aws-sdk-ec2 1.652.0 → 1.654.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: d967e862c7535131ade3cebb2b05b34ea95cb0a5a26eed7d165c84225da4f792
-  data.tar.gz: d1d0247a47d8ba17812362dffc4f3228ea2c74f41000e53c9d3589f1646cc759
+  metadata.gz: 5fc085fa1f8afdd857c491332dc60b1b3f069b1041f5d66d57bbb40f911232cd
+  data.tar.gz: f02fce0d90c94caa70fe187a71b792fb9547f9822e2b44f94bff12b07d4465a6
 SHA512:
-  metadata.gz: 55ac99c0b423f5b70e5b25c1a8dd3adc36542eaed8ae5be88e6070a2f94fa1f9d60a3523f5efedf07adfcab7ea4908913b0818d170947d7e64a11944176aa4d5
-  data.tar.gz: 6b10c8c4f42b186f1df31f0f353d773322bdb7ca3e667df97528c737c42c68ae953d69a3ba33912a3e34f070b0d53b84dabb8ffa65b96e0233c3bb223eae1c44
+  metadata.gz: 9fdf4543030cf2f5909bcff1de22a67d90e6621b69acc0be0c75cf4fd3680dfd63826145f0cf7468c2d23623a77fdd0866643dce0d09b22089e5aeca86bffe06
+  data.tar.gz: a002b0fdd8ef05d0d8a0ad6175c43a4d34a53e18ddc31db480f8a275a6e556b1b407856f32344cf636f1a34335961bfdf0c690d4fd61c03c4c27cb9cfe8fb946

data/CHANGELOG.md

@@ -1,6 +1,16 @@
 Unreleased Changes
 ------------------
 
+1.654.0 (2026-09-29)
+------------------
+
+* Feature - Adds the LaunchStatus field to CapacityReservation in the DescribeCapacityReservations response. This field indicates whether you can currently launch instances into an UltraServer.
+
+1.653.0 (2026-09-28)
+------------------
+
+* Feature - API changes to AWS Client VPN to support device posture assessment and Cedar authorization policies
+
 1.652.0 (2026-09-22)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.652.0
+1.654.0

data/lib/aws-sdk-ec2/client.rb

@@ -6654,6 +6654,7 @@ module Aws::EC2
     #   resp.capacity_reservation.adjustment_details.commitment_duration #=> Integer
     #   resp.capacity_reservation.original_start_date #=> Time
     #   resp.capacity_reservation.zero_size_preference #=> String, one of "retain", "default"
+    #   resp.capacity_reservation.launch_status #=> String, one of "launchable", "unlaunchable"
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/CreateCapacityReservation AWS API Documentation
     #
@@ -6780,6 +6781,7 @@ module Aws::EC2
     #   resp.source_capacity_reservation.adjustment_details.commitment_duration #=> Integer
     #   resp.source_capacity_reservation.original_start_date #=> Time
     #   resp.source_capacity_reservation.zero_size_preference #=> String, one of "retain", "default"
+    #   resp.source_capacity_reservation.launch_status #=> String, one of "launchable", "unlaunchable"
     #   resp.destination_capacity_reservation.capacity_reservation_id #=> String
     #   resp.destination_capacity_reservation.owner_id #=> String
     #   resp.destination_capacity_reservation.capacity_reservation_arn #=> String
@@ -6834,6 +6836,7 @@ module Aws::EC2
     #   resp.destination_capacity_reservation.adjustment_details.commitment_duration #=> Integer
     #   resp.destination_capacity_reservation.original_start_date #=> Time
     #   resp.destination_capacity_reservation.zero_size_preference #=> String, one of "retain", "default"
+    #   resp.destination_capacity_reservation.launch_status #=> String, one of "launchable", "unlaunchable"
     #   resp.instance_count #=> Integer
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/CreateCapacityReservationBySplitting AWS API Documentation
@@ -7433,6 +7436,11 @@ module Aws::EC2
     #   instead of a VPC. You cannot specify both
     #   `TransitGatewayConfiguration` and `VpcId`/`SecurityGroupIds`.
     #
+    # @option params [Types::DevicePostureOptions] :device_posture_options
+    #   The device posture options for the Client VPN endpoint. Use this
+    #   parameter to specify the device trust providers that the endpoint uses
+    #   to evaluate the security posture of connecting devices.
