@aws-sdk/client-ec2 3.453.0 → 3.455.0

package/dist-types/models/models_2.d.ts

@@ -1,5 +1,355 @@
-import { ApplianceModeSupportValue, CarrierGateway, CurrencyCodeValues, DeviceTrustProviderType, DnsSupportValue, DynamicRoutingValue, InstanceEventWindowState, Ipv6SupportValue, ReservedInstancesListing, RouteTableAssociationState, Tag, TagSpecification, TransitGatewayAttachmentResourceType, TransitGatewayAttachmentState, TransitGatewayPeeringAttachment, TransitGatewayVpcAttachment, TrustProviderType, UnsuccessfulItem, UserTrustProviderType, VerifiedAccessInstance, VerifiedAccessSseSpecificationResponse, VerifiedAccessTrustProvider, VolumeAttachment, VpcAttachment, VpcPeeringConnection } from "./models_0";
-import { ClientVpnEndpointStatus, ClientVpnRouteStatus, CoipCidr, CoipPool, Ec2InstanceConnectEndpoint, GatewayType, Ipam, IpamPool, IpamResourceDiscovery, IpamScope, LaunchTemplate, LocalGatewayRoute, LocalGatewayRouteTable, LocalGatewayRouteTableVirtualInterfaceGroupAssociation, LocalGatewayRouteTableVpcAssociation, ManagedPrefixList, Subnet, Tenancy, VolumeType, Vpc } from "./models_1";
+import { ApplianceModeSupportValue, CurrencyCodeValues, DeviceTrustProviderType, DnsSupportValue, DynamicRoutingValue, InstanceEventWindowState, Ipv4PrefixSpecification, Ipv6SupportValue, ReservedInstancesListing, RouteTableAssociationState, SecurityGroupReferencingSupportValue, Tag, TagSpecification, TransitGatewayAttachmentResourceType, TransitGatewayAttachmentState, TransitGatewayPeeringAttachment, TransitGatewayVpcAttachment, TrustProviderType, UnsuccessfulItem, UserTrustProviderType, VerifiedAccessInstance, VerifiedAccessSseSpecificationResponse, VerifiedAccessTrustProvider, VolumeAttachment, VpcAttachment, VpcPeeringConnection } from "./models_0";
+import { CarrierGateway, ClientVpnEndpointStatus, ClientVpnRouteStatus, CoipCidr, CoipPool, ConnectionTrackingConfiguration, Ec2InstanceConnectEndpoint, GatewayType, GroupIdentifier, Ipam, IpamPool, IpamResourceDiscovery, IpamScope, LaunchTemplate, LocalGatewayRoute, LocalGatewayRouteTable, LocalGatewayRouteTableVirtualInterfaceGroupAssociation, LocalGatewayRouteTableVpcAssociation, ManagedPrefixList, NetworkInterfaceAssociation, NetworkInterfaceAttachment, NetworkInterfaceType, Subnet, Tenancy, VolumeType, Vpc } from "./models_1";
+/**
+ * @public
+ * <p>Describes an IPv6 address associated with a network interface.</p>
+ */
+export interface NetworkInterfaceIpv6Address {
+    /**
+     * @public
+     * <p>The IPv6 address.</p>
+     */
+    Ipv6Address?: string;
+    /**
+     * @public
+     * <p>Determines if an IPv6 address associated with a network interface is the primary IPv6 address. When you enable an IPv6 GUA address to be a primary IPv6, the first IPv6 GUA will be made the primary IPv6 address until the instance is terminated or the network interface is detached. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_ModifyNetworkInterfaceAttribute.html">ModifyNetworkInterfaceAttribute</a>.</p>
+     */
+    IsPrimaryIpv6?: boolean;
+}
+/**
+ * @public
+ * <p>Describes the IPv6 prefix.</p>
+ */
+export interface Ipv6PrefixSpecification {
+    /**
+     * @public
+     * <p>The IPv6 prefix.</p>
+     */
+    Ipv6Prefix?: string;
+}
+/**
+ * @public
+ * <p>Describes the private IPv4 address of a network interface.</p>
+ */
+export interface NetworkInterfacePrivateIpAddress {
+    /**
+     * @public
+     * <p>The association information for an Elastic IP address (IPv4) associated with the network interface.</p>
+     */
+    Association?: NetworkInterfaceAssociation;
+    /**
+     * @public
+     * <p>Indicates whether this IPv4 address is the primary private IPv4 address of the network interface.</p>
+     */
+    Primary?: boolean;
+    /**
+     * @public
+     * <p>The private DNS name.</p>
+     */
+    PrivateDnsName?: string;
