aws-sdk-ec2 1.611.0 → 1.613.0

data/lib/aws-sdk-ec2/client.rb

@@ -632,6 +632,49 @@ module Aws::EC2
       req.send_request(options)
     end
 
+    # Accepts a Transit Gateway attachment request for a Client VPN
+    # endpoint. The Transit Gateway owner must accept the attachment request
+    # before the Client VPN endpoint can route traffic through the Transit
+    # Gateway.
+    #
+    # @option params [required, String] :transit_gateway_attachment_id
+    #   The ID of the Transit Gateway attachment.
+    #
+    # @option params [Boolean] :dry_run
+    #   Checks whether you have the required permissions for the action,
+    #   without actually making the request, and provides an error response.
+    #   If you have the required permissions, the error response is
+    #   `DryRunOperation`. Otherwise, it is `UnauthorizedOperation`.
+    #
+    # @return [Types::AcceptTransitGatewayClientVpnAttachmentResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::AcceptTransitGatewayClientVpnAttachmentResult#transit_gateway_client_vpn_attachment #transit_gateway_client_vpn_attachment} => Types::TransitGatewayClientVpnAttachment
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.accept_transit_gateway_client_vpn_attachment({
+    #     transit_gateway_attachment_id: "TransitGatewayAttachmentId", # required
+    #     dry_run: false,
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.transit_gateway_client_vpn_attachment.transit_gateway_attachment_id #=> String
+    #   resp.transit_gateway_client_vpn_attachment.transit_gateway_id #=> String
+    #   resp.transit_gateway_client_vpn_attachment.client_vpn_endpoint_id #=> String
+    #   resp.transit_gateway_client_vpn_attachment.client_vpn_owner_id #=> String
+    #   resp.transit_gateway_client_vpn_attachment.state #=> String, one of "pending-acceptance", "pending", "rejected", "available", "deleting", "deleted"
+    #   resp.transit_gateway_client_vpn_attachment.creation_time #=> String
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/AcceptTransitGatewayClientVpnAttachment AWS API Documentation
+    #
+    # @overload accept_transit_gateway_client_vpn_attachment(params = {})
+    # @param [Hash] params ({})
+    def accept_transit_gateway_client_vpn_attachment(params = {}, options = {})
+      req = build_request(:accept_transit_gateway_client_vpn_attachment, params)
+      req.send_request(options)
+    end
+
     # Accepts a request to associate subnets with a transit gateway
     # multicast domain.
     #
@@ -669,7 +712,7 @@ module Aws::EC2
     #   resp.associations.transit_gateway_multicast_domain_id #=> String
     #   resp.associations.transit_gateway_attachment_id #=> String
     #   resp.associations.resource_id #=> String
-    #   resp.associations.resource_type #=> String, one of "vpc", "vpn", "vpn-concentrator", "direct-connect-gateway", "connect", "peering", "tgw-peering", "network-function"
+    #   resp.associations.resource_type #=> String, one of "vpc", "vpn", "vpn-concentrator", "direct-connect-gateway", "connect", "peering", "tgw-peering", "network-function", "client-vpn"
     #   resp.associations.resource_owner_id #=> String
     #   resp.associations.subnets #=> Array
     #   resp.associations.subnets[0].subnet_id #=> String
@@ -1908,8 +1951,10 @@ module Aws::EC2
     # @option params [required, String] :client_vpn_endpoint_id
     #   The ID of the Client VPN endpoint.
     #
-    # @option params [required, String] :subnet_id
+    # @option params [String] :subnet_id
     #   The ID of the subnet to associate with the Client VPN endpoint.
+    #   Required for VPC-based endpoints. For Transit Gateway-based endpoints,
+    #   use `AvailabilityZone` or `AvailabilityZoneId` instead.
     #
     # @option params [String] :client_token
     #   Unique, case-sensitive identifier that you provide to ensure the
@@ -1929,6 +1974,18 @@ module Aws::EC2
     #   If you have the required permissions, the error response is
     #   `DryRunOperation`. Otherwise, it is `UnauthorizedOperation`.
     #
+    # @option params [String] :availability_zone
+    #   The Availability Zone name for the Transit Gateway association.
+    #   Required if when associating an Availability Zone with a Client VPN
+    #   endpoint that uses a Transit Gateway. You cannot specify both
+    #   `SubnetId` and `AvailabilityZone`.
+    #
+    # @option params [String] :availability_zone_id
+    #   The Availability Zone ID for the Transit Gateway association. Required
+    #   if when associating an Availability Zone with a Client VPN endpoint
+    #   that uses a Transit Gateway. You cannot specify both
+    #   `AvailabilityZone` and `AvailabilityZoneId`.
+    #
     # @return [Types::AssociateClientVpnTargetNetworkResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::AssociateClientVpnTargetNetworkResult#association_id #association_id} => String
@@ -1938,9 +1995,11 @@ module Aws::EC2
     #
     #   resp = client.associate_client_vpn_target_network({
     #     client_vpn_endpoint_id: "ClientVpnEndpointId", # required
-    #     subnet_id: "SubnetId", # required
+    #     subnet_id: "SubnetId",
     #     client_token: "String",
     #     dry_run: false,
+    #     availability_zone: "AvailabilityZoneName",
+    #     availability_zone_id: "AvailabilityZoneId",
     #   })
     #
     # @example Response structure
@@ -2745,7 +2804,7 @@ module Aws::EC2
     #   resp.associations.transit_gateway_multicast_domain_id #=> String
     #   resp.associations.transit_gateway_attachment_id #=> String
     #   resp.associations.resource_id #=> String
-    #   resp.associations.resource_type #=> String, one of "vpc", "vpn", "vpn-concentrator", "direct-connect-gateway", "connect", "peering", "tgw-peering", "network-function"
+    #   resp.associations.resource_type #=> String, one of "vpc", "vpn", "vpn-concentrator", "direct-connect-gateway", "connect", "peering", "tgw-peering", "network-function", "client-vpn"
     #   resp.associations.resource_owner_id #=> String
     #   resp.associations.subnets #=> Array
     #   resp.associations.subnets[0].subnet_id #=> String
@@ -2794,7 +2853,7 @@ module Aws::EC2
     #   resp.association.transit_gateway_policy_table_id #=> String
     #   resp.association.transit_gateway_attachment_id #=> String
     #   resp.association.resource_id #=> String
-    #   resp.association.resource_type #=> String, one of "vpc", "vpn", "vpn-concentrator", "direct-connect-gateway", "connect", "peering", "tgw-peering", "network-function"
+    #   resp.association.resource_type #=> String, one of "vpc", "vpn", "vpn-concentrator", "direct-connect-gateway", "connect", "peering", "tgw-peering", "network-function", "client-vpn"
     #   resp.association.state #=> String, one of "associating", "associated", "disassociating", "disassociated"
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/AssociateTransitGatewayPolicyTable AWS API Documentation
@@ -2839,7 +2898,7 @@ module Aws::EC2
     #   resp.association.transit_gateway_route_table_id #=> String
     #   resp.association.transit_gateway_attachment_id #=> String
     #   resp.association.resource_id #=> String
-    #   resp.association.resource_type #=> String, one of "vpc", "vpn", "vpn-concentrator", "direct-connect-gateway", "connect", "peering", "tgw-peering", "network-function"
+    #   resp.association.resource_type #=> String, one of "vpc", "vpn", "vpn-concentrator", "direct-connect-gateway", "connect", "peering", "tgw-peering", "network-function", "client-vpn"
     #   resp.association.state #=> String, one of "associating", "associated", "disassociating", "disassociated"
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/AssociateTransitGatewayRouteTable AWS API Documentation
@@ -5601,6 +5660,7 @@ module Aws::EC2
     #   resp.volumes[0].sse_type #=> String, one of "sse-ebs", "sse-kms", "none"
     #   resp.volumes[0].operator.managed #=> Boolean
     #   resp.volumes[0].operator.principal #=> String
+    #   resp.volumes[0].operator.hidden_by_default #=> Boolean
     #   resp.volumes[0].volume_initialization_rate #=> Integer
     #   resp.volumes[0].volume_id #=> String
     #   resp.volumes[0].size #=> Integer
@@ -6598,6 +6658,12 @@ module Aws::EC2
     #   set to `dual-stack`, clients can access both IPv4 and IPv6 resources
     #   through the VPN .
     #
+    # @option params [Types::TransitGatewayConfigurationInputStructure] :transit_gateway_configuration
+    #   The Transit Gateway configuration for the Client VPN endpoint. Use
+    #   this parameter to associate the endpoint with a Transit Gateway
+    #   instead of a VPC. You cannot specify both
+    #   `TransitGatewayConfiguration` and `VpcId`/`SecurityGroupIds`.
