aws-sdk-ec2 1.658.0 → 1.660.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: b0d8116e20fd5bd3b0ab3d6348bf56d333d5e59d575e860a14b2e369b4d54f8b
-  data.tar.gz: bafce10e9aa566d2bc94a2a310680bdd6505683f320000b48a7647335575d841
+  metadata.gz: 146ebe1a85bcd506ae0924a14bba9a6d50c738616d192e7517ea115b429f0a3b
+  data.tar.gz: 12d77e3bcdd481929459d2e5df193d9fcb46df311a6bcc70691a1fd613aeb14a
 SHA512:
-  metadata.gz: d6183fa8eb924ac644360575ce01c471f24f82a24fd82dd2065390cbef183540d1c05cae54cd5c802b335158b61d91673b7003c24173662f92597e89dbec5cbc
-  data.tar.gz: 26e1525441d8a1500ceec0346d2f9bb2f85bbf1307fab29acc2eaf1f7933ffd0368e615e15ae38aae5481a5e7d63aad960dd610ec6baed19eaaa6deaf8ab8cd1
+  metadata.gz: 492bab6cf58b7c04879dec7550bc9245895b6e06cbfcca8b367b293e3ffc5b8096c72e2287eb3201359910df371457658336698d0ab4ad9d11a03e18c16ed9f7
+  data.tar.gz: b794004890ca8e39ef8c82b2dde78c3ad98a11c57683e553f5efacd15ec2dcf1f76d6618c9d250035725e0ded84ef8ea80c5268e65375c46ebb7294892f94a7d

data/CHANGELOG.md

@@ -1,6 +1,16 @@
 Unreleased Changes
 ------------------
 
+1.660.0 (2026-10-22)
+------------------
+
+* Feature - AWS Transit Gateway now provides managed one-to-one NAT directly on its attachments, through integration with Regional Private NAT Gateway. Use ModifyTransitGatewayAttachmentNatConfiguration to enable NAT and configure NAT rules, and GetTransitGatewayAttachmentNatConfiguration to view them.
+
+1.659.0 (2026-10-21)
+------------------
+
+* Feature - Adds new response fields to DescribeInstanceStatus and Network Insights analysis results.
+
 1.658.0 (2026-10-20)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.658.0
+1.660.0

data/lib/aws-sdk-ec2/client.rb

@@ -18067,7 +18067,7 @@ module Aws::EC2
     #   resp.route.transit_gateway_attachments[0].resource_id #=> String
     #   resp.route.transit_gateway_attachments[0].transit_gateway_attachment_id #=> String
     #   resp.route.transit_gateway_attachments[0].resource_type #=> String, one of "vpc", "vpn", "vpn-concentrator", "direct-connect-gateway", "connect", "peering", "tgw-peering", "network-function", "client-vpn"
-    #   resp.route.type #=> String, one of "static", "propagated"
+    #   resp.route.type #=> String, one of "static", "propagated", "system"
     #   resp.route.state #=> String, one of "pending", "active", "blackhole", "deleting", "deleted"
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/CreateTransitGatewayRoute AWS API Documentation
@@ -24718,7 +24718,7 @@ module Aws::EC2
     #   resp.route.transit_gateway_attachments[0].resource_id #=> String
     #   resp.route.transit_gateway_attachments[0].transit_gateway_attachment_id #=> String
     #   resp.route.transit_gateway_attachments[0].resource_type #=> String, one of "vpc", "vpn", "vpn-concentrator", "direct-connect-gateway", "connect", "peering", "tgw-peering", "network-function", "client-vpn"
-    #   resp.route.type #=> String, one of "static", "propagated"
+    #   resp.route.type #=> String, one of "static", "propagated", "system"
     #   resp.route.state #=> String, one of "pending", "active", "blackhole", "deleting", "deleted"
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/DeleteTransitGatewayRoute AWS API Documentation
@@ -24730,11 +24730,13 @@ module Aws::EC2
       req.send_request(options)
     end
 
-    # Deletes the specified transit gateway route table. If there are any
-    # route tables associated with the transit gateway route table, you must
-    # first run DisassociateRouteTable before you can delete the transit
-    # gateway route table. This removes any route tables associated with the
-    # transit gateway route table.
+    # Deletes the specified transit gateway route table. Before you can
+    # delete a transit gateway route table, you must disassociate all
+    # attachments from it by using DisassociateTransitGatewayRouteTable and
+    # wait for the disassociations to complete. You can't delete a transit
+    # gateway route table that is the default association route table or
+    # default propagation route table for the transit gateway. To change the
+    # default route tables, use ModifyTransitGateway.
