aws-sdk-vpclattice 1.55.0 → 1.56.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 4680bc19c2be51d197664ab89fad326eb055ab269798deecc18f3411cffc2659
-  data.tar.gz: 82ce819d6608e20132e870c6bb8f7569fbc1ef95c999abf890ce641f003fcfd3
+  metadata.gz: c447de6f9c64650ab10f3f1c586bf54d2a375391ab947a7accde3f17b0ddd2af
+  data.tar.gz: 476040a2b484134122144c48ae2efa24e3506a4de361bef830634f74a70647d3
 SHA512:
-  metadata.gz: d8e0f0f3d26c5d8b459252b86dddb9256411be62c9e23ee1c7949d15e24682a28e44ab05503349547e8fc6826cd2da61646024fc383a64244c6b55fcbcd52523
-  data.tar.gz: 38860e690dce0c41608c16564fe67086318756820c6652a2de36b9f953a88ff71239d23db16d9a6bdef830d9ff473a7c4e876676e390f11a344f04a4fcbdca49
+  metadata.gz: 7a3e24fa03f16796a2f405794549caec68c4fa5facb708acff6a0ee580b4867af97b0dee9a093ac4db2342fefa73518622f788a8d887a20fc04fdd7d4424e88c
+  data.tar.gz: af5a10022e1ef59e5538c10b9556d1472156180e6be9b61ddb8360a19a407b944373c0df4ba7896b497187849c100f42829b0addf28fb6dd253ed6798f404969

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.56.0 (2026-09-17)
+------------------
+
+* Feature - Adding support for CIDR Resource Configuration
+
 1.55.0 (2026-09-11)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.55.0
+1.56.0

