@aws-sdk/client-ec2 3.1141.0 → 3.1143.0

package/dist-types/models/models_1.d.ts

@@ -1,4 +1,4 @@
-import type { _InstanceType, AcceleratorManufacturer, AcceleratorName, AcceleratorType, AddressFamily, AmdSevSnpSpecification, AttachmentStatus, AutoProvisionZonesState, AutoScalingIpsState, AvailabilityMode, BareMetal, BlockPublicAccessMode, BootModeOverrideValues, BurstablePerformance, CapacityReservationPreference, ClientVpnAuthenticationType, ClientVpnEndpointStatusCode, ClientVpnRouteStatusCode, ConnectivityType, ContainerFormat, CpuManufacturer, DefaultTargetCapacityType, DestinationFileFormat, DiskImageFormat, Ec2InstanceConnectEndpointState, EndpointIpAddressType, ExportEnvironment, ExportTaskState, FleetCapacityReservationUsageStrategy, FleetExcessCapacityTerminationPolicy, FleetHttpTokensState, FleetInstanceMetadataEndpointState, FleetOnDemandAllocationStrategy, FleetReplacementStrategy, FleetReservationType, FleetType, FlowLogsResourceType, GatewayType, HostnameType, InstanceBandwidthWeighting, InstanceGeneration, InstanceInterruptionBehavior, InstanceLifecycle, InterruptibleCapacityReservationAllocationStatus, InterruptionType, IpAddressType, IpamExternalResourceVerificationTokenState, IpamInternetRegistryAssociationState, IpamMeteredAccount, IpamPolicyState, IpamPoolAwsService, IpamPoolPublicIpSource, IpamPoolSourceResourceType, IpamPoolState, IpamPrefixListResolverRuleConditionOperation, IpamPrefixListResolverRuleType, IpamPrefixListResolverState, IpamPrefixListResolverTargetState, IpamPrefixListResolverVersionCreationStatus, IpamResourceDiscoveryState, IpamResourceType, IpamScopeExternalAuthorityType, IpamScopeState, IpamScopeType, IpamState, IpamTier, KeyFormat, KeyType, LaunchTemplateAutoRecoveryState, LaunchTemplateHttpTokensState, LaunchTemplateInstanceMetadataEndpointState, LaunchTemplateInstanceMetadataOptionsState, LaunchTemplateInstanceMetadataProtocolIpv6, LaunchTemplateInstanceMetadataTagsState, LocalGatewayRouteState, LocalGatewayRouteTableMode, LocalGatewayRouteType, LocalGatewayVirtualInterfaceConfigurationState, LocalGatewayVirtualInterfaceGroupConfigurationState, LocalStorage, LocalStorageType, LogDestinationType, MacModificationTaskState, MacModificationTaskType, MacSystemIntegrityProtectionSettingStatus, MarketType, NatGatewayApplianceModifyState, NatGatewayApplianceState, NatGatewayApplianceType, NatGatewayState, NestedVirtualizationSpecification, NetworkInterfaceCreationType, PlatformValues, PrefixListState, Protocol, ReservedCapacityAllocationStrategy, ReservedCapacityFallbackMarketType, ResourceType, Rir, RuleAction, SecondaryInterfaceType, SelfServicePortal, ShutdownBehavior, SnapshotLocationEnum, SpotAllocationStrategy, SpotInstanceInterruptionBehavior, SpotInstanceType, SubnetState, TaggableResourceType, TargetCapacityUnitType, Tenancy, TokenState, TrafficIpAddressType, TrafficType, TransportProtocol, VolumeType, VpcEncryptionControlExclusionState, VpcEncryptionControlMode, VpcEncryptionControlState, VpcState, WeekDay, ZeroSizePreference } from "./enums";
+import type { _InstanceType, AcceleratorManufacturer, AcceleratorName, AcceleratorType, AddressFamily, AmdSevSnpSpecification, AttachmentStatus, AutoProvisionZonesState, AutoScalingIpsState, AvailabilityMode, BareMetal, BlockPublicAccessMode, BootModeOverrideValues, BurstablePerformance, CapacityReservationPreference, ClientVpnAuthenticationType, ClientVpnDeviceTrustProviderType, ClientVpnEndpointStatusCode, ClientVpnRouteStatusCode, ConnectivityType, ContainerFormat, CpuManufacturer, DefaultTargetCapacityType, DestinationFileFormat, DiskImageFormat, Ec2InstanceConnectEndpointState, EndpointIpAddressType, ExportEnvironment, ExportTaskState, FleetCapacityReservationUsageStrategy, FleetExcessCapacityTerminationPolicy, FleetHttpTokensState, FleetInstanceMetadataEndpointState, FleetOnDemandAllocationStrategy, FleetReplacementStrategy, FleetReservationType, FleetType, FlowLogsResourceType, GatewayType, HostnameType, InstanceBandwidthWeighting, InstanceGeneration