     #
     # @option params [required, String] :transit_gateway_route_table_id
     #   The ID of the transit gateway route table.
@@ -33786,6 +33788,9 @@ module Aws::EC2
     #   resp.instance_statuses[0].attached_ebs_status.status #=> String, one of "ok", "impaired", "insufficient-data", "not-applicable", "initializing"
     #   resp.instance_statuses[0].application_status.status #=> String, one of "ok", "impaired", "insufficient-data", "not-applicable", "initializing"
     #   resp.instance_statuses[0].application_status.impaired_since #=> Time
+    #   resp.instance_statuses[0].performance_status.status #=> String, one of "ok", "impaired", "insufficient-data", "not-applicable", "initializing"
+    #   resp.instance_statuses[0].performance_status.impaired_since #=> Time
+    #   resp.instance_statuses[0].performance_status.remediation #=> String
     #   resp.next_token #=> String
     #
     #
@@ -38671,6 +38676,15 @@ module Aws::EC2
     #   resp.network_insights_analyses[0].forward_path_components[0].transit_gateway_route_table_route.attachment_id #=> String
     #   resp.network_insights_analyses[0].forward_path_components[0].transit_gateway_route_table_route.resource_id #=> String
     #   resp.network_insights_analyses[0].forward_path_components[0].transit_gateway_route_table_route.resource_type #=> String
+    #   resp.network_insights_analyses[0].forward_path_components[0].transit_gateway_policy_table_entry.rule_number #=> Integer
+    #   resp.network_insights_analyses[0].forward_path_components[0].transit_gateway_policy_table_entry.protocol #=> String
+    #   resp.network_insights_analyses[0].forward_path_components[0].transit_gateway_policy_table_entry.source_cidr #=> String
+    #   resp.network_insights_analyses[0].forward_path_components[0].transit_gateway_policy_table_entry.destination_cidr #=> String
+    #   resp.network_insights_analyses[0].forward_path_components[0].transit_gateway_policy_table_entry.source_port_range.from #=> Integer
+    #   resp.network_insights_analyses[0].forward_path_components[0].transit_gateway_policy_table_entry.source_port_range.to #=> Integer
+    #   resp.network_insights_analyses[0].forward_path_components[0].transit_gateway_policy_table_entry.destination_port_range.from #=> Integer
+    #   resp.network_insights_analyses[0].forward_path_components[0].transit_gateway_policy_table_entry.destination_port_range.to #=> Integer
+    #   resp.network_insights_analyses[0].forward_path_components[0].transit_gateway_policy_table_entry.target_route_table_id #=> String
     #   resp.network_insights_analyses[0].forward_path_components[0].explanations #=> Array
     #   resp.network_insights_analyses[0].forward_path_components[0].explanations[0].acl.id #=> String
     #   resp.network_insights_analyses[0].forward_path_components[0].explanations[0].acl.arn #=> String
@@ -38822,6 +38836,18 @@ module Aws::EC2
     #   resp.network_insights_analyses[0].forward_path_components[0].explanations[0].transit_gateway_route_table_route.attachment_id #=> String
     #   resp.network_insights_analyses[0].forward_path_components[0].explanations[0].transit_gateway_route_table_route.resource_id #=> String
     #   resp.network_insights_analyses[0].forward_path_components[0].explanations[0].transit_gateway_route_table_route.resource_type #=> String
+    #   resp.network_insights_analyses[0].forward_path_components[0].explanations[0].transit_gateway_policy_table.id #=> String
+    #   resp.network_insights_analyses[0].forward_path_components[0].explanations[0].transit_gateway_policy_table.arn #=> String
+    #   resp.network_insights_analyses[0].forward_path_components[0].explanations[0].transit_gateway_policy_table.name #=> String
+    #   resp.network_insights_analyses[0].forward_path_components[0].explanations[0].transit_gateway_policy_table_entry.rule_number #=> Integer
+    #   resp.network_insights_analyses[0].forward_path_components[0].explanations[0].transit_gateway_policy_table_entry.protocol #=> String
+    #   resp.network_insights_analyses[0].forward_path_components[0].explanations[0].transit_gateway_policy_table_entry.source_cidr #=> String
+    #   resp.network_insights_analyses[0].forward_path_components[0].explanations[0].transit_gateway_policy_table_entry.destination_cidr #=> String
+    #   resp.network_insights_analyses[0].forward_path_components[0].explanations[0].transit_gateway_policy_table_entry.source_port_range.from #=> Integer
+    #   resp.network_insights_analyses[0].forward_path_components[0].explanations[0].transit_gateway_policy_table_entry.source_port_range.to #=> Integer
+    #   resp.network_insights_analyses[0].forward_path_components[0].explanations[0].transit_gateway_policy_table_entry.destination_port_range.from #=> Integer
+    #   resp.network_insights_analyses[0].forward_path_components[0].explanations[0].transit_gateway_policy_table_entry.destination_port_range.to #=> Integer
+    #   resp.network_insights_analyses[0].forward_path_components[0].explanations[0].transit_gateway_policy_table_entry.target_route_table_id #=> String
     #   resp.network_insights_analyses[0].forward_path_components[0].explanations[0].transit_gateway_attachment.id #=> String
     #   resp.network_insights_analyses[0].forward_path_components[0].explanations[0].transit_gateway_attachment.arn #=> String
     #   resp.network_insights_analyses[0].forward_path_components[0].explanations[0].transit_gateway_attachment.name #=> String
@@ -38995,6 +39021,15 @@ module Aws::EC2
     #   resp.network_insights_analyses[0].return_path_components[0].transit_gateway_route_table_route.attachment_id #=> String
