@aws-sdk/client-ec2 3.696.0 → 3.698.0

package/dist-types/models/models_2.d.ts

@@ -1,5 +1,383 @@
-import { AccessScopePath, AccessScopePathRequest, ApplianceModeSupportValue, AttachmentStatus, CurrencyCodeValues, DeviceTrustProviderType, DnsSupportValue, DynamicRoutingValue, InstanceEventWindowState, Ipv4PrefixSpecification, Ipv6SupportValue, Protocol, ReservedInstancesListing, RouteTableAssociationState, SecurityGroupReferencingSupportValue, Tag, TagSpecification, TransitGatewayAttachmentResourceType, TransitGatewayAttachmentState, TransitGatewayPeeringAttachment, TransitGatewayVpcAttachment, TrustProviderType, UnsuccessfulItem, UserTrustProviderType, VerifiedAccessInstance, VerifiedAccessSseSpecificationResponse, VerifiedAccessTrustProvider, VolumeAttachment, VpcAttachment, VpcPeeringConnection } from "./models_0";
-import { CarrierGateway, ClientVpnEndpointStatus, ClientVpnRouteStatus, CoipCidr, CoipPool, ConnectionTrackingSpecificationRequest, Ec2InstanceConnectEndpoint, GatewayType, InstanceIpv6Address, Ipam, Ipv4PrefixSpecificationRequest, Ipv6PrefixSpecificationRequest, OperatorRequest, OperatorResponse, PrivateIpAddressSpecification, Subnet, Tenancy, VolumeType, Vpc } from "./models_1";
+import { AccessScopePath, AccessScopePathRequest, ApplianceModeSupportValue, AttachmentStatus, CurrencyCodeValues, DeviceTrustProviderType, DnsSupportValue, DynamicRoutingValue, Ipv4PrefixSpecification, Ipv6SupportValue, NatGatewayAddress, PortRange, Protocol, ReservedInstancesListing, RouteTableAssociationState, SecurityGroupReferencingSupportValue, Tag, TagSpecification, TransitGatewayAttachmentResourceType, TransitGatewayAttachmentState, TransitGatewayPeeringAttachment, TransitGatewayVpcAttachment, TrustProviderType, UnsuccessfulItem, UserTrustProviderType, VerifiedAccessInstance, VerifiedAccessSseSpecificationResponse, VerifiedAccessTrustProvider, VolumeAttachment, VpcAttachment, VpcPeeringConnection } from "./models_0";
+import { CarrierGateway, ClientVpnEndpointStatus, ClientVpnRouteStatus, CoipCidr, CoipPool, ConnectionTrackingSpecificationRequest, ConnectivityType, GatewayType, InstanceIpv6Address, Ipv4PrefixSpecificationRequest, Ipv6PrefixSpecificationRequest, NatGatewayState, OperatorRequest, OperatorResponse, PrivateIpAddressSpecification, ProvisionedBandwidth, Subnet, Tenancy, VolumeType, Vpc } from "./models_1";
+/**
+ * <p>Describes a NAT gateway.</p>
+ * @public
+ */
+export interface NatGateway {
+    /**
+     * <p>The date and time the NAT gateway was created.</p>
+     * @public
+     */
+    CreateTime?: Date | undefined;
+    /**
+     * <p>The date and time the NAT gateway was deleted, if applicable.</p>
+     * @public
+     */
+    DeleteTime?: Date | undefined;
+    /**
+     * <p>If the NAT gateway could not be created, specifies the error code for the failure.