+    #
     # @return [Types::CreateClientVpnEndpointResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::CreateClientVpnEndpointResult#client_vpn_endpoint_id #client_vpn_endpoint_id} => String
@@ -6665,12 +6731,17 @@ module Aws::EC2
     #     disconnect_on_session_timeout: false,
     #     endpoint_ip_address_type: "ipv4", # accepts ipv4, ipv6, dual-stack
     #     traffic_ip_address_type: "ipv4", # accepts ipv4, ipv6, dual-stack
+    #     transit_gateway_configuration: {
+    #       transit_gateway_id: "TransitGatewayId",
+    #       availability_zones: ["AvailabilityZoneName"],
+    #       availability_zone_ids: ["AvailabilityZoneId"],
+    #     },
     #   })
     #
     # @example Response structure
     #
     #   resp.client_vpn_endpoint_id #=> String
-    #   resp.status.code #=> String, one of "pending-associate", "available", "deleting", "deleted"
+    #   resp.status.code #=> String, one of "pending-associate", "available", "deleting", "deleted", "pending"
     #   resp.status.message #=> String
     #   resp.dns_name #=> String
     #
@@ -6705,7 +6776,7 @@ module Aws::EC2
     #
     #   * To add a route for the local network, enter the client CIDR range
     #
-    # @option params [required, String] :target_vpc_subnet_id
+    # @option params [String] :target_vpc_subnet_id
     #   The ID of the subnet through which you want to route traffic. The
     #   specified subnet must be an existing target network of the Client VPN
     #   endpoint.
@@ -6713,6 +6784,9 @@ module Aws::EC2
     #   Alternatively, if you're adding a route for the local network,
     #   specify `local`.
     #
+    #   This parameter is required for VPC-based Client VPN endpoints. For
+    #   Transit Gateway-based endpoints, this parameter is not required.
+    #
     # @option params [String] :description
     #   A brief description of the route.
     #
@@ -6743,7 +6817,7 @@ module Aws::EC2
     #   resp = client.create_client_vpn_route({
     #     client_vpn_endpoint_id: "ClientVpnEndpointId", # required
     #     destination_cidr_block: "String", # required
-    #     target_vpc_subnet_id: "SubnetId", # required
+    #     target_vpc_subnet_id: "SubnetId",
     #     description: "String",
     #     client_token: "String",
     #     dry_run: false,
@@ -10587,6 +10661,7 @@ module Aws::EC2
     #   resp.launch_template.tags[0].value #=> String
     #   resp.launch_template.operator.managed #=> Boolean
     #   resp.launch_template.operator.principal #=> String
+    #   resp.launch_template.operator.hidden_by_default #=> Boolean
     #   resp.warning.errors #=> Array
     #   resp.warning.errors[0].code #=> String
     #   resp.warning.errors[0].message #=> String
@@ -11177,6 +11252,7 @@ module Aws::EC2
     #   resp.launch_template_version.launch_template_data.disable_api_stop #=> Boolean
     #   resp.launch_template_version.launch_template_data.operator.managed #=> Boolean
     #   resp.launch_template_version.launch_template_data.operator.principal #=> String
+    #   resp.launch_template_version.launch_template_data.operator.hidden_by_default #=> Boolean
     #   resp.launch_template_version.launch_template_data.network_performance_options.bandwidth_weighting #=> String, one of "default", "vpc-1", "ebs-1"
     #   resp.launch_template_version.launch_template_data.secondary_interfaces #=> Array
     #   resp.launch_template_version.launch_template_data.secondary_interfaces[0].delete_on_termination #=> Boolean
@@ -11189,6 +11265,7 @@ module Aws::EC2
     #   resp.launch_template_version.launch_template_data.secondary_interfaces[0].network_card_index #=> Integer
     #   resp.launch_template_version.operator.managed #=> Boolean
     #   resp.launch_template_version.operator.principal #=> String
+    #   resp.launch_template_version.operator.hidden_by_default #=> Boolean
     #   resp.warning.errors #=> Array
     #   resp.warning.errors[0].code #=> String
     #   resp.warning.errors[0].message #=> String
@@ -13152,6 +13229,7 @@ module Aws::EC2
     #   resp.network_interface.ipv_6_address #=> String
     #   resp.network_interface.operator.managed #=> Boolean
     #   resp.network_interface.operator.principal #=> String
+    #   resp.network_interface.operator.hidden_by_default #=> Boolean
     #   resp.network_interface.associated_subnets #=> Array
     #   resp.network_interface.associated_subnets[0] #=> String
     #   resp.network_interface.availability_zone_id #=> String
@@ -13334,6 +13412,7 @@ module Aws::EC2
     #   resp.placement_group.linked_group_id #=> String
     #   resp.placement_group.operator.managed #=> Boolean
     #   resp.placement_group.operator.principal #=> String
+    #   resp.placement_group.operator.hidden_by_default #=> Boolean
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/CreatePlacementGroup AWS API Documentation
     #
@@ -16473,11 +16552,11 @@ module Aws::EC2
     #     transit_gateway_metering_policy_id: "TransitGatewayMeteringPolicyId", # required
     #     policy_rule_number: 1, # required
     #     source_transit_gateway_attachment_id: "TransitGatewayAttachmentId",
-    #     source_transit_gateway_attachment_type: "vpc", # accepts vpc, vpn, vpn-concentrator, direct-connect-gateway, connect, peering, tgw-peering, network-function
+    #     source_transit_gateway_attachment_type: "vpc", # accepts vpc, vpn, vpn-concentrator, direct-connect-gateway, connect, peering, tgw-peering, network-function, client-vpn
     #     source_cidr_block: "String",
     #     source_port_range: "String",
     #     destination_transit_gateway_attachment_id: "TransitGatewayAttachmentId",
-    #     destination_transit_gateway_attachment_type: "vpc", # accepts vpc, vpn, vpn-concentrator, direct-connect-gateway, connect, peering, tgw-peering, network-function
+    #     destination_transit_gateway_attachment_type: "vpc", # accepts vpc, vpn, vpn-concentrator, direct-connect-gateway, connect, peering, tgw-peering, network-function, client-vpn
     #     destination_cidr_block: "String",
     #     destination_port_range: "String",
     #     protocol: "String",
@@ -16493,11 +16572,11 @@ module Aws::EC2
     #   resp.transit_gateway_metering_policy_entry.updated_at #=> Time
     #   resp.transit_gateway_metering_policy_entry.update_effective_at #=> Time
     #   resp.transit_gateway_metering_policy_entry.metering_policy_rule.source_transit_gateway_attachment_id #=> String
-    #   resp.transit_gateway_metering_policy_entry.metering_policy_rule.source_transit_gateway_attachment_type #=> String, one of "vpc", "vpn", "vpn-concentrator", "direct-connect-gateway", "connect", "peering", "tgw-peering", "network-function"
+    #   resp.transit_gateway_metering_policy_entry.metering_policy_rule.source_transit_gateway_attachment_type #=> String, one of "vpc", "vpn", "vpn-concentrator", "direct-connect-gateway", "connect", "peering", "tgw-peering", "network-function", "client-vpn"
     #   resp.transit_gateway_metering_policy_entry.metering_policy_rule.source_cidr_block #=> String
     #   resp.transit_gateway_metering_policy_entry.metering_policy_rule.source_port_range #=> String
     #   resp.transit_gateway_metering_policy_entry.metering_policy_rule.destination_transit_gateway_attachment_id #=> String
-    #   resp.transit_gateway_metering_policy_entry.metering_policy_rule.destination_transit_gateway_attachment_type #=> String, one of "vpc", "vpn", "vpn-concentrator", "direct-connect-gateway", "connect", "peering", "tgw-peering", "network-function"
+    #   resp.transit_gateway_metering_policy_entry.metering_policy_rule.destination_transit_gateway_attachment_type #=> String, one of "vpc", "vpn", "vpn-concentrator", "direct-connect-gateway", "connect", "peering", "tgw-peering", "network-function", "client-vpn"
     #   resp.transit_gateway_metering_policy_entry.metering_policy_rule.destination_cidr_block #=> String
     #   resp.transit_gateway_metering_policy_entry.metering_policy_rule.destination_port_range #=> String
     #   resp.transit_gateway_metering_policy_entry.metering_policy_rule.protocol #=> String
@@ -16778,7 +16857,7 @@ module Aws::EC2
     #   resp.transit_gateway_prefix_list_reference.state #=> String, one of "pending", "available", "modifying", "deleting"
     #   resp.transit_gateway_prefix_list_reference.blackhole #=> Boolean
     #   resp.transit_gateway_prefix_list_reference.transit_gateway_attachment.transit_gateway_attachment_id #=> String
-    #   resp.transit_gateway_prefix_list_reference.transit_gateway_attachment.resource_type #=> String, one of "vpc", "vpn", "vpn-concentrator", "direct-connect-gateway", "connect", "peering", "tgw-peering", "network-function"
+    #   resp.transit_gateway_prefix_list_reference.transit_gateway_attachment.resource_type #=> String, one of "vpc", "vpn", "vpn-concentrator", "direct-connect-gateway", "connect", "peering", "tgw-peering", "network-function", "client-vpn"
     #   resp.transit_gateway_prefix_list_reference.transit_gateway_attachment.resource_id #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/CreateTransitGatewayPrefixListReference AWS API Documentation
@@ -16833,7 +16912,7 @@ module Aws::EC2
     #   resp.route.transit_gateway_attachments #=> Array
     #   resp.route.transit_gateway_attachments[0].resource_id #=> String
     #   resp.route.transit_gateway_attachments[0].transit_gateway_attachment_id #=> String
-    #   resp.route.transit_gateway_attachments[0].resource_type #=> String, one of "vpc", "vpn", "vpn-concentrator", "direct-connect-gateway", "connect", "peering", "tgw-peering", "network-function"
+    #   resp.route.transit_gateway_attachments[0].resource_type #=> String, one of "vpc", "vpn", "vpn-concentrator", "direct-connect-gateway", "connect", "peering", "tgw-peering", "network-function", "client-vpn"
     #   resp.route.type #=> String, one of "static", "propagated"
     #   resp.route.state #=> String, one of "pending", "active", "blackhole", "deleting", "deleted"
     #
@@ -17967,6 +18046,7 @@ module Aws::EC2
     #   resp.sse_type #=> String, one of "sse-ebs", "sse-kms", "none"
     #   resp.operator.managed #=> Boolean
     #   resp.operator.principal #=> String
+    #   resp.operator.hidden_by_default #=> Boolean
     #   resp.volume_initialization_rate #=> Integer
     #   resp.volume_id #=> String
     #   resp.size #=> Integer
@@ -19488,7 +19568,7 @@ module Aws::EC2
     #
     # @example Response structure
     #
-    #   resp.status.code #=> String, one of "pending-associate", "available", "deleting", "deleted"
+    #   resp.status.code #=> String, one of "pending-associate", "available", "deleting", "deleted", "pending"
     #   resp.status.message #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/DeleteClientVpnEndpoint AWS API Documentation
@@ -20733,6 +20813,7 @@ module Aws::EC2
     #   resp.launch_template.tags[0].value #=> String
     #   resp.launch_template.operator.managed #=> Boolean
     #   resp.launch_template.operator.principal #=> String
+    #   resp.launch_template.operator.hidden_by_default #=> Boolean
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/DeleteLaunchTemplate AWS API Documentation
     #
@@ -22689,6 +22770,48 @@ module Aws::EC2
       req.send_request(options)
     end
 
+    # Deletes a Transit Gateway attachment for a Client VPN endpoint. The
+    # Transit Gateway owner can delete the attachment to remove the
+    # association between the Client VPN endpoint and the Transit Gateway.
