@aws-sdk/client-ec2 3.1141.0 → 3.1142.0

package/dist-types/commands/DisassociateVpcCidrBlockCommand.d.ts

@@ -1,5 +1,5 @@
 import type { MetadataBearer as __MetadataBearer } from "@smithy/types";
-import type { DisassociateVpcCidrBlockRequest, DisassociateVpcCidrBlockResult } from "../models/models_5";
+import type { DisassociateVpcCidrBlockRequest, DisassociateVpcCidrBlockResult } from "../models/models_6";
 /**
  * @public
  */

package/dist-types/commands/EnableAddressTransferCommand.d.ts

@@ -1,6 +1,5 @@
 import type { MetadataBearer as __MetadataBearer } from "@smithy/types";
-import type { EnableAddressTransferRequest } from "../models/models_5";
-import type { EnableAddressTransferResult } from "../models/models_6";
+import type { EnableAddressTransferRequest, EnableAddressTransferResult } from "../models/models_6";
 /**
  * @public
  */

package/dist-types/commands/EnableIpamInternetRegistryAssociationCommand.d.ts

@@ -52,10 +52,10 @@ declare const EnableIpamInternetRegistryAssociationCommand_base: {
  * //     IpamInternetRegistryAssociationArn: "STRING_VALUE",
  * //     IpamId: "STRING_VALUE",
  * //     IpamRegion: "STRING_VALUE",
- * //     Rir: "ripe" || "apnic" || "arin" || "lacnic",
+ * //     Rir: "ripe" || "apnic" || "arin" || "lacnic" || "nicbr",
  * //     OrganizationHandle: "STRING_VALUE",
  * //     Description: "STRING_VALUE",
- * //     State: "pending-enable" || "create-in-progress" || "create-failed" || "enable-in-progress" || "enable-complete" || "enable-failed" || "delete-in-progress" || "delete-complete" || "delete-failed",
+ * //     State: "pending-enable" || "create-in-progress" || "create-failed" || "enable-in-progress" || "enable-complete" || "enable-failed" || "disable-in-progress" || "disable-complete" || "disable-failed" || "delete-in-progress" || "delete-complete" || "delete-failed",
  * //     StateMessage: "STRING_VALUE",
  * //     ChildRequestXml: "STRING_VALUE",
  * //     Tags: [ // TagList