data/lib/aws-sdk-vpclattice/client.rb

@@ -790,19 +790,34 @@ module Aws::VPCLattice
     #
     #   * **ARN** - An Amazon Web Services resource.
     #
+    #   * **CIDR** - A network segment, expressed as a range of IP addresses
+    #     (a CIDR block). Use this type to share a portion of your network
+    #     rather than an individual resource. A consumer accesses the
+    #     resources within the CIDR range through a `Tunnel` VPC endpoint. You
+    #     can't add a CIDR resource configuration to a service network. A
+    #     CIDR resource configuration must be associated with a resource
+    #     gateway whose DNS resolution is set to `IN_VPC`.
+    #
     # @option params [Array<String>] :port_ranges
-    #   (SINGLE, GROUP, CHILD) The TCP port ranges that a consumer can use to
-    #   access a resource configuration (for example: 1-65535). You can
-    #   separate port ranges using commas (for example: 1,2,22-30).
+    #   (SINGLE, GROUP, CHILD, CIDR) The port ranges that a consumer can use
+    #   to access a resource configuration (for example: 1-65535). You can
+    #   separate port ranges using commas (for example: 1,2,22-30). To resolve
+    #   DNS through a CIDR resource configuration, include port 53 in the port
+    #   ranges.
     #
     # @option params [String] :protocol
-    #   (SINGLE, GROUP) The protocol accepted by the resource configuration.
+    #   (SINGLE, GROUP, CIDR) The protocol accepted by the resource
+    #   configuration. The default is `TCP`. `TCP_UDP` is supported only for
+    #   CIDR resource configurations; specify it for a CIDR resource
+    #   configuration to allow DNS resolution, which uses UDP.
     #
     # @option params [String] :resource_gateway_identifier
-    #   (SINGLE, GROUP, ARN) The ID or ARN of the resource gateway used to
-    #   connect to the resource configuration. For a child resource
+    #   (SINGLE, GROUP, ARN, CIDR) The ID or ARN of the resource gateway used
+    #   to connect to the resource configuration. For a child resource
     #   configuration, this value is inherited from the parent resource
-    #   configuration.
+    #   configuration. For a CIDR resource configuration, the associated
+    #   resource gateway must have its DNS resolution set to `IN_VPC` so that
+    #   DNS queries resolve in the context of your VPC.
     #
     # @option params [String] :resource_configuration_group_identifier
     #   (CHILD) The ID or ARN of the parent resource configuration of type
@@ -821,6 +836,16 @@ module Aws::VPCLattice
     #   * **IP address** - For IPv4 and IPv6, only IP addresses in the VPC are
     #     supported.
     #
+    #   * **CIDR range** - For a resource configuration of type CIDR, specify
+    #     a `cidrResource` with one or more `cidrRanges` (for example,
+    #     `10.0.0.0/16`) that cover the IP addresses of the resources you want
+    #     to make accessible. You can specify up to 10 ranges, using IPv4,
+    #     IPv6, or both, and each range must include a prefix length. To
+    #     represent your entire network, specify `0.0.0.0/0` (IPv4) or `::/0`
+    #     (IPv6) as the only range. You can't use reserved ranges such as
+    #     `169.254.0.0/16`, `100.64.0.0/10`, `224.0.0.0/4`, `fe80::/10`, or
+    #     `ff00::/8`.
+    #
     # @option params [Boolean] :allow_association_to_shareable_service_network
     #   (SINGLE, GROUP, ARN) Specifies whether the resource configuration can
     #   be associated with a sharable service network. The default is false.
@@ -876,9 +901,9 @@ module Aws::VPCLattice
     #
     #   resp = client.create_resource_configuration({
     #     name: "ResourceConfigurationName", # required
-    #     type: "GROUP", # required, accepts GROUP, CHILD, SINGLE, ARN
+    #     type: "GROUP", # required, accepts GROUP, CHILD, SINGLE, ARN, CIDR
     #     port_ranges: ["PortRange"],
-    #     protocol: "TCP", # accepts TCP
+    #     protocol: "TCP", # accepts TCP, TCP_UDP
     #     resource_gateway_identifier: "ResourceGatewayIdentifier",
     #     resource_configuration_group_identifier: "ResourceConfigurationIdentifier",
     #     resource_configuration_definition: {
@@ -892,6 +917,9 @@ module Aws::VPCLattice
     #       arn_resource: {
     #         arn: "WildcardArn",
     #       },
+    #       cidr_resource: {
+    #         cidr_ranges: ["CidrRange"],
+    #       },
     #     },
     #     allow_association_to_shareable_service_network: false,
     #     custom_domain_name: "DomainName",
@@ -910,15 +938,17 @@ module Aws::VPCLattice
     #   resp.arn #=> String
     #   resp.resource_gateway_id #=> String
     #   resp.resource_configuration_group_id #=> String
-    #   resp.type #=> String, one of "GROUP", "CHILD", "SINGLE", "ARN"
+    #   resp.type #=> String, one of "GROUP", "CHILD", "SINGLE", "ARN", "CIDR"
     #   resp.port_ranges #=> Array
     #   resp.port_ranges[0] #=> String
-    #   resp.protocol #=> String, one of "TCP"
+    #   resp.protocol #=> String, one of "TCP", "TCP_UDP"
     #   resp.status #=> String, one of "ACTIVE", "CREATE_IN_PROGRESS", "UPDATE_IN_PROGRESS", "DELETE_IN_PROGRESS", "CREATE_FAILED", "UPDATE_FAILED", "DELETE_FAILED"
     #   resp.resource_configuration_definition.dns_resource.domain_name #=> String
     #   resp.resource_configuration_definition.dns_resource.ip_address_type #=> String, one of "IPV4", "IPV6", "DUALSTACK"
     #   resp.resource_configuration_definition.ip_resource.ip_address #=> String
     #   resp.resource_configuration_definition.arn_resource.arn #=> String
+    #   resp.resource_configuration_definition.cidr_resource.cidr_ranges #=> Array
+    #   resp.resource_configuration_definition.cidr_resource.cidr_ranges[0] #=> String
     #   resp.allow_association_to_shareable_service_network #=> Boolean
     #   resp.created_at #=> Time
     #   resp.failure_reason #=> String
@@ -993,15 +1023,19 @@ module Aws::VPCLattice
     #
     # @option params [String] :resource_config_dns_resolution
     #   Indicates how DNS is resolved for resource configurations associated
-    #   to this resource gateway. ResourceConfigDnsResolution is set at
-    #   creation time and cannot be changed.
+    #   with this resource gateway. This value is set when you create the
+    #   resource gateway and can't be changed afterward. The default is
+    #   `PUBLIC`.
     #
     #   * `IN_VPC` - DNS resolution occurs privately within the resource
     #     gateway's VPC. DNS queries for resources behind this resource
     #     gateway resolve using the DNS resolvers defined in the VPC's DHCP
     #     option sets. Use this when your resource domain names are hosted in
     #     private Route 53 hosted zones or on-premises DNS servers reachable
-    #     from the VPC.
+    #     from the VPC. A CIDR resource configuration requires a resource
+    #     gateway that uses `IN_VPC`, and an `IN_VPC` resource gateway can't
+    #     be used for ARN resource configurations, so a single resource
+    #     gateway can't serve both ARN and CIDR resource configurations.
     #
     #   * `PUBLIC` - DNS resolution occurs against public DNS resolvers. DNS
     #     queries for resources behind this resource gateway resolve using
@@ -2465,17 +2499,19 @@ module Aws::VPCLattice
     #   resp.arn #=> String
     #   resp.resource_gateway_id #=> String
     #   resp.resource_configuration_group_id #=> String
-    #   resp.type #=> String, one of "GROUP", "CHILD", "SINGLE", "ARN"
+    #   resp.type #=> String, one of "GROUP", "CHILD", "SINGLE", "ARN", "CIDR"
     #   resp.allow_association_to_shareable_service_network #=> Boolean
     #   resp.port_ranges #=> Array
     #   resp.port_ranges[0] #=> String
-    #   resp.protocol #=> String, one of "TCP"
+    #   resp.protocol #=> String, one of "TCP", "TCP_UDP"
     #   resp.custom_domain_name #=> String
     #   resp.status #=> String, one of "ACTIVE", "CREATE_IN_PROGRESS", "UPDATE_IN_PROGRESS", "DELETE_IN_PROGRESS", "CREATE_FAILED", "UPDATE_FAILED", "DELETE_FAILED"
     #   resp.resource_configuration_definition.dns_resource.domain_name #=> String
     #   resp.resource_configuration_definition.dns_resource.ip_address_type #=> String, one of "IPV4", "IPV6", "DUALSTACK"
     #   resp.resource_configuration_definition.ip_resource.ip_address #=> String
     #   resp.resource_configuration_definition.arn_resource.arn #=> String
+    #   resp.resource_configuration_definition.cidr_resource.cidr_ranges #=> Array
+    #   resp.resource_configuration_definition.cidr_resource.cidr_ranges[0] #=> String
     #   resp.created_at #=> Time
     #   resp.amazon_managed #=> Boolean
     #   resp.failure_reason #=> String
@@ -3182,7 +3218,7 @@ module Aws::VPCLattice
     #   resp.items[0].arn #=> String
     #   resp.items[0].resource_gateway_id #=> String
     #   resp.items[0].resource_configuration_group_id #=> String
-    #   resp.items[0].type #=> String, one of "GROUP", "CHILD", "SINGLE", "ARN"
+    #   resp.items[0].type #=> String, one of "GROUP", "CHILD", "SINGLE", "ARN", "CIDR"
     #   resp.items[0].status #=> String, one of "ACTIVE", "CREATE_IN_PROGRESS", "UPDATE_IN_PROGRESS", "DELETE_IN_PROGRESS", "CREATE_FAILED", "UPDATE_FAILED", "DELETE_FAILED"
     #   resp.items[0].amazon_managed #=> Boolean
     #   resp.items[0].created_at #=> Time
@@ -3252,6 +3288,9 @@ module Aws::VPCLattice
     #   resp.items[0].vpc_endpoint_owner #=> String
     #   resp.items[0].created_by #=> String
     #   resp.items[0].created_at #=> Time
+    #   resp.items[0].payer_responsibility #=> Array
+    #   resp.items[0].payer_responsibility[0].scope #=> String, one of "ResourceGatewayCharges"
+    #   resp.items[0].payer_responsibility[0].payer_responsibility_type #=> String, one of "VpcEndpointAccount", "ResourceGatewayAccount"
     #   resp.next_token #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/vpc-lattice-2022-11-30/ListResourceEndpointAssociations AWS API Documentation
@@ -4234,6 +4273,9 @@ module Aws::VPCLattice
     #       arn_resource: {
     #         arn: "WildcardArn",
     #       },
+    #       cidr_resource: {
+    #         cidr_ranges: ["CidrRange"],
+    #       },
     #     },
     #     allow_association_to_shareable_service_network: false,
     #     port_ranges: ["PortRange"],
@@ -4246,16 +4288,18 @@ module Aws::VPCLattice
     #   resp.arn #=> String
     #   resp.resource_gateway_id #=> String
     #   resp.resource_configuration_group_id #=> String
-    #   resp.type #=> String, one of "GROUP", "CHILD", "SINGLE", "ARN"
+    #   resp.type #=> String, one of "GROUP", "CHILD", "SINGLE", "ARN", "CIDR"
     #   resp.port_ranges #=> Array
     #   resp.port_ranges[0] #=> String
     #   resp.allow_association_to_shareable_service_network #=> Boolean
-    #   resp.protocol #=> String, one of "TCP"
+    #   resp.protocol #=> String, one of "TCP", "TCP_UDP"
     #   resp.status #=> String, one of "ACTIVE", "CREATE_IN_PROGRESS", "UPDATE_IN_PROGRESS", "DELETE_IN_PROGRESS", "CREATE_FAILED", "UPDATE_FAILED", "DELETE_FAILED"
     #   resp.resource_configuration_definition.dns_resource.domain_name #=> String
     #   resp.resource_configuration_definition.dns_resource.ip_address_type #=> String, one of "IPV4", "IPV6", "DUALSTACK"
     #   resp.resource_configuration_definition.ip_resource.ip_address #=> String
     #   resp.resource_configuration_definition.arn_resource.arn #=> String
+    #   resp.resource_configuration_definition.cidr_resource.cidr_ranges #=> Array
+    #   resp.resource_configuration_definition.cidr_resource.cidr_ranges[0] #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/vpc-lattice-2022-11-30/UpdateResourceConfiguration AWS API Documentation
     #
@@ -4680,7 +4724,7 @@ module Aws::VPCLattice
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-vpclattice'
-      context[:gem_version] = '1.55.0'
+      context[:gem_version] = '1.56.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-vpclattice/client_api.rb

