aws-sdk-ec2 1.659.0 → 1.661.0

data/lib/aws-sdk-ec2/types.rb

@@ -27770,6 +27770,50 @@ module Aws::EC2
     #   * `root-device-type` - The type of the root device volume (`ebs` \|
     #     `instance-store`).
     #
+    #   * `scan-result.critical-fix-available-since` - The earliest date and
+    #     time, in the ISO 8601 format in the UTC time zone
+    #     (YYYY-MM-DDThh:mm:ss.sssZ), at which Amazon Inspector reported a
+    #     fix as available for a `critical` severity finding on the AMI.
+    #
+    #   * `scan-result.finding-scan-date` - The date and time, in the ISO
+    #     8601 format in the UTC time zone (YYYY-MM-DDThh:mm:ss.sssZ), of
+    #     the most recent Amazon Inspector scan of the AMI.
+    #
+    #   * `scan-result.high-fix-available-since` - The earliest date and
+    #     time, in the ISO 8601 format in the UTC time zone
+    #     (YYYY-MM-DDThh:mm:ss.sssZ), at which Amazon Inspector reported a
+    #     fix as available for a `high` severity finding on the AMI.
+    #
+    #   * `scan-result.highest-finding-severity-label` - The highest
+    #     severity among the AMI's Amazon Inspector findings, whether or
+    #     not a fix is available. The valid values are the following Amazon
+    #     Inspector severity levels:
+    #
+    #     * `informational` - CVSS score of 0.
+    #
+    #     * `low` - CVSS score of 0.1 to 3.9.
+    #
+    #     * `medium` - CVSS score of 4.0 to 6.9.
+    #
+    #     * `high` - CVSS score of 7.0 to 8.9.
+    #
+    #     * `critical` - CVSS score of 9.0 to 10.0.
+    #   * `scan-result.informational-fix-available-since` - The earliest
+    #     date and time, in the ISO 8601 format in the UTC time zone
+    #     (YYYY-MM-DDThh:mm:ss.sssZ), at which Amazon Inspector reported a
+    #     fix as available for an `informational` severity finding on the
+    #     AMI.
+    #
+    #   * `scan-result.low-fix-available-since` - The earliest date and
+    #     time, in the ISO 8601 format in the UTC time zone
+    #     (YYYY-MM-DDThh:mm:ss.sssZ), at which Amazon Inspector reported a
+    #     fix as available for a `low` severity finding on the AMI.
+    #
+    #   * `scan-result.medium-fix-available-since` - The earliest date and
+    #     time, in the ISO 8601 format in the UTC time zone
+    #     (YYYY-MM-DDThh:mm:ss.sssZ), at which Amazon Inspector reported a
+    #     fix as available for a `medium` severity finding on the AMI.
+    #
     #   * `source-image-id` - The ID of the source AMI from which the AMI
     #     was created.
     #
@@ -47633,6 +47677,62 @@ module Aws::EC2
       include Aws::Structure
     end
 
+    # @!attribute [rw] image_id
+    #   The ID of the AMI.
+    #   @return [String]
+    #
+    # @!attribute [rw] max_results
+    #   The maximum number of items to return for this request. To get the
+    #   next page of items, make another request with the token returned in
+    #   the output. For more information, see [Pagination][1].
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Query-Requests.html#api-pagination
+    #   @return [Integer]
+    #
+    # @!attribute [rw] next_token
+    #   The token returned from a previous paginated request. Pagination
+    #   continues from the end of the items returned by the previous
+    #   request.
+    #   @return [String]
+    #
+    # @!attribute [rw] dry_run
+    #   Checks whether you have the required permissions for the action,
+    #   without actually making the request, and provides an error response.
+    #   If you have the required permissions, the error response is
+    #   `DryRunOperation`. Otherwise, it is `UnauthorizedOperation`.
+    #   @return [Boolean]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/GetImageFindingsRequest AWS API Documentation
+    #
+    class GetImageFindingsRequest < Struct.new(
+      :image_id,
+      :max_results,
+      :next_token,
+      :dry_run)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] image_findings
+    #   The Amazon Inspector findings for the AMI.
