aws-sdk-ec2 1.571.0 → 1.572.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 9827800a415d2e1c7ce254a9ca51fa966acfc48c063cd4bc675e4b0fc8de95ad
-  data.tar.gz: 420338da49eb71fc23802e7cac7feb17e04538659758d8ff9b8ab7184d9325e7
+  metadata.gz: 45d247022e00770698c4dd6a66d16831c22a01b2638b07a90c65a9ece2457757
+  data.tar.gz: fc9cc06e62ece765209c9679673ec762be1b43b47965be07f3d5afcba4095037
 SHA512:
-  metadata.gz: 0bcaf6e3a695b154c4502c27dbab6cc7873facc17b478c6d7b91e7e148aa0f59f5321635492400601fe93ff3e13dcf2166de5d66756f7c3c8bfe195fcdc41eba
-  data.tar.gz: c05cdb7ba252ba1b1a07426d9eec4ba3abdd66f613c1de74df7bf830571e5e612b56bcc65ba444108ea916612624c9e30126daab934901399f19e9a7247f635e
+  metadata.gz: c92e130c8e01b91abbe263534de480251d50c0148c5fd8583e111ca53da9ea7bea9e129bc9f257a0f2aabd4205df3f9ec8d32773b26c8ff62b1d297747da8a29
+  data.tar.gz: f4d4ba22a2a9ecdccfd2720677c98a5d28cc00fff7a39f002832c040c2f320c450ec6e0cae4c0075c54e47f656f8dddc52fd8a67367e0ba23feb9cb90a247d05

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.572.0 (2025-11-07)
+------------------
+
+* Feature - Adds PrivateDnsPreference and PrivateDnsSpecifiedDomains to control private DNS resolution for resource and service network VPC endpoints and IpamScopeExternalAuthorityConfiguration to integrate Amazon VPC IPAM with a third-party IPAM service
+
 1.571.0 (2025-11-06)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.571.0
+1.572.0