, InstanceInterruptionBehavior, InstanceLifecycle, InterruptibleCapacityReservationAllocationStatus, InterruptionType, IpAddressType, IpamExternalResourceVerificationTokenState, IpamInternetRegistryAssociationState, IpamMeteredAccount, IpamPolicyState, IpamPoolAwsService, IpamPoolPublicIpSource, IpamPoolSourceResourceType, IpamPoolState, IpamPrefixListResolverRuleConditionOperation, IpamPrefixListResolverRuleType, IpamPrefixListResolverState, IpamPrefixListResolverTargetState, IpamPrefixListResolverVersionCreationStatus, IpamResourceDiscoveryState, IpamResourceType, IpamScopeExternalAuthorityType, IpamScopeState, IpamScopeType, IpamState, IpamTier, KeyFormat, KeyType, LaunchTemplateAutoRecoveryState, LaunchTemplateHttpTokensState, LaunchTemplateInstanceMetadataEndpointState, LaunchTemplateInstanceMetadataOptionsState, LaunchTemplateInstanceMetadataProtocolIpv6, LaunchTemplateInstanceMetadataTagsState, LocalGatewayRouteState, LocalGatewayRouteTableMode, LocalGatewayRouteType, LocalGatewayVirtualInterfaceConfigurationState, LocalGatewayVirtualInterfaceGroupConfigurationState, LocalStorage, LocalStorageType, LogDestinationType, MacModificationTaskState, MacModificationTaskType, MacSystemIntegrityProtectionSettingStatus, MarketType, NatGatewayApplianceModifyState, NatGatewayApplianceState, NatGatewayApplianceType, NatGatewayState, NestedVirtualizationSpecification, NetworkInterfaceCreationType, PlatformValues, PrefixListState, Protocol, ReservedCapacityAllocationStrategy, ReservedCapacityFallbackMarketType, ResourceType, Rir, RuleAction, SecondaryInterfaceType, SelfServicePortal, ShutdownBehavior, SnapshotLocationEnum, SpotAllocationStrategy, SpotInstanceInterruptionBehavior, SpotInstanceType, SubnetState, TaggableResourceType, TargetCapacityUnitType, Tenancy, TokenState, TrafficIpAddressType, TrafficType, TransportProtocol, VolumeType, VpcEncryptionControlExclusionState, VpcEncryptionControlMode, VpcEncryptionControlState, VpcState, WeekDay, ZeroSizePreference } from "./enums";
 import type { AcceleratorCount, AcceleratorCountRequest, AcceleratorTotalMemoryMiB, AcceleratorTotalMemoryMiBRequest, AccessScopePath, AccessScopePathRequest, AddIpamOperatingRegion, AddPrefixListEntry, InstanceEventWindow, IpamRoutingPolicyRegistrationDelta, NatGatewayAddress, OperatorResponse, PortRange, SubnetIpv6CidrBlockAssociation, Tag, TagSpecification, UnsuccessfulItem, VpcCidrBlockAssociation, VpcIpv6CidrBlockAssociation } from "./models_0";
 /**
  * <p>Describes the Active Directory to be used for client authentication.</p>
@@ -149,6 +149,62 @@ export interface ConnectionLogOptions {
      * @public
      */
     CloudwatchLogStream?: string | undefined;
+    /**
+     * <p>Specifies whether to include the authorization policy evaluation context in the connection logs for the Client VPN endpoint.</p>
+     * @public
+     */
+    IncludeAuthorizationPolicyContext?: boolean | undefined;
+}
+/**
+ * <p>Describes a device trust provider to configure for a Client VPN endpoint.</p>
+ * @public
+ */
+export interface ClientVpnTrustProviderRequest {
+    /**
+     * <p>The type of the device trust provider. Possible values include:</p>
+     *          <ul>
+     *             <li>
+     *                <p>
+     *                   <code>crowdstrike</code> - CrowdStrike device trust provider.</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>jamf</code> - Jamf device trust provider.</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>jumpcloud</code> - JumpCloud device trust provider.</p>
+     *             </li>
+     *          </ul>
+     * @public
+     */
+    TrustProviderType?: ClientVpnDeviceTrustProviderType | undefined;
+    /**
+     * <p>The tenant ID associated with your device trust provider account.</p>
+     * @public
+     */
+    TenantId?: string | undefined;
+    /**
+     * <p>The URL of the public signing key that is used to verify the identity token issued by the device trust provider.</p>
+     * @public
+     */