     #   resp.network_insights_analyses[0].return_path_components[0].transit_gateway_route_table_route.resource_id #=> String
     #   resp.network_insights_analyses[0].return_path_components[0].transit_gateway_route_table_route.resource_type #=> String
+    #   resp.network_insights_analyses[0].return_path_components[0].transit_gateway_policy_table_entry.rule_number #=> Integer
+    #   resp.network_insights_analyses[0].return_path_components[0].transit_gateway_policy_table_entry.protocol #=> String
+    #   resp.network_insights_analyses[0].return_path_components[0].transit_gateway_policy_table_entry.source_cidr #=> String
+    #   resp.network_insights_analyses[0].return_path_components[0].transit_gateway_policy_table_entry.destination_cidr #=> String
+    #   resp.network_insights_analyses[0].return_path_components[0].transit_gateway_policy_table_entry.source_port_range.from #=> Integer
+    #   resp.network_insights_analyses[0].return_path_components[0].transit_gateway_policy_table_entry.source_port_range.to #=> Integer
+    #   resp.network_insights_analyses[0].return_path_components[0].transit_gateway_policy_table_entry.destination_port_range.from #=> Integer
+    #   resp.network_insights_analyses[0].return_path_components[0].transit_gateway_policy_table_entry.destination_port_range.to #=> Integer
+    #   resp.network_insights_analyses[0].return_path_components[0].transit_gateway_policy_table_entry.target_route_table_id #=> String
     #   resp.network_insights_analyses[0].return_path_components[0].explanations #=> Array
     #   resp.network_insights_analyses[0].return_path_components[0].explanations[0].acl.id #=> String
     #   resp.network_insights_analyses[0].return_path_components[0].explanations[0].acl.arn #=> String
@@ -39146,6 +39181,18 @@ module Aws::EC2
     #   resp.network_insights_analyses[0].return_path_components[0].explanations[0].transit_gateway_route_table_route.attachment_id #=> String
     #   resp.network_insights_analyses[0].return_path_components[0].explanations[0].transit_gateway_route_table_route.resource_id #=> String
     #   resp.network_insights_analyses[0].return_path_components[0].explanations[0].transit_gateway_route_table_route.resource_type #=> String
+    #   resp.network_insights_analyses[0].return_path_components[0].explanations[0].transit_gateway_policy_table.id #=> String
+    #   resp.network_insights_analyses[0].return_path_components[0].explanations[0].transit_gateway_policy_table.arn #=> String
+    #   resp.network_insights_analyses[0].return_path_components[0].explanations[0].transit_gateway_policy_table.name #=> String
+    #   resp.network_insights_analyses[0].return_path_components[0].explanations[0].transit_gateway_policy_table_entry.rule_number #=> Integer
+    #   resp.network_insights_analyses[0].return_path_components[0].explanations[0].transit_gateway_policy_table_entry.protocol #=> String
+    #   resp.network_insights_analyses[0].return_path_components[0].explanations[0].transit_gateway_policy_table_entry.source_cidr #=> String
+    #   resp.network_insights_analyses[0].return_path_components[0].explanations[0].transit_gateway_policy_table_entry.destination_cidr #=> String
+    #   resp.network_insights_analyses[0].return_path_components[0].explanations[0].transit_gateway_policy_table_entry.source_port_range.from #=> Integer
+    #   resp.network_insights_analyses[0].return_path_components[0].explanations[0].transit_gateway_policy_table_entry.source_port_range.to #=> Integer
+    #   resp.network_insights_analyses[0].return_path_components[0].explanations[0].transit_gateway_policy_table_entry.destination_port_range.from #=> Integer
+    #   resp.network_insights_analyses[0].return_path_components[0].explanations[0].transit_gateway_policy_table_entry.destination_port_range.to #=> Integer
+    #   resp.network_insights_analyses[0].return_path_components[0].explanations[0].transit_gateway_policy_table_entry.target_route_table_id #=> String
     #   resp.network_insights_analyses[0].return_path_components[0].explanations[0].transit_gateway_attachment.id #=> String
     #   resp.network_insights_analyses[0].return_path_components[0].explanations[0].transit_gateway_attachment.arn #=> String
     #   resp.network_insights_analyses[0].return_path_components[0].explanations[0].transit_gateway_attachment.name #=> String
@@ -39364,6 +39411,18 @@ module Aws::EC2
     #   resp.network_insights_analyses[0].explanations[0].transit_gateway_route_table_route.attachment_id #=> String
     #   resp.network_insights_analyses[0].explanations[0].transit_gateway_route_table_route.resource_id #=> String
     #   resp.network_insights_analyses[0].explanations[0].transit_gateway_route_table_route.resource_type #=> String
+    #   resp.network_insights_analyses[0].explanations[0].transit_gateway_policy_table.id #=> String
+    #   resp.network_insights_analyses[0].explanations[0].transit_gateway_policy_table.arn #=> String
+    #   resp.network_insights_analyses[0].explanations[0].transit_gateway_policy_table.name #=> String
+    #   resp.network_insights_analyses[0].explanations[0].transit_gateway_policy_table_entry.rule_number #=> Integer
+    #   resp.network_insights_analyses[0].explanations[0].transit_gateway_policy_table_entry.protocol #=> String
+    #   resp.network_insights_analyses[0].explanations[0].transit_gateway_policy_table_entry.source_cidr #=> String
+    #   resp.network_insights_analyses[0].explanations[0].transit_gateway_policy_table_entry.destination_cidr #=> String
+    #   resp.network_insights_analyses[0].explanations[0].transit_gateway_policy_table_entry.source_port_range.from #=> Integer