+    #
+    # @option params [required, String] :transit_gateway_attachment_id
+    #   The ID of the Transit Gateway attachment.
+    #
+    # @option params [Boolean] :dry_run
+    #   Checks whether you have the required permissions for the action,
+    #   without actually making the request, and provides an error response.
+    #   If you have the required permissions, the error response is
+    #   `DryRunOperation`. Otherwise, it is `UnauthorizedOperation`.
+    #
+    # @return [Types::DeleteTransitGatewayClientVpnAttachmentResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::DeleteTransitGatewayClientVpnAttachmentResult#transit_gateway_client_vpn_attachment #transit_gateway_client_vpn_attachment} => Types::TransitGatewayClientVpnAttachment
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.delete_transit_gateway_client_vpn_attachment({
+    #     transit_gateway_attachment_id: "TransitGatewayAttachmentId", # required
+    #     dry_run: false,
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.transit_gateway_client_vpn_attachment.transit_gateway_attachment_id #=> String
+    #   resp.transit_gateway_client_vpn_attachment.transit_gateway_id #=> String
+    #   resp.transit_gateway_client_vpn_attachment.client_vpn_endpoint_id #=> String
+    #   resp.transit_gateway_client_vpn_attachment.client_vpn_owner_id #=> String
+    #   resp.transit_gateway_client_vpn_attachment.state #=> String, one of "pending-acceptance", "pending", "rejected", "available", "deleting", "deleted"
+    #   resp.transit_gateway_client_vpn_attachment.creation_time #=> String
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/DeleteTransitGatewayClientVpnAttachment AWS API Documentation
+    #
+    # @overload delete_transit_gateway_client_vpn_attachment(params = {})
+    # @param [Hash] params ({})
+    def delete_transit_gateway_client_vpn_attachment(params = {}, options = {})
+      req = build_request(:delete_transit_gateway_client_vpn_attachment, params)
+      req.send_request(options)
+    end
+
     # Deletes the specified Connect attachment. You must first delete any
     # Connect peers for the attachment.
     #
@@ -22863,11 +22986,11 @@ module Aws::EC2
     #   resp.transit_gateway_metering_policy_entry.updated_at #=> Time
     #   resp.transit_gateway_metering_policy_entry.update_effective_at #=> Time
     #   resp.transit_gateway_metering_policy_entry.metering_policy_rule.source_transit_gateway_attachment_id #=> String
-    #   resp.transit_gateway_metering_policy_entry.metering_policy_rule.source_transit_gateway_attachment_type #=> String, one of "vpc", "vpn", "vpn-concentrator", "direct-connect-gateway", "connect", "peering", "tgw-peering", "network-function"
+    #   resp.transit_gateway_metering_policy_entry.metering_policy_rule.source_transit_gateway_attachment_type #=> String, one of "vpc", "vpn", "vpn-concentrator", "direct-connect-gateway", "connect", "peering", "tgw-peering", "network-function", "client-vpn"
     #   resp.transit_gateway_metering_policy_entry.metering_policy_rule.source_cidr_block #=> String
     #   resp.transit_gateway_metering_policy_entry.metering_policy_rule.source_port_range #=> String
     #   resp.transit_gateway_metering_policy_entry.metering_policy_rule.destination_transit_gateway_attachment_id #=> String
-    #   resp.transit_gateway_metering_policy_entry.metering_policy_rule.destination_transit_gateway_attachment_type #=> String, one of "vpc", "vpn", "vpn-concentrator", "direct-connect-gateway", "connect", "peering", "tgw-peering", "network-function"
+    #   resp.transit_gateway_metering_policy_entry.metering_policy_rule.destination_transit_gateway_attachment_type #=> String, one of "vpc", "vpn", "vpn-concentrator", "direct-connect-gateway", "connect", "peering", "tgw-peering", "network-function", "client-vpn"
     #   resp.transit_gateway_metering_policy_entry.metering_policy_rule.destination_cidr_block #=> String
     #   resp.transit_gateway_metering_policy_entry.metering_policy_rule.destination_port_range #=> String
     #   resp.transit_gateway_metering_policy_entry.metering_policy_rule.protocol #=> String
@@ -23055,7 +23178,7 @@ module Aws::EC2
     #   resp.transit_gateway_prefix_list_reference.state #=> String, one of "pending", "available", "modifying", "deleting"
     #   resp.transit_gateway_prefix_list_reference.blackhole #=> Boolean
     #   resp.transit_gateway_prefix_list_reference.transit_gateway_attachment.transit_gateway_attachment_id #=> String
-    #   resp.transit_gateway_prefix_list_reference.transit_gateway_attachment.resource_type #=> String, one of "vpc", "vpn", "vpn-concentrator", "direct-connect-gateway", "connect", "peering", "tgw-peering", "network-function"
+    #   resp.transit_gateway_prefix_list_reference.transit_gateway_attachment.resource_type #=> String, one of "vpc", "vpn", "vpn-concentrator", "direct-connect-gateway", "connect", "peering", "tgw-peering", "network-function", "client-vpn"
     #   resp.transit_gateway_prefix_list_reference.transit_gateway_attachment.resource_id #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/DeleteTransitGatewayPrefixListReference AWS API Documentation
@@ -23103,7 +23226,7 @@ module Aws::EC2
     #   resp.route.transit_gateway_attachments #=> Array
     #   resp.route.transit_gateway_attachments[0].resource_id #=> String
     #   resp.route.transit_gateway_attachments[0].transit_gateway_attachment_id #=> String
-    #   resp.route.transit_gateway_attachments[0].resource_type #=> String, one of "vpc", "vpn", "vpn-concentrator", "direct-connect-gateway", "connect", "peering", "tgw-peering", "network-function"
+    #   resp.route.transit_gateway_attachments[0].resource_type #=> String, one of "vpc", "vpn", "vpn-concentrator", "direct-connect-gateway", "connect", "peering", "tgw-peering", "network-function", "client-vpn"
     #   resp.route.type #=> String, one of "static", "propagated"
     #   resp.route.state #=> String, one of "pending", "active", "blackhole", "deleting", "deleted"
     #
@@ -26797,7 +26920,7 @@ module Aws::EC2
     #   resp.client_vpn_endpoints #=> Array
     #   resp.client_vpn_endpoints[0].client_vpn_endpoint_id #=> String
     #   resp.client_vpn_endpoints[0].description #=> String
-    #   resp.client_vpn_endpoints[0].status.code #=> String, one of "pending-associate", "available", "deleting", "deleted"
+    #   resp.client_vpn_endpoints[0].status.code #=> String, one of "pending-associate", "available", "deleting", "deleted", "pending"
     #   resp.client_vpn_endpoints[0].status.message #=> String
     #   resp.client_vpn_endpoints[0].creation_time #=> String
     #   resp.client_vpn_endpoints[0].deletion_time #=> String
@@ -26840,6 +26963,12 @@ module Aws::EC2
     #   resp.client_vpn_endpoints[0].disconnect_on_session_timeout #=> Boolean
     #   resp.client_vpn_endpoints[0].endpoint_ip_address_type #=> String, one of "ipv4", "ipv6", "dual-stack"
     #   resp.client_vpn_endpoints[0].traffic_ip_address_type #=> String, one of "ipv4", "ipv6", "dual-stack"
+    #   resp.client_vpn_endpoints[0].transit_gateway_configuration.transit_gateway_id #=> String
+    #   resp.client_vpn_endpoints[0].transit_gateway_configuration.transit_gateway_attachment_id #=> String
+    #   resp.client_vpn_endpoints[0].transit_gateway_configuration.availability_zones #=> Array
+    #   resp.client_vpn_endpoints[0].transit_gateway_configuration.availability_zones[0] #=> String