+    PublicSigningKeyUrl?: string | undefined;
+}
+/**
+ * <p>Describes the device posture options for a Client VPN endpoint. Device posture options specify the device trust providers that the endpoint uses to evaluate the security posture of connecting devices.</p>
+ * @public
+ */
+export interface DevicePostureOptions {
+    /**
+     * <p>The device trust providers to configure for the Client VPN endpoint.</p>
+     * @public
+     */
+    TrustProviders?: ClientVpnTrustProviderRequest[] | undefined;
+    /**
+     * <p>Indicates whether device posture evaluation is enabled for the Client VPN endpoint. Specify <code>false</code> to disable device posture, which clears the configured device trust providers.</p>
+     * @public
+     */
+    Enabled?: boolean | undefined;
 }
 /**
  * <p>The Transit Gateway configuration for a Client VPN endpoint.</p>
@@ -332,6 +388,11 @@ export interface CreateClientVpnEndpointRequest {
      * @public
      */
     TransitGatewayConfiguration?: TransitGatewayConfigurationInputStructure | undefined;
+    /**
+     * <p>The device posture options for the Client VPN endpoint. Use this parameter to specify the device trust providers that the endpoint uses to evaluate the security posture of connecting devices.</p>
+     * @public
+     */
+    DevicePostureOptions?: DevicePostureOptions | undefined;
 }
 /**
  * <p>Describes the state of a Client VPN endpoint.</p>
@@ -12529,94 +12590,3 @@ export interface AttachmentEnaSrdSpecification {
      */
     EnaSrdUdpSpecification?: AttachmentEnaSrdUdpSpecification | undefined;
 }
-/**
- * <p>Describes a network interface attachment.</p>
- * @public
- */
-export interface NetworkInterfaceAttachment {
-    /**
-     * <p>The timestamp indicating when the attachment initiated.</p>
-     * @public
-     */
-    AttachTime?: Date | undefined;
-    /**
-     * <p>The ID of the network interface attachment.</p>
-     * @public
-     */
-    AttachmentId?: string | undefined;
-    /**
-     * <p>Indicates whether the network interface is deleted when the instance is
-     *             terminated.</p>
-     * @public
-     */
-    DeleteOnTermination?: boolean | undefined;
-    /**
-     * <p>The device index of the network interface attachment on the instance.</p>
-     * @public
-     */
-    DeviceIndex?: number | undefined;
-    /**
-     * <p>The index of the network card.</p>
-     * @public
-     */
-    NetworkCardIndex?: number | undefined;
-    /**
-     * <p>The ID of the instance.</p>
-     * @public
-     */
-    InstanceId?: string | undefined;
-    /**
-     * <p>The Amazon Web Services account ID of the owner of the instance.</p>
-     * @public
-     */
-    InstanceOwnerId?: string | undefined;
-    /**
-     * <p>The attachment state.</p>
-     * @public
-     */
-    Status?: AttachmentStatus | undefined;
-    /**
-     * <p>Configures ENA Express for the network interface that this action attaches to the
-     *             instance.</p>
-     * @public
-     */
-    EnaSrdSpecification?: AttachmentEnaSrdSpecification | undefined;
-    /**
-     * <p>The number of ENA queues created with the instance.</p>
-     * @public
-     */
-    EnaQueueCount?: number | undefined;
-}
-/**
- * <p>A security group connection tracking configuration that enables you to set the idle
- *             timeout for connection tracking on an Elastic network interface. For more information,
- *             see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/security-group-connection-tracking.html#connection-tracking-timeouts">Connection tracking timeouts</a> in the
- *             <i>Amazon EC2 User Guide</i>.</p>
- * @public
- */
-export interface ConnectionTrackingConfiguration {
-    /**
-     * <p>Timeout (in seconds) for idle TCP
-     * 						connections in an established state. Min: 60 seconds. Max: 432000 seconds (5
-     * 						days). Default: 350 seconds for Nitro v6 instance types (excluding
-     * 						P6e-GB200); 432000 seconds for all other instance types (including
