@aws-sdk/client-ec2 3.294.0 → 3.296.0

package/dist-types/models/models_0.d.ts

@@ -857,17 +857,80 @@ export interface AnalysisComponent {
     Name?: string;
 }
 /**
- * <p>Describes an additional detail for a path analysis.</p>
+ * <p>Describes additional settings for a stateful rule.</p>
+ */
+export interface RuleOption {
+    /**
+     * <p>The Suricata keyword.</p>
+     */
+    Keyword?: string;
+    /**
+     * <p>The settings for the keyword.</p>
+     */
+    Settings?: string[];
+}
+/**
+ * <p>Describes the rule options for a stateful rule group.</p>
+ */
+export interface RuleGroupRuleOptionsPair {
+    /**
+     * <p>The ARN of the rule group.</p>
+     */
+    RuleGroupArn?: string;
+    /**
+     * <p>The rule options.</p>
+     */
+    RuleOptions?: RuleOption[];
+}
+/**
+ * <p>Describes the type of a stateful rule group.</p>
+ */
+export interface RuleGroupTypePair {
+    /**
+     * <p>The ARN of the rule group.</p>
+     */
+    RuleGroupArn?: string;
+    /**
+     * <p>The rule group type. The possible values are <code>Domain List</code> and <code>Suricata</code>.</p>
+     */
+    RuleGroupType?: string;
+}
+/**
+ * <p>Describes an additional detail for a path analysis. For more information, see <a href="https://docs.aws.amazon.com/vpc/latest/reachability/additional-detail-codes.html">Reachability Analyzer additional detail codes</a>.</p>
  */
 export interface AdditionalDetail {
     /**
-     * <p>The information type.</p>
+     * <p>The additional detail code.</p>
      */
     AdditionalDetailType?: string;
     /**
      * <p>The path component.</p>
      */
     Component?: AnalysisComponent;
+    /**
+     * <p>The VPC endpoint service.</p>
+     */
+    VpcEndpointService?: AnalysisComponent;
+    /**
+     * <p>The rule options.</p>
+     */
+    RuleOptions?: RuleOption[];
+    /**
+     * <p>The rule group type.</p>
+     */
+    RuleGroupTypePairs?: RuleGroupTypePair[];
+    /**
+     * <p>The rule options.</p>
+     */
+    RuleGroupRuleOptionsPairs?: RuleGroupRuleOptionsPair[];
+    /**
+     * <p>The name of the VPC endpoint service.</p>
+     */
+    ServiceName?: string;
+    /**
+     * <p>The load balancers.</p>
+     */
+    LoadBalancers?: AnalysisComponent[];
 }
 /**
  * <p>Describes a load balancer listener.</p>
@@ -882,6 +945,82 @@ export interface AnalysisLoadBalancerListener {
      */
     InstancePort?: number;
 }
+/**
+ * <p>Describes a stateful rule.</p>
+ */
+export interface FirewallStatefulRule {
+    /**
+     * <p>The ARN of the stateful rule group.</p>
+     */
+    RuleGroupArn?: string;
+    /**
+     * <p>The source IP addresses, in CIDR notation.</p>
+     */
+    Sources?: string[];
+    /**
+     * <p>The destination IP addresses, in CIDR notation.</p>
+     */
+    Destinations?: string[];
+    /**
+     * <p>The source ports.</p>
+     */
+    SourcePorts?: PortRange[];
+    /**
+     * <p>The destination ports.</p>
+     */
+    DestinationPorts?: PortRange[];
+    /**
+     * <p>The protocol.</p>
+     */
+    Protocol?: string;
+    /**
+     * <p>The rule action. The possible values are <code>pass</code>, <code>drop</code>, and
+     *          <code>alert</code>.</p>
+     */
+    RuleAction?: string;
+    /**
+     * <p>The direction. The possible values are <code>FORWARD</code> and <code>ANY</code>.</p>
+     */
+    Direction?: string;
+}
+/**
+ * <p>Describes a stateless rule.</p>
+ */
+export interface FirewallStatelessRule {
+    /**
+     * <p>The ARN of the stateless rule group.</p>
+     */
+    RuleGroupArn?: string;
+    /**
+     * <p>The source IP addresses, in CIDR notation.</p>
+     */
+    Sources?: string[];
+    /**
+     * <p>The destination IP addresses, in CIDR notation.</p>
+     */
+    Destinations?: string[];