+    #
     # @return [Types::CreateClientVpnEndpointResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::CreateClientVpnEndpointResult#client_vpn_endpoint_id #client_vpn_endpoint_id} => String
@@ -7463,6 +7471,7 @@ module Aws::EC2
     #       enabled: false,
     #       cloudwatch_log_group: "String",
     #       cloudwatch_log_stream: "String",
+    #       include_authorization_policy_context: false,
     #     },
     #     dns_servers: ["String"],
     #     transport_protocol: "tcp", # accepts tcp, udp
@@ -7505,6 +7514,16 @@ module Aws::EC2
     #       availability_zones: ["AvailabilityZoneName"],
     #       availability_zone_ids: ["AvailabilityZoneId"],
     #     },
+    #     device_posture_options: {
+    #       trust_providers: [
+    #         {
+    #           trust_provider_type: "crowdstrike", # accepts crowdstrike, jamf, jumpcloud
+    #           tenant_id: "String",
+    #           public_signing_key_url: "String",
+    #         },
+    #       ],
+    #       enabled: false,
+    #     },
     #   })
     #
     # @example Response structure
@@ -10285,7 +10304,7 @@ module Aws::EC2
     #   resp = client.create_ipam_internet_registry_association({
     #     dry_run: false,
     #     ipam_id: "IpamId", # required
-    #     rir: "ripe", # required, accepts ripe, apnic, arin, lacnic
+    #     rir: "ripe", # required, accepts ripe, apnic, arin, lacnic, nicbr
     #     organization_handle: "String", # required
     #     description: "String",
     #     tag_specifications: [
@@ -10309,10 +10328,10 @@ module Aws::EC2
     #   resp.ipam_internet_registry_association.ipam_internet_registry_association_arn #=> String
     #   resp.ipam_internet_registry_association.ipam_id #=> String
     #   resp.ipam_internet_registry_association.ipam_region #=> String
-    #   resp.ipam_internet_registry_association.rir #=> String, one of "ripe", "apnic", "arin", "lacnic"
+    #   resp.ipam_internet_registry_association.rir #=> String, one of "ripe", "apnic", "arin", "lacnic", "nicbr"
     #   resp.ipam_internet_registry_association.organization_handle #=> String
     #   resp.ipam_internet_registry_association.description #=> String
-    #   resp.ipam_internet_registry_association.state #=> String, one of "pending-enable", "create-in-progress", "create-failed", "enable-in-progress", "enable-complete", "enable-failed", "delete-in-progress", "delete-complete", "delete-failed"
+    #   resp.ipam_internet_registry_association.state #=> String, one of "pending-enable", "create-in-progress", "create-failed", "enable-in-progress", "enable-complete", "enable-failed", "disable-in-progress", "disable-complete", "disable-failed", "delete-in-progress", "delete-complete", "delete-failed"
     #   resp.ipam_internet_registry_association.state_message #=> String
     #   resp.ipam_internet_registry_association.child_request_xml #=> String
     #   resp.ipam_internet_registry_association.tags #=> Array
@@ -19649,8 +19668,15 @@ module Aws::EC2
     # @option params [String] :vpc_endpoint_type
     #   The type of endpoint.
     #
+    #   For more information about the types of VPC endpoints, see [VPC
+    #   endpoints][1] in the *Amazon Web Services PrivateLink User Guide*.
+    #
     #   Default: Gateway
     #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/vpc/latest/privatelink/concepts.html#concepts-vpc-endpoints
+    #
     # @option params [required, String] :vpc_id
     #   The ID of the VPC.
     #
@@ -19667,14 +19693,20 @@ module Aws::EC2
     #   (Gateway endpoint) The route table IDs.
     #
     # @option params [Array<String>] :subnet_ids
-    #   (Interface and Gateway Load Balancer endpoints) The IDs of the subnets
-    #   in which to create endpoint network interfaces. For a Gateway Load
-    #   Balancer endpoint, you can specify only one subnet.
