@aws-sdk/client-ec2 3.783.0 → 3.794.0

package/dist-es/commands/CreateLaunchTemplateVersionCommand.js

@@ -2,7 +2,8 @@ import { getEndpointPlugin } from "@smithy/middleware-endpoint";
 import { getSerdePlugin } from "@smithy/middleware-serde";
 import { Command as $Command } from "@smithy/smithy-client";
 import { commonParams } from "../endpoint/EndpointParameters";
-import { CreateLaunchTemplateVersionRequestFilterSensitiveLog, CreateLaunchTemplateVersionResultFilterSensitiveLog, } from "../models/models_1";
+import { CreateLaunchTemplateVersionRequestFilterSensitiveLog, } from "../models/models_1";
+import { CreateLaunchTemplateVersionResultFilterSensitiveLog, } from "../models/models_2";
 import { de_CreateLaunchTemplateVersionCommand, se_CreateLaunchTemplateVersionCommand } from "../protocols/Aws_ec2";
 export { $Command };
 export class CreateLaunchTemplateVersionCommand extends $Command

package/dist-es/models/models_0.js

@@ -220,6 +220,7 @@ export const DomainType = {
 export const ServiceManaged = {
     alb: "alb",
     nlb: "nlb",
+    rnat: "rnat",
 };
 export const AddressAttributeName = {
     domain_name: "domain-name",

package/dist-es/models/models_1.js

@@ -1346,9 +1346,3 @@ export const LaunchTemplateVersionFilterSensitiveLog = (obj) => ({
         LaunchTemplateData: ResponseLaunchTemplateDataFilterSensitiveLog(obj.LaunchTemplateData),
     }),
 });
-export const CreateLaunchTemplateVersionResultFilterSensitiveLog = (obj) => ({
-    ...obj,
-    ...(obj.LaunchTemplateVersion && {
-        LaunchTemplateVersion: LaunchTemplateVersionFilterSensitiveLog(obj.LaunchTemplateVersion),
-    }),
-});

package/dist-es/models/models_2.js

@@ -1,5 +1,6 @@
 import { SENSITIVE_STRING } from "@smithy/smithy-client";
 import { VerifiedAccessTrustProviderFilterSensitiveLog, } from "./models_0";
+import { LaunchTemplateVersionFilterSensitiveLog, } from "./models_1";
 export const LocalGatewayRouteState = {
     active: "active",
     blackhole: "blackhole",
@@ -427,6 +428,12 @@ export const TunnelInsideIpVersion = {
     ipv4: "ipv4",
     ipv6: "ipv6",
 };
+export const CreateLaunchTemplateVersionResultFilterSensitiveLog = (obj) => ({
+    ...obj,
+    ...(obj.LaunchTemplateVersion && {
+        LaunchTemplateVersion: LaunchTemplateVersionFilterSensitiveLog(obj.LaunchTemplateVersion),
+    }),
+});
 export const CreateVerifiedAccessNativeApplicationOidcOptionsFilterSensitiveLog = (obj) => ({
     ...obj,
     ...(obj.ClientSecret && { ClientSecret: SENSITIVE_STRING }),

package/dist-es/models/models_3.js

@@ -169,7 +169,3 @@ export const DescribeBundleTasksResultFilterSensitiveLog = (obj) => ({
     ...obj,
     ...(obj.BundleTasks && { BundleTasks: obj.BundleTasks.map((item) => BundleTaskFilterSensitiveLog(item)) }),
 });
-export const DiskImageDescriptionFilterSensitiveLog = (obj) => ({
-    ...obj,
-    ...(obj.ImportManifestUrl && { ImportManifestUrl: SENSITIVE_STRING }),
-});

