gt; - The key/value combination of a tag assigned
-    #     to the resource. Use the tag key in the filter name and the tag
-    #     value as the filter value. For example, to find all resources that
-    #     have a tag with the key `Owner` and the value `TeamA`, specify
+    #   * `tag`:&lt;key&gt; - The key/value combination of a tag assigned to
+    #     the resource. Use the tag key in the filter name and the tag value
+    #     as the filter value. For example, to find all resources that have
+    #     a tag with the key `Owner` and the value `TeamA`, specify
     #     `tag:Owner` for the filter name and `TeamA` for the filter value.
     #
     #   * `tag-key` - The key of a tag assigned to the resource. Use this
@@ -16198,10 +16261,10 @@ module Aws::EC2
     #
     #   * `instance-id` - The ID of the instance.
     #
-    #   * `tag`\:&lt;key&gt; - The key/value combination of a tag assigned
-    #     to the resource. Use the tag key in the filter name and the tag
-    #     value as the filter value. For example, to find all resources that
-    #     have a tag with the key `Owner` and the value `TeamA`, specify
+    #   * `tag`:&lt;key&gt; - The key/value combination of a tag assigned to
+    #     the resource. Use the tag key in the filter name and the tag value
+    #     as the filter value. For example, to find all resources that have
+    #     a tag with the key `Owner` and the value `TeamA`, specify
     #     `tag:Owner` for the filter name and `TeamA` for the filter value.
     #
     #   * `tag-key` - The key of a tag assigned to the resource. Use this
@@ -16704,10 +16767,10 @@ module Aws::EC2
     #   * `type` - The type of customer gateway. Currently, the only
     #     supported type is `ipsec.1`.
     #
-    #   * `tag`\:&lt;key&gt; - The key/value combination of a tag assigned
-    #     to the resource. Use the tag key in the filter name and the tag
-    #     value as the filter value. For example, to find all resources that
-    #     have a tag with the key `Owner` and the value `TeamA`, specify
+    #   * `tag`:&lt;key&gt; - The key/value combination of a tag assigned to
+    #     the resource. Use the tag key in the filter name and the tag value
+    #     as the filter value. For example, to find all resources that have
+    #     a tag with the key `Owner` and the value `TeamA`, specify
     #     `tag:Owner` for the filter name and `TeamA` for the filter value.
     #
     #   * `tag-key` - The key of a tag assigned to the resource. Use this
@@ -16765,10 +16828,10 @@ module Aws::EC2
     #   * `owner-id` - The ID of the Amazon Web Services account that owns
     #     the DHCP options set.
     #
-    #   * `tag`\:&lt;key&gt; - The key/value combination of a tag assigned
-    #     to the resource. Use the tag key in the filter name and the tag
-    #     value as the filter value. For example, to find all resources that
-    #     have a tag with the key `Owner` and the value `TeamA`, specify
+    #   * `tag`:&lt;key&gt; - The key/value combination of a tag assigned to
+    #     the resource. Use the tag key in the filter name and the tag value
+    #     as the filter value. For example, to find all resources that have
+    #     a tag with the key `Owner` and the value `TeamA`, specify
     #     `tag:Owner` for the filter name and `TeamA` for the filter value.
     #
     #   * `tag-key` - The key of a tag assigned to the resource. Use this
@@ -16859,10 +16922,10 @@ module Aws::EC2
     # @!attribute [rw] filters
     #   One or more filters.
     #
-    #   * `tag`\:&lt;key&gt; - The key/value combination of a tag assigned
-    #     to the resource. Use the tag key in the filter name and the tag
-    #     value as the filter value. For example, to find all resources that
-    #     have a tag with the key `Owner` and the value `TeamA`, specify
+    #   * `tag`:&lt;key&gt; - The key/value combination of a tag assigned to
+    #     the resource. Use the tag key in the filter name and the tag value
+    #     as the filter value. For example, to find all resources that have
+    #     a tag with the key `Owner` and the value `TeamA`, specify
     #     `tag:Owner` for the filter name and `TeamA` for the filter value.
     #
     #   * `tag-key` - The key of a tag assigned to the resource. Use this
@@ -17277,14 +17340,14 @@ module Aws::EC2
     # @!attribute [rw] filters
     #   The filters. The possible values are:
     #
-    #   * `availability-zone`\: The Availability Zone of the snapshot.
+    #   * `availability-zone`: The Availability Zone of the snapshot.
     #
-    #   * `owner-id`\: The ID of the Amazon Web Services account that
-    #     enabled fast snapshot restore on the snapshot.
+    #   * `owner-id`: The ID of the Amazon Web Services account that enabled
+    #     fast snapshot restore on the snapshot.
     #
-    #   * `snapshot-id`\: The ID of the snapshot.
+    #   * `snapshot-id`: The ID of the snapshot.
     #
-    #   * `state`\: The state of fast snapshot restores for the snapshot
+    #   * `state`: The state of fast snapshot restores for the snapshot
     #     (`enabling` \| `optimizing` \| `enabled` \| `disabling` \|
     #     `disabled`).
     #   @return [Array<Types::Filter>]
@@ -17419,7 +17482,7 @@ module Aws::EC2
     #
     # @!attribute [rw] start_time
     #   The start date and time for the events, in UTC format (for example,
-    #   *YYYY*-*MM*-*DD*T*HH*\:*MM*\:*SS*Z).
+    #   *YYYY*-*MM*-*DD*T*HH*:*MM*:*SS*Z).
     #   @return [Time]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/DescribeFleetHistoryRequest AWS API Documentation
@@ -17441,8 +17504,8 @@ module Aws::EC2
     #
     # @!attribute [rw] last_evaluated_time
     #   The last date and time for the events, in UTC format (for example,
-    #   *YYYY*-*MM*-*DD*T*HH*\:*MM*\:*SS*Z). All records up to this time
-    #   were retrieved.
+    #   *YYYY*-*MM*-*DD*T*HH*:*MM*:*SS*Z). All records up to this time were
+    #   retrieved.
     #
     #   If `nextToken` indicates that there are more items, this value is
     #   not present.
@@ -17459,7 +17522,7 @@ module Aws::EC2
     #
     # @!attribute [rw] start_time
     #   The start date and time for the events, in UTC format (for example,
-    #   *YYYY*-*MM*-*DD*T*HH*\:*MM*\:*SS*Z).
+    #   *YYYY*-*MM*-*DD*T*HH*:*MM*:*SS*Z).