+    /**
+     * @public
+     * <p>The private IPv4 address.</p>
+     */
+    PrivateIpAddress?: string;
+}
+/**
+ * @public
+ * @enum
+ */
+export declare const NetworkInterfaceStatus: {
+    readonly associated: "associated";
+    readonly attaching: "attaching";
+    readonly available: "available";
+    readonly detaching: "detaching";
+    readonly in_use: "in-use";
+};
+/**
+ * @public
+ */
+export type NetworkInterfaceStatus = (typeof NetworkInterfaceStatus)[keyof typeof NetworkInterfaceStatus];
+/**
+ * @public
+ * <p>Describes a network interface.</p>
+ */
+export interface NetworkInterface {
+    /**
+     * @public
+     * <p>The association information for an Elastic IP address (IPv4) associated with the network interface.</p>
+     */
+    Association?: NetworkInterfaceAssociation;
+    /**
+     * @public
+     * <p>The network interface attachment.</p>
+     */
+    Attachment?: NetworkInterfaceAttachment;
+    /**
+     * @public
+     * <p>The Availability Zone.</p>
+     */
+    AvailabilityZone?: string;
+    /**
+     * @public
+     * <p>A security group connection tracking configuration that enables you to set the timeout for connection tracking on an Elastic network interface. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/security-group-connection-tracking.html#connection-tracking-timeouts">Connection tracking timeouts</a> in the <i>Amazon Elastic Compute Cloud User Guide</i>.</p>
+     */
+    ConnectionTrackingConfiguration?: ConnectionTrackingConfiguration;
+    /**
+     * @public
+     * <p>A description.</p>
+     */
+    Description?: string;
+    /**
+     * @public
+     * <p>Any security groups for the network interface.</p>
+     */
+    Groups?: GroupIdentifier[];
+    /**
+     * @public
+     * <p>The type of network interface.</p>
+     */
+    InterfaceType?: NetworkInterfaceType;
+    /**
+     * @public
+     * <p>The IPv6 addresses associated with the network interface.</p>
+     */
+    Ipv6Addresses?: NetworkInterfaceIpv6Address[];
+    /**
+     * @public
+     * <p>The MAC address.</p>
+     */
+    MacAddress?: string;
+    /**
+     * @public
+     * <p>The ID of the network interface.</p>
+     */
+    NetworkInterfaceId?: string;
+    /**
+     * @public
+     * <p>The Amazon Resource Name (ARN) of the Outpost.</p>
+     */
+    OutpostArn?: string;
+    /**
+     * @public
+     * <p>The Amazon Web Services account ID of the owner of the network interface.</p>
+     */
+    OwnerId?: string;
+    /**
+     * @public
+     * <p>The private DNS name.</p>
+     */
+    PrivateDnsName?: string;
+    /**
+     * @public
+     * <p>The IPv4 address of the network interface within the subnet.</p>
+     */
+    PrivateIpAddress?: string;
+    /**
+     * @public
+     * <p>The private IPv4 addresses associated with the network interface.</p>
+     */
+    PrivateIpAddresses?: NetworkInterfacePrivateIpAddress[];
+    /**
+     * @public
+     * <p>The IPv4 prefixes that are assigned to the network interface.</p>
+     */
+    Ipv4Prefixes?: Ipv4PrefixSpecification[];
+    /**
+     * @public
+     * <p>The IPv6 prefixes that are assigned to the network interface.</p>
+     */
+    Ipv6Prefixes?: Ipv6PrefixSpecification[];
+    /**
+     * @public
+     * <p>The alias or Amazon Web Services account ID of the principal or service that created the network interface.</p>
+     */
+    RequesterId?: string;
+    /**
+     * @public
+     * <p>Indicates whether the network interface is being managed by Amazon Web Services.</p>
+     */
+    RequesterManaged?: boolean;
+    /**
+     * @public
+     * <p>Indicates whether source/destination checking is enabled.</p>
+     */
+    SourceDestCheck?: boolean;
+    /**
+     * @public
+     * <p>The status of the network interface.</p>
+     */
+    Status?: NetworkInterfaceStatus;