-     * 						P6e-GB200). Recommended: Less than 432000 seconds.</p>
-     * @public
-     */
-    TcpEstablishedTimeout?: number | undefined;
-    /**
-     * <p>Timeout (in seconds) for idle UDP
-     * 						flows classified as streams which have seen more than one request-response
-     * 						transaction. Min: 60 seconds. Max: 180 seconds (3 minutes). Default: 180
-     * 						seconds.</p>
-     * @public
-     */
-    UdpStreamTimeout?: number | undefined;
-    /**
-     * <p>Timeout (in seconds) for idle UDP flows that
-     * 						have seen traffic only in a single direction or a single request-response
-     * 						transaction. Min: 30 seconds. Max: 60 seconds. Default: 30 seconds.</p>
-     * @public
-     */
-    UdpTimeout?: number | undefined;
-}

package/dist-types/models/models_2.d.ts

@@ -1,6 +1,97 @@
-import type { ApplianceModeSupportValue, AutoAcceptSharedAssociationsValue, AutoAcceptSharedAttachmentsValue, BgpStatus, ConnectionNotificationState, ConnectionNotificationType, CopyTagsFromSource, CurrencyCodeValues, DatafeedSubscriptionState, DefaultRouteTableAssociationValue, DefaultRouteTablePropagationValue, DeleteFleetErrorCode, DeviceTrustProviderType, DnsNameState, DnsRecordIpType, DnsSupportValue, DynamicRoutingValue, EncryptionStateValue, FleetStateCode, GatewayAssociationState, GatewayType, Igmpv2SupportValue, InstanceEventWindowState, InterfacePermissionType, InternetGatewayExclusionMode, IpAddressType, Ipv6SupportValue, LaunchTemplateErrorCode, MulticastSupportValue, NetworkInterfacePermissionStateCode, NetworkInterfaceStatus, NetworkInterfaceType, PayerResponsibility, PayerResponsibilityScope, PayerResponsibilityType, PlacementGroupState, PlacementStrategy, ProtocolValue, ReplaceRootVolumeTaskState, RouteOrigin, RouteServerBfdState, RouteServerBgpState, RouteServerEndpointState, RouteServerPeerLivenessMode, RouteServerPeerState, RouteServerPersistRoutesAction, RouteServerPersistRoutesState, RouteServerState, RouteState, SecondaryNetworkCidrBlockAssociationState, SecondaryNetworkState, SecondaryNetworkType, SecondarySubnetCidrBlockAssociationState, SecondarySubnetState, SecurityGroupReferencingSupportValue, ServiceConnectivityType, ServiceState, ServiceType, SnapshotLocationEnum, SnapshotState, SpreadLevel, SSEType, State, StaticSourcesSupportValue, StorageTier, SubnetCidrReservationType, TelemetryStatus, Tenancy, TrafficDirection, TrafficMirrorNetworkService, TrafficMirrorRuleAction, TrafficMirrorTargetType, TransferType, TransitGatewayAttachmentResourceType, TransitGatewayAttachmentState, TransitGatewayConnectPeerState, TransitGatewayMeteringPayerType, TransitGatewayMeteringPolicyEntryState, TransitGatewayMeteringPolicyState, TransitGatewayMulticastDomainState, TransitGatewayPolicyTableEntryState, TransitGatewayPolicyTableState, TransitGatewayPrefixListReferenceState, TransitGatewayRouteState, TransitGatewayRouteTableAnnouncementDirection, TransitGatewayRouteTableAnnouncementState, TransitGatewayRouteTableState, TransitGatewayRouteType, TransitGatewayState, TrustProviderType, TunnelInsideIpVersion, UserTrustProviderType, VerifiedAccessEndpointAttachmentType, VerifiedAccessEndpointProtocol, VerifiedAccessEndpointStatusCode, VerifiedAccessEndpointType, VolumeType, VpcBlockPublicAccessExclusionState, VpcEncryptionControlExclusionStateInput, VpcEncryptionControlMode, VpcEndpointType, VpnConcentratorType, VpnEcmpSupportValue, VpnState, VpnStaticRouteSource, VpnTunnelBandwidth } from "./enums";
