aws-sdk-ec2 1.95.0 → 1.96.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 93fbafbe6814325a7f1de4a40b34182d205857d6
-  data.tar.gz: e24a0f7a97e214684abf39a603064364b25c8268
+  metadata.gz: c206903e64660ba1f2e7377aaf155d15e729bacf
+  data.tar.gz: 82380efbe0f30c88654fbdba8422880382d1bcc5
 SHA512:
-  metadata.gz: 625293b9902243140cf5dfb33ee983e2374f81aaf1edf3dfeb904380b74cb6ca31d1f557a37cdeaf9d8c3d68959c6dadaeb273ad529af619b65830b74a531e32
-  data.tar.gz: 0dbcf516888ad985518e7174cccb2826286d4e347cda94c895f0d64e30b9b46fdc7a4ca44bdfceb0649cc57821df62e790cbf514b286ece1d80658222228aadf
+  metadata.gz: e57e5789a28046f7d5892bbcf6386de59b6833c6abd6fc0b431fc634877d07f032f273f137812e5dc1151888c3f13541a89b6db2b1f4b8c31264d4bf612fb504
+  data.tar.gz: 9b543f189f10c1c0e4f38ffb9508a4a6ea2b1d85868343661489c9888011ed079a21c378c8b9a194c2b0cc2696ab79d2c247cca1ef361ca50f0932b27b090795

data/lib/aws-sdk-ec2.rb

@@ -65,6 +65,6 @@ require_relative 'aws-sdk-ec2/customizations'
 # @service
 module Aws::EC2
 
-  GEM_VERSION = '1.95.0'
+  GEM_VERSION = '1.96.0'
 
 end

data/lib/aws-sdk-ec2/client.rb

@@ -705,7 +705,7 @@ module Aws::EC2
     #     quantity: 1, # required
     #     tag_specifications: [
     #       {
-    #         resource_type: "client-vpn-endpoint", # accepts client-vpn-endpoint, customer-gateway, dedicated-host, dhcp-options, elastic-ip, fleet, fpga-image, host-reservation, image, instance, internet-gateway, launch-template, natgateway, network-acl, network-interface, reserved-instances, route-table, security-group, snapshot, spot-instances-request, subnet, transit-gateway, transit-gateway-attachment, transit-gateway-route-table, volume, vpc, vpc-peering-connection, vpn-connection, vpn-gateway
+    #         resource_type: "client-vpn-endpoint", # accepts client-vpn-endpoint, customer-gateway, dedicated-host, dhcp-options, elastic-ip, fleet, fpga-image, host-reservation, image, instance, internet-gateway, launch-template, natgateway, network-acl, network-interface, reserved-instances, route-table, security-group, snapshot, spot-instances-request, subnet, traffic-mirror-filter, traffic-mirror-session, traffic-mirror-target, transit-gateway, transit-gateway-attachment, transit-gateway-route-table, volume, vpc, vpc-peering-connection, vpn-connection, vpn-gateway
     #         tags: [
     #           {
     #             key: "String",
@@ -1141,7 +1141,7 @@ module Aws::EC2
     #
     #
     #
-    # [1]: https://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_DHCP_Options.html
+    # [1]: https://docs.aws.amazon.com/vpc/latest/userguide/VPC_DHCP_Options.html
     #
     # @option params [required, String] :dhcp_options_id
     #   The ID of the DHCP options set, or `default` to associate no DHCP
@@ -1273,7 +1273,7 @@ module Aws::EC2
     #
     #
     #
-    # [1]: https://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Route_Tables.html
+    # [1]: https://docs.aws.amazon.com/vpc/latest/userguide/VPC_Route_Tables.html
     #
     # @option params [Boolean] :dry_run
     #   Checks whether you have the required permissions for the action,
@@ -1422,7 +1422,7 @@ module Aws::EC2
     #
     #
     #
-    # [1]: https://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Subnets.html#VPC_Sizing
+    # [1]: https://docs.aws.amazon.com/vpc/latest/userguide/VPC_Subnets.html#VPC_Sizing
     #
     # @option params [Boolean] :amazon_provided_ipv_6_cidr_block
     #   Requests an Amazon-provided IPv6 CIDR block with a /56 prefix length
@@ -1534,7 +1534,7 @@ module Aws::EC2
     #
     #
     #
-    # [1]: https://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/
+    # [1]: https://docs.aws.amazon.com/vpc/latest/userguide/
     #
     # @option params [Boolean] :dry_run
     #   Checks whether you have the required permissions for the action,
@@ -3340,7 +3340,7 @@ module Aws::EC2
     #     instance_match_criteria: "open", # accepts open, targeted
     #     tag_specifications: [
     #       {
-    #         resource_type: "client-vpn-endpoint", # accepts client-vpn-endpoint, customer-gateway, dedicated-host, dhcp-options, elastic-ip, fleet, fpga-image, host-reservation, image, instance, internet-gateway, launch-template, natgateway, network-acl, network-interface, reserved-instances, route-table, security-group, snapshot, spot-instances-request, subnet, transit-gateway, transit-gateway-attachment, transit-gateway-route-table, volume, vpc, vpc-peering-connection, vpn-connection, vpn-gateway
+    #         resource_type: "client-vpn-endpoint", # accepts client-vpn-endpoint, customer-gateway, dedicated-host, dhcp-options, elastic-ip, fleet, fpga-image, host-reservation, image, instance, internet-gateway, launch-template, natgateway, network-acl, network-interface, reserved-instances, route-table, security-group, snapshot, spot-instances-request, subnet, traffic-mirror-filter, traffic-mirror-session, traffic-mirror-target, transit-gateway, transit-gateway-attachment, transit-gateway-route-table, volume, vpc, vpc-peering-connection, vpn-connection, vpn-gateway
     #         tags: [
     #           {
     #             key: "String",
@@ -3490,7 +3490,7 @@ module Aws::EC2
     #     client_token: "String",
     #     tag_specifications: [
     #       {
-    #         resource_type: "client-vpn-endpoint", # accepts client-vpn-endpoint, customer-gateway, dedicated-host, dhcp-options, elastic-ip, fleet, fpga-image, host-reservation, image, instance, internet-gateway, launch-template, natgateway, network-acl, network-interface, reserved-instances, route-table, security-group, snapshot, spot-instances-request, subnet, transit-gateway, transit-gateway-attachment, transit-gateway-route-table, volume, vpc, vpc-peering-connection, vpn-connection, vpn-gateway
+    #         resource_type: "client-vpn-endpoint", # accepts client-vpn-endpoint, customer-gateway, dedicated-host, dhcp-options, elastic-ip, fleet, fpga-image, host-reservation, image, instance, internet-gateway, launch-template, natgateway, network-acl, network-interface, reserved-instances, route-table, security-group, snapshot, spot-instances-request, subnet, traffic-mirror-filter, traffic-mirror-session, traffic-mirror-target, transit-gateway, transit-gateway-attachment, transit-gateway-route-table, volume, vpc, vpc-peering-connection, vpn-connection, vpn-gateway
     #         tags: [
     #           {
     #             key: "String",
@@ -3710,7 +3710,7 @@ module Aws::EC2
     #
     #
     #
-    # [1]: https://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/default-vpc.html#create-default-subnet
+    # [1]: https://docs.aws.amazon.com/vpc/latest/userguide/default-vpc.html#create-default-subnet
     #
     # @option params [required, String] :availability_zone
     #   The Availability Zone in which to create the default subnet.
@@ -3781,7 +3781,7 @@ module Aws::EC2
     #
     #
     #
-    # [1]: https://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/default-vpc.html
+    # [1]: https://docs.aws.amazon.com/vpc/latest/userguide/default-vpc.html
     # [2]: http://aws.amazon.com/vpc/faqs/#Default_VPCs
     #
     # @option params [Boolean] :dry_run
@@ -3880,7 +3880,7 @@ module Aws::EC2
     #
     #
     # [1]: http://www.ietf.org/rfc/rfc2132.txt
-    # [2]: https://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_DHCP_Options.html
+    # [2]: https://docs.aws.amazon.com/vpc/latest/userguide/VPC_DHCP_Options.html
     #
     # @option params [required, Array<Types::NewDhcpConfiguration>] :dhcp_configurations
     #   A DHCP configuration option.
@@ -4178,7 +4178,7 @@ module Aws::EC2
     #     replace_unhealthy_instances: false,
     #     tag_specifications: [
     #       {
-    #         resource_type: "client-vpn-endpoint", # accepts client-vpn-endpoint, customer-gateway, dedicated-host, dhcp-options, elastic-ip, fleet, fpga-image, host-reservation, image, instance, internet-gateway, launch-template, natgateway, network-acl, network-interface, reserved-instances, route-table, security-group, snapshot, spot-instances-request, subnet, transit-gateway, transit-gateway-attachment, transit-gateway-route-table, volume, vpc, vpc-peering-connection, vpn-connection, vpn-gateway
+    #         resource_type: "client-vpn-endpoint", # accepts client-vpn-endpoint, customer-gateway, dedicated-host, dhcp-options, elastic-ip, fleet, fpga-image, host-reservation, image, instance, internet-gateway, launch-template, natgateway, network-acl, network-interface, reserved-instances, route-table, security-group, snapshot, spot-instances-request, subnet, traffic-mirror-filter, traffic-mirror-session, traffic-mirror-target, transit-gateway, transit-gateway-attachment, transit-gateway-route-table, volume, vpc, vpc-peering-connection, vpn-connection, vpn-gateway
     #         tags: [
     #           {
     #             key: "String",
@@ -4251,8 +4251,8 @@ module Aws::EC2
     #
     #
     #
-    # [1]: https://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/flow-logs.html#flow-log-records
-    # [2]: https://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/flow-logs.html
+    # [1]: https://docs.aws.amazon.com/vpc/latest/userguide/flow-logs.html#flow-log-records
+    # [2]: https://docs.aws.amazon.com/vpc/latest/userguide/flow-logs.html
     #
     # @option params [Boolean] :dry_run
     #   Checks whether you have the required permissions for the action,
@@ -4637,7 +4637,7 @@ module Aws::EC2
     #
     #
     #
-    # [1]: https://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/
+    # [1]: https://docs.aws.amazon.com/vpc/latest/userguide/
     #
     # @option params [Boolean] :dry_run
     #   Checks whether you have the required permissions for the action,
@@ -4918,7 +4918,7 @@ module Aws::EC2
     #       user_data: "String",
     #       tag_specifications: [
     #         {
-    #           resource_type: "client-vpn-endpoint", # accepts client-vpn-endpoint, customer-gateway, dedicated-host, dhcp-options, elastic-ip, fleet, fpga-image, host-reservation, image, instance, internet-gateway, launch-template, natgateway, network-acl, network-interface, reserved-instances, route-table, security-group, snapshot, spot-instances-request, subnet, transit-gateway, transit-gateway-attachment, transit-gateway-route-table, volume, vpc, vpc-peering-connection, vpn-connection, vpn-gateway
+    #           resource_type: "client-vpn-endpoint", # accepts client-vpn-endpoint, customer-gateway, dedicated-host, dhcp-options, elastic-ip, fleet, fpga-image, host-reservation, image, instance, internet-gateway, launch-template, natgateway, network-acl, network-interface, reserved-instances, route-table, security-group, snapshot, spot-instances-request, subnet, traffic-mirror-filter, traffic-mirror-session, traffic-mirror-target, transit-gateway, transit-gateway-attachment, transit-gateway-route-table, volume, vpc, vpc-peering-connection, vpn-connection, vpn-gateway
     #           tags: [
     #             {
     #               key: "String",
@@ -5165,7 +5165,7 @@ module Aws::EC2
     #       user_data: "String",
     #       tag_specifications: [
     #         {
-    #           resource_type: "client-vpn-endpoint", # accepts client-vpn-endpoint, customer-gateway, dedicated-host, dhcp-options, elastic-ip, fleet, fpga-image, host-reservation, image, instance, internet-gateway, launch-template, natgateway, network-acl, network-interface, reserved-instances, route-table, security-group, snapshot, spot-instances-request, subnet, transit-gateway, transit-gateway-attachment, transit-gateway-route-table, volume, vpc, vpc-peering-connection, vpn-connection, vpn-gateway
+    #           resource_type: "client-vpn-endpoint", # accepts client-vpn-endpoint, customer-gateway, dedicated-host, dhcp-options, elastic-ip, fleet, fpga-image, host-reservation, image, instance, internet-gateway, launch-template, natgateway, network-acl, network-interface, reserved-instances, route-table, security-group, snapshot, spot-instances-request, subnet, traffic-mirror-filter, traffic-mirror-session, traffic-mirror-target, transit-gateway, transit-gateway-attachment, transit-gateway-route-table, volume, vpc, vpc-peering-connection, vpn-connection, vpn-gateway
     #           tags: [
     #             {
     #               key: "String",
@@ -5277,7 +5277,7 @@ module Aws::EC2
     #   resp.launch_template_version.launch_template_data.instance_initiated_shutdown_behavior #=> String, one of "stop", "terminate"
     #   resp.launch_template_version.launch_template_data.user_data #=> String
     #   resp.launch_template_version.launch_template_data.tag_specifications #=> Array
-    #   resp.launch_template_version.launch_template_data.tag_specifications[0].resource_type #=> String, one of "client-vpn-endpoint", "customer-gateway", "dedicated-host", "dhcp-options", "elastic-ip", "fleet", "fpga-image", "host-reservation", "image", "instance", "internet-gateway", "launch-template", "natgateway", "network-acl", "network-interface", "reserved-instances", "route-table", "security-group", "snapshot", "spot-instances-request", "subnet", "transit-gateway", "transit-gateway-attachment", "transit-gateway-route-table", "volume", "vpc", "vpc-peering-connection", "vpn-connection", "vpn-gateway"
+    #   resp.launch_template_version.launch_template_data.tag_specifications[0].resource_type #=> String, one of "client-vpn-endpoint", "customer-gateway", "dedicated-host", "dhcp-options", "elastic-ip", "fleet", "fpga-image", "host-reservation", "image", "instance", "internet-gateway", "launch-template", "natgateway", "network-acl", "network-interface", "reserved-instances", "route-table", "security-group", "snapshot", "spot-instances-request", "subnet", "traffic-mirror-filter", "traffic-mirror-session", "traffic-mirror-target", "transit-gateway", "transit-gateway-attachment", "transit-gateway-route-table", "volume", "vpc", "vpc-peering-connection", "vpn-connection", "vpn-gateway"