data/lib/aws-sdk-ec2/client.rb

@@ -9754,6 +9754,19 @@ module Aws::EC2
     #
     #   [1]: https://docs.aws.amazon.com/ec2/latest/devguide/ec2-api-idempotency.html
     #
+    # @option params [Types::ExternalAuthorityConfiguration] :external_authority_configuration
+    #   The configuration that links an Amazon VPC IPAM scope to an external
+    #   authority system. It specifies the type of external system and the
+    #   external resource identifier that identifies your account or instance
+    #   in that system.
+    #
+    #   In IPAM, an external authority is a third-party IP address management
+    #   system that provides CIDR blocks when you provision address space for
+    #   top-level IPAM pools. This allows you to use your existing IP
+    #   management system to control which address ranges are allocated to
+    #   Amazon Web Services while using Amazon VPC IPAM to manage subnets
+    #   within those ranges.
+    #
     # @return [Types::CreateIpamScopeResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::CreateIpamScopeResult#ipam_scope #ipam_scope} => Types::IpamScope
@@ -9776,6 +9789,10 @@ module Aws::EC2
     #       },
     #     ],
     #     client_token: "String",
+    #     external_authority_configuration: {
+    #       type: "infoblox", # accepts infoblox
+    #       external_resource_identifier: "String",
+    #     },
     #   })
     #
     # @example Response structure
@@ -9793,6 +9810,8 @@ module Aws::EC2
     #   resp.ipam_scope.tags #=> Array
     #   resp.ipam_scope.tags[0].key #=> String
     #   resp.ipam_scope.tags[0].value #=> String
+    #   resp.ipam_scope.external_authority_configuration.type #=> String, one of "infoblox"
+    #   resp.ipam_scope.external_authority_configuration.external_resource_identifier #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/CreateIpamScope AWS API Documentation
     #
@@ -17572,6 +17591,8 @@ module Aws::EC2
     #     dns_options: {
     #       dns_record_ip_type: "ipv4", # accepts ipv4, dualstack, ipv6, service-defined
     #       private_dns_only_for_inbound_resolver_endpoint: false,
+    #       private_dns_preference: "String",
+    #       private_dns_specified_domains: ["String"],
     #     },
     #     client_token: "String",
     #     private_dns_enabled: false,
@@ -17616,6 +17637,9 @@ module Aws::EC2
     #   resp.vpc_endpoint.ip_address_type #=> String, one of "ipv4", "dualstack", "ipv6"
     #   resp.vpc_endpoint.dns_options.dns_record_ip_type #=> String, one of "ipv4", "dualstack", "ipv6", "service-defined"
     #   resp.vpc_endpoint.dns_options.private_dns_only_for_inbound_resolver_endpoint #=> Boolean
+    #   resp.vpc_endpoint.dns_options.private_dns_preference #=> String
+    #   resp.vpc_endpoint.dns_options.private_dns_specified_domains #=> Array
+    #   resp.vpc_endpoint.dns_options.private_dns_specified_domains[0] #=> String
     #   resp.vpc_endpoint.private_dns_enabled #=> Boolean
     #   resp.vpc_endpoint.requester_managed #=> Boolean
     #   resp.vpc_endpoint.network_interface_ids #=> Array
@@ -19504,6 +19528,8 @@ module Aws::EC2
     #   resp.ipam_scope.tags #=> Array
     #   resp.ipam_scope.tags[0].key #=> String
     #   resp.ipam_scope.tags[0].value #=> String
+    #   resp.ipam_scope.external_authority_configuration.type #=> String, one of "infoblox"
+    #   resp.ipam_scope.external_authority_configuration.external_resource_identifier #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/DeleteIpamScope AWS API Documentation
     #
@@ -31773,6 +31799,8 @@ module Aws::EC2
     #   resp.ipam_scopes[0].tags #=> Array
     #   resp.ipam_scopes[0].tags[0].key #=> String
     #   resp.ipam_scopes[0].tags[0].value #=> String
+    #   resp.ipam_scopes[0].external_authority_configuration.type #=> String, one of "infoblox"
+    #   resp.ipam_scopes[0].external_authority_configuration.external_resource_identifier #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/DescribeIpamScopes AWS API Documentation
     #
@@ -43676,6 +43704,9 @@ module Aws::EC2
     #   resp.vpc_endpoints[0].ip_address_type #=> String, one of "ipv4", "dualstack", "ipv6"
     #   resp.vpc_endpoints[0].dns_options.dns_record_ip_type #=> String, one of "ipv4", "dualstack", "ipv6", "service-defined"
     #   resp.vpc_endpoints[0].dns_options.private_dns_only_for_inbound_resolver_endpoint #=> Boolean
+    #   resp.vpc_endpoints[0].dns_options.private_dns_preference #=> String
+    #   resp.vpc_endpoints[0].dns_options.private_dns_specified_domains #=> Array
+    #   resp.vpc_endpoints[0].dns_options.private_dns_specified_domains[0] #=> String
     #   resp.vpc_endpoints[0].private_dns_enabled #=> Boolean
     #   resp.vpc_endpoints[0].requester_managed #=> Boolean
     #   resp.vpc_endpoints[0].network_interface_ids #=> Array
@@ -56908,6 +56939,22 @@ module Aws::EC2
     # @option params [String] :description
     #   The description of the scope you want to modify.
     #
+    # @option params [Types::ExternalAuthorityConfiguration] :external_authority_configuration
+    #   The configuration that links an Amazon VPC IPAM scope to an external
+    #   authority system. It specifies the type of external system and the
+    #   external resource identifier that identifies your account or instance
+    #   in that system.
+    #
+    #   In IPAM, an external authority is a third-party IP address management
+    #   system that provides CIDR blocks when you provision address space for
+    #   top-level IPAM pools. This allows you to use your existing IP
+    #   management system to control which address ranges are allocated to
+    #   Amazon Web Services while using Amazon VPC IPAM to manage subnets
+    #   within those ranges.
+    #
+    # @option params [Boolean] :remove_external_authority_configuration
+    #   Remove the external authority configuration. `true` to remove.
+    #
     # @return [Types::ModifyIpamScopeResult] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::ModifyIpamScopeResult#ipam_scope #ipam_scope} => Types::IpamScope
@@ -56918,6 +56965,11 @@ module Aws::EC2
     #     dry_run: false,
     #     ipam_scope_id: "IpamScopeId", # required
     #     description: "String",
+    #     external_authority_configuration: {
+    #       type: "infoblox", # accepts infoblox
+    #       external_resource_identifier: "String",
+    #     },
+    #     remove_external_authority_configuration: false,
     #   })
     #
     # @example Response structure
@@ -56935,6 +56987,8 @@ module Aws::EC2
     #   resp.ipam_scope.tags #=> Array
     #   resp.ipam_scope.tags[0].key #=> String
     #   resp.ipam_scope.tags[0].value #=> String
+    #   resp.ipam_scope.external_authority_configuration.type #=> String, one of "infoblox"
+    #   resp.ipam_scope.external_authority_configuration.external_resource_identifier #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/ModifyIpamScope AWS API Documentation
     #
@@ -59879,6 +59933,8 @@ module Aws::EC2
     #     dns_options: {
     #       dns_record_ip_type: "ipv4", # accepts ipv4, dualstack, ipv6, service-defined
     #       private_dns_only_for_inbound_resolver_endpoint: false,
+    #       private_dns_preference: "String",
+    #       private_dns_specified_domains: ["String"],
     #     },
     #     private_dns_enabled: false,
     #     subnet_configurations: [
@@ -69083,7 +69139,7 @@ module Aws::EC2
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-ec2'
-      context[:gem_version] = '1.571.0'
+      context[:gem_version] = '1.572.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-ec2/client_api.rb

