@aws-sdk/client-ec2 3.701.0 → 3.708.0

package/dist-types/models/models_2.d.ts

@@ -1,5 +1,276 @@
-import { AccessScopePath, AccessScopePathRequest, ApplianceModeSupportValue, AttachmentStatus, CurrencyCodeValues, DeviceTrustProviderType, DnsSupportValue, DynamicRoutingValue, Ipv4PrefixSpecification, Ipv6SupportValue, NatGatewayAddress, PortRange, Protocol, ReservedInstancesListing, RouteTableAssociationState, SecurityGroupReferencingSupportValue, Tag, TagSpecification, TransitGatewayAttachmentResourceType, TransitGatewayAttachmentState, TransitGatewayPeeringAttachment, TransitGatewayVpcAttachment, TrustProviderType, UserTrustProviderType, VerifiedAccessInstance, VerifiedAccessSseSpecificationResponse, VerifiedAccessTrustProvider, VolumeAttachment, VpcAttachment, VpcPeeringConnection } from "./models_0";
-import { CarrierGateway, ClientVpnEndpointStatus, ClientVpnRouteStatus, CoipCidr, CoipPool, ConnectionTrackingSpecificationRequest, ConnectivityType, GatewayType, InstanceIpv6Address, Ipv4PrefixSpecificationRequest, Ipv6PrefixSpecificationRequest, NatGatewayState, OperatorRequest, OperatorResponse, PrivateIpAddressSpecification, ProvisionedBandwidth, Subnet, Tenancy, VolumeType, Vpc } from "./models_1";
+import { AccessScopePath, AccessScopePathRequest, AddPrefixListEntry, ApplianceModeSupportValue, AttachmentStatus, CurrencyCodeValues, DeviceTrustProviderType, DnsSupportValue, DynamicRoutingValue, Ipv4PrefixSpecification, Ipv6SupportValue, NatGatewayAddress, PortRange, Protocol, ReservedInstancesListing, RouteTableAssociationState, SecurityGroupReferencingSupportValue, Tag, TagSpecification, TransitGatewayAttachmentResourceType, TransitGatewayAttachmentState, TransitGatewayPeeringAttachment, TransitGatewayVpcAttachment, TrustProviderType, UserTrustProviderType, VerifiedAccessInstance, VerifiedAccessSseSpecificationResponse, VerifiedAccessTrustProvider, VolumeAttachment, VpcAttachment, VpcPeeringConnection } from "./models_0";
+import { CarrierGateway, ClientVpnEndpointStatus, ConnectionTrackingSpecificationRequest, GatewayType, InstanceIpv6Address, Ipv4PrefixSpecificationRequest, Ipv6PrefixSpecificationRequest, LocalGatewayRouteTableVpcAssociation, OperatorRequest, OperatorResponse, PrivateIpAddressSpecification, Subnet, Tenancy, VolumeType, Vpc } from "./models_1";
+/**
+ * @public
+ */
+export interface CreateLocalGatewayRouteTableVpcAssociationResult {
+    /**
+     * <p>Information about the association.</p>
+     * @public
+     */
+    LocalGatewayRouteTableVpcAssociation?: LocalGatewayRouteTableVpcAssociation | undefined;
+}
+/**
+ * @public
+ */
+export interface CreateManagedPrefixListRequest {
+    /**
+     * <p>Checks whether you have the required permissions for the action, without actually making the request,
+     *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+     *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+     * @public
+     */
+    DryRun?: boolean | undefined;
+    /**
+     * <p>A name for the prefix list.</p>
+     *          <p>Constraints: Up to 255 characters in length. The name cannot start with <code>com.amazonaws</code>.</p>
+     * @public
+     */
+    PrefixListName: string | undefined;
+    /**
+     * <p>One or more entries for the prefix list.</p>
+     * @public
+     */
+    Entries?: AddPrefixListEntry[] | undefined;
+    /**
+     * <p>The maximum number of entries for the prefix list.</p>
+     * @public
+     */
+    MaxEntries: number | undefined;
+    /**
+     * <p>The tags to apply to the prefix list during creation.</p>
+     * @public
+     */
+    TagSpecifications?: TagSpecification[] | undefined;
+    /**
+     * <p>The IP address type.</p>
+     *          <p>Valid Values: <code>IPv4</code> | <code>IPv6</code>
+     *          </p>
+     * @public
+     */
+    AddressFamily: string | undefined;
+    /**
+     * <p>Unique, case-sensitive identifier you provide to ensure the idempotency of the
+     *             request. For more information, see <a href="https://docs.aws.amazon.com/ec2/latest/devguide/ec2-api-idempotency.html">Ensuring
+     *                 idempotency</a>.</p>
+     *          <p>Constraints: Up to 255 UTF-8 characters in length.</p>
+     * @public
+     */
+    ClientToken?: string | undefined;
+}
+/**
+ * @public
+ * @enum
+ */
+export declare const PrefixListState: {
+    readonly create_complete: "create-complete";
+    readonly create_failed: "create-failed";
+    readonly create_in_progress: "create-in-progress";
+    readonly delete_complete: "delete-complete";
+    readonly delete_failed: "delete-failed";
+    readonly delete_in_progress: "delete-in-progress";
+    readonly modify_complete: "modify-complete";
+    readonly modify_failed: "modify-failed";
+    readonly modify_in_progress: "modify-in-progress";