     #   resp.launch_template_version.launch_template_data.tag_specifications[0].tags #=> Array
     #   resp.launch_template_version.launch_template_data.tag_specifications[0].tags[0].key #=> String
     #   resp.launch_template_version.launch_template_data.tag_specifications[0].tags[0].value #=> String
@@ -5323,7 +5323,7 @@ module Aws::EC2
     #
     #
     #
-    # [1]: https://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/vpc-nat-gateway.html
+    # [1]: https://docs.aws.amazon.com/vpc/latest/userguide/vpc-nat-gateway.html
     #
     # @option params [required, String] :allocation_id
     #   The allocation ID of an Elastic IP address to associate with the NAT
@@ -5427,7 +5427,7 @@ module Aws::EC2
     #
     #
     #
-    # [1]: https://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_ACLs.html
+    # [1]: https://docs.aws.amazon.com/vpc/latest/userguide/VPC_ACLs.html
     #
     # @option params [Boolean] :dry_run
     #   Checks whether you have the required permissions for the action,
@@ -5542,7 +5542,7 @@ module Aws::EC2
     #
     #
     #
-    # [1]: https://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_ACLs.html
+    # [1]: https://docs.aws.amazon.com/vpc/latest/userguide/VPC_ACLs.html
     #
     # @option params [String] :cidr_block
     #   The IPv4 network range to allow or deny, in CIDR notation (for example
@@ -6105,7 +6105,7 @@ module Aws::EC2
     #
     #
     #
-    # [1]: https://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Route_Tables.html
+    # [1]: https://docs.aws.amazon.com/vpc/latest/userguide/VPC_Route_Tables.html
     #
     # @option params [String] :destination_cidr_block
     #   The IPv4 CIDR address block used for the destination match. Routing
@@ -6201,7 +6201,7 @@ module Aws::EC2
     #
     #
     #
-    # [1]: https://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Route_Tables.html
+    # [1]: https://docs.aws.amazon.com/vpc/latest/userguide/VPC_Route_Tables.html
     #
     # @option params [Boolean] :dry_run
     #   Checks whether you have the required permissions for the action,
@@ -6499,7 +6499,7 @@ module Aws::EC2
     #     volume_id: "String", # required
     #     tag_specifications: [
     #       {
-    #         resource_type: "client-vpn-endpoint", # accepts client-vpn-endpoint, customer-gateway, dedicated-host, dhcp-options, elastic-ip, fleet, fpga-image, host-reservation, image, instance, internet-gateway, launch-template, natgateway, network-acl, network-interface, reserved-instances, route-table, security-group, snapshot, spot-instances-request, subnet, transit-gateway, transit-gateway-attachment, transit-gateway-route-table, volume, vpc, vpc-peering-connection, vpn-connection, vpn-gateway
+    #         resource_type: "client-vpn-endpoint", # accepts client-vpn-endpoint, customer-gateway, dedicated-host, dhcp-options, elastic-ip, fleet, fpga-image, host-reservation, image, instance, internet-gateway, launch-template, natgateway, network-acl, network-interface, reserved-instances, route-table, security-group, snapshot, spot-instances-request, subnet, traffic-mirror-filter, traffic-mirror-session, traffic-mirror-target, transit-gateway, transit-gateway-attachment, transit-gateway-route-table, volume, vpc, vpc-peering-connection, vpn-connection, vpn-gateway
     #         tags: [
     #           {
     #             key: "String",
@@ -6578,7 +6578,7 @@ module Aws::EC2
     #     },
     #     tag_specifications: [
     #       {
-    #         resource_type: "client-vpn-endpoint", # accepts client-vpn-endpoint, customer-gateway, dedicated-host, dhcp-options, elastic-ip, fleet, fpga-image, host-reservation, image, instance, internet-gateway, launch-template, natgateway, network-acl, network-interface, reserved-instances, route-table, security-group, snapshot, spot-instances-request, subnet, transit-gateway, transit-gateway-attachment, transit-gateway-route-table, volume, vpc, vpc-peering-connection, vpn-connection, vpn-gateway
+    #         resource_type: "client-vpn-endpoint", # accepts client-vpn-endpoint, customer-gateway, dedicated-host, dhcp-options, elastic-ip, fleet, fpga-image, host-reservation, image, instance, internet-gateway, launch-template, natgateway, network-acl, network-interface, reserved-instances, route-table, security-group, snapshot, spot-instances-request, subnet, traffic-mirror-filter, traffic-mirror-session, traffic-mirror-target, transit-gateway, transit-gateway-attachment, transit-gateway-route-table, volume, vpc, vpc-peering-connection, vpn-connection, vpn-gateway
     #         tags: [
     #           {
     #             key: "String",
@@ -6719,7 +6719,7 @@ module Aws::EC2
     #
     #
     #
-    # [1]: https://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Subnets.html
+    # [1]: https://docs.aws.amazon.com/vpc/latest/userguide/VPC_Subnets.html
     #
     # @option params [String] :availability_zone
     #   The Availability Zone for the subnet.
@@ -6893,6 +6893,452 @@ module Aws::EC2
       req.send_request(options)
     end
 
+    # Creates a Traffic Mirror filter.
+    #
+    # A Traffic Mirror filter is a set of rules that defines the traffic to
+    # mirror.
+    #
+    # By default, no traffic is mirrored. To mirror traffic, use
+    # CreateTrafficMirrorFilterRule to add Traffic Mirror rules to the
+    # filter. The rules you add define what traffic gets mirrored. You can
+    # also use ModifyTrafficMirrorFilterNetworkServices to mirror supported
+    # network services.
+    #
+    # @option params [String] :description
+    #   The description of the Traffic Mirror filter.
+    #
+    # @option params [Array<Types::TagSpecification>] :tag_specifications
+    #   The tags to assign to a Traffic Mirror filter.
+    #
+    # @option params [Boolean] :dry_run
+    #   Checks whether you have the required permissions for the action,
+    #   without actually making the request, and provides an error response.
+    #   If you have the required permissions, the error response is
+    #   `DryRunOperation`. Otherwise, it is `UnauthorizedOperation`.
+    #
+    # @option params [String] :client_token
+    #   Unique, case-sensitive identifier that you provide to ensure the
+    #   idempotency of the request. For more information, see [How to Ensure
+    #   Idempotency][1].
+    #
+    #   **A suitable default value is auto-generated.** You should normally
+    #   not need to pass this option.**
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Run_Instance_Idempotency.html
+    #
+    # @return [Types::CreateTrafficMirrorFilterResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::CreateTrafficMirrorFilterResult#traffic_mirror_filter #traffic_mirror_filter} => Types::TrafficMirrorFilter
+    #   * {Types::CreateTrafficMirrorFilterResult#client_token #client_token} => String
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.create_traffic_mirror_filter({
+    #     description: "String",
+    #     tag_specifications: [
+    #       {
+    #         resource_type: "client-vpn-endpoint", # accepts client-vpn-endpoint, customer-gateway, dedicated-host, dhcp-options, elastic-ip, fleet, fpga-image, host-reservation, image, instance, internet-gateway, launch-template, natgateway, network-acl, network-interface, reserved-instances, route-table, security-group, snapshot, spot-instances-request, subnet, traffic-mirror-filter, traffic-mirror-session, traffic-mirror-target, transit-gateway, transit-gateway-attachment, transit-gateway-route-table, volume, vpc, vpc-peering-connection, vpn-connection, vpn-gateway
+    #         tags: [
+    #           {
+    #             key: "String",
+    #             value: "String",
+    #           },
+    #         ],
+    #       },
+    #     ],
+    #     dry_run: false,
+    #     client_token: "String",
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.traffic_mirror_filter.traffic_mirror_filter_id #=> String
+    #   resp.traffic_mirror_filter.ingress_filter_rules #=> Array
+    #   resp.traffic_mirror_filter.ingress_filter_rules[0].traffic_mirror_filter_rule_id #=> String
+    #   resp.traffic_mirror_filter.ingress_filter_rules[0].traffic_mirror_filter_id #=> String
+    #   resp.traffic_mirror_filter.ingress_filter_rules[0].traffic_direction #=> String, one of "ingress", "egress"
+    #   resp.traffic_mirror_filter.ingress_filter_rules[0].rule_number #=> Integer
+    #   resp.traffic_mirror_filter.ingress_filter_rules[0].rule_action #=> String, one of "accept", "reject"
+    #   resp.traffic_mirror_filter.ingress_filter_rules[0].protocol #=> Integer
+    #   resp.traffic_mirror_filter.ingress_filter_rules[0].destination_port_range.from_port #=> Integer
+    #   resp.traffic_mirror_filter.ingress_filter_rules[0].destination_port_range.to_port #=> Integer
+    #   resp.traffic_mirror_filter.ingress_filter_rules[0].source_port_range.from_port #=> Integer
+    #   resp.traffic_mirror_filter.ingress_filter_rules[0].source_port_range.to_port #=> Integer
+    #   resp.traffic_mirror_filter.ingress_filter_rules[0].destination_cidr_block #=> String
+    #   resp.traffic_mirror_filter.ingress_filter_rules[0].source_cidr_block #=> String
+    #   resp.traffic_mirror_filter.ingress_filter_rules[0].description #=> String
+    #   resp.traffic_mirror_filter.egress_filter_rules #=> Array
+    #   resp.traffic_mirror_filter.egress_filter_rules[0].traffic_mirror_filter_rule_id #=> String
+    #   resp.traffic_mirror_filter.egress_filter_rules[0].traffic_mirror_filter_id #=> String
+    #   resp.traffic_mirror_filter.egress_filter_rules[0].traffic_direction #=> String, one of "ingress", "egress"
+    #   resp.traffic_mirror_filter.egress_filter_rules[0].rule_number #=> Integer
+    #   resp.traffic_mirror_filter.egress_filter_rules[0].rule_action #=> String, one of "accept", "reject"
+    #   resp.traffic_mirror_filter.egress_filter_rules[0].protocol #=> Integer
+    #   resp.traffic_mirror_filter.egress_filter_rules[0].destination_port_range.from_port #=> Integer
+    #   resp.traffic_mirror_filter.egress_filter_rules[0].destination_port_range.to_port #=> Integer
+    #   resp.traffic_mirror_filter.egress_filter_rules[0].source_port_range.from_port #=> Integer
+    #   resp.traffic_mirror_filter.egress_filter_rules[0].source_port_range.to_port #=> Integer
+    #   resp.traffic_mirror_filter.egress_filter_rules[0].destination_cidr_block #=> String
+    #   resp.traffic_mirror_filter.egress_filter_rules[0].source_cidr_block #=> String
+    #   resp.traffic_mirror_filter.egress_filter_rules[0].description #=> String
+    #   resp.traffic_mirror_filter.network_services #=> Array
+    #   resp.traffic_mirror_filter.network_services[0] #=> String, one of "amazon-dns"
+    #   resp.traffic_mirror_filter.description #=> String
+    #   resp.traffic_mirror_filter.tags #=> Array
+    #   resp.traffic_mirror_filter.tags[0].key #=> String
+    #   resp.traffic_mirror_filter.tags[0].value #=> String
+    #   resp.client_token #=> String
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/CreateTrafficMirrorFilter AWS API Documentation
+    #
+    # @overload create_traffic_mirror_filter(params = {})
+    # @param [Hash] params ({})
+    def create_traffic_mirror_filter(params = {}, options = {})
+      req = build_request(:create_traffic_mirror_filter, params)
+      req.send_request(options)
+    end
+
+    # Creates a Traffic Mirror rule.
+    #
+    # A Traffic Mirror rule defines the Traffic Mirror source traffic to
+    # mirror.
+    #
+    # You need the Traffic Mirror filter ID when you create the rule.
+    #
+    # @option params [required, String] :traffic_mirror_filter_id
+    #   The ID of the filter that this rule is associated with.
+    #
+    # @option params [required, String] :traffic_direction
+    #   The type of traffic (`ingress` \| `egress`).
+    #
+    # @option params [required, Integer] :rule_number
+    #   The number of the Traffic Mirror rule. This number must be unique for
+    #   each Traffic Mirror rule in a given direction. The rules are processed
+    #   in ascending order by rule number.
+    #
+    # @option params [required, String] :rule_action
+    #   The action to take (`accept` \| `reject`) on the filtered traffic.
+    #
+    # @option params [Types::TrafficMirrorPortRangeRequest] :destination_port_range
+    #   The destination port range.
+    #
+    # @option params [Types::TrafficMirrorPortRangeRequest] :source_port_range
+    #   The source port range.
+    #
+    # @option params [Integer] :protocol
+    #   The protocol, for example UDP, to assign to the Traffic Mirror rule.
+    #
+    #   For information about the protocol value, see [Protocol Numbers][1] on
+    #   the Internet Assigned Numbers Authority (IANA) website.
+    #
+    #
+    #
+    #   [1]: https://www.iana.org/assignments/protocol-numbers/protocol-numbers.xhtml
+    #
+    # @option params [required, String] :destination_cidr_block
+    #   The destination CIDR block to assign to the Traffic Mirror rule.
+    #
+    # @option params [required, String] :source_cidr_block
+    #   The source CIDR block to assign to the Traffic Mirror rule.
+    #
+    # @option params [String] :description
+    #   The description of the Traffic Mirror rule.
+    #
+    # @option params [Boolean] :dry_run
+    #   Checks whether you have the required permissions for the action,
+    #   without actually making the request, and provides an error response.
+    #   If you have the required permissions, the error response is
+    #   `DryRunOperation`. Otherwise, it is `UnauthorizedOperation`.
