@aws-sdk/client-ec2 3.695.0 → 3.697.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (162) hide show
  1. package/README.md +48 -0
  2. package/dist-cjs/index.js +730 -57
  3. package/dist-es/EC2.js +12 -0
  4. package/dist-es/commands/CreateVpcBlockPublicAccessExclusionCommand.js +22 -0
  5. package/dist-es/commands/DeleteVpcBlockPublicAccessExclusionCommand.js +22 -0
  6. package/dist-es/commands/DescribeVpcBlockPublicAccessExclusionsCommand.js +22 -0
  7. package/dist-es/commands/DescribeVpcBlockPublicAccessOptionsCommand.js +22 -0
  8. package/dist-es/commands/ModifyVpcBlockPublicAccessExclusionCommand.js +22 -0
  9. package/dist-es/commands/ModifyVpcBlockPublicAccessOptionsCommand.js +22 -0
  10. package/dist-es/commands/index.js +6 -0
  11. package/dist-es/models/models_1.js +7 -4
  12. package/dist-es/models/models_2.js +20 -0
  13. package/dist-es/models/models_3.js +0 -6
  14. package/dist-es/models/models_4.js +6 -15
  15. package/dist-es/models/models_5.js +25 -0
  16. package/dist-es/protocols/Aws_ec2.js +563 -28
  17. package/dist-types/EC2.d.ts +44 -0
  18. package/dist-types/EC2Client.d.ts +8 -2
  19. package/dist-types/commands/BundleInstanceCommand.d.ts +4 -2
  20. package/dist-types/commands/CancelImageLaunchPermissionCommand.d.ts +3 -4
  21. package/dist-types/commands/CopyImageCommand.d.ts +8 -7
  22. package/dist-types/commands/CreateDefaultSubnetCommand.d.ts +3 -0
  23. package/dist-types/commands/CreateDefaultVpcCommand.d.ts +3 -0
  24. package/dist-types/commands/CreateFleetCommand.d.ts +30 -3
  25. package/dist-types/commands/CreateImageCommand.d.ts +6 -5
  26. package/dist-types/commands/CreateLaunchTemplateCommand.d.ts +11 -2
  27. package/dist-types/commands/CreateLaunchTemplateVersionCommand.d.ts +22 -4
  28. package/dist-types/commands/CreateNetworkAclCommand.d.ts +2 -1
  29. package/dist-types/commands/CreateNetworkAclEntryCommand.d.ts +1 -1
  30. package/dist-types/commands/CreateNetworkInsightsAccessScopeCommand.d.ts +1 -2
  31. package/dist-types/commands/CreateRestoreImageTaskCommand.d.ts +3 -3
  32. package/dist-types/commands/CreateStoreImageTaskCommand.d.ts +1 -1
  33. package/dist-types/commands/CreateSubnetCommand.d.ts +3 -0
  34. package/dist-types/commands/CreateVpcBlockPublicAccessExclusionCommand.d.ts +100 -0
  35. package/dist-types/commands/CreateVpcCommand.d.ts +3 -0
  36. package/dist-types/commands/DeleteInstanceEventWindowCommand.d.ts +2 -1
  37. package/dist-types/commands/DeleteInternetGatewayCommand.d.ts +1 -1
  38. package/dist-types/commands/DeleteIpamCommand.d.ts +1 -1
  39. package/dist-types/commands/DeleteIpamExternalResourceVerificationTokenCommand.d.ts +1 -1
  40. package/dist-types/commands/DeleteIpamPoolCommand.d.ts +1 -1
  41. package/dist-types/commands/DeleteIpamResourceDiscoveryCommand.d.ts +1 -1
  42. package/dist-types/commands/DeleteIpamScopeCommand.d.ts +1 -1
  43. package/dist-types/commands/DeleteVpcBlockPublicAccessExclusionCommand.d.ts +87 -0
  44. package/dist-types/commands/DeregisterImageCommand.d.ts +11 -11
  45. package/dist-types/commands/DescribeBundleTasksCommand.d.ts +6 -4
  46. package/dist-types/commands/DescribeFleetsCommand.d.ts +30 -3
  47. package/dist-types/commands/DescribeHostReservationOfferingsCommand.d.ts +2 -1
  48. package/dist-types/commands/DescribeHostReservationsCommand.d.ts +1 -1
  49. package/dist-types/commands/DescribeHostsCommand.d.ts +1 -1
  50. package/dist-types/commands/DescribeIamInstanceProfileAssociationsCommand.d.ts +1 -1
  51. package/dist-types/commands/DescribeImageAttributeCommand.d.ts +4 -4
  52. package/dist-types/commands/DescribeImagesCommand.d.ts +8 -7
  53. package/dist-types/commands/DescribeInstancesCommand.d.ts +1 -1
  54. package/dist-types/commands/DescribeLaunchTemplateVersionsCommand.d.ts +11 -2
  55. package/dist-types/commands/DescribeSecurityGroupVpcAssociationsCommand.d.ts +1 -1
  56. package/dist-types/commands/DescribeSecurityGroupsCommand.d.ts +1 -1
  57. package/dist-types/commands/DescribeSnapshotAttributeCommand.d.ts +1 -1
  58. package/dist-types/commands/DescribeSnapshotTierStatusCommand.d.ts +1 -2
  59. package/dist-types/commands/DescribeSnapshotsCommand.d.ts +1 -1
  60. package/dist-types/commands/DescribeSpotFleetRequestsCommand.d.ts +20 -2