+     *         (<code>InsufficientFreeAddressesInSubnet</code> | <code>Gateway.NotAttached</code> |
+     *          <code>InvalidAllocationID.NotFound</code> | <code>Resource.AlreadyAssociated</code> |
+     *          <code>InternalError</code> | <code>InvalidSubnetID.NotFound</code>)</p>
+     * @public
+     */
+    FailureCode?: string | undefined;
+    /**
+     * <p>If the NAT gateway could not be created, specifies the error message for the failure, that corresponds to the error code.</p>
+     *          <ul>
+     *             <li>
+     *                <p>For InsufficientFreeAddressesInSubnet: "Subnet has insufficient free addresses to create this NAT gateway"</p>
+     *             </li>
+     *             <li>
+     *                <p>For Gateway.NotAttached: "Network vpc-xxxxxxxx has no Internet gateway attached"</p>
+     *             </li>
+     *             <li>
+     *                <p>For InvalidAllocationID.NotFound: "Elastic IP address eipalloc-xxxxxxxx could not be associated with this NAT gateway"</p>
+     *             </li>
+     *             <li>
+     *                <p>For Resource.AlreadyAssociated: "Elastic IP address eipalloc-xxxxxxxx is already associated"</p>
+     *             </li>
+     *             <li>
+     *                <p>For InternalError: "Network interface eni-xxxxxxxx, created and used internally by this NAT gateway is in an invalid state. Please try again."</p>
+     *             </li>
+     *             <li>
+     *                <p>For InvalidSubnetID.NotFound: "The specified subnet subnet-xxxxxxxx does not exist or could not be found."</p>
+     *             </li>
+     *          </ul>
+     * @public
+     */
+    FailureMessage?: string | undefined;
+    /**
+     * <p>Information about the IP addresses and network interface associated with the NAT gateway.</p>
+     * @public
+     */
+    NatGatewayAddresses?: NatGatewayAddress[] | undefined;
+    /**
+     * <p>The ID of the NAT gateway.</p>
+     * @public
+     */
+    NatGatewayId?: string | undefined;
+    /**
+     * <p>Reserved. If you need to sustain traffic greater than the <a href="https://docs.aws.amazon.com/vpc/latest/userguide/amazon-vpc-limits.html#vpc-limits-gateways">documented limits</a>,
+     *           contact Amazon Web Services Support.</p>
+     * @public
+     */
+    ProvisionedBandwidth?: ProvisionedBandwidth | undefined;
+    /**
+     * <p>The state of the NAT gateway.</p>
+     *          <ul>
+     *             <li>
+     *                <p>
+     *                   <code>pending</code>: The NAT gateway is being created and is not ready to process
+     *           traffic.</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>failed</code>: The NAT gateway could not be created. Check the
+     *             <code>failureCode</code> and <code>failureMessage</code> fields for the reason.</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>available</code>: The NAT gateway is able to process traffic. This status remains
+     *           until you delete the NAT gateway, and does not indicate the health of the NAT gateway.</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>deleting</code>: The NAT gateway is in the process of being terminated and may
+     *           still be processing traffic.</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>deleted</code>: The NAT gateway has been terminated and is no longer processing
+     *           traffic.</p>
+     *             </li>
+     *          </ul>
+     * @public
+     */
+    State?: NatGatewayState | undefined;
+    /**
+     * <p>The ID of the subnet in which the NAT gateway is located.</p>
+     * @public
+     */
+    SubnetId?: string | undefined;
+    /**
+     * <p>The ID of the VPC in which the NAT gateway is located.</p>
+     * @public
+     */
+    VpcId?: string | undefined;
+    /**
+     * <p>The tags for the NAT gateway.</p>
+     * @public
+     */
+    Tags?: Tag[] | undefined;
+    /**
+     * <p>Indicates whether the NAT gateway supports public or private connectivity.</p>