@@ -31,6 +31,9 @@ module Aws::VPCLattice
     BatchUpdateRuleResponse = Shapes::StructureShape.new(name: 'BatchUpdateRuleResponse')
     Boolean = Shapes::BooleanShape.new(name: 'Boolean')
     CertificateArn = Shapes::StringShape.new(name: 'CertificateArn')
+    CidrRange = Shapes::StringShape.new(name: 'CidrRange')
+    CidrRangeList = Shapes::ListShape.new(name: 'CidrRangeList')
+    CidrResource = Shapes::StructureShape.new(name: 'CidrResource')
     ClientToken = Shapes::StringShape.new(name: 'ClientToken')
     ConflictException = Shapes::StructureShape.new(name: 'ConflictException')
     CreateAccessLogSubscriptionRequest = Shapes::StructureShape.new(name: 'CreateAccessLogSubscriptionRequest')
@@ -205,6 +208,10 @@ module Aws::VPCLattice
     PathMatchExact = Shapes::StringShape.new(name: 'PathMatchExact')
     PathMatchPrefix = Shapes::StringShape.new(name: 'PathMatchPrefix')
     PathMatchType = Shapes::UnionShape.new(name: 'PathMatchType')
+    PayerResponsibilityEntry = Shapes::StructureShape.new(name: 'PayerResponsibilityEntry')
+    PayerResponsibilityList = Shapes::ListShape.new(name: 'PayerResponsibilityList')
+    PayerResponsibilityPayer = Shapes::StringShape.new(name: 'PayerResponsibilityPayer')
+    PayerResponsibilityScope = Shapes::StringShape.new(name: 'PayerResponsibilityScope')
     PolicyString = Shapes::StringShape.new(name: 'PolicyString')
     Port = Shapes::IntegerShape.new(name: 'Port')
     PortRange = Shapes::StringShape.new(name: 'PortRange')
@@ -401,6 +408,11 @@ module Aws::VPCLattice
     BatchUpdateRuleResponse.add_member(:unsuccessful, Shapes::ShapeRef.new(shape: RuleUpdateFailureList, location_name: "unsuccessful"))
     BatchUpdateRuleResponse.struct_class = Types::BatchUpdateRuleResponse
 
