aws-sdk-ec2 1.626.0 → 1.628.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: fe80518425a757a7441ea06da0fb746fc830052b557237b4c922bbbc36894db9
-  data.tar.gz: 949d7a63d83b12b1833fd1f93f5e268466387eceefecb9a6e7df758275bf2ead
+  metadata.gz: 28d42c96402c1f1a6258778c764b8832912351481b4c7b394138703c9fa1ec45
+  data.tar.gz: 1c0142bccffe706e44b0601bfdb7751729b7ddeca921d5c9c8cbe4474c2a2735
 SHA512:
-  metadata.gz: 74b598c69faaf88f26ee2e1fbcbfc8a9b12202261f59c241027a5604027de4d111afd59acb0cb3801b530248ec6aefca710ae61a751872bf6d6161a0dc541176
-  data.tar.gz: 9ccdce605c361d542af531e120bf4ac6bc450a2f19599140aae91ce67b5f052a336c300cff30fc226d0ce05314315453678474ea93c00bac4ce6c83c8eb1611f
+  metadata.gz: bf4f21dd86d26c061dc642306f1d67733a23aac06e977d43fae038269b5f9f69928df22d45e013c8a2d16e676484ba150e3968b067af425410846b6ec554d81b
+  data.tar.gz: 7ab20826f74c1c470d91979c79d256c289d75d229c4f9c502847a7ed4889e19b1b53c8ca662a9eaee704019a9fb834592d66024506a8ccc971db94b45546d380

data/CHANGELOG.md

@@ -1,6 +1,16 @@
 Unreleased Changes
 ------------------
 
+1.628.0 (2026-07-01)
+------------------
+
+* Feature - Use declarative policies to enable VPC Encryption Controls across your organization or select accounts. Added AMD SEV-SNP support for EC2 Dedicated Hosts. Managed resource visibility settings control whether AWS-provisioned resources in your account appear in console views and API list operations.
+
+1.627.0 (2026-06-30)
+------------------
+
+* Feature - Adds ModifyVpcEndpointPayerResponsibility API, which enables VPC endpoint service owners to modify the billing account for VPC endpoint usage charges at the individual endpoint level
+
 1.626.0 (2026-06-29)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.626.0
+1.628.0

data/lib/aws-sdk-ec2/client.rb

@@ -1253,6 +1253,9 @@ module Aws::EC2
     # @option params [String] :availability_zone_id
     #   The ID of the Availability Zone.
     #
+    # @option params [Types::HostCpuOptionsRequest] :cpu_options
+    #   The CPU configuration options to apply to the Dedicated Host.
+    #
     # @option params [String] :auto_placement
     #   Indicates whether the host accepts any untargeted instance launches
     #   that match its instance type configuration, or if it only accepts Host
@@ -1321,6 +1324,9 @@ module Aws::EC2
     #     host_maintenance: "on", # accepts on, off
     #     asset_ids: ["AssetId"],
     #     availability_zone_id: "AvailabilityZoneId",
+    #     cpu_options: {
+    #       amd_sev_snp: "enabled", # accepts enabled, disabled
+    #     },
     #     auto_placement: "on", # accepts on, off
     #     client_token: "String",
     #     instance_type: "String",
@@ -4376,26 +4382,29 @@ module Aws::EC2
     #
     # * `assessing`
     #
-    # * `scheduled`
+    # * `scheduled` — requires a cancellation quote. Use
+    #   `CreateCapacityReservationCancellationQuote` to generate a quote,
+    #   then pass the quote ID with `ApplyCancellationCharges` set to
+    #   `commitment-wind-down`. The cancellation charge depends on how close
+    #   the reservation is to its start date.
     #
     # * `active` and there is no commitment duration or the commitment
     #   duration has elapsed.
     #
-    # * `active` during the commitment duration, if you provide a
-    #   cancellation quote ID and accept the cancellation charges. Use
-    #   `CreateCapacityReservationCancellationQuote` to generate a quote.
-    #   The Capacity Reservation transitions to `cancelling` while charges
-    #   are applied.
+    # * `active` during the commitment duration — requires a cancellation
+    #   quote. Use `CreateCapacityReservationCancellationQuote` to generate
+    #   a quote, then pass the quote ID with `ApplyCancellationCharges` set
+    #   to `commitment-wind-down`. The Capacity Reservation transitions to
+    #   `cancelling` while charges are applied.
+    #
+    # * `delayed` — the commitment duration is waived, so no cancellation
+    #   charge applies.