+    #   resp.network_insights_analyses[0].explanations[0].transit_gateway_policy_table_entry.source_port_range.to #=> Integer
+    #   resp.network_insights_analyses[0].explanations[0].transit_gateway_policy_table_entry.destination_port_range.from #=> Integer
+    #   resp.network_insights_analyses[0].explanations[0].transit_gateway_policy_table_entry.destination_port_range.to #=> Integer
+    #   resp.network_insights_analyses[0].explanations[0].transit_gateway_policy_table_entry.target_route_table_id #=> String
     #   resp.network_insights_analyses[0].explanations[0].transit_gateway_attachment.id #=> String
     #   resp.network_insights_analyses[0].explanations[0].transit_gateway_attachment.arn #=> String
     #   resp.network_insights_analyses[0].explanations[0].transit_gateway_attachment.name #=> String
@@ -45846,6 +45905,7 @@ module Aws::EC2
     #   resp.transit_gateway_attachments[0].tags #=> Array
     #   resp.transit_gateway_attachments[0].tags[0].key #=> String
     #   resp.transit_gateway_attachments[0].tags[0].value #=> String
+    #   resp.transit_gateway_attachments[0].nat_gateway_support #=> String, one of "enabled", "disabled", "enabling", "disabling"
     #   resp.next_token #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/DescribeTransitGatewayAttachments AWS API Documentation
@@ -57944,6 +58004,15 @@ module Aws::EC2
     #   resp.analysis_findings[0].finding_components[0].transit_gateway_route_table_route.attachment_id #=> String
     #   resp.analysis_findings[0].finding_components[0].transit_gateway_route_table_route.resource_id #=> String
     #   resp.analysis_findings[0].finding_components[0].transit_gateway_route_table_route.resource_type #=> String
+    #   resp.analysis_findings[0].finding_components[0].transit_gateway_policy_table_entry.rule_number #=> Integer
+    #   resp.analysis_findings[0].finding_components[0].transit_gateway_policy_table_entry.protocol #=> String
+    #   resp.analysis_findings[0].finding_components[0].transit_gateway_policy_table_entry.source_cidr #=> String
+    #   resp.analysis_findings[0].finding_components[0].transit_gateway_policy_table_entry.destination_cidr #=> String
+    #   resp.analysis_findings[0].finding_components[0].transit_gateway_policy_table_entry.source_port_range.from #=> Integer
+    #   resp.analysis_findings[0].finding_components[0].transit_gateway_policy_table_entry.source_port_range.to #=> Integer
+    #   resp.analysis_findings[0].finding_components[0].transit_gateway_policy_table_entry.destination_port_range.from #=> Integer
+    #   resp.analysis_findings[0].finding_components[0].transit_gateway_policy_table_entry.destination_port_range.to #=> Integer
+    #   resp.analysis_findings[0].finding_components[0].transit_gateway_policy_table_entry.target_route_table_id #=> String
     #   resp.analysis_findings[0].finding_components[0].explanations #=> Array
     #   resp.analysis_findings[0].finding_components[0].explanations[0].acl.id #=> String
     #   resp.analysis_findings[0].finding_components[0].explanations[0].acl.arn #=> String
@@ -58095,6 +58164,18 @@ module Aws::EC2
     #   resp.analysis_findings[0].finding_components[0].explanations[0].transit_gateway_route_table_route.attachment_id #=> String
     #   resp.analysis_findings[0].finding_components[0].explanations[0].transit_gateway_route_table_route.resource_id #=> String
     #   resp.analysis_findings[0].finding_components[0].explanations[0].transit_gateway_route_table_route.resource_type #=> String
+    #   resp.analysis_findings[0].finding_components[0].explanations[0].transit_gateway_policy_table.id #=> String
+    #   resp.analysis_findings[0].finding_components[0].explanations[0].transit_gateway_policy_table.arn #=> String
+    #   resp.analysis_findings[0].finding_components[0].explanations[0].transit_gateway_policy_table.name #=> String
+    #   resp.analysis_findings[0].finding_components[0].explanations[0].transit_gateway_policy_table_entry.rule_number #=> Integer
+    #   resp.analysis_findings[0].finding_components[0].explanations[0].transit_gateway_policy_table_entry.protocol #=> String
+    #   resp.analysis_findings[0].finding_components[0].explanations[0].transit_gateway_policy_table_entry.source_cidr #=> String
+    #   resp.analysis_findings[0].finding_components[0].explanations[0].transit_gateway_policy_table_entry.destination_cidr #=> String
+    #   resp.analysis_findings[0].finding_components[0].explanations[0].transit_gateway_policy_table_entry.source_port_range.from #=> Integer
+    #   resp.analysis_findings[0].finding_components[0].explanations[0].transit_gateway_policy_table_entry.source_port_range.to #=> Integer
+    #   resp.analysis_findings[0].finding_components[0].explanations[0].transit_gateway_policy_table_entry.destination_port_range.from #=> Integer
+    #   resp.analysis_findings[0].finding_components[0].explanations[0].transit_gateway_policy_table_entry.destination_port_range.to #=> Integer
+    #   resp.analysis_findings[0].finding_components[0].explanations[0].transit_gateway_policy_table_entry.target_route_table_id #=> String
     #   resp.analysis_findings[0].finding_components[0].explanations[0].transit_gateway_attachment.id #=> String
     #   resp.analysis_findings[0].finding_components[0].explanations[0].transit_gateway_attachment.arn #=> String
     #   resp.analysis_findings[0].finding_components[0].explanations[0].transit_gateway_attachment.name #=> String
@@ -59101,6 +59182,53 @@ module Aws::EC2
       req.send_request(options)
     end
 
+    # Describes the NAT configuration for the specified transit gateway
+    # attachment. Only the owner of the transit gateway can describe the NAT
+    # configuration.