+    CidrRangeList.member = Shapes::ShapeRef.new(shape: CidrRange)
+
+    CidrResource.add_member(:cidr_ranges, Shapes::ShapeRef.new(shape: CidrRangeList, location_name: "cidrRanges"))
+    CidrResource.struct_class = Types::CidrResource
+
     ConflictException.add_member(:message, Shapes::ShapeRef.new(shape: String, required: true, location_name: "message"))
     ConflictException.add_member(:resource_id, Shapes::ShapeRef.new(shape: String, required: true, location_name: "resourceId"))
     ConflictException.add_member(:resource_type, Shapes::ShapeRef.new(shape: String, required: true, location_name: "resourceType"))
@@ -1207,6 +1219,12 @@ module Aws::VPCLattice
     PathMatchType.add_member_subclass(:unknown, Types::PathMatchType::Unknown)
     PathMatchType.struct_class = Types::PathMatchType
 
+    PayerResponsibilityEntry.add_member(:scope, Shapes::ShapeRef.new(shape: PayerResponsibilityScope, location_name: "scope"))
+    PayerResponsibilityEntry.add_member(:payer_responsibility_type, Shapes::ShapeRef.new(shape: PayerResponsibilityPayer, location_name: "payerResponsibilityType"))
+    PayerResponsibilityEntry.struct_class = Types::PayerResponsibilityEntry
+
+    PayerResponsibilityList.member = Shapes::ShapeRef.new(shape: PayerResponsibilityEntry)
+
     PortRangeList.member = Shapes::ShapeRef.new(shape: PortRange)
 
     PrivateDnsSpecifiedDomainsList.member = Shapes::ShapeRef.new(shape: PrivateDnsSpecifiedDomain)
@@ -1238,10 +1256,12 @@ module Aws::VPCLattice
     ResourceConfigurationDefinition.add_member(:dns_resource, Shapes::ShapeRef.new(shape: DnsResource, location_name: "dnsResource"))
     ResourceConfigurationDefinition.add_member(:ip_resource, Shapes::ShapeRef.new(shape: IpResource, location_name: "ipResource"))
     ResourceConfigurationDefinition.add_member(:arn_resource, Shapes::ShapeRef.new(shape: ArnResource, location_name: "arnResource"))
+    ResourceConfigurationDefinition.add_member(:cidr_resource, Shapes::ShapeRef.new(shape: CidrResource, location_name: "cidrResource"))
     ResourceConfigurationDefinition.add_member(:unknown, Shapes::ShapeRef.new(shape: nil, location_name: 'unknown'))
     ResourceConfigurationDefinition.add_member_subclass(:dns_resource, Types::ResourceConfigurationDefinition::DnsResource)
     ResourceConfigurationDefinition.add_member_subclass(:ip_resource, Types::ResourceConfigurationDefinition::IpResource)
     ResourceConfigurationDefinition.add_member_subclass(:arn_resource, Types::ResourceConfigurationDefinition::ArnResource)
+    ResourceConfigurationDefinition.add_member_subclass(:cidr_resource, Types::ResourceConfigurationDefinition::CidrResource)
     ResourceConfigurationDefinition.add_member_subclass(:unknown, Types::ResourceConfigurationDefinition::Unknown)
     ResourceConfigurationDefinition.struct_class = Types::ResourceConfigurationDefinition
 
@@ -1273,6 +1293,7 @@ module Aws::VPCLattice
     ResourceEndpointAssociationSummary.add_member(:vpc_endpoint_owner, Shapes::ShapeRef.new(shape: VpcEndpointOwner, location_name: "vpcEndpointOwner"))
     ResourceEndpointAssociationSummary.add_member(:created_by, Shapes::ShapeRef.new(shape: AccountId, location_name: "createdBy"))
     ResourceEndpointAssociationSummary.add_member(:created_at, Shapes::ShapeRef.new(shape: Timestamp, location_name: "createdAt"))
+    ResourceEndpointAssociationSummary.add_member(:payer_responsibility, Shapes::ShapeRef.new(shape: PayerResponsibilityList, location_name: "payerResponsibility"))
     ResourceEndpointAssociationSummary.struct_class = Types::ResourceEndpointAssociationSummary
 
     ResourceGatewayList.member = Shapes::ShapeRef.new(shape: ResourceGatewaySummary)

data/lib/aws-sdk-vpclattice/types.rb

@@ -127,6 +127,21 @@ module Aws::VPCLattice
       include Aws::Structure
     end
 