     #
     # <note markdown="1"> You can't modify or cancel a Capacity Block. For more information,
     # see [Capacity Blocks for ML][1].
     #
     #  </note>
     #
-    # If a future-dated Capacity Reservation enters the `delayed` state, the
-    # commitment duration is waived, and you can cancel it as soon as it
-    # enters the `active` state.
-    #
     # Instances running in the reserved capacity continue running until you
     # stop them. Stopped instances that target the Capacity Reservation can
     # no longer launch. Modify these instances to either target a different
@@ -13501,8 +13510,8 @@ module Aws::EC2
     # instances in different partitions, where instances in one partition do
     # not share the same hardware with instances in another partition. A
     # `precision-time` placement group places instances on supported
-    # hardware with direct access to high-precision time sources in AWS
-    # infrastructure.
+    # hardware with direct access to high-precision time sources in Amazon
+    # Web Services infrastructure.
     #
     # For more information, see [Placement groups][1] in the *Amazon EC2
     # User Guide*.
@@ -18890,6 +18899,9 @@ module Aws::EC2
     #   resp.vpc_endpoint.service_network_arn #=> String
     #   resp.vpc_endpoint.resource_configuration_arn #=> String
     #   resp.vpc_endpoint.service_region #=> String
+    #   resp.vpc_endpoint.payer_responsibilities #=> Array
+    #   resp.vpc_endpoint.payer_responsibilities[0].scope #=> String, one of "vpc-endpoint-charges"
+    #   resp.vpc_endpoint.payer_responsibilities[0].payer_responsibility_type #=> String, one of "vpc-endpoint-account", "vpc-endpoint-service-account"
     #   resp.client_token #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/CreateVpcEndpoint AWS API Documentation
@@ -24988,6 +25000,58 @@ module Aws::EC2
       req.send_request(options)
     end
 
+    # Describes the account-level VPC Encryption Control configuration for
+    # your account. VPC Encryption Control enables you to enforce encryption
+    # for all data in transit within and between VPCs to meet compliance
+    # requirements.
+    #
+    # For more information, see [Enforce VPC encryption in transit][1] in
+    # the *Amazon VPC User Guide*.
+    #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com/vpc/latest/userguide/vpc-encryption-controls.html
+    #
+    # @option params [Boolean] :dry_run
+    #   Checks whether you have the required permissions for the action,
+    #   without actually making the request, and provides an error response.
+    #   If you have the required permissions, the error response is
+    #   `DryRunOperation`. Otherwise, it is `UnauthorizedOperation`.
+    #
+    # @return [Types::DescribeAccountVpcEncryptionControlResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::DescribeAccountVpcEncryptionControlResult#account_vpc_encryption_control #account_vpc_encryption_control} => Types::AccountVpcEncryptionControl
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.describe_account_vpc_encryption_control({
+    #     dry_run: false,
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.account_vpc_encryption_control.state #=> String, one of "default-state", "transitions-in-progress", "transitions-partially-successful", "transitions-successful", "transitions-failed"
+    #   resp.account_vpc_encryption_control.mode #=> String, one of "unmanaged", "attempt-monitor", "attempt-enforce"
+    #   resp.account_vpc_encryption_control.exclusions.internet_gateway #=> String, one of "enabling", "enabled", "disabling", "disabled"
+    #   resp.account_vpc_encryption_control.exclusions.egress_only_internet_gateway #=> String, one of "enabling", "enabled", "disabling", "disabled"
+    #   resp.account_vpc_encryption_control.exclusions.nat_gateway #=> String, one of "enabling", "enabled", "disabling", "disabled"
+    #   resp.account_vpc_encryption_control.exclusions.virtual_private_gateway #=> String, one of "enabling", "enabled", "disabling", "disabled"
+    #   resp.account_vpc_encryption_control.exclusions.vpc_peering #=> String, one of "enabling", "enabled", "disabling", "disabled"
+    #   resp.account_vpc_encryption_control.exclusions.lambda #=> String, one of "enabling", "enabled", "disabling", "disabled"
+    #   resp.account_vpc_encryption_control.exclusions.vpc_lattice #=> String, one of "enabling", "enabled", "disabling", "disabled"
+    #   resp.account_vpc_encryption_control.exclusions.elastic_file_system #=> String, one of "enabling", "enabled", "disabling", "disabled"
+    #   resp.account_vpc_encryption_control.managed_by #=> String, one of "account", "declarative-policy"
+    #   resp.account_vpc_encryption_control.last_update_timestamp #=> Time
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/DescribeAccountVpcEncryptionControl AWS API Documentation
+    #
+    # @overload describe_account_vpc_encryption_control(params = {})
+    # @param [Hash] params ({})
+    def describe_account_vpc_encryption_control(params = {}, options = {})
+      req = build_request(:describe_account_vpc_encryption_control, params)
+      req.send_request(options)