+    #   (Interface, Gateway Load Balancer endpoints, Resource, ServiceNetwork,
+    #   and Tunnel endpoints only) The IDs of the subnets in which to create
+    #   endpoint network interfaces. For a Gateway Load Balancer endpoint, you
+    #   can specify only one subnet. For a `Tunnel` endpoint, the subnets must
+    #   be in the Availability Zones of the resource gateway associated with
+    #   the shared resource configuration. An endpoint network interface is
+    #   created only in an Availability Zone that the resource gateway is also
+    #   in.
     #
     # @option params [Array<String>] :security_group_ids
-    #   (Interface endpoint) The IDs of the security groups to associate with
-    #   the endpoint network interfaces. If this parameter is not specified,
-    #   we use the default security group for the VPC.
+    #   (Interface, Resource, ServiceNetwork, and Tunnel endpoints only) The
+    #   IDs of the security groups to associate with the endpoint network
+    #   interfaces. If this parameter is not specified, we use the default
+    #   security group for the VPC.
     #
     # @option params [String] :ip_address_type
     #   The IP address type for the endpoint.
@@ -19716,8 +19748,29 @@ module Aws::EC2
     #   associated with the VPC endpoint of type service-network.
     #
     # @option params [String] :resource_configuration_arn
-    #   The Amazon Resource Name (ARN) of a resource configuration that will
-    #   be associated with the VPC endpoint of type resource.
+    #   (Resource and Tunnel endpoints only) The Amazon Resource Name (ARN) of
+    #   a resource configuration associated with the VPC endpoint. The type of
+    #   resource configuration depends on the endpoint type:
+    #
+    #   * For a Resource endpoint, you can specify a resource configuration
+    #     that is of type `SINGLE`, `GROUP`, or `ARN`. To reach a resource
+    #     that belongs to a group, specify the parent `GROUP` resource
+    #     configuration.
+    #
+    #   * For a Tunnel endpoint, you can specify a resource configuration that
+    #     is of type `CIDR`.
+    #
+    #   For more information about the types of resource configurations, see
+    #   [Types of resource configurations][1] in the *Amazon Web Services
+    #   PrivateLink User Guide*.
+    #
+    #   This request fails if a VPC endpoint owned by a different Amazon Web
+    #   Services account already exists on a resource gateway that is enabled
+    #   for `ResourceGatewayCharges` payer responsibility.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/vpc/latest/privatelink/resource-configuration.html
     #
     # @option params [String] :service_region
     #   The Region where the service is hosted. The default is the current
@@ -20812,6 +20865,41 @@ module Aws::EC2
       req.send_request(options)
     end
 
+    # Deletes the authorization policy for a Client VPN endpoint.
+    #
+    # @option params [required, String] :client_vpn_endpoint_id
+    #   The ID of the Client VPN endpoint.
+    #
+    # @option params [Boolean] :dry_run
+    #   Checks whether you have the required permissions for the action,
+    #   without actually making the request, and provides an error response.
+    #   If you have the required permissions, the error response is
+    #   `DryRunOperation`. Otherwise, it is `UnauthorizedOperation`.