+    #
+    # @option params [String] :client_token
+    #   Unique, case-sensitive identifier that you provide to ensure the
+    #   idempotency of the request. For more information, see [How to Ensure
+    #   Idempotency][1].
+    #
+    #   **A suitable default value is auto-generated.** You should normally
+    #   not need to pass this option.**
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Run_Instance_Idempotency.html
+    #
+    # @return [Types::CreateTrafficMirrorFilterRuleResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::CreateTrafficMirrorFilterRuleResult#traffic_mirror_filter_rule #traffic_mirror_filter_rule} => Types::TrafficMirrorFilterRule
+    #   * {Types::CreateTrafficMirrorFilterRuleResult#client_token #client_token} => String
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.create_traffic_mirror_filter_rule({
+    #     traffic_mirror_filter_id: "String", # required
+    #     traffic_direction: "ingress", # required, accepts ingress, egress
+    #     rule_number: 1, # required
+    #     rule_action: "accept", # required, accepts accept, reject
+    #     destination_port_range: {
+    #       from_port: 1,
+    #       to_port: 1,
+    #     },
+    #     source_port_range: {
+    #       from_port: 1,
+    #       to_port: 1,
+    #     },
+    #     protocol: 1,
+    #     destination_cidr_block: "String", # required
+    #     source_cidr_block: "String", # required
+    #     description: "String",
+    #     dry_run: false,
+    #     client_token: "String",
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.traffic_mirror_filter_rule.traffic_mirror_filter_rule_id #=> String
+    #   resp.traffic_mirror_filter_rule.traffic_mirror_filter_id #=> String
+    #   resp.traffic_mirror_filter_rule.traffic_direction #=> String, one of "ingress", "egress"
+    #   resp.traffic_mirror_filter_rule.rule_number #=> Integer
+    #   resp.traffic_mirror_filter_rule.rule_action #=> String, one of "accept", "reject"
+    #   resp.traffic_mirror_filter_rule.protocol #=> Integer
+    #   resp.traffic_mirror_filter_rule.destination_port_range.from_port #=> Integer
+    #   resp.traffic_mirror_filter_rule.destination_port_range.to_port #=> Integer
+    #   resp.traffic_mirror_filter_rule.source_port_range.from_port #=> Integer
+    #   resp.traffic_mirror_filter_rule.source_port_range.to_port #=> Integer
+    #   resp.traffic_mirror_filter_rule.destination_cidr_block #=> String
+    #   resp.traffic_mirror_filter_rule.source_cidr_block #=> String
+    #   resp.traffic_mirror_filter_rule.description #=> String
+    #   resp.client_token #=> String
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/CreateTrafficMirrorFilterRule AWS API Documentation
+    #
+    # @overload create_traffic_mirror_filter_rule(params = {})
+    # @param [Hash] params ({})
+    def create_traffic_mirror_filter_rule(params = {}, options = {})
+      req = build_request(:create_traffic_mirror_filter_rule, params)
+      req.send_request(options)
+    end
+
+    # Creates a Traffic Mirror session.
+    #
+    # A Traffic Mirror session actively copies packets from a Traffic Mirror
+    # source to a Traffic Mirror target. Create a filter, and then assign it
+    # to the session to define a subset of the traffic to mirror, for
+    # example all TCP traffic.
+    #
+    # The Traffic Mirror source and the Traffic Mirror target (monitoring
+    # appliances) can be in the same VPC, or in a different VPC connected
+    # via VPC peering or a transit gateway.
+    #
+    # By default, no traffic is mirrored. Use CreateTrafficMirrorFilter to
+    # create filter rules that specify the traffic to mirror.
+    #
+    # @option params [required, String] :network_interface_id
+    #   The ID of the source network interface.
+    #
+    # @option params [required, String] :traffic_mirror_target_id
+    #   The ID of the Traffic Mirror target.
+    #
+    # @option params [required, String] :traffic_mirror_filter_id
+    #   The ID of the Traffic Mirror filter.
+    #
+    # @option params [Integer] :packet_length
+    #   The number of bytes in each packet to mirror. These are bytes after
+    #   the VXLAN header. Do not specify this parameter when you want to
+    #   mirror the entire packet. To mirror a subset of the packet, set this
+    #   to the length (in bytes) that you want to mirror. For example, if you
+    #   set this value to 1network0, then the first 100 bytes that meet the
+    #   filter criteria are copied to the target.
+    #
+    #   If you do not want to mirror the entire packet, use the `PacketLength`
+    #   parameter to specify the number of bytes in each packet to mirror.
+    #
+    # @option params [required, Integer] :session_number
+    #   The session number determines the order in which sessions are
+    #   evaluated when an interface is used by multiple sessions. The first
+    #   session with a matching filter is the one that mirrors the packets.
+    #
+    #   Valid values are 1-32766.
+    #
+    # @option params [Integer] :virtual_network_id
+    #   The VXLAN ID for the Traffic Mirror session. For more information
+    #   about the VXLAN protocol, see [RFC 7348][1]. If you do not specify a
+    #   `VirtualNetworkId`, an account-wide unique id is chosen at random.
+    #
+    #
+    #
+    #   [1]: https://tools.ietf.org/html/rfc7348
+    #
+    # @option params [String] :description
+    #   The description of the Traffic Mirror session.
+    #
+    # @option params [Array<Types::TagSpecification>] :tag_specifications
+    #   The tags to assign to a Traffic Mirror session.
+    #
+    # @option params [Boolean] :dry_run
+    #   Checks whether you have the required permissions for the action,
+    #   without actually making the request, and provides an error response.
+    #   If you have the required permissions, the error response is
+    #   `DryRunOperation`. Otherwise, it is `UnauthorizedOperation`.
+    #
+    # @option params [String] :client_token
+    #   Unique, case-sensitive identifier that you provide to ensure the
+    #   idempotency of the request. For more information, see [How to Ensure
+    #   Idempotency][1].
+    #
+    #   **A suitable default value is auto-generated.** You should normally
+    #   not need to pass this option.**
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Run_Instance_Idempotency.html
+    #
+    # @return [Types::CreateTrafficMirrorSessionResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::CreateTrafficMirrorSessionResult#traffic_mirror_session #traffic_mirror_session} => Types::TrafficMirrorSession
+    #   * {Types::CreateTrafficMirrorSessionResult#client_token #client_token} => String
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.create_traffic_mirror_session({
+    #     network_interface_id: "String", # required
+    #     traffic_mirror_target_id: "String", # required
+    #     traffic_mirror_filter_id: "String", # required
+    #     packet_length: 1,
+    #     session_number: 1, # required
+    #     virtual_network_id: 1,
+    #     description: "String",
+    #     tag_specifications: [
+    #       {
+    #         resource_type: "client-vpn-endpoint", # accepts client-vpn-endpoint, customer-gateway, dedicated-host, dhcp-options, elastic-ip, fleet, fpga-image, host-reservation, image, instance, internet-gateway, launch-template, natgateway, network-acl, network-interface, reserved-instances, route-table, security-group, snapshot, spot-instances-request, subnet, traffic-mirror-filter, traffic-mirror-session, traffic-mirror-target, transit-gateway, transit-gateway-attachment, transit-gateway-route-table, volume, vpc, vpc-peering-connection, vpn-connection, vpn-gateway
+    #         tags: [
+    #           {
+    #             key: "String",
+    #             value: "String",
+    #           },
+    #         ],
+    #       },
+    #     ],
+    #     dry_run: false,
+    #     client_token: "String",
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.traffic_mirror_session.traffic_mirror_session_id #=> String
+    #   resp.traffic_mirror_session.traffic_mirror_target_id #=> String
+    #   resp.traffic_mirror_session.traffic_mirror_filter_id #=> String
+    #   resp.traffic_mirror_session.network_interface_id #=> String
+    #   resp.traffic_mirror_session.owner_id #=> String
+    #   resp.traffic_mirror_session.packet_length #=> Integer
+    #   resp.traffic_mirror_session.session_number #=> Integer
+    #   resp.traffic_mirror_session.virtual_network_id #=> Integer
+    #   resp.traffic_mirror_session.description #=> String
+    #   resp.traffic_mirror_session.tags #=> Array
+    #   resp.traffic_mirror_session.tags[0].key #=> String
+    #   resp.traffic_mirror_session.tags[0].value #=> String
+    #   resp.client_token #=> String
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/CreateTrafficMirrorSession AWS API Documentation
+    #
+    # @overload create_traffic_mirror_session(params = {})
+    # @param [Hash] params ({})
+    def create_traffic_mirror_session(params = {}, options = {})
+      req = build_request(:create_traffic_mirror_session, params)
+      req.send_request(options)
+    end
+
+    # Creates a target for your Traffic Mirror session.
+    #
+    # A Traffic Mirror target is the destination for mirrored traffic. The
+    # Traffic Mirror source and the Traffic Mirror target (monitoring
+    # appliances) can be in the same VPC, or in different VPCs connected via
+    # VPC peering or a transit gateway.
+    #
+    # A Traffic Mirror target can be a network interface, or a Network Load
+    # Balancer.
+    #
+    # To use the target in a Traffic Mirror session, use
+    # CreateTrafficMirrorSession.
+    #
+    # @option params [String] :network_interface_id
+    #   The network interface ID that is associated with the target.
+    #
+    # @option params [String] :network_load_balancer_arn
+    #   The Amazon Resource Name (ARN) of the Network Load Balancer that is
+    #   associated with the target.
+    #
+    # @option params [String] :description
+    #   The description of the Traffic Mirror target.
+    #
+    # @option params [Array<Types::TagSpecification>] :tag_specifications
+    #   The tags to assign to the Traffic Mirror target.
+    #
+    # @option params [Boolean] :dry_run
+    #   Checks whether you have the required permissions for the action,
+    #   without actually making the request, and provides an error response.
+    #   If you have the required permissions, the error response is
+    #   `DryRunOperation`. Otherwise, it is `UnauthorizedOperation`.
+    #
+    # @option params [String] :client_token
+    #   Unique, case-sensitive identifier that you provide to ensure the
+    #   idempotency of the request. For more information, see [How to Ensure
+    #   Idempotency][1].
+    #
+    #   **A suitable default value is auto-generated.** You should normally
+    #   not need to pass this option.**
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Run_Instance_Idempotency.html
+    #
+    # @return [Types::CreateTrafficMirrorTargetResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::CreateTrafficMirrorTargetResult#traffic_mirror_target #traffic_mirror_target} => Types::TrafficMirrorTarget
+    #   * {Types::CreateTrafficMirrorTargetResult#client_token #client_token} => String
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.create_traffic_mirror_target({
+    #     network_interface_id: "String",
+    #     network_load_balancer_arn: "String",
+    #     description: "String",
+    #     tag_specifications: [
+    #       {
+    #         resource_type: "client-vpn-endpoint", # accepts client-vpn-endpoint, customer-gateway, dedicated-host, dhcp-options, elastic-ip, fleet, fpga-image, host-reservation, image, instance, internet-gateway, launch-template, natgateway, network-acl, network-interface, reserved-instances, route-table, security-group, snapshot, spot-instances-request, subnet, traffic-mirror-filter, traffic-mirror-session, traffic-mirror-target, transit-gateway, transit-gateway-attachment, transit-gateway-route-table, volume, vpc, vpc-peering-connection, vpn-connection, vpn-gateway
+    #         tags: [
+    #           {
+    #             key: "String",
+    #             value: "String",
+    #           },
+    #         ],
+    #       },
+    #     ],
+    #     dry_run: false,
+    #     client_token: "String",
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.traffic_mirror_target.traffic_mirror_target_id #=> String
+    #   resp.traffic_mirror_target.network_interface_id #=> String
+    #   resp.traffic_mirror_target.network_load_balancer_arn #=> String
+    #   resp.traffic_mirror_target.type #=> String, one of "network-interface", "network-load-balancer"
+    #   resp.traffic_mirror_target.description #=> String
+    #   resp.traffic_mirror_target.owner_id #=> String
+    #   resp.traffic_mirror_target.tags #=> Array
+    #   resp.traffic_mirror_target.tags[0].key #=> String
+    #   resp.traffic_mirror_target.tags[0].value #=> String
+    #   resp.client_token #=> String
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/CreateTrafficMirrorTarget AWS API Documentation
+    #
+    # @overload create_traffic_mirror_target(params = {})
+    # @param [Hash] params ({})
+    def create_traffic_mirror_target(params = {}, options = {})
+      req = build_request(:create_traffic_mirror_target, params)
+      req.send_request(options)
