aws-sdk-ec2 1.626.0 → 1.628.0

data/lib/aws-sdk-ec2/types.rb

@@ -535,6 +535,111 @@ module Aws::EC2
       include Aws::Structure
     end
 
+    # Describes the account-level VPC Encryption Control configuration,
+    # including its mode, state, and exclusions.
+    #
+    # For more information, see [Enforce VPC encryption in transit][1] in
+    # the *Amazon VPC User Guide*.
+    #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com/vpc/latest/userguide/vpc-encryption-controls.html
+    #
+    # @!attribute [rw] state
+    #   The current state of the account-level VPC Encryption Control
+    #   configuration.
+    #   @return [String]
+    #
+    # @!attribute [rw] mode
+    #   The encryption mode for the account-level VPC Encryption Control
+    #   configuration.
+    #   @return [String]
+    #
+    # @!attribute [rw] exclusions
+    #   Information about the traffic exclusions for the account-level VPC
+    #   Encryption Control configuration.
+    #   @return [Types::AccountVpcEncryptionControlExclusions]
+    #
+    # @!attribute [rw] managed_by
+    #   The entity that manages the account-level VPC Encryption Control
+    #   configuration.
+    #   @return [String]
+    #
+    # @!attribute [rw] last_update_timestamp
+    #   The date and time when the account-level VPC Encryption Control
+    #   configuration was last updated.
+    #   @return [Time]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/AccountVpcEncryptionControl AWS API Documentation
+    #
+    class AccountVpcEncryptionControl < Struct.new(
+      :state,
+      :mode,
+      :exclusions,
+      :managed_by,
+      :last_update_timestamp)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # Describes the exclusion configurations for the various resource types
+    # in the account-level VPC Encryption Control configuration.
+    #
+    # For more information, see [Enforce VPC encryption in transit][1] in
+    # the *Amazon VPC User Guide*.
+    #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com/vpc/latest/userguide/vpc-encryption-controls.html
+    #
+    # @!attribute [rw] internet_gateway
+    #   The exclusion configuration for internet gateway resource.
+    #   @return [String]
+    #
+    # @!attribute [rw] egress_only_internet_gateway
+    #   The exclusion configuration for egress-only internet gateway
+    #   resource.
+    #   @return [String]
+    #
+    # @!attribute [rw] nat_gateway
+    #   The exclusion configuration for NAT gateway resource.
+    #   @return [String]
+    #
+    # @!attribute [rw] virtual_private_gateway
+    #   The exclusion configuration for virtual private gateway resource.
+    #   @return [String]
+    #
+    # @!attribute [rw] vpc_peering
+    #   The exclusion configuration for VPC peering connection resource.
+    #   @return [String]
+    #
+    # @!attribute [rw] lambda
+    #   The exclusion configuration for Lambda service.
+    #   @return [String]
+    #
+    # @!attribute [rw] vpc_lattice
+    #   The exclusion configuration for VPC Lattice service.
+    #   @return [String]
+    #
+    # @!attribute [rw] elastic_file_system
+    #   The exclusion configuration for Elastic File System service.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/AccountVpcEncryptionControlExclusions AWS API Documentation
+    #
+    class AccountVpcEncryptionControlExclusions < Struct.new(
+      :internet_gateway,
+      :egress_only_internet_gateway,
+      :nat_gateway,
+      :virtual_private_gateway,
+      :vpc_peering,
+      :lambda,
+      :vpc_lattice,
+      :elastic_file_system)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # Describes a running instance in a Spot Fleet.
     #
     # @!attribute [rw] instance_id
@@ -1228,6 +1333,10 @@ module Aws::EC2
     #   The ID of the Availability Zone.
     #   @return [String]
     #
+    # @!attribute [rw] cpu_options
+    #   The CPU configuration options to apply to the Dedicated Host.
+    #   @return [Types::HostCpuOptionsRequest]
+    #
     # @!attribute [rw] auto_placement
     #   Indicates whether the host accepts any untargeted instance launches
     #   that match its instance type configuration, or if it only accepts
@@ -1287,6 +1396,7 @@ module Aws::EC2
       :host_maintenance,
       :asset_ids,
       :availability_zone_id,
+      :cpu_options,
       :auto_placement,
       :client_token,
       :instance_type,
@@ -21723,6 +21833,34 @@ module Aws::EC2
       include Aws::Structure
     end
 