+import type { ApplianceModeSupportValue, AttachmentStatus, AutoAcceptSharedAssociationsValue, AutoAcceptSharedAttachmentsValue, BgpStatus, ClientVpnAuthorizationPolicyStatus, ConnectionNotificationState, ConnectionNotificationType, CopyTagsFromSource, CurrencyCodeValues, DatafeedSubscriptionState, DefaultRouteTableAssociationValue, DefaultRouteTablePropagationValue, DeleteFleetErrorCode, DeviceTrustProviderType, DnsNameState, DnsRecordIpType, DnsSupportValue, DynamicRoutingValue, EncryptionStateValue, FleetStateCode, GatewayAssociationState, GatewayType, Igmpv2SupportValue, InstanceEventWindowState, InterfacePermissionType, InternetGatewayExclusionMode, IpAddressType, Ipv6SupportValue, MulticastSupportValue, NetworkInterfacePermissionStateCode, NetworkInterfaceStatus, NetworkInterfaceType, PayerResponsibility, PayerResponsibilityScope, PayerResponsibilityType, PlacementGroupState, PlacementStrategy, ProtocolValue, ReplaceRootVolumeTaskState, RouteOrigin, RouteServerBfdState, RouteServerBgpState, RouteServerEndpointState, RouteServerPeerLivenessMode, RouteServerPeerState, RouteServerPersistRoutesAction, RouteServerPersistRoutesState, RouteServerState, RouteState, SecondaryNetworkCidrBlockAssociationState, SecondaryNetworkState, SecondaryNetworkType, SecondarySubnetCidrBlockAssociationState, SecondarySubnetState, SecurityGroupReferencingSupportValue, ServiceConnectivityType, ServiceState, ServiceType, SnapshotLocationEnum, SnapshotState, SpreadLevel, SSEType, State, StaticSourcesSupportValue, StorageTier, SubnetCidrReservationType, TelemetryStatus, Tenancy, TrafficDirection, TrafficMirrorNetworkService, TrafficMirrorRuleAction, TrafficMirrorTargetType, TransferType, TransitGatewayAttachmentResourceType, TransitGatewayAttachmentState, TransitGatewayConnectPeerState, TransitGatewayMeteringPayerType, TransitGatewayMeteringPolicyEntryState, TransitGatewayMeteringPolicyState, TransitGatewayMulticastDomainState, TransitGatewayPolicyTableEntryState, TransitGatewayPolicyTableState, TransitGatewayPrefixListReferenceState, TransitGatewayRouteState, TransitGatewayRouteTableAnnouncementDirection, TransitGatewayRouteTableAnnouncementState, TransitGatewayRouteTableState, TransitGatewayRouteType, TransitGatewayState, TrustProviderType, TunnelInsideIpVersion, UserTrustProviderType, VerifiedAccessEndpointAttachmentType, VerifiedAccessEndpointProtocol, VerifiedAccessEndpointStatusCode, VerifiedAccessEndpointType, VolumeType, VpcBlockPublicAccessExclusionState, VpcEncryptionControlExclusionStateInput, VpcEncryptionControlMode, VpcEndpointType, VpnConcentratorType, VpnEcmpSupportValue, VpnState, VpnStaticRouteSource, VpnTunnelBandwidth } from "./enums";
 import type { ApplicationStatusCheckResponseObject, CarrierGateway, IpamRoutingPolicyRegistrationDelta, Ipv4PrefixSpecification, OperatorResponse, ReservedInstancesListing, RouteTableAssociationState, Tag, TagSpecification, TransitGatewayPeeringAttachment, TransitGatewayVpcAttachment, UnsuccessfulItem, VerifiedAccessInstance, VerifiedAccessSseSpecificationResponse, VerifiedAccessTrustProvider, VpcAttachment, VpcPeeringConnection } from "./models_0";
-import type { ClientVpnEndpointStatus, ClientVpnRouteStatus, CoipCidr, CoipPool, ConnectionTrackingConfiguration, Ec2InstanceConnectEndpoint, Ipam, IpamExternalResourceVerificationToken, IpamInternetRegistryAssociation, IpamPolicy, IpamPool, IpamPrefixListResolver, IpamPrefixListResolverTarget, IpamResourceDiscovery, IpamScope, LaunchTemplate, NetworkInterfaceAssociation, NetworkInterfaceAttachment, OperatorRequest, Subnet, Vpc, VpcEncryptionControl } from "./models_1";
+import type { AttachmentEnaSrdSpecification, ClientVpnEndpointStatus, ClientVpnRouteStatus, CoipCidr, CoipPool, Ec2InstanceConnectEndpoint, Ipam, IpamExternalResourceVerificationToken, IpamInternetRegistryAssociation, IpamPolicy, IpamPool, IpamPrefixListResolver, IpamPrefixListResolverTarget, IpamResourceDiscovery, IpamScope, LaunchTemplate, NetworkInterfaceAssociation, OperatorRequest, Subnet, Vpc, VpcEncryptionControl } from "./models_1";
+/**
+ * <p>Describes a network interface attachment.</p>
+ * @public
+ */
+export interface NetworkInterfaceAttachment {
+    /**
+     * <p>The timestamp indicating when the attachment initiated.</p>
+     * @public
+     */
+    AttachTime?: Date | undefined;
+    /**
+     * <p>The ID of the network interface attachment.</p>
+     * @public
+     */
+    AttachmentId?: string | undefined;
+    /**
+     * <p>Indicates whether the network interface is deleted when the instance is