@@ -1604,6 +1604,7 @@ module Aws::EC2
     ExportVerifiedAccessInstanceClientConfigurationRequest = Shapes::StructureShape.new(name: 'ExportVerifiedAccessInstanceClientConfigurationRequest')
     ExportVerifiedAccessInstanceClientConfigurationResult = Shapes::StructureShape.new(name: 'ExportVerifiedAccessInstanceClientConfigurationResult')
     ExportVmTaskId = Shapes::StringShape.new(name: 'ExportVmTaskId')
+    ExternalAuthorityConfiguration = Shapes::StructureShape.new(name: 'ExternalAuthorityConfiguration')
     FailedCapacityReservationFleetCancellationResult = Shapes::StructureShape.new(name: 'FailedCapacityReservationFleetCancellationResult')
     FailedCapacityReservationFleetCancellationResultSet = Shapes::ListShape.new(name: 'FailedCapacityReservationFleetCancellationResultSet')
     FailedQueuedPurchaseDeletion = Shapes::StructureShape.new(name: 'FailedQueuedPurchaseDeletion')
@@ -2216,6 +2217,8 @@ module Aws::EC2
     IpamResourceTagList = Shapes::ListShape.new(name: 'IpamResourceTagList')
     IpamResourceType = Shapes::StringShape.new(name: 'IpamResourceType')
     IpamScope = Shapes::StructureShape.new(name: 'IpamScope')
+    IpamScopeExternalAuthorityConfiguration = Shapes::StructureShape.new(name: 'IpamScopeExternalAuthorityConfiguration')
+    IpamScopeExternalAuthorityType = Shapes::StringShape.new(name: 'IpamScopeExternalAuthorityType')
     IpamScopeId = Shapes::StringShape.new(name: 'IpamScopeId')
     IpamScopeSet = Shapes::ListShape.new(name: 'IpamScopeSet')
     IpamScopeState = Shapes::StringShape.new(name: 'IpamScopeState')
@@ -2851,6 +2854,7 @@ module Aws::EC2
     PrivateDnsNameOptionsOnLaunch = Shapes::StructureShape.new(name: 'PrivateDnsNameOptionsOnLaunch')
     PrivateDnsNameOptionsRequest = Shapes::StructureShape.new(name: 'PrivateDnsNameOptionsRequest')
     PrivateDnsNameOptionsResponse = Shapes::StructureShape.new(name: 'PrivateDnsNameOptionsResponse')
+    PrivateDnsSpecifiedDomainSet = Shapes::ListShape.new(name: 'PrivateDnsSpecifiedDomainSet')
     PrivateIpAddressConfigSet = Shapes::ListShape.new(name: 'PrivateIpAddressConfigSet')
     PrivateIpAddressCount = Shapes::IntegerShape.new(name: 'PrivateIpAddressCount')
     PrivateIpAddressSpecification = Shapes::StructureShape.new(name: 'PrivateIpAddressSpecification')
@@ -5762,6 +5766,7 @@ module Aws::EC2
     CreateIpamScopeRequest.add_member(:description, Shapes::ShapeRef.new(shape: String, location_name: "Description"))
     CreateIpamScopeRequest.add_member(:tag_specifications, Shapes::ShapeRef.new(shape: TagSpecificationList, location_name: "TagSpecification"))
     CreateIpamScopeRequest.add_member(:client_token, Shapes::ShapeRef.new(shape: String, location_name: "ClientToken", metadata: {"idempotencyToken" => true}))
+    CreateIpamScopeRequest.add_member(:external_authority_configuration, Shapes::ShapeRef.new(shape: ExternalAuthorityConfiguration, location_name: "ExternalAuthorityConfiguration"))
     CreateIpamScopeRequest.struct_class = Types::CreateIpamScopeRequest
 
     CreateIpamScopeResult.add_member(:ipam_scope, Shapes::ShapeRef.new(shape: IpamScope, location_name: "ipamScope"))
@@ -9776,10 +9781,14 @@ module Aws::EC2
 