+    #   resp.client_vpn_endpoints[0].transit_gateway_configuration.availability_zone_ids #=> Array
+    #   resp.client_vpn_endpoints[0].transit_gateway_configuration.availability_zone_ids[0] #=> String
     #   resp.next_token #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/DescribeClientVpnEndpoints AWS API Documentation
@@ -26914,6 +27043,7 @@ module Aws::EC2
     #   resp.routes[0].status.code #=> String, one of "creating", "active", "failed", "deleting"
     #   resp.routes[0].status.message #=> String
     #   resp.routes[0].description #=> String
+    #   resp.routes[0].transit_gateway_attachment_id #=> String
     #   resp.next_token #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/DescribeClientVpnRoutes AWS API Documentation
@@ -26992,6 +27122,10 @@ module Aws::EC2
     #   resp.client_vpn_target_networks[0].status.message #=> String
     #   resp.client_vpn_target_networks[0].security_groups #=> Array
     #   resp.client_vpn_target_networks[0].security_groups[0] #=> String
+    #   resp.client_vpn_target_networks[0].availability_zones #=> Array
+    #   resp.client_vpn_target_networks[0].availability_zones[0] #=> String
+    #   resp.client_vpn_target_networks[0].availability_zone_ids #=> Array
+    #   resp.client_vpn_target_networks[0].availability_zone_ids[0] #=> String
     #   resp.next_token #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/DescribeClientVpnTargetNetworks AWS API Documentation
@@ -30377,6 +30511,7 @@ module Aws::EC2
     #   resp.block_device_mappings[0].ebs.volume_owner_id #=> String
     #   resp.block_device_mappings[0].ebs.operator.managed #=> Boolean
     #   resp.block_device_mappings[0].ebs.operator.principal #=> String
+    #   resp.block_device_mappings[0].ebs.operator.hidden_by_default #=> Boolean
     #   resp.block_device_mappings[0].ebs.ebs_card_index #=> Integer
     #   resp.disable_api_termination.value #=> Boolean
     #   resp.ena_support.value #=> Boolean
@@ -30938,6 +31073,7 @@ module Aws::EC2
     #   resp.instance_image_metadata[0].image_metadata.is_public #=> Boolean
     #   resp.instance_image_metadata[0].operator.managed #=> Boolean
     #   resp.instance_image_metadata[0].operator.principal #=> String
+    #   resp.instance_image_metadata[0].operator.hidden_by_default #=> Boolean
     #   resp.next_token #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/DescribeInstanceImageMetadata AWS API Documentation
@@ -31203,6 +31339,12 @@ module Aws::EC2
     #   The token returned from a previous paginated request. Pagination
     #   continues from the end of the items returned by the previous request.
     #
+    # @option params [Boolean] :include_managed_resources
+    #   Indicates whether to include managed resources in the output. If this
+    #   parameter is set to `true`, the output includes resources that are
+    #   managed by Amazon Web Services services, even if managed resource
+    #   visibility is set to hidden.
+    #
     # @option params [Boolean] :dry_run
     #   Checks whether you have the required permissions for the operation,
     #   without actually making the request, and provides an error response.
@@ -31333,6 +31475,7 @@ module Aws::EC2
     #     instance_ids: ["InstanceId"],
     #     max_results: 1,
     #     next_token: "String",
+    #     include_managed_resources: false,
     #     dry_run: false,
     #     filters: [
     #       {
@@ -31351,6 +31494,7 @@ module Aws::EC2
     #   resp.instance_statuses[0].outpost_arn #=> String
     #   resp.instance_statuses[0].operator.managed #=> Boolean
     #   resp.instance_statuses[0].operator.principal #=> String
+    #   resp.instance_statuses[0].operator.hidden_by_default #=> Boolean
     #   resp.instance_statuses[0].events #=> Array
     #   resp.instance_statuses[0].events[0].instance_event_id #=> String
     #   resp.instance_statuses[0].events[0].code #=> String, one of "instance-reboot", "system-reboot", "system-maintenance", "instance-retirement", "instance-stop"
@@ -32040,6 +32184,12 @@ module Aws::EC2
     #
     #   Default: Describes all your instances.
     #
+    # @option params [Boolean] :include_managed_resources
+    #   Indicates whether to include managed resources in the output. If this
+    #   parameter is set to `true`, the output includes resources that are
+    #   managed by Amazon Web Services services, even if managed resource
+    #   visibility is set to hidden.
+    #
     # @option params [Boolean] :dry_run
     #   Checks whether you have the required permissions for the operation,
     #   without actually making the request, and provides an error response.
@@ -32584,6 +32734,7 @@ module Aws::EC2
     #
     #   resp = client.describe_instances({
     #     instance_ids: ["InstanceId"],
+    #     include_managed_resources: false,
     #     dry_run: false,
     #     filters: [
     #       {
@@ -32617,6 +32768,7 @@ module Aws::EC2
     #   resp.reservations[0].instances[0].block_device_mappings[0].ebs.volume_owner_id #=> String
     #   resp.reservations[0].instances[0].block_device_mappings[0].ebs.operator.managed #=> Boolean
     #   resp.reservations[0].instances[0].block_device_mappings[0].ebs.operator.principal #=> String
+    #   resp.reservations[0].instances[0].block_device_mappings[0].ebs.operator.hidden_by_default #=> Boolean
     #   resp.reservations[0].instances[0].block_device_mappings[0].ebs.ebs_card_index #=> Integer
     #   resp.reservations[0].instances[0].client_token #=> String
     #   resp.reservations[0].instances[0].ebs_optimized #=> Boolean
@@ -32685,6 +32837,7 @@ module Aws::EC2
     #   resp.reservations[0].instances[0].network_interfaces[0].connection_tracking_configuration.udp_timeout #=> Integer
     #   resp.reservations[0].instances[0].network_interfaces[0].operator.managed #=> Boolean
     #   resp.reservations[0].instances[0].network_interfaces[0].operator.principal #=> String
+    #   resp.reservations[0].instances[0].network_interfaces[0].operator.hidden_by_default #=> Boolean
     #   resp.reservations[0].instances[0].outpost_arn #=> String
     #   resp.reservations[0].instances[0].root_device_name #=> String
     #   resp.reservations[0].instances[0].root_device_type #=> String, one of "ebs", "instance-store"
@@ -32734,6 +32887,7 @@ module Aws::EC2
     #   resp.reservations[0].instances[0].network_performance_options.bandwidth_weighting #=> String, one of "default", "vpc-1", "ebs-1"
     #   resp.reservations[0].instances[0].operator.managed #=> Boolean
     #   resp.reservations[0].instances[0].operator.principal #=> String
+    #   resp.reservations[0].instances[0].operator.hidden_by_default #=> Boolean
     #   resp.reservations[0].instances[0].secondary_interfaces #=> Array
     #   resp.reservations[0].instances[0].secondary_interfaces[0].attachment.attach_time #=> Time
     #   resp.reservations[0].instances[0].secondary_interfaces[0].attachment.attachment_id #=> String
@@ -34026,6 +34180,12 @@ module Aws::EC2
     #
     #   [1]: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/create-launch-template.html#use-an-ssm-parameter-instead-of-an-ami-id
     #
+    # @option params [Boolean] :include_managed_resources
+    #   Indicates whether to include managed resources in the output. If this
+    #   parameter is set to `true`, the output includes resources that are
+    #   managed by Amazon Web Services services, even if managed resource
+    #   visibility is set to hidden.