  61. package/dist-types/commands/DescribeStoreImageTasksCommand.d.ts +1 -1
  62. package/dist-types/commands/DescribeSubnetsCommand.d.ts +3 -0
  63. package/dist-types/commands/DescribeVpcBlockPublicAccessExclusionsCommand.d.ts +102 -0
  64. package/dist-types/commands/DescribeVpcBlockPublicAccessOptionsCommand.d.ts +78 -0
  65. package/dist-types/commands/DescribeVpcsCommand.d.ts +3 -0
  66. package/dist-types/commands/DisableFastLaunchCommand.d.ts +6 -4
  67. package/dist-types/commands/DisableImageBlockPublicAccessCommand.d.ts +2 -2
  68. package/dist-types/commands/EnableFastLaunchCommand.d.ts +8 -7
  69. package/dist-types/commands/EnableImageDeprecationCommand.d.ts +2 -1
  70. package/dist-types/commands/ExportClientVpnClientConfigurationCommand.d.ts +2 -1
  71. package/dist-types/commands/ExportImageCommand.d.ts +1 -1
  72. package/dist-types/commands/ExportTransitGatewayRoutesCommand.d.ts +1 -1
  73. package/dist-types/commands/GetAssociatedEnclaveCertificateIamRolesCommand.d.ts +1 -1
  74. package/dist-types/commands/GetAssociatedIpv6PoolCidrsCommand.d.ts +1 -1
  75. package/dist-types/commands/GetAwsNetworkPerformanceDataCommand.d.ts +1 -1
  76. package/dist-types/commands/GetCapacityReservationUsageCommand.d.ts +1 -1
  77. package/dist-types/commands/GetCoipPoolUsageCommand.d.ts +1 -2
  78. package/dist-types/commands/GetInstanceTypesFromInstanceRequirementsCommand.d.ts +10 -1
  79. package/dist-types/commands/GetLaunchTemplateDataCommand.d.ts +11 -2
  80. package/dist-types/commands/GetSpotPlacementScoresCommand.d.ts +10 -1
  81. package/dist-types/commands/ListImagesInRecycleBinCommand.d.ts +2 -2
  82. package/dist-types/commands/ModifyFleetCommand.d.ts +10 -1
  83. package/dist-types/commands/ModifyImageAttributeCommand.d.ts +7 -5
  84. package/dist-types/commands/ModifyInstanceCapacityReservationAttributesCommand.d.ts +2 -2
  85. package/dist-types/commands/ModifySpotFleetRequestCommand.d.ts +10 -1
  86. package/dist-types/commands/ModifyTransitGatewayPrefixListReferenceCommand.d.ts +2 -1
  87. package/dist-types/commands/ModifyTransitGatewayVpcAttachmentCommand.d.ts +1 -1
  88. package/dist-types/commands/ModifyVerifiedAccessEndpointCommand.d.ts +1 -1
  89. package/dist-types/commands/ModifyVerifiedAccessEndpointPolicyCommand.d.ts +1 -1
  90. package/dist-types/commands/ModifyVerifiedAccessGroupCommand.d.ts +1 -1
  91. package/dist-types/commands/ModifyVerifiedAccessGroupPolicyCommand.d.ts +1 -1
  92. package/dist-types/commands/ModifyVerifiedAccessInstanceCommand.d.ts +1 -1
  93. package/dist-types/commands/ModifyVerifiedAccessInstanceLoggingConfigurationCommand.d.ts +1 -1
  94. package/dist-types/commands/ModifyVpcBlockPublicAccessExclusionCommand.d.ts +88 -0
  95. package/dist-types/commands/ModifyVpcBlockPublicAccessOptionsCommand.d.ts +79 -0
  96. package/dist-types/commands/RegisterImageCommand.d.ts +6 -7
  97. package/dist-types/commands/RequestSpotFleetCommand.d.ts +20 -2
  98. package/dist-types/commands/RestoreImageFromRecycleBinCommand.d.ts +2 -1
  99. package/dist-types/commands/RunInstancesCommand.d.ts +2 -2
  100. package/dist-types/commands/index.d.ts +6 -0
  101. package/dist-types/models/models_0.d.ts +27 -23
  102. package/dist-types/models/models_1.d.ts +310 -277
  103. package/dist-types/models/models_2.d.ts +417 -219
  104. package/dist-types/models/models_3.d.ts +268 -589
  105. package/dist-types/models/models_4.d.ts +6951 -7048
  106. package/dist-types/models/models_5.d.ts +3709 -3519
  107. package/dist-types/models/models_6.d.ts +4429 -4255
  108. package/dist-types/models/models_7.d.ts +624 -29
  109. package/dist-types/protocols/Aws_ec2.d.ts +54 -0
  110. package/dist-types/ts3.4/EC2.d.ts +140 -0
  111. package/dist-types/ts3.4/EC2Client.d.ts +36 -0
  112. package/dist-types/ts3.4/commands/CreateNetworkAclCommand.d.ts +2 -4
  113. package/dist-types/ts3.4/commands/CreateNetworkAclEntryCommand.d.ts +1 -1
  114. package/dist-types/ts3.4/commands/CreateNetworkInsightsAccessScopeCommand.d.ts +4 -2
  115. package/dist-types/ts3.4/commands/CreateVpcBlockPublicAccessExclusionCommand.d.ts +51 -0
  116. package/dist-types/ts3.4/commands/DeleteInstanceEventWindowCommand.d.ts +2 -4
  117. package/dist-types/ts3.4/commands/DeleteInternetGatewayCommand.d.ts +1 -1
  118. package/dist-types/ts3.4/commands/DeleteIpamCommand.d.ts +1 -1