+    readonly restore_complete: "restore-complete";
+    readonly restore_failed: "restore-failed";
+    readonly restore_in_progress: "restore-in-progress";
+};
+/**
+ * @public
+ */
+export type PrefixListState = (typeof PrefixListState)[keyof typeof PrefixListState];
+/**
+ * <p>Describes a managed prefix list.</p>
+ * @public
+ */
+export interface ManagedPrefixList {
+    /**
+     * <p>The ID of the prefix list.</p>
+     * @public
+     */
+    PrefixListId?: string | undefined;
+    /**
+     * <p>The IP address version.</p>
+     * @public
+     */
+    AddressFamily?: string | undefined;
+    /**
+     * <p>The current state of the prefix list.</p>
+     * @public
+     */
+    State?: PrefixListState | undefined;
+    /**
+     * <p>The state message.</p>
+     * @public
+     */
+    StateMessage?: string | undefined;
+    /**
+     * <p>The Amazon Resource Name (ARN) for the prefix list.</p>
+     * @public
+     */
+    PrefixListArn?: string | undefined;
+    /**
+     * <p>The name of the prefix list.</p>
+     * @public
+     */
+    PrefixListName?: string | undefined;
+    /**
+     * <p>The maximum number of entries for the prefix list.</p>
+     * @public
+     */
+    MaxEntries?: number | undefined;
+    /**
+     * <p>The version of the prefix list.</p>
+     * @public
+     */
+    Version?: number | undefined;
+    /**
+     * <p>The tags for the prefix list.</p>
+     * @public
+     */
+    Tags?: Tag[] | undefined;
+    /**
+     * <p>The ID of the owner of the prefix list.</p>
+     * @public
+     */
+    OwnerId?: string | undefined;
+}
+/**
+ * @public
+ */
+export interface CreateManagedPrefixListResult {
+    /**
+     * <p>Information about the prefix list.</p>
+     * @public
+     */
+    PrefixList?: ManagedPrefixList | undefined;
+}
+/**
+ * @public
+ * @enum
+ */
+export declare const ConnectivityType: {
+    readonly PRIVATE: "private";
+    readonly PUBLIC: "public";
+};
+/**
+ * @public
+ */
+export type ConnectivityType = (typeof ConnectivityType)[keyof typeof ConnectivityType];
+/**
+ * @public
+ */
+export interface CreateNatGatewayRequest {
+    /**
+     * <p>[Public NAT gateways only] The allocation ID of an Elastic IP address to associate
+     *           with the NAT gateway. You cannot specify an Elastic IP address with a private NAT gateway.
+     *           If the Elastic IP address is associated with another resource, you must first disassociate it.</p>
+     * @public
+     */
+    AllocationId?: string | undefined;
+    /**
+     * <p>Unique, case-sensitive identifier that you provide to ensure the idempotency of the
+     * 			request. For more information, see <a href="https://docs.aws.amazon.com/ec2/latest/devguide/ec2-api-idempotency.html">Ensuring idempotency</a>.</p>
+     *          <p>Constraint: Maximum 64 ASCII characters.</p>
+     * @public
+     */
+    ClientToken?: string | undefined;
+    /**
+     * <p>Checks whether you have the required permissions for the action, without actually making the request,
+     *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+     *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+     * @public
+     */
+    DryRun?: boolean | undefined;
+    /**
+     * <p>The ID of the subnet in which to create the NAT gateway.</p>
+     * @public
+     */
+    SubnetId: string | undefined;
+    /**
+     * <p>The tags to assign to the NAT gateway.</p>
+     * @public
+     */
+    TagSpecifications?: TagSpecification[] | undefined;
+    /**
+     * <p>Indicates whether the NAT gateway supports public or private connectivity.
+     *           The default is public connectivity.</p>
+     * @public
+     */
+    ConnectivityType?: ConnectivityType | undefined;
+    /**
+     * <p>The private IPv4 address to assign to the NAT gateway. If you don't provide an address, a private IPv4 address will be automatically assigned.</p>
+     * @public
+     */
+    PrivateIpAddress?: string | undefined;
+    /**
+     * <p>Secondary EIP allocation IDs. For more information, see <a href="https://docs.aws.amazon.com/vpc/latest/userguide/nat-gateway-working-with.html">Create a NAT gateway</a>
+     *             in the <i>Amazon VPC User Guide</i>.</p>
+     * @public
+     */
+    SecondaryAllocationIds?: string[] | undefined;
+    /**
+     * <p>Secondary private IPv4 addresses. For more information about secondary addresses, see
+     *             <a href="https://docs.aws.amazon.com/vpc/latest/userguide/nat-gateway-working-with.html">Create a NAT gateway</a> in the <i>Amazon VPC User Guide</i>.</p>
+     * @public
+     */
+    SecondaryPrivateIpAddresses?: string[] | undefined;
+    /**
+     * <p>[Private NAT gateway only] The number of secondary private IPv4 addresses you want to assign to the NAT gateway.