+    #
     # @return [Types::DescribeLaunchTemplateVersionsResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::DescribeLaunchTemplateVersionsResult#launch_template_versions #launch_template_versions} => Array<Types::LaunchTemplateVersion>
@@ -34113,6 +34273,7 @@ module Aws::EC2
     #       },
     #     ],
     #     resolve_alias: false,
+    #     include_managed_resources: false,
     #   })
     #
     # @example Response structure
@@ -34284,6 +34445,7 @@ module Aws::EC2
     #   resp.launch_template_versions[0].launch_template_data.disable_api_stop #=> Boolean
     #   resp.launch_template_versions[0].launch_template_data.operator.managed #=> Boolean
     #   resp.launch_template_versions[0].launch_template_data.operator.principal #=> String
+    #   resp.launch_template_versions[0].launch_template_data.operator.hidden_by_default #=> Boolean
     #   resp.launch_template_versions[0].launch_template_data.network_performance_options.bandwidth_weighting #=> String, one of "default", "vpc-1", "ebs-1"
     #   resp.launch_template_versions[0].launch_template_data.secondary_interfaces #=> Array
     #   resp.launch_template_versions[0].launch_template_data.secondary_interfaces[0].delete_on_termination #=> Boolean
@@ -34296,6 +34458,7 @@ module Aws::EC2
     #   resp.launch_template_versions[0].launch_template_data.secondary_interfaces[0].network_card_index #=> Integer
     #   resp.launch_template_versions[0].operator.managed #=> Boolean
     #   resp.launch_template_versions[0].operator.principal #=> String
+    #   resp.launch_template_versions[0].operator.hidden_by_default #=> Boolean
     #   resp.next_token #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/DescribeLaunchTemplateVersions AWS API Documentation
@@ -34346,6 +34509,12 @@ module Aws::EC2
     #   the remaining results, make another call with the returned `NextToken`
     #   value. This value can be between 1 and 200.
     #
+    # @option params [Boolean] :include_managed_resources
+    #   Indicates whether to include managed resources in the output. If this
+    #   parameter is set to `true`, the output includes resources that are
+    #   managed by Amazon Web Services services, even if managed resource
+    #   visibility is set to hidden.
+    #
     # @return [Types::DescribeLaunchTemplatesResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::DescribeLaunchTemplatesResult#launch_templates #launch_templates} => Array<Types::LaunchTemplate>
@@ -34392,6 +34561,7 @@ module Aws::EC2
     #     ],
     #     next_token: "String",
     #     max_results: 1,
+    #     include_managed_resources: false,
     #   })
     #
     # @example Response structure
@@ -34408,6 +34578,7 @@ module Aws::EC2
     #   resp.launch_templates[0].tags[0].value #=> String
     #   resp.launch_templates[0].operator.managed #=> Boolean
     #   resp.launch_templates[0].operator.principal #=> String
+    #   resp.launch_templates[0].operator.hidden_by_default #=> Boolean
     #   resp.next_token #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/DescribeLaunchTemplates AWS API Documentation
@@ -37143,6 +37314,12 @@ module Aws::EC2
     #
     #   [1]: https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination
     #
+    # @option params [Boolean] :include_managed_resources
+    #   Indicates whether to include managed resources in the output. If this
+    #   parameter is set to `true`, the output includes resources that are
+    #   managed by Amazon Web Services services, even if managed resource
+    #   visibility is set to hidden.
+    #
     # @option params [Boolean] :dry_run
     #   Checks whether you have the required permissions for the action,
     #   without actually making the request, and provides an error response.
@@ -37357,6 +37534,7 @@ module Aws::EC2
     #   resp = client.describe_network_interfaces({
     #     next_token: "String",
     #     max_results: 1,
+    #     include_managed_resources: false,
     #     dry_run: false,
     #     network_interface_ids: ["NetworkInterfaceId"],
     #     filters: [
@@ -37441,6 +37619,7 @@ module Aws::EC2
     #   resp.network_interfaces[0].ipv_6_address #=> String
     #   resp.network_interfaces[0].operator.managed #=> Boolean
     #   resp.network_interfaces[0].operator.principal #=> String
+    #   resp.network_interfaces[0].operator.hidden_by_default #=> Boolean
     #   resp.network_interfaces[0].associated_subnets #=> Array
     #   resp.network_interfaces[0].associated_subnets[0] #=> String
     #   resp.network_interfaces[0].availability_zone_id #=> String
@@ -37657,6 +37836,7 @@ module Aws::EC2
     #   resp.placement_groups[0].linked_group_id #=> String
     #   resp.placement_groups[0].operator.managed #=> Boolean
     #   resp.placement_groups[0].operator.principal #=> String
+    #   resp.placement_groups[0].operator.hidden_by_default #=> Boolean
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/DescribePlacementGroups AWS API Documentation
     #
@@ -43193,7 +43373,7 @@ module Aws::EC2
     #   resp.transit_gateway_attachments[0].transit_gateway_id #=> String
     #   resp.transit_gateway_attachments[0].transit_gateway_owner_id #=> String
     #   resp.transit_gateway_attachments[0].resource_owner_id #=> String
-    #   resp.transit_gateway_attachments[0].resource_type #=> String, one of "vpc", "vpn", "vpn-concentrator", "direct-connect-gateway", "connect", "peering", "tgw-peering", "network-function"
+    #   resp.transit_gateway_attachments[0].resource_type #=> String, one of "vpc", "vpn", "vpn-concentrator", "direct-connect-gateway", "connect", "peering", "tgw-peering", "network-function", "client-vpn"
     #   resp.transit_gateway_attachments[0].resource_id #=> String
     #   resp.transit_gateway_attachments[0].state #=> String, one of "initiating", "initiatingRequest", "pendingAcceptance", "rollingBack", "pending", "available", "modifying", "deleting", "deleted", "failed", "rejected", "rejecting", "failing"
     #   resp.transit_gateway_attachments[0].association.transit_gateway_route_table_id #=> String
@@ -44695,6 +44875,12 @@ module Aws::EC2
     #
     #   Default: Describes all your volumes.
     #
+    # @option params [Boolean] :include_managed_resources
+    #   Indicates whether to include managed resources in the output. If this
+    #   parameter is set to `true`, the output includes resources that are
+    #   managed by Amazon Web Services services, even if managed resource
+    #   visibility is set to hidden.
+    #
     # @option params [Boolean] :dry_run
     #   Checks whether you have the required permissions for the action,
     #   without actually making the request, and provides an error response.
@@ -44809,6 +44995,7 @@ module Aws::EC2
     #     max_results: 1,
     #     next_token: "String",
     #     volume_ids: ["VolumeId"],
+    #     include_managed_resources: false,
     #     dry_run: false,
     #     filters: [
     #       {
@@ -44848,6 +45035,9 @@ module Aws::EC2
     #   resp.volume_statuses[0].initialization_status_details.progress #=> Integer
     #   resp.volume_statuses[0].initialization_status_details.estimated_time_to_complete_in_seconds #=> Integer
     #   resp.volume_statuses[0].availability_zone_id #=> String
+    #   resp.volume_statuses[0].operator.managed #=> Boolean
+    #   resp.volume_statuses[0].operator.principal #=> String
+    #   resp.volume_statuses[0].operator.hidden_by_default #=> Boolean
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/DescribeVolumeStatus AWS API Documentation
     #
@@ -44885,6 +45075,12 @@ module Aws::EC2
     #   The volume IDs. If not specified, then all volumes are included in the
     #   response.
     #
+    # @option params [Boolean] :include_managed_resources
+    #   Indicates whether to include managed resources in the output. If this
+    #   parameter is set to `true`, the output includes resources that are
+    #   managed by Amazon Web Services services, even if managed resource
+    #   visibility is set to hidden.