     DnsOptions.add_member(:dns_record_ip_type, Shapes::ShapeRef.new(shape: DnsRecordIpType, location_name: "dnsRecordIpType"))
     DnsOptions.add_member(:private_dns_only_for_inbound_resolver_endpoint, Shapes::ShapeRef.new(shape: Boolean, location_name: "privateDnsOnlyForInboundResolverEndpoint"))
+    DnsOptions.add_member(:private_dns_preference, Shapes::ShapeRef.new(shape: String, location_name: "privateDnsPreference"))
+    DnsOptions.add_member(:private_dns_specified_domains, Shapes::ShapeRef.new(shape: PrivateDnsSpecifiedDomainSet, location_name: "privateDnsSpecifiedDomainSet"))
     DnsOptions.struct_class = Types::DnsOptions
 
     DnsOptionsSpecification.add_member(:dns_record_ip_type, Shapes::ShapeRef.new(shape: DnsRecordIpType, location_name: "DnsRecordIpType"))
     DnsOptionsSpecification.add_member(:private_dns_only_for_inbound_resolver_endpoint, Shapes::ShapeRef.new(shape: Boolean, location_name: "PrivateDnsOnlyForInboundResolverEndpoint"))
+    DnsOptionsSpecification.add_member(:private_dns_preference, Shapes::ShapeRef.new(shape: String, location_name: "PrivateDnsPreference"))
+    DnsOptionsSpecification.add_member(:private_dns_specified_domains, Shapes::ShapeRef.new(shape: PrivateDnsSpecifiedDomainSet, location_name: "PrivateDnsSpecifiedDomain"))
     DnsOptionsSpecification.struct_class = Types::DnsOptionsSpecification
 
     DnsServersOptionsModifyStructure.add_member(:custom_dns_servers, Shapes::ShapeRef.new(shape: ValueStringList, location_name: "CustomDnsServers"))
@@ -10326,6 +10335,10 @@ module Aws::EC2
     ExportVerifiedAccessInstanceClientConfigurationResult.add_member(:open_vpn_configurations, Shapes::ShapeRef.new(shape: VerifiedAccessInstanceOpenVpnClientConfigurationList, location_name: "openVpnConfigurationSet"))
     ExportVerifiedAccessInstanceClientConfigurationResult.struct_class = Types::ExportVerifiedAccessInstanceClientConfigurationResult
 
+    ExternalAuthorityConfiguration.add_member(:type, Shapes::ShapeRef.new(shape: IpamScopeExternalAuthorityType, location_name: "Type"))
+    ExternalAuthorityConfiguration.add_member(:external_resource_identifier, Shapes::ShapeRef.new(shape: String, location_name: "ExternalResourceIdentifier"))
+    ExternalAuthorityConfiguration.struct_class = Types::ExternalAuthorityConfiguration
+
     FailedCapacityReservationFleetCancellationResult.add_member(:capacity_reservation_fleet_id, Shapes::ShapeRef.new(shape: CapacityReservationFleetId, location_name: "capacityReservationFleetId"))
     FailedCapacityReservationFleetCancellationResult.add_member(:cancel_capacity_reservation_fleet_error, Shapes::ShapeRef.new(shape: CancelCapacityReservationFleetError, location_name: "cancelCapacityReservationFleetError"))
     FailedCapacityReservationFleetCancellationResult.struct_class = Types::FailedCapacityReservationFleetCancellationResult
@@ -12722,8 +12735,13 @@ module Aws::EC2
     IpamScope.add_member(:pool_count, Shapes::ShapeRef.new(shape: Integer, location_name: "poolCount"))
     IpamScope.add_member(:state, Shapes::ShapeRef.new(shape: IpamScopeState, location_name: "state"))
     IpamScope.add_member(:tags, Shapes::ShapeRef.new(shape: TagList, location_name: "tagSet"))
+    IpamScope.add_member(:external_authority_configuration, Shapes::ShapeRef.new(shape: IpamScopeExternalAuthorityConfiguration, location_name: "externalAuthorityConfiguration"))
     IpamScope.struct_class = Types::IpamScope
 
+    IpamScopeExternalAuthorityConfiguration.add_member(:type, Shapes::ShapeRef.new(shape: IpamScopeExternalAuthorityType, location_name: "type"))
+    IpamScopeExternalAuthorityConfiguration.add_member(:external_resource_identifier, Shapes::ShapeRef.new(shape: String, location_name: "externalResourceIdentifier"))
+    IpamScopeExternalAuthorityConfiguration.struct_class = Types::IpamScopeExternalAuthorityConfiguration
+
     IpamScopeSet.member = Shapes::ShapeRef.new(shape: IpamScope, location_name: "item")
 