+     * @public
+     */
+    ConnectivityType?: ConnectivityType | undefined;
+}
+/**
+ * @public
+ */
+export interface CreateNatGatewayResult {
+    /**
+     * <p>Unique, case-sensitive identifier to ensure the idempotency of the request. Only returned if a client token was provided in the request.</p>
+     * @public
+     */
+    ClientToken?: string | undefined;
+    /**
+     * <p>Information about the NAT gateway.</p>
+     * @public
+     */
+    NatGateway?: NatGateway | undefined;
+}
+/**
+ * @public
+ */
+export interface CreateNetworkAclRequest {
+    /**
+     * <p>The tags to assign to the network ACL.</p>
+     * @public
+     */
+    TagSpecifications?: TagSpecification[] | undefined;
+    /**
+     * <p>Unique, case-sensitive identifier that you provide to ensure the idempotency of the
+     *             request. For more information, see <a href="https://docs.aws.amazon.com/ec2/latest/devguide/ec2-api-idempotency.html">Ensuring idempotency</a>.</p>
+     * @public
+     */
+    ClientToken?: string | undefined;
+    /**
+     * <p>Checks whether you have the required permissions for the action, without actually making the request,
+     *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+     *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+     * @public
+     */
+    DryRun?: boolean | undefined;
+    /**
+     * <p>The ID of the VPC.</p>
+     * @public
+     */
+    VpcId: string | undefined;
+}
+/**
+ * <p>Describes an association between a network ACL and a subnet.</p>
+ * @public
+ */
+export interface NetworkAclAssociation {
+    /**
+     * <p>The ID of the association between a network ACL and a subnet.</p>
+     * @public
+     */
+    NetworkAclAssociationId?: string | undefined;
+    /**
+     * <p>The ID of the network ACL.</p>
+     * @public
+     */
+    NetworkAclId?: string | undefined;
+    /**
+     * <p>The ID of the subnet.</p>
+     * @public
+     */
+    SubnetId?: string | undefined;
+}
+/**
+ * <p>Describes the ICMP type and code.</p>
+ * @public
+ */
+export interface IcmpTypeCode {
+    /**
+     * <p>The ICMP code. A value of -1 means all codes for the specified ICMP type.</p>
+     * @public
+     */
+    Code?: number | undefined;
+    /**
+     * <p>The ICMP type. A value of -1 means all types.</p>
+     * @public
+     */
+    Type?: number | undefined;
+}
+/**
+ * @public
+ * @enum
+ */
+export declare const RuleAction: {
+    readonly allow: "allow";
+    readonly deny: "deny";
+};
+/**
+ * @public
+ */
+export type RuleAction = (typeof RuleAction)[keyof typeof RuleAction];
+/**
+ * <p>Describes an entry in a network ACL.</p>
+ * @public
+ */
+export interface NetworkAclEntry {
+    /**
+     * <p>The IPv4 network range to allow or deny, in CIDR notation.</p>
+     * @public
+     */
+    CidrBlock?: string | undefined;
+    /**
+     * <p>Indicates whether the rule is an egress rule (applied to traffic leaving the subnet).</p>
+     * @public
+     */
+    Egress?: boolean | undefined;
+    /**
+     * <p>ICMP protocol: The ICMP type and code.</p>
+     * @public
+     */
+    IcmpTypeCode?: IcmpTypeCode | undefined;
+    /**
+     * <p>The IPv6 network range to allow or deny, in CIDR notation.</p>
+     * @public
+     */
+    Ipv6CidrBlock?: string | undefined;
+    /**
+     * <p>TCP or UDP protocols: The range of ports the rule applies to.</p>
+     * @public
+     */
+    PortRange?: PortRange | undefined;
+    /**
+     * <p>The protocol number. A value of "-1" means all protocols.</p>
+     * @public
+     */
+    Protocol?: string | undefined;
+    /**
+     * <p>Indicates whether to allow or deny the traffic that matches the rule.</p>
+     * @public
+     */
+    RuleAction?: RuleAction | undefined;
+    /**
+     * <p>The rule number for the entry. ACL entries are processed in ascending order by rule number.</p>
+     * @public
+     */
+    RuleNumber?: number | undefined;
+}
+/**
+ * <p>Describes a network ACL.</p>
+ * @public
+ */
+export interface NetworkAcl {
+    /**