package/dist-types/commands/GetClientVpnEndpointAuthorizationPolicyCommand.d.ts

@@ -0,0 +1,76 @@
+import type { MetadataBearer as __MetadataBearer } from "@smithy/types";
+import type { GetClientVpnEndpointAuthorizationPolicyRequest, GetClientVpnEndpointAuthorizationPolicyResult } from "../models/models_6";
+/**
+ * @public
+ */
+export type { __MetadataBearer };
+/**
+ * @public
+ *
+ * The input for {@link GetClientVpnEndpointAuthorizationPolicyCommand}.
+ */
+export interface GetClientVpnEndpointAuthorizationPolicyCommandInput extends GetClientVpnEndpointAuthorizationPolicyRequest {
+}
+/**
+ * @public
+ *
+ * The output of {@link GetClientVpnEndpointAuthorizationPolicyCommand}.
+ */
+export interface GetClientVpnEndpointAuthorizationPolicyCommandOutput extends GetClientVpnEndpointAuthorizationPolicyResult, __MetadataBearer {
+}
+declare const GetClientVpnEndpointAuthorizationPolicyCommand_base: {
+    new (input: GetClientVpnEndpointAuthorizationPolicyCommandInput): import("@smithy/core/client").CommandImpl<GetClientVpnEndpointAuthorizationPolicyCommandInput, GetClientVpnEndpointAuthorizationPolicyCommandOutput, import("..").EC2ClientResolvedConfig, import("..").ServiceInputTypes, import("..").ServiceOutputTypes>;
+    new (input: GetClientVpnEndpointAuthorizationPolicyCommandInput): import("@smithy/core/client").CommandImpl<GetClientVpnEndpointAuthorizationPolicyCommandInput, GetClientVpnEndpointAuthorizationPolicyCommandOutput, import("..").EC2ClientResolvedConfig, import("..").ServiceInputTypes, import("..").ServiceOutputTypes>;
+    getEndpointParameterInstructions(): import("@smithy/types").EndpointParameterInstructions;
+};
+/**
+ * <p>Describes the authorization policy for a Client VPN endpoint.</p>
+ * @example
+ * Use a bare-bones client and the command you need to make an API call.
+ * ```javascript
+ * import { EC2Client, GetClientVpnEndpointAuthorizationPolicyCommand } from "@aws-sdk/client-ec2"; // ES Modules import
+ * // const { EC2Client, GetClientVpnEndpointAuthorizationPolicyCommand } = require("@aws-sdk/client-ec2"); // CommonJS import
+ * // import type { EC2ClientConfig } from "@aws-sdk/client-ec2";
+ * const config = {}; // type is EC2ClientConfig
+ * const client = new EC2Client(config);
+ * const input = { // GetClientVpnEndpointAuthorizationPolicyRequest
+ *   ClientVpnEndpointId: "STRING_VALUE", // required
+ *   DryRun: true || false,
+ * };
+ * const command = new GetClientVpnEndpointAuthorizationPolicyCommand(input);
+ * const response = await client.send(command);
+ * // { // GetClientVpnEndpointAuthorizationPolicyResult
+ * //   ClientVpnEndpointId: "STRING_VALUE",
+ * //   PolicyDocument: "STRING_VALUE",
+ * //   Description: "STRING_VALUE",
+ * //   ShadowMode: "enabled" || "disabled",
+ * //   Status: "creating" || "updating" || "active" || "failed" || "deleting",
+ * // };
+ *
+ * ```
+ *
+ * @param GetClientVpnEndpointAuthorizationPolicyCommandInput - {@link GetClientVpnEndpointAuthorizationPolicyCommandInput}
+ * @returns {@link GetClientVpnEndpointAuthorizationPolicyCommandOutput}
+ * @see {@link GetClientVpnEndpointAuthorizationPolicyCommandInput} for command's `input` shape.
+ * @see {@link GetClientVpnEndpointAuthorizationPolicyCommandOutput} for command's `response` shape.
+ * @see {@link EC2ClientResolvedConfig | config} for EC2Client's `config` shape.
+ *
+ * @throws {@link EC2ServiceException}
+ * <p>Base exception class for all service exceptions from EC2 service.</p>
+ *
+ *
+ * @public
+ */
+export declare class GetClientVpnEndpointAuthorizationPolicyCommand extends GetClientVpnEndpointAuthorizationPolicyCommand_base {
+    /** @internal type navigation helper, not in runtime. */
+    protected static __types: {
+        api: {
+            input: GetClientVpnEndpointAuthorizationPolicyRequest;
+            output: GetClientVpnEndpointAuthorizationPolicyResult;
+        };
+        sdk: {
+            input: GetClientVpnEndpointAuthorizationPolicyCommandInput;
+            output: GetClientVpnEndpointAuthorizationPolicyCommandOutput;
+        };
+    };
+}

package/dist-types/commands/GetVpnTunnelReplacementStatusCommand.d.ts

@@ -1,5 +1,6 @@
 import type { MetadataBearer as __MetadataBearer } from "@smithy/types";
-import type { GetVpnTunnelReplacementStatusRequest, GetVpnTunnelReplacementStatusResult } from "../models/models_6";
+import type { GetVpnTunnelReplacementStatusRequest } from "../models/models_6";
+import type { GetVpnTunnelReplacementStatusResult } from "../models/models_7";
 /**
  * @public
  */

package/dist-types/commands/ImportClientVpnClientCertificateRevocationListCommand.d.ts

@@ -1,5 +1,5 @@
 import type { MetadataBearer as __MetadataBearer } from "@smithy/types";
-import type { ImportClientVpnClientCertificateRevocationListRequest, ImportClientVpnClientCertificateRevocationListResult } from "../models/models_6";
+import type { ImportClientVpnClientCertificateRevocationListRequest, ImportClientVpnClientCertificateRevocationListResult } from "../models/models_7";
 /**
  * @public
  */

package/dist-types/commands/ModifyClientVpnEndpointAuthorizationPolicyCommand.d.ts