     #   @return [Time]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/DescribeFleetHistoryResult AWS API Documentation
@@ -17691,10 +17754,10 @@ module Aws::EC2
     #   * `traffic-type` - The type of traffic (`ACCEPT` \| `REJECT` \|
     #     `ALL`).
     #
-    #   * `tag`\:&lt;key&gt; - The key/value combination of a tag assigned
-    #     to the resource. Use the tag key in the filter name and the tag
-    #     value as the filter value. For example, to find all resources that
-    #     have a tag with the key `Owner` and the value `TeamA`, specify
+    #   * `tag`:&lt;key&gt; - The key/value combination of a tag assigned to
+    #     the resource. Use the tag key in the filter name and the tag value
+    #     as the filter value. For example, to find all resources that have
+    #     a tag with the key `Owner` and the value `TeamA`, specify
     #     `tag:Owner` for the filter name and `TeamA` for the filter value.
     #
     #   * `tag-key` - The key of a tag assigned to the resource. Use this
@@ -17830,10 +17893,10 @@ module Aws::EC2
     #   * `state` - The state of the AFI (`pending` \| `failed` \|
     #     `available` \| `unavailable`).
     #
-    #   * `tag`\:&lt;key&gt; - The key/value combination of a tag assigned
-    #     to the resource. Use the tag key in the filter name and the tag
-    #     value as the filter value. For example, to find all resources that
-    #     have a tag with the key `Owner` and the value `TeamA`, specify
+    #   * `tag`:&lt;key&gt; - The key/value combination of a tag assigned to
+    #     the resource. Use the tag key in the filter name and the tag value
+    #     as the filter value. For example, to find all resources that have
+    #     a tag with the key `Owner` and the value `TeamA`, specify
     #     `tag:Owner` for the filter name and `TeamA` for the filter value.
     #
     #   * `tag-key` - The key of a tag assigned to the resource. Use this
@@ -18233,7 +18296,7 @@ module Aws::EC2
     # @!attribute [rw] attribute
     #   The AMI attribute.
     #
-    #   **Note**\: The `blockDeviceMapping` attribute is deprecated. Using
+    #   **Note**: The `blockDeviceMapping` attribute is deprecated. Using
     #   this attribute returns the `Client.AuthFailure` error. To get
     #   information about the block device mappings for an AMI, use the
     #   DescribeImages action.
@@ -18367,10 +18430,10 @@ module Aws::EC2
     #   * `sriov-net-support` - A value of `simple` indicates that enhanced
     #     networking with the Intel 82599 VF interface is enabled.
     #
-    #   * `tag`\:&lt;key&gt; - The key/value combination of a tag assigned
-    #     to the resource. Use the tag key in the filter name and the tag
-    #     value as the filter value. For example, to find all resources that
-    #     have a tag with the key `Owner` and the value `TeamA`, specify
+    #   * `tag`:&lt;key&gt; - The key/value combination of a tag assigned to
+    #     the resource. Use the tag key in the filter name and the tag value
+    #     as the filter value. For example, to find all resources that have
+    #     a tag with the key `Owner` and the value `TeamA`, specify
     #     `tag:Owner` for the filter name and `TeamA` for the filter value.
     #
     #   * `tag-key` - The key of a tag assigned to the resource. Use this
@@ -19569,10 +19632,10 @@ module Aws::EC2
     #   * `owner-id` - The ID of the Amazon Web Services account that owns
     #     the internet gateway.
     #
-    #   * `tag`\:&lt;key&gt; - The key/value combination of a tag assigned
-    #     to the resource. Use the tag key in the filter name and the tag
-    #     value as the filter value. For example, to find all resources that
-    #     have a tag with the key `Owner` and the value `TeamA`, specify
+    #   * `tag`:&lt;key&gt; - The key/value combination of a tag assigned to
+    #     the resource. Use the tag key in the filter name and the tag value
+    #     as the filter value. For example, to find all resources that have
+    #     a tag with the key `Owner` and the value `TeamA`, specify
     #     `tag:Owner` for the filter name and `TeamA` for the filter value.
     #
     #   * `tag-key` - The key of a tag assigned to the resource. Use this
@@ -19947,10 +20010,10 @@ module Aws::EC2
     # @!attribute [rw] filters
     #   One or more filters.
     #
-    #   * `tag`\:&lt;key&gt; - The key/value combination of a tag assigned
-    #     to the resource. Use the tag key in the filter name and the tag
-    #     value as the filter value. For example, to find all resources that
-    #     have a tag with the key `Owner` and the value `TeamA`, specify
+    #   * `tag`:&lt;key&gt; - The key/value combination of a tag assigned to
+    #     the resource. Use the tag key in the filter name and the tag value
+    #     as the filter value. For example, to find all resources that have
+    #     a tag with the key `Owner` and the value `TeamA`, specify
     #     `tag:Owner` for the filter name and `TeamA` for the filter value.
     #
     #   * `tag-key` - The key of a tag assigned to the resource. Use this
@@ -20001,10 +20064,10 @@ module Aws::EC2
     #     filter to find all resources assigned a tag with a specific key,
     #     regardless of the tag value.
     #
-    #   * `tag`\:&lt;key&gt; - The key/value combination of a tag assigned
-    #     to the resource. Use the tag key in the filter name and the tag
-    #     value as the filter value. For example, to find all resources that
-    #     have a tag with the key `Owner` and the value `TeamA`, specify
+    #   * `tag`:&lt;key&gt; - The key/value combination of a tag assigned to
+    #     the resource. Use the tag key in the filter name and the tag value
+    #     as the filter value. For example, to find all resources that have
+    #     a tag with the key `Owner` and the value `TeamA`, specify
     #     `tag:Owner` for the filter name and `TeamA` for the filter value.
     #   @return [Array<Types::Filter>]
     #
@@ -20230,10 +20293,10 @@ module Aws::EC2
     #
     #   * `launch-template-name` - The name of the launch template.
     #
-    #   * `tag`\:&lt;key&gt; - The key/value combination of a tag assigned
-    #     to the resource. Use the tag key in the filter name and the tag
-    #     value as the filter value. For example, to find all resources that
-    #     have a tag with the key `Owner` and the value `TeamA`, specify
+    #   * `tag`:&lt;key&gt; - The key/value combination of a tag assigned to
+    #     the resource. Use the tag key in the filter name and the tag value
+    #     as the filter value. For example, to find all resources that have
+    #     a tag with the key `Owner` and the value `TeamA`, specify
     #     `tag:Owner` for the filter name and `TeamA` for the filter value.
     #
     #   * `tag-key` - The key of a tag assigned to the resource. Use this
@@ -20846,10 +20909,10 @@ module Aws::EC2
     #   * `subnet-id` - The ID of the subnet in which the NAT gateway
     #     resides.
     #
-    #   * `tag`\:&lt;key&gt; - The key/value combination of a tag assigned
-    #     to the resource. Use the tag key in the filter name and the tag
-    #     value as the filter value. For example, to find all resources that
-    #     have a tag with the key `Owner` and the value `TeamA`, specify
+    #   * `tag`:&lt;key&gt; - The key/value combination of a tag assigned to
+    #     the resource. Use the tag key in the filter name and the tag value
+    #     as the filter value. For example, to find all resources that have
+    #     a tag with the key `Owner` and the value `TeamA`, specify
     #     `tag:Owner` for the filter name and `TeamA` for the filter value.
     #
     #   * `tag-key` - The key of a tag assigned to the resource. Use this
@@ -20955,10 +21018,10 @@ module Aws::EC2
     #   * `owner-id` - The ID of the Amazon Web Services account that owns
     #     the network ACL.
     #
-    #   * `tag`\:&lt;key&gt; - The key/value combination of a tag assigned
-    #     to the resource. Use the tag key in the filter name and the tag
-    #     value as the filter value. For example, to find all resources that
-    #     have a tag with the key `Owner` and the value `TeamA`, specify
+    #   * `tag`:&lt;key&gt; - The key/value combination of a tag assigned to
+    #     the resource. Use the tag key in the filter name and the tag value
+    #     as the filter value. For example, to find all resources that have
+    #     a tag with the key `Owner` and the value `TeamA`, specify
     #     `tag:Owner` for the filter name and `TeamA` for the filter value.
     #
     #   * `tag-key` - The key of a tag assigned to the resource. Use this
@@ -21241,7 +21304,29 @@ module Aws::EC2
     #
     #   * destination - The ID of the resource.
     #
-    #   * destination-port - The destination port.
+    #   * filter-at-source.source-address - The source IPv4 address at the
+    #     source.
+    #
+    #   * filter-at-source.source-port-range - The source port range at the
+    #     source.
+    #
+    #   * filter-at-source.destination-address - The destination IPv4
+    #     address at the source.
+    #
+    #   * filter-at-source.destination-port-range - The destination port
+    #     range at the source.
+    #
+    #   * filter-at-destination.source-address - The source IPv4 address at
+    #     the destination.
+    #
+    #   * filter-at-destination.source-port-range - The source port range at
+    #     the destination.
+    #
+    #   * filter-at-destination.destination-address - The destination IPv4
+    #     address at the destination.
+    #
+    #   * filter-at-destination.destination-port-range - The destination
+    #     port range at the destination.
     #
     #   * protocol - The protocol.
     #
@@ -21538,10 +21623,10 @@ module Aws::EC2
     #
     #   * `subnet-id` - The ID of the subnet for the network interface.
     #
-    #   * `tag`\:&lt;key&gt; - The key/value combination of a tag assigned
-    #     to the resource. Use the tag key in the filter name and the tag
-    #     value as the filter value. For example, to find all resources that
-    #     have a tag with the key `Owner` and the value `TeamA`, specify
+    #   * `tag`:&lt;key&gt; - The key/value combination of a tag assigned to
+    #     the resource. Use the tag key in the filter name and the tag value
+    #     as the filter value. For example, to find all resources that have
+    #     a tag with the key `Owner` and the value `TeamA`, specify
     #     `tag:Owner` for the filter name and `TeamA` for the filter value.
     #
     #   * `tag-key` - The key of a tag assigned to the resource. Use this
@@ -21691,9 +21776,9 @@ module Aws::EC2
     # @!attribute [rw] filters
     #   One or more filters.
     #
-    #   * `prefix-list-id`\: The ID of a prefix list.
+    #   * `prefix-list-id`: The ID of a prefix list.
     #
-    #   * `prefix-list-name`\: The name of a prefix list.
+    #   * `prefix-list-name`: The name of a prefix list.