+     * <p>Any associations between the network ACL and your subnets</p>
+     * @public
+     */
+    Associations?: NetworkAclAssociation[] | undefined;
+    /**
+     * <p>The entries (rules) in the network ACL.</p>
+     * @public
+     */
+    Entries?: NetworkAclEntry[] | undefined;
+    /**
+     * <p>Indicates whether this is the default network ACL for the VPC.</p>
+     * @public
+     */
+    IsDefault?: boolean | undefined;
+    /**
+     * <p>The ID of the network ACL.</p>
+     * @public
+     */
+    NetworkAclId?: string | undefined;
+    /**
+     * <p>Any tags assigned to the network ACL.</p>
+     * @public
+     */
+    Tags?: Tag[] | undefined;
+    /**
+     * <p>The ID of the VPC for the network ACL.</p>
+     * @public
+     */
+    VpcId?: string | undefined;
+    /**
+     * <p>The ID of the Amazon Web Services account that owns the network ACL.</p>
+     * @public
+     */
+    OwnerId?: string | undefined;
+}
+/**
+ * @public
+ */
+export interface CreateNetworkAclResult {
+    /**
+     * <p>Information about the network ACL.</p>
+     * @public
+     */
+    NetworkAcl?: NetworkAcl | undefined;
+    /**
+     * <p>Unique, case-sensitive identifier to ensure the idempotency of the request. Only returned if a client token was provided in the request.</p>
+     * @public
+     */
+    ClientToken?: string | undefined;
+}
+/**
+ * @public
+ */
+export interface CreateNetworkAclEntryRequest {
+    /**
+     * <p>Checks whether you have the required permissions for the action, without actually making the request,
+     *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+     *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+     * @public
+     */
+    DryRun?: boolean | undefined;
+    /**
+     * <p>The ID of the network ACL.</p>
+     * @public
+     */
+    NetworkAclId: string | undefined;
+    /**
+     * <p>The rule number for the entry (for example, 100). ACL entries are processed in ascending order by rule number.</p>
+     *          <p>Constraints: Positive integer from 1 to 32766. The range 32767 to 65535 is reserved for internal use.</p>
+     * @public
+     */
+    RuleNumber: number | undefined;
+    /**
+     * <p>The protocol number. A value of "-1" means all protocols. If you specify "-1" or a
+     *   			protocol number other than "6" (TCP), "17" (UDP), or "1" (ICMP), traffic on all ports is
+     * 			allowed, regardless of any ports or ICMP types or codes that you specify. If you specify
+     * 			protocol "58" (ICMPv6) and specify an IPv4 CIDR block, traffic for all ICMP types and
+     * 			codes allowed, regardless of any that you specify. If you specify protocol "58" (ICMPv6)
+     * 			and specify an IPv6 CIDR block, you must specify an ICMP type and code.</p>
+     * @public
+     */
+    Protocol: string | undefined;
+    /**
+     * <p>Indicates whether to allow or deny the traffic that matches the rule.</p>
+     * @public
+     */
+    RuleAction: RuleAction | undefined;
+    /**
+     * <p>Indicates whether this is an egress rule (rule is applied to traffic leaving the subnet).</p>
+     * @public
+     */
+    Egress: boolean | undefined;
+    /**
+     * <p>The IPv4 network range to allow or deny, in CIDR notation (for example
+     * 		        <code>172.16.0.0/24</code>). We modify the specified CIDR block to its canonical form; for example, if you specify <code>100.68.0.18/18</code>, we modify it to <code>100.68.0.0/18</code>.</p>
+     * @public
+     */
+    CidrBlock?: string | undefined;
+    /**
+     * <p>The IPv6 network range to allow or deny, in CIDR notation (for example
+     *                 <code>2001:db8:1234:1a00::/64</code>).</p>
+     * @public
+     */
+    Ipv6CidrBlock?: string | undefined;
+    /**
+     * <p>ICMP protocol: The ICMP or ICMPv6 type and code. Required if specifying protocol
+     * 		        1 (ICMP) or protocol 58 (ICMPv6) with an IPv6 CIDR block.</p>
+     * @public
+     */
+    IcmpTypeCode?: IcmpTypeCode | undefined;
+    /**
+     * <p>TCP or UDP protocols: The range of ports the rule applies to.