+    /**
+     * @public
+     * <p>The ID of the subnet.</p>
+     */
+    SubnetId?: string;
+    /**
+     * @public
+     * <p>Any tags assigned to the network interface.</p>
+     */
+    TagSet?: Tag[];
+    /**
+     * @public
+     * <p>The ID of the VPC.</p>
+     */
+    VpcId?: string;
+    /**
+     * @public
+     * <p>Indicates whether a network interface with an IPv6 address is unreachable from the
+     *             public internet. If the value is <code>true</code>, inbound traffic from the internet
+     *             is dropped and you cannot assign an elastic IP address to the network interface. The
+     *             network interface is reachable from peered VPCs and resources connected through a
+     *             transit gateway, including on-premises networks.</p>
+     */
+    DenyAllIgwTraffic?: boolean;
+    /**
+     * @public
+     * <p>Indicates whether this is an IPv6 only network interface.</p>
+     */
+    Ipv6Native?: boolean;
+    /**
+     * @public
+     * <p>The IPv6 globally unique address associated with the network interface.</p>
+     */
+    Ipv6Address?: string;
+}
+/**
+ * @public
+ */
+export interface CreateNetworkInterfaceResult {
+    /**
+     * @public
+     * <p>Information about the network interface.</p>
+     */
+    NetworkInterface?: NetworkInterface;
+    /**
+     * @public
+     * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
+     */
+    ClientToken?: string;
+}
+/**
+ * @public
+ * @enum
+ */
+export declare const InterfacePermissionType: {
+    readonly EIP_ASSOCIATE: "EIP-ASSOCIATE";
+    readonly INSTANCE_ATTACH: "INSTANCE-ATTACH";
+};
+/**
+ * @public
+ */
+export type InterfacePermissionType = (typeof InterfacePermissionType)[keyof typeof InterfacePermissionType];
+/**
+ * @public
+ * <p>Contains the parameters for CreateNetworkInterfacePermission.</p>
+ */
+export interface CreateNetworkInterfacePermissionRequest {
+    /**
+     * @public
+     * <p>The ID of the network interface.</p>
+     */
+    NetworkInterfaceId: string | undefined;
+    /**
+     * @public
+     * <p>The Amazon Web Services account ID.</p>
+     */
+    AwsAccountId?: string;
+    /**
+     * @public
+     * <p>The Amazon Web Service. Currently not supported.</p>
+     */
+    AwsService?: string;
+    /**
+     * @public
+     * <p>The type of permission to grant.</p>
+     */
+    Permission: InterfacePermissionType | undefined;
+    /**
+     * @public
+     * <p>Checks whether you have the required permissions for the action, without actually making the request,
+     * 			and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+     * 			Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+     */
+    DryRun?: boolean;
+}
+/**
+ * @public
+ * @enum
+ */
+export declare const NetworkInterfacePermissionStateCode: {
+    readonly granted: "granted";
+    readonly pending: "pending";
+    readonly revoked: "revoked";
+    readonly revoking: "revoking";
+};
+/**
+ * @public
+ */
+export type NetworkInterfacePermissionStateCode = (typeof NetworkInterfacePermissionStateCode)[keyof typeof NetworkInterfacePermissionStateCode];
+/**
+ * @public
+ * <p>Describes the state of a network interface permission.</p>
+ */
+export interface NetworkInterfacePermissionState {
+    /**
+     * @public
+     * <p>The state of the permission.</p>
+     */
+    State?: NetworkInterfacePermissionStateCode;
+    /**
+     * @public
+     * <p>A status message, if applicable.</p>
+     */
+    StatusMessage?: string;
+}
+/**
+ * @public
+ * <p>Describes a permission for a network interface.</p>
+ */
+export interface NetworkInterfacePermission {
+    /**
+     * @public
+     * <p>The ID of the network interface permission.</p>
+     */
+    NetworkInterfacePermissionId?: string;
+    /**
+     * @public