+    end
+
     # Describes an Elastic IP address transfer. For more information, see
     # [Transfer Elastic IP addresses][1] in the *Amazon VPC User Guide*.
     #
@@ -29446,7 +29510,7 @@ module Aws::EC2
     #   resp.hosts[0].instances[0].instance_id #=> String
     #   resp.hosts[0].instances[0].instance_type #=> String
     #   resp.hosts[0].instances[0].owner_id #=> String
-    #   resp.hosts[0].state #=> String, one of "available", "under-assessment", "permanent-failure", "released", "released-permanent-failure", "pending"
+    #   resp.hosts[0].state #=> String, one of "available", "under-assessment", "permanent-failure", "released", "released-permanent-failure", "pending", "configuring"
     #   resp.hosts[0].allocation_time #=> Time
     #   resp.hosts[0].release_time #=> Time
     #   resp.hosts[0].tags #=> Array
@@ -29460,6 +29524,7 @@ module Aws::EC2
     #   resp.hosts[0].outpost_arn #=> String
     #   resp.hosts[0].host_maintenance #=> String, one of "on", "off"
     #   resp.hosts[0].asset_id #=> String
+    #   resp.hosts[0].cpu_options.amd_sev_snp #=> String, one of "enabled", "disabled"
     #   resp.next_token #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/DescribeHosts AWS API Documentation
@@ -45800,6 +45865,12 @@ module Aws::EC2
     #
     #   [1]: https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination
     #
+    # @option params [Boolean] :include_managed_resources
+    #   Indicates whether to include managed resources in the output. If this
+    #   parameter is set to `true`, the output includes resources that are
+    #   managed by Amazon Web Services services, even if managed resource
+    #   visibility is set to hidden.
+    #
     # @return [Types::DescribeVolumesModificationsResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::DescribeVolumesModificationsResult#next_token #next_token} => String
@@ -45820,6 +45891,7 @@ module Aws::EC2
     #     ],
     #     next_token: "String",
     #     max_results: 1,
+    #     include_managed_resources: false,
     #   })
     #
     # @example Response structure
@@ -45842,6 +45914,9 @@ module Aws::EC2
     #   resp.volumes_modifications[0].progress #=> Integer
     #   resp.volumes_modifications[0].start_time #=> Time
     #   resp.volumes_modifications[0].end_time #=> Time
+    #   resp.volumes_modifications[0].operator.managed #=> Boolean
+    #   resp.volumes_modifications[0].operator.principal #=> String
+    #   resp.volumes_modifications[0].operator.hidden_by_default #=> Boolean
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/DescribeVolumesModifications AWS API Documentation
     #
@@ -46565,6 +46640,9 @@ module Aws::EC2
     #   resp.vpc_endpoint_connections[0].tags[0].key #=> String
     #   resp.vpc_endpoint_connections[0].tags[0].value #=> String
     #   resp.vpc_endpoint_connections[0].vpc_endpoint_region #=> String
+    #   resp.vpc_endpoint_connections[0].payer_responsibilities #=> Array
+    #   resp.vpc_endpoint_connections[0].payer_responsibilities[0].scope #=> String, one of "vpc-endpoint-charges"
+    #   resp.vpc_endpoint_connections[0].payer_responsibilities[0].payer_responsibility_type #=> String, one of "vpc-endpoint-account", "vpc-endpoint-service-account"
     #   resp.next_token #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/DescribeVpcEndpointConnections AWS API Documentation
@@ -47013,6 +47091,9 @@ module Aws::EC2
     #   resp.vpc_endpoints[0].service_network_arn #=> String
     #   resp.vpc_endpoints[0].resource_configuration_arn #=> String
     #   resp.vpc_endpoints[0].service_region #=> String
+    #   resp.vpc_endpoints[0].payer_responsibilities #=> Array
+    #   resp.vpc_endpoints[0].payer_responsibilities[0].scope #=> String, one of "vpc-endpoint-charges"
+    #   resp.vpc_endpoints[0].payer_responsibilities[0].payer_responsibility_type #=> String, one of "vpc-endpoint-account", "vpc-endpoint-service-account"
     #   resp.next_token #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/DescribeVpcEndpoints AWS API Documentation
@@ -58171,6 +58252,103 @@ module Aws::EC2
       req.send_request(options)
     end
 
+    # Modifies the account-level VPC Encryption Control configuration. This
+    # sets the encryption control mode and resource exclusions that apply to
+    # the VPCs in your account. VPC Encryption Control enables you to
+    # enforce encryption for all data in transit within and between VPCs to
+    # meet compliance requirements.