  119. package/dist-types/ts3.4/commands/DeleteIpamExternalResourceVerificationTokenCommand.d.ts +1 -1
  120. package/dist-types/ts3.4/commands/DeleteIpamPoolCommand.d.ts +1 -1
  121. package/dist-types/ts3.4/commands/DeleteIpamResourceDiscoveryCommand.d.ts +1 -1
  122. package/dist-types/ts3.4/commands/DeleteIpamScopeCommand.d.ts +1 -1
  123. package/dist-types/ts3.4/commands/DeleteVpcBlockPublicAccessExclusionCommand.d.ts +51 -0
  124. package/dist-types/ts3.4/commands/DescribeHostReservationOfferingsCommand.d.ts +2 -4
  125. package/dist-types/ts3.4/commands/DescribeHostReservationsCommand.d.ts +1 -1
  126. package/dist-types/ts3.4/commands/DescribeHostsCommand.d.ts +1 -1
  127. package/dist-types/ts3.4/commands/DescribeIamInstanceProfileAssociationsCommand.d.ts +1 -1
  128. package/dist-types/ts3.4/commands/DescribeSecurityGroupVpcAssociationsCommand.d.ts +1 -1
  129. package/dist-types/ts3.4/commands/DescribeSecurityGroupsCommand.d.ts +1 -1
  130. package/dist-types/ts3.4/commands/DescribeSnapshotAttributeCommand.d.ts +1 -1
  131. package/dist-types/ts3.4/commands/DescribeSnapshotTierStatusCommand.d.ts +4 -2
  132. package/dist-types/ts3.4/commands/DescribeSnapshotsCommand.d.ts +1 -1
  133. package/dist-types/ts3.4/commands/DescribeVpcBlockPublicAccessExclusionsCommand.d.ts +51 -0
  134. package/dist-types/ts3.4/commands/DescribeVpcBlockPublicAccessOptionsCommand.d.ts +51 -0
  135. package/dist-types/ts3.4/commands/ExportClientVpnClientConfigurationCommand.d.ts +2 -4
  136. package/dist-types/ts3.4/commands/ExportImageCommand.d.ts +1 -1
  137. package/dist-types/ts3.4/commands/ExportTransitGatewayRoutesCommand.d.ts +1 -1
  138. package/dist-types/ts3.4/commands/GetAssociatedEnclaveCertificateIamRolesCommand.d.ts +1 -1
  139. package/dist-types/ts3.4/commands/GetAssociatedIpv6PoolCidrsCommand.d.ts +1 -1
  140. package/dist-types/ts3.4/commands/GetAwsNetworkPerformanceDataCommand.d.ts +1 -1
  141. package/dist-types/ts3.4/commands/GetCapacityReservationUsageCommand.d.ts +1 -1
  142. package/dist-types/ts3.4/commands/GetCoipPoolUsageCommand.d.ts +4 -2
  143. package/dist-types/ts3.4/commands/ModifyTransitGatewayPrefixListReferenceCommand.d.ts +2 -4
  144. package/dist-types/ts3.4/commands/ModifyTransitGatewayVpcAttachmentCommand.d.ts +1 -1
  145. package/dist-types/ts3.4/commands/ModifyVerifiedAccessEndpointCommand.d.ts +1 -1
  146. package/dist-types/ts3.4/commands/ModifyVerifiedAccessEndpointPolicyCommand.d.ts +1 -1
  147. package/dist-types/ts3.4/commands/ModifyVerifiedAccessGroupCommand.d.ts +1 -1
  148. package/dist-types/ts3.4/commands/ModifyVerifiedAccessGroupPolicyCommand.d.ts +1 -1
  149. package/dist-types/ts3.4/commands/ModifyVerifiedAccessInstanceCommand.d.ts +1 -1
  150. package/dist-types/ts3.4/commands/ModifyVerifiedAccessInstanceLoggingConfigurationCommand.d.ts +1 -1
  151. package/dist-types/ts3.4/commands/ModifyVpcBlockPublicAccessExclusionCommand.d.ts +51 -0
  152. package/dist-types/ts3.4/commands/ModifyVpcBlockPublicAccessOptionsCommand.d.ts +51 -0
  153. package/dist-types/ts3.4/commands/index.d.ts +6 -0
  154. package/dist-types/ts3.4/models/models_1.d.ts +34 -60
  155. package/dist-types/ts3.4/models/models_2.d.ts +102 -57
  156. package/dist-types/ts3.4/models/models_3.d.ts +64 -117
  157. package/dist-types/ts3.4/models/models_4.d.ts +119 -113
  158. package/dist-types/ts3.4/models/models_5.d.ts +152 -141
  159. package/dist-types/ts3.4/models/models_6.d.ts +139 -138
  160. package/dist-types/ts3.4/models/models_7.d.ts +158 -3
  161. package/dist-types/ts3.4/protocols/Aws_ec2.d.ts +72 -0
  162. package/package.json +37 -37
@@ -1,5 +1,266 @@
1
- import { AccessScopePath, ApplianceModeSupportValue, AttachmentStatus, CurrencyCodeValues, DeviceTrustProviderType, DnsSupportValue, DynamicRoutingValue, InstanceEventWindowState, Ipv4PrefixSpecification, Ipv6SupportValue, Protocol, ReservedInstancesListing, RouteTableAssociationState, SecurityGroupReferencingSupportValue, Tag, TagSpecification, TransitGatewayAttachmentResourceType, TransitGatewayAttachmentState, TransitGatewayPeeringAttachment, TransitGatewayVpcAttachment, TrustProviderType, UnsuccessfulItem, UserTrustProviderType, VerifiedAccessInstance, VerifiedAccessSseSpecificationResponse, VerifiedAccessTrustProvider, VolumeAttachment, VpcAttachment, VpcPeeringConnection } from "./models_0";