     #   @return [Array<Types::Filter>]
     #
     # @!attribute [rw] max_results
@@ -21816,10 +21901,10 @@ module Aws::EC2
     # @!attribute [rw] filters
     #   One or more filters.
     #
-    #   * `tag`\:&lt;key&gt; - The key/value combination of a tag assigned
-    #     to the resource. Use the tag key in the filter name and the tag
-    #     value as the filter value. For example, to find all resources that
-    #     have a tag with the key `Owner` and the value `TeamA`, specify
+    #   * `tag`:&lt;key&gt; - The key/value combination of a tag assigned to
+    #     the resource. Use the tag key in the filter name and the tag value
+    #     as the filter value. For example, to find all resources that have
+    #     a tag with the key `Owner` and the value `TeamA`, specify
     #     `tag:Owner` for the filter name and `TeamA` for the filter value.
     #
     #   * `tag-key` - The key of a tag assigned to the resource. Use this
@@ -22452,10 +22537,10 @@ module Aws::EC2
     #   * `route.vpc-peering-connection-id` - The ID of a VPC peering
     #     connection specified in a route in the table.
     #
-    #   * `tag`\:&lt;key&gt; - The key/value combination of a tag assigned
-    #     to the resource. Use the tag key in the filter name and the tag
-    #     value as the filter value. For example, to find all resources that
-    #     have a tag with the key `Owner` and the value `TeamA`, specify
+    #   * `tag`:&lt;key&gt; - The key/value combination of a tag assigned to
+    #     the resource. Use the tag key in the filter name and the tag value
+    #     as the filter value. For example, to find all resources that have
+    #     a tag with the key `Owner` and the value `TeamA`, specify
     #     `tag:Owner` for the filter name and `TeamA` for the filter value.
     #
     #   * `tag-key` - The key of a tag assigned to the resource. Use this
@@ -22729,10 +22814,10 @@ module Aws::EC2
     #
     #   * `security-group-rule-id` - The ID of the security group rule.
     #
-    #   * `tag`\:&lt;key&gt; - The key/value combination of a tag assigned
-    #     to the resource. Use the tag key in the filter name and the tag
-    #     value as the filter value. For example, to find all resources that
-    #     have a tag with the key `Owner` and the value `TeamA`, specify
+    #   * `tag`:&lt;key&gt; - The key/value combination of a tag assigned to
+    #     the resource. Use the tag key in the filter name and the tag value
+    #     as the filter value. For example, to find all resources that have
+    #     a tag with the key `Owner` and the value `TeamA`, specify
     #     `tag:Owner` for the filter name and `TeamA` for the filter value.
     #   @return [Array<Types::Filter>]
     #
@@ -22867,10 +22952,10 @@ module Aws::EC2
     #   * `owner-id` - The Amazon Web Services account ID of the owner of
     #     the security group.
     #
-    #   * `tag`\:&lt;key&gt; - The key/value combination of a tag assigned
-    #     to the resource. Use the tag key in the filter name and the tag
-    #     value as the filter value. For example, to find all resources that
-    #     have a tag with the key `Owner` and the value `TeamA`, specify
+    #   * `tag`:&lt;key&gt; - The key/value combination of a tag assigned to
+    #     the resource. Use the tag key in the filter name and the tag value
+    #     as the filter value. For example, to find all resources that have
+    #     a tag with the key `Owner` and the value `TeamA`, specify
     #     `tag:Owner` for the filter name and `TeamA` for the filter value.
     #
     #   * `tag-key` - The key of a tag assigned to the resource. Use this
@@ -23098,10 +23183,10 @@ module Aws::EC2
     #   * `storage-tier` - The storage tier of the snapshot (`archive` \|
     #     `standard`).
     #
-    #   * `tag`\:&lt;key&gt; - The key/value combination of a tag assigned
-    #     to the resource. Use the tag key in the filter name and the tag
-    #     value as the filter value. For example, to find all resources that
-    #     have a tag with the key `Owner` and the value `TeamA`, specify
+    #   * `tag`:&lt;key&gt; - The key/value combination of a tag assigned to
+    #     the resource. Use the tag key in the filter name and the tag value
+    #     as the filter value. For example, to find all resources that have
+    #     a tag with the key `Owner` and the value `TeamA`, specify
     #     `tag:Owner` for the filter name and `TeamA` for the filter value.
     #
     #   * `tag-key` - The key of a tag assigned to the resource. Use this
@@ -23321,7 +23406,7 @@ module Aws::EC2
     #
     # @!attribute [rw] start_time
     #   The starting date and time for the events, in UTC format (for
-    #   example, *YYYY*-*MM*-*DD*T*HH*\:*MM*\:*SS*Z).
+    #   example, *YYYY*-*MM*-*DD*T*HH*:*MM*:*SS*Z).
     #   @return [Time]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/DescribeSpotFleetRequestHistoryRequest AWS API Documentation
@@ -23346,8 +23431,8 @@ module Aws::EC2
     #
     # @!attribute [rw] last_evaluated_time
     #   The last date and time for the events, in UTC format (for example,
-    #   *YYYY*-*MM*-*DD*T*HH*\:*MM*\:*SS*Z). All records up to this time
-    #   were retrieved.
+    #   *YYYY*-*MM*-*DD*T*HH*:*MM*:*SS*Z). All records up to this time were
+    #   retrieved.
     #
     #   If `nextToken` indicates that there are more items, this value is
     #   not present.
@@ -23364,7 +23449,7 @@ module Aws::EC2
     #
     # @!attribute [rw] start_time
     #   The starting date and time for the events, in UTC format (for
-    #   example, *YYYY*-*MM*-*DD*T*HH*\:*MM*\:*SS*Z).
+    #   example, *YYYY*-*MM*-*DD*T*HH*:*MM*:*SS*Z).
     #   @return [Time]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/DescribeSpotFleetRequestHistoryResponse AWS API Documentation
@@ -23643,7 +23728,7 @@ module Aws::EC2
     #     supported).
     #
     #   * `timestamp` - The time stamp of the Spot price history, in UTC
-    #     format (for example, *YYYY*-*MM*-*DD*T*HH*\:*MM*\:*SS*Z). You can
+    #     format (for example, *YYYY*-*MM*-*DD*T*HH*:*MM*:*SS*Z). You can
     #     use wildcards (* and ?). Greater than or less than comparison is
     #     not supported.
     #   @return [Array<Types::Filter>]
@@ -23662,7 +23747,7 @@ module Aws::EC2
     # @!attribute [rw] end_time
     #   The date and time, up to the current date, from which to stop
     #   retrieving the price history data, in UTC format (for example,
-    #   *YYYY*-*MM*-*DD*T*HH*\:*MM*\:*SS*Z).
+    #   *YYYY*-*MM*-*DD*T*HH*:*MM*:*SS*Z).
     #   @return [Time]
     #
     # @!attribute [rw] instance_types
@@ -23692,7 +23777,7 @@ module Aws::EC2
     # @!attribute [rw] start_time
     #   The date and time, up to the past 90 days, from which to start
     #   retrieving the price history data, in UTC format (for example,
-    #   *YYYY*-*MM*-*DD*T*HH*\:*MM*\:*SS*Z).
+    #   *YYYY*-*MM*-*DD*T*HH*:*MM*:*SS*Z).
     #   @return [Time]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/DescribeSpotPriceHistoryRequest AWS API Documentation
@@ -23937,10 +24022,10 @@ module Aws::EC2
     #
     #   * `subnet-id` - The ID of the subnet.
     #
-    #   * `tag`\:&lt;key&gt; - The key/value combination of a tag assigned
-    #     to the resource. Use the tag key in the filter name and the tag
-    #     value as the filter value. For example, to find all resources that
-    #     have a tag with the key `Owner` and the value `TeamA`, specify
+    #   * `tag`:&lt;key&gt; - The key/value combination of a tag assigned to
+    #     the resource. Use the tag key in the filter name and the tag value
+    #     as the filter value. For example, to find all resources that have
+    #     a tag with the key `Owner` and the value `TeamA`, specify
     #     `tag:Owner` for the filter name and `TeamA` for the filter value.
     #
     #   * `tag-key` - The key of a tag assigned to the resource. Use this
@@ -24034,7 +24119,7 @@ module Aws::EC2
     #     `vpc-endpoint-service` \| `vpc-peering-connection` \|
     #     `vpn-connection` \| `vpn-gateway`).
     #
-    #   * `tag`\:&lt;key&gt; - The key/value combination of the tag. For
+    #   * `tag`:&lt;key&gt; - The key/value combination of the tag. For
     #     example, specify "tag:Owner" for the filter name and "TeamA"
     #     for the filter value to find resources with the tag
     #     "Owner=TeamA".
@@ -24102,9 +24187,9 @@ module Aws::EC2
     # @!attribute [rw] filters
     #   One or more filters. The possible values are:
     #
-    #   * `description`\: The Traffic Mirror filter description.
+    #   * `description`: The Traffic Mirror filter description.
     #
-    #   * `traffic-mirror-filter-id`\: The ID of the Traffic Mirror filter.
+    #   * `traffic-mirror-filter-id`: The ID of the Traffic Mirror filter.
     #   @return [Array<Types::Filter>]
     #
     # @!attribute [rw] max_results
@@ -24161,27 +24246,26 @@ module Aws::EC2
     # @!attribute [rw] filters
     #   One or more filters. The possible values are:
     #
-    #   * `description`\: The Traffic Mirror session description.
+    #   * `description`: The Traffic Mirror session description.
     #
-    #   * `network-interface-id`\: The ID of the Traffic Mirror session
+    #   * `network-interface-id`: The ID of the Traffic Mirror session
     #     network interface.
     #
-    #   * `owner-id`\: The ID of the account that owns the Traffic Mirror
+    #   * `owner-id`: The ID of the account that owns the Traffic Mirror
     #     session.
     #
-    #   * `packet-length`\: The assigned number of packets to mirror.
+    #   * `packet-length`: The assigned number of packets to mirror.
     #
-    #   * `session-number`\: The assigned session number.
+    #   * `session-number`: The assigned session number.
     #
-    #   * `traffic-mirror-filter-id`\: The ID of the Traffic Mirror filter.
+    #   * `traffic-mirror-filter-id`: The ID of the Traffic Mirror filter.
     #
-    #   * `traffic-mirror-session-id`\: The ID of the Traffic Mirror
-    #     session.
+    #   * `traffic-mirror-session-id`: The ID of the Traffic Mirror session.
     #
-    #   * `traffic-mirror-target-id`\: The ID of the Traffic Mirror target.
+    #   * `traffic-mirror-target-id`: The ID of the Traffic Mirror target.
     #
-    #   * `virtual-network-id`\: The virtual network ID of the Traffic
-    #     Mirror session.