+    #   @return [Array<Types::ImageFinding>]
+    #
+    # @!attribute [rw] next_token
+    #   The token to include in another request to get the next page of
+    #   items. This value is `null` when there are no more items to return.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/GetImageFindingsResult AWS API Documentation
+    #
+    class GetImageFindingsResult < Struct.new(
+      :image_findings,
+      :next_token)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @!attribute [rw] dry_run
     #   Checks whether you have the required permissions for the operation,
     #   without actually making the request, and provides an error response.
@@ -49920,6 +50020,54 @@ module Aws::EC2
       include Aws::Structure
     end
 
+    # @!attribute [rw] transit_gateway_attachment_id
+    #   The ID of the transit gateway attachment.
+    #   @return [String]
+    #
+    # @!attribute [rw] dry_run
+    #   Checks whether you have the required permissions for the action,
+    #   without actually making the request, and provides an error response.
+    #   If you have the required permissions, the error response is
+    #   `DryRunOperation`. Otherwise, it is `UnauthorizedOperation`.
+    #   @return [Boolean]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/GetTransitGatewayAttachmentNatConfigurationRequest AWS API Documentation
+    #
+    class GetTransitGatewayAttachmentNatConfigurationRequest < Struct.new(
+      :transit_gateway_attachment_id,
+      :dry_run)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] transit_gateway_attachment_id
+    #   The ID of the transit gateway attachment.
+    #   @return [String]
+    #
+    # @!attribute [rw] nat_gateway_support
+    #   The state of NAT gateway support for the attachment.
+    #   @return [String]
+    #
+    # @!attribute [rw] nat_system_route_support
+    #   Specifies whether the transit gateway installs routes for the NAT
+    #   CIDRs in the route tables to which the attachment propagates.
+    #   @return [String]
+    #
+    # @!attribute [rw] nat_gateway_rules
+    #   The NAT gateway rules for the attachment.
+    #   @return [Array<Types::TransitGatewayNatRule>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/GetTransitGatewayAttachmentNatConfigurationResult AWS API Documentation
+    #
+    class GetTransitGatewayAttachmentNatConfigurationResult < Struct.new(
+      :transit_gateway_attachment_id,
+      :nat_gateway_support,
+      :nat_system_route_support,
+      :nat_gateway_rules)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @!attribute [rw] transit_gateway_attachment_id
     #   The ID of the attachment.
     #   @return [String]
@@ -51839,6 +51987,15 @@ module Aws::EC2
     #   The watermarks attached to the AMI.
     #   @return [Array<Types::ImageWatermark>]
     #
+    # @!attribute [rw] scan_results
+    #   The Amazon Inspector scan results for the AMI. This information is
+    #   present only for AMIs that Amazon Inspector has scanned.
+    #
+    #   When you share an AMI with other accounts, organizations, or
+    #   organizational units (OUs), or make it public, its scan results are
+    #   available to the accounts that can use the AMI.
+    #   @return [Types::ScanResults]
+    #
     # @!attribute [rw] instance_type_specification
     #   The instance type specification for the AMI, which defines which
     #   instance types are compatible with this image.
@@ -51928,6 +52085,7 @@ module Aws::EC2
       :free_tier_eligible,
       :public_ssm_parameter_name,
       :image_watermarks,
+      :scan_results,
       :instance_type_specification,
       :image_id,
       :image_location,
@@ -52174,6 +52332,13 @@ module Aws::EC2
     #   Maximum: 50 values
     #   @return [Array<Types::ImageWatermarkFilterResponse>]
     #
+    # @!attribute [rw] scan_result_condition
+    #   The Amazon Inspector scan-result criteria that an AMI must meet to
+    #   be allowed. The criteria can limit the highest finding severity, the
+    #   number of days since Amazon Inspector last scanned the AMI, and the
+    #   number of days since Amazon Inspector reported a fix as available.
+    #   @return [Types::ScanResultCondition]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/ImageCriterion AWS API Documentation
     #
     class ImageCriterion < Struct.new(
@@ -52182,7 +52347,8 @@ module Aws::EC2
       :image_names,
       :deprecation_time_condition,
       :creation_date_condition,
-      :image_watermarks)
+      :image_watermarks,
+      :scan_result_condition)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -52284,6 +52450,13 @@ module Aws::EC2
     #   Maximum: 50 values
     #   @return [Array<Types::ImageWatermarkFilterRequest>]
     #
+    # @!attribute [rw] scan_result_condition
+    #   The Amazon Inspector scan-result criteria that an AMI must meet to
+    #   be allowed. The criteria can limit the highest finding severity, the
+    #   number of days since Amazon Inspector last scanned the AMI, and the
+    #   number of days since Amazon Inspector reported a fix as available.