2
- import { CarrierGateway, ClientVpnEndpointStatus, ClientVpnRouteStatus, CoipCidr, CoipPool, ConnectionTrackingSpecificationRequest, Ec2InstanceConnectEndpoint, GatewayType, InstanceIpv6Address, Ipam, IpamExternalResourceVerificationToken, IpamPool, IpamResourceDiscovery, IpamScope, Ipv4PrefixSpecificationRequest, Ipv6PrefixSpecificationRequest, NetworkInsightsAccessScope, OperatorRequest, OperatorResponse, PrivateIpAddressSpecification, Subnet, Tenancy, VolumeType, Vpc } from "./models_1";
1
+ import { AccessScopePath, AccessScopePathRequest, ApplianceModeSupportValue, AttachmentStatus, CurrencyCodeValues, DeviceTrustProviderType, DnsSupportValue, DynamicRoutingValue, Ipv4PrefixSpecification, Ipv6SupportValue, PortRange, Protocol, ReservedInstancesListing, RouteTableAssociationState, SecurityGroupReferencingSupportValue, Tag, TagSpecification, TransitGatewayAttachmentResourceType, TransitGatewayAttachmentState, TransitGatewayPeeringAttachment, TransitGatewayVpcAttachment, TrustProviderType, UnsuccessfulItem, UserTrustProviderType, VerifiedAccessInstance, VerifiedAccessSseSpecificationResponse, VerifiedAccessTrustProvider, VolumeAttachment, VpcAttachment, VpcPeeringConnection } from "./models_0";
2
+ import { CarrierGateway, ClientVpnEndpointStatus, ClientVpnRouteStatus, CoipCidr, CoipPool, ConnectionTrackingSpecificationRequest, Ec2InstanceConnectEndpoint, GatewayType, InstanceIpv6Address, Ipv4PrefixSpecificationRequest, Ipv6PrefixSpecificationRequest, NetworkAclAssociation, OperatorRequest, OperatorResponse, PrivateIpAddressSpecification, Subnet, Tenancy, VolumeType, Vpc } from "./models_1";
3
+ /**
4
+ * <p>Describes the ICMP type and code.</p>
5
+ * @public
6
+ */
7
+ export interface IcmpTypeCode {
8
+ /**
9
+ * <p>The ICMP code. A value of -1 means all codes for the specified ICMP type.</p>
10
+ * @public
11
+ */
12
+ Code?: number | undefined;
13
+ /**
14
+ * <p>The ICMP type. A value of -1 means all types.</p>
15
+ * @public
16
+ */
17
+ Type?: number | undefined;
18
+ }
19
+ /**
20
+ * @public
21
+ * @enum
22
+ */
23
+ export declare const RuleAction: {
24
+ readonly allow: "allow";
25
+ readonly deny: "deny";
26
+ };
27
+ /**
28
+ * @public
29
+ */
30
+ export type RuleAction = (typeof RuleAction)[keyof typeof RuleAction];
31
+ /**
32
+ * <p>Describes an entry in a network ACL.</p>
33
+ * @public
34
+ */
35
+ export interface NetworkAclEntry {
36
+ /**
37
+ * <p>The IPv4 network range to allow or deny, in CIDR notation.</p>
38
+ * @public
39
+ */
40
+ CidrBlock?: string | undefined;
41
+ /**
42
+ * <p>Indicates whether the rule is an egress rule (applied to traffic leaving the subnet).</p>
43
+ * @public
44
+ */
45
+ Egress?: boolean | undefined;
46
+ /**
47
+ * <p>ICMP protocol: The ICMP type and code.</p>
48
+ * @public
49
+ */
50
+ IcmpTypeCode?: IcmpTypeCode | undefined;
51
+ /**
52
+ * <p>The IPv6 network range to allow or deny, in CIDR notation.</p>
53
+ * @public
54
+ */
55
+ Ipv6CidrBlock?: string | undefined;
56
+ /**
57
+ * <p>TCP or UDP protocols: The range of ports the rule applies to.</p>
58
+ * @public
59
+ */
60
+ PortRange?: PortRange | undefined;
61
+ /**
62
+ * <p>The protocol number. A value of "-1" means all protocols.</p>
63
+ * @public
64
+ */
65
+ Protocol?: string | undefined;
66
+ /**
67
+ * <p>Indicates whether to allow or deny the traffic that matches the rule.</p>
68
+ * @public
69
+ */
70
+ RuleAction?: RuleAction | undefined;
71
+ /**
72
+ * <p>The rule number for the entry. ACL entries are processed in ascending order by rule number.</p>
73
+ * @public
74
+ */
75
+ RuleNumber?: number | undefined;
76
+ }
77
+ /**
78
+ * <p>Describes a network ACL.</p>
79
+ * @public
80
+ */
81
+ export interface NetworkAcl {
82
+ /**
83
+ * <p>Any associations between the network ACL and your subnets</p>
84
+ * @public
85
+ */
86
+ Associations?: NetworkAclAssociation[] | undefined;
87
+ /**
88
+ * <p>The entries (rules) in the network ACL.</p>
89
+ * @public
90
+ */
91
+ Entries?: NetworkAclEntry[] | undefined;
92
+ /**
93
+ * <p>Indicates whether this is the default network ACL for the VPC.</p>
94
+ * @public
95
+ */
96
+ IsDefault?: boolean | undefined;
97
+ /**
98
+ * <p>The ID of the network ACL.</p>
99
+ * @public