+    #
     # @option params [Boolean] :dry_run
     #   Checks whether you have the required permissions for the action,
     #   without actually making the request, and provides an error response.
@@ -45060,6 +45256,7 @@ module Aws::EC2
     #
     #   resp = client.describe_volumes({
     #     volume_ids: ["VolumeId"],
+    #     include_managed_resources: false,
     #     dry_run: false,
     #     filters: [
     #       {
@@ -45089,6 +45286,7 @@ module Aws::EC2
     #   resp.volumes[0].sse_type #=> String, one of "sse-ebs", "sse-kms", "none"
     #   resp.volumes[0].operator.managed #=> Boolean
     #   resp.volumes[0].operator.principal #=> String
+    #   resp.volumes[0].operator.hidden_by_default #=> Boolean
     #   resp.volumes[0].volume_initialization_rate #=> Integer
     #   resp.volumes[0].volume_id #=> String
     #   resp.volumes[0].size #=> Integer
@@ -45228,6 +45426,9 @@ module Aws::EC2
     #   resp.volumes_modifications[0].progress #=> Integer
     #   resp.volumes_modifications[0].start_time #=> Time
     #   resp.volumes_modifications[0].end_time #=> Time
+    #   resp.volumes_modifications[0].operator.managed #=> Boolean
+    #   resp.volumes_modifications[0].operator.principal #=> String
+    #   resp.volumes_modifications[0].operator.hidden_by_default #=> Boolean
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/DescribeVolumesModifications AWS API Documentation
     #
@@ -48395,7 +48596,7 @@ module Aws::EC2
     #
     #   resp.propagation.transit_gateway_attachment_id #=> String
     #   resp.propagation.resource_id #=> String
-    #   resp.propagation.resource_type #=> String, one of "vpc", "vpn", "vpn-concentrator", "direct-connect-gateway", "connect", "peering", "tgw-peering", "network-function"
+    #   resp.propagation.resource_type #=> String, one of "vpc", "vpn", "vpn-concentrator", "direct-connect-gateway", "connect", "peering", "tgw-peering", "network-function", "client-vpn"
     #   resp.propagation.transit_gateway_route_table_id #=> String
     #   resp.propagation.state #=> String, one of "enabling", "enabled", "disabling", "disabled"
     #   resp.propagation.transit_gateway_route_table_announcement_id #=> String
@@ -49254,7 +49455,7 @@ module Aws::EC2
     #   resp.associations.transit_gateway_multicast_domain_id #=> String
     #   resp.associations.transit_gateway_attachment_id #=> String
     #   resp.associations.resource_id #=> String
-    #   resp.associations.resource_type #=> String, one of "vpc", "vpn", "vpn-concentrator", "direct-connect-gateway", "connect", "peering", "tgw-peering", "network-function"
+    #   resp.associations.resource_type #=> String, one of "vpc", "vpn", "vpn-concentrator", "direct-connect-gateway", "connect", "peering", "tgw-peering", "network-function", "client-vpn"
     #   resp.associations.resource_owner_id #=> String
     #   resp.associations.subnets #=> Array
     #   resp.associations.subnets[0].subnet_id #=> String
@@ -49301,7 +49502,7 @@ module Aws::EC2
     #   resp.association.transit_gateway_policy_table_id #=> String
     #   resp.association.transit_gateway_attachment_id #=> String
     #   resp.association.resource_id #=> String
-    #   resp.association.resource_type #=> String, one of "vpc", "vpn", "vpn-concentrator", "direct-connect-gateway", "connect", "peering", "tgw-peering", "network-function"
+    #   resp.association.resource_type #=> String, one of "vpc", "vpn", "vpn-concentrator", "direct-connect-gateway", "connect", "peering", "tgw-peering", "network-function", "client-vpn"
     #   resp.association.state #=> String, one of "associating", "associated", "disassociating", "disassociated"
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/DisassociateTransitGatewayPolicyTable AWS API Documentation
@@ -49345,7 +49546,7 @@ module Aws::EC2
     #   resp.association.transit_gateway_route_table_id #=> String
     #   resp.association.transit_gateway_attachment_id #=> String
     #   resp.association.resource_id #=> String
-    #   resp.association.resource_type #=> String, one of "vpc", "vpn", "vpn-concentrator", "direct-connect-gateway", "connect", "peering", "tgw-peering", "network-function"
+    #   resp.association.resource_type #=> String, one of "vpc", "vpn", "vpn-concentrator", "direct-connect-gateway", "connect", "peering", "tgw-peering", "network-function", "client-vpn"
     #   resp.association.state #=> String, one of "associating", "associated", "disassociating", "disassociated"
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/DisassociateTransitGatewayRouteTable AWS API Documentation
@@ -50253,16 +50454,16 @@ module Aws::EC2
     #   The ID of the IPAM policy to enable.
     #
     # @option params [String] :organization_target_id
+    #   A target can be an individual Amazon Web Services account or an entity
+    #   within an Amazon Web Services Organization to which an IPAM policy can
+    #   be applied.
+    #
     #   The ID of the Amazon Web Services Organizations target for which to
     #   enable the IPAM policy. This parameter is required only when IPAM is
     #   integrated with Amazon Web Services Organizations. When IPAM is not
     #   integrated with Amazon Web Services Organizations, omit this parameter
     #   and the policy will apply to the current account.
     #
-    #   A target can be an individual Amazon Web Services account or an entity
-    #   within an Amazon Web Services Organization to which an IPAM policy can
-    #   be applied.
-    #
     # @return [Types::EnableIpamPolicyResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::EnableIpamPolicyResult#ipam_policy_id #ipam_policy_id} => String
@@ -50522,7 +50723,7 @@ module Aws::EC2
     #
     #   resp.propagation.transit_gateway_attachment_id #=> String
     #   resp.propagation.resource_id #=> String
-    #   resp.propagation.resource_type #=> String, one of "vpc", "vpn", "vpn-concentrator", "direct-connect-gateway", "connect", "peering", "tgw-peering", "network-function"
+    #   resp.propagation.resource_type #=> String, one of "vpc", "vpn", "vpn-concentrator", "direct-connect-gateway", "connect", "peering", "tgw-peering", "network-function", "client-vpn"
     #   resp.propagation.transit_gateway_route_table_id #=> String
     #   resp.propagation.state #=> String, one of "enabling", "enabled", "disabling", "disabled"
     #   resp.propagation.transit_gateway_route_table_announcement_id #=> String
@@ -53969,6 +54170,7 @@ module Aws::EC2
     #   resp.launch_template_data.disable_api_stop #=> Boolean
     #   resp.launch_template_data.operator.managed #=> Boolean
     #   resp.launch_template_data.operator.principal #=> String
+    #   resp.launch_template_data.operator.hidden_by_default #=> Boolean
     #   resp.launch_template_data.network_performance_options.bandwidth_weighting #=> String, one of "default", "vpc-1", "ebs-1"
     #   resp.launch_template_data.secondary_interfaces #=> Array
     #   resp.launch_template_data.secondary_interfaces[0].delete_on_termination #=> Boolean
@@ -54098,6 +54300,39 @@ module Aws::EC2
       req.send_request(options)
     end
 
+    # Retrieves the managed resource visibility configuration for the
+    # account. The response indicates whether managed resources are hidden
+    # or visible by default.
+    #
+    # @option params [Boolean] :dry_run
+    #   Checks whether you have the required permissions for the operation,
+    #   without actually making the request, and provides an error response.
+    #   If you have the required permissions, the error response is
+    #   `DryRunOperation`. Otherwise, it is `UnauthorizedOperation`.
+    #
+    # @return [Types::GetManagedResourceVisibilityResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::GetManagedResourceVisibilityResult#visibility #visibility} => Types::ManagedResourceVisibilitySettings
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.get_managed_resource_visibility({
+    #     dry_run: false,
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.visibility.default_visibility #=> String, one of "hidden", "visible"
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/GetManagedResourceVisibility AWS API Documentation
+    #
+    # @overload get_managed_resource_visibility(params = {})
+    # @param [Hash] params ({})
+    def get_managed_resource_visibility(params = {}, options = {})
+      req = build_request(:get_managed_resource_visibility, params)
+      req.send_request(options)