+    # @!attribute [rw] dry_run
+    #   Checks whether you have the required permissions for the action,
+    #   without actually making the request, and provides an error response.
+    #   If you have the required permissions, the error response is
+    #   `DryRunOperation`. Otherwise, it is `UnauthorizedOperation`.
+    #   @return [Boolean]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/DescribeAccountVpcEncryptionControlRequest AWS API Documentation
+    #
+    class DescribeAccountVpcEncryptionControlRequest < Struct.new(
+      :dry_run)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] account_vpc_encryption_control
+    #   Information about the account-level VPC Encryption Control
+    #   configuration.
+    #   @return [Types::AccountVpcEncryptionControl]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/DescribeAccountVpcEncryptionControlResult AWS API Documentation
+    #
+    class DescribeAccountVpcEncryptionControlResult < Struct.new(
+      :account_vpc_encryption_control)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @!attribute [rw] allocation_ids
     #   The allocation IDs of Elastic IP addresses.
     #   @return [Array<String>]
@@ -34996,6 +35134,13 @@ module Aws::EC2
     #   [1]: https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination
     #   @return [Integer]
     #
+    # @!attribute [rw] include_managed_resources
+    #   Indicates whether to include managed resources in the output. If
+    #   this parameter is set to `true`, the output includes resources that
+    #   are managed by Amazon Web Services services, even if managed
+    #   resource visibility is set to hidden.
+    #   @return [Boolean]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/DescribeVolumesModificationsRequest AWS API Documentation
     #
     class DescribeVolumesModificationsRequest < Struct.new(
@@ -35003,7 +35148,8 @@ module Aws::EC2
       :volume_ids,
       :filters,
       :next_token,
-      :max_results)
+      :max_results,
+      :include_managed_resources)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -48004,6 +48150,12 @@ module Aws::EC2
     #   allocated.
     #   @return [String]
     #
+    # @!attribute [rw] cpu_options
+    #   The CPU options for the Dedicated Host, including AMD Secure
+    #   Encrypted Virtualization-Secure Nested Paging (AMD SEV-SNP)
+    #   settings.
+    #   @return [Types::HostCpuOptions]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/Host AWS API Documentation
     #
     class Host < Struct.new(
@@ -48026,7 +48178,43 @@ module Aws::EC2
       :member_of_service_linked_resource_group,
       :outpost_arn,
       :host_maintenance,
-      :asset_id)
+      :asset_id,
+      :cpu_options)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # Contains the CPU options for a Dedicated Host, including AMD Secure
+    # Encrypted Virtualization-Secure Nested Paging (AMD SEV-SNP) settings.
+    #
+    # @!attribute [rw] amd_sev_snp
+    #   Specifies whether AMD Secure Encrypted Virtualization-Secure Nested
+    #   Paging (AMD SEV-SNP) is enabled or disabled for the Dedicated Host.
+    #   If you don't specify a value, AMD SEV-SNP is `disabled`.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/HostCpuOptions AWS API Documentation
+    #
+    class HostCpuOptions < Struct.new(
+      :amd_sev_snp)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # Contains the CPU configuration options for a Dedicated Host allocation
+    # request. Options include AMD Secure Encrypted Virtualization-Secure
+    # Nested Paging (AMD SEV-SNP) settings.
+    #
+    # @!attribute [rw] amd_sev_snp
+    #   Specifies whether AMD Secure Encrypted Virtualization-Secure Nested
+    #   Paging (AMD SEV-SNP) is enabled or disabled for the Dedicated Host.
+    #   If you don't specify a value, AMD SEV-SNP is `disabled`.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/HostCpuOptionsRequest AWS API Documentation
+    #
+    class HostCpuOptionsRequest < Struct.new(
+      :amd_sev_snp)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -60998,6 +61186,88 @@ module Aws::EC2
       include Aws::Structure
     end
 