@@ -0,0 +1,76 @@
+import type { MetadataBearer as __MetadataBearer } from "@smithy/types";
+import type { ModifyClientVpnEndpointAuthorizationPolicyRequest, ModifyClientVpnEndpointAuthorizationPolicyResult } from "../models/models_7";
+/**
+ * @public
+ */
+export type { __MetadataBearer };
+/**
+ * @public
+ *
+ * The input for {@link ModifyClientVpnEndpointAuthorizationPolicyCommand}.
+ */
+export interface ModifyClientVpnEndpointAuthorizationPolicyCommandInput extends ModifyClientVpnEndpointAuthorizationPolicyRequest {
+}
+/**
+ * @public
+ *
+ * The output of {@link ModifyClientVpnEndpointAuthorizationPolicyCommand}.
+ */
+export interface ModifyClientVpnEndpointAuthorizationPolicyCommandOutput extends ModifyClientVpnEndpointAuthorizationPolicyResult, __MetadataBearer {
+}
+declare const ModifyClientVpnEndpointAuthorizationPolicyCommand_base: {
+    new (input: ModifyClientVpnEndpointAuthorizationPolicyCommandInput): import("@smithy/core/client").CommandImpl<ModifyClientVpnEndpointAuthorizationPolicyCommandInput, ModifyClientVpnEndpointAuthorizationPolicyCommandOutput, import("..").EC2ClientResolvedConfig, import("..").ServiceInputTypes, import("..").ServiceOutputTypes>;
+    new (input: ModifyClientVpnEndpointAuthorizationPolicyCommandInput): import("@smithy/core/client").CommandImpl<ModifyClientVpnEndpointAuthorizationPolicyCommandInput, ModifyClientVpnEndpointAuthorizationPolicyCommandOutput, import("..").EC2ClientResolvedConfig, import("..").ServiceInputTypes, import("..").ServiceOutputTypes>;
+    getEndpointParameterInstructions(): import("@smithy/types").EndpointParameterInstructions;
+};
+/**
+ * <p>Creates or updates the authorization policy for a Client VPN endpoint. A Client VPN endpoint can have one authorization policy. If a policy already exists for the endpoint, the values that you specify replace the corresponding values in the existing policy, and values that you do not specify remain unchanged.</p>
+ * @example
+ * Use a bare-bones client and the command you need to make an API call.
+ * ```javascript
+ * import { EC2Client, ModifyClientVpnEndpointAuthorizationPolicyCommand } from "@aws-sdk/client-ec2"; // ES Modules import
+ * // const { EC2Client, ModifyClientVpnEndpointAuthorizationPolicyCommand } = require("@aws-sdk/client-ec2"); // CommonJS import
+ * // import type { EC2ClientConfig } from "@aws-sdk/client-ec2";
+ * const config = {}; // type is EC2ClientConfig
+ * const client = new EC2Client(config);
+ * const input = { // ModifyClientVpnEndpointAuthorizationPolicyRequest
+ *   ClientVpnEndpointId: "STRING_VALUE", // required
+ *   PolicyDocument: "STRING_VALUE",
+ *   Description: "STRING_VALUE",
+ *   ShadowMode: "enabled" || "disabled",
+ *   ClientToken: "STRING_VALUE",
+ *   DryRun: true || false,
+ * };
+ * const command = new ModifyClientVpnEndpointAuthorizationPolicyCommand(input);
+ * const response = await client.send(command);
+ * // { // ModifyClientVpnEndpointAuthorizationPolicyResult
+ * //   Status: "creating" || "updating" || "active" || "failed" || "deleting",
+ * // };
+ *
+ * ```
+ *
+ * @param ModifyClientVpnEndpointAuthorizationPolicyCommandInput - {@link ModifyClientVpnEndpointAuthorizationPolicyCommandInput}
+ * @returns {@link ModifyClientVpnEndpointAuthorizationPolicyCommandOutput}
+ * @see {@link ModifyClientVpnEndpointAuthorizationPolicyCommandInput} for command's `input` shape.
+ * @see {@link ModifyClientVpnEndpointAuthorizationPolicyCommandOutput} for command's `response` shape.
+ * @see {@link EC2ClientResolvedConfig | config} for EC2Client's `config` shape.
+ *
+ * @throws {@link EC2ServiceException}
+ * <p>Base exception class for all service exceptions from EC2 service.</p>
+ *
+ *
+ * @public
+ */
+export declare class ModifyClientVpnEndpointAuthorizationPolicyCommand extends ModifyClientVpnEndpointAuthorizationPolicyCommand_base {
+    /** @internal type navigation helper, not in runtime. */
+    protected static __types: {
+        api: {
+            input: ModifyClientVpnEndpointAuthorizationPolicyRequest;
+            output: ModifyClientVpnEndpointAuthorizationPolicyResult;
+        };
+        sdk: {
+            input: ModifyClientVpnEndpointAuthorizationPolicyCommandInput;
+            output: ModifyClientVpnEndpointAuthorizationPolicyCommandOutput;
+        };
+    };
+}