100
+ */
101
+ NetworkAclId?: string | undefined;
102
+ /**
103
+ * <p>Any tags assigned to the network ACL.</p>
104
+ * @public
105
+ */
106
+ Tags?: Tag[] | undefined;
107
+ /**
108
+ * <p>The ID of the VPC for the network ACL.</p>
109
+ * @public
110
+ */
111
+ VpcId?: string | undefined;
112
+ /**
113
+ * <p>The ID of the Amazon Web Services account that owns the network ACL.</p>
114
+ * @public
115
+ */
116
+ OwnerId?: string | undefined;
117
+ }
118
+ /**
119
+ * @public
120
+ */
121
+ export interface CreateNetworkAclResult {
122
+ /**
123
+ * <p>Information about the network ACL.</p>
124
+ * @public
125
+ */
126
+ NetworkAcl?: NetworkAcl | undefined;
127
+ /**
128
+ * <p>Unique, case-sensitive identifier to ensure the idempotency of the request. Only returned if a client token was provided in the request.</p>
129
+ * @public
130
+ */
131
+ ClientToken?: string | undefined;
132
+ }
133
+ /**
134
+ * @public
135
+ */
136
+ export interface CreateNetworkAclEntryRequest {
137
+ /**
138
+ * <p>Checks whether you have the required permissions for the action, without actually making the request,
139
+ * and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
140
+ * Otherwise, it is <code>UnauthorizedOperation</code>.</p>
141
+ * @public
142
+ */
143
+ DryRun?: boolean | undefined;
144
+ /**
145
+ * <p>The ID of the network ACL.</p>
146
+ * @public
147
+ */
148
+ NetworkAclId: string | undefined;
149
+ /**
150
+ * <p>The rule number for the entry (for example, 100). ACL entries are processed in ascending order by rule number.</p>
151
+ * <p>Constraints: Positive integer from 1 to 32766. The range 32767 to 65535 is reserved for internal use.</p>
152
+ * @public
153
+ */
154
+ RuleNumber: number | undefined;
155
+ /**
156
+ * <p>The protocol number. A value of "-1" means all protocols. If you specify "-1" or a
157
+ * protocol number other than "6" (TCP), "17" (UDP), or "1" (ICMP), traffic on all ports is
158
+ * allowed, regardless of any ports or ICMP types or codes that you specify. If you specify
159
+ * protocol "58" (ICMPv6) and specify an IPv4 CIDR block, traffic for all ICMP types and
160
+ * codes allowed, regardless of any that you specify. If you specify protocol "58" (ICMPv6)
161
+ * and specify an IPv6 CIDR block, you must specify an ICMP type and code.</p>
162
+ * @public
163
+ */
164
+ Protocol: string | undefined;
165
+ /**
166
+ * <p>Indicates whether to allow or deny the traffic that matches the rule.</p>
167
+ * @public
168
+ */
169
+ RuleAction: RuleAction | undefined;
170
+ /**
171
+ * <p>Indicates whether this is an egress rule (rule is applied to traffic leaving the subnet).</p>
172
+ * @public
173
+ */
174
+ Egress: boolean | undefined;
175
+ /**
176
+ * <p>The IPv4 network range to allow or deny, in CIDR notation (for example
177
+ * <code>172.16.0.0/24</code>). We modify the specified CIDR block to its canonical form; for example, if you specify <code>100.68.0.18/18</code>, we modify it to <code>100.68.0.0/18</code>.</p>
178
+ * @public
179
+ */
180
+ CidrBlock?: string | undefined;
181
+ /**
182
+ * <p>The IPv6 network range to allow or deny, in CIDR notation (for example
183
+ * <code>2001:db8:1234:1a00::/64</code>).</p>
184
+ * @public
185
+ */
186
+ Ipv6CidrBlock?: string | undefined;
187
+ /**
188
+ * <p>ICMP protocol: The ICMP or ICMPv6 type and code. Required if specifying protocol
189
+ * 1 (ICMP) or protocol 58 (ICMPv6) with an IPv6 CIDR block.</p>
190
+ * @public
191
+ */
192
+ IcmpTypeCode?: IcmpTypeCode | undefined;
193
+ /**
194
+ * <p>TCP or UDP protocols: The range of ports the rule applies to.
195
+ * Required if specifying protocol 6 (TCP) or 17 (UDP).</p>
196
+ * @public
197
+ */
198
+ PortRange?: PortRange | undefined;
199
+ }
200
+ /**
201
+ * @public
202
+ */
203
+ export interface CreateNetworkInsightsAccessScopeRequest {
204
+ /**
205
+ * <p>The paths to match.</p>
206
+ * @public
207
+ */
208
+ MatchPaths?: AccessScopePathRequest[] | undefined;
209
+ /**
210
+ * <p>The paths to exclude.</p>
211
+ * @public
212
+ */
213
+ ExcludePaths?: AccessScopePathRequest[] | undefined;
214
+ /**
215
+ * <p>Unique, case-sensitive identifier that you provide to ensure the idempotency of the request. For more information,
216