+    # @!attribute [rw] dry_run
+    #   Checks whether you have the required permissions for the action,
+    #   without actually making the request, and provides an error response.
+    #   If you have the required permissions, the error response is
+    #   `DryRunOperation`. Otherwise, it is `UnauthorizedOperation`.
+    #   @return [Boolean]
+    #
+    # @!attribute [rw] mode
+    #   The encryption mode for the account encryption control
+    #   configuration.
+    #   @return [String]
+    #
+    # @!attribute [rw] internet_gateway
+    #   Specifies whether to exclude internet gateway resource from
+    #   account-level encryption enforcement.
+    #   @return [String]
+    #
+    # @!attribute [rw] egress_only_internet_gateway
+    #   Specifies whether to exclude egress-only internet gateway resource
+    #   from account-level encryption enforcement.
+    #   @return [String]
+    #
+    # @!attribute [rw] nat_gateway
+    #   Specifies whether to exclude NAT gateway resource from account-level
+    #   encryption enforcement.
+    #   @return [String]
+    #
+    # @!attribute [rw] virtual_private_gateway
+    #   Specifies whether to exclude virtual private gateway resource from
+    #   account-level encryption enforcement.
+    #   @return [String]
+    #
+    # @!attribute [rw] vpc_peering
+    #   Specifies whether to exclude VPC peering connection resource from
+    #   account-level encryption enforcement.
+    #   @return [String]
+    #
+    # @!attribute [rw] lambda
+    #   Specifies whether to exclude Lambda service from account-level
+    #   encryption enforcement.
+    #   @return [String]
+    #
+    # @!attribute [rw] vpc_lattice
+    #   Specifies whether to exclude VPC Lattice service from account-level
+    #   encryption enforcement.
+    #   @return [String]
+    #
+    # @!attribute [rw] elastic_file_system
+    #   Specifies whether to exclude Elastic File System service from
+    #   account-level encryption enforcement.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/ModifyAccountVpcEncryptionControlRequest AWS API Documentation
+    #
+    class ModifyAccountVpcEncryptionControlRequest < Struct.new(
+      :dry_run,
+      :mode,
+      :internet_gateway,
+      :egress_only_internet_gateway,
+      :nat_gateway,
+      :virtual_private_gateway,
+      :vpc_peering,
+      :lambda,
+      :vpc_lattice,
+      :elastic_file_system)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] account_vpc_encryption_control
+    #   Information about the account-level VPC Encryption Control
+    #   configuration.
+    #   @return [Types::AccountVpcEncryptionControl]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/ModifyAccountVpcEncryptionControlResult AWS API Documentation
+    #
+    class ModifyAccountVpcEncryptionControlResult < Struct.new(
+      :account_vpc_encryption_control)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @!attribute [rw] allocation_id
     #   \[EC2-VPC\] The allocation ID.
     #   @return [String]
@@ -65943,6 +66213,60 @@ module Aws::EC2
       include Aws::Structure
     end
 
+    # @!attribute [rw] dry_run
+    #   Checks whether you have the required permissions for the action,
+    #   without actually making the request, and provides an error response.
+    #   If you have the required permissions, the error response is
+    #   `DryRunOperation`. Otherwise, it is `UnauthorizedOperation`.
+    #   @return [Boolean]
+    #
+    # @!attribute [rw] service_id
+    #   The ID of the VPC endpoint service.
+    #   @return [String]
+    #
+    # @!attribute [rw] vpc_endpoint_id
+    #   The ID of the VPC endpoint.
+    #   @return [String]
+    #
+    # @!attribute [rw] payer_responsibility
+    #   The Amazon Web Services account to which the usage of VPC endpoint
+    #   is charged.
+    #   @return [String]
+    #
+    # @!attribute [rw] scope
+    #   The scope of usage/charges for which the billing account is being
+    #   modified.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/ModifyVpcEndpointPayerResponsibilityRequest AWS API Documentation
+    #
+    class ModifyVpcEndpointPayerResponsibilityRequest < Struct.new(
+      :dry_run,
+      :service_id,
+      :vpc_endpoint_id,
+      :payer_responsibility,
+      :scope)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] vpc_endpoint_id
+    #   The ID of the VPC endpoint.
+    #   @return [String]
+    #
+    # @!attribute [rw] payer_responsibilities
+    #   The payer responsibility settings for the VPC endpoint.
+    #   @return [Array<Types::PayerResponsibilityEntry>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/ModifyVpcEndpointPayerResponsibilityResult AWS API Documentation
+    #
+    class ModifyVpcEndpointPayerResponsibilityResult < Struct.new(
+      :vpc_endpoint_id,
+      :payer_responsibilities)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @!attribute [rw] dry_run
     #   Checks whether you have the required permissions for the action,
     #   without actually making the request, and provides an error response.
@@ -69186,6 +69510,25 @@ module Aws::EC2
       include Aws::Structure
     end
 