package/dist-types/commands/ModifyClientVpnEndpointCommand.d.ts

@@ -40,6 +40,7 @@ declare const ModifyClientVpnEndpointCommand_base: {
  *     Enabled: true || false,
  *     CloudwatchLogGroup: "STRING_VALUE",
  *     CloudwatchLogStream: "STRING_VALUE",
+ *     IncludeAuthorizationPolicyContext: true || false,
  *   },
  *   DnsServers: { // DnsServersOptionsModifyStructure
  *     CustomDnsServers: [ // ValueStringList
@@ -78,6 +79,16 @@ declare const ModifyClientVpnEndpointCommand_base: {
  *       "STRING_VALUE",
  *     ],
  *   },
+ *   DevicePostureOptions: { // DevicePostureOptions
+ *     TrustProviders: [ // ClientVpnTrustProviderRequestList
+ *       { // ClientVpnTrustProviderRequest
+ *         TrustProviderType: "crowdstrike" || "jamf" || "jumpcloud",
+ *         TenantId: "STRING_VALUE",
+ *         PublicSigningKeyUrl: "STRING_VALUE",
+ *       },
+ *     ],
+ *     Enabled: true || false,
+ *   },
  * };
  * const command = new ModifyClientVpnEndpointCommand(input);
  * const response = await client.send(command);

package/dist-types/commands/ReplaceImageCriteriaInAllowedImagesSettingsCommand.d.ts

@@ -1,5 +1,5 @@
 import type { MetadataBearer as __MetadataBearer } from "@smithy/types";
-import type { ReplaceImageCriteriaInAllowedImagesSettingsRequest, ReplaceImageCriteriaInAllowedImagesSettingsResult } from "../models/models_7";
+import type { ReplaceImageCriteriaInAllowedImagesSettingsRequest, ReplaceImageCriteriaInAllowedImagesSettingsResult } from "../models/models_8";
 /**
  * @public
  */

package/dist-types/commands/ReplaceImageInstanceTypeSpecificationCommand.d.ts

@@ -1,5 +1,5 @@
 import type { MetadataBearer as __MetadataBearer } from "@smithy/types";
-import type { ReplaceImageInstanceTypeSpecificationRequest, ReplaceImageInstanceTypeSpecificationResult } from "../models/models_7";
+import type { ReplaceImageInstanceTypeSpecificationRequest, ReplaceImageInstanceTypeSpecificationResult } from "../models/models_8";
 /**
  * @public
  */

package/dist-types/commands/ReplaceNetworkAclAssociationCommand.d.ts

@@ -1,5 +1,5 @@
 import type { MetadataBearer as __MetadataBearer } from "@smithy/types";
-import type { ReplaceNetworkAclAssociationRequest, ReplaceNetworkAclAssociationResult } from "../models/models_7";
+import type { ReplaceNetworkAclAssociationRequest, ReplaceNetworkAclAssociationResult } from "../models/models_8";
 /**
  * @public
  */

package/dist-types/commands/index.d.ts

@@ -176,6 +176,7 @@ export * from "./CreateVpnGatewayCommand";
 export * from "./DeleteApplicationStatusCheckCommand";
 export * from "./DeleteCapacityManagerDataExportCommand";
 export * from "./DeleteCarrierGatewayCommand";
+export * from "./DeleteClientVpnEndpointAuthorizationPolicyCommand";
 export * from "./DeleteClientVpnEndpointCommand";
 export * from "./DeleteClientVpnRouteCommand";
 export * from "./DeleteCoipCidrCommand";
@@ -559,6 +560,7 @@ export * from "./GetCapacityManagerMetricDataCommand";
 export * from "./GetCapacityManagerMetricDimensionsCommand";
 export * from "./GetCapacityManagerMonitoredTagKeysCommand";
 export * from "./GetCapacityReservationUsageCommand";
+export * from "./GetClientVpnEndpointAuthorizationPolicyCommand";
 export * from "./GetCoipPoolUsageCommand";
 export * from "./GetConsoleOutputCommand";
 export * from "./GetConsoleScreenshotCommand";
@@ -642,6 +644,7 @@ export * from "./ModifyApplicationStatusCheckCommand";
 export * from "./ModifyAvailabilityZoneGroupCommand";
 export * from "./ModifyCapacityReservationCommand";
 export * from "./ModifyCapacityReservationFleetCommand";
+export * from "./ModifyClientVpnEndpointAuthorizationPolicyCommand";
 export * from "./ModifyClientVpnEndpointCommand";
 export * from "./ModifyDefaultCreditSpecificationCommand";
 export * from "./ModifyEbsDefaultKmsKeyIdCommand";