+    end
+
     # Creates a transit gateway.
     #
     # You can use a transit gateway to interconnect your virtual private
@@ -6950,7 +7396,7 @@ module Aws::EC2
     #     },
     #     tag_specifications: [
     #       {
-    #         resource_type: "client-vpn-endpoint", # accepts client-vpn-endpoint, customer-gateway, dedicated-host, dhcp-options, elastic-ip, fleet, fpga-image, host-reservation, image, instance, internet-gateway, launch-template, natgateway, network-acl, network-interface, reserved-instances, route-table, security-group, snapshot, spot-instances-request, subnet, transit-gateway, transit-gateway-attachment, transit-gateway-route-table, volume, vpc, vpc-peering-connection, vpn-connection, vpn-gateway
+    #         resource_type: "client-vpn-endpoint", # accepts client-vpn-endpoint, customer-gateway, dedicated-host, dhcp-options, elastic-ip, fleet, fpga-image, host-reservation, image, instance, internet-gateway, launch-template, natgateway, network-acl, network-interface, reserved-instances, route-table, security-group, snapshot, spot-instances-request, subnet, traffic-mirror-filter, traffic-mirror-session, traffic-mirror-target, transit-gateway, transit-gateway-attachment, transit-gateway-route-table, volume, vpc, vpc-peering-connection, vpn-connection, vpn-gateway
     #         tags: [
     #           {
     #             key: "String",
@@ -7069,7 +7515,7 @@ module Aws::EC2
     #     transit_gateway_id: "String", # required
     #     tag_specifications: [
     #       {
-    #         resource_type: "client-vpn-endpoint", # accepts client-vpn-endpoint, customer-gateway, dedicated-host, dhcp-options, elastic-ip, fleet, fpga-image, host-reservation, image, instance, internet-gateway, launch-template, natgateway, network-acl, network-interface, reserved-instances, route-table, security-group, snapshot, spot-instances-request, subnet, transit-gateway, transit-gateway-attachment, transit-gateway-route-table, volume, vpc, vpc-peering-connection, vpn-connection, vpn-gateway
+    #         resource_type: "client-vpn-endpoint", # accepts client-vpn-endpoint, customer-gateway, dedicated-host, dhcp-options, elastic-ip, fleet, fpga-image, host-reservation, image, instance, internet-gateway, launch-template, natgateway, network-acl, network-interface, reserved-instances, route-table, security-group, snapshot, spot-instances-request, subnet, traffic-mirror-filter, traffic-mirror-session, traffic-mirror-target, transit-gateway, transit-gateway-attachment, transit-gateway-route-table, volume, vpc, vpc-peering-connection, vpn-connection, vpn-gateway
     #         tags: [
     #           {
     #             key: "String",
@@ -7151,7 +7597,7 @@ module Aws::EC2
     #     },
     #     tag_specifications: [
     #       {
-    #         resource_type: "client-vpn-endpoint", # accepts client-vpn-endpoint, customer-gateway, dedicated-host, dhcp-options, elastic-ip, fleet, fpga-image, host-reservation, image, instance, internet-gateway, launch-template, natgateway, network-acl, network-interface, reserved-instances, route-table, security-group, snapshot, spot-instances-request, subnet, transit-gateway, transit-gateway-attachment, transit-gateway-route-table, volume, vpc, vpc-peering-connection, vpn-connection, vpn-gateway
+    #         resource_type: "client-vpn-endpoint", # accepts client-vpn-endpoint, customer-gateway, dedicated-host, dhcp-options, elastic-ip, fleet, fpga-image, host-reservation, image, instance, internet-gateway, launch-template, natgateway, network-acl, network-interface, reserved-instances, route-table, security-group, snapshot, spot-instances-request, subnet, traffic-mirror-filter, traffic-mirror-session, traffic-mirror-target, transit-gateway, transit-gateway-attachment, transit-gateway-route-table, volume, vpc, vpc-peering-connection, vpn-connection, vpn-gateway
     #         tags: [
     #           {
     #             key: "String",
@@ -7396,7 +7842,7 @@ module Aws::EC2
     #     dry_run: false,
     #     tag_specifications: [
     #       {
-    #         resource_type: "client-vpn-endpoint", # accepts client-vpn-endpoint, customer-gateway, dedicated-host, dhcp-options, elastic-ip, fleet, fpga-image, host-reservation, image, instance, internet-gateway, launch-template, natgateway, network-acl, network-interface, reserved-instances, route-table, security-group, snapshot, spot-instances-request, subnet, transit-gateway, transit-gateway-attachment, transit-gateway-route-table, volume, vpc, vpc-peering-connection, vpn-connection, vpn-gateway
+    #         resource_type: "client-vpn-endpoint", # accepts client-vpn-endpoint, customer-gateway, dedicated-host, dhcp-options, elastic-ip, fleet, fpga-image, host-reservation, image, instance, internet-gateway, launch-template, natgateway, network-acl, network-interface, reserved-instances, route-table, security-group, snapshot, spot-instances-request, subnet, traffic-mirror-filter, traffic-mirror-session, traffic-mirror-target, transit-gateway, transit-gateway-attachment, transit-gateway-route-table, volume, vpc, vpc-peering-connection, vpn-connection, vpn-gateway
     #         tags: [
     #           {
     #             key: "String",
@@ -7462,8 +7908,8 @@ module Aws::EC2
     #
     #
     #
-    # [1]: https://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Subnets.html
-    # [2]: https://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_DHCP_Options.html
+    # [1]: https://docs.aws.amazon.com/vpc/latest/userguide/VPC_Subnets.html
+    # [2]: https://docs.aws.amazon.com/vpc/latest/userguide/VPC_DHCP_Options.html
     # [3]: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/dedicated-instance.html
     #
     # @option params [required, String] :cidr_block
@@ -7580,7 +8026,7 @@ module Aws::EC2
     #
     #
     #
-    # [1]: https://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/vpc-endpoints.html
+    # [1]: https://docs.aws.amazon.com/vpc/latest/userguide/vpc-endpoints.html
     #
     # @option params [Boolean] :dry_run
     #   Checks whether you have the required permissions for the action,
@@ -7790,7 +8236,7 @@ module Aws::EC2
     #
     #
     #
-    # [1]: https://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/endpoint-service.html
+    # [1]: https://docs.aws.amazon.com/vpc/latest/userguide/endpoint-service.html
     #
     # @option params [Boolean] :dry_run
     #   Checks whether you have the required permissions for the action,
@@ -7882,7 +8328,7 @@ module Aws::EC2
     #
     #
     #
-    # [1]: https://docs.aws.amazon.com/AmazonVPC/latest/PeeringGuide/vpc-peering-basics.html#vpc-peering-limitations
+    # [1]: https://docs.aws.amazon.com/vpc/latest/peering/vpc-peering-basics.html#vpc-peering-limitations
     #
     # @option params [Boolean] :dry_run
     #   Checks whether you have the required permissions for the action,
@@ -7965,8 +8411,8 @@ module Aws::EC2
     end
 
     # Creates a VPN connection between an existing virtual private gateway
-    # and a VPN customer gateway. The supported connection types are
-    # `ipsec.1` and `ipsec.2`.
+    # and a VPN customer gateway. The supported connection types is
+    # `ipsec.1`.
     #
     # The response includes information that you need to give to your
     # network administrator to configure your customer gateway.
@@ -7993,7 +8439,7 @@ module Aws::EC2
     #   The ID of the customer gateway.
     #
     # @option params [required, String] :type
-    #   The type of VPN connection (`ipsec.1` \| `ipsec.2`).
+    #   The type of VPN connection (`ipsec.1`).
     #
     # @option params [String] :vpn_gateway_id
     #   The ID of the virtual private gateway. If you specify a virtual
@@ -9351,10 +9797,13 @@ module Aws::EC2
       req.send_request(options)
     end
 
-    # Deletes the specified transit gateway.
+    # Deletes the specified Traffic Mirror filter.
     #
-    # @option params [required, String] :transit_gateway_id
-    #   The ID of the transit gateway.
+    # You cannot delete a Traffic Mirror filter that is in use by a Traffic
+    # Mirror session.
+    #
+    # @option params [required, String] :traffic_mirror_filter_id
+    #   The ID of the Traffic Mirror filter.
     #
     # @option params [Boolean] :dry_run
     #   Checks whether you have the required permissions for the action,
@@ -9362,28 +9811,171 @@ module Aws::EC2
     #   If you have the required permissions, the error response is
     #   `DryRunOperation`. Otherwise, it is `UnauthorizedOperation`.
     #
-    # @return [Types::DeleteTransitGatewayResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    # @return [Types::DeleteTrafficMirrorFilterResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
-    #   * {Types::DeleteTransitGatewayResult#transit_gateway #transit_gateway} => Types::TransitGateway
+    #   * {Types::DeleteTrafficMirrorFilterResult#traffic_mirror_filter_id #traffic_mirror_filter_id} => String
     #
     # @example Request syntax with placeholder values
     #
-    #   resp = client.delete_transit_gateway({
-    #     transit_gateway_id: "String", # required
+    #   resp = client.delete_traffic_mirror_filter({
+    #     traffic_mirror_filter_id: "String", # required
     #     dry_run: false,
     #   })
     #
     # @example Response structure
     #
-    #   resp.transit_gateway.transit_gateway_id #=> String
-    #   resp.transit_gateway.transit_gateway_arn #=> String
-    #   resp.transit_gateway.state #=> String, one of "pending", "available", "modifying", "deleting", "deleted"
-    #   resp.transit_gateway.owner_id #=> String
-    #   resp.transit_gateway.description #=> String
-    #   resp.transit_gateway.creation_time #=> Time
-    #   resp.transit_gateway.options.amazon_side_asn #=> Integer
-    #   resp.transit_gateway.options.auto_accept_shared_attachments #=> String, one of "enable", "disable"
-    #   resp.transit_gateway.options.default_route_table_association #=> String, one of "enable", "disable"
+    #   resp.traffic_mirror_filter_id #=> String
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/DeleteTrafficMirrorFilter AWS API Documentation
+    #
+    # @overload delete_traffic_mirror_filter(params = {})
+    # @param [Hash] params ({})
+    def delete_traffic_mirror_filter(params = {}, options = {})
+      req = build_request(:delete_traffic_mirror_filter, params)
+      req.send_request(options)
+    end
+
+    # Deletes the specified Traffic Mirror rule.
+    #
+    # @option params [required, String] :traffic_mirror_filter_rule_id
+    #   The ID of the Traffic Mirror rule.
+    #
+    # @option params [Boolean] :dry_run
+    #   Checks whether you have the required permissions for the action,
+    #   without actually making the request, and provides an error response.
+    #   If you have the required permissions, the error response is
+    #   `DryRunOperation`. Otherwise, it is `UnauthorizedOperation`.
+    #
+    # @return [Types::DeleteTrafficMirrorFilterRuleResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::DeleteTrafficMirrorFilterRuleResult#traffic_mirror_filter_rule_id #traffic_mirror_filter_rule_id} => String
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.delete_traffic_mirror_filter_rule({
+    #     traffic_mirror_filter_rule_id: "String", # required
+    #     dry_run: false,
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.traffic_mirror_filter_rule_id #=> String
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/DeleteTrafficMirrorFilterRule AWS API Documentation
+    #
+    # @overload delete_traffic_mirror_filter_rule(params = {})
+    # @param [Hash] params ({})
+    def delete_traffic_mirror_filter_rule(params = {}, options = {})
+      req = build_request(:delete_traffic_mirror_filter_rule, params)
+      req.send_request(options)
+    end
+
+    # Deletes the specified Traffic Mirror session.
+    #
+    # @option params [required, String] :traffic_mirror_session_id
+    #   The ID of the Traffic Mirror session.
+    #
+    # @option params [Boolean] :dry_run
+    #   Checks whether you have the required permissions for the action,
+    #   without actually making the request, and provides an error response.
+    #   If you have the required permissions, the error response is
+    #   `DryRunOperation`. Otherwise, it is `UnauthorizedOperation`.
+    #
+    # @return [Types::DeleteTrafficMirrorSessionResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::DeleteTrafficMirrorSessionResult#traffic_mirror_session_id #traffic_mirror_session_id} => String
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.delete_traffic_mirror_session({
+    #     traffic_mirror_session_id: "String", # required
+    #     dry_run: false,
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.traffic_mirror_session_id #=> String
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/DeleteTrafficMirrorSession AWS API Documentation
+    #
+    # @overload delete_traffic_mirror_session(params = {})
+    # @param [Hash] params ({})
+    def delete_traffic_mirror_session(params = {}, options = {})
+      req = build_request(:delete_traffic_mirror_session, params)
+      req.send_request(options)
+    end
+
+    # Deletes the specified Traffic Mirror target.
+    #
+    # You cannot delete a Traffic Mirror target that is in use by a Traffic
+    # Mirror session.
+    #
+    # @option params [required, String] :traffic_mirror_target_id
+    #   The ID of the Traffic Mirror target.
+    #
+    # @option params [Boolean] :dry_run
+    #   Checks whether you have the required permissions for the action,
+    #   without actually making the request, and provides an error response.
+    #   If you have the required permissions, the error response is
+    #   `DryRunOperation`. Otherwise, it is `UnauthorizedOperation`.
+    #
+    # @return [Types::DeleteTrafficMirrorTargetResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::DeleteTrafficMirrorTargetResult#traffic_mirror_target_id #traffic_mirror_target_id} => String
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.delete_traffic_mirror_target({
+    #     traffic_mirror_target_id: "String", # required
+    #     dry_run: false,
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.traffic_mirror_target_id #=> String
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/DeleteTrafficMirrorTarget AWS API Documentation
+    #
+    # @overload delete_traffic_mirror_target(params = {})
+    # @param [Hash] params ({})
+    def delete_traffic_mirror_target(params = {}, options = {})
+      req = build_request(:delete_traffic_mirror_target, params)
+      req.send_request(options)
+    end
+
+    # Deletes the specified transit gateway.
+    #
+    # @option params [required, String] :transit_gateway_id
+    #   The ID of the transit gateway.
+    #
+    # @option params [Boolean] :dry_run
+    #   Checks whether you have the required permissions for the action,
+    #   without actually making the request, and provides an error response.
+    #   If you have the required permissions, the error response is
+    #   `DryRunOperation`. Otherwise, it is `UnauthorizedOperation`.