+    /**
+     * <p>The source ports.</p>
+     */
+    SourcePorts?: PortRange[];
+    /**
+     * <p>The destination ports.</p>
+     */
+    DestinationPorts?: PortRange[];
+    /**
+     * <p>The protocols.</p>
+     */
+    Protocols?: number[];
+    /**
+     * <p>The rule action. The possible values are <code>pass</code>, <code>drop</code>, and
+     *          <code>forward_to_site</code>.</p>
+     */
+    RuleAction?: string;
+    /**
+     * <p>The rule priority.</p>
+     */
+    Priority?: number;
+}
 /**
  * <p>Describes a load balancer target.</p>
  */
@@ -970,6 +1109,18 @@ export interface AnalysisRouteTableRoute {
      *          </ul>
      */
     State?: string;
+    /**
+     * <p>The ID of a carrier gateway.</p>
+     */
+    CarrierGatewayId?: string;
+    /**
+     * <p>The Amazon Resource Name (ARN) of a core network.</p>
+     */
+    CoreNetworkArn?: string;
+    /**
+     * <p>The ID of a local gateway.</p>
+     */
+    LocalGatewayId?: string;
 }
 /**
  * <p>Describes a security group rule.</p>
@@ -1265,6 +1416,14 @@ export interface Explanation {
      * <p>The Region for the component.</p>
      */
     ComponentRegion?: string;
+    /**
+     * <p>The Network Firewall stateless rule.</p>
+     */
+    FirewallStatelessRule?: FirewallStatelessRule;
+    /**
+     * <p>The Network Firewall stateful rule.</p>
+     */
+    FirewallStatefulRule?: FirewallStatefulRule;
 }
 /**
  * <p>Describes a header. Reflects any changes made by a component as traffic passes through.
@@ -1364,6 +1523,18 @@ export interface PathComponent {
      * <p>The load balancer listener.</p>
      */
     ElasticLoadBalancerListener?: AnalysisComponent;
+    /**
+     * <p>The Network Firewall stateless rule.</p>
+     */
+    FirewallStatelessRule?: FirewallStatelessRule;
+    /**
+     * <p>The Network Firewall stateful rule.</p>
+     */
+    FirewallStatefulRule?: FirewallStatefulRule;
+    /**
+     * <p>The name of the VPC endpoint service.</p>
+     */
+    ServiceName?: string;
 }
 /**
  * <p>Describes a finding for a Network Access Scope.</p>
@@ -6318,84 +6489,6 @@ export interface CertificateAuthenticationRequest {
      */
     ClientRootCertificateChainArn?: string;
 }
-export declare enum ClientVpnAuthenticationType {
-    certificate_authentication = "certificate-authentication",
-    directory_service_authentication = "directory-service-authentication",
-    federated_authentication = "federated-authentication"
-}
-/**
- * <p>Describes the authentication method to be used by a Client VPN endpoint. For more information, see <a href="https://docs.aws.amazon.com/vpn/latest/clientvpn-admin/authentication-authrization.html#client-authentication">Authentication</a>
- * 			in the <i>Client VPN Administrator Guide</i>.</p>
- */
-export interface ClientVpnAuthenticationRequest {
-    /**
-     * <p>The type of client authentication to be used.</p>
-     */
-    Type?: ClientVpnAuthenticationType | string;
-    /**
-     * <p>Information about the Active Directory to be used, if applicable. You must provide this information if <b>Type</b> is <code>directory-service-authentication</code>.</p>
-     */
-    ActiveDirectory?: DirectoryServiceAuthenticationRequest;
-    /**
-     * <p>Information about the authentication certificates to be used, if applicable. You must provide this information if <b>Type</b> is <code>certificate-authentication</code>.</p>
-     */
-    MutualAuthentication?: CertificateAuthenticationRequest;
-    /**
-     * <p>Information about the IAM SAML identity provider to be used, if applicable. You must provide this information if <b>Type</b> is <code>federated-authentication</code>.</p>
-     */
-    FederatedAuthentication?: FederatedAuthenticationRequest;