+    #   @return [Types::ScanResultConditionRequest]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/ImageCriterionRequest AWS API Documentation
     #
     class ImageCriterionRequest < Struct.new(
@@ -52292,7 +52465,8 @@ module Aws::EC2
       :image_names,
       :deprecation_time_condition,
       :creation_date_condition,
-      :image_watermarks)
+      :image_watermarks,
+      :scan_result_condition)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -52339,6 +52513,83 @@ module Aws::EC2
       include Aws::Structure
     end
 
+    # Describes an Amazon Inspector vulnerability finding for an AMI.
+    #
+    # @!attribute [rw] fix_available
+    #   Specifies whether a fix is available for the finding. This value is
+    #   `true` when Amazon Inspector reports a full or partial fix for the
+    #   finding.
+    #   @return [Boolean]
+    #
+    # @!attribute [rw] score
+    #   The Amazon Inspector score for the finding.
+    #   @return [Float]
+    #
+    # @!attribute [rw] first_observed_at
+    #   The date and time, in the ISO 8601 format in the UTC time zone
+    #   (YYYY-MM-DDThh:mm:ss.sssZ), when Amazon Inspector first observed the
+    #   finding.
+    #   @return [Time]
+    #
+    # @!attribute [rw] updated_at
+    #   The date and time, in the ISO 8601 format in the UTC time zone
+    #   (YYYY-MM-DDThh:mm:ss.sssZ), when Amazon Inspector last updated the
+    #   finding.
+    #   @return [Time]
+    #
+    # @!attribute [rw] title
+    #   The title of the finding.
+    #   @return [String]
+    #
+    # @!attribute [rw] paths
+    #   The file paths in the AMI that are affected by the finding. Amazon
+    #   EC2 returns up to 10 file paths for each finding.
+    #   @return [Array<String>]
+    #
+    # @!attribute [rw] severity_label
+    #   The severity of the finding.
+    #
+    #   The valid values are the following Amazon Inspector severity levels,
+    #   which correspond to CVSS score ranges:
+    #
+    #   * `informational` - CVSS score of 0.
+    #
+    #   * `low` - CVSS score of 0.1 to 3.9.
+    #
+    #   * `medium` - CVSS score of 4.0 to 6.9.
+    #
+    #   * `high` - CVSS score of 7.0 to 8.9.
+    #
+    #   * `critical` - CVSS score of 9.0 to 10.0.
+    #
+    #   For more information, see [Software package vulnerability
+    #   severity][1] in the *Amazon Inspector User Guide*.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/inspector/latest/user/findings-understanding-severity.html#findings-understanding-package-score
+    #   @return [String]
+    #
+    # @!attribute [rw] snapshot_id
+    #   The ID of the Amazon EBS snapshot of the AMI in which the finding
+    #   was detected.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/ImageFinding AWS API Documentation
+    #
+    class ImageFinding < Struct.new(
+      :fix_available,
+      :score,
+      :first_observed_at,
+      :updated_at,
+      :title,
+      :paths,
+      :severity_label,
+      :snapshot_id)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # Information about the AMI.
     #
     # @!attribute [rw] image_id
@@ -68948,6 +69199,95 @@ module Aws::EC2
       include Aws::Structure
     end
 
+    # @!attribute [rw] transit_gateway_attachment_id
+    #   The ID of the transit gateway attachment.
+    #   @return [String]
+    #
+    # @!attribute [rw] nat_gateway_support
+    #   Specifies whether to enable or disable NAT gateway support for the
+    #   attachment. To enable NAT gateway support, the attachment must have
+    #   at least one NAT gateway rule. You can't modify the NAT
+    #   configuration while NAT gateway support is `enabling` or
+    #   `disabling`. If you omit this parameter, the current value doesn't
+    #   change.
+    #   @return [String]
+    #
+    # @!attribute [rw] nat_system_route_support
+    #   Specifies whether the transit gateway installs routes for the NAT
+    #   CIDRs in the route tables to which the attachment propagates. For
+    #   VPC attachments, the transit gateway always installs these routes.
+    #   You can enable or disable this option only for Amazon Web Services
+    #   Direct Connect gateway attachments and Site-to-Site VPN attachments
+    #   that use dynamic routing. For these attachments, the default is
+    #   `enable`. If you omit this parameter, the current value doesn't
+    #   change.