package/dist-types/models/enums.d.ts

@@ -2970,6 +2970,19 @@ export declare const ClientVpnAuthenticationType: {
  * @public
  */
 export type ClientVpnAuthenticationType = (typeof ClientVpnAuthenticationType)[keyof typeof ClientVpnAuthenticationType];
+/**
+ * @public
+ * @enum
+ */
+export declare const ClientVpnDeviceTrustProviderType: {
+    readonly crowdstrike: "crowdstrike";
+    readonly jamf: "jamf";
+    readonly jumpcloud: "jumpcloud";
+};
+/**
+ * @public
+ */
+export type ClientVpnDeviceTrustProviderType = (typeof ClientVpnDeviceTrustProviderType)[keyof typeof ClientVpnDeviceTrustProviderType];
 /**
  * @public
  * @enum
@@ -3726,6 +3739,7 @@ export declare const Rir: {
     readonly apnic: "apnic";
     readonly arin: "arin";
     readonly lacnic: "lacnic";
+    readonly nicbr: "nicbr";
     readonly ripe: "ripe";
 };
 /**
@@ -3742,6 +3756,9 @@ export declare const IpamInternetRegistryAssociationState: {
     readonly delete_complete: "delete-complete";
     readonly delete_failed: "delete-failed";
     readonly delete_in_progress: "delete-in-progress";
+    readonly disable_complete: "disable-complete";
+    readonly disable_failed: "disable-failed";
+    readonly disable_in_progress: "disable-in-progress";
     readonly enable_complete: "enable-complete";
     readonly enable_failed: "enable-failed";
     readonly enable_in_progress: "enable-in-progress";
@@ -5558,6 +5575,21 @@ export declare const TelemetryStatus: {
  * @public
  */
 export type TelemetryStatus = (typeof TelemetryStatus)[keyof typeof TelemetryStatus];
+/**
+ * @public
+ * @enum
+ */
+export declare const ClientVpnAuthorizationPolicyStatus: {
+    readonly active: "active";
+    readonly creating: "creating";
+    readonly deleting: "deleting";
+    readonly failed: "failed";
+    readonly updating: "updating";
+};
+/**
+ * @public
+ */
+export type ClientVpnAuthorizationPolicyStatus = (typeof ClientVpnAuthorizationPolicyStatus)[keyof typeof ClientVpnAuthorizationPolicyStatus];
 /**
  * @public
  * @enum
@@ -7507,6 +7539,18 @@ export declare const CapacityManagerMonitoredTagKeyStatus: {
  * @public
  */
 export type CapacityManagerMonitoredTagKeyStatus = (typeof CapacityManagerMonitoredTagKeyStatus)[keyof typeof CapacityManagerMonitoredTagKeyStatus];
+/**
+ * @public
+ * @enum
+ */
+export declare const ClientVpnAuthorizationPolicyShadowMode: {
+    readonly disabled: "disabled";
+    readonly enabled: "enabled";
+};
+/**
+ * @public
+ */
+export type ClientVpnAuthorizationPolicyShadowMode = (typeof ClientVpnAuthorizationPolicyShadowMode)[keyof typeof ClientVpnAuthorizationPolicyShadowMode];
 /**
  * @public
  * @enum