+    #   * `virtual-network-id`: The virtual network ID of the Traffic Mirror
+    #     session.
     #   @return [Array<Types::Filter>]
     #
     # @!attribute [rw] max_results
@@ -24240,18 +24324,18 @@ module Aws::EC2
     # @!attribute [rw] filters
     #   One or more filters. The possible values are:
     #
-    #   * `description`\: The Traffic Mirror target description.
+    #   * `description`: The Traffic Mirror target description.
     #
-    #   * `network-interface-id`\: The ID of the Traffic Mirror session
+    #   * `network-interface-id`: The ID of the Traffic Mirror session
     #     network interface.
     #
-    #   * `network-load-balancer-arn`\: The Amazon Resource Name (ARN) of
-    #     the Network Load Balancer that is associated with the session.
+    #   * `network-load-balancer-arn`: The Amazon Resource Name (ARN) of the
+    #     Network Load Balancer that is associated with the session.
     #
-    #   * `owner-id`\: The ID of the account that owns the Traffic Mirror
+    #   * `owner-id`: The ID of the account that owns the Traffic Mirror
     #     session.
     #
-    #   * `traffic-mirror-target-id`\: The ID of the Traffic Mirror target.
+    #   * `traffic-mirror-target-id`: The ID of the Traffic Mirror target.