+     *             For more information about secondary addresses, see <a href="https://docs.aws.amazon.com/vpc/latest/userguide/nat-gateway-working-with.html">Create a NAT gateway</a>
+     *             in the <i>Amazon VPC User Guide</i>.</p>
+     * @public
+     */
+    SecondaryPrivateIpAddressCount?: number | undefined;
+}
+/**
+ * <p>Reserved. If you need to sustain traffic greater than the <a href="https://docs.aws.amazon.com/vpc/latest/userguide/amazon-vpc-limits.html#vpc-limits-gateways">documented limits</a>,
+ *           contact Amazon Web Services Support.</p>
+ * @public
+ */
+export interface ProvisionedBandwidth {
+    /**
+     * <p>Reserved.</p>
+     * @public
+     */
+    ProvisionTime?: Date | undefined;
+    /**
+     * <p>Reserved.</p>
+     * @public
+     */
+    Provisioned?: string | undefined;
+    /**
+     * <p>Reserved.</p>
+     * @public
+     */
+    RequestTime?: Date | undefined;
+    /**
+     * <p>Reserved.</p>
+     * @public
+     */
+    Requested?: string | undefined;
+    /**
+     * <p>Reserved.</p>
+     * @public
+     */
+    Status?: string | undefined;
+}
+/**
+ * @public
+ * @enum
+ */
+export declare const NatGatewayState: {
+    readonly AVAILABLE: "available";
+    readonly DELETED: "deleted";
+    readonly DELETING: "deleting";
+    readonly FAILED: "failed";
+    readonly PENDING: "pending";
+};
+/**
+ * @public
+ */
+export type NatGatewayState = (typeof NatGatewayState)[keyof typeof NatGatewayState];
 /**
  * <p>Describes a NAT gateway.</p>
  * @public
@@ -1293,7 +1564,7 @@ export interface NetworkInterface {
      */
     Ipv6Address?: string | undefined;
     /**
-     * <p>The entity that manages the network interface.</p>
+     * <p>The service provider that manages the network interface.</p>
      * @public
      */
     Operator?: OperatorResponse | undefined;
@@ -5115,30 +5386,75 @@ export declare const VerifiedAccessEndpointAttachmentType: {
  * @public
  */
 export type VerifiedAccessEndpointAttachmentType = (typeof VerifiedAccessEndpointAttachmentType)[keyof typeof VerifiedAccessEndpointAttachmentType];
+/**
+ * <p>Describes the port range for a Verified Access endpoint.</p>
+ * @public
+ */
+export interface CreateVerifiedAccessEndpointPortRange {
+    /**
+     * <p>The start of the port range.</p>
+     * @public
+     */
+    FromPort?: number | undefined;
+    /**
+     * <p>The end of the port range.</p>
+     * @public
+     */
+    ToPort?: number | undefined;
+}
 /**
  * @public
  * @enum
  */
-export declare const VerifiedAccessEndpointType: {
-    readonly load_balancer: "load-balancer";
-    readonly network_interface: "network-interface";
+export declare const VerifiedAccessEndpointProtocol: {
+    readonly http: "http";
+    readonly https: "https";
+    readonly tcp: "tcp";
 };
 /**
  * @public
  */
-export type VerifiedAccessEndpointType = (typeof VerifiedAccessEndpointType)[keyof typeof VerifiedAccessEndpointType];
+export type VerifiedAccessEndpointProtocol = (typeof VerifiedAccessEndpointProtocol)[keyof typeof VerifiedAccessEndpointProtocol];
+/**
+ * <p>Describes the CIDR options for a Verified Access endpoint.</p>
+ * @public
+ */
+export interface CreateVerifiedAccessEndpointCidrOptions {
+    /**
+     * <p>The protocol.</p>
+     * @public
+     */
+    Protocol?: VerifiedAccessEndpointProtocol | undefined;
+    /**
+     * <p>The IDs of the subnets.</p>
+     * @public
+     */
+    SubnetIds?: string[] | undefined;
+    /**
+     * <p>The CIDR.</p>
+     * @public
+     */
+    Cidr?: string | undefined;
+    /**
+     * <p>The port ranges.</p>
+     * @public
+     */
+    PortRanges?: CreateVerifiedAccessEndpointPortRange[] | undefined;
+}
 /**
  * @public
  * @enum
  */
-export declare const VerifiedAccessEndpointProtocol: {