+    # Describes a CIDR resource, which represents a network segment as one
+    # or more CIDR ranges.
+    #
+    # @!attribute [rw] cidr_ranges
+    #   The CIDR ranges of the network segment, for example, `10.0.0.0/16`.
+    #   @return [Array<String>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/vpc-lattice-2022-11-30/CidrResource AWS API Documentation
+    #
+    class CidrResource < Struct.new(
+      :cidr_ranges)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # The request conflicts with the current state of the resource. Updating
     # or deleting a resource can cause an inconsistent state.
     #
@@ -352,23 +367,38 @@ module Aws::VPCLattice
     #     configuration.
     #
     #   * **ARN** - An Amazon Web Services resource.
+    #
+    #   * **CIDR** - A network segment, expressed as a range of IP addresses
+    #     (a CIDR block). Use this type to share a portion of your network
+    #     rather than an individual resource. A consumer accesses the
+    #     resources within the CIDR range through a `Tunnel` VPC endpoint.
+    #     You can't add a CIDR resource configuration to a service network.
+    #     A CIDR resource configuration must be associated with a resource
+    #     gateway whose DNS resolution is set to `IN_VPC`.
     #   @return [String]
     #
     # @!attribute [rw] port_ranges
-    #   (SINGLE, GROUP, CHILD) The TCP port ranges that a consumer can use
+    #   (SINGLE, GROUP, CHILD, CIDR) The port ranges that a consumer can use
     #   to access a resource configuration (for example: 1-65535). You can
-    #   separate port ranges using commas (for example: 1,2,22-30).
+    #   separate port ranges using commas (for example: 1,2,22-30). To
+    #   resolve DNS through a CIDR resource configuration, include port 53
+    #   in the port ranges.
     #   @return [Array<String>]
     #
     # @!attribute [rw] protocol
-    #   (SINGLE, GROUP) The protocol accepted by the resource configuration.
+    #   (SINGLE, GROUP, CIDR) The protocol accepted by the resource
+    #   configuration. The default is `TCP`. `TCP_UDP` is supported only for
+    #   CIDR resource configurations; specify it for a CIDR resource
+    #   configuration to allow DNS resolution, which uses UDP.
     #   @return [String]
     #
     # @!attribute [rw] resource_gateway_identifier
-    #   (SINGLE, GROUP, ARN) The ID or ARN of the resource gateway used to
-    #   connect to the resource configuration. For a child resource
+    #   (SINGLE, GROUP, ARN, CIDR) The ID or ARN of the resource gateway
+    #   used to connect to the resource configuration. For a child resource
     #   configuration, this value is inherited from the parent resource
-    #   configuration.
+    #   configuration. For a CIDR resource configuration, the associated
+    #   resource gateway must have its DNS resolution set to `IN_VPC` so
+    #   that DNS queries resolve in the context of your VPC.
     #   @return [String]
     #
     # @!attribute [rw] resource_configuration_group_identifier
@@ -388,6 +418,16 @@ module Aws::VPCLattice
     #
     #   * **IP address** - For IPv4 and IPv6, only IP addresses in the VPC
     #     are supported.
+    #
+    #   * **CIDR range** - For a resource configuration of type CIDR,
+    #     specify a `cidrResource` with one or more `cidrRanges` (for
+    #     example, `10.0.0.0/16`) that cover the IP addresses of the
+    #     resources you want to make accessible. You can specify up to 10
+    #     ranges, using IPv4, IPv6, or both, and each range must include a
+    #     prefix length. To represent your entire network, specify
+    #     `0.0.0.0/0` (IPv4) or `::/0` (IPv6) as the only range. You can't
+    #     use reserved ranges such as `169.254.0.0/16`, `100.64.0.0/10`,
+    #     `224.0.0.0/4`, `fe80::/10`, or `ff00::/8`.
     #   @return [Types::ResourceConfigurationDefinition]
     #
     # @!attribute [rw] allow_association_to_shareable_service_network
@@ -483,6 +523,12 @@ module Aws::VPCLattice
     #     configuration.
     #
     #   * **ARN** - An Amazon Web Services resource.
+    #
+    #   * **CIDR** - A network segment, expressed as a range of IP addresses
+    #     (a CIDR block). A consumer accesses the resources within the CIDR
+    #     range through a `Tunnel` VPC endpoint. A CIDR resource
+    #     configuration must be associated with a resource gateway whose DNS
+    #     resolution is set to `IN_VPC`.
     #   @return [String]
     #
     # @!attribute [rw] port_ranges
@@ -626,15 +672,20 @@ module Aws::VPCLattice
     #
     # @!attribute [rw] resource_config_dns_resolution
     #   Indicates how DNS is resolved for resource configurations associated
-    #   to this resource gateway. ResourceConfigDnsResolution is set at
-    #   creation time and cannot be changed.
+    #   with this resource gateway. This value is set when you create the
+    #   resource gateway and can't be changed afterward. The default is
+    #   `PUBLIC`.
     #
     #   * `IN_VPC` - DNS resolution occurs privately within the resource
     #     gateway's VPC. DNS queries for resources behind this resource
     #     gateway resolve using the DNS resolvers defined in the VPC's DHCP
     #     option sets. Use this when your resource domain names are hosted
     #     in private Route 53 hosted zones or on-premises DNS servers
-    #     reachable from the VPC.
+    #     reachable from the VPC. A CIDR resource configuration requires a
+    #     resource gateway that uses `IN_VPC`, and an `IN_VPC` resource
+    #     gateway can't be used for ARN resource configurations, so a
+    #     single resource gateway can't serve both ARN and CIDR resource
+    #     configurations.
     #
     #   * `PUBLIC` - DNS resolution occurs against public DNS resolvers. DNS
     #     queries for resources behind this resource gateway resolve using
@@ -2238,7 +2289,7 @@ module Aws::VPCLattice
     #   The ID of the resource gateway used to connect to the resource
     #   configuration in a given VPC. You can specify the resource gateway
     #   identifier only for resource configurations with type SINGLE, GROUP,
-    #   or ARN.
+    #   ARN, or CIDR.
     #   @return [String]
     #
     # @!attribute [rw] resource_configuration_group_id
@@ -2256,6 +2307,9 @@ module Aws::VPCLattice
     #     configuration.
     #
     #   * `ARN` - An Amazon Web Services resource.
+    #
+    #   * `CIDR` - A network segment (a range of IP addresses) accessed
+    #     through a `Tunnel` VPC endpoint.
     #   @return [String]
     #
     # @!attribute [rw] allow_association_to_shareable_service_network
@@ -2631,7 +2685,8 @@ module Aws::VPCLattice
     #   @return [Time]
     #
     # @!attribute [rw] private_dns_entry
-    #   The private DNS entry for the service.
+    #   The private DNS entry for the service. This entry includes only the
+    #   domain name.
     #   @return [Types::DnsEntry]
     #
     # @!attribute [rw] private_dns_enabled
@@ -4067,6 +4122,30 @@ module Aws::VPCLattice
       class Unknown < PathMatchType; end
     end
 