+     *             terminated.</p>
+     * @public
+     */
+    DeleteOnTermination?: boolean | undefined;
+    /**
+     * <p>The device index of the network interface attachment on the instance.</p>
+     * @public
+     */
+    DeviceIndex?: number | undefined;
+    /**
+     * <p>The index of the network card.</p>
+     * @public
+     */
+    NetworkCardIndex?: number | undefined;
+    /**
+     * <p>The ID of the instance.</p>
+     * @public
+     */
+    InstanceId?: string | undefined;
+    /**
+     * <p>The Amazon Web Services account ID of the owner of the instance.</p>
+     * @public
+     */
+    InstanceOwnerId?: string | undefined;
+    /**
+     * <p>The attachment state.</p>
+     * @public
+     */
+    Status?: AttachmentStatus | undefined;
+    /**
+     * <p>Configures ENA Express for the network interface that this action attaches to the
+     *             instance.</p>
+     * @public
+     */
+    EnaSrdSpecification?: AttachmentEnaSrdSpecification | undefined;
+    /**
+     * <p>The number of ENA queues created with the instance.</p>
+     * @public
+     */
+    EnaQueueCount?: number | undefined;
+}
+/**
+ * <p>A security group connection tracking configuration that enables you to set the idle
+ *             timeout for connection tracking on an Elastic network interface. For more information,
+ *             see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/security-group-connection-tracking.html#connection-tracking-timeouts">Connection tracking timeouts</a> in the
+ *             <i>Amazon EC2 User Guide</i>.</p>
+ * @public
+ */
+export interface ConnectionTrackingConfiguration {
+    /**
+     * <p>Timeout (in seconds) for idle TCP
+     * 						connections in an established state. Min: 60 seconds. Max: 432000 seconds (5
+     * 						days). Default: 350 seconds for Nitro v6 instance types (excluding
+     * 						P6e-GB200); 432000 seconds for all other instance types (including
+     * 						P6e-GB200). Recommended: Less than 432000 seconds.</p>
+     * @public
+     */
+    TcpEstablishedTimeout?: number | undefined;
+    /**
+     * <p>Timeout (in seconds) for idle UDP
+     * 						flows classified as streams which have seen more than one request-response
+     * 						transaction. Min: 60 seconds. Max: 180 seconds (3 minutes). Default: 180
+     * 						seconds.</p>
+     * @public
+     */
+    UdpStreamTimeout?: number | undefined;
+    /**
+     * <p>Timeout (in seconds) for idle UDP flows that
+     * 						have seen traffic only in a single direction or a single request-response
+     * 						transaction. Min: 30 seconds. Max: 60 seconds. Default: 30 seconds.</p>
+     * @public
+     */
+    UdpTimeout?: number | undefined;
+}
 /**
  * <p>Describes a security group.</p>
  * @public
@@ -6358,6 +6449,7 @@ export interface CreateVpcEndpointRequest {
     DryRun?: boolean | undefined;
     /**
      * <p>The type of endpoint.</p>
+     *          <p>For more information about the types of VPC endpoints, see <a href="https://docs.aws.amazon.com/vpc/latest/privatelink/concepts.html#concepts-vpc-endpoints">VPC endpoints</a> in the <i>Amazon Web Services PrivateLink User Guide</i>.</p>
      *          <p>Default: Gateway</p>
      * @public
      */
@@ -6385,15 +6477,19 @@ export interface CreateVpcEndpointRequest {
      */
     RouteTableIds?: string[] | undefined;
     /**
-     * <p>(Interface and Gateway Load Balancer endpoints) The IDs of the subnets in which to create endpoint
-     *             network interfaces. For a Gateway Load Balancer endpoint, you can specify only one subnet.</p>
+     * <p>(Interface, Gateway Load Balancer endpoints, Resource, ServiceNetwork, and Tunnel endpoints only) The IDs of the
+     *             subnets in which to create endpoint network interfaces. For a Gateway Load Balancer endpoint, you can
+     *             specify only one subnet. For a <code>Tunnel</code> endpoint, the subnets must be in the
+     *             Availability Zones of the resource gateway associated with the shared resource