+    end
+
     # Gets the findings for the specified Network Access Scope analysis.
     #
     # @option params [required, String] :network_insights_access_scope_analysis_id
@@ -55515,11 +55750,11 @@ module Aws::EC2
     #   resp.transit_gateway_metering_policy_entries[0].updated_at #=> Time
     #   resp.transit_gateway_metering_policy_entries[0].update_effective_at #=> Time
     #   resp.transit_gateway_metering_policy_entries[0].metering_policy_rule.source_transit_gateway_attachment_id #=> String
-    #   resp.transit_gateway_metering_policy_entries[0].metering_policy_rule.source_transit_gateway_attachment_type #=> String, one of "vpc", "vpn", "vpn-concentrator", "direct-connect-gateway", "connect", "peering", "tgw-peering", "network-function"
+    #   resp.transit_gateway_metering_policy_entries[0].metering_policy_rule.source_transit_gateway_attachment_type #=> String, one of "vpc", "vpn", "vpn-concentrator", "direct-connect-gateway", "connect", "peering", "tgw-peering", "network-function", "client-vpn"
     #   resp.transit_gateway_metering_policy_entries[0].metering_policy_rule.source_cidr_block #=> String
     #   resp.transit_gateway_metering_policy_entries[0].metering_policy_rule.source_port_range #=> String
     #   resp.transit_gateway_metering_policy_entries[0].metering_policy_rule.destination_transit_gateway_attachment_id #=> String
-    #   resp.transit_gateway_metering_policy_entries[0].metering_policy_rule.destination_transit_gateway_attachment_type #=> String, one of "vpc", "vpn", "vpn-concentrator", "direct-connect-gateway", "connect", "peering", "tgw-peering", "network-function"
+    #   resp.transit_gateway_metering_policy_entries[0].metering_policy_rule.destination_transit_gateway_attachment_type #=> String, one of "vpc", "vpn", "vpn-concentrator", "direct-connect-gateway", "connect", "peering", "tgw-peering", "network-function", "client-vpn"
     #   resp.transit_gateway_metering_policy_entries[0].metering_policy_rule.destination_cidr_block #=> String
     #   resp.transit_gateway_metering_policy_entries[0].metering_policy_rule.destination_port_range #=> String
     #   resp.transit_gateway_metering_policy_entries[0].metering_policy_rule.protocol #=> String
@@ -55597,7 +55832,7 @@ module Aws::EC2
     #   resp.multicast_domain_associations #=> Array
     #   resp.multicast_domain_associations[0].transit_gateway_attachment_id #=> String
     #   resp.multicast_domain_associations[0].resource_id #=> String
-    #   resp.multicast_domain_associations[0].resource_type #=> String, one of "vpc", "vpn", "vpn-concentrator", "direct-connect-gateway", "connect", "peering", "tgw-peering", "network-function"
+    #   resp.multicast_domain_associations[0].resource_type #=> String, one of "vpc", "vpn", "vpn-concentrator", "direct-connect-gateway", "connect", "peering", "tgw-peering", "network-function", "client-vpn"
     #   resp.multicast_domain_associations[0].resource_owner_id #=> String
     #   resp.multicast_domain_associations[0].subnet.subnet_id #=> String
     #   resp.multicast_domain_associations[0].subnet.state #=> String, one of "pendingAcceptance", "associating", "associated", "disassociating", "disassociated", "rejected", "failed"
@@ -55662,7 +55897,7 @@ module Aws::EC2
     #   resp.associations[0].transit_gateway_policy_table_id #=> String
     #   resp.associations[0].transit_gateway_attachment_id #=> String
     #   resp.associations[0].resource_id #=> String
-    #   resp.associations[0].resource_type #=> String, one of "vpc", "vpn", "vpn-concentrator", "direct-connect-gateway", "connect", "peering", "tgw-peering", "network-function"
+    #   resp.associations[0].resource_type #=> String, one of "vpc", "vpn", "vpn-concentrator", "direct-connect-gateway", "connect", "peering", "tgw-peering", "network-function", "client-vpn"
     #   resp.associations[0].state #=> String, one of "associating", "associated", "disassociating", "disassociated"
     #   resp.next_token #=> String
     #
@@ -55812,7 +56047,7 @@ module Aws::EC2
     #   resp.transit_gateway_prefix_list_references[0].state #=> String, one of "pending", "available", "modifying", "deleting"
     #   resp.transit_gateway_prefix_list_references[0].blackhole #=> Boolean
     #   resp.transit_gateway_prefix_list_references[0].transit_gateway_attachment.transit_gateway_attachment_id #=> String
-    #   resp.transit_gateway_prefix_list_references[0].transit_gateway_attachment.resource_type #=> String, one of "vpc", "vpn", "vpn-concentrator", "direct-connect-gateway", "connect", "peering", "tgw-peering", "network-function"
+    #   resp.transit_gateway_prefix_list_references[0].transit_gateway_attachment.resource_type #=> String, one of "vpc", "vpn", "vpn-concentrator", "direct-connect-gateway", "connect", "peering", "tgw-peering", "network-function", "client-vpn"
     #   resp.transit_gateway_prefix_list_references[0].transit_gateway_attachment.resource_id #=> String
     #   resp.next_token #=> String
     #
@@ -55882,7 +56117,7 @@ module Aws::EC2
     #   resp.associations #=> Array
     #   resp.associations[0].transit_gateway_attachment_id #=> String
     #   resp.associations[0].resource_id #=> String
-    #   resp.associations[0].resource_type #=> String, one of "vpc", "vpn", "vpn-concentrator", "direct-connect-gateway", "connect", "peering", "tgw-peering", "network-function"
+    #   resp.associations[0].resource_type #=> String, one of "vpc", "vpn", "vpn-concentrator", "direct-connect-gateway", "connect", "peering", "tgw-peering", "network-function", "client-vpn"
     #   resp.associations[0].state #=> String, one of "associating", "associated", "disassociating", "disassociated"
     #   resp.next_token #=> String
     #
@@ -55952,7 +56187,7 @@ module Aws::EC2
     #   resp.transit_gateway_route_table_propagations #=> Array
     #   resp.transit_gateway_route_table_propagations[0].transit_gateway_attachment_id #=> String
     #   resp.transit_gateway_route_table_propagations[0].resource_id #=> String
-    #   resp.transit_gateway_route_table_propagations[0].resource_type #=> String, one of "vpc", "vpn", "vpn-concentrator", "direct-connect-gateway", "connect", "peering", "tgw-peering", "network-function"
+    #   resp.transit_gateway_route_table_propagations[0].resource_type #=> String, one of "vpc", "vpn", "vpn-concentrator", "direct-connect-gateway", "connect", "peering", "tgw-peering", "network-function", "client-vpn"
     #   resp.transit_gateway_route_table_propagations[0].state #=> String, one of "enabling", "enabled", "disabling", "disabled"
     #   resp.transit_gateway_route_table_propagations[0].transit_gateway_route_table_announcement_id #=> String
     #   resp.next_token #=> String
@@ -57305,6 +57540,7 @@ module Aws::EC2
     #   resp.volumes[0].snapshot_id #=> String
     #   resp.volumes[0].operator.managed #=> Boolean
     #   resp.volumes[0].operator.principal #=> String
+    #   resp.volumes[0].operator.hidden_by_default #=> Boolean
     #   resp.volumes[0].create_time #=> Time
     #   resp.volumes[0].recycle_bin_enter_time #=> Time
     #   resp.volumes[0].recycle_bin_exit_time #=> Time
@@ -57849,6 +58085,10 @@ module Aws::EC2
     #   `true`, users are prompted to reconnect client VPN. If `false`, client
     #   VPN attempts to reconnect automatically. The default value is `true`.
     #
+    # @option params [Types::TransitGatewayConfigurationInputStructure] :transit_gateway_configuration
+    #   The Transit Gateway configuration for the Client VPN endpoint. This
+    #   option is currently not supported.
+    #
     # @return [Types::ModifyClientVpnEndpointResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::ModifyClientVpnEndpointResult#return #return} => Boolean
@@ -57887,6 +58127,11 @@ module Aws::EC2
     #       enforced: false,
     #     },
     #     disconnect_on_session_timeout: false,
+    #     transit_gateway_configuration: {
+    #       transit_gateway_id: "TransitGatewayId",
+    #       availability_zones: ["AvailabilityZoneName"],
+    #       availability_zone_ids: ["AvailabilityZoneId"],
+    #     },
     #   })
     #
     # @example Response structure
@@ -58943,7 +59188,7 @@ module Aws::EC2
     #     dry_run: false,
     #     instance_id: "InstanceId", # required
     #     attribute: "instanceType", # accepts instanceType, kernel, ramdisk, userData, disableApiTermination, instanceInitiatedShutdownBehavior, rootDeviceName, blockDeviceMapping, productCodes, sourceDestCheck, groupSet, ebsOptimized, sriovNetSupport, enaSupport, enclaveOptions, disableApiStop
-    #     value: "String",
+    #     value: "ModifyInstanceAttributeValue",
     #     block_device_mappings: [
     #       {
     #         device_name: "String",
@@ -60725,6 +60970,7 @@ module Aws::EC2
     #   resp.launch_template.tags[0].value #=> String
     #   resp.launch_template.operator.managed #=> Boolean
     #   resp.launch_template.operator.principal #=> String
+    #   resp.launch_template.operator.hidden_by_default #=> Boolean
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/ModifyLaunchTemplate AWS API Documentation
     #
@@ -60897,6 +61143,46 @@ module Aws::EC2
       req.send_request(options)
     end
 
+    # Modifies the managed resource visibility configuration for the
+    # account. Use this operation to control whether managed resources are
+    # hidden or visible by default. Visibility settings are account-wide and
+    # affect all IAM principals uniformly. Hidden resources remain fully
+    # operational and billable.
+    #
+    # @option params [Boolean] :dry_run
+    #   Checks whether you have the required permissions for the operation,
+    #   without actually making the request, and provides an error response.
+    #   If you have the required permissions, the error response is
+    #   `DryRunOperation`. Otherwise, it is `UnauthorizedOperation`.
+    #
+    # @option params [String] :default_visibility
+    #   The default visibility setting for managed resources. Valid values:
+    #   `hidden` \| `visible`.
+    #
+    # @return [Types::ModifyManagedResourceVisibilityResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::ModifyManagedResourceVisibilityResult#visibility #visibility} => Types::ManagedResourceVisibilitySettings
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.modify_managed_resource_visibility({
+    #     dry_run: false,
+    #     default_visibility: "hidden", # accepts hidden, visible
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.visibility.default_visibility #=> String, one of "hidden", "visible"
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/ModifyManagedResourceVisibility AWS API Documentation
+    #
+    # @overload modify_managed_resource_visibility(params = {})
+    # @param [Hash] params ({})
+    def modify_managed_resource_visibility(params = {}, options = {})
+      req = build_request(:modify_managed_resource_visibility, params)
+      req.send_request(options)
+    end
+
     # Modifies the specified network interface attribute. You can specify
     # only one attribute at a time. You can use this action to attach and
     # detach security groups from an existing EC2 instance.
@@ -62387,7 +62673,7 @@ module Aws::EC2
     #   resp.transit_gateway_prefix_list_reference.state #=> String, one of "pending", "available", "modifying", "deleting"
     #   resp.transit_gateway_prefix_list_reference.blackhole #=> Boolean
     #   resp.transit_gateway_prefix_list_reference.transit_gateway_attachment.transit_gateway_attachment_id #=> String
-    #   resp.transit_gateway_prefix_list_reference.transit_gateway_attachment.resource_type #=> String, one of "vpc", "vpn", "vpn-concentrator", "direct-connect-gateway", "connect", "peering", "tgw-peering", "network-function"
+    #   resp.transit_gateway_prefix_list_reference.transit_gateway_attachment.resource_type #=> String, one of "vpc", "vpn", "vpn-concentrator", "direct-connect-gateway", "connect", "peering", "tgw-peering", "network-function", "client-vpn"
     #   resp.transit_gateway_prefix_list_reference.transit_gateway_attachment.resource_id #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/ModifyTransitGatewayPrefixListReference AWS API Documentation
@@ -63260,6 +63546,9 @@ module Aws::EC2
     #   resp.volume_modification.progress #=> Integer
     #   resp.volume_modification.start_time #=> Time
     #   resp.volume_modification.end_time #=> Time
+    #   resp.volume_modification.operator.managed #=> Boolean
+    #   resp.volume_modification.operator.principal #=> String
+    #   resp.volume_modification.operator.hidden_by_default #=> Boolean
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/ModifyVolume AWS API Documentation
     #
@@ -66398,6 +66687,49 @@ module Aws::EC2
       req.send_request(options)
     end
 
+    # Rejects a Transit Gateway attachment request for a Client VPN
+    # endpoint. The Transit Gateway owner can reject the attachment request
+    # to prevent the Client VPN endpoint from routing traffic through the
+    # Transit Gateway.