     IpamSet.member = Shapes::ShapeRef.new(shape: Ipam, location_name: "item")
@@ -13813,6 +13831,8 @@ module Aws::EC2
     ModifyIpamScopeRequest.add_member(:dry_run, Shapes::ShapeRef.new(shape: Boolean, location_name: "DryRun"))
     ModifyIpamScopeRequest.add_member(:ipam_scope_id, Shapes::ShapeRef.new(shape: IpamScopeId, required: true, location_name: "IpamScopeId"))
     ModifyIpamScopeRequest.add_member(:description, Shapes::ShapeRef.new(shape: String, location_name: "Description"))
+    ModifyIpamScopeRequest.add_member(:external_authority_configuration, Shapes::ShapeRef.new(shape: ExternalAuthorityConfiguration, location_name: "ExternalAuthorityConfiguration"))
+    ModifyIpamScopeRequest.add_member(:remove_external_authority_configuration, Shapes::ShapeRef.new(shape: Boolean, location_name: "RemoveExternalAuthorityConfiguration"))
     ModifyIpamScopeRequest.struct_class = Types::ModifyIpamScopeRequest
 
     ModifyIpamScopeResult.add_member(:ipam_scope, Shapes::ShapeRef.new(shape: IpamScope, location_name: "ipamScope"))
@@ -15063,6 +15083,8 @@ module Aws::EC2
     PrivateDnsNameOptionsResponse.add_member(:enable_resource_name_dns_aaaa_record, Shapes::ShapeRef.new(shape: Boolean, location_name: "enableResourceNameDnsAAAARecord"))
     PrivateDnsNameOptionsResponse.struct_class = Types::PrivateDnsNameOptionsResponse
 
+    PrivateDnsSpecifiedDomainSet.member = Shapes::ShapeRef.new(shape: String, location_name: "item")
+
     PrivateIpAddressConfigSet.member = Shapes::ShapeRef.new(shape: ScheduledInstancesPrivateIpAddressConfig, location_name: "PrivateIpAddressConfigSet")
 
     PrivateIpAddressSpecification.add_member(:primary, Shapes::ShapeRef.new(shape: Boolean, location_name: "primary"))