-    readonly http: "http";
-    readonly https: "https";
+export declare const VerifiedAccessEndpointType: {
+    readonly cidr: "cidr";
+    readonly load_balancer: "load-balancer";
+    readonly network_interface: "network-interface";
+    readonly rds: "rds";
 };
 /**
  * @public
  */
-export type VerifiedAccessEndpointProtocol = (typeof VerifiedAccessEndpointProtocol)[keyof typeof VerifiedAccessEndpointProtocol];
+export type VerifiedAccessEndpointType = (typeof VerifiedAccessEndpointType)[keyof typeof VerifiedAccessEndpointType];
 /**
  * <p>Describes the load balancer options when creating an Amazon Web Services Verified Access endpoint using the
  *             <code>load-balancer</code> type.</p>
@@ -5165,6 +5481,11 @@ export interface CreateVerifiedAccessEndpointLoadBalancerOptions {
      * @public
      */
     SubnetIds?: string[] | undefined;
+    /**
+     * <p>The port ranges.</p>
+     * @public
+     */
+    PortRanges?: CreateVerifiedAccessEndpointPortRange[] | undefined;
 }
 /**
  * <p>Describes the network interface options when creating an Amazon Web Services Verified Access endpoint using the
@@ -5187,33 +5508,79 @@ export interface CreateVerifiedAccessEndpointEniOptions {
      * @public
      */
     Port?: number | undefined;
+    /**
+     * <p>The port ranges.</p>
+     * @public
+     */
+    PortRanges?: CreateVerifiedAccessEndpointPortRange[] | undefined;
 }
 /**
- * <p>
- *          Verified Access provides server side encryption by default to data at rest using Amazon Web Services-owned KMS keys. You also have the option of using customer managed KMS keys, which can be specified using the options below.
- *       </p>
+ * <p>Describes the RDS options for a Verified Access endpoint.</p>
  * @public
  */
-export interface VerifiedAccessSseSpecificationRequest {
+export interface CreateVerifiedAccessEndpointRdsOptions {
     /**
-     * <p>
-     *          Enable or disable the use of customer managed KMS keys for server side encryption.
-     *       </p>
-     *          <p>Valid values: <code>True</code> | <code>False</code>
-     *          </p>
+     * <p>The protocol.</p>
      * @public
      */
-    CustomerManagedKeyEnabled?: boolean | undefined;
+    Protocol?: VerifiedAccessEndpointProtocol | undefined;
     /**
-     * <p>
-     *          The ARN of the KMS key.
-     *       </p>
+     * <p>The port.</p>
      * @public
      */
-    KmsKeyArn?: string | undefined;
-}
-/**
- * @public
+    Port?: number | undefined;
+    /**
+     * <p>The ARN of the RDS instance.</p>
+     * @public
+     */
+    RdsDbInstanceArn?: string | undefined;
+    /**
+     * <p>The ARN of the DB cluster.</p>
+     * @public
+     */
+    RdsDbClusterArn?: string | undefined;
+    /**
+     * <p>The ARN of the RDS proxy.</p>
+     * @public
+     */
+    RdsDbProxyArn?: string | undefined;
+    /**
+     * <p>The RDS endpoint.</p>
+     * @public
+     */
+    RdsEndpoint?: string | undefined;
+    /**
+     * <p>The IDs of the subnets.</p>
+     * @public
+     */
+    SubnetIds?: string[] | undefined;
+}
+/**
+ * <p>
+ *          Verified Access provides server side encryption by default to data at rest using Amazon Web Services-owned KMS keys. You also have the option of using customer managed KMS keys, which can be specified using the options below.
+ *       </p>
+ * @public
+ */
+export interface VerifiedAccessSseSpecificationRequest {
+    /**
+     * <p>
+     *          Enable or disable the use of customer managed KMS keys for server side encryption.
+     *       </p>
+     *          <p>Valid values: <code>True</code> | <code>False</code>
+     *          </p>
+     * @public
+     */
+    CustomerManagedKeyEnabled?: boolean | undefined;
+    /**
+     * <p>
+     *          The ARN of the KMS key.