+     * <p>The ID of the network interface.</p>
+     */
+    NetworkInterfaceId?: string;
+    /**
+     * @public
+     * <p>The Amazon Web Services account ID.</p>
+     */
+    AwsAccountId?: string;
+    /**
+     * @public
+     * <p>The Amazon Web Service.</p>
+     */
+    AwsService?: string;
+    /**
+     * @public
+     * <p>The type of permission.</p>
+     */
+    Permission?: InterfacePermissionType;
+    /**
+     * @public
+     * <p>Information about the state of the permission.</p>
+     */
+    PermissionState?: NetworkInterfacePermissionState;
+}
+/**
+ * @public
+ * <p>Contains the output of CreateNetworkInterfacePermission.</p>
+ */
+export interface CreateNetworkInterfacePermissionResult {
+    /**
+     * @public
+     * <p>Information about the permission for the network interface.</p>
+     */
+    InterfacePermission?: NetworkInterfacePermission;
+}
 /**
  * @public
  * @enum
@@ -1422,9 +1772,8 @@ export interface CreateSubnetRequest {
     CidrBlock?: string;
     /**
      * @public
-     * <p>The IPv6 network range for the subnet, in CIDR notation. The subnet size must use a
-     *             /64 prefix length.</p>
-     *          <p>This parameter is required for an IPv6 only subnet.</p>
+     * <p>The IPv6 network range for the subnet, in CIDR notation. This parameter is required
+     *             for an IPv6 only subnet.</p>
      */
     Ipv6CidrBlock?: string;
     /**
@@ -1450,6 +1799,26 @@ export interface CreateSubnetRequest {
      * <p>Indicates whether to create an IPv6 only subnet.</p>
      */
     Ipv6Native?: boolean;
+    /**
+     * @public
+     * <p>An IPv4 IPAM pool ID for the subnet.</p>
+     */
+    Ipv4IpamPoolId?: string;
+    /**
+     * @public
+     * <p>An IPv4 netmask length for the subnet.</p>
+     */
+    Ipv4NetmaskLength?: number;
+    /**
+     * @public
+     * <p>An IPv6 IPAM pool ID for the subnet.</p>
+     */
+    Ipv6IpamPoolId?: string;
+    /**
+     * @public
+     * <p>An IPv6 netmask length for the subnet.</p>
+     */
+    Ipv6NetmaskLength?: number;
 }
 /**
  * @public
@@ -2238,6 +2607,12 @@ export interface TransitGatewayRequestOptions {
      * <p>Enable or disable DNS support. Enabled by default.</p>
      */
     DnsSupport?: DnsSupportValue;
+    /**
+     * @public
+     * <p>Enables you to reference a security group across VPCs attached to a transit gateway (TGW). Use this option to simplify security group management and control of instance-to-instance traffic across VPCs that are connected by transit gateway. You can also use this option to migrate from VPC peering (which was the only option that supported security group referencing) to transit gateways (which now also support security group referencing). This option is disabled by default and there are no additional costs to use this feature.</p>
+     *          <p>For important information about this feature, see <a href="https://docs.aws.amazon.com/vpc/latest/tgw/tgw-transit-gateways.html#create-tgw">Create a transit gateway</a> in the <i>Amazon Web Services Transit Gateway Guide</i>.</p>
+     */
+    SecurityGroupReferencingSupport?: SecurityGroupReferencingSupportValue;
     /**
      * @public
      * <p>Indicates whether multicast is enabled on the transit gateway</p>
@@ -2327,6 +2702,12 @@ export interface TransitGatewayOptions {
      * <p>Indicates whether DNS support is enabled.</p>
      */
     DnsSupport?: DnsSupportValue;
+    /**
+     * @public
+     * <p>Enables you to reference a security group across VPCs attached to a transit gateway (TGW). Use this option to simplify security group management and control of instance-to-instance traffic across VPCs that are connected by transit gateway. You can also use this option to migrate from VPC peering (which was the only option that supported security group referencing) to transit gateways (which now also support security group referencing). This option is disabled by default and there are no additional costs to use this feature.</p>