+    #
+    # For more information, see [Enforce VPC encryption in transit][1] in
+    # the *Amazon VPC User Guide*.
+    #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com/vpc/latest/userguide/vpc-encryption-controls.html
+    #
+    # @option params [Boolean] :dry_run
+    #   Checks whether you have the required permissions for the action,
+    #   without actually making the request, and provides an error response.
+    #   If you have the required permissions, the error response is
+    #   `DryRunOperation`. Otherwise, it is `UnauthorizedOperation`.
+    #
+    # @option params [String] :mode
+    #   The encryption mode for the account encryption control configuration.
+    #
+    # @option params [String] :internet_gateway
+    #   Specifies whether to exclude internet gateway resource from
+    #   account-level encryption enforcement.
+    #
+    # @option params [String] :egress_only_internet_gateway
+    #   Specifies whether to exclude egress-only internet gateway resource
+    #   from account-level encryption enforcement.
+    #
+    # @option params [String] :nat_gateway
+    #   Specifies whether to exclude NAT gateway resource from account-level
+    #   encryption enforcement.
+    #
+    # @option params [String] :virtual_private_gateway
+    #   Specifies whether to exclude virtual private gateway resource from
+    #   account-level encryption enforcement.
+    #
+    # @option params [String] :vpc_peering
+    #   Specifies whether to exclude VPC peering connection resource from
+    #   account-level encryption enforcement.
+    #
+    # @option params [String] :lambda
+    #   Specifies whether to exclude Lambda service from account-level
+    #   encryption enforcement.
+    #
+    # @option params [String] :vpc_lattice
+    #   Specifies whether to exclude VPC Lattice service from account-level
+    #   encryption enforcement.
+    #
+    # @option params [String] :elastic_file_system
+    #   Specifies whether to exclude Elastic File System service from
+    #   account-level encryption enforcement.
+    #
+    # @return [Types::ModifyAccountVpcEncryptionControlResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::ModifyAccountVpcEncryptionControlResult#account_vpc_encryption_control #account_vpc_encryption_control} => Types::AccountVpcEncryptionControl
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.modify_account_vpc_encryption_control({
+    #     dry_run: false,
+    #     mode: "unmanaged", # accepts unmanaged, attempt-monitor, attempt-enforce
+    #     internet_gateway: "enable", # accepts enable, disable
+    #     egress_only_internet_gateway: "enable", # accepts enable, disable
+    #     nat_gateway: "enable", # accepts enable, disable
+    #     virtual_private_gateway: "enable", # accepts enable, disable
+    #     vpc_peering: "enable", # accepts enable, disable
+    #     lambda: "enable", # accepts enable, disable
+    #     vpc_lattice: "enable", # accepts enable, disable
+    #     elastic_file_system: "enable", # accepts enable, disable
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.account_vpc_encryption_control.state #=> String, one of "default-state", "transitions-in-progress", "transitions-partially-successful", "transitions-successful", "transitions-failed"
+    #   resp.account_vpc_encryption_control.mode #=> String, one of "unmanaged", "attempt-monitor", "attempt-enforce"
+    #   resp.account_vpc_encryption_control.exclusions.internet_gateway #=> String, one of "enabling", "enabled", "disabling", "disabled"
+    #   resp.account_vpc_encryption_control.exclusions.egress_only_internet_gateway #=> String, one of "enabling", "enabled", "disabling", "disabled"
+    #   resp.account_vpc_encryption_control.exclusions.nat_gateway #=> String, one of "enabling", "enabled", "disabling", "disabled"
+    #   resp.account_vpc_encryption_control.exclusions.virtual_private_gateway #=> String, one of "enabling", "enabled", "disabling", "disabled"
+    #   resp.account_vpc_encryption_control.exclusions.vpc_peering #=> String, one of "enabling", "enabled", "disabling", "disabled"
+    #   resp.account_vpc_encryption_control.exclusions.lambda #=> String, one of "enabling", "enabled", "disabling", "disabled"
+    #   resp.account_vpc_encryption_control.exclusions.vpc_lattice #=> String, one of "enabling", "enabled", "disabling", "disabled"
+    #   resp.account_vpc_encryption_control.exclusions.elastic_file_system #=> String, one of "enabling", "enabled", "disabling", "disabled"
+    #   resp.account_vpc_encryption_control.managed_by #=> String, one of "account", "declarative-policy"
+    #   resp.account_vpc_encryption_control.last_update_timestamp #=> Time
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/ModifyAccountVpcEncryptionControl AWS API Documentation
+    #
+    # @overload modify_account_vpc_encryption_control(params = {})
+    # @param [Hash] params ({})
+    def modify_account_vpc_encryption_control(params = {}, options = {})
+      req = build_request(:modify_account_vpc_encryption_control, params)
+      req.send_request(options)