     #   @return [Array<Types::Filter>]
     #
     # @!attribute [rw] max_results
@@ -24590,10 +24674,10 @@ module Aws::EC2
     #     `initiatingRequest` \| `modifying` \| `pendingAcceptance` \|
     #     `pending` \| `rollingBack` \| `rejected` \| `rejecting`).
     #
-    #   * `tag`\:&lt;key&gt; - The key/value combination of a tag assigned
-    #     to the resource. Use the tag key in the filter name and the tag
-    #     value as the filter value. For example, to find all resources that
-    #     have a tag with the key `Owner` and the value `TeamA`, specify
+    #   * `tag`:&lt;key&gt; - The key/value combination of a tag assigned to
+    #     the resource. Use the tag key in the filter name and the tag value
+    #     as the filter value. For example, to find all resources that have
+    #     a tag with the key `Owner` and the value `TeamA`, specify
     #     `tag:Owner` for the filter name and `TeamA` for the filter value.
     #
     #   * `tag-key` - The key of a tag assigned to the resource. Use this
@@ -25400,8 +25484,8 @@ module Aws::EC2
     #
     #   * `event.event-id` - The event ID.
     #
-    #   * `event.event-type` - The event type (for `io-enabled`\: `passed`
-    #     \| `failed`; for `io-performance`\: `io-performance:degraded` \|
+    #   * `event.event-type` - The event type (for `io-enabled`: `passed` \|
+    #     `failed`; for `io-performance`: `io-performance:degraded` \|
     #     `io-performance:severely-degraded` \| `io-performance:stalled`).
     #
     #   * `event.not-after` - The latest end time for the event.
@@ -25412,8 +25496,8 @@ module Aws::EC2
     #     `volume-status.status` (`io-enabled` \| `io-performance`).
     #
     #   * `volume-status.details-status` - The status of
-    #     `volume-status.details-name` (for `io-enabled`\: `passed` \|
-    #     `failed`; for `io-performance`\: `normal` \| `degraded` \|
+    #     `volume-status.details-name` (for `io-enabled`: `passed` \|
+    #     `failed`; for `io-performance`: `normal` \| `degraded` \|
     #     `severely-degraded` \| `stalled`).
     #
     #   * `volume-status.status` - The status of the volume (`ok` \|
@@ -25610,10 +25694,10 @@ module Aws::EC2
     #   * `status` - The state of the volume (`creating` \| `available` \|
     #     `in-use` \| `deleting` \| `deleted` \| `error`).
     #
-    #   * `tag`\:&lt;key&gt; - The key/value combination of a tag assigned
-    #     to the resource. Use the tag key in the filter name and the tag
-    #     value as the filter value. For example, to find all resources that
-    #     have a tag with the key `Owner` and the value `TeamA`, specify
+    #   * `tag`:&lt;key&gt; - The key/value combination of a tag assigned to
+    #     the resource. Use the tag key in the filter name and the tag value
+    #     as the filter value. For example, to find all resources that have
+    #     a tag with the key `Owner` and the value `TeamA`, specify
     #     `tag:Owner` for the filter name and `TeamA` for the filter value.
     #
     #   * `tag-key` - The key of a tag assigned to the resource. Use this
@@ -25798,10 +25882,10 @@ module Aws::EC2
     #   * `is-classic-link-enabled` - Whether the VPC is enabled for
     #     ClassicLink (`true` \| `false`).
     #
-    #   * `tag`\:&lt;key&gt; - The key/value combination of a tag assigned
-    #     to the resource. Use the tag key in the filter name and the tag
-    #     value as the filter value. For example, to find all resources that
-    #     have a tag with the key `Owner` and the value `TeamA`, specify
+    #   * `tag`:&lt;key&gt; - The key/value combination of a tag assigned to
+    #     the resource. Use the tag key in the filter name and the tag value
+    #     as the filter value. For example, to find all resources that have
+    #     a tag with the key `Owner` and the value `TeamA`, specify
     #     `tag:Owner` for the filter name and `TeamA` for the filter value.
     #
     #   * `tag-key` - The key of a tag assigned to the resource. Use this
@@ -26002,10 +26086,10 @@ module Aws::EC2
     #   * `supported-ip-address-types` - The IP address type (`ipv4` \|
     #     `ipv6`).
     #
-    #   * `tag`\:&lt;key&gt; - The key/value combination of a tag assigned
-    #     to the resource. Use the tag key in the filter name and the tag
-    #     value as the filter value. For example, to find all resources that
-    #     have a tag with the key `Owner` and the value `TeamA`, specify
+    #   * `tag`:&lt;key&gt; - The key/value combination of a tag assigned to
+    #     the resource. Use the tag key in the filter name and the tag value
+    #     as the filter value. For example, to find all resources that have
+    #     a tag with the key `Owner` and the value `TeamA`, specify
     #     `tag:Owner` for the filter name and `TeamA` for the filter value.
     #
     #   * `tag-key` - The key of a tag assigned to the resource. Use this
@@ -26142,10 +26226,10 @@ module Aws::EC2
     #   * `supported-ip-address-types` - The IP address type (`ipv4` \|
     #     `ipv6`).
     #
-    #   * `tag`\:&lt;key&gt; - The key/value combination of a tag assigned
-    #     to the resource. Use the tag key in the filter name and the tag
-    #     value as the filter value. For example, to find all resources that
-    #     have a tag with the key `Owner` and the value `TeamA`, specify
+    #   * `tag`:&lt;key&gt; - The key/value combination of a tag assigned to
+    #     the resource. Use the tag key in the filter name and the tag value
+    #     as the filter value. For example, to find all resources that have
+    #     a tag with the key `Owner` and the value `TeamA`, specify
     #     `tag:Owner` for the filter name and `TeamA` for the filter value.
     #
     #   * `tag-key` - The key of a tag assigned to the resource. Use this
@@ -26220,10 +26304,10 @@ module Aws::EC2
     #
     #   * `service-name` - The name of the service.
     #
-    #   * `tag`\:&lt;key&gt; - The key/value combination of a tag assigned
-    #     to the resource. Use the tag key in the filter name and the tag
-    #     value as the filter value. For example, to find all resources that
-    #     have a tag with the key `Owner` and the value `TeamA`, specify
+    #   * `tag`:&lt;key&gt; - The key/value combination of a tag assigned to
+    #     the resource. Use the tag key in the filter name and the tag value
+    #     as the filter value. For example, to find all resources that have
+    #     a tag with the key `Owner` and the value `TeamA`, specify
     #     `tag:Owner` for the filter name and `TeamA` for the filter value.
     #
     #   * `tag-key` - The key of a tag assigned to the resource. Use this
@@ -26315,10 +26399,10 @@ module Aws::EC2
     #   * `status-message` - A message that provides more information about
     #     the status of the VPC peering connection, if applicable.
     #
-    #   * `tag`\:&lt;key&gt; - The key/value combination of a tag assigned
-    #     to the resource. Use the tag key in the filter name and the tag
-    #     value as the filter value. For example, to find all resources that
-    #     have a tag with the key `Owner` and the value `TeamA`, specify
+    #   * `tag`:&lt;key&gt; - The key/value combination of a tag assigned to
+    #     the resource. Use the tag key in the filter name and the tag value
+    #     as the filter value. For example, to find all resources that have
+    #     a tag with the key `Owner` and the value `TeamA`, specify
     #     `tag:Owner` for the filter name and `TeamA` for the filter value.
     #
     #   * `tag-key` - The key of a tag assigned to the resource. Use this
@@ -26426,10 +26510,10 @@ module Aws::EC2
     #
     #   * `state` - The state of the VPC (`pending` \| `available`).
     #
-    #   * `tag`\:&lt;key&gt; - The key/value combination of a tag assigned
-    #     to the resource. Use the tag key in the filter name and the tag
-    #     value as the filter value. For example, to find all resources that
-    #     have a tag with the key `Owner` and the value `TeamA`, specify
+    #   * `tag`:&lt;key&gt; - The key/value combination of a tag assigned to
+    #     the resource. Use the tag key in the filter name and the tag value
+    #     as the filter value. For example, to find all resources that have
+    #     a tag with the key `Owner` and the value `TeamA`, specify
     #     `tag:Owner` for the filter name and `TeamA` for the filter value.
     #
     #   * `tag-key` - The key of a tag assigned to the resource. Use this
@@ -26522,10 +26606,10 @@ module Aws::EC2
     #   * `bgp-asn` - The BGP Autonomous System Number (ASN) associated with
     #     a BGP device.
     #
-    #   * `tag`\:&lt;key&gt; - The key/value combination of a tag assigned
-    #     to the resource. Use the tag key in the filter name and the tag
-    #     value as the filter value. For example, to find all resources that
-    #     have a tag with the key `Owner` and the value `TeamA`, specify
+    #   * `tag`:&lt;key&gt; - The key/value combination of a tag assigned to
+    #     the resource. Use the tag key in the filter name and the tag value
+    #     as the filter value. For example, to find all resources that have
+    #     a tag with the key `Owner` and the value `TeamA`, specify
     #     `tag:Owner` for the filter name and `TeamA` for the filter value.
     #
     #   * `tag-key` - The key of a tag assigned to the resource. Use this
@@ -26601,10 +26685,10 @@ module Aws::EC2
     #   * `state` - The state of the virtual private gateway (`pending` \|
     #     `available` \| `deleting` \| `deleted`).
     #
-    #   * `tag`\:&lt;key&gt; - The key/value combination of a tag assigned
-    #     to the resource. Use the tag key in the filter name and the tag
-    #     value as the filter value. For example, to find all resources that
-    #     have a tag with the key `Owner` and the value `TeamA`, specify
+    #   * `tag`:&lt;key&gt; - The key/value combination of a tag assigned to
+    #     the resource. Use the tag key in the filter name and the tag value
+    #     as the filter value. For example, to find all resources that have
+    #     a tag with the key `Owner` and the value `TeamA`, specify
     #     `tag:Owner` for the filter name and `TeamA` for the filter value.
     #
     #   * `tag-key` - The key of a tag assigned to the resource. Use this
@@ -28245,7 +28329,7 @@ module Aws::EC2
       :bytes,
       :format,
       :import_manifest_url)
-      SENSITIVE = []
+      SENSITIVE = [:import_manifest_url]
       include Aws::Structure
     end
 
@@ -28317,10 +28401,15 @@ module Aws::EC2
     #   The DNS records created for the endpoint.
     #   @return [String]
     #
+    # @!attribute [rw] private_dns_only_for_inbound_resolver_endpoint
+    #   Indicates whether to enable private DNS only for inbound endpoints.
+    #   @return [Boolean]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/DnsOptions AWS API Documentation
     #
     class DnsOptions < Struct.new(
-      :dns_record_ip_type)
+      :dns_record_ip_type,
+      :private_dns_only_for_inbound_resolver_endpoint)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -28331,10 +28420,19 @@ module Aws::EC2
     #   The DNS records created for the endpoint.
     #   @return [String]
     #
+    # @!attribute [rw] private_dns_only_for_inbound_resolver_endpoint
+    #   Indicates whether to enable private DNS only for inbound endpoints.
+    #   This option is available only for services that support both gateway
+    #   and interface endpoints. It routes traffic that originates from the
+    #   VPC to the gateway endpoint and traffic that originates from
+    #   on-premises to the interface endpoint.
+    #   @return [Boolean]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/DnsOptionsSpecification AWS API Documentation
     #
     class DnsOptionsSpecification < Struct.new(
-      :dns_record_ip_type)
+      :dns_record_ip_type,
+      :private_dns_only_for_inbound_resolver_endpoint)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -28383,11 +28481,11 @@ module Aws::EC2
     #
     #   The following are the supported values for each volume type:
     #
-    #   * `gp3`\: 3,000-16,000 IOPS
+    #   * `gp3`: 3,000-16,000 IOPS
     #
-    #   * `io1`\: 100-64,000 IOPS
+    #   * `io1`: 100-64,000 IOPS
     #
-    #   * `io2`\: 100-64,000 IOPS
+    #   * `io2`: 100-64,000 IOPS
     #
     #   For `io1` and `io2` volumes, we guarantee 64,000 IOPS only for
     #   [Instances built on the Nitro System][1]. Other instance families
@@ -28414,13 +28512,13 @@ module Aws::EC2
     #
     #   The following are the supported volumes sizes for each volume type:
     #
-    #   * `gp2` and `gp3`\:1-16,384
+    #   * `gp2` and `gp3`:1-16,384
     #
-    #   * `io1` and `io2`\: 4-16,384
+    #   * `io1` and `io2`: 4-16,384
     #
-    #   * `st1` and `sc1`\: 125-16,384
+    #   * `st1` and `sc1`: 125-16,384
     #
-    #   * `standard`\: 1-1,024
+    #   * `standard`: 1-1,024
     #   @return [Integer]
     #
     # @!attribute [rw] volume_type
@@ -29349,8 +29447,8 @@ module Aws::EC2
     #
     # @!attribute [rw] deprecate_at
     #   The date and time to deprecate the AMI, in UTC, in the following
-    #   format: *YYYY*-*MM*-*DD*T*HH*\:*MM*\:*SS*Z. If you specify a value
-    #   for seconds, Amazon EC2 rounds the seconds to the nearest minute.
+    #   format: *YYYY*-*MM*-*DD*T*HH*:*MM*:*SS*Z. If you specify a value for
+    #   seconds, Amazon EC2 rounds the seconds to the nearest minute.
     #
     #   You can’t specify a date in the past. The upper limit for
     #   `DeprecateAt` is 10 years from now, except for public AMIs, where
@@ -29994,6 +30092,14 @@ module Aws::EC2
     #   The Region for the component.
     #   @return [String]
     #
+    # @!attribute [rw] firewall_stateless_rule
+    #   The Network Firewall stateless rule.
+    #   @return [Types::FirewallStatelessRule]
+    #
+    # @!attribute [rw] firewall_stateful_rule
+    #   The Network Firewall stateful rule.
+    #   @return [Types::FirewallStatefulRule]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/Explanation AWS API Documentation
     #
     class Explanation < Struct.new(
@@ -30047,7 +30153,9 @@ module Aws::EC2
       :transit_gateway_route_table_route,
       :transit_gateway_attachment,
       :component_account,
-      :component_region)
+      :component_region,
+      :firewall_stateless_rule,
+      :firewall_stateful_rule)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -30718,6 +30826,125 @@ module Aws::EC2
       include Aws::Structure
     end
 
+    # Describes a port range.
+    #
+    # @!attribute [rw] from_port
+    #   The first port in the range.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] to_port
+    #   The last port in the range.
+    #   @return [Integer]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/FilterPortRange AWS API Documentation
+    #
+    class FilterPortRange < Struct.new(
+      :from_port,
+      :to_port)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # Describes a stateful rule.
+    #
+    # @!attribute [rw] rule_group_arn
+    #   The ARN of the stateful rule group.
+    #   @return [String]
+    #
+    # @!attribute [rw] sources
+    #   The source IP addresses, in CIDR notation.
+    #   @return [Array<String>]
+    #
+    # @!attribute [rw] destinations
+    #   The destination IP addresses, in CIDR notation.
+    #   @return [Array<String>]
+    #
+    # @!attribute [rw] source_ports
+    #   The source ports.
+    #   @return [Array<Types::PortRange>]
+    #
+    # @!attribute [rw] destination_ports
+    #   The destination ports.
+    #   @return [Array<Types::PortRange>]
+    #
+    # @!attribute [rw] protocol
+    #   The protocol.
+    #   @return [String]
+    #
+    # @!attribute [rw] rule_action
+    #   The rule action. The possible values are `pass`, `drop`, and
+    #   `alert`.
+    #   @return [String]
+    #
+    # @!attribute [rw] direction
+    #   The direction. The possible values are `FORWARD` and `ANY`.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/FirewallStatefulRule AWS API Documentation
+    #
+    class FirewallStatefulRule < Struct.new(
+      :rule_group_arn,
+      :sources,
+      :destinations,
+      :source_ports,
+      :destination_ports,
+      :protocol,
+      :rule_action,
+      :direction)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # Describes a stateless rule.
+    #
+    # @!attribute [rw] rule_group_arn
+    #   The ARN of the stateless rule group.
+    #   @return [String]
+    #
+    # @!attribute [rw] sources
+    #   The source IP addresses, in CIDR notation.
+    #   @return [Array<String>]
+    #
+    # @!attribute [rw] destinations
+    #   The destination IP addresses, in CIDR notation.
+    #   @return [Array<String>]
+    #
+    # @!attribute [rw] source_ports
+    #   The source ports.
+    #   @return [Array<Types::PortRange>]
+    #
+    # @!attribute [rw] destination_ports
+    #   The destination ports.
+    #   @return [Array<Types::PortRange>]
+    #
+    # @!attribute [rw] protocols
+    #   The protocols.