+     *          <p>For important information about this feature, see <a href="https://docs.aws.amazon.com/vpc/latest/tgw/tgw-transit-gateways.html#create-tgw">Create a transit gateway</a> in the <i>Amazon Web Services Transit Gateway Guide</i>.</p>
+     */
+    SecurityGroupReferencingSupport?: SecurityGroupReferencingSupportValue;
     /**
      * @public
      * <p>Indicates whether multicast is enabled on the transit gateway</p>
@@ -3486,6 +3867,15 @@ export interface CreateTransitGatewayVpcAttachmentRequestOptions {
      * <p>Enable or disable DNS support. The default is <code>enable</code>.</p>
      */
     DnsSupport?: DnsSupportValue;
+    /**
+     * @public
+     * <p>Enables you to reference a security group across VPCs attached to a transit gateway (TGW). Use this option to simplify security group management and control of instance-to-instance traffic across VPCs that are connected by transit gateway. You can also use this option to migrate from VPC peering (which was the only option that supported security group referencing) to transit gateways (which now also support security group referencing). This option is disabled by default and there are no additional costs to use this feature.</p>
+     *          <p>If you don't enable or disable SecurityGroupReferencingSupport in the request, the
+     *          attachment will inherit the security group referencing support setting on the transit
+     *          gateway.</p>
+     *          <p>For important information about this feature, see <a href="https://docs.aws.amazon.com/vpc/latest/tgw/tgw-vpc-attachments.html#create-vpc-attachment">Create a transit gateway attachment to a VPC</a> in the <i>Amazon Web Services Transit Gateway Guide</i>.</p>
+     */
+    SecurityGroupReferencingSupport?: SecurityGroupReferencingSupportValue;
     /**
      * @public
      * <p>Enable or disable IPv6 support.  The default is <code>disable</code>.</p>
@@ -7055,6 +7445,15 @@ export interface DeleteIpamPoolRequest {
      * <p>The ID of the pool to delete.</p>
      */
     IpamPoolId: string | undefined;
+    /**
+     * @public
+     * <p>Enables you to quickly delete an IPAM pool and all resources within that pool, including
+     *          provisioned CIDRs, allocations, and other pools.</p>
+     *          <important>
+     *             <p>You can only use this option to delete pools in the private scope or pools in the public scope with a source resource. A source resource is a resource used to provision CIDRs to a resource planning pool.</p>
+     *          </important>
+     */
+    Cascade?: boolean;
 }
 /**
  * @public
@@ -7474,185 +7873,6 @@ export interface DeleteManagedPrefixListResult {
      */
     PrefixList?: ManagedPrefixList;
 }
-/**
- * @public
- */
-export interface DeleteNatGatewayRequest {
-    /**
-     * @public
-     * <p>Checks whether you have the required permissions for the action, without actually making the request,
-     *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-     *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
-     */
-    DryRun?: boolean;
-    /**
-     * @public
-     * <p>The ID of the NAT gateway.</p>
-     */
-    NatGatewayId: string | undefined;
-}
-/**
- * @public
- */
-export interface DeleteNatGatewayResult {
-    /**
-     * @public
-     * <p>The ID of the NAT gateway.</p>
-     */
-    NatGatewayId?: string;
-}
-/**
- * @public
- */
-export interface DeleteNetworkAclRequest {
-    /**
-     * @public
-     * <p>Checks whether you have the required permissions for the action, without actually making the request,
-     *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-     *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