+    #
+    # @return [Types::DeleteClientVpnEndpointAuthorizationPolicyResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::DeleteClientVpnEndpointAuthorizationPolicyResult#status #status} => String
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.delete_client_vpn_endpoint_authorization_policy({
+    #     client_vpn_endpoint_id: "ClientVpnEndpointId", # required
+    #     dry_run: false,
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.status #=> String, one of "creating", "updating", "active", "failed", "deleting"
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/DeleteClientVpnEndpointAuthorizationPolicy AWS API Documentation
+    #
+    # @overload delete_client_vpn_endpoint_authorization_policy(params = {})
+    # @param [Hash] params ({})
+    def delete_client_vpn_endpoint_authorization_policy(params = {}, options = {})
+      req = build_request(:delete_client_vpn_endpoint_authorization_policy, params)
+      req.send_request(options)
+    end
+
     # Deletes a route from a Client VPN endpoint. You can only delete routes
     # that you manually added using the **CreateClientVpnRoute** action. You
     # cannot delete routes that were automatically added when associating a
@@ -21603,10 +21691,10 @@ module Aws::EC2
     #   resp.ipam_internet_registry_association.ipam_internet_registry_association_arn #=> String
     #   resp.ipam_internet_registry_association.ipam_id #=> String
     #   resp.ipam_internet_registry_association.ipam_region #=> String
-    #   resp.ipam_internet_registry_association.rir #=> String, one of "ripe", "apnic", "arin", "lacnic"
+    #   resp.ipam_internet_registry_association.rir #=> String, one of "ripe", "apnic", "arin", "lacnic", "nicbr"
     #   resp.ipam_internet_registry_association.organization_handle #=> String
     #   resp.ipam_internet_registry_association.description #=> String
-    #   resp.ipam_internet_registry_association.state #=> String, one of "pending-enable", "create-in-progress", "create-failed", "enable-in-progress", "enable-complete", "enable-failed", "delete-in-progress", "delete-complete", "delete-failed"
+    #   resp.ipam_internet_registry_association.state #=> String, one of "pending-enable", "create-in-progress", "create-failed", "enable-in-progress", "enable-complete", "enable-failed", "disable-in-progress", "disable-complete", "disable-failed", "delete-in-progress", "delete-complete", "delete-failed"
     #   resp.ipam_internet_registry_association.state_message #=> String
     #   resp.ipam_internet_registry_association.child_request_xml #=> String
     #   resp.ipam_internet_registry_association.tags #=> Array
@@ -28599,6 +28687,7 @@ module Aws::EC2
     #   resp.capacity_reservations[0].adjustment_details.commitment_duration #=> Integer
     #   resp.capacity_reservations[0].original_start_date #=> Time
     #   resp.capacity_reservations[0].zero_size_preference #=> String, one of "retain", "default"
+    #   resp.capacity_reservations[0].launch_status #=> String, one of "launchable", "unlaunchable"
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/DescribeCapacityReservations AWS API Documentation
     #
@@ -28937,6 +29026,7 @@ module Aws::EC2
     #   resp.connections[0].connection_end_time #=> String
     #   resp.connections[0].posture_compliance_statuses #=> Array
     #   resp.connections[0].posture_compliance_statuses[0] #=> String
+    #   resp.connections[0].authorization_policy_last_evaluated_time #=> String
     #   resp.next_token #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/DescribeClientVpnConnections AWS API Documentation
@@ -29026,6 +29116,7 @@ module Aws::EC2
     #   resp.client_vpn_endpoints[0].connection_log_options.enabled #=> Boolean
     #   resp.client_vpn_endpoints[0].connection_log_options.cloudwatch_log_group #=> String
     #   resp.client_vpn_endpoints[0].connection_log_options.cloudwatch_log_stream #=> String
+    #   resp.client_vpn_endpoints[0].connection_log_options.include_authorization_policy_context #=> Boolean
     #   resp.client_vpn_endpoints[0].tags #=> Array
     #   resp.client_vpn_endpoints[0].tags[0].key #=> String
     #   resp.client_vpn_endpoints[0].tags[0].value #=> String
@@ -29050,6 +29141,10 @@ module Aws::EC2
     #   resp.client_vpn_endpoints[0].transit_gateway_configuration.availability_zones[0] #=> String
     #   resp.client_vpn_endpoints[0].transit_gateway_configuration.availability_zone_ids #=> Array
     #   resp.client_vpn_endpoints[0].transit_gateway_configuration.availability_zone_ids[0] #=> String