+    end
+
     # Modifies an attribute of the specified Elastic IP address. For
     # requirements, see [Using reverse DNS for email applications][1].
     #
@@ -64093,6 +64271,9 @@ module Aws::EC2
     #   resp.volume_modification.progress #=> Integer
     #   resp.volume_modification.start_time #=> Time
     #   resp.volume_modification.end_time #=> Time
+    #   resp.volume_modification.operator.managed #=> Boolean
+    #   resp.volume_modification.operator.principal #=> String
+    #   resp.volume_modification.operator.hidden_by_default #=> Boolean
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/ModifyVolume AWS API Documentation
     #
@@ -64643,6 +64824,59 @@ module Aws::EC2
       req.send_request(options)
     end
 
+    # Modifies the billing account for VPC endpoint usage/charges.
+    #
+    # @option params [Boolean] :dry_run
+    #   Checks whether you have the required permissions for the action,
+    #   without actually making the request, and provides an error response.
+    #   If you have the required permissions, the error response is
+    #   `DryRunOperation`. Otherwise, it is `UnauthorizedOperation`.
+    #
+    # @option params [String] :service_id
+    #   The ID of the VPC endpoint service.
+    #
+    # @option params [required, String] :vpc_endpoint_id
+    #   The ID of the VPC endpoint.
+    #
+    # @option params [required, String] :payer_responsibility
+    #   The Amazon Web Services account to which the usage of VPC endpoint is
+    #   charged.
+    #
+    # @option params [required, String] :scope
+    #   The scope of usage/charges for which the billing account is being
+    #   modified.
+    #
+    # @return [Types::ModifyVpcEndpointPayerResponsibilityResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::ModifyVpcEndpointPayerResponsibilityResult#vpc_endpoint_id #vpc_endpoint_id} => String
+    #   * {Types::ModifyVpcEndpointPayerResponsibilityResult#payer_responsibilities #payer_responsibilities} => Array&lt;Types::PayerResponsibilityEntry&gt;
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.modify_vpc_endpoint_payer_responsibility({
+    #     dry_run: false,
+    #     service_id: "VpcEndpointServiceId",
+    #     vpc_endpoint_id: "VpcEndpointId", # required
+    #     payer_responsibility: "vpc-endpoint-account", # required, accepts vpc-endpoint-account, vpc-endpoint-service-account
+    #     scope: "vpc-endpoint-charges", # required, accepts vpc-endpoint-charges
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.vpc_endpoint_id #=> String
+    #   resp.payer_responsibilities #=> Array
+    #   resp.payer_responsibilities[0].scope #=> String, one of "vpc-endpoint-charges"
+    #   resp.payer_responsibilities[0].payer_responsibility_type #=> String, one of "vpc-endpoint-account", "vpc-endpoint-service-account"
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/ModifyVpcEndpointPayerResponsibility AWS API Documentation
+    #
+    # @overload modify_vpc_endpoint_payer_responsibility(params = {})
+    # @param [Hash] params ({})
+    def modify_vpc_endpoint_payer_responsibility(params = {}, options = {})
+      req = build_request(:modify_vpc_endpoint_payer_responsibility, params)
+      req.send_request(options)
+    end
+
     # Modifies the attributes of the specified VPC endpoint service
     # configuration.
     #
@@ -74113,7 +74347,7 @@ module Aws::EC2
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-ec2'
-      context[:gem_version] = '1.626.0'
+      context[:gem_version] = '1.628.0'
       Seahorse::Client::Request.new(handlers, context)
     end