-     */
-    DryRun?: boolean;
-    /**
-     * @public
-     * <p>The ID of the network ACL.</p>
-     */
-    NetworkAclId: string | undefined;
-}
-/**
- * @public
- */
-export interface DeleteNetworkAclEntryRequest {
-    /**
-     * @public
-     * <p>Checks whether you have the required permissions for the action, without actually making the request,
-     *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-     *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
-     */
-    DryRun?: boolean;
-    /**
-     * @public
-     * <p>Indicates whether the rule is an egress rule.</p>
-     */
-    Egress: boolean | undefined;
-    /**
-     * @public
-     * <p>The ID of the network ACL.</p>
-     */
-    NetworkAclId: string | undefined;
-    /**
-     * @public
-     * <p>The rule number of the entry to delete.</p>
-     */
-    RuleNumber: number | undefined;
-}
-/**
- * @public
- */
-export interface DeleteNetworkInsightsAccessScopeRequest {
-    /**
-     * @public
-     * <p>Checks whether you have the required permissions for the action, without actually making the request,
-     *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-     *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
-     */
-    DryRun?: boolean;
-    /**
-     * @public
-     * <p>The ID of the Network Access Scope.</p>
-     */
-    NetworkInsightsAccessScopeId: string | undefined;
-}
-/**
- * @public
- */
-export interface DeleteNetworkInsightsAccessScopeResult {
-    /**
-     * @public
-     * <p>The ID of the Network Access Scope.</p>
-     */
-    NetworkInsightsAccessScopeId?: string;
-}
-/**
- * @public
- */
-export interface DeleteNetworkInsightsAccessScopeAnalysisRequest {
-    /**
-     * @public
-     * <p>The ID of the Network Access Scope analysis.</p>
-     */
-    NetworkInsightsAccessScopeAnalysisId: string | undefined;
-    /**
-     * @public
-     * <p>Checks whether you have the required permissions for the action, without actually making the request,
-     *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-     *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
-     */
-    DryRun?: boolean;
-}
-/**
- * @public
- */
-export interface DeleteNetworkInsightsAccessScopeAnalysisResult {
-    /**
-     * @public
-     * <p>The ID of the Network Access Scope analysis.</p>
-     */
-    NetworkInsightsAccessScopeAnalysisId?: string;
-}
-/**
- * @public
- */
-export interface DeleteNetworkInsightsAnalysisRequest {
-    /**
-     * @public
-     * <p>Checks whether you have the required permissions for the action, without actually making the request,
-     *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-     *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
-     */
-    DryRun?: boolean;
-    /**
-     * @public
-     * <p>The ID of the network insights analysis.</p>
-     */
-    NetworkInsightsAnalysisId: string | undefined;
-}
-/**
- * @public
- */
-export interface DeleteNetworkInsightsAnalysisResult {
-    /**
-     * @public
-     * <p>The ID of the network insights analysis.</p>
-     */
-    NetworkInsightsAnalysisId?: string;
-}
-/**
- * @public
- */
-export interface DeleteNetworkInsightsPathRequest {
-    /**
-     * @public
-     * <p>Checks whether you have the required permissions for the action, without actually making the request,
-     *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-     *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
-     */
-    DryRun?: boolean;
-    /**
-     * @public
-     * <p>The ID of the path.</p>
-     */
-    NetworkInsightsPathId: string | undefined;
-}
-/**
- * @public
- */
-export interface DeleteNetworkInsightsPathResult {
-    /**
-     * @public
-     * <p>The ID of the path.</p>
-     */
-    NetworkInsightsPathId?: string;
-}
 /**
  * @internal
  */