+    #   @return [Array<Integer>]
+    #
+    # @!attribute [rw] rule_action
+    #   The rule action. The possible values are `pass`, `drop`, and
+    #   `forward_to_site`.
+    #   @return [String]
+    #
+    # @!attribute [rw] priority
+    #   The rule priority.
+    #   @return [Integer]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/FirewallStatelessRule AWS API Documentation
+    #
+    class FirewallStatelessRule < Struct.new(
+      :rule_group_arn,
+      :sources,
+      :destinations,
+      :source_ports,
+      :destination_ports,
+      :protocols,
+      :rule_action,
+      :priority)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # Information about a Capacity Reservation in a Capacity Reservation
     # Fleet.
     #
@@ -30891,13 +31118,13 @@ module Aws::EC2
     #
     # @!attribute [rw] valid_from
     #   The start date and time of the request, in UTC format (for example,
-    #   *YYYY*-*MM*-*DD*T*HH*\:*MM*\:*SS*Z). The default is to start
+    #   *YYYY*-*MM*-*DD*T*HH*:*MM*:*SS*Z). The default is to start
     #   fulfilling the request immediately.
     #   @return [Time]
     #
     # @!attribute [rw] valid_until
     #   The end date and time of the request, in UTC format (for example,
-    #   *YYYY*-*MM*-*DD*T*HH*\:*MM*\:*SS*Z). At this point, no new instance
+    #   *YYYY*-*MM*-*DD*T*HH*:*MM*:*SS*Z). At this point, no new instance
     #   requests are placed or able to fulfill the request. The default end
     #   date is 7 days from the current date.
     #   @return [Time]
@@ -33398,10 +33625,10 @@ module Aws::EC2
     #
     #   * `subnet-id` - The ID of the subnet.
     #
-    #   * `tag`\:&lt;key&gt; - The key/value combination of a tag assigned
-    #     to the resource. Use the tag key in the filter name and the tag
-    #     value as the filter value. For example, to find all resources that
-    #     have a tag with the key `Owner` and the value `TeamA`, specify
+    #   * `tag`:&lt;key&gt; - The key/value combination of a tag assigned to
+    #     the resource. Use the tag key in the filter name and the tag value
+    #     as the filter value. For example, to find all resources that have
+    #     a tag with the key `Owner` and the value `TeamA`, specify
     #     `tag:Owner` for the filter name and `TeamA` for the filter value.
     #
     #   * `tag-key` - The key of a tag assigned to the resource. Use this
@@ -34225,7 +34452,7 @@ module Aws::EC2
     #
     # @!attribute [rw] timestamp
     #   The date and time of the event, in UTC format (for example,
-    #   *YYYY*-*MM*-*DD*T*HH*\:*MM*\:*SS*Z).
+    #   *YYYY*-*MM*-*DD*T*HH*:*MM*:*SS*Z).
     #   @return [Time]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/HistoryRecord AWS API Documentation
@@ -34250,7 +34477,7 @@ module Aws::EC2
     #
     # @!attribute [rw] timestamp
     #   The date and time of the event, in UTC format (for example,
-    #   *YYYY*-*MM*-*DD*T*HH*\:*MM*\:*SS*Z).
+    #   *YYYY*-*MM*-*DD*T*HH*:*MM*:*SS*Z).
     #   @return [Time]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/HistoryRecordEntry AWS API Documentation
@@ -34885,7 +35112,7 @@ module Aws::EC2
     #
     # @!attribute [rw] deprecation_time
     #   The date and time to deprecate the AMI, in UTC, in the following
-    #   format: *YYYY*-*MM*-*DD*T*HH*\:*MM*\:*SS*Z. If you specified a value
+    #   format: *YYYY*-*MM*-*DD*T*HH*:*MM*:*SS*Z. If you specified a value
     #   for seconds, Amazon EC2 rounds the seconds to the nearest minute.
     #   @return [String]
     #
@@ -35260,19 +35487,19 @@ module Aws::EC2
     #     followed by the Region of the key, the Amazon Web Services account
     #     ID of the key owner, the `alias` namespace, and then the key
     #     alias. For example,
-    #     arn:aws:kms:*us-east-1*\:*012345678910*\:alias/*ExampleAlias*.
+    #     arn:aws:kms:*us-east-1*:*012345678910*:alias/*ExampleAlias*.
     #
     #   * ARN using key ID. The ID ARN contains the `arn:aws:kms` namespace,
     #     followed by the Region of the key, the Amazon Web Services account
     #     ID of the key owner, the `key` namespace, and then the key ID. For
     #     example,
-    #     arn:aws:kms:*us-east-1*\:*012345678910*\:key/*abcd1234-a123-456a-a12b-a123b4cd56ef*.
+    #     arn:aws:kms:*us-east-1*:*012345678910*:key/*abcd1234-a123-456a-a12b-a123b4cd56ef*.
     #
     #   * ARN using key alias. The alias ARN contains the `arn:aws:kms`
     #     namespace, followed by the Region of the key, the Amazon Web
     #     Services account ID of the key owner, the `alias` namespace, and
     #     then the key alias. For example,
-    #     arn:aws:kms:*us-east-1*\:*012345678910*\:alias/*ExampleAlias*.
+    #     arn:aws:kms:*us-east-1*:*012345678910*:alias/*ExampleAlias*.
     #
     #   Amazon Web Services parses `KmsKeyId` asynchronously, meaning that
     #   the action you call may appear to complete even though you provided
@@ -35860,19 +36087,19 @@ module Aws::EC2
     #     followed by the Region of the key, the Amazon Web Services account
     #     ID of the key owner, the `alias` namespace, and then the key
     #     alias. For example,
-    #     arn:aws:kms:*us-east-1*\:*012345678910*\:alias/*ExampleAlias*.
+    #     arn:aws:kms:*us-east-1*:*012345678910*:alias/*ExampleAlias*.
     #
     #   * ARN using key ID. The ID ARN contains the `arn:aws:kms` namespace,
     #     followed by the Region of the key, the Amazon Web Services account
     #     ID of the key owner, the `key` namespace, and then the key ID. For
     #     example,
-    #     arn:aws:kms:*us-east-1*\:*012345678910*\:key/*abcd1234-a123-456a-a12b-a123b4cd56ef*.
+    #     arn:aws:kms:*us-east-1*:*012345678910*:key/*abcd1234-a123-456a-a12b-a123b4cd56ef*.
     #
     #   * ARN using key alias. The alias ARN contains the `arn:aws:kms`
     #     namespace, followed by the Region of the key, the Amazon Web
     #     Services account ID of the key owner, the `alias` namespace, and
     #     then the key alias. For example,
-    #     arn:aws:kms:*us-east-1*\:*012345678910*\:alias/*ExampleAlias*.
+    #     arn:aws:kms:*us-east-1*:*012345678910*:alias/*ExampleAlias*.