+     *             configuration. An endpoint network interface is created only in an Availability Zone
+     *             that the resource gateway is also in.</p>
      * @public
      */
     SubnetIds?: string[] | undefined;
     /**
-     * <p>(Interface endpoint) The IDs of the security groups to associate with the
-     *             endpoint network interfaces. If this parameter is not specified, we use the default
-     *             security group for the VPC.</p>
+     * <p>(Interface, Resource, ServiceNetwork, and Tunnel endpoints only) The IDs of the security groups
+     *             to associate with the endpoint network interfaces. If this parameter is not specified,
+     *             we use the default security group for the VPC.</p>
      * @public
      */
     SecurityGroupIds?: string[] | undefined;
@@ -6446,8 +6542,25 @@ export interface CreateVpcEndpointRequest {
      */
     ServiceNetworkArn?: string | undefined;
     /**
-     * <p>The Amazon Resource Name (ARN) of a resource configuration that will be associated with
-     *          the VPC endpoint of type resource.</p>
+     * <p>(Resource and Tunnel endpoints only) The Amazon Resource Name (ARN) of a resource
+     *          configuration associated with the VPC endpoint. The type of resource configuration depends
+     *          on the endpoint type:</p>
+     *          <ul>
+     *             <li>
+     *                <p>For a Resource endpoint, you can specify a resource configuration that is of type
+     *                <code>SINGLE</code>, <code>GROUP</code>, or <code>ARN</code>. To reach a resource
+     *                that belongs to a group, specify the parent <code>GROUP</code> resource
+     *                configuration.</p>
+     *             </li>
+     *             <li>
+     *                <p>For a Tunnel endpoint, you can specify a resource configuration that is of type
+     *                <code>CIDR</code>.</p>
+     *             </li>
+     *          </ul>
+     *          <p>For more information about the types of resource configurations, see <a href="https://docs.aws.amazon.com/vpc/latest/privatelink/resource-configuration.html">Types of resource configurations</a> in the <i>Amazon Web Services PrivateLink User Guide</i>.</p>
+     *          <p>This request fails if a VPC endpoint owned by a different Amazon Web Services account
+     *          already exists on a resource gateway that is enabled for <code>ResourceGatewayCharges</code>
+     *          payer responsibility.</p>
      * @public
      */
     ResourceConfigurationArn?: string | undefined;
@@ -6597,6 +6710,7 @@ export interface VpcEndpoint {
     VpcEndpointId?: string | undefined;
     /**
      * <p>The type of endpoint.</p>
+     *          <p>For more information about the types of VPC endpoints, see <a href="https://docs.aws.amazon.com/vpc/latest/privatelink/concepts.html#concepts-vpc-endpoints">VPC endpoints</a> in the <i>Amazon Web Services PrivateLink User Guide</i>.</p>
      * @public
      */
     VpcEndpointType?: VpcEndpointType | undefined;
@@ -6626,12 +6740,12 @@ export interface VpcEndpoint {
      */
     RouteTableIds?: string[] | undefined;
     /**
-     * <p>(Interface endpoint) The subnets for the endpoint.</p>
+     * <p>(Interface, Gateway Load Balancer endpoints, Resource, ServiceNetwork, and Tunnel endpoints only) The subnets for the endpoint.</p>
      * @public
      */
     SubnetIds?: string[] | undefined;
     /**
-     * <p>(Interface endpoint) Information about the security groups that are associated with
+     * <p>(Interface, Resource, ServiceNetwork, and Tunnel endpoints only) Information about the security groups that are associated with
      *             the network interface.</p>
      * @public
      */
@@ -6657,7 +6771,7 @@ export interface VpcEndpoint {
      */
     RequesterManaged?: boolean | undefined;
     /**
-     * <p>(Interface endpoint) The network interfaces for the endpoint.</p>