+    #
+    # @return [Types::DeleteTransitGatewayResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::DeleteTransitGatewayResult#transit_gateway #transit_gateway} => Types::TransitGateway
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.delete_transit_gateway({
+    #     transit_gateway_id: "String", # required
+    #     dry_run: false,
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.transit_gateway.transit_gateway_id #=> String
+    #   resp.transit_gateway.transit_gateway_arn #=> String
+    #   resp.transit_gateway.state #=> String, one of "pending", "available", "modifying", "deleting", "deleted"
+    #   resp.transit_gateway.owner_id #=> String
+    #   resp.transit_gateway.description #=> String
+    #   resp.transit_gateway.creation_time #=> Time
+    #   resp.transit_gateway.options.amazon_side_asn #=> Integer
+    #   resp.transit_gateway.options.auto_accept_shared_attachments #=> String, one of "enable", "disable"
+    #   resp.transit_gateway.options.default_route_table_association #=> String, one of "enable", "disable"
     #   resp.transit_gateway.options.association_default_route_table_id #=> String
     #   resp.transit_gateway.options.default_route_table_propagation #=> String, one of "enable", "disable"
     #   resp.transit_gateway.options.propagation_default_route_table_id #=> String
@@ -11343,7 +11935,7 @@ module Aws::EC2
     #
     #
     #
-    # [1]: https://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_DHCP_Options.html
+    # [1]: https://docs.aws.amazon.com/vpc/latest/userguide/VPC_DHCP_Options.html
     #
     # @option params [Array<String>] :dhcp_options_ids
     #   The IDs of one or more DHCP options sets.
@@ -14524,7 +15116,7 @@ module Aws::EC2
     #   resp.launch_template_versions[0].launch_template_data.instance_initiated_shutdown_behavior #=> String, one of "stop", "terminate"
     #   resp.launch_template_versions[0].launch_template_data.user_data #=> String
     #   resp.launch_template_versions[0].launch_template_data.tag_specifications #=> Array
-    #   resp.launch_template_versions[0].launch_template_data.tag_specifications[0].resource_type #=> String, one of "client-vpn-endpoint", "customer-gateway", "dedicated-host", "dhcp-options", "elastic-ip", "fleet", "fpga-image", "host-reservation", "image", "instance", "internet-gateway", "launch-template", "natgateway", "network-acl", "network-interface", "reserved-instances", "route-table", "security-group", "snapshot", "spot-instances-request", "subnet", "transit-gateway", "transit-gateway-attachment", "transit-gateway-route-table", "volume", "vpc", "vpc-peering-connection", "vpn-connection", "vpn-gateway"
+    #   resp.launch_template_versions[0].launch_template_data.tag_specifications[0].resource_type #=> String, one of "client-vpn-endpoint", "customer-gateway", "dedicated-host", "dhcp-options", "elastic-ip", "fleet", "fpga-image", "host-reservation", "image", "instance", "internet-gateway", "launch-template", "natgateway", "network-acl", "network-interface", "reserved-instances", "route-table", "security-group", "snapshot", "spot-instances-request", "subnet", "traffic-mirror-filter", "traffic-mirror-session", "traffic-mirror-target", "transit-gateway", "transit-gateway-attachment", "transit-gateway-route-table", "volume", "vpc", "vpc-peering-connection", "vpn-connection", "vpn-gateway"
     #   resp.launch_template_versions[0].launch_template_data.tag_specifications[0].tags #=> Array
     #   resp.launch_template_versions[0].launch_template_data.tag_specifications[0].tags[0].key #=> String
     #   resp.launch_template_versions[0].launch_template_data.tag_specifications[0].tags[0].value #=> String
@@ -14890,7 +15482,7 @@ module Aws::EC2
     #
     #
     #
-    # [1]: https://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_ACLs.html
+    # [1]: https://docs.aws.amazon.com/vpc/latest/userguide/VPC_ACLs.html
     #
     # @option params [Array<Types::Filter>] :filters
     #   One or more filters.
@@ -16480,7 +17072,7 @@ module Aws::EC2
     #
     #
     #
-    # [1]: https://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Route_Tables.html
+    # [1]: https://docs.aws.amazon.com/vpc/latest/userguide/VPC_Route_Tables.html
     #
     # @option params [Array<Types::Filter>] :filters
     #   One or more filters.
@@ -18015,7 +18607,7 @@ module Aws::EC2
     #   resp.spot_fleet_request_configs[0].spot_fleet_request_config.launch_specifications[0].user_data #=> String
     #   resp.spot_fleet_request_configs[0].spot_fleet_request_config.launch_specifications[0].weighted_capacity #=> Float
     #   resp.spot_fleet_request_configs[0].spot_fleet_request_config.launch_specifications[0].tag_specifications #=> Array
-    #   resp.spot_fleet_request_configs[0].spot_fleet_request_config.launch_specifications[0].tag_specifications[0].resource_type #=> String, one of "client-vpn-endpoint", "customer-gateway", "dedicated-host", "dhcp-options", "elastic-ip", "fleet", "fpga-image", "host-reservation", "image", "instance", "internet-gateway", "launch-template", "natgateway", "network-acl", "network-interface", "reserved-instances", "route-table", "security-group", "snapshot", "spot-instances-request", "subnet", "transit-gateway", "transit-gateway-attachment", "transit-gateway-route-table", "volume", "vpc", "vpc-peering-connection", "vpn-connection", "vpn-gateway"
+    #   resp.spot_fleet_request_configs[0].spot_fleet_request_config.launch_specifications[0].tag_specifications[0].resource_type #=> String, one of "client-vpn-endpoint", "customer-gateway", "dedicated-host", "dhcp-options", "elastic-ip", "fleet", "fpga-image", "host-reservation", "image", "instance", "internet-gateway", "launch-template", "natgateway", "network-acl", "network-interface", "reserved-instances", "route-table", "security-group", "snapshot", "spot-instances-request", "subnet", "traffic-mirror-filter", "traffic-mirror-session", "traffic-mirror-target", "transit-gateway", "transit-gateway-attachment", "transit-gateway-route-table", "volume", "vpc", "vpc-peering-connection", "vpn-connection", "vpn-gateway"
     #   resp.spot_fleet_request_configs[0].spot_fleet_request_config.launch_specifications[0].tag_specifications[0].tags #=> Array
     #   resp.spot_fleet_request_configs[0].spot_fleet_request_config.launch_specifications[0].tag_specifications[0].tags[0].key #=> String
     #   resp.spot_fleet_request_configs[0].spot_fleet_request_config.launch_specifications[0].tag_specifications[0].tags[0].value #=> String
@@ -18616,7 +19208,7 @@ module Aws::EC2
     #
     #
     #
-    # [1]: https://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Subnets.html
+    # [1]: https://docs.aws.amazon.com/vpc/latest/userguide/VPC_Subnets.html
     #
     # @option params [Array<Types::Filter>] :filters
     #   One or more filters.
@@ -18695,92 +19287,390 @@ module Aws::EC2
     #
     # @example Example: To describe the subnets for a VPC
     #
-    #   # This example describes the subnets for the specified VPC.
+    #   # This example describes the subnets for the specified VPC.
+    #
+    #   resp = client.describe_subnets({
+    #     filters: [
+    #       {
+    #         name: "vpc-id", 
+    #         values: [
+    #           "vpc-a01106c2", 
+    #         ], 
+    #       }, 
+    #     ], 
+    #   })
+    #
+    #   resp.to_h outputs the following:
+    #   {
+    #     subnets: [
+    #       {
+    #         availability_zone: "us-east-1c", 
+    #         available_ip_address_count: 251, 
+    #         cidr_block: "10.0.1.0/24", 
+    #         default_for_az: false, 
+    #         map_public_ip_on_launch: false, 
+    #         state: "available", 
+    #         subnet_id: "subnet-9d4a7b6c", 
+    #         vpc_id: "vpc-a01106c2", 
+    #       }, 
+    #     ], 
+    #   }
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.describe_subnets({
+    #     filters: [
+    #       {
+    #         name: "String",
+    #         values: ["String"],
+    #       },
+    #     ],
+    #     subnet_ids: ["String"],
+    #     dry_run: false,
+    #     next_token: "String",
+    #     max_results: 1,
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.subnets #=> Array
+    #   resp.subnets[0].availability_zone #=> String
+    #   resp.subnets[0].availability_zone_id #=> String
+    #   resp.subnets[0].available_ip_address_count #=> Integer
+    #   resp.subnets[0].cidr_block #=> String
+    #   resp.subnets[0].default_for_az #=> Boolean
+    #   resp.subnets[0].map_public_ip_on_launch #=> Boolean
+    #   resp.subnets[0].state #=> String, one of "pending", "available"
+    #   resp.subnets[0].subnet_id #=> String
+    #   resp.subnets[0].vpc_id #=> String
+    #   resp.subnets[0].owner_id #=> String
+    #   resp.subnets[0].assign_ipv_6_address_on_creation #=> Boolean
+    #   resp.subnets[0].ipv_6_cidr_block_association_set #=> Array
+    #   resp.subnets[0].ipv_6_cidr_block_association_set[0].association_id #=> String
+    #   resp.subnets[0].ipv_6_cidr_block_association_set[0].ipv_6_cidr_block #=> String
+    #   resp.subnets[0].ipv_6_cidr_block_association_set[0].ipv_6_cidr_block_state.state #=> String, one of "associating", "associated", "disassociating", "disassociated", "failing", "failed"
+    #   resp.subnets[0].ipv_6_cidr_block_association_set[0].ipv_6_cidr_block_state.status_message #=> String
+    #   resp.subnets[0].tags #=> Array
+    #   resp.subnets[0].tags[0].key #=> String
+    #   resp.subnets[0].tags[0].value #=> String
+    #   resp.subnets[0].subnet_arn #=> String
+    #   resp.next_token #=> String
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/DescribeSubnets AWS API Documentation
+    #
+    # @overload describe_subnets(params = {})
+    # @param [Hash] params ({})
+    def describe_subnets(params = {}, options = {})
+      req = build_request(:describe_subnets, params)
+      req.send_request(options)
+    end
+
+    # Describes the specified tags for your EC2 resources.
+    #
+    # For more information about tags, see [Tagging Your Resources][1] in
+    # the *Amazon Elastic Compute Cloud User Guide*.
+    #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/Using_Tags.html
+    #
+    # @option params [Boolean] :dry_run
+    #   Checks whether you have the required permissions for the action,
+    #   without actually making the request, and provides an error response.
+    #   If you have the required permissions, the error response is
+    #   `DryRunOperation`. Otherwise, it is `UnauthorizedOperation`.
+    #
+    # @option params [Array<Types::Filter>] :filters
+    #   The filters.
+    #
+    #   * `key` - The tag key.
+    #
+    #   * `resource-id` - The ID of the resource.
+    #
+    #   * `resource-type` - The resource type (`customer-gateway` \|
+    #     `dedicated-host` \| `dhcp-options` \| `elastic-ip` \| `fleet` \|
+    #     `fpga-image` \| `image` \| `instance` \| `host-reservation` \|
+    #     `internet-gateway` \| `launch-template` \| `natgateway` \|
+    #     `network-acl` \| `network-interface` \| `reserved-instances` \|
+    #     `route-table` \| `security-group` \| `snapshot` \|
+    #     `spot-instances-request` \| `subnet` \| `volume` \| `vpc` \|
+    #     `vpc-peering-connection` \| `vpn-connection` \| `vpn-gateway`).
+    #
+    #   * `tag`\:&lt;key&gt; - The key/value combination of the tag. For
+    #     example, specify "tag:Owner" for the filter name and "TeamA" for
+    #     the filter value to find resources with the tag "Owner=TeamA".
+    #
+    #   * `value` - The tag value.
+    #
+    # @option params [Integer] :max_results
+    #   The maximum number of results to return in a single call. This value
+    #   can be between 5 and 1000. To retrieve the remaining results, make
+    #   another call with the returned `NextToken` value.
+    #
+    # @option params [String] :next_token
+    #   The token to retrieve the next page of results.
+    #
+    # @return [Types::DescribeTagsResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::DescribeTagsResult#next_token #next_token} => String
+    #   * {Types::DescribeTagsResult#tags #tags} => Array&lt;Types::TagDescription&gt;
+    #
+    #
+    # @example Example: To describe the tags for a single resource
+    #
+    #   # This example describes the tags for the specified instance.
+    #
+    #   resp = client.describe_tags({
+    #     filters: [
+    #       {
+    #         name: "resource-id", 
+    #         values: [
+    #           "i-1234567890abcdef8", 
+    #         ], 
+    #       }, 
+    #     ], 
+    #   })
+    #
+    #   resp.to_h outputs the following:
+    #   {
+    #     tags: [
+    #       {
+    #         key: "Stack", 
+    #         resource_id: "i-1234567890abcdef8", 
+    #         resource_type: "instance", 
+    #         value: "test", 
+    #       }, 
+    #       {
+    #         key: "Name", 
+    #         resource_id: "i-1234567890abcdef8", 
+    #         resource_type: "instance", 
+    #         value: "Beta Server", 
+    #       }, 
+    #     ], 
+    #   }
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.describe_tags({
+    #     dry_run: false,
+    #     filters: [
+    #       {
+    #         name: "String",
+    #         values: ["String"],
+    #       },
+    #     ],
+    #     max_results: 1,
+    #     next_token: "String",
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.next_token #=> String
+    #   resp.tags #=> Array
+    #   resp.tags[0].key #=> String
+    #   resp.tags[0].resource_id #=> String
+    #   resp.tags[0].resource_type #=> String, one of "client-vpn-endpoint", "customer-gateway", "dedicated-host", "dhcp-options", "elastic-ip", "fleet", "fpga-image", "host-reservation", "image", "instance", "internet-gateway", "launch-template", "natgateway", "network-acl", "network-interface", "reserved-instances", "route-table", "security-group", "snapshot", "spot-instances-request", "subnet", "traffic-mirror-filter", "traffic-mirror-session", "traffic-mirror-target", "transit-gateway", "transit-gateway-attachment", "transit-gateway-route-table", "volume", "vpc", "vpc-peering-connection", "vpn-connection", "vpn-gateway"
+    #   resp.tags[0].value #=> String
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/DescribeTags AWS API Documentation
+    #
+    # @overload describe_tags(params = {})
+    # @param [Hash] params ({})
+    def describe_tags(params = {}, options = {})
+      req = build_request(:describe_tags, params)
+      req.send_request(options)
+    end
+
+    # Describes one or more Traffic Mirror filters.
+    #
+    # @option params [Array<String>] :traffic_mirror_filter_ids
+    #   The ID of the Traffic Mirror filter.
+    #
+    # @option params [Boolean] :dry_run
+    #   Checks whether you have the required permissions for the action,
+    #   without actually making the request, and provides an error response.
+    #   If you have the required permissions, the error response is
+    #   `DryRunOperation`. Otherwise, it is `UnauthorizedOperation`.
+    #
+    # @option params [Array<Types::Filter>] :filters
+    #   One or more filters. The possible values are:
+    #
+    #   * `description`\: The Traffic Mirror filter description.
+    #
+    #   * `traffic-mirror-filter-id`\: The ID of the Traffic Mirror filter.