     #
     #   Amazon Web Services parses `KmsKeyId` asynchronously, meaning that
     #   the action you call may appear to complete even though you provided
@@ -38496,17 +38723,17 @@ module Aws::EC2
     #   The valid values for instance-state-code will all be in the range of
     #   the low byte and they are:
     #
-    #   * `0`\: `pending`
+    #   * `0` : `pending`
     #
-    #   * `16`\: `running`
+    #   * `16` : `running`
     #
-    #   * `32`\: `shutting-down`
+    #   * `32` : `shutting-down`
     #
-    #   * `48`\: `terminated`
+    #   * `48` : `terminated`
     #
-    #   * `64`\: `stopping`
+    #   * `64` : `stopping`
     #
-    #   * `80`\: `stopped`
+    #   * `80` : `stopped`
     #
     #   You can ignore the high byte value by zeroing out all of the bits
     #   above 2^8 or 256 in decimal.
@@ -41011,11 +41238,11 @@ module Aws::EC2
     #
     #   The following are the supported values for each volume type:
     #
-    #   * `gp3`\: 3,000-16,000 IOPS
+    #   * `gp3`: 3,000-16,000 IOPS
     #
-    #   * `io1`\: 100-64,000 IOPS
+    #   * `io1`: 100-64,000 IOPS
     #
-    #   * `io2`\: 100-64,000 IOPS
+    #   * `io2`: 100-64,000 IOPS
     #
     #   For `io1` and `io2` volumes, we guarantee 64,000 IOPS only for
     #   [Instances built on the Nitro System][1]. Other instance families
@@ -41044,13 +41271,13 @@ module Aws::EC2
     #   ID or a volume size. The following are the supported volumes sizes
     #   for each volume type:
     #
-    #   * `gp2` and `gp3`\: 1-16,384
+    #   * `gp2` and `gp3`: 1-16,384
     #
-    #   * `io1` and `io2`\: 4-16,384
+    #   * `io1` and `io2`: 4-16,384
     #
-    #   * `st1` and `sc1`\: 125-16,384
+    #   * `st1` and `sc1`: 125-16,384
     #
-    #   * `standard`\: 1-1,024
+    #   * `standard`: 1-1,024
     #   @return [Integer]
     #
     # @!attribute [rw] volume_type
@@ -46369,13 +46596,13 @@ module Aws::EC2
     #
     #   The following are the supported volumes sizes for each volume type:
     #
-    #   * `gp2` and `gp3`\: 1-16,384
+    #   * `gp2` and `gp3`: 1-16,384
     #
-    #   * `io1` and `io2`\: 4-16,384
+    #   * `io1` and `io2`: 4-16,384
     #
-    #   * `st1` and `sc1`\: 125-16,384
+    #   * `st1` and `sc1`: 125-16,384
     #
-    #   * `standard`\: 1-1,024
+    #   * `standard`: 1-1,024
     #
     #   Default: The existing size is retained.
     #   @return [Integer]
@@ -46398,11 +46625,11 @@ module Aws::EC2
     #
     #   The following are the supported values for each volume type:
     #
-    #   * `gp3`\: 3,000-16,000 IOPS
+    #   * `gp3`: 3,000-16,000 IOPS
     #
-    #   * `io1`\: 100-64,000 IOPS
+    #   * `io1`: 100-64,000 IOPS
     #
-    #   * `io2`\: 100-64,000 IOPS
+    #   * `io2`: 100-64,000 IOPS
     #
     #   Default: The existing value is retained if you keep the same volume
     #   type. If you change the volume type to `io1`, `io2`, or `gp3`, the
@@ -47515,20 +47742,20 @@ module Aws::EC2
     # @!attribute [rw] state
     #   The state of the NAT gateway.
     #
-    #   * `pending`\: The NAT gateway is being created and is not ready to
+    #   * `pending`: The NAT gateway is being created and is not ready to
     #     process traffic.
     #
-    #   * `failed`\: The NAT gateway could not be created. Check the
+    #   * `failed`: The NAT gateway could not be created. Check the
     #     `failureCode` and `failureMessage` fields for the reason.
     #
-    #   * `available`\: The NAT gateway is able to process traffic. This
+    #   * `available`: The NAT gateway is able to process traffic. This
     #     status remains until you delete the NAT gateway, and does not
     #     indicate the health of the NAT gateway.
     #
-    #   * `deleting`\: The NAT gateway is in the process of being terminated
+    #   * `deleting`: The NAT gateway is in the process of being terminated
     #     and may still be processing traffic.
     #
-    #   * `deleted`\: The NAT gateway has been terminated and is no longer
+    #   * `deleted`: The NAT gateway has been terminated and is no longer
     #     processing traffic.
     #   @return [String]
     #
@@ -48056,8 +48283,8 @@ module Aws::EC2
     #   @return [Array<String>]
     #
     # @!attribute [rw] filter_in_arns
-    #   The Amazon Resource Names (ARN) of the Amazon Web Services resources
-    #   that the path must traverse.
+    #   The Amazon Resource Names (ARN) of the resources that the path must
+    #   traverse.
     #   @return [Array<String>]
     #
     # @!attribute [rw] start_date
@@ -48147,12 +48374,11 @@ module Aws::EC2
     #   @return [Time]
     #
     # @!attribute [rw] source
-    #   The Amazon Web Services resource that is the source of the path.
+    #   The ID of the source.
     #   @return [String]
     #
     # @!attribute [rw] destination
-    #   The Amazon Web Services resource that is the destination of the
-    #   path.
+    #   The ID of the destination.
     #   @return [String]
     #
     # @!attribute [rw] source_arn
@@ -48164,13 +48390,11 @@ module Aws::EC2
     #   @return [String]
     #
     # @!attribute [rw] source_ip
-    #   The IP address of the Amazon Web Services resource that is the
-    #   source of the path.
+    #   The IP address of the source.
     #   @return [String]
     #
     # @!attribute [rw] destination_ip
-    #   The IP address of the Amazon Web Services resource that is the
-    #   destination of the path.
+    #   The IP address of the destination.
     #   @return [String]
     #
     # @!attribute [rw] protocol
@@ -48185,6 +48409,16 @@ module Aws::EC2
     #   The tags associated with the path.
     #   @return [Array<Types::Tag>]
     #
+    # @!attribute [rw] filter_at_source
+    #   Scopes the analysis to network paths that match specific filters at
+    #   the source.
+    #   @return [Types::PathFilter]
+    #
+    # @!attribute [rw] filter_at_destination
+    #   Scopes the analysis to network paths that match specific filters at
+    #   the destination.
+    #   @return [Types::PathFilter]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/NetworkInsightsPath AWS API Documentation
     #
     class NetworkInsightsPath < Struct.new(
@@ -48199,7 +48433,9 @@ module Aws::EC2
       :destination_ip,
       :protocol,
       :destination_port,
-      :tags)
+      :tags,
+      :filter_at_source,
+      :filter_at_destination)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -48972,6 +49208,18 @@ module Aws::EC2
     #   The load balancer listener.
     #   @return [Types::AnalysisComponent]
     #
+    # @!attribute [rw] firewall_stateless_rule
+    #   The Network Firewall stateless rule.
+    #   @return [Types::FirewallStatelessRule]
+    #
+    # @!attribute [rw] firewall_stateful_rule
+    #   The Network Firewall stateful rule.
+    #   @return [Types::FirewallStatefulRule]
+    #
+    # @!attribute [rw] service_name
+    #   The name of the VPC endpoint service.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/PathComponent AWS API Documentation
     #
     class PathComponent < Struct.new(
@@ -48991,7 +49239,70 @@ module Aws::EC2
       :transit_gateway,
       :transit_gateway_route_table_route,
       :explanations,
-      :elastic_load_balancer_listener)
+      :elastic_load_balancer_listener,
+      :firewall_stateless_rule,
+      :firewall_stateful_rule,
+      :service_name)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # Describes a set of filters for a path analysis. Use path filters to
+    # scope the analysis when there can be multiple resulting paths.
+    #
+    # @!attribute [rw] source_address
+    #   The source IPv4 address.
+    #   @return [String]
+    #
+    # @!attribute [rw] source_port_range
+    #   The source port range.
+    #   @return [Types::FilterPortRange]
+    #
+    # @!attribute [rw] destination_address
+    #   The destination IPv4 address.
+    #   @return [String]
+    #
+    # @!attribute [rw] destination_port_range
+    #   The destination port range.
+    #   @return [Types::FilterPortRange]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/PathFilter AWS API Documentation
+    #
+    class PathFilter < Struct.new(
+      :source_address,
+      :source_port_range,
+      :destination_address,
+      :destination_port_range)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # Describes a set of filters for a path analysis. Use path filters to
+    # scope the analysis when there can be multiple resulting paths.
+    #
+    # @!attribute [rw] source_address
+    #   The source IPv4 address.
+    #   @return [String]
+    #
+    # @!attribute [rw] source_port_range
+    #   The source port range.
+    #   @return [Types::RequestFilterPortRange]
+    #
+    # @!attribute [rw] destination_address
+    #   The destination IPv4 address.
+    #   @return [String]
+    #
+    # @!attribute [rw] destination_port_range
+    #   The destination port range.
+    #   @return [Types::RequestFilterPortRange]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/PathRequestFilter AWS API Documentation
+    #
+    class PathRequestFilter < Struct.new(
+      :source_address,
+      :source_port_range,
+      :destination_address,
+      :destination_port_range)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -50529,7 +50840,7 @@ module Aws::EC2
     #
     # @!attribute [rw] purchase_time
     #   The time at which to purchase the Reserved Instance, in UTC format
-    #   (for example, *YYYY*-*MM*-*DD*T*HH*\:*MM*\:*SS*Z).
+    #   (for example, *YYYY*-*MM*-*DD*T*HH*:*MM*:*SS*Z).
     #   @return [Time]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/PurchaseReservedInstancesOfferingRequest AWS API Documentation
@@ -51822,30 +52133,30 @@ module Aws::EC2
     # @!attribute [rw] reason_codes
     #   The reason codes that describe the health state of your instance.
     #
-    #   * `instance-stuck-in-state`\: My instance is stuck in a state.
+    #   * `instance-stuck-in-state`: My instance is stuck in a state.
     #
-    #   * `unresponsive`\: My instance is unresponsive.
+    #   * `unresponsive`: My instance is unresponsive.
     #
-    #   * `not-accepting-credentials`\: My instance is not accepting my
+    #   * `not-accepting-credentials`: My instance is not accepting my
     #     credentials.
     #
-    #   * `password-not-available`\: A password is not available for my
+    #   * `password-not-available`: A password is not available for my
     #     instance.
     #
-    #   * `performance-network`\: My instance is experiencing performance
+    #   * `performance-network`: My instance is experiencing performance
     #     problems that I believe are network related.
     #
-    #   * `performance-instance-store`\: My instance is experiencing
+    #   * `performance-instance-store`: My instance is experiencing
     #     performance problems that I believe are related to the instance
     #     stores.
     #
-    #   * `performance-ebs-volume`\: My instance is experiencing performance
+    #   * `performance-ebs-volume`: My instance is experiencing performance
     #     problems that I believe are related to an EBS volume.
     #
-    #   * `performance-other`\: My instance is experiencing performance
+    #   * `performance-other`: My instance is experiencing performance
     #     problems.
     #
-    #   * `other`\: \[explain using the description parameter\]
+    #   * `other`: \[explain using the description parameter\]
     #   @return [Array<String>]
     #
     # @!attribute [rw] start_time
@@ -51870,6 +52181,25 @@ module Aws::EC2
       include Aws::Structure
     end
 
+    # Describes a port range.