+    # Describes a payer responsibility setting for a VPC endpoint.
+    #
+    # @!attribute [rw] scope
+    #   The scope of usage/charges.
+    #   @return [String]
+    #
+    # @!attribute [rw] payer_responsibility_type
+    #   The Amazon Web Services account to which the usage is charged.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/PayerResponsibilityEntry AWS API Documentation
+    #
+    class PayerResponsibilityEntry < Struct.new(
+      :scope,
+      :payer_responsibility_type)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # Describes the data that identifies an Amazon FPGA image (AFI) on the
     # PCI bus.
     #
@@ -86540,6 +86883,10 @@ module Aws::EC2
     #   The modification completion or failure time.
     #   @return [Time]
     #
+    # @!attribute [rw] operator
+    #   The service provider that manages the resource.
+    #   @return [Types::OperatorResponse]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/VolumeModification AWS API Documentation
     #
     class VolumeModification < Struct.new(
@@ -86558,7 +86905,8 @@ module Aws::EC2
       :original_multi_attach_enabled,
       :progress,
       :start_time,
-      :end_time)
+      :end_time,
+      :operator)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -87539,6 +87887,10 @@ module Aws::EC2
     #   The Region where the service is hosted.
     #   @return [String]
     #
+    # @!attribute [rw] payer_responsibilities
+    #   The payer responsibility settings for the endpoint.
+    #   @return [Array<Types::PayerResponsibilityEntry>]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/VpcEndpoint AWS API Documentation
     #
     class VpcEndpoint < Struct.new(
@@ -87566,7 +87918,8 @@ module Aws::EC2
       :failure_reason,
       :service_network_arn,
       :resource_configuration_arn,
-      :service_region)
+      :service_region,
+      :payer_responsibilities)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -87697,6 +88050,10 @@ module Aws::EC2
     #   The Region of the endpoint.
     #   @return [String]
     #
+    # @!attribute [rw] payer_responsibilities
+    #   The payer responsibility settings for the endpoint.
+    #   @return [Array<Types::PayerResponsibilityEntry>]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/VpcEndpointConnection AWS API Documentation
     #
     class VpcEndpointConnection < Struct.new(
@@ -87711,7 +88068,8 @@ module Aws::EC2
       :ip_address_type,
       :vpc_endpoint_connection_id,
       :tags,
-      :vpc_endpoint_region)
+      :vpc_endpoint_region,
+      :payer_responsibilities)
       SENSITIVE = []
       include Aws::Structure
     end

data/lib/aws-sdk-ec2.rb

@@ -78,7 +78,7 @@ module Aws::EC2
   autoload :VpcPeeringConnection, 'aws-sdk-ec2/vpc_peering_connection'
   autoload :VpcAddress, 'aws-sdk-ec2/vpc_address'
 
-  GEM_VERSION = '1.626.0'
+  GEM_VERSION = '1.628.0'
 
 end
 

data/sig/client.rbs

@@ -267,6 +267,9 @@ module Aws
                             ?host_maintenance: ("on" | "off"),
                             ?asset_ids: Array[::String],
                             ?availability_zone_id: ::String,
+                            ?cpu_options: {
+                              amd_sev_snp: ("enabled" | "disabled")?
+                            },
                             ?auto_placement: ("on" | "off"),
                             ?client_token: ::String,
                             ?instance_type: ::String,
@@ -5232,6 +5235,16 @@ module Aws
                                        ) -> _DescribeAccountAttributesResponseSuccess
                                      | (?Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _DescribeAccountAttributesResponseSuccess
 