+     *       </p>
+     * @public
+     */
+    KmsKeyArn?: string | undefined;
+}
+/**
+ * @public
  */
 export interface CreateVerifiedAccessEndpointRequest {
     /**
@@ -5237,18 +5604,18 @@ export interface CreateVerifiedAccessEndpointRequest {
      *          application.</p>
      * @public
      */
-    DomainCertificateArn: string | undefined;
+    DomainCertificateArn?: string | undefined;
     /**
      * <p>The DNS name for users to reach your application.</p>
      * @public
      */
-    ApplicationDomain: string | undefined;
+    ApplicationDomain?: string | undefined;
     /**
      * <p>A custom identifier that is prepended to the DNS name that is generated for the
      *          endpoint.</p>
      * @public
      */
-    EndpointDomainPrefix: string | undefined;
+    EndpointDomainPrefix?: string | undefined;
     /**
      * <p>The IDs of the security groups to associate with the Verified Access endpoint. Required if <code>AttachmentType</code> is set to <code>vpc</code>.</p>
      * @public
@@ -5299,6 +5666,58 @@ export interface CreateVerifiedAccessEndpointRequest {
      * @public
      */
     SseSpecification?: VerifiedAccessSseSpecificationRequest | undefined;
+    /**
+     * <p>The RDS details. This parameter is required if the endpoint type is <code>rds</code>.</p>
+     * @public
+     */
+    RdsOptions?: CreateVerifiedAccessEndpointRdsOptions | undefined;
+    /**
+     * <p>The CIDR options. This parameter is required if the endpoint type is <code>cidr</code>.</p>
+     * @public
+     */
+    CidrOptions?: CreateVerifiedAccessEndpointCidrOptions | undefined;
+}
+/**
+ * <p>Describes a port range.</p>
+ * @public
+ */
+export interface VerifiedAccessEndpointPortRange {
+    /**
+     * <p>The start of the port range.</p>
+     * @public
+     */
+    FromPort?: number | undefined;
+    /**
+     * <p>The end of the port range.</p>
+     * @public
+     */
+    ToPort?: number | undefined;
+}
+/**
+ * <p>Describes the CIDR options for a Verified Access endpoint.</p>
+ * @public
+ */
+export interface VerifiedAccessEndpointCidrOptions {
+    /**
+     * <p>The CIDR.</p>
+     * @public
+     */
+    Cidr?: string | undefined;
+    /**
+     * <p>The port ranges.</p>
+     * @public
+     */
+    PortRanges?: VerifiedAccessEndpointPortRange[] | undefined;
+    /**
+     * <p>The protocol.</p>
+     * @public
+     */
+    Protocol?: VerifiedAccessEndpointProtocol | undefined;
+    /**
+     * <p>The IDs of the subnets.</p>
+     * @public
+     */
+    SubnetIds?: string[] | undefined;
 }
 /**
  * <p>Describes a load balancer when creating an Amazon Web Services Verified Access endpoint using the
@@ -5326,6 +5745,11 @@ export interface VerifiedAccessEndpointLoadBalancerOptions {
      * @public
      */
     SubnetIds?: string[] | undefined;
+    /**
+     * <p>The port ranges.</p>
+     * @public
+     */
+    PortRanges?: VerifiedAccessEndpointPortRange[] | undefined;
 }
 /**
  * <p>Options for a network-interface type endpoint.</p>
@@ -5347,6 +5771,52 @@ export interface VerifiedAccessEndpointEniOptions {
      * @public
      */
     Port?: number | undefined;
+    /**
+     * <p>The port ranges.</p>
+     * @public
+     */
+    PortRanges?: VerifiedAccessEndpointPortRange[] | undefined;
+}
+/**
+ * <p>Describes the RDS options for a Verified Access endpoint.</p>
+ * @public
+ */
+export interface VerifiedAccessEndpointRdsOptions {
+    /**
+     * <p>The protocol.</p>
+     * @public
+     */
+    Protocol?: VerifiedAccessEndpointProtocol | undefined;
+    /**
+     * <p>The port.</p>
+     * @public
+     */
+    Port?: number | undefined;
+    /**
+     * <p>The ARN of the RDS instance.</p>
+     * @public
+     */
+    RdsDbInstanceArn?: string | undefined;
+    /**
+     * <p>The ARN of the DB cluster.</p>
+     * @public
+     */
+    RdsDbClusterArn?: string | undefined;
+    /**
+     * <p>The ARN of the RDS proxy.</p>
+     * @public
+     */
+    RdsDbProxyArn?: string | undefined;
+    /**
+     * <p>The RDS endpoint.</p>
+     * @public
+     */
+    RdsEndpoint?: string | undefined;
+    /**
+     * <p>The IDs of the subnets.</p>
+     * @public
+     */
+    SubnetIds?: string[] | undefined;
 }
 /**
  * @public
@@ -5485,6 +5955,16 @@ export interface VerifiedAccessEndpoint {
      * @public
      */
     SseSpecification?: VerifiedAccessSseSpecificationResponse | undefined;
+    /**
+     * <p>The options for an RDS endpoint.</p>
+     * @public
+     */
+    RdsOptions?: VerifiedAccessEndpointRdsOptions | undefined;
+    /**
+     * <p>The options for a CIDR endpoint.</p>
+     * @public
+     */
+    CidrOptions?: VerifiedAccessEndpointCidrOptions | undefined;
 }
 /**
  * @public