+    #
+    # @option params [required, String] :transit_gateway_attachment_id
+    #   The ID of the transit gateway attachment.
+    #
+    # @option params [Boolean] :dry_run
+    #   Checks whether you have the required permissions for the action,
+    #   without actually making the request, and provides an error response.
+    #   If you have the required permissions, the error response is
+    #   `DryRunOperation`. Otherwise, it is `UnauthorizedOperation`.
+    #
+    # @return [Types::GetTransitGatewayAttachmentNatConfigurationResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::GetTransitGatewayAttachmentNatConfigurationResult#transit_gateway_attachment_id #transit_gateway_attachment_id} => String
+    #   * {Types::GetTransitGatewayAttachmentNatConfigurationResult#nat_gateway_support #nat_gateway_support} => String
+    #   * {Types::GetTransitGatewayAttachmentNatConfigurationResult#nat_system_route_support #nat_system_route_support} => String
+    #   * {Types::GetTransitGatewayAttachmentNatConfigurationResult#nat_gateway_rules #nat_gateway_rules} => Array<Types::TransitGatewayNatRule>
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.get_transit_gateway_attachment_nat_configuration({
+    #     transit_gateway_attachment_id: "TransitGatewayAttachmentId", # required
+    #     dry_run: false,
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.transit_gateway_attachment_id #=> String
+    #   resp.nat_gateway_support #=> String, one of "enabled", "disabled", "enabling", "disabling"
+    #   resp.nat_system_route_support #=> String, one of "enable", "disable"
+    #   resp.nat_gateway_rules #=> Array
+    #   resp.nat_gateway_rules[0].rule_number #=> Integer
+    #   resp.nat_gateway_rules[0].match_source_cidr #=> String
+    #   resp.nat_gateway_rules[0].nat_cidr #=> String
+    #   resp.nat_gateway_rules[0].state #=> String, one of "pending", "activated", "deactivated", "deleting"
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/GetTransitGatewayAttachmentNatConfiguration AWS API Documentation
+    #
+    # @overload get_transit_gateway_attachment_nat_configuration(params = {})
+    # @param [Hash] params ({})
+    def get_transit_gateway_attachment_nat_configuration(params = {}, options = {})
+      req = build_request(:get_transit_gateway_attachment_nat_configuration, params)
+      req.send_request(options)
+    end
+
     # Lists the route tables to which the specified resource attachment
     # propagates routes.
     #
@@ -61916,8 +62044,8 @@ module Aws::EC2
     # @option params [Types::DevicePostureOptions] :device_posture_options
     #   The device posture options for the Client VPN endpoint. Specifying
     #   this parameter replaces the entire device posture configuration for
-    #   the endpoint. To remove all device trust providers, specify an empty
-    #   list.
+    #   the endpoint. To disable device posture and remove all device trust
+    #   providers, specify `false` for `Enabled`.
     #
     # @return [Types::ModifyClientVpnEndpointResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
@@ -66652,6 +66780,110 @@ module Aws::EC2
       req.send_request(options)
     end
 
+    # Modifies the NAT configuration for the specified transit gateway
+    # attachment. Use this operation to do the following:
+    #
+    # * Enable or disable NAT gateway support for the attachment.
+    #
+    # * Specify whether the transit gateway installs routes for the NAT
+    #   CIDRs.
+    #
+    # * Replace the NAT gateway rules for the attachment.
+    #
+    # Only the owner of the transit gateway can modify the NAT
+    # configuration.
+    #
+    # With NAT gateway support enabled, the transit gateway translates
+    # addresses in each rule's `MatchSourceCidr` range to the corresponding
+    # addresses in its `NatCidr` range.
+    #
+    # The transit gateway applies changes asynchronously. To check the
+    # result, use `GetTransitGatewayAttachmentNatConfiguration`.
+    #
+    # @option params [required, String] :transit_gateway_attachment_id
+    #   The ID of the transit gateway attachment.
+    #
+    # @option params [String] :nat_gateway_support
+    #   Specifies whether to enable or disable NAT gateway support for the
+    #   attachment. To enable NAT gateway support, the attachment must have at
+    #   least one NAT gateway rule. You can't modify the NAT configuration
+    #   while NAT gateway support is `enabling` or `disabling`. If you omit
+    #   this parameter, the current value doesn't change.
+    #
+    # @option params [String] :nat_system_route_support
+    #   Specifies whether the transit gateway installs routes for the NAT
+    #   CIDRs in the route tables to which the attachment propagates. For VPC
+    #   attachments, the transit gateway always installs these routes. You can
+    #   enable or disable this option only for Amazon Web Services Direct
+    #   Connect gateway attachments and Site-to-Site VPN attachments that use
+    #   dynamic routing. For these attachments, the default is `enable`. If
+    #   you omit this parameter, the current value doesn't change.
+    #
+    # @option params [Array<Types::TransitGatewayNatRuleRequest>] :nat_gateway_rules
+    #   The NAT gateway rules for the attachment. The rules that you specify
+    #   replace all existing NAT gateway rules for the attachment. You can
+    #   specify up to 50 rules for an attachment. If you omit this parameter,
+    #   the existing rules don't change. To remove all rules, use
+    #   `ResetNatGatewayRules`.