+      interface _DescribeAccountVpcEncryptionControlResponseSuccess
+        include ::Seahorse::Client::_ResponseSuccess[Types::DescribeAccountVpcEncryptionControlResult]
+        def account_vpc_encryption_control: () -> Types::AccountVpcEncryptionControl
+      end
+      # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/EC2/Client.html#describe_account_vpc_encryption_control-instance_method
+      def describe_account_vpc_encryption_control: (
+                                                     ?dry_run: bool
+                                                   ) -> _DescribeAccountVpcEncryptionControlResponseSuccess
+                                                 | (?Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _DescribeAccountVpcEncryptionControlResponseSuccess
+
       interface _DescribeAddressTransfersResponseSuccess
         include ::Seahorse::Client::_ResponseSuccess[Types::DescribeAddressTransfersResult]
         def address_transfers: () -> ::Array[Types::AddressTransfer]
@@ -8499,7 +8512,8 @@ module Aws
                                               }
                                             ],
                                             ?next_token: ::String,
-                                            ?max_results: ::Integer
+                                            ?max_results: ::Integer,
+                                            ?include_managed_resources: bool
                                           ) -> _DescribeVolumesModificationsResponseSuccess
                                         | (?Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _DescribeVolumesModificationsResponseSuccess
 
@@ -11193,6 +11207,25 @@ module Aws
                          ) -> _LockSnapshotResponseSuccess
                        | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _LockSnapshotResponseSuccess
 
+      interface _ModifyAccountVpcEncryptionControlResponseSuccess
+        include ::Seahorse::Client::_ResponseSuccess[Types::ModifyAccountVpcEncryptionControlResult]
+        def account_vpc_encryption_control: () -> Types::AccountVpcEncryptionControl
+      end
+      # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/EC2/Client.html#modify_account_vpc_encryption_control-instance_method
+      def modify_account_vpc_encryption_control: (
+                                                   ?dry_run: bool,
+                                                   ?mode: ("unmanaged" | "attempt-monitor" | "attempt-enforce"),
+                                                   ?internet_gateway: ("enable" | "disable"),
+                                                   ?egress_only_internet_gateway: ("enable" | "disable"),
+                                                   ?nat_gateway: ("enable" | "disable"),
+                                                   ?virtual_private_gateway: ("enable" | "disable"),
+                                                   ?vpc_peering: ("enable" | "disable"),
+                                                   ?lambda: ("enable" | "disable"),
+                                                   ?vpc_lattice: ("enable" | "disable"),
+                                                   ?elastic_file_system: ("enable" | "disable")
+                                                 ) -> _ModifyAccountVpcEncryptionControlResponseSuccess
+                                               | (?Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _ModifyAccountVpcEncryptionControlResponseSuccess
+
       interface _ModifyAddressAttributeResponseSuccess
         include ::Seahorse::Client::_ResponseSuccess[Types::ModifyAddressAttributeResult]
         def address: () -> Types::AddressAttribute
@@ -12556,6 +12589,21 @@ module Aws
                                                        ) -> _ModifyVpcEndpointConnectionNotificationResponseSuccess
                                                      | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _ModifyVpcEndpointConnectionNotificationResponseSuccess
 
+      interface _ModifyVpcEndpointPayerResponsibilityResponseSuccess
+        include ::Seahorse::Client::_ResponseSuccess[Types::ModifyVpcEndpointPayerResponsibilityResult]
+        def vpc_endpoint_id: () -> ::String
+        def payer_responsibilities: () -> ::Array[Types::PayerResponsibilityEntry]
+      end
+      # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/EC2/Client.html#modify_vpc_endpoint_payer_responsibility-instance_method
+      def modify_vpc_endpoint_payer_responsibility: (
+                                                      ?dry_run: bool,
+                                                      ?service_id: ::String,
+                                                      vpc_endpoint_id: ::String,
+                                                      payer_responsibility: ("vpc-endpoint-account" | "vpc-endpoint-service-account"),
+                                                      scope: ("vpc-endpoint-charges")
+                                                    ) -> _ModifyVpcEndpointPayerResponsibilityResponseSuccess
+                                                  | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _ModifyVpcEndpointPayerResponsibilityResponseSuccess
+
       interface _ModifyVpcEndpointServiceConfigurationResponseSuccess
         include ::Seahorse::Client::_ResponseSuccess[Types::ModifyVpcEndpointServiceConfigurationResult]
         def return: () -> bool