@@ -5637,6 +6117,11 @@ export interface CreateVerifiedAccessInstanceRequest {
      * @public
      */
     FIPSEnabled?: boolean | undefined;
+    /**
+     * <p>The custom subdomain.</p>
+     * @public
+     */
+    CidrEndpointsCustomSubDomain?: string | undefined;
 }
 /**
  * @public
@@ -5667,6 +6152,52 @@ export interface CreateVerifiedAccessTrustProviderDeviceOptions {
      */
     PublicSigningKeyUrl?: string | undefined;
 }
+/**
+ * <p>Describes the OpenID Connect (OIDC) options.</p>
+ * @public
+ */
+export interface CreateVerifiedAccessNativeApplicationOidcOptions {
+    /**
+     * <p>The public signing key endpoint.</p>
+     * @public
+     */
+    PublicSigningKeyEndpoint?: string | undefined;
+    /**
+     * <p>The OIDC issuer identifier of the IdP.</p>
+     * @public
+     */
+    Issuer?: string | undefined;
+    /**
+     * <p>The authorization endpoint of the IdP.</p>
+     * @public
+     */
+    AuthorizationEndpoint?: string | undefined;
+    /**
+     * <p>The token endpoint of the IdP.</p>
+     * @public
+     */
+    TokenEndpoint?: string | undefined;
+    /**
+     * <p>The user info endpoint of the IdP.</p>
+     * @public
+     */
+    UserInfoEndpoint?: string | undefined;
+    /**
+     * <p>The OAuth 2.0 client identifier.</p>
+     * @public
+     */
+    ClientId?: string | undefined;
+    /**
+     * <p>The OAuth 2.0 client secret.</p>
+     * @public
+     */
+    ClientSecret?: string | undefined;
+    /**
+     * <p>The set of user claims to be requested from the IdP.</p>
+     * @public
+     */
+    Scope?: string | undefined;
+}
 /**
  * <p>Describes the options when creating an Amazon Web Services Verified Access trust provider using the <code>user</code>
  *          type.</p>
@@ -5775,6 +6306,11 @@ export interface CreateVerifiedAccessTrustProviderRequest {
      * @public
      */
     SseSpecification?: VerifiedAccessSseSpecificationRequest | undefined;
+    /**
+     * <p>The OpenID Connect (OIDC) options.</p>
+     * @public
+     */
+    NativeApplicationOidcOptions?: CreateVerifiedAccessNativeApplicationOidcOptions | undefined;
 }
 /**
  * @public
@@ -6046,7 +6582,7 @@ export interface Volume {
      */
     SseType?: SSEType | undefined;
     /**
-     * <p>The entity that manages the volume.</p>
+     * <p>The service provider that manages the volume.</p>
      * @public
      */
     Operator?: OperatorResponse | undefined;
@@ -6423,6 +6959,8 @@ export declare const VpcEndpointType: {
     readonly Gateway: "Gateway";
     readonly GatewayLoadBalancer: "GatewayLoadBalancer";
     readonly Interface: "Interface";
+    readonly Resource: "Resource";
+    readonly ServiceNetwork: "ServiceNetwork";
 };
 /**
  * @public
@@ -6454,7 +6992,7 @@ export interface CreateVpcEndpointRequest {
      * <p>The name of the endpoint service.</p>
      * @public
      */
-    ServiceName: string | undefined;
+    ServiceName?: string | undefined;
     /**
      * <p>(Interface and gateway endpoints) A policy to attach to the endpoint that controls access to the
      *             service. The policy must be in valid JSON format. If this parameter is not specified, we
@@ -6524,6 +7062,18 @@ export interface CreateVpcEndpointRequest {
      * @public
      */
     SubnetConfigurations?: SubnetConfiguration[] | undefined;
+    /**
+     * <p>The Amazon Resource Name (ARN) of a service network that will be associated with the VPC
+     *          endpoint of type service-network.</p>
+     * @public
+     */
+    ServiceNetworkArn?: string | undefined;
+    /**
+     * <p>The Amazon Resource Name (ARN) of a resource configuration that will be associated with
+     *          the VPC endpoint of type resource.</p>
+     * @public
+     */
+    ResourceConfigurationArn?: string | undefined;
     /**
      * <p>The Region where the service is hosted. The default is the current Region.</p>
      * @public
@@ -6578,6 +7128,22 @@ export interface SecurityGroupIdentifier {
      */
     GroupName?: string | undefined;
 }
+/**
+ * <p>Prefixes of the subnet IP.</p>
+ * @public
+ */
+export interface SubnetIpPrefixes {
+    /**
+     * <p>ID of the subnet.</p>
+     * @public
+     */
+    SubnetId?: string | undefined;
+    /**
+     * <p>Array of SubnetIpPrefixes objects.</p>
+     * @public
+     */
+    IpPrefixes?: string[] | undefined;
+}
 /**
  * <p>The last error that occurred for a VPC endpoint.</p>
  * @public
@@ -6604,6 +7170,7 @@ export declare const State: {
     readonly Deleting: "Deleting";
     readonly Expired: "Expired";
     readonly Failed: "Failed";
+    readonly Partial: "Partial";
     readonly Pending: "Pending";
     readonly PendingAcceptance: "PendingAcceptance";
     readonly Rejected: "Rejected";