+    #
+    # @option params [Boolean] :reset_nat_gateway_rules
+    #   Specifies whether to remove all NAT gateway rules from the attachment.
+    #   If you omit this parameter, the transit gateway doesn't remove any
+    #   rules. You can't specify this parameter together with
+    #   `NatGatewayRules`. Because you can't enable NAT gateway support
+    #   without rules, also set `NatGatewaySupport` to `disable` in the same
+    #   request if NAT gateway support is currently enabled.
+    #
+    # @option params [Boolean] :dry_run
+    #   Checks whether you have the required permissions for the action,
+    #   without actually making the request, and provides an error response.
+    #   If you have the required permissions, the error response is
+    #   `DryRunOperation`. Otherwise, it is `UnauthorizedOperation`.
+    #
+    # @return [Types::ModifyTransitGatewayAttachmentNatConfigurationResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::ModifyTransitGatewayAttachmentNatConfigurationResult#transit_gateway_attachment_id #transit_gateway_attachment_id} => String
+    #   * {Types::ModifyTransitGatewayAttachmentNatConfigurationResult#nat_gateway_support #nat_gateway_support} => String
+    #   * {Types::ModifyTransitGatewayAttachmentNatConfigurationResult#nat_system_route_support #nat_system_route_support} => String
+    #   * {Types::ModifyTransitGatewayAttachmentNatConfigurationResult#nat_gateway_rules #nat_gateway_rules} => Array&lt;Types::TransitGatewayNatRule&gt;
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.modify_transit_gateway_attachment_nat_configuration({
+    #     transit_gateway_attachment_id: "TransitGatewayAttachmentId", # required
+    #     nat_gateway_support: "enable", # accepts enable, disable
+    #     nat_system_route_support: "enable", # accepts enable, disable
+    #     nat_gateway_rules: [
+    #       {
+    #         rule_number: 1,
+    #         match_source_cidr: "String",
+    #         nat_cidr: "String",
+    #       },
+    #     ],
+    #     reset_nat_gateway_rules: false,
+    #     dry_run: false,
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.transit_gateway_attachment_id #=> String
+    #   resp.nat_gateway_support #=> String, one of "enabled", "disabled", "enabling", "disabling"
+    #   resp.nat_system_route_support #=> String, one of "enable", "disable"
+    #   resp.nat_gateway_rules #=> Array
+    #   resp.nat_gateway_rules[0].rule_number #=> Integer
+    #   resp.nat_gateway_rules[0].match_source_cidr #=> String
+    #   resp.nat_gateway_rules[0].nat_cidr #=> String
+    #   resp.nat_gateway_rules[0].state #=> String, one of "pending", "activated", "deactivated", "deleting"
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/ModifyTransitGatewayAttachmentNatConfiguration AWS API Documentation
+    #
+    # @overload modify_transit_gateway_attachment_nat_configuration(params = {})
+    # @param [Hash] params ({})
+    def modify_transit_gateway_attachment_nat_configuration(params = {}, options = {})
+      req = build_request(:modify_transit_gateway_attachment_nat_configuration, params)
+      req.send_request(options)
+    end
+
     # Modifies a transit gateway metering policy.
     #
     # @option params [required, String] :transit_gateway_metering_policy_id
@@ -71993,7 +72225,7 @@ module Aws::EC2
     #   resp.route.transit_gateway_attachments[0].resource_id #=> String
     #   resp.route.transit_gateway_attachments[0].transit_gateway_attachment_id #=> String
     #   resp.route.transit_gateway_attachments[0].resource_type #=> String, one of "vpc", "vpn", "vpn-concentrator", "direct-connect-gateway", "connect", "peering", "tgw-peering", "network-function", "client-vpn"
-    #   resp.route.type #=> String, one of "static", "propagated"
+    #   resp.route.type #=> String, one of "static", "propagated", "system"
     #   resp.route.state #=> String, one of "pending", "active", "blackhole", "deleting", "deleted"
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/ReplaceTransitGatewayRoute AWS API Documentation
@@ -75437,7 +75669,7 @@ module Aws::EC2
     #   resp.routes[0].transit_gateway_attachments[0].resource_id #=> String
     #   resp.routes[0].transit_gateway_attachments[0].transit_gateway_attachment_id #=> String
     #   resp.routes[0].transit_gateway_attachments[0].resource_type #=> String, one of "vpc", "vpn", "vpn-concentrator", "direct-connect-gateway", "connect", "peering", "tgw-peering", "network-function", "client-vpn"
-    #   resp.routes[0].type #=> String, one of "static", "propagated"
+    #   resp.routes[0].type #=> String, one of "static", "propagated", "system"
     #   resp.routes[0].state #=> String, one of "pending", "active", "blackhole", "deleting", "deleted"
     #   resp.additional_routes_available #=> Boolean
     #   resp.next_token #=> String
@@ -75979,6 +76211,15 @@ module Aws::EC2
     #   resp.network_insights_analysis.forward_path_components[0].transit_gateway_route_table_route.attachment_id #=> String
     #   resp.network_insights_analysis.forward_path_components[0].transit_gateway_route_table_route.resource_id #=> String
     #   resp.network_insights_analysis.forward_path_components[0].transit_gateway_route_table_route.resource_type #=> String
+    #   resp.network_insights_analysis.forward_path_components[0].transit_gateway_policy_table_entry.rule_number #=> Integer