+     * 		        Required if specifying protocol 6 (TCP) or 17 (UDP).</p>
+     * @public
+     */
+    PortRange?: PortRange | undefined;
+}
 /**
  * @public
  */
@@ -5803,11 +6181,11 @@ export interface CreateVpcBlockPublicAccessExclusionRequest {
      *          <ul>
      *             <li>
      *                <p>
-     *                   <code>bidirectional-access-allowed</code>: Allow all internet traffic to and from the excluded VPCs and subnets.</p>
+     *                   <code>allow-bidirectional</code>: Allow all internet traffic to and from the excluded VPCs and subnets.</p>
      *             </li>
      *             <li>
      *                <p>
-     *                   <code>egress-access-allowed</code>: Allow outbound internet traffic from the excluded VPCs and subnets. Block inbound internet traffic to the excluded VPCs and subnets. Only applies when VPC Block Public Access is set to Bidirectional.</p>
+     *                   <code>allow-egress</code>: Allow outbound internet traffic from the excluded VPCs and subnets. Block inbound internet traffic to the excluded VPCs and subnets. Only applies when VPC Block Public Access is set to Bidirectional.</p>
      *             </li>
      *          </ul>
      * @public
@@ -5856,11 +6234,11 @@ export interface VpcBlockPublicAccessExclusion {
      *          <ul>
      *             <li>
      *                <p>
-     *                   <code>bidirectional-access-allowed</code>: Allow all internet traffic to and from the excluded VPCs and subnets.</p>
+     *                   <code>allow-bidirectional</code>: Allow all internet traffic to and from the excluded VPCs and subnets.</p>
      *             </li>
      *             <li>
      *                <p>
-     *                   <code>egress-access-allowed</code>: Allow outbound internet traffic from the excluded VPCs and subnets. Block inbound internet traffic to the excluded VPCs and subnets. Only applies when VPC Block Public Access is set to Bidirectional.</p>
+     *                   <code>allow-egress</code>: Allow outbound internet traffic from the excluded VPCs and subnets. Block inbound internet traffic to the excluded VPCs and subnets. Only applies when VPC Block Public Access is set to Bidirectional.</p>
      *             </li>
      *          </ul>
      * @public
@@ -8190,179 +8568,6 @@ export interface DeleteFpgaImageRequest {
      */
     FpgaImageId: string | undefined;
 }
-/**
- * @public
- */
-export interface DeleteFpgaImageResult {
-    /**
-     * <p>Is <code>true</code> if the request succeeds, and an error otherwise.</p>
-     * @public
-     */
-    Return?: boolean | undefined;
-}
-/**
- * @public
- */
-export interface DeleteInstanceConnectEndpointRequest {
-    /**
-     * <p>Checks whether you have the required permissions for the action, without actually making the request,
-     *             and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-     *             Otherwise, it is <code>UnauthorizedOperation</code>.</p>
-     * @public
-     */
-    DryRun?: boolean | undefined;
-    /**
-     * <p>The ID of the EC2 Instance Connect Endpoint to delete.</p>
-     * @public
-     */
-    InstanceConnectEndpointId: string | undefined;
-}
-/**
- * @public
- */
-export interface DeleteInstanceConnectEndpointResult {
-    /**
-     * <p>Information about the EC2 Instance Connect Endpoint.</p>
-     * @public
-     */
-    InstanceConnectEndpoint?: Ec2InstanceConnectEndpoint | undefined;
-}
-/**
- * @public
- */
-export interface DeleteInstanceEventWindowRequest {
-    /**
-     * <p>Checks whether you have the required permissions for the action, without actually making the request,
-     *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-     *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
-     * @public
-     */
-    DryRun?: boolean | undefined;
-    /**
-     * <p>Specify <code>true</code> to force delete the event window. Use the force delete parameter