@@ -6713,6 +7280,31 @@ export interface VpcEndpoint {
      * @public
      */
     LastError?: LastError | undefined;
+    /**
+     * <p>Array of IPv4 prefixes.</p>
+     * @public
+     */
+    Ipv4Prefixes?: SubnetIpPrefixes[] | undefined;
+    /**
+     * <p>Array of IPv6 prefixes.</p>
+     * @public
+     */
+    Ipv6Prefixes?: SubnetIpPrefixes[] | undefined;
+    /**
+     * <p>Reason for the failure.</p>
+     * @public
+     */
+    FailureReason?: string | undefined;
+    /**
+     * <p>The Amazon Resource Name (ARN) of the service network.</p>
+     * @public
+     */
+    ServiceNetworkArn?: string | undefined;
+    /**
+     * <p>The Amazon Resource Name (ARN) of the resource configuration.</p>
+     * @public
+     */
+    ResourceConfigurationArn?: string | undefined;
     /**
      * <p>The Region where the service is hosted.</p>
      * @public
@@ -8355,288 +8947,9 @@ export interface DeleteClientVpnRouteRequest {
     DryRun?: boolean | undefined;
 }
 /**
- * @public
- */
-export interface DeleteClientVpnRouteResult {
-    /**
-     * <p>The current state of the route.</p>
-     * @public
-     */
-    Status?: ClientVpnRouteStatus | undefined;
-}
-/**
- * @public
- */
-export interface DeleteCoipCidrRequest {
-    /**
-     * <p> A customer-owned IP address range that you want to delete. </p>
-     * @public
-     */
-    Cidr: string | undefined;
-    /**
-     * <p>
-     *         The ID of the customer-owned address pool.
-     *       </p>
-     * @public
-     */
-    CoipPoolId: string | undefined;
-    /**
-     * <p>Checks whether you have the required permissions for the action, without actually making the request,
-     *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-     *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
-     * @public
-     */
-    DryRun?: boolean | undefined;
-}
-/**
- * @public
- */
-export interface DeleteCoipCidrResult {
-    /**
-     * <p>
-     *        Information about a range of customer-owned IP addresses.
-     *       </p>
-     * @public
-     */
-    CoipCidr?: CoipCidr | undefined;
-}
-/**
- * @public
- */
-export interface DeleteCoipPoolRequest {
-    /**
-     * <p>The ID of the CoIP pool that you want to delete. </p>
-     * @public
-     */
-    CoipPoolId: string | undefined;
-    /**
-     * <p>Checks whether you have the required permissions for the action, without actually making the request,
-     *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-     *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
-     * @public
-     */
-    DryRun?: boolean | undefined;
-}
-/**
- * @public
- */
-export interface DeleteCoipPoolResult {
-    /**
-     * <p>Information about the CoIP address pool.</p>
-     * @public
-     */
-    CoipPool?: CoipPool | undefined;
-}
-/**
- * <p>Contains the parameters for DeleteCustomerGateway.</p>
- * @public
- */
-export interface DeleteCustomerGatewayRequest {
-    /**
-     * <p>The ID of the customer gateway.</p>
-     * @public
-     */
-    CustomerGatewayId: string | undefined;
-    /**
-     * <p>Checks whether you have the required permissions for the action, without actually
-     *             making the request, and provides an error response. If you have the required
-     *             permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is
-     *                 <code>UnauthorizedOperation</code>.</p>
-     * @public
-     */
-    DryRun?: boolean | undefined;
-}
-/**
- * @public
- */
-export interface DeleteDhcpOptionsRequest {
-    /**
-     * <p>The ID of the DHCP options set.</p>
-     * @public
-     */
-    DhcpOptionsId: string | undefined;
-    /**
-     * <p>Checks whether you have the required permissions for the action, without actually making the request,
-     *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-     *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
-     * @public
-     */
-    DryRun?: boolean | undefined;
-}
-/**
- * @public
- */
-export interface DeleteEgressOnlyInternetGatewayRequest {
-    /**
-     * <p>Checks whether you have the required permissions for the action, without actually making the request,
-     *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-     *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
-     * @public
-     */
-    DryRun?: boolean | undefined;
-    /**
-     * <p>The ID of the egress-only internet gateway.</p>
-     * @public
-     */
-    EgressOnlyInternetGatewayId: string | undefined;
-}
-/**
- * @public
- */
-export interface DeleteEgressOnlyInternetGatewayResult {
-    /**
-     * <p>Returns <code>true</code> if the request succeeds; otherwise, it returns an error.</p>
-     * @public
-     */