+    #   resp.client_vpn_endpoints[0].device_posture_options.trust_providers #=> Array
+    #   resp.client_vpn_endpoints[0].device_posture_options.trust_providers[0].trust_provider_type #=> String, one of "crowdstrike", "jamf", "jumpcloud"
+    #   resp.client_vpn_endpoints[0].device_posture_options.trust_providers[0].tenant_id #=> String
+    #   resp.client_vpn_endpoints[0].device_posture_options.trust_providers[0].public_signing_key_url #=> String
     #   resp.next_token #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/DescribeClientVpnEndpoints AWS API Documentation
@@ -35464,10 +35559,10 @@ module Aws::EC2
     #   resp.ipam_internet_registry_associations[0].ipam_internet_registry_association_arn #=> String
     #   resp.ipam_internet_registry_associations[0].ipam_id #=> String
     #   resp.ipam_internet_registry_associations[0].ipam_region #=> String
-    #   resp.ipam_internet_registry_associations[0].rir #=> String, one of "ripe", "apnic", "arin", "lacnic"
+    #   resp.ipam_internet_registry_associations[0].rir #=> String, one of "ripe", "apnic", "arin", "lacnic", "nicbr"
     #   resp.ipam_internet_registry_associations[0].organization_handle #=> String
     #   resp.ipam_internet_registry_associations[0].description #=> String
-    #   resp.ipam_internet_registry_associations[0].state #=> String, one of "pending-enable", "create-in-progress", "create-failed", "enable-in-progress", "enable-complete", "enable-failed", "delete-in-progress", "delete-complete", "delete-failed"
+    #   resp.ipam_internet_registry_associations[0].state #=> String, one of "pending-enable", "create-in-progress", "create-failed", "enable-in-progress", "enable-complete", "enable-failed", "disable-in-progress", "disable-complete", "disable-failed", "delete-in-progress", "delete-complete", "delete-failed"
     #   resp.ipam_internet_registry_associations[0].state_message #=> String
     #   resp.ipam_internet_registry_associations[0].child_request_xml #=> String
     #   resp.ipam_internet_registry_associations[0].tags #=> Array
@@ -48883,8 +48978,8 @@ module Aws::EC2
     #     `deleted` \| `rejected` \| `failed`).
     #
     #   * `vpc-endpoint-type` - The type of VPC endpoint (`Interface` \|
-    #     `Gateway` \| `GatewayLoadBalancer` \| `Resource` \|
-    #     `ServiceNetwork`).
+    #     `Gateway` \| `GatewayLoadBalancer` \| `Resource` \| `ServiceNetwork`
+    #     \| `Tunnel`).
     #
     # @option params [Integer] :max_results
     #   The maximum number of items to return for this request. The request
@@ -53172,10 +53267,10 @@ module Aws::EC2
     #   resp.ipam_internet_registry_association.ipam_internet_registry_association_arn #=> String
     #   resp.ipam_internet_registry_association.ipam_id #=> String
     #   resp.ipam_internet_registry_association.ipam_region #=> String
-    #   resp.ipam_internet_registry_association.rir #=> String, one of "ripe", "apnic", "arin", "lacnic"
+    #   resp.ipam_internet_registry_association.rir #=> String, one of "ripe", "apnic", "arin", "lacnic", "nicbr"
     #   resp.ipam_internet_registry_association.organization_handle #=> String
     #   resp.ipam_internet_registry_association.description #=> String
-    #   resp.ipam_internet_registry_association.state #=> String, one of "pending-enable", "create-in-progress", "create-failed", "enable-in-progress", "enable-complete", "enable-failed", "delete-in-progress", "delete-complete", "delete-failed"
+    #   resp.ipam_internet_registry_association.state #=> String, one of "pending-enable", "create-in-progress", "create-failed", "enable-in-progress", "enable-complete", "enable-failed", "disable-in-progress", "disable-complete", "disable-failed", "delete-in-progress", "delete-complete", "delete-failed"
     #   resp.ipam_internet_registry_association.state_message #=> String
     #   resp.ipam_internet_registry_association.child_request_xml #=> String
     #   resp.ipam_internet_registry_association.tags #=> Array
@@ -54728,6 +54823,49 @@ module Aws::EC2
       req.send_request(options)
     end
 
+    # Describes the authorization policy for a Client VPN endpoint.
+    #
+    # @option params [required, String] :client_vpn_endpoint_id
+    #   The ID of the Client VPN endpoint.
+    #
+    # @option params [Boolean] :dry_run
+    #   Checks whether you have the required permissions for the action,
+    #   without actually making the request, and provides an error response.
+    #   If you have the required permissions, the error response is
+    #   `DryRunOperation`. Otherwise, it is `UnauthorizedOperation`.