package/dist-types/models/models_1.d.ts

@@ -1,4 +1,4 @@
-import type { _InstanceType, AcceleratorManufacturer, AcceleratorName, AcceleratorType, AddressFamily, AmdSevSnpSpecification, AttachmentStatus, AutoProvisionZonesState, AutoScalingIpsState, AvailabilityMode, BareMetal, BlockPublicAccessMode, BootModeOverrideValues, BurstablePerformance, CapacityReservationPreference, ClientVpnAuthenticationType, ClientVpnEndpointStatusCode, ClientVpnRouteStatusCode, ConnectivityType, ContainerFormat, CpuManufacturer, DefaultTargetCapacityType, DestinationFileFormat, DiskImageFormat, Ec2InstanceConnectEndpointState, EndpointIpAddressType, ExportEnvironment, ExportTaskState, FleetCapacityReservationUsageStrategy, FleetExcessCapacityTerminationPolicy, FleetHttpTokensState, FleetInstanceMetadataEndpointState, FleetOnDemandAllocationStrategy, FleetReplacementStrategy, FleetReservationType, FleetType, FlowLogsResourceType, GatewayType, HostnameType, InstanceBandwidthWeighting, InstanceGeneration, InstanceInterruptionBehavior, InstanceLifecycle, InterruptibleCapacityReservationAllocationStatus, InterruptionType, IpAddressType, IpamExternalResourceVerificationTokenState, IpamInternetRegistryAssociationState, IpamMeteredAccount, IpamPolicyState, IpamPoolAwsService, IpamPoolPublicIpSource, IpamPoolSourceResourceType, IpamPoolState, IpamPrefixListResolverRuleConditionOperation, IpamPrefixListResolverRuleType, IpamPrefixListResolverState, IpamPrefixListResolverTargetState, IpamPrefixListResolverVersionCreationStatus, IpamResourceDiscoveryState, IpamResourceType, IpamScopeExternalAuthorityType, IpamScopeState, IpamScopeType, IpamState, IpamTier, KeyFormat, KeyType, LaunchTemplateAutoRecoveryState, LaunchTemplateHttpTokensState, LaunchTemplateInstanceMetadataEndpointState, LaunchTemplateInstanceMetadataOptionsState, LaunchTemplateInstanceMetadataProtocolIpv6, LaunchTemplateInstanceMetadataTagsState, LocalGatewayRouteState, LocalGatewayRouteTableMode, LocalGatewayRouteType, LocalGatewayVirtualInterfaceConfigurationState, LocalGatewayVirtualInterfaceGroupConfigurationState, LocalStorage, LocalStorageType, LogDestinationType, MacModificationTaskState, MacModificationTaskType, MacSystemIntegrityProtectionSettingStatus, MarketType, NatGatewayApplianceModifyState, NatGatewayApplianceState, NatGatewayApplianceType, NatGatewayState, NestedVirtualizationSpecification, NetworkInterfaceCreationType, PlatformValues, PrefixListState, Protocol, ReservedCapacityAllocationStrategy, ReservedCapacityFallbackMarketType, ResourceType, Rir, RuleAction, SecondaryInterfaceType, SelfServicePortal, ShutdownBehavior, SnapshotLocationEnum, SpotAllocationStrategy, SpotInstanceInterruptionBehavior, SpotInstanceType, SubnetState, TaggableResourceType, TargetCapacityUnitType, Tenancy, TokenState, TrafficIpAddressType, TrafficType, TransportProtocol, VolumeType, VpcEncryptionControlExclusionState, VpcEncryptionControlMode, VpcEncryptionControlState, VpcState, WeekDay, ZeroSizePreference } from "./enums";
+import type { _InstanceType, AcceleratorManufacturer, AcceleratorName, AcceleratorType, AddressFamily, AmdSevSnpSpecification, AttachmentStatus, AutoProvisionZonesState, AutoScalingIpsState, AvailabilityMode, BareMetal, BlockPublicAccessMode, BootModeOverrideValues, BurstablePerformance, CapacityReservationPreference, ClientVpnAuthenticationType, ClientVpnDeviceTrustProviderType, ClientVpnEndpointStatusCode, ClientVpnRouteStatusCode, ConnectivityType, ContainerFormat, CpuManufacturer, DefaultTargetCapacityType, DestinationFileFormat, DiskImageFormat, Ec2InstanceConnectEndpointState, EndpointIpAddressType, ExportEnvironment, ExportTaskState, FleetCapacityReservationUsageStrategy, FleetExcessCapacityTerminationPolicy, FleetHttpTokensState, FleetInstanceMetadataEndpointState, FleetOnDemandAllocationStrategy, FleetReplacementStrategy, FleetReservationType, FleetType, FlowLogsResourceType, GatewayType, HostnameType, InstanceBandwidthWeighting, InstanceGeneration, InstanceInterruptionBehavior, InstanceLifecycle, InterruptibleCapacityReservationAllocationStatus, InterruptionType, IpAddressType, IpamExternalResourceVerificationTokenState, IpamInternetRegistryAssociationState, IpamMeteredAccount, IpamPolicyState, IpamPoolAwsService, IpamPoolPublicIpSource, IpamPoolSourceResourceType, IpamPoolState, IpamPrefixListResolverRuleConditionOperation, IpamPrefixListResolverRuleType, IpamPrefixListResolverState, IpamPrefixListResolverTargetState, IpamPrefixListResolverVersionCreationStatus, IpamResourceDiscoveryState, IpamResourceType, IpamScopeExternalAuthorityType, IpamScopeState, IpamScopeType, IpamState, IpamTier, KeyFormat, KeyType, LaunchTemplateAutoRecoveryState, LaunchTemplateHttpTokensState, LaunchTemplateInstanceMetadataEndpointState, LaunchTemplateInstanceMetadataOptionsState, LaunchTemplateInstanceMetadataProtocolIpv6, LaunchTemplateInstanceMetadataTagsState, LocalGatewayRouteState, LocalGatewayRouteTableMode, LocalGatewayRouteType, LocalGatewayVirtualInterfaceConfigurationState, LocalGatewayVirtualInterfaceGroupConfigurationState, LocalStorage, LocalStorageType, LogDestinationType, MacModificationTaskState, MacModificationTaskType, MacSystemIntegrityProtectionSettingStatus, MarketType, NatGatewayApplianceModifyState, NatGatewayApplianceState, NatGatewayApplianceType, NatGatewayState, NestedVirtualizationSpecification, NetworkInterfaceCreationType, PlatformValues, PrefixListState, Protocol, ReservedCapacityAllocationStrategy, ReservedCapacityFallbackMarketType, ResourceType, Rir, RuleAction, SecondaryInterfaceType, SelfServicePortal, ShutdownBehavior, SnapshotLocationEnum, SpotAllocationStrategy, SpotInstanceInterruptionBehavior, SpotInstanceType, SubnetState, TaggableResourceType, TargetCapacityUnitType, Tenancy, TokenState, TrafficIpAddressType, TrafficType, TransportProtocol, VolumeType, VpcEncryptionControlExclusionState, VpcEncryptionControlMode, VpcEncryptionControlState, VpcState, WeekDay, ZeroSizePreference } from "./enums";
 import type { AcceleratorCount, AcceleratorCountRequest, AcceleratorTotalMemoryMiB, AcceleratorTotalMemoryMiBRequest, AccessScopePath, AccessScopePathRequest, AddIpamOperatingRegion, AddPrefixListEntry, InstanceEventWindow, IpamRoutingPolicyRegistrationDelta, NatGatewayAddress, OperatorResponse, PortRange, SubnetIpv6CidrBlockAssociation, Tag, TagSpecification, UnsuccessfulItem, VpcCidrBlockAssociation, VpcIpv6CidrBlockAssociation } from "./models_0";
 /**
  * <p>Describes the Active Directory to be used for client authentication.</p>
@@ -149,6 +149,62 @@ export interface ConnectionLogOptions {
      * @public
      */
     CloudwatchLogStream?: string | undefined;
+    /**
+     * <p>Specifies whether to include the authorization policy evaluation context in the connection logs for the Client VPN endpoint.</p>
+     * @public
+     */
+    IncludeAuthorizationPolicyContext?: boolean | undefined;
+}
+/**
+ * <p>Describes a device trust provider to configure for a Client VPN endpoint.</p>
+ * @public
+ */
+export interface ClientVpnTrustProviderRequest {
+    /**
+     * <p>The type of the device trust provider. Possible values include:</p>
+     *          <ul>
+     *             <li>
+     *                <p>
+     *                   <code>crowdstrike</code> - CrowdStrike device trust provider.</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>jamf</code> - Jamf device trust provider.</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>jumpcloud</code> - JumpCloud device trust provider.</p>
+     *             </li>
+     *          </ul>
+     * @public
+     */
+    TrustProviderType?: ClientVpnDeviceTrustProviderType | undefined;
+    /**
+     * <p>The tenant ID associated with your device trust provider account.</p>
+     * @public
+     */
+    TenantId?: string | undefined;
+    /**
+     * <p>The URL of the public signing key that is used to verify the identity token issued by the device trust provider.</p>
+     * @public
+     */
+    PublicSigningKeyUrl?: string | undefined;
+}
+/**
+ * <p>Describes the device posture options for a Client VPN endpoint. Device posture options specify the device trust providers that the endpoint uses to evaluate the security posture of connecting devices.</p>
+ * @public
+ */
+export interface DevicePostureOptions {
+    /**
+     * <p>The device trust providers to configure for the Client VPN endpoint.</p>
+     * @public
+     */
+    TrustProviders?: ClientVpnTrustProviderRequest[] | undefined;
+    /**