data/lib/aws-sdk-ec2/types.rb

@@ -11226,6 +11226,20 @@ module Aws::EC2
     #   [1]: https://docs.aws.amazon.com/ec2/latest/devguide/ec2-api-idempotency.html
     #   @return [String]
     #
+    # @!attribute [rw] external_authority_configuration
+    #   The configuration that links an Amazon VPC IPAM scope to an external
+    #   authority system. It specifies the type of external system and the
+    #   external resource identifier that identifies your account or
+    #   instance in that system.
+    #
+    #   In IPAM, an external authority is a third-party IP address
+    #   management system that provides CIDR blocks when you provision
+    #   address space for top-level IPAM pools. This allows you to use your
+    #   existing IP management system to control which address ranges are
+    #   allocated to Amazon Web Services while using Amazon VPC IPAM to
+    #   manage subnets within those ranges.
+    #   @return [Types::ExternalAuthorityConfiguration]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/CreateIpamScopeRequest AWS API Documentation
     #
     class CreateIpamScopeRequest < Struct.new(
@@ -11233,7 +11247,8 @@ module Aws::EC2
       :ipam_id,
       :description,
       :tag_specifications,
-      :client_token)
+      :client_token,
+      :external_authority_configuration)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -36020,11 +36035,45 @@ module Aws::EC2
     #   Indicates whether to enable private DNS only for inbound endpoints.
     #   @return [Boolean]
     #
+    # @!attribute [rw] private_dns_preference
+    #   The preference for which private domains have a private hosted zone
+    #   created for and associated with the specified VPC. Only supported
+    #   when private DNS is enabled and when the VPC endpoint type is
+    #   ServiceNetwork or Resource.
+    #
+    #   * `ALL_DOMAINS` - VPC Lattice provisions private hosted zones for
+    #     all custom domain names.
+    #
+    #   * `VERIFIED_DOMAINS_ONLY` - VPC Lattice provisions a private hosted
+    #     zone only if custom domain name has been verified by the provider.
+    #
+    #   * `VERIFIED_DOMAINS_AND_SPECIFIED_DOMAINS` - VPC Lattice provisions
+    #     private hosted zones for all verified custom domain names and
+    #     other domain names that the resource consumer specifies. The
+    #     resource consumer specifies the domain names in the
+    #     PrivateDnsSpecifiedDomains parameter.
+    #
+    #   * `SPECIFIED_DOMAINS_ONLY` - VPC Lattice provisions a private hosted
+    #     zone for domain names specified by the resource consumer. The
+    #     resource consumer specifies the domain names in the
+    #     PrivateDnsSpecifiedDomains parameter.
+    #   @return [String]
+    #
+    # @!attribute [rw] private_dns_specified_domains
+    #   Indicates which of the private domains to create private hosted
+    #   zones for and associate with the specified VPC. Only supported when
+    #   private DNS is enabled and the private DNS preference is
+    #   `VERIFIED_DOMAINS_AND_SPECIFIED_DOMAINS` or
+    #   `SPECIFIED_DOMAINS_ONLY`.
+    #   @return [Array<String>]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/DnsOptions AWS API Documentation
     #
     class DnsOptions < Struct.new(
       :dns_record_ip_type,
-      :private_dns_only_for_inbound_resolver_endpoint)
+      :private_dns_only_for_inbound_resolver_endpoint,
+      :private_dns_preference,
+      :private_dns_specified_domains)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -36043,11 +36092,44 @@ module Aws::EC2
     #   on-premises to the interface endpoint.
     #   @return [Boolean]
     #
+    # @!attribute [rw] private_dns_preference
+    #   The preference for which private domains have a private hosted zone
+    #   created for and associated with the specified VPC. Only supported
+    #   when private DNS is enabled and when the VPC endpoint type is
+    #   ServiceNetwork or Resource.
+    #
+    #   * `ALL_DOMAINS` - VPC Lattice provisions private hosted zones for
+    #     all custom domain names.
+    #
+    #   * `VERIFIED_DOMAINS_ONLY` - VPC Lattice provisions a private hosted
+    #     zone only if custom domain name has been verified by the provider.
+    #
+    #   * `VERIFIED_DOMAINS_AND_SPECIFIED_DOMAINS` - VPC Lattice provisions
+    #     private hosted zones for all verified custom domain names and
+    #     other domain names that the resource consumer specifies. The
+    #     resource consumer specifies the domain names in the
+    #     PrivateDnsSpecifiedDomains parameter.
+    #
+    #   * `SPECIFIED_DOMAINS_ONLY` - VPC Lattice provisions a private hosted
+    #     zone for domain names specified by the resource consumer. The
+    #     resource consumer specifies the domain names in the
+    #     PrivateDnsSpecifiedDomains parameter.
+    #   @return [String]
+    #
+    # @!attribute [rw] private_dns_specified_domains
+    #   Indicates which of the private domains to create private hosted
+    #   zones for and associate with the specified VPC. Only supported when
+    #   private DNS is enabled and the private DNS preference is
+    #   verified-domains-and-specified-domains or specified-domains-only.
+    #   @return [Array<String>]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/DnsOptionsSpecification AWS API Documentation
     #
     class DnsOptionsSpecification < Struct.new(
       :dns_record_ip_type,
-      :private_dns_only_for_inbound_resolver_endpoint)
+      :private_dns_only_for_inbound_resolver_endpoint,
+      :private_dns_preference,
+      :private_dns_specified_domains)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -39017,6 +39099,37 @@ module Aws::EC2
       include Aws::Structure
     end
 