+    # Specifies which account pays for a category of charges on a VPC
+    # endpoint association.
+    #
+    # @!attribute [rw] scope
+    #   The category of charges that this entry applies to.
+    #   `ResourceGatewayCharges` covers the resource gateway's data
+    #   processing charge.
+    #   @return [String]
+    #
+    # @!attribute [rw] payer_responsibility_type
+    #   The account that pays this category of charges. `VpcEndpointAccount`
+    #   owns the VPC endpoint. `ResourceGatewayAccount` owns the resource
+    #   gateway.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/vpc-lattice-2022-11-30/PayerResponsibilityEntry AWS API Documentation
+    #
+    class PayerResponsibilityEntry < Struct.new(
+      :scope,
+      :payer_responsibility_type)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @!attribute [rw] resource_identifier
     #   The ID or ARN of the service network or service for which the policy
     #   is created.
@@ -4189,12 +4268,20 @@ module Aws::VPCLattice
     #   The Amazon Resource Name (ARN) of the resource.
     #   @return [Types::ArnResource]
     #
+    # @!attribute [rw] cidr_resource
+    #   The network segment for a resource configuration of type CIDR,
+    #   specified as one or more CIDR ranges (`cidrRanges`). Resources whose
+    #   IP addresses fall within these ranges are reachable through a
+    #   `Tunnel` VPC endpoint.
+    #   @return [Types::CidrResource]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/vpc-lattice-2022-11-30/ResourceConfigurationDefinition AWS API Documentation
     #
     class ResourceConfigurationDefinition < Struct.new(
       :dns_resource,
       :ip_resource,
       :arn_resource,
+      :cidr_resource,
       :unknown)
       SENSITIVE = []
       include Aws::Structure
@@ -4203,6 +4290,7 @@ module Aws::VPCLattice
       class DnsResource < ResourceConfigurationDefinition; end
       class IpResource < ResourceConfigurationDefinition; end
       class ArnResource < ResourceConfigurationDefinition; end
+      class CidrResource < ResourceConfigurationDefinition; end
       class Unknown < ResourceConfigurationDefinition; end
     end
 
@@ -4240,6 +4328,9 @@ module Aws::VPCLattice
     #     configuration.
     #
     #   * `ARN` - An Amazon Web Services resource.
+    #
+    #   * `CIDR` - A network segment (a range of IP addresses) accessed
+    #     through a `Tunnel` VPC endpoint.
     #   @return [String]
     #
     # @!attribute [rw] status
@@ -4335,6 +4426,11 @@ module Aws::VPCLattice
     #   ISO-8601 format.
     #   @return [Time]
     #
+    # @!attribute [rw] payer_responsibility
+    #   Who pays for each category of charges on the VPC endpoint
+    #   association.
+    #   @return [Array<Types::PayerResponsibilityEntry>]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/vpc-lattice-2022-11-30/ResourceEndpointAssociationSummary AWS API Documentation
     #
     class ResourceEndpointAssociationSummary < Struct.new(
@@ -4346,7 +4442,8 @@ module Aws::VPCLattice
       :vpc_endpoint_id,
       :vpc_endpoint_owner,
       :created_by,
-      :created_at)
+      :created_at,
+      :payer_responsibility)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -4749,7 +4846,8 @@ module Aws::VPCLattice
     #   @return [Types::DnsEntry]
     #
     # @!attribute [rw] private_dns_entry
-    #   The private DNS entry for the service.
+    #   The private DNS entry for the service. This entry includes only the
+    #   domain name.
     #   @return [Types::DnsEntry]
     #
     # @!attribute [rw] is_managed_association
@@ -5681,6 +5779,9 @@ module Aws::VPCLattice
     #     configuration.
     #
     #   * `ARN` - An Amazon Web Services resource.
+    #
+    #   * `CIDR` - A network segment (a range of IP addresses) accessed
+    #     through a `Tunnel` VPC endpoint.
     #   @return [String]
     #
     # @!attribute [rw] port_ranges

data/lib/aws-sdk-vpclattice.rb

@@ -55,7 +55,7 @@ module Aws::VPCLattice
   autoload :EndpointProvider, 'aws-sdk-vpclattice/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-vpclattice/endpoints'
 