+    #
+    # @option params [Integer] :max_results
+    #   The maximum number of results to return with a single call. To
+    #   retrieve the remaining results, make another call with the returned
+    #   `nextToken` value.
+    #
+    # @option params [String] :next_token
+    #   The token for the next page of results.
+    #
+    # @return [Types::DescribeTrafficMirrorFiltersResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::DescribeTrafficMirrorFiltersResult#traffic_mirror_filters #traffic_mirror_filters} => Array&lt;Types::TrafficMirrorFilter&gt;
+    #   * {Types::DescribeTrafficMirrorFiltersResult#next_token #next_token} => String
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.describe_traffic_mirror_filters({
+    #     traffic_mirror_filter_ids: ["String"],
+    #     dry_run: false,
+    #     filters: [
+    #       {
+    #         name: "String",
+    #         values: ["String"],
+    #       },
+    #     ],
+    #     max_results: 1,
+    #     next_token: "NextToken",
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.traffic_mirror_filters #=> Array
+    #   resp.traffic_mirror_filters[0].traffic_mirror_filter_id #=> String
+    #   resp.traffic_mirror_filters[0].ingress_filter_rules #=> Array
+    #   resp.traffic_mirror_filters[0].ingress_filter_rules[0].traffic_mirror_filter_rule_id #=> String
+    #   resp.traffic_mirror_filters[0].ingress_filter_rules[0].traffic_mirror_filter_id #=> String
+    #   resp.traffic_mirror_filters[0].ingress_filter_rules[0].traffic_direction #=> String, one of "ingress", "egress"
+    #   resp.traffic_mirror_filters[0].ingress_filter_rules[0].rule_number #=> Integer
+    #   resp.traffic_mirror_filters[0].ingress_filter_rules[0].rule_action #=> String, one of "accept", "reject"
+    #   resp.traffic_mirror_filters[0].ingress_filter_rules[0].protocol #=> Integer
+    #   resp.traffic_mirror_filters[0].ingress_filter_rules[0].destination_port_range.from_port #=> Integer
+    #   resp.traffic_mirror_filters[0].ingress_filter_rules[0].destination_port_range.to_port #=> Integer
+    #   resp.traffic_mirror_filters[0].ingress_filter_rules[0].source_port_range.from_port #=> Integer
+    #   resp.traffic_mirror_filters[0].ingress_filter_rules[0].source_port_range.to_port #=> Integer
+    #   resp.traffic_mirror_filters[0].ingress_filter_rules[0].destination_cidr_block #=> String
+    #   resp.traffic_mirror_filters[0].ingress_filter_rules[0].source_cidr_block #=> String
+    #   resp.traffic_mirror_filters[0].ingress_filter_rules[0].description #=> String
+    #   resp.traffic_mirror_filters[0].egress_filter_rules #=> Array
+    #   resp.traffic_mirror_filters[0].egress_filter_rules[0].traffic_mirror_filter_rule_id #=> String
+    #   resp.traffic_mirror_filters[0].egress_filter_rules[0].traffic_mirror_filter_id #=> String
+    #   resp.traffic_mirror_filters[0].egress_filter_rules[0].traffic_direction #=> String, one of "ingress", "egress"
+    #   resp.traffic_mirror_filters[0].egress_filter_rules[0].rule_number #=> Integer
+    #   resp.traffic_mirror_filters[0].egress_filter_rules[0].rule_action #=> String, one of "accept", "reject"
+    #   resp.traffic_mirror_filters[0].egress_filter_rules[0].protocol #=> Integer
+    #   resp.traffic_mirror_filters[0].egress_filter_rules[0].destination_port_range.from_port #=> Integer
+    #   resp.traffic_mirror_filters[0].egress_filter_rules[0].destination_port_range.to_port #=> Integer
+    #   resp.traffic_mirror_filters[0].egress_filter_rules[0].source_port_range.from_port #=> Integer
+    #   resp.traffic_mirror_filters[0].egress_filter_rules[0].source_port_range.to_port #=> Integer
+    #   resp.traffic_mirror_filters[0].egress_filter_rules[0].destination_cidr_block #=> String
+    #   resp.traffic_mirror_filters[0].egress_filter_rules[0].source_cidr_block #=> String
+    #   resp.traffic_mirror_filters[0].egress_filter_rules[0].description #=> String
+    #   resp.traffic_mirror_filters[0].network_services #=> Array
+    #   resp.traffic_mirror_filters[0].network_services[0] #=> String, one of "amazon-dns"
+    #   resp.traffic_mirror_filters[0].description #=> String
+    #   resp.traffic_mirror_filters[0].tags #=> Array
+    #   resp.traffic_mirror_filters[0].tags[0].key #=> String
+    #   resp.traffic_mirror_filters[0].tags[0].value #=> String
+    #   resp.next_token #=> String
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/DescribeTrafficMirrorFilters AWS API Documentation
+    #
+    # @overload describe_traffic_mirror_filters(params = {})
+    # @param [Hash] params ({})
+    def describe_traffic_mirror_filters(params = {}, options = {})
+      req = build_request(:describe_traffic_mirror_filters, params)
+      req.send_request(options)
+    end
+
+    # Describes one or more Traffic Mirror sessions. By default, all Traffic
+    # Mirror sessions are described. Alternatively, you can filter the
+    # results.
+    #
+    # @option params [Array<String>] :traffic_mirror_session_ids
+    #   The ID of the Traffic Mirror session.
+    #
+    # @option params [Boolean] :dry_run
+    #   Checks whether you have the required permissions for the action,
+    #   without actually making the request, and provides an error response.
+    #   If you have the required permissions, the error response is
+    #   `DryRunOperation`. Otherwise, it is `UnauthorizedOperation`.
+    #
+    # @option params [Array<Types::Filter>] :filters
+    #   One or more filters. The possible values are:
+    #
+    #   * `description`\: The Traffic Mirror session description.
+    #
+    #   * `network-interface-id`\: The ID of the Traffic Mirror session
+    #     network interface.
+    #
+    #   * `owner-id`\: The ID of the account that owns the Traffic Mirror
+    #     session.
+    #
+    #   * `packet-length`\: The assigned number of packets to mirror.
+    #
+    #   * `session-number`\: The assigned session number.
+    #
+    #   * `traffic-mirror-filter-id`\: The ID of the Traffic Mirror filter.
+    #
+    #   * `traffic-mirror-session-id`\: The ID of the Traffic Mirror session.
+    #
+    #   * `traffic-mirror-target-id`\: The ID of the Traffic Mirror target.
+    #
+    #   * `virtual-network-id`\: The virtual network ID of the Traffic Mirror
+    #     session.
+    #
+    # @option params [Integer] :max_results
+    #   The maximum number of results to return with a single call. To
+    #   retrieve the remaining results, make another call with the returned
+    #   `nextToken` value.
+    #
+    # @option params [String] :next_token
+    #   The token for the next page of results.
     #
-    #   resp = client.describe_subnets({
-    #     filters: [
-    #       {
-    #         name: "vpc-id", 
-    #         values: [
-    #           "vpc-a01106c2", 
-    #         ], 
-    #       }, 
-    #     ], 
-    #   })
+    # @return [Types::DescribeTrafficMirrorSessionsResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
-    #   resp.to_h outputs the following:
-    #   {
-    #     subnets: [
-    #       {
-    #         availability_zone: "us-east-1c", 
-    #         available_ip_address_count: 251, 
-    #         cidr_block: "10.0.1.0/24", 
-    #         default_for_az: false, 
-    #         map_public_ip_on_launch: false, 
-    #         state: "available", 
-    #         subnet_id: "subnet-9d4a7b6c", 
-    #         vpc_id: "vpc-a01106c2", 
-    #       }, 
-    #     ], 
-    #   }
+    #   * {Types::DescribeTrafficMirrorSessionsResult#traffic_mirror_sessions #traffic_mirror_sessions} => Array&lt;Types::TrafficMirrorSession&gt;
+    #   * {Types::DescribeTrafficMirrorSessionsResult#next_token #next_token} => String
     #
     # @example Request syntax with placeholder values
     #
-    #   resp = client.describe_subnets({
+    #   resp = client.describe_traffic_mirror_sessions({
+    #     traffic_mirror_session_ids: ["String"],
+    #     dry_run: false,
     #     filters: [
     #       {
     #         name: "String",
     #         values: ["String"],
     #       },
     #     ],
-    #     subnet_ids: ["String"],
-    #     dry_run: false,
-    #     next_token: "String",
     #     max_results: 1,
+    #     next_token: "NextToken",
     #   })
     #
     # @example Response structure
     #
-    #   resp.subnets #=> Array
-    #   resp.subnets[0].availability_zone #=> String
-    #   resp.subnets[0].availability_zone_id #=> String
-    #   resp.subnets[0].available_ip_address_count #=> Integer
-    #   resp.subnets[0].cidr_block #=> String
-    #   resp.subnets[0].default_for_az #=> Boolean
-    #   resp.subnets[0].map_public_ip_on_launch #=> Boolean
-    #   resp.subnets[0].state #=> String, one of "pending", "available"
-    #   resp.subnets[0].subnet_id #=> String
-    #   resp.subnets[0].vpc_id #=> String
-    #   resp.subnets[0].owner_id #=> String
-    #   resp.subnets[0].assign_ipv_6_address_on_creation #=> Boolean
-    #   resp.subnets[0].ipv_6_cidr_block_association_set #=> Array
-    #   resp.subnets[0].ipv_6_cidr_block_association_set[0].association_id #=> String
-    #   resp.subnets[0].ipv_6_cidr_block_association_set[0].ipv_6_cidr_block #=> String
-    #   resp.subnets[0].ipv_6_cidr_block_association_set[0].ipv_6_cidr_block_state.state #=> String, one of "associating", "associated", "disassociating", "disassociated", "failing", "failed"
-    #   resp.subnets[0].ipv_6_cidr_block_association_set[0].ipv_6_cidr_block_state.status_message #=> String
-    #   resp.subnets[0].tags #=> Array
-    #   resp.subnets[0].tags[0].key #=> String
-    #   resp.subnets[0].tags[0].value #=> String
-    #   resp.subnets[0].subnet_arn #=> String
+    #   resp.traffic_mirror_sessions #=> Array
+    #   resp.traffic_mirror_sessions[0].traffic_mirror_session_id #=> String
+    #   resp.traffic_mirror_sessions[0].traffic_mirror_target_id #=> String
+    #   resp.traffic_mirror_sessions[0].traffic_mirror_filter_id #=> String
+    #   resp.traffic_mirror_sessions[0].network_interface_id #=> String
+    #   resp.traffic_mirror_sessions[0].owner_id #=> String
+    #   resp.traffic_mirror_sessions[0].packet_length #=> Integer
+    #   resp.traffic_mirror_sessions[0].session_number #=> Integer
+    #   resp.traffic_mirror_sessions[0].virtual_network_id #=> Integer
+    #   resp.traffic_mirror_sessions[0].description #=> String
+    #   resp.traffic_mirror_sessions[0].tags #=> Array
+    #   resp.traffic_mirror_sessions[0].tags[0].key #=> String
+    #   resp.traffic_mirror_sessions[0].tags[0].value #=> String
     #   resp.next_token #=> String
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/DescribeSubnets AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/DescribeTrafficMirrorSessions AWS API Documentation
     #
-    # @overload describe_subnets(params = {})
+    # @overload describe_traffic_mirror_sessions(params = {})
     # @param [Hash] params ({})
-    def describe_subnets(params = {}, options = {})
-      req = build_request(:describe_subnets, params)
+    def describe_traffic_mirror_sessions(params = {}, options = {})
+      req = build_request(:describe_traffic_mirror_sessions, params)
       req.send_request(options)
     end
 
-    # Describes the specified tags for your EC2 resources.
-    #
-    # For more information about tags, see [Tagging Your Resources][1] in
-    # the *Amazon Elastic Compute Cloud User Guide*.
-    #
-    #
+    # Information about one or more Traffic Mirror targets.
     #
-    # [1]: https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/Using_Tags.html
+    # @option params [Array<String>] :traffic_mirror_target_ids
+    #   The ID of the Traffic Mirror targets.
     #
     # @option params [Boolean] :dry_run
     #   Checks whether you have the required permissions for the action,
@@ -18789,77 +19679,38 @@ module Aws::EC2
     #   `DryRunOperation`. Otherwise, it is `UnauthorizedOperation`.
     #
     # @option params [Array<Types::Filter>] :filters
-    #   The filters.
+    #   One or more filters. The possible values are:
     #
-    #   * `key` - The tag key.
+    #   * `description`\: The Traffic Mirror target description.
     #
-    #   * `resource-id` - The ID of the resource.
+    #   * `network-interface-id`\: The ID of the Traffic Mirror session
+    #     network interface.
     #
-    #   * `resource-type` - The resource type (`customer-gateway` \|
-    #     `dedicated-host` \| `dhcp-options` \| `elastic-ip` \| `fleet` \|
-    #     `fpga-image` \| `image` \| `instance` \| `host-reservation` \|
-    #     `internet-gateway` \| `launch-template` \| `natgateway` \|
-    #     `network-acl` \| `network-interface` \| `reserved-instances` \|
-    #     `route-table` \| `security-group` \| `snapshot` \|
-    #     `spot-instances-request` \| `subnet` \| `volume` \| `vpc` \|
-    #     `vpc-peering-connection` \| `vpn-connection` \| `vpn-gateway`).
+    #   * `network-load-balancer-arn`\: The Amazon Resource Name (ARN) of the
+    #     Network Load Balancer that is associated with the session.
     #
-    #   * `tag`\:&lt;key&gt; - The key/value combination of the tag. For
-    #     example, specify "tag:Owner" for the filter name and "TeamA" for
-    #     the filter value to find resources with the tag "Owner=TeamA".
+    #   * `owner-id`\: The ID of the account that owns the Traffic Mirror
+    #     session.
     #
-    #   * `value` - The tag value.
+    #   * `traffic-mirror-target-id`\: The ID of the Traffic Mirror target.