+    #   @return [String]
+    #
+    # @!attribute [rw] nat_gateway_rules
+    #   The NAT gateway rules for the attachment. The rules that you specify
+    #   replace all existing NAT gateway rules for the attachment. You can
+    #   specify up to 50 rules for an attachment. If you omit this
+    #   parameter, the existing rules don't change. To remove all rules,
+    #   use `ResetNatGatewayRules`.
+    #   @return [Array<Types::TransitGatewayNatRuleRequest>]
+    #
+    # @!attribute [rw] reset_nat_gateway_rules
+    #   Specifies whether to remove all NAT gateway rules from the
+    #   attachment. If you omit this parameter, the transit gateway doesn't
+    #   remove any rules. You can't specify this parameter together with
+    #   `NatGatewayRules`. Because you can't enable NAT gateway support
+    #   without rules, also set `NatGatewaySupport` to `disable` in the same
+    #   request if NAT gateway support is currently enabled.
+    #   @return [Boolean]
+    #
+    # @!attribute [rw] dry_run
+    #   Checks whether you have the required permissions for the action,
+    #   without actually making the request, and provides an error response.
+    #   If you have the required permissions, the error response is
+    #   `DryRunOperation`. Otherwise, it is `UnauthorizedOperation`.
+    #   @return [Boolean]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/ModifyTransitGatewayAttachmentNatConfigurationRequest AWS API Documentation
+    #
+    class ModifyTransitGatewayAttachmentNatConfigurationRequest < Struct.new(
+      :transit_gateway_attachment_id,
+      :nat_gateway_support,
+      :nat_system_route_support,
+      :nat_gateway_rules,
+      :reset_nat_gateway_rules,
+      :dry_run)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] transit_gateway_attachment_id
+    #   The ID of the transit gateway attachment.
+    #   @return [String]
+    #
+    # @!attribute [rw] nat_gateway_support
+    #   The state of NAT gateway support for the attachment.
+    #   @return [String]
+    #
+    # @!attribute [rw] nat_system_route_support
+    #   Specifies whether the transit gateway installs routes for the NAT
+    #   CIDRs in the route tables to which the attachment propagates.
+    #   @return [String]
+    #
+    # @!attribute [rw] nat_gateway_rules
+    #   The NAT gateway rules for the attachment.
+    #   @return [Array<Types::TransitGatewayNatRule>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/ModifyTransitGatewayAttachmentNatConfigurationResult AWS API Documentation
+    #
+    class ModifyTransitGatewayAttachmentNatConfigurationResult < Struct.new(
+      :transit_gateway_attachment_id,
+      :nat_gateway_support,
+      :nat_system_route_support,
+      :nat_gateway_rules)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @!attribute [rw] transit_gateway_metering_policy_id
     #   The ID of the transit gateway metering policy to modify.
     #   @return [String]
@@ -81423,6 +81763,375 @@ module Aws::EC2
       include Aws::Structure
     end
 
+    # The Amazon Inspector scan-result criteria that an AMI must meet to be
+    # allowed. The criteria can limit the highest finding severity. They can
+    # also limit, for each severity, the days since Amazon Inspector
+    # reported a fix as available.
+    #
+    # The severity limit applies to all findings, whether or not a fix is
+    # available. The day limits for each severity apply only to findings
+    # that have a fix available. A scanned AMI that has no fix-available
+    # finding of a given severity meets that severity's day limit. AMIs
+    # that Amazon Inspector has not scanned are not allowed when you specify
+    # this condition.
+    #
+    # @!attribute [rw] max_days_since_last_finding_scan
+    #   The maximum number of days that have elapsed since Amazon Inspector
+    #   last scanned the AMI. For example, a value of `7` allows AMIs that
+    #   were scanned within the last 7 days. AMIs that Amazon Inspector has
+    #   not scanned are not allowed.
+    #
+    #   Constraints: Minimum value of 0. Maximum value of 2147483647.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] maximum_severity_label
+    #   The maximum severity that an AMI's Amazon Inspector findings can
+    #   have for the AMI to be allowed. Findings count whether or not a fix
+    #   is available. For example, a value of `medium` allows AMIs whose
+    #   highest severity is `informational`, `low`, or `medium`.
+    #
+    #   The valid values are the following Amazon Inspector severity levels,
+    #   which correspond to CVSS score ranges:
+    #
+    #   * `informational` - CVSS score of 0.