-  GEM_VERSION = '1.55.0'
+  GEM_VERSION = '1.56.0'
 
 end
 

data/sig/client.rbs

@@ -147,9 +147,9 @@ module Aws
         def arn: () -> ::String
         def resource_gateway_id: () -> ::String
         def resource_configuration_group_id: () -> ::String
-        def type: () -> ("GROUP" | "CHILD" | "SINGLE" | "ARN")
+        def type: () -> ("GROUP" | "CHILD" | "SINGLE" | "ARN" | "CIDR")
         def port_ranges: () -> ::Array[::String]
-        def protocol: () -> ("TCP")
+        def protocol: () -> ("TCP" | "TCP_UDP")
         def status: () -> ("ACTIVE" | "CREATE_IN_PROGRESS" | "UPDATE_IN_PROGRESS" | "DELETE_IN_PROGRESS" | "CREATE_FAILED" | "UPDATE_FAILED" | "DELETE_FAILED")
         def resource_configuration_definition: () -> Types::ResourceConfigurationDefinition
         def allow_association_to_shareable_service_network: () -> bool
@@ -163,9 +163,9 @@ module Aws
       # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/VPCLattice/Client.html#create_resource_configuration-instance_method
       def create_resource_configuration: (
                                            name: ::String,
-                                           type: ("GROUP" | "CHILD" | "SINGLE" | "ARN"),
+                                           type: ("GROUP" | "CHILD" | "SINGLE" | "ARN" | "CIDR"),
                                            ?port_ranges: Array[::String],
-                                           ?protocol: ("TCP"),
+                                           ?protocol: ("TCP" | "TCP_UDP"),
                                            ?resource_gateway_identifier: ::String,
                                            ?resource_configuration_group_identifier: ::String,
                                            ?resource_configuration_definition: Params::resource_configuration_definition,
@@ -613,10 +613,10 @@ module Aws
         def arn: () -> ::String
         def resource_gateway_id: () -> ::String
         def resource_configuration_group_id: () -> ::String
-        def type: () -> ("GROUP" | "CHILD" | "SINGLE" | "ARN")
+        def type: () -> ("GROUP" | "CHILD" | "SINGLE" | "ARN" | "CIDR")
         def allow_association_to_shareable_service_network: () -> bool
         def port_ranges: () -> ::Array[::String]
-        def protocol: () -> ("TCP")
+        def protocol: () -> ("TCP" | "TCP_UDP")
         def custom_domain_name: () -> ::String
         def status: () -> ("ACTIVE" | "CREATE_IN_PROGRESS" | "UPDATE_IN_PROGRESS" | "DELETE_IN_PROGRESS" | "CREATE_FAILED" | "UPDATE_FAILED" | "DELETE_FAILED")
         def resource_configuration_definition: () -> Types::ResourceConfigurationDefinition
@@ -1158,10 +1158,10 @@ module Aws
         def arn: () -> ::String
         def resource_gateway_id: () -> ::String
         def resource_configuration_group_id: () -> ::String
-        def type: () -> ("GROUP" | "CHILD" | "SINGLE" | "ARN")
+        def type: () -> ("GROUP" | "CHILD" | "SINGLE" | "ARN" | "CIDR")
         def port_ranges: () -> ::Array[::String]
         def allow_association_to_shareable_service_network: () -> bool
-        def protocol: () -> ("TCP")
+        def protocol: () -> ("TCP" | "TCP_UDP")
         def status: () -> ("ACTIVE" | "CREATE_IN_PROGRESS" | "UPDATE_IN_PROGRESS" | "DELETE_IN_PROGRESS" | "CREATE_FAILED" | "UPDATE_FAILED" | "DELETE_FAILED")
         def resource_configuration_definition: () -> Types::ResourceConfigurationDefinition
       end

data/sig/params.rbs

@@ -60,6 +60,9 @@ module Aws
       }?,
       arn_resource: {
         arn: ::String?
+      }?,
+      cidr_resource: {
+        cidr_ranges: Array[::String]?
       }?
     }
 

data/sig/types.rbs

@@ -43,6 +43,11 @@ module Aws::VPCLattice
       SENSITIVE: []
     end
 
+    class CidrResource
+      attr_accessor cidr_ranges: ::Array[::String]
+      SENSITIVE: []
+    end
+
     class ConflictException
       attr_accessor message: ::String
       attr_accessor resource_id: ::String
@@ -94,9 +99,9 @@ module Aws::VPCLattice
 