+    #
+    # @return [Types::GetClientVpnEndpointAuthorizationPolicyResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::GetClientVpnEndpointAuthorizationPolicyResult#client_vpn_endpoint_id #client_vpn_endpoint_id} => String
+    #   * {Types::GetClientVpnEndpointAuthorizationPolicyResult#policy_document #policy_document} => String
+    #   * {Types::GetClientVpnEndpointAuthorizationPolicyResult#description #description} => String
+    #   * {Types::GetClientVpnEndpointAuthorizationPolicyResult#shadow_mode #shadow_mode} => String
+    #   * {Types::GetClientVpnEndpointAuthorizationPolicyResult#status #status} => String
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.get_client_vpn_endpoint_authorization_policy({
+    #     client_vpn_endpoint_id: "ClientVpnEndpointId", # required
+    #     dry_run: false,
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.client_vpn_endpoint_id #=> String
+    #   resp.policy_document #=> String
+    #   resp.description #=> String
+    #   resp.shadow_mode #=> String, one of "enabled", "disabled"
+    #   resp.status #=> String, one of "creating", "updating", "active", "failed", "deleting"
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/GetClientVpnEndpointAuthorizationPolicy AWS API Documentation
+    #
+    # @overload get_client_vpn_endpoint_authorization_policy(params = {})
+    # @param [Hash] params ({})
+    def get_client_vpn_endpoint_authorization_policy(params = {}, options = {})
+      req = build_request(:get_client_vpn_endpoint_authorization_policy, params)
+      req.send_request(options)
+    end
+
     # Describes the allocations from the specified customer-owned address
     # pool.
     #
@@ -61762,6 +61900,12 @@ module Aws::EC2
     #   The Transit Gateway configuration for the Client VPN endpoint. This
     #   option is currently not supported.
     #
+    # @option params [Types::DevicePostureOptions] :device_posture_options
+    #   The device posture options for the Client VPN endpoint. Specifying
+    #   this parameter replaces the entire device posture configuration for
+    #   the endpoint. To remove all device trust providers, specify an empty
+    #   list.
+    #
     # @return [Types::ModifyClientVpnEndpointResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::ModifyClientVpnEndpointResult#return #return} => Boolean
@@ -61775,6 +61919,7 @@ module Aws::EC2
     #       enabled: false,
     #       cloudwatch_log_group: "String",
     #       cloudwatch_log_stream: "String",
+    #       include_authorization_policy_context: false,
     #     },
     #     dns_servers: {
     #       custom_dns_servers: ["String"],
@@ -61805,6 +61950,16 @@ module Aws::EC2
     #       availability_zones: ["AvailabilityZoneName"],
     #       availability_zone_ids: ["AvailabilityZoneId"],
     #     },
+    #     device_posture_options: {
+    #       trust_providers: [
+    #         {
+    #           trust_provider_type: "crowdstrike", # accepts crowdstrike, jamf, jumpcloud
+    #           tenant_id: "String",
+    #           public_signing_key_url: "String",
+    #         },
+    #       ],
+    #       enabled: false,
+    #     },
     #   })
     #
     # @example Response structure
@@ -61820,6 +61975,80 @@ module Aws::EC2
       req.send_request(options)
     end
 
+    # Creates or updates the authorization policy for a Client VPN endpoint.
+    # A Client VPN endpoint can have one authorization policy. If a policy
+    # already exists for the endpoint, the values that you specify replace
+    # the corresponding values in the existing policy, and values that you
+    # do not specify remain unchanged.
+    #
+    # @option params [required, String] :client_vpn_endpoint_id
+    #   The ID of the Client VPN endpoint.
+    #
+    # @option params [String] :policy_document
+    #   The authorization policy document, written in the Cedar policy
+    #   language. This parameter is required when you create the authorization
+    #   policy for a Client VPN endpoint that does not already have one.
+    #
+    # @option params [String] :description
+    #   A brief description of the authorization policy.
+    #
+    # @option params [String] :shadow_mode
+    #   Specifies whether the authorization policy is evaluated in shadow
+    #   mode. Possible values include:
+    #
+    #   * `enabled` - The authorization policy is evaluated and the results
+    #     are logged, but access is not enforced.