+    #   resp.network_insights_analysis.forward_path_components[0].transit_gateway_policy_table_entry.protocol #=> String
+    #   resp.network_insights_analysis.forward_path_components[0].transit_gateway_policy_table_entry.source_cidr #=> String
+    #   resp.network_insights_analysis.forward_path_components[0].transit_gateway_policy_table_entry.destination_cidr #=> String
+    #   resp.network_insights_analysis.forward_path_components[0].transit_gateway_policy_table_entry.source_port_range.from #=> Integer
+    #   resp.network_insights_analysis.forward_path_components[0].transit_gateway_policy_table_entry.source_port_range.to #=> Integer
+    #   resp.network_insights_analysis.forward_path_components[0].transit_gateway_policy_table_entry.destination_port_range.from #=> Integer
+    #   resp.network_insights_analysis.forward_path_components[0].transit_gateway_policy_table_entry.destination_port_range.to #=> Integer
+    #   resp.network_insights_analysis.forward_path_components[0].transit_gateway_policy_table_entry.target_route_table_id #=> String
     #   resp.network_insights_analysis.forward_path_components[0].explanations #=> Array
     #   resp.network_insights_analysis.forward_path_components[0].explanations[0].acl.id #=> String
     #   resp.network_insights_analysis.forward_path_components[0].explanations[0].acl.arn #=> String
@@ -76130,6 +76371,18 @@ module Aws::EC2
     #   resp.network_insights_analysis.forward_path_components[0].explanations[0].transit_gateway_route_table_route.attachment_id #=> String
     #   resp.network_insights_analysis.forward_path_components[0].explanations[0].transit_gateway_route_table_route.resource_id #=> String
     #   resp.network_insights_analysis.forward_path_components[0].explanations[0].transit_gateway_route_table_route.resource_type #=> String
+    #   resp.network_insights_analysis.forward_path_components[0].explanations[0].transit_gateway_policy_table.id #=> String
+    #   resp.network_insights_analysis.forward_path_components[0].explanations[0].transit_gateway_policy_table.arn #=> String
+    #   resp.network_insights_analysis.forward_path_components[0].explanations[0].transit_gateway_policy_table.name #=> String
+    #   resp.network_insights_analysis.forward_path_components[0].explanations[0].transit_gateway_policy_table_entry.rule_number #=> Integer
+    #   resp.network_insights_analysis.forward_path_components[0].explanations[0].transit_gateway_policy_table_entry.protocol #=> String
+    #   resp.network_insights_analysis.forward_path_components[0].explanations[0].transit_gateway_policy_table_entry.source_cidr #=> String
+    #   resp.network_insights_analysis.forward_path_components[0].explanations[0].transit_gateway_policy_table_entry.destination_cidr #=> String
+    #   resp.network_insights_analysis.forward_path_components[0].explanations[0].transit_gateway_policy_table_entry.source_port_range.from #=> Integer
+    #   resp.network_insights_analysis.forward_path_components[0].explanations[0].transit_gateway_policy_table_entry.source_port_range.to #=> Integer
+    #   resp.network_insights_analysis.forward_path_components[0].explanations[0].transit_gateway_policy_table_entry.destination_port_range.from #=> Integer
+    #   resp.network_insights_analysis.forward_path_components[0].explanations[0].transit_gateway_policy_table_entry.destination_port_range.to #=> Integer
+    #   resp.network_insights_analysis.forward_path_components[0].explanations[0].transit_gateway_policy_table_entry.target_route_table_id #=> String
     #   resp.network_insights_analysis.forward_path_components[0].explanations[0].transit_gateway_attachment.id #=> String
     #   resp.network_insights_analysis.forward_path_components[0].explanations[0].transit_gateway_attachment.arn #=> String
     #   resp.network_insights_analysis.forward_path_components[0].explanations[0].transit_gateway_attachment.name #=> String
@@ -76303,6 +76556,15 @@ module Aws::EC2
     #   resp.network_insights_analysis.return_path_components[0].transit_gateway_route_table_route.attachment_id #=> String
     #   resp.network_insights_analysis.return_path_components[0].transit_gateway_route_table_route.resource_id #=> String
     #   resp.network_insights_analysis.return_path_components[0].transit_gateway_route_table_route.resource_type #=> String
+    #   resp.network_insights_analysis.return_path_components[0].transit_gateway_policy_table_entry.rule_number #=> Integer
+    #   resp.network_insights_analysis.return_path_components[0].transit_gateway_policy_table_entry.protocol #=> String
+    #   resp.network_insights_analysis.return_path_components[0].transit_gateway_policy_table_entry.source_cidr #=> String
+    #   resp.network_insights_analysis.return_path_components[0].transit_gateway_policy_table_entry.destination_cidr #=> String
+    #   resp.network_insights_analysis.return_path_components[0].transit_gateway_policy_table_entry.source_port_range.from #=> Integer
+    #   resp.network_insights_analysis.return_path_components[0].transit_gateway_policy_table_entry.source_port_range.to #=> Integer
+    #   resp.network_insights_analysis.return_path_components[0].transit_gateway_policy_table_entry.destination_port_range.from #=> Integer