+    #
+    #   * `low` - CVSS score of 0.1 to 3.9.
+    #
+    #   * `medium` - CVSS score of 4.0 to 6.9.
+    #
+    #   * `high` - CVSS score of 7.0 to 8.9.
+    #
+    #   * `critical` - CVSS score of 9.0 to 10.0.
+    #
+    #   For more information, see [Software package vulnerability
+    #   severity][1] in the *Amazon Inspector User Guide*.
+    #
+    #   A scanned AMI that has no findings meets this limit.
+    #
+    #   AMIs that Amazon Inspector has not scanned are not allowed when you
+    #   specify this condition.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/inspector/latest/user/findings-understanding-severity.html#findings-understanding-package-score
+    #   @return [String]
+    #
+    # @!attribute [rw] max_days_since_informational_fix_available
+    #   The maximum number of days since Amazon Inspector reported a fix as
+    #   available for an `informational` severity finding on the AMI. For
+    #   example, a value of `7` does not allow an AMI if Amazon Inspector
+    #   reported such a fix more than 7 days ago.
+    #
+    #   A scanned AMI that has no `informational` severity finding with a
+    #   fix available meets this limit. AMIs that Amazon Inspector has not
+    #   scanned are not allowed.
+    #
+    #   Constraints: Minimum value of 0. Maximum value of 2147483647.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] max_days_since_low_fix_available
+    #   The maximum number of days since Amazon Inspector reported a fix as
+    #   available for a `low` severity finding on the AMI. For example, a
+    #   value of `7` does not allow an AMI if Amazon Inspector reported such
+    #   a fix more than 7 days ago.
+    #
+    #   A scanned AMI that has no `low` severity finding with a fix
+    #   available meets this limit. AMIs that Amazon Inspector has not
+    #   scanned are not allowed.
+    #
+    #   Constraints: Minimum value of 0. Maximum value of 2147483647.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] max_days_since_medium_fix_available
+    #   The maximum number of days since Amazon Inspector reported a fix as
+    #   available for a `medium` severity finding on the AMI. For example, a
+    #   value of `7` does not allow an AMI if Amazon Inspector reported such
+    #   a fix more than 7 days ago.
+    #
+    #   A scanned AMI that has no `medium` severity finding with a fix
+    #   available meets this limit. AMIs that Amazon Inspector has not
+    #   scanned are not allowed.
+    #
+    #   Constraints: Minimum value of 0. Maximum value of 2147483647.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] max_days_since_high_fix_available
+    #   The maximum number of days since Amazon Inspector reported a fix as
+    #   available for a `high` severity finding on the AMI. For example, a
+    #   value of `7` does not allow an AMI if Amazon Inspector reported such
+    #   a fix more than 7 days ago.
+    #
+    #   A scanned AMI that has no `high` severity finding with a fix
+    #   available meets this limit. AMIs that Amazon Inspector has not
+    #   scanned are not allowed.
+    #
+    #   Constraints: Minimum value of 0. Maximum value of 2147483647.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] max_days_since_critical_fix_available
+    #   The maximum number of days since Amazon Inspector reported a fix as
+    #   available for a `critical` severity finding on the AMI. For example,
+    #   a value of `7` does not allow an AMI if Amazon Inspector reported
+    #   such a fix more than 7 days ago.
+    #
+    #   A scanned AMI that has no `critical` severity finding with a fix
+    #   available meets this limit. AMIs that Amazon Inspector has not
+    #   scanned are not allowed.
+    #
+    #   Constraints: Minimum value of 0. Maximum value of 2147483647.
+    #   @return [Integer]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/ScanResultCondition AWS API Documentation
+    #
+    class ScanResultCondition < Struct.new(
+      :max_days_since_last_finding_scan,
+      :maximum_severity_label,
+      :max_days_since_informational_fix_available,
+      :max_days_since_low_fix_available,
+      :max_days_since_medium_fix_available,
+      :max_days_since_high_fix_available,
+      :max_days_since_critical_fix_available)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # The Amazon Inspector scan-result criteria that an AMI must meet to be
+    # allowed. The criteria can limit the highest finding severity. They can
+    # also limit, for each severity, the days since Amazon Inspector
+    # reported a fix as available.