+    #
+    #   * `disabled` - The authorization policy is enforced.
+    #
+    #   The default value is `disabled`.
+    #
+    # @option params [String] :client_token
+    #   Unique, case-sensitive identifier that you provide to ensure the
+    #   idempotency of the request. For more information, see [Ensuring
+    #   idempotency][1].
+    #
+    #   **A suitable default value is auto-generated.** You should normally
+    #   not need to pass this option.**
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/ec2/latest/devguide/ec2-api-idempotency.html
+    #
+    # @option params [Boolean] :dry_run
+    #   Checks whether you have the required permissions for the action,
+    #   without actually making the request, and provides an error response.
+    #   If you have the required permissions, the error response is
+    #   `DryRunOperation`. Otherwise, it is `UnauthorizedOperation`.
+    #
+    # @return [Types::ModifyClientVpnEndpointAuthorizationPolicyResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::ModifyClientVpnEndpointAuthorizationPolicyResult#status #status} => String
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.modify_client_vpn_endpoint_authorization_policy({
+    #     client_vpn_endpoint_id: "ClientVpnEndpointId", # required
+    #     policy_document: "String",
+    #     description: "String",
+    #     shadow_mode: "enabled", # accepts enabled, disabled
+    #     client_token: "String",
+    #     dry_run: false,
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.status #=> String, one of "creating", "updating", "active", "failed", "deleting"
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/ModifyClientVpnEndpointAuthorizationPolicy AWS API Documentation
+    #
+    # @overload modify_client_vpn_endpoint_authorization_policy(params = {})
+    # @param [Hash] params ({})
+    def modify_client_vpn_endpoint_authorization_policy(params = {}, options = {})
+      req = build_request(:modify_client_vpn_endpoint_authorization_policy, params)
+      req.send_request(options)
+    end
+
     # Modifies the default credit option for CPU usage of burstable
     # performance instances. The default credit option is set at the account
     # level per Amazon Web Services Region, and is specified per instance
@@ -69269,6 +69498,7 @@ module Aws::EC2
     #   resp.source_capacity_reservation.adjustment_details.commitment_duration #=> Integer
     #   resp.source_capacity_reservation.original_start_date #=> Time
     #   resp.source_capacity_reservation.zero_size_preference #=> String, one of "retain", "default"
+    #   resp.source_capacity_reservation.launch_status #=> String, one of "launchable", "unlaunchable"
     #   resp.destination_capacity_reservation.capacity_reservation_id #=> String
     #   resp.destination_capacity_reservation.owner_id #=> String
     #   resp.destination_capacity_reservation.capacity_reservation_arn #=> String
@@ -69323,6 +69553,7 @@ module Aws::EC2
     #   resp.destination_capacity_reservation.adjustment_details.commitment_duration #=> Integer
     #   resp.destination_capacity_reservation.original_start_date #=> Time
     #   resp.destination_capacity_reservation.zero_size_preference #=> String, one of "retain", "default"
+    #   resp.destination_capacity_reservation.launch_status #=> String, one of "launchable", "unlaunchable"
     #   resp.instance_count #=> Integer
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/MoveCapacityReservationInstances AWS API Documentation
@@ -69794,6 +70025,7 @@ module Aws::EC2
     #   resp.capacity_reservation.adjustment_details.commitment_duration #=> Integer
     #   resp.capacity_reservation.original_start_date #=> Time
     #   resp.capacity_reservation.zero_size_preference #=> String, one of "retain", "default"
+    #   resp.capacity_reservation.launch_status #=> String, one of "launchable", "unlaunchable"
     #   resp.capacity_blocks #=> Array
     #   resp.capacity_blocks[0].capacity_block_id #=> String
     #   resp.capacity_blocks[0].ultraserver_type #=> String
@@ -77693,7 +77925,7 @@ module Aws::EC2
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-ec2'
-      context[:gem_version] = '1.652.0'
+      context[:gem_version] = '1.654.0'
       Seahorse::Client::Request.new(handlers, context)
     end