+ * see <a href="https://docs.aws.amazon.com/ec2/latest/devguide/ec2-api-idempotency.html">How to ensure idempotency</a>.</p>
217
+ * @public
218
+ */
219
+ ClientToken?: string | undefined;
220
+ /**
221
+ * <p>The tags to apply.</p>
222
+ * @public
223
+ */
224
+ TagSpecifications?: TagSpecification[] | undefined;
225
+ /**
226
+ * <p>Checks whether you have the required permissions for the action, without actually making the request,
227
+ * and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
228
+ * Otherwise, it is <code>UnauthorizedOperation</code>.</p>
229
+ * @public
230
+ */
231
+ DryRun?: boolean | undefined;
232
+ }
233
+ /**
234
+ * <p>Describes a Network Access Scope.</p>
235
+ * @public
236
+ */
237
+ export interface NetworkInsightsAccessScope {
238
+ /**
239
+ * <p>The ID of the Network Access Scope.</p>
240
+ * @public
241
+ */
242
+ NetworkInsightsAccessScopeId?: string | undefined;
243
+ /**
244
+ * <p>The Amazon Resource Name (ARN) of the Network Access Scope.</p>
245
+ * @public
246
+ */
247
+ NetworkInsightsAccessScopeArn?: string | undefined;
248
+ /**
249
+ * <p>The creation date.</p>
250
+ * @public
251
+ */
252
+ CreatedDate?: Date | undefined;
253
+ /**
254
+ * <p>The last updated date.</p>
255
+ * @public
256
+ */
257
+ UpdatedDate?: Date | undefined;
258
+ /**
259
+ * <p>The tags.</p>
260
+ * @public
261
+ */
262
+ Tags?: Tag[] | undefined;
263
+ }
3
264
  /**
4
265
  * <p>Describes the Network Access Scope content.</p>
5
266
  * @public
@@ -1428,12 +1689,13 @@ export interface CreateRestoreImageTaskRequest {
1428
1689
  * snapshots, or both.</p>
1429
1690
  * <ul>
1430
1691
  * <li>
1431
- * <p>To tag the AMI, the value for <code>ResourceType</code> must be <code>image</code>.</p>
1692
+ * <p>To tag the AMI, the value for <code>ResourceType</code> must be
1693
+ * <code>image</code>.</p>
1432
1694
  * </li>
1433
1695
  * <li>
1434
- * <p>To
1435
- * tag the snapshots, the value for <code>ResourceType</code> must be <code>snapshot</code>. The
1436
- * same tag is applied to all of the snapshots that are created.</p>
1696
+ * <p>To tag the snapshots, the value for <code>ResourceType</code> must be
1697
+ * <code>snapshot</code>. The same tag is applied to all of the snapshots that are
1698
+ * created.</p>
1437
1699
  * </li>
1438
1700
  * </ul>
1439
1701
  * @public
@@ -5700,6 +5962,155 @@ export interface CreateVpcResult {
5700
5962
  */
5701
5963
  Vpc?: Vpc | undefined;
5702
5964
  }
5965
+ /**
5966
+ * @public
5967
+ * @enum
5968
+ */
5969
+ export declare const InternetGatewayExclusionMode: {
5970
+ readonly allow_bidirectional: "allow-bidirectional";
5971
+ readonly allow_egress: "allow-egress";
5972
+ };
5973
+ /**
5974
+ * @public
5975
+ */
5976
+ export type InternetGatewayExclusionMode = (typeof InternetGatewayExclusionMode)[keyof typeof InternetGatewayExclusionMode];
5977
+ /**
5978
+ * @public
5979
+ */
5980
+ export interface CreateVpcBlockPublicAccessExclusionRequest {
5981
+ /**
5982
+ * <p>Checks whether you have the required permissions for the action, without actually making the request,
5983
+ * and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
5984
+ * Otherwise, it is <code>UnauthorizedOperation</code>.</p>
5985
+ * @public
5986
+ */
5987
+ DryRun?: boolean | undefined;
5988
+ /**
5989
+ * <p>A subnet ID.</p>
5990
+ * @public
5991
+ */
5992
+ SubnetId?: string | undefined;
5993
+ /**
5994
+ * <p>A VPC ID.</p>
5995
+ * @public
5996
+ */
5997
+ VpcId?: string | undefined;
5998
+ /**
5999
+ * <p>The exclusion mode for internet gateway traffic.</p>
6000
+ * <ul>
6001
+ * <li>
6002
+ * <p>
6003
+ * <code>bidirectional-access-allowed</code>: Allow all internet traffic to and from the excluded VPCs and subnets.</p>
6004
+ * </li>
6005
+ * <li>
6006
+ * <p>
6007
+ * <code>egress-access-allowed</code>: Allow outbound internet traffic from the excluded VPCs and subnets. Block inbound internet traffic to the excluded VPCs and subnets. Only applies when VPC Block Public Access is set to Bidirectional.</p>
6008
+ * </li>
6009
+ * </ul>
6010
+ * @public
6011
+ */
6012
+ InternetGatewayExclusionMode: InternetGatewayExclusionMode | undefined;
6013
+ /**
6014
+ * <p>
6015
+ * <code>tag</code> - The key/value combination of a tag assigned to the resource. Use the tag key in the filter name and the tag value as the filter value.