     #
     # @option params [Integer] :max_results
-    #   The maximum number of results to return in a single call. This value
-    #   can be between 5 and 1000. To retrieve the remaining results, make
-    #   another call with the returned `NextToken` value.
+    #   The maximum number of results to return with a single call. To
+    #   retrieve the remaining results, make another call with the returned
+    #   `nextToken` value.
     #
     # @option params [String] :next_token
-    #   The token to retrieve the next page of results.
-    #
-    # @return [Types::DescribeTagsResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
-    #
-    #   * {Types::DescribeTagsResult#next_token #next_token} => String
-    #   * {Types::DescribeTagsResult#tags #tags} => Array&lt;Types::TagDescription&gt;
-    #
-    #
-    # @example Example: To describe the tags for a single resource
-    #
-    #   # This example describes the tags for the specified instance.
+    #   The token for the next page of results.
     #
-    #   resp = client.describe_tags({
-    #     filters: [
-    #       {
-    #         name: "resource-id", 
-    #         values: [
-    #           "i-1234567890abcdef8", 
-    #         ], 
-    #       }, 
-    #     ], 
-    #   })
+    # @return [Types::DescribeTrafficMirrorTargetsResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
-    #   resp.to_h outputs the following:
-    #   {
-    #     tags: [
-    #       {
-    #         key: "Stack", 
-    #         resource_id: "i-1234567890abcdef8", 
-    #         resource_type: "instance", 
-    #         value: "test", 
-    #       }, 
-    #       {
-    #         key: "Name", 
-    #         resource_id: "i-1234567890abcdef8", 
-    #         resource_type: "instance", 
-    #         value: "Beta Server", 
-    #       }, 
-    #     ], 
-    #   }
+    #   * {Types::DescribeTrafficMirrorTargetsResult#traffic_mirror_targets #traffic_mirror_targets} => Array&lt;Types::TrafficMirrorTarget&gt;
+    #   * {Types::DescribeTrafficMirrorTargetsResult#next_token #next_token} => String
     #
     # @example Request syntax with placeholder values
     #
-    #   resp = client.describe_tags({
+    #   resp = client.describe_traffic_mirror_targets({
+    #     traffic_mirror_target_ids: ["String"],
     #     dry_run: false,
     #     filters: [
     #       {
@@ -18868,24 +19719,29 @@ module Aws::EC2
     #       },
     #     ],
     #     max_results: 1,
-    #     next_token: "String",
+    #     next_token: "NextToken",
     #   })
     #
     # @example Response structure
     #
+    #   resp.traffic_mirror_targets #=> Array
+    #   resp.traffic_mirror_targets[0].traffic_mirror_target_id #=> String
+    #   resp.traffic_mirror_targets[0].network_interface_id #=> String
+    #   resp.traffic_mirror_targets[0].network_load_balancer_arn #=> String
+    #   resp.traffic_mirror_targets[0].type #=> String, one of "network-interface", "network-load-balancer"
+    #   resp.traffic_mirror_targets[0].description #=> String
+    #   resp.traffic_mirror_targets[0].owner_id #=> String
+    #   resp.traffic_mirror_targets[0].tags #=> Array
+    #   resp.traffic_mirror_targets[0].tags[0].key #=> String
+    #   resp.traffic_mirror_targets[0].tags[0].value #=> String
     #   resp.next_token #=> String
-    #   resp.tags #=> Array
-    #   resp.tags[0].key #=> String
-    #   resp.tags[0].resource_id #=> String
-    #   resp.tags[0].resource_type #=> String, one of "client-vpn-endpoint", "customer-gateway", "dedicated-host", "dhcp-options", "elastic-ip", "fleet", "fpga-image", "host-reservation", "image", "instance", "internet-gateway", "launch-template", "natgateway", "network-acl", "network-interface", "reserved-instances", "route-table", "security-group", "snapshot", "spot-instances-request", "subnet", "transit-gateway", "transit-gateway-attachment", "transit-gateway-route-table", "volume", "vpc", "vpc-peering-connection", "vpn-connection", "vpn-gateway"
-    #   resp.tags[0].value #=> String
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/DescribeTags AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/DescribeTrafficMirrorTargets AWS API Documentation
     #
-    # @overload describe_tags(params = {})
+    # @overload describe_traffic_mirror_targets(params = {})
     # @param [Hash] params ({})
-    def describe_tags(params = {}, options = {})
-      req = build_request(:describe_tags, params)
+    def describe_traffic_mirror_targets(params = {}, options = {})
+      req = build_request(:describe_traffic_mirror_targets, params)
       req.send_request(options)
     end
 
@@ -21707,7 +22563,7 @@ module Aws::EC2
     #
     #
     #
-    # [1]: https://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Route_Tables.html
+    # [1]: https://docs.aws.amazon.com/vpc/latest/userguide/VPC_Route_Tables.html
     #
     # @option params [required, String] :association_id
     #   The association ID representing the current association between the
@@ -22683,7 +23539,7 @@ module Aws::EC2
     #   resp.launch_template_data.instance_initiated_shutdown_behavior #=> String, one of "stop", "terminate"
     #   resp.launch_template_data.user_data #=> String
     #   resp.launch_template_data.tag_specifications #=> Array
-    #   resp.launch_template_data.tag_specifications[0].resource_type #=> String, one of "client-vpn-endpoint", "customer-gateway", "dedicated-host", "dhcp-options", "elastic-ip", "fleet", "fpga-image", "host-reservation", "image", "instance", "internet-gateway", "launch-template", "natgateway", "network-acl", "network-interface", "reserved-instances", "route-table", "security-group", "snapshot", "spot-instances-request", "subnet", "transit-gateway", "transit-gateway-attachment", "transit-gateway-route-table", "volume", "vpc", "vpc-peering-connection", "vpn-connection", "vpn-gateway"
+    #   resp.launch_template_data.tag_specifications[0].resource_type #=> String, one of "client-vpn-endpoint", "customer-gateway", "dedicated-host", "dhcp-options", "elastic-ip", "fleet", "fpga-image", "host-reservation", "image", "instance", "internet-gateway", "launch-template", "natgateway", "network-acl", "network-interface", "reserved-instances", "route-table", "security-group", "snapshot", "spot-instances-request", "subnet", "traffic-mirror-filter", "traffic-mirror-session", "traffic-mirror-target", "transit-gateway", "transit-gateway-attachment", "transit-gateway-route-table", "volume", "vpc", "vpc-peering-connection", "vpn-connection", "vpn-gateway"
     #   resp.launch_template_data.tag_specifications[0].tags #=> Array
     #   resp.launch_template_data.tag_specifications[0].tags[0].key #=> String
     #   resp.launch_template_data.tag_specifications[0].tags[0].value #=> String
@@ -23196,23 +24052,16 @@ module Aws::EC2
     #   The license type to be used for the Amazon Machine Image (AMI) after
     #   importing.
     #
-    #   **Note:** You may only use BYOL if you have existing licenses with
-    #   rights to use these licenses in a third party cloud like AWS. For more
+    #   By default, we detect the source-system operating system (OS) and
+    #   apply the appropriate license. Specify `AWS` to replace the
+    #   source-system license with an AWS license, if appropriate. Specify
+    #   `BYOL` to retain the source-system license, if appropriate.
+    #
+    #   To use `BYOL`, you must have existing licenses with rights to use
+    #   these licenses in a third party cloud, such as AWS. For more
     #   information, see [Prerequisites][1] in the VM Import/Export User
     #   Guide.
     #
-    #   Valid values include:
-    #
-    #   * `Auto` - Detects the source-system operating system (OS) and applies
-    #     the appropriate license.
-    #
-    #   * `AWS` - Replaces the source-system license with an AWS license, if
-    #     appropriate.
-    #
-    #   * `BYOL` - Retains the source-system license, if appropriate.
-    #
-    #   Default value: `Auto`
-    #
     #
     #
     #   [1]: https://docs.aws.amazon.com/vm-import/latest/userguide/vmimport-image-import.html#prerequisites-image
@@ -25386,6 +26235,290 @@ module Aws::EC2
       req.send_request(options)
     end
 
+    # Allows or restricts mirroring network services.
+    #
+    # By default, Amazon DNS network services are not eligible for Traffic
+    # Mirror. Use `AddNetworkServices` to add network services to a Traffic
+    # Mirror filter. When a network service is added to the Traffic Mirror
+    # filter, all traffic related to that network service will be mirrored.
+    # When you no longer want to mirror network services, use
+    # `RemoveNetworkServices` to remove the network services from the
+    # Traffic Mirror filter.
+    #
+    # FFor information about filter rule properties, see [Network
+    # Services][1] in the <i>Traffic Mirroring User Guide </i>.
+    #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com/vpc/latest/mirroring/traffic-mirroring-considerations.html#traffic-mirroring-network-services
+    #
+    # @option params [required, String] :traffic_mirror_filter_id
+    #   The ID of the Traffic Mirror filter.
+    #
+    # @option params [Array<String>] :add_network_services
+    #   The network service, for example Amazon DNS, that you want to mirror.
+    #
+    # @option params [Array<String>] :remove_network_services
+    #   The network service, for example Amazon DNS, that you no longer want
+    #   to mirror.
+    #
+    # @option params [Boolean] :dry_run
+    #   Checks whether you have the required permissions for the action,
+    #   without actually making the request, and provides an error response.
+    #   If you have the required permissions, the error response is
+    #   `DryRunOperation`. Otherwise, it is `UnauthorizedOperation`.
+    #
+    # @return [Types::ModifyTrafficMirrorFilterNetworkServicesResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::ModifyTrafficMirrorFilterNetworkServicesResult#traffic_mirror_filter #traffic_mirror_filter} => Types::TrafficMirrorFilter
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.modify_traffic_mirror_filter_network_services({
+    #     traffic_mirror_filter_id: "String", # required
+    #     add_network_services: ["amazon-dns"], # accepts amazon-dns
+    #     remove_network_services: ["amazon-dns"], # accepts amazon-dns
+    #     dry_run: false,
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.traffic_mirror_filter.traffic_mirror_filter_id #=> String
+    #   resp.traffic_mirror_filter.ingress_filter_rules #=> Array
+    #   resp.traffic_mirror_filter.ingress_filter_rules[0].traffic_mirror_filter_rule_id #=> String
+    #   resp.traffic_mirror_filter.ingress_filter_rules[0].traffic_mirror_filter_id #=> String
+    #   resp.traffic_mirror_filter.ingress_filter_rules[0].traffic_direction #=> String, one of "ingress", "egress"
+    #   resp.traffic_mirror_filter.ingress_filter_rules[0].rule_number #=> Integer
+    #   resp.traffic_mirror_filter.ingress_filter_rules[0].rule_action #=> String, one of "accept", "reject"
+    #   resp.traffic_mirror_filter.ingress_filter_rules[0].protocol #=> Integer
+    #   resp.traffic_mirror_filter.ingress_filter_rules[0].destination_port_range.from_port #=> Integer
+    #   resp.traffic_mirror_filter.ingress_filter_rules[0].destination_port_range.to_port #=> Integer
+    #   resp.traffic_mirror_filter.ingress_filter_rules[0].source_port_range.from_port #=> Integer
+    #   resp.traffic_mirror_filter.ingress_filter_rules[0].source_port_range.to_port #=> Integer
+    #   resp.traffic_mirror_filter.ingress_filter_rules[0].destination_cidr_block #=> String
+    #   resp.traffic_mirror_filter.ingress_filter_rules[0].source_cidr_block #=> String
+    #   resp.traffic_mirror_filter.ingress_filter_rules[0].description #=> String
+    #   resp.traffic_mirror_filter.egress_filter_rules #=> Array
+    #   resp.traffic_mirror_filter.egress_filter_rules[0].traffic_mirror_filter_rule_id #=> String
+    #   resp.traffic_mirror_filter.egress_filter_rules[0].traffic_mirror_filter_id #=> String
+    #   resp.traffic_mirror_filter.egress_filter_rules[0].traffic_direction #=> String, one of "ingress", "egress"
+    #   resp.traffic_mirror_filter.egress_filter_rules[0].rule_number #=> Integer
+    #   resp.traffic_mirror_filter.egress_filter_rules[0].rule_action #=> String, one of "accept", "reject"
+    #   resp.traffic_mirror_filter.egress_filter_rules[0].protocol #=> Integer
+    #   resp.traffic_mirror_filter.egress_filter_rules[0].destination_port_range.from_port #=> Integer
+    #   resp.traffic_mirror_filter.egress_filter_rules[0].destination_port_range.to_port #=> Integer
+    #   resp.traffic_mirror_filter.egress_filter_rules[0].source_port_range.from_port #=> Integer
+    #   resp.traffic_mirror_filter.egress_filter_rules[0].source_port_range.to_port #=> Integer
+    #   resp.traffic_mirror_filter.egress_filter_rules[0].destination_cidr_block #=> String
+    #   resp.traffic_mirror_filter.egress_filter_rules[0].source_cidr_block #=> String
+    #   resp.traffic_mirror_filter.egress_filter_rules[0].description #=> String
+    #   resp.traffic_mirror_filter.network_services #=> Array
+    #   resp.traffic_mirror_filter.network_services[0] #=> String, one of "amazon-dns"
+    #   resp.traffic_mirror_filter.description #=> String
+    #   resp.traffic_mirror_filter.tags #=> Array
+    #   resp.traffic_mirror_filter.tags[0].key #=> String
+    #   resp.traffic_mirror_filter.tags[0].value #=> String
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/ModifyTrafficMirrorFilterNetworkServices AWS API Documentation
+    #
+    # @overload modify_traffic_mirror_filter_network_services(params = {})
+    # @param [Hash] params ({})
+    def modify_traffic_mirror_filter_network_services(params = {}, options = {})
+      req = build_request(:modify_traffic_mirror_filter_network_services, params)
+      req.send_request(options)
+    end
+
+    # Modifies the specified Traffic Mirror rule.
+    #
+    # `DestinationCidrBlock` and `SourceCidrBlock` must both be an IPv4
+    # range or an IPv6 range.