+    #
+    # The severity limit applies to all findings, whether or not a fix is
+    # available. The day limits for each severity apply only to findings
+    # that have a fix available. A scanned AMI that has no fix-available
+    # finding of a given severity meets that severity's day limit. AMIs
+    # that Amazon Inspector has not scanned are not allowed when you specify
+    # this condition.
+    #
+    # @!attribute [rw] max_days_since_last_finding_scan
+    #   The maximum number of days that have elapsed since Amazon Inspector
+    #   last scanned the AMI. For example, a value of `7` allows AMIs that
+    #   were scanned within the last 7 days. AMIs that Amazon Inspector has
+    #   not scanned are not allowed.
+    #
+    #   Constraints: Minimum value of 0. Maximum value of 2147483647.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] maximum_severity_label
+    #   The maximum severity that an AMI's Amazon Inspector findings can
+    #   have for the AMI to be allowed. Findings count whether or not a fix
+    #   is available. For example, a value of `medium` allows AMIs whose
+    #   highest severity is `informational`, `low`, or `medium`.
+    #
+    #   The valid values are the following Amazon Inspector severity levels,
+    #   which correspond to CVSS score ranges:
+    #
+    #   * `informational` - CVSS score of 0.
+    #
+    #   * `low` - CVSS score of 0.1 to 3.9.
+    #
+    #   * `medium` - CVSS score of 4.0 to 6.9.
+    #
+    #   * `high` - CVSS score of 7.0 to 8.9.
+    #
+    #   * `critical` - CVSS score of 9.0 to 10.0.
+    #
+    #   For more information, see [Software package vulnerability
+    #   severity][1] in the *Amazon Inspector User Guide*.
+    #
+    #   A scanned AMI that has no findings meets this limit.
+    #
+    #   AMIs that Amazon Inspector has not scanned are not allowed when you
+    #   specify this condition.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/inspector/latest/user/findings-understanding-severity.html#findings-understanding-package-score
+    #   @return [String]
+    #
+    # @!attribute [rw] max_days_since_informational_fix_available
+    #   The maximum number of days since Amazon Inspector reported a fix as
+    #   available for an `informational` severity finding on the AMI. For
+    #   example, a value of `7` does not allow an AMI if Amazon Inspector
+    #   reported such a fix more than 7 days ago.
+    #
+    #   A scanned AMI that has no `informational` severity finding with a
+    #   fix available meets this limit. AMIs that Amazon Inspector has not
+    #   scanned are not allowed.
+    #
+    #   Constraints: Minimum value of 0. Maximum value of 2147483647.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] max_days_since_low_fix_available
+    #   The maximum number of days since Amazon Inspector reported a fix as
+    #   available for a `low` severity finding on the AMI. For example, a
+    #   value of `7` does not allow an AMI if Amazon Inspector reported such
+    #   a fix more than 7 days ago.
+    #
+    #   A scanned AMI that has no `low` severity finding with a fix
+    #   available meets this limit. AMIs that Amazon Inspector has not
+    #   scanned are not allowed.
+    #
+    #   Constraints: Minimum value of 0. Maximum value of 2147483647.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] max_days_since_medium_fix_available
+    #   The maximum number of days since Amazon Inspector reported a fix as
+    #   available for a `medium` severity finding on the AMI. For example, a
+    #   value of `7` does not allow an AMI if Amazon Inspector reported such
+    #   a fix more than 7 days ago.
+    #
+    #   A scanned AMI that has no `medium` severity finding with a fix
+    #   available meets this limit. AMIs that Amazon Inspector has not
+    #   scanned are not allowed.
+    #
+    #   Constraints: Minimum value of 0. Maximum value of 2147483647.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] max_days_since_high_fix_available
+    #   The maximum number of days since Amazon Inspector reported a fix as
+    #   available for a `high` severity finding on the AMI. For example, a
+    #   value of `7` does not allow an AMI if Amazon Inspector reported such
+    #   a fix more than 7 days ago.
+    #
+    #   A scanned AMI that has no `high` severity finding with a fix
+    #   available meets this limit. AMIs that Amazon Inspector has not
+    #   scanned are not allowed.
+    #
+    #   Constraints: Minimum value of 0. Maximum value of 2147483647.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] max_days_since_critical_fix_available
+    #   The maximum number of days since Amazon Inspector reported a fix as
+    #   available for a `critical` severity finding on the AMI. For example,
+    #   a value of `7` does not allow an AMI if Amazon Inspector reported
+    #   such a fix more than 7 days ago.