+    #
+    # @option params [required, String] :transit_gateway_attachment_id
+    #   The ID of the Transit Gateway attachment.
+    #
+    # @option params [Boolean] :dry_run
+    #   Checks whether you have the required permissions for the action,
+    #   without actually making the request, and provides an error response.
+    #   If you have the required permissions, the error response is
+    #   `DryRunOperation`. Otherwise, it is `UnauthorizedOperation`.
+    #
+    # @return [Types::RejectTransitGatewayClientVpnAttachmentResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::RejectTransitGatewayClientVpnAttachmentResult#transit_gateway_client_vpn_attachment #transit_gateway_client_vpn_attachment} => Types::TransitGatewayClientVpnAttachment
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.reject_transit_gateway_client_vpn_attachment({
+    #     transit_gateway_attachment_id: "TransitGatewayAttachmentId", # required
+    #     dry_run: false,
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.transit_gateway_client_vpn_attachment.transit_gateway_attachment_id #=> String
+    #   resp.transit_gateway_client_vpn_attachment.transit_gateway_id #=> String
+    #   resp.transit_gateway_client_vpn_attachment.client_vpn_endpoint_id #=> String
+    #   resp.transit_gateway_client_vpn_attachment.client_vpn_owner_id #=> String
+    #   resp.transit_gateway_client_vpn_attachment.state #=> String, one of "pending-acceptance", "pending", "rejected", "available", "deleting", "deleted"
+    #   resp.transit_gateway_client_vpn_attachment.creation_time #=> String
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/RejectTransitGatewayClientVpnAttachment AWS API Documentation
+    #
+    # @overload reject_transit_gateway_client_vpn_attachment(params = {})
+    # @param [Hash] params ({})
+    def reject_transit_gateway_client_vpn_attachment(params = {}, options = {})
+      req = build_request(:reject_transit_gateway_client_vpn_attachment, params)
+      req.send_request(options)
+    end
+
     # Rejects a request to associate cross-account subnets with a transit
     # gateway multicast domain.
     #
@@ -66435,7 +66767,7 @@ module Aws::EC2
     #   resp.associations.transit_gateway_multicast_domain_id #=> String
     #   resp.associations.transit_gateway_attachment_id #=> String
     #   resp.associations.resource_id #=> String
-    #   resp.associations.resource_type #=> String, one of "vpc", "vpn", "vpn-concentrator", "direct-connect-gateway", "connect", "peering", "tgw-peering", "network-function"
+    #   resp.associations.resource_type #=> String, one of "vpc", "vpn", "vpn-concentrator", "direct-connect-gateway", "connect", "peering", "tgw-peering", "network-function", "client-vpn"
     #   resp.associations.resource_owner_id #=> String
     #   resp.associations.subnets #=> Array
     #   resp.associations.subnets[0].subnet_id #=> String
@@ -67329,7 +67661,7 @@ module Aws::EC2
     #   resp.route.transit_gateway_attachments #=> Array
     #   resp.route.transit_gateway_attachments[0].resource_id #=> String
     #   resp.route.transit_gateway_attachments[0].transit_gateway_attachment_id #=> String
-    #   resp.route.transit_gateway_attachments[0].resource_type #=> String, one of "vpc", "vpn", "vpn-concentrator", "direct-connect-gateway", "connect", "peering", "tgw-peering", "network-function"
+    #   resp.route.transit_gateway_attachments[0].resource_type #=> String, one of "vpc", "vpn", "vpn-concentrator", "direct-connect-gateway", "connect", "peering", "tgw-peering", "network-function", "client-vpn"
     #   resp.route.type #=> String, one of "static", "propagated"
     #   resp.route.state #=> String, one of "pending", "active", "blackhole", "deleting", "deleted"
     #
@@ -70195,6 +70527,7 @@ module Aws::EC2
     #   resp.instances[0].block_device_mappings[0].ebs.volume_owner_id #=> String
     #   resp.instances[0].block_device_mappings[0].ebs.operator.managed #=> Boolean
     #   resp.instances[0].block_device_mappings[0].ebs.operator.principal #=> String
+    #   resp.instances[0].block_device_mappings[0].ebs.operator.hidden_by_default #=> Boolean
     #   resp.instances[0].block_device_mappings[0].ebs.ebs_card_index #=> Integer
     #   resp.instances[0].client_token #=> String
     #   resp.instances[0].ebs_optimized #=> Boolean
@@ -70263,6 +70596,7 @@ module Aws::EC2
     #   resp.instances[0].network_interfaces[0].connection_tracking_configuration.udp_timeout #=> Integer
     #   resp.instances[0].network_interfaces[0].operator.managed #=> Boolean
     #   resp.instances[0].network_interfaces[0].operator.principal #=> String
+    #   resp.instances[0].network_interfaces[0].operator.hidden_by_default #=> Boolean
     #   resp.instances[0].outpost_arn #=> String
     #   resp.instances[0].root_device_name #=> String
     #   resp.instances[0].root_device_type #=> String, one of "ebs", "instance-store"
@@ -70312,6 +70646,7 @@ module Aws::EC2
     #   resp.instances[0].network_performance_options.bandwidth_weighting #=> String, one of "default", "vpc-1", "ebs-1"
     #   resp.instances[0].operator.managed #=> Boolean
     #   resp.instances[0].operator.principal #=> String
+    #   resp.instances[0].operator.hidden_by_default #=> Boolean
     #   resp.instances[0].secondary_interfaces #=> Array
     #   resp.instances[0].secondary_interfaces[0].attachment.attach_time #=> Time
     #   resp.instances[0].secondary_interfaces[0].attachment.attachment_id #=> String
@@ -70668,7 +71003,7 @@ module Aws::EC2
     #   resp.multicast_groups[0].transit_gateway_attachment_id #=> String
     #   resp.multicast_groups[0].subnet_id #=> String
     #   resp.multicast_groups[0].resource_id #=> String
-    #   resp.multicast_groups[0].resource_type #=> String, one of "vpc", "vpn", "vpn-concentrator", "direct-connect-gateway", "connect", "peering", "tgw-peering", "network-function"
+    #   resp.multicast_groups[0].resource_type #=> String, one of "vpc", "vpn", "vpn-concentrator", "direct-connect-gateway", "connect", "peering", "tgw-peering", "network-function", "client-vpn"
     #   resp.multicast_groups[0].resource_owner_id #=> String
     #   resp.multicast_groups[0].network_interface_id #=> String
     #   resp.multicast_groups[0].group_member #=> Boolean
@@ -70770,7 +71105,7 @@ module Aws::EC2
     #   resp.routes[0].transit_gateway_attachments #=> Array
     #   resp.routes[0].transit_gateway_attachments[0].resource_id #=> String
     #   resp.routes[0].transit_gateway_attachments[0].transit_gateway_attachment_id #=> String
-    #   resp.routes[0].transit_gateway_attachments[0].resource_type #=> String, one of "vpc", "vpn", "vpn-concentrator", "direct-connect-gateway", "connect", "peering", "tgw-peering", "network-function"
+    #   resp.routes[0].transit_gateway_attachments[0].resource_type #=> String, one of "vpc", "vpn", "vpn-concentrator", "direct-connect-gateway", "connect", "peering", "tgw-peering", "network-function", "client-vpn"
     #   resp.routes[0].type #=> String, one of "static", "propagated"
     #   resp.routes[0].state #=> String, one of "pending", "active", "blackhole", "deleting", "deleted"
     #   resp.additional_routes_available #=> Boolean
@@ -73212,7 +73547,7 @@ module Aws::EC2
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-ec2'
-      context[:gem_version] = '1.611.0'
+      context[:gem_version] = '1.613.0'
       Seahorse::Client::Request.new(handlers, context)
     end