6016
+ * For example, to find all resources that have a tag with the key <code>Owner</code> and the value <code>TeamA</code>, specify <code>tag:Owner</code> for the filter name and <code>TeamA</code> for the filter value.</p>
6017
+ * @public
6018
+ */
6019
+ TagSpecifications?: TagSpecification[] | undefined;
6020
+ }
6021
+ /**
6022
+ * @public
6023
+ * @enum
6024
+ */
6025
+ export declare const VpcBlockPublicAccessExclusionState: {
6026
+ readonly create_complete: "create-complete";
6027
+ readonly create_failed: "create-failed";
6028
+ readonly create_in_progress: "create-in-progress";
6029
+ readonly delete_complete: "delete-complete";
6030
+ readonly delete_in_progress: "delete-in-progress";
6031
+ readonly disable_complete: "disable-complete";
6032
+ readonly disable_in_progress: "disable-in-progress";
6033
+ readonly update_complete: "update-complete";
6034
+ readonly update_failed: "update-failed";
6035
+ readonly update_in_progress: "update-in-progress";
6036
+ };
6037
+ /**
6038
+ * @public
6039
+ */
6040
+ export type VpcBlockPublicAccessExclusionState = (typeof VpcBlockPublicAccessExclusionState)[keyof typeof VpcBlockPublicAccessExclusionState];
6041
+ /**
6042
+ * <p>A VPC BPA exclusion is a mode that can be applied to a single VPC or subnet that exempts it from the account’s BPA mode and will allow bidirectional or egress-only access. You can create BPA exclusions for VPCs and subnets even when BPA is not enabled on the account to ensure that there is no traffic disruption to the exclusions when VPC BPA is turned on. To learn more about VPC BPA, see <a href="https://docs.aws.amazon.com/vpc/latest/userguide/security-vpc-bpa.html">Block public access to VPCs and subnets</a> in the <i>Amazon VPC User Guide</i>.</p>
6043
+ * @public
6044
+ */
6045
+ export interface VpcBlockPublicAccessExclusion {
6046
+ /**
6047
+ * <p>The ID of the exclusion.</p>
6048
+ * @public
6049
+ */
6050
+ ExclusionId?: string | undefined;
6051
+ /**
6052
+ * <p>The exclusion mode for internet gateway traffic.</p>
6053
+ * <ul>
6054
+ * <li>
6055
+ * <p>
6056
+ * <code>bidirectional-access-allowed</code>: Allow all internet traffic to and from the excluded VPCs and subnets.</p>
6057
+ * </li>
6058
+ * <li>
6059
+ * <p>
6060
+ * <code>egress-access-allowed</code>: Allow outbound internet traffic from the excluded VPCs and subnets. Block inbound internet traffic to the excluded VPCs and subnets. Only applies when VPC Block Public Access is set to Bidirectional.</p>
6061
+ * </li>
6062
+ * </ul>
6063
+ * @public
6064
+ */
6065
+ InternetGatewayExclusionMode?: InternetGatewayExclusionMode | undefined;
6066
+ /**
6067
+ * <p>The ARN of the exclusion.</p>
6068
+ * @public
6069
+ */
6070
+ ResourceArn?: string | undefined;
6071
+ /**
6072
+ * <p>The state of the exclusion.</p>
6073
+ * @public
6074
+ */
6075
+ State?: VpcBlockPublicAccessExclusionState | undefined;
6076
+ /**
6077
+ * <p>The reason for the current exclusion state.</p>
6078
+ * @public
6079
+ */
6080
+ Reason?: string | undefined;
6081
+ /**
6082
+ * <p>When the exclusion was created.</p>
6083
+ * @public
6084
+ */
6085
+ CreationTimestamp?: Date | undefined;
6086
+ /**
6087
+ * <p>When the exclusion was last updated.</p>
6088
+ * @public
6089
+ */
6090
+ LastUpdateTimestamp?: Date | undefined;
6091
+ /**
6092
+ * <p>When the exclusion was deleted.</p>
6093
+ * @public
6094
+ */
6095
+ DeletionTimestamp?: Date | undefined;
6096
+ /**
6097
+ * <p>
6098
+ * <code>tag</code> - The key/value combination of a tag assigned to the resource. Use the tag key in the filter name and the tag value as the filter value.
6099
+ * For example, to find all resources that have a tag with the key <code>Owner</code> and the value <code>TeamA</code>, specify <code>tag:Owner</code> for the filter name and <code>TeamA</code> for the filter value.</p>
6100
+ * @public
6101
+ */
6102
+ Tags?: Tag[] | undefined;
6103
+ }
6104
+ /**
6105
+ * @public
6106
+ */
6107
+ export interface CreateVpcBlockPublicAccessExclusionResult {
6108
+ /**
6109
+ * <p>Details about an exclusion.</p>
6110
+ * @public
6111
+ */
6112
+ VpcBlockPublicAccessExclusion?: VpcBlockPublicAccessExclusion | undefined;
6113
+ }
5703
6114
  /**
5704
6115
  * @public
5705
6116
  * @enum
@@ -8036,219 +8447,6 @@ export interface DeleteInstanceEventWindowRequest {
8036
8447
  */
8037
8448
  InstanceEventWindowId: string | undefined;
8038
8449
  }
8039
- /**
8040
- * <p>The state of the event window.</p>
8041
- * @public
8042
- */
8043
- export interface InstanceEventWindowStateChange {
8044
- /**
8045
- * <p>The ID of the event window.</p>
8046
- * @public
8047
- */
8048
- InstanceEventWindowId?: string | undefined;
8049
- /**
8050
- * <p>The current state of the event window.</p>
8051
- * @public
8052
- */
8053
- State?: InstanceEventWindowState | undefined;
8054
- }
8055
- /**
8056
- * @public
8057
- */
8058
- export interface DeleteInstanceEventWindowResult {
8059
- /**
8060
- * <p>The state of the event window.</p>
8061
- * @public
8062
- */
8063
- InstanceEventWindowState?: InstanceEventWindowStateChange | undefined;
8064
- }
8065
- /**
8066
- * @public
8067
- */
8068
- export interface DeleteInternetGatewayRequest {
8069
- /**
8070
- * <p>Checks whether you have the required permissions for the action, without actually making the request,
8071
- * and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
8072
- * Otherwise, it is <code>UnauthorizedOperation</code>.</p>
8073
- * @public
8074
- */
8075
- DryRun?: boolean | undefined;
8076
- /**
8077
- * <p>The ID of the internet gateway.</p>
8078
- * @public
8079
- */
8080
- InternetGatewayId: string | undefined;
8081
- }
8082
- /**
8083
- * @public
8084
- */
8085