-}
-/**
- * <p>The options for managing connection authorization for new client connections.</p>
- */
-export interface ClientConnectOptions {
-    /**
-     * <p>Indicates whether client connect options are enabled. The default is <code>false</code> (not enabled).</p>
-     */
-    Enabled?: boolean;
-    /**
-     * <p>The Amazon Resource Name (ARN) of the Lambda function used for connection authorization.</p>
-     */
-    LambdaFunctionArn?: string;
-}
-/**
- * <p>Options for enabling a customizable text banner that will be displayed on
- * 			Amazon Web Services provided clients when a VPN session is established.</p>
- */
-export interface ClientLoginBannerOptions {
-    /**
-     * <p>Enable or disable a customizable text banner that will be displayed on
-     * 			Amazon Web Services provided clients when a VPN session is established.</p>
-     *          <p>Valid values: <code>true | false</code>
-     *          </p>
-     *          <p>Default value: <code>false</code>
-     *          </p>
-     */
-    Enabled?: boolean;
-    /**
-     * <p>Customizable text that will be displayed in a banner on Amazon Web Services provided
-     * 			clients when a VPN session is established. UTF-8 encoded characters only. Maximum of
-     * 			1400 characters.</p>
-     */
-    BannerText?: string;
-}
-/**
- * <p>Describes the client connection logging options for the Client VPN endpoint.</p>
- */
-export interface ConnectionLogOptions {
-    /**
-     * <p>Indicates whether connection logging is enabled.</p>
-     */
-    Enabled?: boolean;
-    /**
-     * <p>The name of the CloudWatch Logs log group. Required if connection logging is enabled.</p>
-     */
-    CloudwatchLogGroup?: string;
-    /**
-     * <p>The name of the CloudWatch Logs log stream to which the connection data is published.</p>
-     */
-    CloudwatchLogStream?: string;
-}
 /**
  * @internal
  */
@@ -6560,6 +6653,18 @@ export declare const AnalysisAclRuleFilterSensitiveLog: (obj: AnalysisAclRule) =
  * @internal
  */
 export declare const AnalysisComponentFilterSensitiveLog: (obj: AnalysisComponent) => any;
+/**
+ * @internal
+ */
+export declare const RuleOptionFilterSensitiveLog: (obj: RuleOption) => any;
+/**
+ * @internal
+ */
+export declare const RuleGroupRuleOptionsPairFilterSensitiveLog: (obj: RuleGroupRuleOptionsPair) => any;
+/**
+ * @internal
+ */
+export declare const RuleGroupTypePairFilterSensitiveLog: (obj: RuleGroupTypePair) => any;
 /**
  * @internal
  */
@@ -6568,6 +6673,14 @@ export declare const AdditionalDetailFilterSensitiveLog: (obj: AdditionalDetail)
  * @internal
  */
 export declare const AnalysisLoadBalancerListenerFilterSensitiveLog: (obj: AnalysisLoadBalancerListener) => any;
+/**
+ * @internal
+ */
+export declare const FirewallStatefulRuleFilterSensitiveLog: (obj: FirewallStatefulRule) => any;
+/**
+ * @internal
+ */
+export declare const FirewallStatelessRuleFilterSensitiveLog: (obj: FirewallStatelessRule) => any;
 /**
  * @internal
  */
@@ -7312,19 +7425,3 @@ export declare const FederatedAuthenticationRequestFilterSensitiveLog: (obj: Fed
  * @internal
  */
 export declare const CertificateAuthenticationRequestFilterSensitiveLog: (obj: CertificateAuthenticationRequest) => any;
-/**
- * @internal
- */
-export declare const ClientVpnAuthenticationRequestFilterSensitiveLog: (obj: ClientVpnAuthenticationRequest) => any;
-/**
- * @internal
- */
-export declare const ClientConnectOptionsFilterSensitiveLog: (obj: ClientConnectOptions) => any;
-/**
- * @internal
- */
-export declare const ClientLoginBannerOptionsFilterSensitiveLog: (obj: ClientLoginBannerOptions) => any;
-/**
- * @internal
- */
-export declare const ConnectionLogOptionsFilterSensitiveLog: (obj: ConnectionLogOptions) => any;