+    # The configuration that links an Amazon VPC IPAM scope to an external
+    # authority system. It specifies the type of external system and the
+    # external resource identifier that identifies your account or instance
+    # in that system.
+    #
+    # For more information, see [Integrate VPC IPAM with Infoblox
+    # infrastructure][1] in the *Amazon VPC IPAM User Guide*..
+    #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com/vpc/latest/ipam/integrate-infoblox-ipam.html
+    #
+    # @!attribute [rw] type
+    #   The type of external authority.
+    #   @return [String]
+    #
+    # @!attribute [rw] external_resource_identifier
+    #   The identifier for the external resource managing this scope. For
+    #   Infoblox integrations, this is the Infoblox resource identifier in
+    #   the format `<version>.identity.account.<entity_realm>.<entity_id>`.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/ExternalAuthorityConfiguration AWS API Documentation
+    #
+    class ExternalAuthorityConfiguration < Struct.new(
+      :type,
+      :external_resource_identifier)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # Describes a Capacity Reservation Fleet that could not be cancelled.
     #
     # @!attribute [rw] capacity_reservation_fleet_id
@@ -52841,6 +52954,23 @@ module Aws::EC2
     #   name and `TeamA` for the filter value.
     #   @return [Array<Types::Tag>]
     #
+    # @!attribute [rw] external_authority_configuration
+    #   The external authority configuration for this IPAM scope, if
+    #   configured.
+    #
+    #   The configuration that links an Amazon VPC IPAM scope to an external
+    #   authority system. It specifies the type of external system and the
+    #   external resource identifier that identifies your account or
+    #   instance in that system.
+    #
+    #   In IPAM, an external authority is a third-party IP address
+    #   management system that provides CIDR blocks when you provision
+    #   address space for top-level IPAM pools. This allows you to use your
+    #   existing IP management system to control which address ranges are
+    #   allocated to Amazon Web Services while using Amazon VPC IPAM to
+    #   manage subnets within those ranges.
+    #   @return [Types::IpamScopeExternalAuthorityConfiguration]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/IpamScope AWS API Documentation
     #
     class IpamScope < Struct.new(
@@ -52854,7 +52984,40 @@ module Aws::EC2
       :description,
       :pool_count,
       :state,
-      :tags)
+      :tags,
+      :external_authority_configuration)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # The configuration that links an Amazon VPC IPAM scope to an external
+    # authority system. It specifies the type of external system and the
+    # external resource identifier that identifies your account or instance
+    # in that system.
+    #
+    # In IPAM, an external authority is a third-party IP address management
+    # system that provides CIDR blocks when you provision address space for
+    # top-level IPAM pools. This allows you to use your existing IP
+    # management system to control which address ranges are allocated to
+    # Amazon Web Services while using Amazon VPC IPAM to manage subnets
+    # within those ranges.
+    #
+    # @!attribute [rw] type
+    #   The type of external authority managing this scope. Currently
+    #   supports `Infoblox` for integration with Infoblox Universal DDI.
+    #   @return [String]
+    #
+    # @!attribute [rw] external_resource_identifier
+    #   The identifier for the external resource managing this scope. For
+    #   Infoblox integrations, this is the Infoblox resource identifier in
+    #   the format `<version>.identity.account.<entity_realm>.<entity_id>`.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/IpamScopeExternalAuthorityConfiguration AWS API Documentation
+    #
+    class IpamScopeExternalAuthorityConfiguration < Struct.new(
+      :type,
+      :external_resource_identifier)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -58906,12 +59069,32 @@ module Aws::EC2
     #   The description of the scope you want to modify.
     #   @return [String]
     #
+    # @!attribute [rw] external_authority_configuration
+    #   The configuration that links an Amazon VPC IPAM scope to an external
+    #   authority system. It specifies the type of external system and the
+    #   external resource identifier that identifies your account or
+    #   instance in that system.
+    #
+    #   In IPAM, an external authority is a third-party IP address
+    #   management system that provides CIDR blocks when you provision
+    #   address space for top-level IPAM pools. This allows you to use your
+    #   existing IP management system to control which address ranges are
+    #   allocated to Amazon Web Services while using Amazon VPC IPAM to
+    #   manage subnets within those ranges.
+    #   @return [Types::ExternalAuthorityConfiguration]
+    #
+    # @!attribute [rw] remove_external_authority_configuration
+    #   Remove the external authority configuration. `true` to remove.
+    #   @return [Boolean]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/ec2-2016-11-15/ModifyIpamScopeRequest AWS API Documentation
     #
     class ModifyIpamScopeRequest < Struct.new(
       :dry_run,
       :ipam_scope_id,
-      :description)
+      :description,
+      :external_authority_configuration,
+      :remove_external_authority_configuration)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -65203,8 +65386,8 @@ module Aws::EC2
     # @!attribute [rw] state
     #   The verification state of the VPC endpoint service.
     #
-    #   &gt;Consumers of the endpoint service can use the private name only
-    #   when the state is `verified`.
+    #   Consumers of the endpoint service can use the private name only when
+    #   the state is `verified`.
     #   @return [String]
     #
     # @!attribute [rw] type

data/lib/aws-sdk-ec2.rb

@@ -78,7 +78,7 @@ module Aws::EC2
   autoload :VpcPeeringConnection, 'aws-sdk-ec2/vpc_peering_connection'
   autoload :VpcAddress, 'aws-sdk-ec2/vpc_address'
 
-  GEM_VERSION = '1.571.0'
+  GEM_VERSION = '1.572.0'
 
 end
 

data/sig/client.rbs

@@ -2176,7 +2176,11 @@ module Aws
                                    ]?
                                  },
                                ],
-                               ?client_token: ::String
+                               ?client_token: ::String,
+                               ?external_authority_configuration: {
+                                 type: ("infoblox")?,
+                                 external_resource_identifier: ::String?
+                               }
                              ) -> _CreateIpamScopeResponseSuccess
                            | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _CreateIpamScopeResponseSuccess
 