- export interface DeleteIpamRequest {
8086
- /**
8087
- * <p>A check for whether you have the required permissions for the action without actually making the request
8088
- * and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
8089
- * Otherwise, it is <code>UnauthorizedOperation</code>.</p>
8090
- * @public
8091
- */
8092
- DryRun?: boolean | undefined;
8093
- /**
8094
- * <p>The ID of the IPAM to delete.</p>
8095
- * @public
8096
- */
8097
- IpamId: string | undefined;
8098
- /**
8099
- * <p>Enables you to quickly delete an IPAM, private scopes, pools in private scopes, and
8100
- * any allocations in the pools in private scopes. You cannot delete the IPAM with this option if there is a pool in your public scope. If you use this option, IPAM does the following:</p>
8101
- * <ul>
8102
- * <li>
8103
- * <p>Deallocates any CIDRs allocated to VPC resources (such as VPCs) in pools in private scopes.</p>
8104
- * <note>
8105
- * <p>No VPC resources are deleted as a result of enabling this option. The CIDR associated with the resource will no longer be allocated from an IPAM pool, but the CIDR itself will remain unchanged.</p>
8106
- * </note>
8107
- * </li>
8108
- * <li>
8109
- * <p>Deprovisions all IPv4 CIDRs provisioned to IPAM pools in private scopes.</p>
8110
- * </li>
8111
- * <li>
8112
- * <p>Deletes all IPAM pools in private scopes.</p>
8113
- * </li>
8114
- * <li>
8115
- * <p>Deletes all non-default private scopes in the IPAM.</p>
8116
- * </li>
8117
- * <li>
8118
- * <p>Deletes the default public and private scopes and the IPAM.</p>
8119
- * </li>
8120
- * </ul>
8121
- * @public
8122
- */
8123
- Cascade?: boolean | undefined;
8124
- }
8125
- /**
8126
- * @public
8127
- */
8128
- export interface DeleteIpamResult {
8129
- /**
8130
- * <p>Information about the results of the deletion.</p>
8131
- * @public
8132
- */
8133
- Ipam?: Ipam | undefined;
8134
- }
8135
- /**
8136
- * @public
8137
- */
8138
- export interface DeleteIpamExternalResourceVerificationTokenRequest {
8139
- /**
8140
- * <p>A check for whether you have the required permissions for the action without actually making the request
8141
- * and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
8142
- * Otherwise, it is <code>UnauthorizedOperation</code>.</p>
8143
- * @public
8144
- */
8145
- DryRun?: boolean | undefined;
8146
- /**
8147
- * <p>The token ID.</p>
8148
- * @public
8149
- */
8150
- IpamExternalResourceVerificationTokenId: string | undefined;
8151
- }
8152
- /**
8153
- * @public
8154
- */
8155
- export interface DeleteIpamExternalResourceVerificationTokenResult {
8156
- /**
8157
- * <p>The verification token.</p>
8158
- * @public
8159
- */
8160
- IpamExternalResourceVerificationToken?: IpamExternalResourceVerificationToken | undefined;
8161
- }
8162
- /**
8163
- * @public
8164
- */
8165
- export interface DeleteIpamPoolRequest {
8166
- /**
8167
- * <p>A check for whether you have the required permissions for the action without actually making the request
8168
- * and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
8169
- * Otherwise, it is <code>UnauthorizedOperation</code>.</p>
8170
- * @public
8171
- */
8172
- DryRun?: boolean | undefined;
8173
- /**
8174
- * <p>The ID of the pool to delete.</p>
8175
- * @public
8176
- */
8177
- IpamPoolId: string | undefined;
8178
- /**
8179
- * <p>Enables you to quickly delete an IPAM pool and all resources within that pool, including
8180
- * provisioned CIDRs, allocations, and other pools.</p>
8181
- * <important>
8182
- * <p>You can only use this option to delete pools in the private scope or pools in the public scope with a source resource. A source resource is a resource used to provision CIDRs to a resource planning pool.</p>
8183
- * </important>
8184
- * @public
8185
- */
8186
- Cascade?: boolean | undefined;
8187
- }
8188
- /**
8189
- * @public
8190
- */
8191
- export interface DeleteIpamPoolResult {
8192
- /**
8193
- * <p>Information about the results of the deletion.</p>
8194
- * @public
8195
- */
8196
- IpamPool?: IpamPool | undefined;
8197
- }
8198
- /**
8199
- * @public
8200
- */
8201
- export interface DeleteIpamResourceDiscoveryRequest {
8202
- /**
8203
- * <p>A check for whether you have the required permissions for the action without actually making the request
8204
- * and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
8205
- * Otherwise, it is <code>UnauthorizedOperation</code>.</p>
8206
- * @public
8207
- */
8208
- DryRun?: boolean | undefined;
8209
- /**
8210
- * <p>The IPAM resource discovery ID.</p>
8211
- * @public
8212
- */
8213
- IpamResourceDiscoveryId: string | undefined;
8214
- }
8215
- /**
8216
- * @public
8217
- */
8218
- export interface DeleteIpamResourceDiscoveryResult {
8219
- /**
8220
- * <p>The IPAM resource discovery.</p>
8221
- * @public
8222
- */
8223
- IpamResourceDiscovery?: IpamResourceDiscovery | undefined;
8224
- }
8225
- /**
8226
- * @public
8227
- */
8228
- export interface DeleteIpamScopeRequest {
8229
- /**
8230
- * <p>A check for whether you have the required permissions for the action without actually making the request
8231
- * and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
8232
- * Otherwise, it is <code>UnauthorizedOperation</code>.</p>
8233
- * @public
8234
- */
8235
- DryRun?: boolean | undefined;
8236
- /**
8237
- * <p>The ID of the scope to delete.</p>
8238
- * @public
8239
- */
8240
- IpamScopeId: string | undefined;
8241
- }
8242
- /**
8243
- * @public
8244
- */
8245
- export interface DeleteIpamScopeResult {
8246
- /**
8247
- * <p>Information about the results of the deletion.</p>
8248
- * @public
8249
- */
8250
- IpamScope?: IpamScope | undefined;
8251
- }
8252
8450
  /**
8253
8451
  * @internal
8254
8452
  */