+     * <p>Indicates whether device posture evaluation is enabled for the Client VPN endpoint. Specify <code>false</code> to disable device posture, which clears the configured device trust providers.</p>
+     * @public
+     */
+    Enabled?: boolean | undefined;
 }
 /**
  * <p>The Transit Gateway configuration for a Client VPN endpoint.</p>
@@ -332,6 +388,11 @@ export interface CreateClientVpnEndpointRequest {
      * @public
      */
     TransitGatewayConfiguration?: TransitGatewayConfigurationInputStructure | undefined;
+    /**
+     * <p>The device posture options for the Client VPN endpoint. Use this parameter to specify the device trust providers that the endpoint uses to evaluate the security posture of connecting devices.</p>
+     * @public
+     */
+    DevicePostureOptions?: DevicePostureOptions | undefined;
 }
 /**
  * <p>Describes the state of a Client VPN endpoint.</p>
@@ -12529,94 +12590,3 @@ export interface AttachmentEnaSrdSpecification {
      */
     EnaSrdUdpSpecification?: AttachmentEnaSrdUdpSpecification | undefined;
 }
-/**
- * <p>Describes a network interface attachment.</p>
- * @public
- */
-export interface NetworkInterfaceAttachment {
-    /**
-     * <p>The timestamp indicating when the attachment initiated.</p>
-     * @public
-     */
-    AttachTime?: Date | undefined;
-    /**
-     * <p>The ID of the network interface attachment.</p>
-     * @public
-     */
-    AttachmentId?: string | undefined;
-    /**
-     * <p>Indicates whether the network interface is deleted when the instance is
-     *             terminated.</p>
-     * @public
-     */
-    DeleteOnTermination?: boolean | undefined;
-    /**
-     * <p>The device index of the network interface attachment on the instance.</p>
-     * @public
-     */
-    DeviceIndex?: number | undefined;
-    /**
-     * <p>The index of the network card.</p>
-     * @public
-     */
-    NetworkCardIndex?: number | undefined;
-    /**
-     * <p>The ID of the instance.</p>
-     * @public
-     */
-    InstanceId?: string | undefined;
-    /**
-     * <p>The Amazon Web Services account ID of the owner of the instance.</p>
-     * @public
-     */
-    InstanceOwnerId?: string | undefined;
-    /**
-     * <p>The attachment state.</p>
-     * @public
-     */
-    Status?: AttachmentStatus | undefined;
-    /**
-     * <p>Configures ENA Express for the network interface that this action attaches to the
-     *             instance.</p>
-     * @public
-     */
-    EnaSrdSpecification?: AttachmentEnaSrdSpecification | undefined;
-    /**
-     * <p>The number of ENA queues created with the instance.</p>
-     * @public
-     */
-    EnaQueueCount?: number | undefined;
-}
-/**
- * <p>A security group connection tracking configuration that enables you to set the idle
- *             timeout for connection tracking on an Elastic network interface. For more information,
- *             see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/security-group-connection-tracking.html#connection-tracking-timeouts">Connection tracking timeouts</a> in the
- *             <i>Amazon EC2 User Guide</i>.</p>
- * @public
- */
-export interface ConnectionTrackingConfiguration {
-    /**
-     * <p>Timeout (in seconds) for idle TCP
-     * 						connections in an established state. Min: 60 seconds. Max: 432000 seconds (5
-     * 						days). Default: 350 seconds for Nitro v6 instance types (excluding
-     * 						P6e-GB200); 432000 seconds for all other instance types (including
-     * 						P6e-GB200). Recommended: Less than 432000 seconds.</p>
-     * @public
-     */
-    TcpEstablishedTimeout?: number | undefined;
-    /**
-     * <p>Timeout (in seconds) for idle UDP
-     * 						flows classified as streams which have seen more than one request-response
-     * 						transaction. Min: 60 seconds. Max: 180 seconds (3 minutes). Default: 180
-     * 						seconds.</p>
-     * @public
-     */
-    UdpStreamTimeout?: number | undefined;
-    /**
-     * <p>Timeout (in seconds) for idle UDP flows that
-     * 						have seen traffic only in a single direction or a single request-response
-     * 						transaction. Min: 30 seconds. Max: 60 seconds. Default: 30 seconds.</p>
-     * @public
-     */
-    UdpTimeout?: number | undefined;
-}