+    #
+    # @!attribute [rw] from_port
+    #   The first port in the range.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] to_port
+    #   The last port in the range.
+    #   @return [Integer]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/RequestFilterPortRange AWS API Documentation
+    #
+    class RequestFilterPortRange < Struct.new(
+      :from_port,
+      :to_port)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # A tag on an IPAM resource.
     #
     # @!attribute [rw] key
@@ -52360,7 +52690,7 @@ module Aws::EC2
     #
     # @!attribute [rw] valid_until
     #   The end date of the request, in UTC format
-    #   (*YYYY*-*MM*-*DD*T*HH*\:*MM*\:*SS*Z).
+    #   (*YYYY*-*MM*-*DD*T*HH*:*MM*:*SS*Z).
     #
     #   * For a persistent request, the request remains active until the
     #     `ValidUntil` date and time is reached. Otherwise, the request
@@ -54315,6 +54645,64 @@ module Aws::EC2
       include Aws::Structure
     end
 
+    # Describes the rule options for a stateful rule group.
+    #
+    # @!attribute [rw] rule_group_arn
+    #   The ARN of the rule group.
+    #   @return [String]
+    #
+    # @!attribute [rw] rule_options
+    #   The rule options.
+    #   @return [Array<Types::RuleOption>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/RuleGroupRuleOptionsPair AWS API Documentation
+    #
+    class RuleGroupRuleOptionsPair < Struct.new(
+      :rule_group_arn,
+      :rule_options)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # Describes the type of a stateful rule group.
+    #
+    # @!attribute [rw] rule_group_arn
+    #   The ARN of the rule group.
+    #   @return [String]
+    #
+    # @!attribute [rw] rule_group_type
+    #   The rule group type. The possible values are `Domain List` and
+    #   `Suricata`.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/RuleGroupTypePair AWS API Documentation
+    #
+    class RuleGroupTypePair < Struct.new(
+      :rule_group_arn,
+      :rule_group_type)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # Describes additional settings for a stateful rule.
+    #
+    # @!attribute [rw] keyword
+    #   The Suricata keyword.
+    #   @return [String]
+    #
+    # @!attribute [rw] settings
+    #   The settings for the keyword.
+    #   @return [Array<String>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/RuleOption AWS API Documentation
+    #
+    class RuleOption < Struct.new(
+      :keyword,
+      :settings)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # Describes the monitoring of an instance.
     #
     # @!attribute [rw] enabled
@@ -54866,7 +55254,7 @@ module Aws::EC2
     #   The key of the tag.
     #
     #   Constraints: Tag keys are case-sensitive and can be up to 128
-    #   Unicode characters in length. May not begin with `aws`\:.
+    #   Unicode characters in length. May not begin with `aws`:.
     #   @return [String]
     #
     # @!attribute [rw] value
@@ -57301,14 +57689,14 @@ module Aws::EC2
     #
     # @!attribute [rw] valid_from
     #   The start date and time of the request, in UTC format
-    #   (*YYYY*-*MM*-*DD*T*HH*\:*MM*\:*SS*Z). By default, Amazon EC2 starts
+    #   (*YYYY*-*MM*-*DD*T*HH*:*MM*:*SS*Z). By default, Amazon EC2 starts
     #   fulfilling the request immediately.
     #   @return [Time]
     #
     # @!attribute [rw] valid_until
     #   The end date and time of the request, in UTC format
-    #   (*YYYY*-*MM*-*DD*T*HH*\:*MM*\:*SS*Z). After the end date and time,
-    #   no new Spot Instance requests are placed or able to fulfill the
+    #   (*YYYY*-*MM*-*DD*T*HH*:*MM*:*SS*Z). After the end date and time, no
+    #   new Spot Instance requests are placed or able to fulfill the
     #   request. If no value is specified, the Spot Fleet request remains
     #   until you cancel it.
     #   @return [Time]
@@ -57450,7 +57838,7 @@ module Aws::EC2
     #
     # @!attribute [rw] create_time
     #   The date and time when the Spot Instance request was created, in UTC
-    #   format (for example, *YYYY*-*MM*-*DD*T*HH*\:*MM*\:*SS*Z).
+    #   format (for example, *YYYY*-*MM*-*DD*T*HH*:*MM*:*SS*Z).
     #   @return [Time]
     #
     # @!attribute [rw] fault
@@ -57519,13 +57907,13 @@ module Aws::EC2
     #
     # @!attribute [rw] valid_from
     #   The start date of the request, in UTC format (for example,
-    #   *YYYY*-*MM*-*DD*T*HH*\:*MM*\:*SS*Z). The request becomes active at
+    #   *YYYY*-*MM*-*DD*T*HH*:*MM*:*SS*Z). The request becomes active at
     #   this date and time.
     #   @return [Time]
     #
     # @!attribute [rw] valid_until
     #   The end date of the request, in UTC format
-    #   (*YYYY*-*MM*-*DD*T*HH*\:*MM*\:*SS*Z).
+    #   (*YYYY*-*MM*-*DD*T*HH*:*MM*:*SS*Z).
     #
     #   * For a persistent request, the request remains active until the
     #     `validUntil` date and time is reached. Otherwise, the request
@@ -57603,7 +57991,7 @@ module Aws::EC2
     #
     # @!attribute [rw] update_time
     #   The date and time of the most recent status update, in UTC format
-    #   (for example, *YYYY*-*MM*-*DD*T*HH*\:*MM*\:*SS*Z).
+    #   (for example, *YYYY*-*MM*-*DD*T*HH*:*MM*:*SS*Z).
     #   @return [Time]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/SpotInstanceStatus AWS API Documentation
@@ -57667,7 +58055,7 @@ module Aws::EC2
     #
     # @!attribute [rw] valid_until
     #   The end date of the request, in UTC format
-    #   (*YYYY*-*MM*-*DD*T*HH*\:*MM*\:*SS*Z). Supported only for persistent
+    #   (*YYYY*-*MM*-*DD*T*HH*:*MM*:*SS*Z). Supported only for persistent
     #   requests.
     #
     #   * For a persistent request, the request remains active until the
@@ -58068,7 +58456,7 @@ module Aws::EC2
     #
     # @!attribute [rw] timestamp
     #   The date and time the request was created, in UTC format (for
-    #   example, *YYYY*-*MM*-*DD*T*HH*\:*MM*\:*SS*Z).
+    #   example, *YYYY*-*MM*-*DD*T*HH*:*MM*:*SS*Z).
     #   @return [Time]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/SpotPrice AWS API Documentation
@@ -58363,44 +58751,44 @@ module Aws::EC2
     # @!attribute [rw] message
     #   The message for the state change.
     #
-    #   * `Server.InsufficientInstanceCapacity`\: There was insufficient
+    #   * `Server.InsufficientInstanceCapacity`: There was insufficient
     #     capacity available to satisfy the launch request.
     #
-    #   * `Server.InternalError`\: An internal error caused the instance to
+    #   * `Server.InternalError`: An internal error caused the instance to
     #     terminate during launch.
     #
-    #   * `Server.ScheduledStop`\: The instance was stopped due to a
+    #   * `Server.ScheduledStop`: The instance was stopped due to a
     #     scheduled retirement.
     #
-    #   * `Server.SpotInstanceShutdown`\: The instance was stopped because
+    #   * `Server.SpotInstanceShutdown`: The instance was stopped because
     #     the number of Spot requests with a maximum price equal to or
     #     higher than the Spot price exceeded available capacity or because
     #     of an increase in the Spot price.
     #
-    #   * `Server.SpotInstanceTermination`\: The instance was terminated
+    #   * `Server.SpotInstanceTermination`: The instance was terminated
     #     because the number of Spot requests with a maximum price equal to
     #     or higher than the Spot price exceeded available capacity or
     #     because of an increase in the Spot price.
     #
-    #   * `Client.InstanceInitiatedShutdown`\: The instance was shut down
+    #   * `Client.InstanceInitiatedShutdown`: The instance was shut down
     #     using the `shutdown -h` command from the instance.
     #
-    #   * `Client.InstanceTerminated`\: The instance was terminated or
+    #   * `Client.InstanceTerminated`: The instance was terminated or
     #     rebooted during AMI creation.
     #
-    #   * `Client.InternalError`\: A client error caused the instance to
+    #   * `Client.InternalError`: A client error caused the instance to
     #     terminate during launch.
     #
-    #   * `Client.InvalidSnapshot.NotFound`\: The specified snapshot was not
+    #   * `Client.InvalidSnapshot.NotFound`: The specified snapshot was not
     #     found.
     #
-    #   * `Client.UserInitiatedHibernate`\: Hibernation was initiated on the
+    #   * `Client.UserInitiatedHibernate`: Hibernation was initiated on the
     #     instance.
     #
-    #   * `Client.UserInitiatedShutdown`\: The instance was shut down using
+    #   * `Client.UserInitiatedShutdown`: The instance was shut down using
     #     the Amazon EC2 API.
     #
-    #   * `Client.VolumeLimitExceeded`\: The limit on the number of EBS
+    #   * `Client.VolumeLimitExceeded`: The limit on the number of EBS
     #     volumes or total storage was exceeded. Decrease usage or request
     #     an increase in your account limits.
     #   @return [String]