+     * <p>(Interface, Gateway Load Balancer endpoints, Resource, ServiceNetwork, and Tunnel endpoints only) The network interfaces for the endpoint.</p>
      * @public
      */
     NetworkInterfaceIds?: string[] | undefined;
@@ -8401,6 +8515,31 @@ export interface DeleteClientVpnEndpointResult {
      */
     Status?: ClientVpnEndpointStatus | undefined;
 }
+/**
+ * @public
+ */
+export interface DeleteClientVpnEndpointAuthorizationPolicyRequest {
+    /**
+     * <p>The ID of the Client VPN endpoint.</p>
+     * @public
+     */
+    ClientVpnEndpointId: string | undefined;
+    /**
+     * <p>Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+     * @public
+     */
+    DryRun?: boolean | undefined;
+}
+/**
+ * @public
+ */
+export interface DeleteClientVpnEndpointAuthorizationPolicyResult {
+    /**
+     * <p>The current state of the authorization policy.</p>
+     * @public
+     */
+    Status?: ClientVpnAuthorizationPolicyStatus | undefined;
+}
 /**
  * @public
  */
@@ -9226,100 +9365,3 @@ export interface DeleteLaunchTemplateResult {
      */
     LaunchTemplate?: LaunchTemplate | undefined;
 }
-/**
- * @public
- */
-export interface DeleteLaunchTemplateVersionsRequest {
-    /**
-     * <p>Checks whether you have the required permissions for the action, without actually
-     *             making the request, and provides an error response. If you have the required
-     *             permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is
-     *                 <code>UnauthorizedOperation</code>.</p>
-     * @public
-     */
-    DryRun?: boolean | undefined;
-    /**
-     * <p>The ID of the launch template.</p>
-     *          <p>You must specify either the launch template ID or the launch template name, but not
-     *             both.</p>
-     * @public
-     */
-    LaunchTemplateId?: string | undefined;
-    /**
-     * <p>The name of the launch template.</p>
-     *          <p>You must specify either the launch template ID or the launch template name, but not
-     *             both.</p>
-     * @public
-     */
-    LaunchTemplateName?: string | undefined;
-    /**
-     * <p>The version numbers of one or more launch template versions to delete. You can specify
-     *             up to 200 launch template version numbers.</p>
-     * @public
-     */
-    Versions: string[] | undefined;
-}
-/**
- * <p>Describes a launch template version that was successfully deleted.</p>
- * @public
- */
-export interface DeleteLaunchTemplateVersionsResponseSuccessItem {
-    /**
-     * <p>The ID of the launch template.</p>
-     * @public
-     */
-    LaunchTemplateId?: string | undefined;
-    /**
-     * <p>The name of the launch template.</p>
-     * @public
-     */
-    LaunchTemplateName?: string | undefined;
-    /**
-     * <p>The version number of the launch template.</p>
-     * @public
-     */
-    VersionNumber?: number | undefined;
-}
-/**
- * <p>Describes the error that's returned when you cannot delete a launch template
- *             version.</p>
- * @public
- */
-export interface ResponseError {
-    /**
-     * <p>The error code.</p>
-     * @public
-     */
-    Code?: LaunchTemplateErrorCode | undefined;
-    /**
-     * <p>The error message, if applicable.</p>
-     * @public
-     */
-    Message?: string | undefined;
-}
-/**
- * <p>Describes a launch template version that could not be deleted.</p>
- * @public
- */
-export interface DeleteLaunchTemplateVersionsResponseErrorItem {
-    /**
-     * <p>The ID of the launch template.</p>
-     * @public
-     */
-    LaunchTemplateId?: string | undefined;
-    /**
-     * <p>The name of the launch template.</p>
-     * @public
-     */
-    LaunchTemplateName?: string | undefined;
-    /**
-     * <p>The version number of the launch template.</p>
-     * @public
-     */
-    VersionNumber?: number | undefined;
-    /**
-     * <p>Information about the error.</p>
-     * @public
-     */
-    ResponseError?: ResponseError | undefined;
-}