@@ -4404,7 +4408,9 @@ module Aws
                                  ?ip_address_type: ("ipv4" | "dualstack" | "ipv6"),
                                  ?dns_options: {
                                    dns_record_ip_type: ("ipv4" | "dualstack" | "ipv6" | "service-defined")?,
-                                   private_dns_only_for_inbound_resolver_endpoint: bool?
+                                   private_dns_only_for_inbound_resolver_endpoint: bool?,
+                                   private_dns_preference: ::String?,
+                                   private_dns_specified_domains: Array[::String]?
                                  },
                                  ?client_token: ::String,
                                  ?private_dns_enabled: bool,
@@ -12027,7 +12033,12 @@ module Aws
       def modify_ipam_scope: (
                                ?dry_run: bool,
                                ipam_scope_id: ::String,
-                               ?description: ::String
+                               ?description: ::String,
+                               ?external_authority_configuration: {
+                                 type: ("infoblox")?,
+                                 external_resource_identifier: ::String?
+                               },
+                               ?remove_external_authority_configuration: bool
                              ) -> _ModifyIpamScopeResponseSuccess
                            | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _ModifyIpamScopeResponseSuccess
 
@@ -12752,7 +12763,9 @@ module Aws
                                  ?ip_address_type: ("ipv4" | "dualstack" | "ipv6"),
                                  ?dns_options: {
                                    dns_record_ip_type: ("ipv4" | "dualstack" | "ipv6" | "service-defined")?,
-                                   private_dns_only_for_inbound_resolver_endpoint: bool?
+                                   private_dns_only_for_inbound_resolver_endpoint: bool?,
+                                   private_dns_preference: ::String?,
+                                   private_dns_specified_domains: Array[::String]?
                                  },
                                  ?private_dns_enabled: bool,
                                  ?subnet_configurations: Array[

data/sig/types.rbs

@@ -2435,6 +2435,7 @@ module Aws::EC2
       attr_accessor description: ::String
       attr_accessor tag_specifications: ::Array[Types::TagSpecification]
       attr_accessor client_token: ::String
+      attr_accessor external_authority_configuration: Types::ExternalAuthorityConfiguration
       SENSITIVE: []
     end
 
@@ -7931,12 +7932,16 @@ module Aws::EC2
     class DnsOptions
       attr_accessor dns_record_ip_type: ("ipv4" | "dualstack" | "ipv6" | "service-defined")
       attr_accessor private_dns_only_for_inbound_resolver_endpoint: bool
+      attr_accessor private_dns_preference: ::String
+      attr_accessor private_dns_specified_domains: ::Array[::String]
       SENSITIVE: []
     end
 
     class DnsOptionsSpecification
       attr_accessor dns_record_ip_type: ("ipv4" | "dualstack" | "ipv6" | "service-defined")
       attr_accessor private_dns_only_for_inbound_resolver_endpoint: bool
+      attr_accessor private_dns_preference: ::String
+      attr_accessor private_dns_specified_domains: ::Array[::String]
       SENSITIVE: []
     end
 
@@ -8610,6 +8615,12 @@ module Aws::EC2
       SENSITIVE: []
     end
 
+    class ExternalAuthorityConfiguration
+      attr_accessor type: ("infoblox")
+      attr_accessor external_resource_identifier: ::String
+      SENSITIVE: []
+    end
+
     class FailedCapacityReservationFleetCancellationResult
       attr_accessor capacity_reservation_fleet_id: ::String
       attr_accessor cancel_capacity_reservation_fleet_error: Types::CancelCapacityReservationFleetError
@@ -11343,6 +11354,13 @@ module Aws::EC2
       attr_accessor pool_count: ::Integer
       attr_accessor state: ("create-in-progress" | "create-complete" | "create-failed" | "modify-in-progress" | "modify-complete" | "modify-failed" | "delete-in-progress" | "delete-complete" | "delete-failed" | "isolate-in-progress" | "isolate-complete" | "restore-in-progress")
       attr_accessor tags: ::Array[Types::Tag]
+      attr_accessor external_authority_configuration: Types::IpamScopeExternalAuthorityConfiguration
+      SENSITIVE: []
+    end
+
+    class IpamScopeExternalAuthorityConfiguration
+      attr_accessor type: ("infoblox")
+      attr_accessor external_resource_identifier: ::String
       SENSITIVE: []
     end
 
@@ -12616,6 +12634,8 @@ module Aws::EC2
       attr_accessor dry_run: bool
       attr_accessor ipam_scope_id: ::String
       attr_accessor description: ::String
+      attr_accessor external_authority_configuration: Types::ExternalAuthorityConfiguration
+      attr_accessor remove_external_authority_configuration: bool
       SENSITIVE: []
     end
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-ec2
 version: !ruby/object:Gem::Version
-  version: 1.571.0
+  version: 1.572.0
 platform: ruby
 authors:
 - Amazon Web Services