+    #
+    #   A scanned AMI that has no `critical` severity finding with a fix
+    #   available meets this limit. AMIs that Amazon Inspector has not
+    #   scanned are not allowed.
+    #
+    #   Constraints: Minimum value of 0. Maximum value of 2147483647.
+    #   @return [Integer]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/ScanResultConditionRequest AWS API Documentation
+    #
+    class ScanResultConditionRequest < Struct.new(
+      :max_days_since_last_finding_scan,
+      :maximum_severity_label,
+      :max_days_since_informational_fix_available,
+      :max_days_since_low_fix_available,
+      :max_days_since_medium_fix_available,
+      :max_days_since_high_fix_available,
+      :max_days_since_critical_fix_available)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # The Amazon Inspector scan results for an AMI. This information is
+    # present only for AMIs that Amazon Inspector has scanned.
+    #
+    # When you share an AMI with other accounts, organizations, or
+    # organizational units (OUs), or make it public, its scan results are
+    # available to the accounts that can use the AMI.
+    #
+    # The fix-available dates are specific to the AMI. Each date reflects
+    # when a fix became available for a finding on that AMI, not when the
+    # vendor released the fix. As a result, a date can be later than the
+    # vendor's release date, and AMIs with the same vulnerability can have
+    # different dates.
+    #
+    # @!attribute [rw] highest_finding_severity_label
+    #   The highest severity among the AMI's Amazon Inspector findings,
+    #   whether or not a fix is available.
+    #
+    #   The valid values are the following Amazon Inspector severity levels,
+    #   which correspond to CVSS score ranges:
+    #
+    #   * `informational` - CVSS score of 0.
+    #
+    #   * `low` - CVSS score of 0.1 to 3.9.
+    #
+    #   * `medium` - CVSS score of 4.0 to 6.9.
+    #
+    #   * `high` - CVSS score of 7.0 to 8.9.
+    #
+    #   * `critical` - CVSS score of 9.0 to 10.0.
+    #
+    #   For more information, see [Software package vulnerability
+    #   severity][1] in the *Amazon Inspector User Guide*.
+    #
+    #   This value is present only if the AMI has at least one finding.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/inspector/latest/user/findings-understanding-severity.html#findings-understanding-package-score
+    #   @return [String]
+    #
+    # @!attribute [rw] finding_scan_date
+    #   The date and time, in the ISO 8601 format in the UTC time zone
+    #   (YYYY-MM-DDThh:mm:ss.sssZ), of the most recent Amazon Inspector scan
+    #   of the AMI.
+    #   @return [Time]
+    #
+    # @!attribute [rw] informational_fix_available_since
+    #   The earliest date and time, in the ISO 8601 format in the UTC time
+    #   zone (YYYY-MM-DDThh:mm:ss.sssZ), at which Amazon Inspector reported
+    #   a fix as available for an `informational` severity finding on the
+    #   AMI. This value is present only if the AMI has at least one
+    #   `informational` severity finding with a fix available. Amazon
+    #   Inspector recomputes this value on each scan.
+    #   @return [Time]
+    #
+    # @!attribute [rw] low_fix_available_since
+    #   The earliest date and time, in the ISO 8601 format in the UTC time
+    #   zone (YYYY-MM-DDThh:mm:ss.sssZ), at which Amazon Inspector reported
+    #   a fix as available for a `low` severity finding on the AMI. This
+    #   value is present only if the AMI has at least one `low` severity
+    #   finding with a fix available. Amazon Inspector recomputes this value
+    #   on each scan.
+    #   @return [Time]
+    #
+    # @!attribute [rw] medium_fix_available_since
+    #   The earliest date and time, in the ISO 8601 format in the UTC time
+    #   zone (YYYY-MM-DDThh:mm:ss.sssZ), at which Amazon Inspector reported
+    #   a fix as available for a `medium` severity finding on the AMI. This
+    #   value is present only if the AMI has at least one `medium` severity
+    #   finding with a fix available. Amazon Inspector recomputes this value
+    #   on each scan.
+    #   @return [Time]
+    #
+    # @!attribute [rw] high_fix_available_since
+    #   The earliest date and time, in the ISO 8601 format in the UTC time
+    #   zone (YYYY-MM-DDThh:mm:ss.sssZ), at which Amazon Inspector reported
+    #   a fix as available for a `high` severity finding on the AMI. This
+    #   value is present only if the AMI has at least one `high` severity
+    #   finding with a fix available. Amazon Inspector recomputes this value
+    #   on each scan.