     class CreateResourceConfigurationRequest
       attr_accessor name: ::String
-      attr_accessor type: ("GROUP" | "CHILD" | "SINGLE" | "ARN")
+      attr_accessor type: ("GROUP" | "CHILD" | "SINGLE" | "ARN" | "CIDR")
       attr_accessor port_ranges: ::Array[::String]
-      attr_accessor protocol: ("TCP")
+      attr_accessor protocol: ("TCP" | "TCP_UDP")
       attr_accessor resource_gateway_identifier: ::String
       attr_accessor resource_configuration_group_identifier: ::String
       attr_accessor resource_configuration_definition: Types::ResourceConfigurationDefinition
@@ -115,9 +120,9 @@ module Aws::VPCLattice
       attr_accessor arn: ::String
       attr_accessor resource_gateway_id: ::String
       attr_accessor resource_configuration_group_id: ::String
-      attr_accessor type: ("GROUP" | "CHILD" | "SINGLE" | "ARN")
+      attr_accessor type: ("GROUP" | "CHILD" | "SINGLE" | "ARN" | "CIDR")
       attr_accessor port_ranges: ::Array[::String]
-      attr_accessor protocol: ("TCP")
+      attr_accessor protocol: ("TCP" | "TCP_UDP")
       attr_accessor status: ("ACTIVE" | "CREATE_IN_PROGRESS" | "UPDATE_IN_PROGRESS" | "DELETE_IN_PROGRESS" | "CREATE_FAILED" | "UPDATE_FAILED" | "DELETE_FAILED")
       attr_accessor resource_configuration_definition: Types::ResourceConfigurationDefinition
       attr_accessor allow_association_to_shareable_service_network: bool
@@ -583,10 +588,10 @@ module Aws::VPCLattice
       attr_accessor arn: ::String
       attr_accessor resource_gateway_id: ::String
       attr_accessor resource_configuration_group_id: ::String
-      attr_accessor type: ("GROUP" | "CHILD" | "SINGLE" | "ARN")
+      attr_accessor type: ("GROUP" | "CHILD" | "SINGLE" | "ARN" | "CIDR")
       attr_accessor allow_association_to_shareable_service_network: bool
       attr_accessor port_ranges: ::Array[::String]
-      attr_accessor protocol: ("TCP")
+      attr_accessor protocol: ("TCP" | "TCP_UDP")
       attr_accessor custom_domain_name: ::String
       attr_accessor status: ("ACTIVE" | "CREATE_IN_PROGRESS" | "UPDATE_IN_PROGRESS" | "DELETE_IN_PROGRESS" | "CREATE_FAILED" | "UPDATE_FAILED" | "DELETE_FAILED")
       attr_accessor resource_configuration_definition: Types::ResourceConfigurationDefinition
@@ -1101,6 +1106,12 @@ module Aws::VPCLattice
       end
     end
 
+    class PayerResponsibilityEntry
+      attr_accessor scope: ("ResourceGatewayCharges")
+      attr_accessor payer_responsibility_type: ("VpcEndpointAccount" | "ResourceGatewayAccount")
+      SENSITIVE: []
+    end
+
     class PutAuthPolicyRequest
       attr_accessor resource_identifier: ::String
       attr_accessor policy: ::String
@@ -1138,6 +1149,7 @@ module Aws::VPCLattice
       attr_accessor dns_resource: Types::DnsResource
       attr_accessor ip_resource: Types::IpResource
       attr_accessor arn_resource: Types::ArnResource
+      attr_accessor cidr_resource: Types::CidrResource
       attr_accessor unknown: untyped
       SENSITIVE: []
 
@@ -1147,6 +1159,8 @@ module Aws::VPCLattice
       end
       class ArnResource < ResourceConfigurationDefinition
       end
+      class CidrResource < ResourceConfigurationDefinition
+      end
       class Unknown < ResourceConfigurationDefinition
       end
     end
@@ -1157,7 +1171,7 @@ module Aws::VPCLattice
       attr_accessor arn: ::String
       attr_accessor resource_gateway_id: ::String
       attr_accessor resource_configuration_group_id: ::String
-      attr_accessor type: ("GROUP" | "CHILD" | "SINGLE" | "ARN")
+      attr_accessor type: ("GROUP" | "CHILD" | "SINGLE" | "ARN" | "CIDR")
       attr_accessor status: ("ACTIVE" | "CREATE_IN_PROGRESS" | "UPDATE_IN_PROGRESS" | "DELETE_IN_PROGRESS" | "CREATE_FAILED" | "UPDATE_FAILED" | "DELETE_FAILED")
       attr_accessor amazon_managed: bool
       attr_accessor created_at: ::Time
@@ -1178,6 +1192,7 @@ module Aws::VPCLattice
       attr_accessor vpc_endpoint_owner: ::String
       attr_accessor created_by: ::String
       attr_accessor created_at: ::Time
+      attr_accessor payer_responsibility: ::Array[Types::PayerResponsibilityEntry]
       SENSITIVE: []
     end
 
@@ -1514,10 +1529,10 @@ module Aws::VPCLattice
       attr_accessor arn: ::String
       attr_accessor resource_gateway_id: ::String
       attr_accessor resource_configuration_group_id: ::String
-      attr_accessor type: ("GROUP" | "CHILD" | "SINGLE" | "ARN")
+      attr_accessor type: ("GROUP" | "CHILD" | "SINGLE" | "ARN" | "CIDR")
       attr_accessor port_ranges: ::Array[::String]
       attr_accessor allow_association_to_shareable_service_network: bool
-      attr_accessor protocol: ("TCP")
+      attr_accessor protocol: ("TCP" | "TCP_UDP")
       attr_accessor status: ("ACTIVE" | "CREATE_IN_PROGRESS" | "UPDATE_IN_PROGRESS" | "DELETE_IN_PROGRESS" | "CREATE_FAILED" | "UPDATE_FAILED" | "DELETE_FAILED")
       attr_accessor resource_configuration_definition: Types::ResourceConfigurationDefinition
       SENSITIVE: []

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-vpclattice
 version: !ruby/object:Gem::Version
-  version: 1.55.0
+  version: 1.56.0
 platform: ruby
 authors:
 - Amazon Web Services