-     *          if the event window is currently associated with targets.</p>
-     * @public
-     */
-    ForceDelete?: boolean | undefined;
-    /**
-     * <p>The ID of the event window.</p>
-     * @public
-     */
-    InstanceEventWindowId: string | undefined;
-}
-/**
- * <p>The state of the event window.</p>
- * @public
- */
-export interface InstanceEventWindowStateChange {
-    /**
-     * <p>The ID of the event window.</p>
-     * @public
-     */
-    InstanceEventWindowId?: string | undefined;
-    /**
-     * <p>The current state of the event window.</p>
-     * @public
-     */
-    State?: InstanceEventWindowState | undefined;
-}
-/**
- * @public
- */
-export interface DeleteInstanceEventWindowResult {
-    /**
-     * <p>The state of the event window.</p>
-     * @public
-     */
-    InstanceEventWindowState?: InstanceEventWindowStateChange | undefined;
-}
-/**
- * @public
- */
-export interface DeleteInternetGatewayRequest {
-    /**
-     * <p>Checks whether you have the required permissions for the action, without actually making the request,
-     *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-     *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
-     * @public
-     */
-    DryRun?: boolean | undefined;
-    /**
-     * <p>The ID of the internet gateway.</p>
-     * @public
-     */
-    InternetGatewayId: string | undefined;
-}
-/**
- * @public
- */
-export interface DeleteIpamRequest {
-    /**
-     * <p>A check for whether you have the required permissions for the action without actually making the request
-     *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-     *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
-     * @public
-     */
-    DryRun?: boolean | undefined;
-    /**
-     * <p>The ID of the IPAM to delete.</p>
-     * @public
-     */
-    IpamId: string | undefined;
-    /**
-     * <p>Enables you to quickly delete an IPAM, private scopes, pools in private scopes, and
-     *          any allocations in the pools in private scopes. You cannot delete the IPAM with this option if there is a pool in your public scope. If you use this option, IPAM does the following:</p>
-     *          <ul>
-     *             <li>
-     *                <p>Deallocates any CIDRs allocated to VPC resources (such as VPCs) in pools in private scopes.</p>
-     *                <note>
-     *                   <p>No VPC resources are deleted as a result of enabling this option. The CIDR associated with the resource will no longer be allocated from an IPAM pool, but the CIDR itself will remain unchanged.</p>
-     *                </note>
-     *             </li>
-     *             <li>
-     *                <p>Deprovisions all IPv4 CIDRs provisioned to IPAM pools in private scopes.</p>
-     *             </li>
-     *             <li>
-     *                <p>Deletes all IPAM pools in private scopes.</p>
-     *             </li>
-     *             <li>
-     *                <p>Deletes all non-default private scopes in the IPAM.</p>
-     *             </li>
-     *             <li>
-     *                <p>Deletes the default public and private scopes and the IPAM.</p>
-     *             </li>
-     *          </ul>
-     * @public
-     */
-    Cascade?: boolean | undefined;
-}
-/**
- * @public
- */
-export interface DeleteIpamResult {
-    /**
-     * <p>Information about the results of the deletion.</p>
-     * @public
-     */
-    Ipam?: Ipam | undefined;
-}
-/**
- * @public
- */
-export interface DeleteIpamExternalResourceVerificationTokenRequest {
-    /**
-     * <p>A check for whether you have the required permissions for the action without actually making the request
-     *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-     *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
-     * @public
-     */
-    DryRun?: boolean | undefined;
-    /**
-     * <p>The token ID.</p>
-     * @public
-     */
-    IpamExternalResourceVerificationTokenId: string | undefined;
-}
 /**
  * @internal
  */