-    ReturnCode?: boolean | undefined;
-}
-/**
- * @public
- */
-export interface DeleteFleetsRequest {
-    /**
-     * <p>Checks whether you have the required permissions for the action, without actually making the request,
-     *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-     *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
-     * @public
-     */
-    DryRun?: boolean | undefined;
-    /**
-     * <p>The IDs of the EC2 Fleets.</p>
-     *          <p>Constraints: In a single request, you can specify up to 25 <code>instant</code> fleet
-     *          IDs and up to 100 <code>maintain</code> or <code>request</code> fleet IDs. </p>
-     * @public
-     */
-    FleetIds: string[] | undefined;
-    /**
-     * <p>Indicates whether to terminate the associated instances when the EC2 Fleet is deleted. The default is to
-     *          terminate the instances.</p>
-     *          <p>To let the instances continue to run after the EC2 Fleet is deleted, specify
-     *             <code>no-terminate-instances</code>. Supported only for fleets of type
-     *             <code>maintain</code> and <code>request</code>.</p>
-     *          <p>For <code>instant</code> fleets, you cannot specify <code>NoTerminateInstances</code>. A
-     *          deleted <code>instant</code> fleet with running instances is not supported.</p>
-     * @public
-     */
-    TerminateInstances: boolean | undefined;
-}
-/**
- * @public
- * @enum
- */
-export declare const FleetStateCode: {
-    readonly ACTIVE: "active";
-    readonly DELETED: "deleted";
-    readonly DELETED_RUNNING: "deleted_running";
-    readonly DELETED_TERMINATING_INSTANCES: "deleted_terminating";
-    readonly FAILED: "failed";
-    readonly MODIFYING: "modifying";
-    readonly SUBMITTED: "submitted";
-};
-/**
- * @public
- */
-export type FleetStateCode = (typeof FleetStateCode)[keyof typeof FleetStateCode];
-/**
- * <p>Describes an EC2 Fleet that was successfully deleted.</p>
- * @public
- */
-export interface DeleteFleetSuccessItem {
-    /**
-     * <p>The current state of the EC2 Fleet.</p>
-     * @public
-     */
-    CurrentFleetState?: FleetStateCode | undefined;
-    /**
-     * <p>The previous state of the EC2 Fleet.</p>
-     * @public
-     */
-    PreviousFleetState?: FleetStateCode | undefined;
-    /**
-     * <p>The ID of the EC2 Fleet.</p>
-     * @public
-     */
-    FleetId?: string | undefined;
-}
-/**
- * @public
- * @enum
- */
-export declare const DeleteFleetErrorCode: {
-    readonly FLEET_ID_DOES_NOT_EXIST: "fleetIdDoesNotExist";
-    readonly FLEET_ID_MALFORMED: "fleetIdMalformed";
-    readonly FLEET_NOT_IN_DELETABLE_STATE: "fleetNotInDeletableState";
-    readonly UNEXPECTED_ERROR: "unexpectedError";
-};
-/**
- * @public
- */
-export type DeleteFleetErrorCode = (typeof DeleteFleetErrorCode)[keyof typeof DeleteFleetErrorCode];
-/**
- * <p>Describes an EC2 Fleet error.</p>
- * @public
- */
-export interface DeleteFleetError {
-    /**
-     * <p>The error code.</p>
-     * @public
-     */
-    Code?: DeleteFleetErrorCode | undefined;
-    /**
-     * <p>The description for the error code.</p>
-     * @public
-     */
-    Message?: string | undefined;
-}
-/**
- * <p>Describes an EC2 Fleet that was not successfully deleted.</p>
- * @public
- */
-export interface DeleteFleetErrorItem {
-    /**
-     * <p>The error.</p>
-     * @public
-     */
-    Error?: DeleteFleetError | undefined;
-    /**
-     * <p>The ID of the EC2 Fleet.</p>
-     * @public
-     */
-    FleetId?: string | undefined;
-}
-/**
- * @public
- */
-export interface DeleteFleetsResult {
-    /**
-     * <p>Information about the EC2 Fleets that are successfully deleted.</p>
-     * @public
-     */
-    SuccessfulFleetDeletions?: DeleteFleetSuccessItem[] | undefined;
-    /**
-     * <p>Information about the EC2 Fleets that are not successfully deleted.</p>
-     * @public
-     */
-    UnsuccessfulFleetDeletions?: DeleteFleetErrorItem[] | undefined;
-}
-/**
- * @public
+ * @internal
  */
-export interface DeleteFlowLogsRequest {
-    /**
-     * <p>Checks whether you have the required permissions for the action, without actually making the request,
-     *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-     *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
-     * @public
-     */
-    DryRun?: boolean | undefined;
-    /**
-     * <p>One or more flow log IDs.</p>
-     *          <p>Constraint: Maximum of 1000 flow log IDs.</p>
-     * @public
-     */
-    FlowLogIds: string[] | undefined;
-}
+export declare const CreateVerifiedAccessNativeApplicationOidcOptionsFilterSensitiveLog: (obj: CreateVerifiedAccessNativeApplicationOidcOptions) => any;
 /**
  * @internal
  */