+    #   resp.network_insights_analysis.return_path_components[0].transit_gateway_policy_table_entry.destination_port_range.to #=> Integer
+    #   resp.network_insights_analysis.return_path_components[0].transit_gateway_policy_table_entry.target_route_table_id #=> String
     #   resp.network_insights_analysis.return_path_components[0].explanations #=> Array
     #   resp.network_insights_analysis.return_path_components[0].explanations[0].acl.id #=> String
     #   resp.network_insights_analysis.return_path_components[0].explanations[0].acl.arn #=> String
@@ -76454,6 +76716,18 @@ module Aws::EC2
     #   resp.network_insights_analysis.return_path_components[0].explanations[0].transit_gateway_route_table_route.attachment_id #=> String
     #   resp.network_insights_analysis.return_path_components[0].explanations[0].transit_gateway_route_table_route.resource_id #=> String
     #   resp.network_insights_analysis.return_path_components[0].explanations[0].transit_gateway_route_table_route.resource_type #=> String
+    #   resp.network_insights_analysis.return_path_components[0].explanations[0].transit_gateway_policy_table.id #=> String
+    #   resp.network_insights_analysis.return_path_components[0].explanations[0].transit_gateway_policy_table.arn #=> String
+    #   resp.network_insights_analysis.return_path_components[0].explanations[0].transit_gateway_policy_table.name #=> String
+    #   resp.network_insights_analysis.return_path_components[0].explanations[0].transit_gateway_policy_table_entry.rule_number #=> Integer
+    #   resp.network_insights_analysis.return_path_components[0].explanations[0].transit_gateway_policy_table_entry.protocol #=> String
+    #   resp.network_insights_analysis.return_path_components[0].explanations[0].transit_gateway_policy_table_entry.source_cidr #=> String
+    #   resp.network_insights_analysis.return_path_components[0].explanations[0].transit_gateway_policy_table_entry.destination_cidr #=> String
+    #   resp.network_insights_analysis.return_path_components[0].explanations[0].transit_gateway_policy_table_entry.source_port_range.from #=> Integer
+    #   resp.network_insights_analysis.return_path_components[0].explanations[0].transit_gateway_policy_table_entry.source_port_range.to #=> Integer
+    #   resp.network_insights_analysis.return_path_components[0].explanations[0].transit_gateway_policy_table_entry.destination_port_range.from #=> Integer
+    #   resp.network_insights_analysis.return_path_components[0].explanations[0].transit_gateway_policy_table_entry.destination_port_range.to #=> Integer
+    #   resp.network_insights_analysis.return_path_components[0].explanations[0].transit_gateway_policy_table_entry.target_route_table_id #=> String
     #   resp.network_insights_analysis.return_path_components[0].explanations[0].transit_gateway_attachment.id #=> String
     #   resp.network_insights_analysis.return_path_components[0].explanations[0].transit_gateway_attachment.arn #=> String
     #   resp.network_insights_analysis.return_path_components[0].explanations[0].transit_gateway_attachment.name #=> String
@@ -76672,6 +76946,18 @@ module Aws::EC2
     #   resp.network_insights_analysis.explanations[0].transit_gateway_route_table_route.attachment_id #=> String
     #   resp.network_insights_analysis.explanations[0].transit_gateway_route_table_route.resource_id #=> String
     #   resp.network_insights_analysis.explanations[0].transit_gateway_route_table_route.resource_type #=> String
+    #   resp.network_insights_analysis.explanations[0].transit_gateway_policy_table.id #=> String
+    #   resp.network_insights_analysis.explanations[0].transit_gateway_policy_table.arn #=> String
+    #   resp.network_insights_analysis.explanations[0].transit_gateway_policy_table.name #=> String
+    #   resp.network_insights_analysis.explanations[0].transit_gateway_policy_table_entry.rule_number #=> Integer
+    #   resp.network_insights_analysis.explanations[0].transit_gateway_policy_table_entry.protocol #=> String
+    #   resp.network_insights_analysis.explanations[0].transit_gateway_policy_table_entry.source_cidr #=> String
+    #   resp.network_insights_analysis.explanations[0].transit_gateway_policy_table_entry.destination_cidr #=> String
+    #   resp.network_insights_analysis.explanations[0].transit_gateway_policy_table_entry.source_port_range.from #=> Integer
+    #   resp.network_insights_analysis.explanations[0].transit_gateway_policy_table_entry.source_port_range.to #=> Integer
+    #   resp.network_insights_analysis.explanations[0].transit_gateway_policy_table_entry.destination_port_range.from #=> Integer
+    #   resp.network_insights_analysis.explanations[0].transit_gateway_policy_table_entry.destination_port_range.to #=> Integer
+    #   resp.network_insights_analysis.explanations[0].transit_gateway_policy_table_entry.target_route_table_id #=> String
     #   resp.network_insights_analysis.explanations[0].transit_gateway_attachment.id #=> String
     #   resp.network_insights_analysis.explanations[0].transit_gateway_attachment.arn #=> String
     #   resp.network_insights_analysis.explanations[0].transit_gateway_attachment.name #=> String
@@ -77938,7 +78224,7 @@ module Aws::EC2
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-ec2'
-      context[:gem_version] = '1.658.0'
+      context[:gem_version] = '1.660.0'
       Seahorse::Client::Request.new(handlers, context)
     end