+    #   @return [Time]
+    #
+    # @!attribute [rw] critical_fix_available_since
+    #   The earliest date and time, in the ISO 8601 format in the UTC time
+    #   zone (YYYY-MM-DDThh:mm:ss.sssZ), at which Amazon Inspector reported
+    #   a fix as available for a `critical` severity finding on the AMI.
+    #   This value is present only if the AMI has at least one `critical`
+    #   severity finding with a fix available. Amazon Inspector recomputes
+    #   this value on each scan.
+    #   @return [Time]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/ScanResults AWS API Documentation
+    #
+    class ScanResults < Struct.new(
+      :highest_finding_severity_label,
+      :finding_scan_date,
+      :informational_fix_available_since,
+      :low_fix_available_since,
+      :medium_fix_available_since,
+      :high_fix_available_since,
+      :critical_fix_available_since)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # Describes a Scheduled Instance.
     #
     # @!attribute [rw] availability_zone
@@ -87408,6 +88117,11 @@ module Aws::EC2
     #   The tags for the attachment.
     #   @return [Array<Types::Tag>]
     #
+    # @!attribute [rw] nat_gateway_support
+    #   The state of NAT gateway support for the attachment. Only the owner
+    #   of the transit gateway receives this parameter.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/TransitGatewayAttachment AWS API Documentation
     #
     class TransitGatewayAttachment < Struct.new(
@@ -87420,7 +88134,8 @@ module Aws::EC2
       :state,
       :association,
       :creation_time,
-      :tags)
+      :tags,
+      :nat_gateway_support)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -88208,6 +88923,80 @@ module Aws::EC2
       include Aws::Structure
     end
 
+    # Contains information about a NAT gateway rule for a transit gateway
+    # attachment, including the rule number, the source CIDR block, the
+    # translated CIDR block, and the state of the rule.
+    #
+    # @!attribute [rw] rule_number
+    #   The rule number.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] match_source_cidr
+    #   The IPv4 CIDR block of the source addresses to translate.
+    #   @return [String]
+    #
+    # @!attribute [rw] nat_cidr
+    #   The IPv4 CIDR block that the transit gateway translates the source
+    #   addresses to.
+    #   @return [String]
+    #
+    # @!attribute [rw] state
+    #   The state of the NAT gateway rule. The possible values are:
+    #
+    #   * `pending` - The transit gateway is applying a change to the rule.
+    #
+    #   * `activated` - The rule is in effect because NAT gateway support is
+    #     enabled for the attachment.
+    #
+    #   * `deactivated` - The rule isn't in effect because NAT gateway
+    #     support is disabled for the attachment.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/TransitGatewayNatRule AWS API Documentation
+    #
+    class TransitGatewayNatRule < Struct.new(
+      :rule_number,
+      :match_source_cidr,
+      :nat_cidr,
+      :state)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # Describes a NAT gateway rule to apply to a transit gateway attachment.
+    # A NAT gateway rule translates source addresses in the
+    # `MatchSourceCidr` range to the corresponding addresses in the
+    # `NatCidr` range.
+    #
+    # @!attribute [rw] rule_number
+    #   The rule number. Valid values are 1 to 32766. Each rule number must
+    #   be unique within the request.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] match_source_cidr
+    #   The IPv4 CIDR block of the source addresses to translate. The CIDR
+    #   block can't overlap the multicast range (`224.0.0.0/4`) or the
+    #   link-local range (`169.254.0.0/16`).
+    #   @return [String]
+    #
+    # @!attribute [rw] nat_cidr
+    #   The IPv4 CIDR block to translate the source addresses to. The CIDR
+    #   block must be in a private (RFC 1918) or shared address space (RFC
+    #   6598) range, and must have the same prefix length as
+    #   `MatchSourceCidr`. The CIDR blocks in the rules for an attachment
+    #   can't overlap each other.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/TransitGatewayNatRuleRequest AWS API Documentation
+    #
+    class TransitGatewayNatRuleRequest < Struct.new(
+      :rule_number,
+      :match_source_cidr,
+      :nat_cidr)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # Describes the options for a transit gateway.
     #
     # @!attribute [rw] amazon_side_asn