+    #
+    # @option params [required, String] :traffic_mirror_filter_rule_id
+    #   The ID of the Traffic Mirror rule.
+    #
+    # @option params [String] :traffic_direction
+    #   The type of traffic (`ingress` \| `egress`) to assign to the rule.
+    #
+    # @option params [Integer] :rule_number
+    #   The number of the Traffic Mirror rule. This number must be unique for
+    #   each Traffic Mirror rule in a given direction. The rules are processed
+    #   in ascending order by rule number.
+    #
+    # @option params [String] :rule_action
+    #   The action to assign to the rule.
+    #
+    # @option params [Types::TrafficMirrorPortRangeRequest] :destination_port_range
+    #   The destination ports that are associated with the Traffic Mirror
+    #   rule.
+    #
+    # @option params [Types::TrafficMirrorPortRangeRequest] :source_port_range
+    #   The port range to assign to the Traffic Mirror rule.
+    #
+    # @option params [Integer] :protocol
+    #   The protocol, for example TCP, to assign to the Traffic Mirror rule.
+    #
+    # @option params [String] :destination_cidr_block
+    #   The destination CIDR block to assign to the Traffic Mirror rule.
+    #
+    # @option params [String] :source_cidr_block
+    #   The source CIDR block to assign to the Traffic Mirror rule.
+    #
+    # @option params [String] :description
+    #   The description to assign to the Traffic Mirror rule.
+    #
+    # @option params [Array<String>] :remove_fields
+    #   The properties that you want to remove from the Traffic Mirror filter
+    #   rule.
+    #
+    #   When you remove a property from a Traffic Mirror filter rule, the
+    #   property is set to the default.
+    #
+    # @option params [Boolean] :dry_run
+    #   Checks whether you have the required permissions for the action,
+    #   without actually making the request, and provides an error response.
+    #   If you have the required permissions, the error response is
+    #   `DryRunOperation`. Otherwise, it is `UnauthorizedOperation`.
+    #
+    # @return [Types::ModifyTrafficMirrorFilterRuleResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::ModifyTrafficMirrorFilterRuleResult#traffic_mirror_filter_rule #traffic_mirror_filter_rule} => Types::TrafficMirrorFilterRule
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.modify_traffic_mirror_filter_rule({
+    #     traffic_mirror_filter_rule_id: "String", # required
+    #     traffic_direction: "ingress", # accepts ingress, egress
+    #     rule_number: 1,
+    #     rule_action: "accept", # accepts accept, reject
+    #     destination_port_range: {
+    #       from_port: 1,
+    #       to_port: 1,
+    #     },
+    #     source_port_range: {
+    #       from_port: 1,
+    #       to_port: 1,
+    #     },
+    #     protocol: 1,
+    #     destination_cidr_block: "String",
+    #     source_cidr_block: "String",
+    #     description: "String",
+    #     remove_fields: ["destination-port-range"], # accepts destination-port-range, source-port-range, protocol, description
+    #     dry_run: false,
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.traffic_mirror_filter_rule.traffic_mirror_filter_rule_id #=> String
+    #   resp.traffic_mirror_filter_rule.traffic_mirror_filter_id #=> String
+    #   resp.traffic_mirror_filter_rule.traffic_direction #=> String, one of "ingress", "egress"
+    #   resp.traffic_mirror_filter_rule.rule_number #=> Integer
+    #   resp.traffic_mirror_filter_rule.rule_action #=> String, one of "accept", "reject"
+    #   resp.traffic_mirror_filter_rule.protocol #=> Integer
+    #   resp.traffic_mirror_filter_rule.destination_port_range.from_port #=> Integer
+    #   resp.traffic_mirror_filter_rule.destination_port_range.to_port #=> Integer
+    #   resp.traffic_mirror_filter_rule.source_port_range.from_port #=> Integer
+    #   resp.traffic_mirror_filter_rule.source_port_range.to_port #=> Integer
+    #   resp.traffic_mirror_filter_rule.destination_cidr_block #=> String
+    #   resp.traffic_mirror_filter_rule.source_cidr_block #=> String
+    #   resp.traffic_mirror_filter_rule.description #=> String
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/ModifyTrafficMirrorFilterRule AWS API Documentation
+    #
+    # @overload modify_traffic_mirror_filter_rule(params = {})
+    # @param [Hash] params ({})
+    def modify_traffic_mirror_filter_rule(params = {}, options = {})
+      req = build_request(:modify_traffic_mirror_filter_rule, params)
+      req.send_request(options)
+    end
+
+    # Modifies a Traffic Mirror session.
+    #
+    # @option params [required, String] :traffic_mirror_session_id
+    #   The ID of the Traffic Mirror session.
+    #
+    # @option params [String] :traffic_mirror_target_id
+    #   The Traffic Mirror target. The target must be in the same VPC as the
+    #   source, or have a VPC peering connection with the source.
+    #
+    # @option params [String] :traffic_mirror_filter_id
+    #   The ID of the Traffic Mirror filter.
+    #
+    # @option params [Integer] :packet_length
+    #   The number of bytes in each packet to mirror. These are bytes after
+    #   the VXLAN header. To mirror a subset, set this to the length (in
+    #   bytes) to mirror. For example, if you set this value to 100, then the
+    #   first 100 bytes that meet the filter criteria are copied to the
+    #   target. Do not specify this parameter when you want to mirror the
+    #   entire packet.
+    #
+    # @option params [Integer] :session_number
+    #   The session number determines the order in which sessions are
+    #   evaluated when an interface is used by multiple sessions. The first
+    #   session with a matching filter is the one that mirrors the packets.
+    #
+    #   Valid values are 1-32766.
+    #
+    # @option params [Integer] :virtual_network_id
+    #   The virtual network ID of the Traffic Mirror session.
+    #
+    # @option params [String] :description
+    #   The description to assign to the Traffic Mirror session.
+    #
+    # @option params [Array<String>] :remove_fields
+    #   The properties that you want to remove from the Traffic Mirror
+    #   session.
+    #
+    #   When you remove a property from a Traffic Mirror session, the property
+    #   is set to the default.
+    #
+    # @option params [Boolean] :dry_run
+    #   Checks whether you have the required permissions for the action,
+    #   without actually making the request, and provides an error response.
+    #   If you have the required permissions, the error response is
+    #   `DryRunOperation`. Otherwise, it is `UnauthorizedOperation`.
+    #
+    # @return [Types::ModifyTrafficMirrorSessionResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::ModifyTrafficMirrorSessionResult#traffic_mirror_session #traffic_mirror_session} => Types::TrafficMirrorSession
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.modify_traffic_mirror_session({
+    #     traffic_mirror_session_id: "String", # required
+    #     traffic_mirror_target_id: "String",
+    #     traffic_mirror_filter_id: "String",
+    #     packet_length: 1,
+    #     session_number: 1,
+    #     virtual_network_id: 1,
+    #     description: "String",
+    #     remove_fields: ["packet-length"], # accepts packet-length, description, virtual-network-id
+    #     dry_run: false,
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.traffic_mirror_session.traffic_mirror_session_id #=> String
+    #   resp.traffic_mirror_session.traffic_mirror_target_id #=> String
+    #   resp.traffic_mirror_session.traffic_mirror_filter_id #=> String
+    #   resp.traffic_mirror_session.network_interface_id #=> String
+    #   resp.traffic_mirror_session.owner_id #=> String
+    #   resp.traffic_mirror_session.packet_length #=> Integer
+    #   resp.traffic_mirror_session.session_number #=> Integer
+    #   resp.traffic_mirror_session.virtual_network_id #=> Integer
+    #   resp.traffic_mirror_session.description #=> String
+    #   resp.traffic_mirror_session.tags #=> Array
+    #   resp.traffic_mirror_session.tags[0].key #=> String
+    #   resp.traffic_mirror_session.tags[0].value #=> String
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/ModifyTrafficMirrorSession AWS API Documentation
+    #
+    # @overload modify_traffic_mirror_session(params = {})
+    # @param [Hash] params ({})
+    def modify_traffic_mirror_session(params = {}, options = {})
+      req = build_request(:modify_traffic_mirror_session, params)
+      req.send_request(options)
+    end
+
     # Modifies the specified VPC attachment.
     #
     # @option params [required, String] :transit_gateway_attachment_id
@@ -25714,7 +26847,7 @@ module Aws::EC2
     #
     #
     #
-    # [1]: https://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/vpc-endpoints.html
+    # [1]: https://docs.aws.amazon.com/vpc/latest/userguide/vpc-endpoints.html
     #
     # @option params [Boolean] :dry_run
     #   Checks whether you have the required permissions for the action,
@@ -25906,7 +27039,7 @@ module Aws::EC2
     #
     #
     #
-    # [1]: https://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/endpoint-service.html
+    # [1]: https://docs.aws.amazon.com/vpc/latest/userguide/endpoint-service.html
     #
     # @option params [Boolean] :dry_run
     #   Checks whether you have the required permissions for the action,
@@ -27171,7 +28304,7 @@ module Aws::EC2
     #
     #
     #
-    # [1]: https://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_ACLs.html
+    # [1]: https://docs.aws.amazon.com/vpc/latest/userguide/VPC_ACLs.html
     #
     # @option params [required, String] :association_id
     #   The ID of the current association between the original network ACL and
@@ -27231,7 +28364,7 @@ module Aws::EC2
     #
     #
     #
-    # [1]: https://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_ACLs.html
+    # [1]: https://docs.aws.amazon.com/vpc/latest/userguide/VPC_ACLs.html
     #
     # @option params [String] :cidr_block
     #   The IPv4 network range to allow or deny, in CIDR notation (for example
@@ -27341,7 +28474,7 @@ module Aws::EC2
     #
     #
     #
-    # [1]: https://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Route_Tables.html
+    # [1]: https://docs.aws.amazon.com/vpc/latest/userguide/VPC_Route_Tables.html
     #
     # @option params [String] :destination_cidr_block
     #   The IPv4 CIDR address block used for the destination match. The value
@@ -27435,7 +28568,7 @@ module Aws::EC2
     #
     #
     #
-    # [1]: https://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Route_Tables.html
+    # [1]: https://docs.aws.amazon.com/vpc/latest/userguide/VPC_Route_Tables.html
     #
     # @option params [required, String] :association_id
     #   The association ID.
@@ -27910,7 +29043,7 @@ module Aws::EC2
     #           weighted_capacity: 1.0,
     #           tag_specifications: [
     #             {
-    #               resource_type: "client-vpn-endpoint", # accepts client-vpn-endpoint, customer-gateway, dedicated-host, dhcp-options, elastic-ip, fleet, fpga-image, host-reservation, image, instance, internet-gateway, launch-template, natgateway, network-acl, network-interface, reserved-instances, route-table, security-group, snapshot, spot-instances-request, subnet, transit-gateway, transit-gateway-attachment, transit-gateway-route-table, volume, vpc, vpc-peering-connection, vpn-connection, vpn-gateway
+    #               resource_type: "client-vpn-endpoint", # accepts client-vpn-endpoint, customer-gateway, dedicated-host, dhcp-options, elastic-ip, fleet, fpga-image, host-reservation, image, instance, internet-gateway, launch-template, natgateway, network-acl, network-interface, reserved-instances, route-table, security-group, snapshot, spot-instances-request, subnet, traffic-mirror-filter, traffic-mirror-session, traffic-mirror-target, transit-gateway, transit-gateway-attachment, transit-gateway-route-table, volume, vpc, vpc-peering-connection, vpn-connection, vpn-gateway
     #               tags: [
     #                 {
     #                   key: "String",
@@ -29149,8 +30282,8 @@ module Aws::EC2
     # @option params [String] :subnet_id
     #   \[EC2-VPC\] The ID of the subnet to launch the instance into.
     #
-    #   You cannot specify this option and the network interfaces option in
-    #   the same request.
+    #   If you specify a network interface, you must specify any subnets as
+    #   part of the network interface.
     #
     # @option params [String] :user_data
     #   The user data to make available to the instance. For more information,
@@ -29221,8 +30354,8 @@ module Aws::EC2
     #
     # @option params [Array<Types::InstanceNetworkInterfaceSpecification>] :network_interfaces
     #   The network interfaces to associate with the instance. If you specify
-    #   a network interface, you must specify any security groups as part of
-    #   the network interface.
+    #   a network interface, you must specify any security groups and subnets
+    #   as part of the network interface.
     #
     # @option params [String] :private_ip_address
     #   \[EC2-VPC\] The primary IPv4 address. You must specify a value from
@@ -29465,7 +30598,7 @@ module Aws::EC2
     #     ],
     #     tag_specifications: [
     #       {
-    #         resource_type: "client-vpn-endpoint", # accepts client-vpn-endpoint, customer-gateway, dedicated-host, dhcp-options, elastic-ip, fleet, fpga-image, host-reservation, image, instance, internet-gateway, launch-template, natgateway, network-acl, network-interface, reserved-instances, route-table, security-group, snapshot, spot-instances-request, subnet, transit-gateway, transit-gateway-attachment, transit-gateway-route-table, volume, vpc, vpc-peering-connection, vpn-connection, vpn-gateway
+    #         resource_type: "client-vpn-endpoint", # accepts client-vpn-endpoint, customer-gateway, dedicated-host, dhcp-options, elastic-ip, fleet, fpga-image, host-reservation, image, instance, internet-gateway, launch-template, natgateway, network-acl, network-interface, reserved-instances, route-table, security-group, snapshot, spot-instances-request, subnet, traffic-mirror-filter, traffic-mirror-session, traffic-mirror-target, transit-gateway, transit-gateway-attachment, transit-gateway-route-table, volume, vpc, vpc-peering-connection, vpn-connection, vpn-gateway
     #         tags: [
     #           {
     #             key: "String",
@@ -30730,7 +31863,7 @@ module Aws::EC2
         params: params,
         config: config)
       context[:gem_name] = 'aws-sdk-ec2'
-      context[:gem_version] = '1.95.0'
+      context[:gem_version] = '1.96.0'
       Seahorse::Client::Request.new(handlers, context)
     end