package/dist-es/models/models_4.js

@@ -1,6 +1,5 @@
 import { SENSITIVE_STRING } from "@smithy/smithy-client";
 import { LaunchTemplateVersionFilterSensitiveLog, } from "./models_1";
-import { DiskImageDescriptionFilterSensitiveLog, } from "./models_3";
 export const ConversionTaskState = {
     active: "active",
     cancelled: "cancelled",
@@ -320,10 +319,10 @@ export const LockState = {
     expired: "expired",
     governance: "governance",
 };
-export const MoveStatus = {
-    movingToVpc: "movingToVpc",
-    restoringToClassic: "restoringToClassic",
-};
+export const DiskImageDescriptionFilterSensitiveLog = (obj) => ({
+    ...obj,
+    ...(obj.ImportManifestUrl && { ImportManifestUrl: SENSITIVE_STRING }),
+});
 export const ImportInstanceVolumeDetailItemFilterSensitiveLog = (obj) => ({
     ...obj,
     ...(obj.Image && { Image: DiskImageDescriptionFilterSensitiveLog(obj.Image) }),

package/dist-es/models/models_5.js

@@ -1,6 +1,10 @@
 import { SENSITIVE_STRING } from "@smithy/smithy-client";
 import { VerifiedAccessTrustProviderFilterSensitiveLog, } from "./models_0";
 import { VpnConnectionFilterSensitiveLog, } from "./models_3";
+export const MoveStatus = {
+    movingToVpc: "movingToVpc",
+    restoringToClassic: "restoringToClassic",
+};
 export const FindingsFound = {
     false: "false",
     true: "true",

package/dist-es/models/models_6.js

@@ -168,7 +168,3 @@ export const DiskImageDetailFilterSensitiveLog = (obj) => ({
     ...obj,
     ...(obj.ImportManifestUrl && { ImportManifestUrl: SENSITIVE_STRING }),
 });
-export const DiskImageFilterSensitiveLog = (obj) => ({
-    ...obj,
-    ...(obj.Image && { Image: DiskImageDetailFilterSensitiveLog(obj.Image) }),
-});

package/dist-es/models/models_7.js

@@ -3,7 +3,7 @@ import { VerifiedAccessTrustProviderFilterSensitiveLog, } from "./models_0";
 import { VpnConnectionFilterSensitiveLog, } from "./models_3";
 import { ConversionTaskFilterSensitiveLog, SnapshotTaskDetailFilterSensitiveLog, } from "./models_4";
 import { SpotFleetRequestConfigDataFilterSensitiveLog, SpotInstanceRequestFilterSensitiveLog, } from "./models_5";
-import { DiskImageDetailFilterSensitiveLog, DiskImageFilterSensitiveLog, } from "./models_6";
+import { DiskImageDetailFilterSensitiveLog, } from "./models_6";
 export const LockMode = {
     compliance: "compliance",
     governance: "governance",
@@ -89,6 +89,10 @@ export const ResetFpgaImageAttributeName = {
 export const ResetImageAttributeName = {
     launchPermission: "launchPermission",
 };
+export const DiskImageFilterSensitiveLog = (obj) => ({
+    ...obj,
+    ...(obj.Image && { Image: DiskImageDetailFilterSensitiveLog(obj.Image) }),
+});
 export const UserDataFilterSensitiveLog = (obj) => ({
     ...obj,
 });

package/dist-es/protocols/Aws_ec2.js

@@ -17057,6 +17057,13 @@ const se_ClientLoginBannerOptions = (input, context) => {
     }
     return entries;
 };
+const se_ClientRouteEnforcementOptions = (input, context) => {
+    const entries = {};
+    if (input[_Enf] != null) {
+        entries[_Enf] = input[_Enf];
+    }
+    return entries;
+};
 const se_ClientVpnAuthenticationRequest = (input, context) => {
     const entries = {};
     if (input[_T] != null) {
@@ -17612,6 +17619,13 @@ const se_CreateClientVpnEndpointRequest = (input, context) => {
             entries[loc] = value;
         });
     }
+    if (input[_CREO] != null) {
+        const memberEntries = se_ClientRouteEnforcementOptions(input[_CREO], context);
+        Object.entries(memberEntries).forEach(([key, value]) => {
+            const loc = `ClientRouteEnforcementOptions.${key}`;
+            entries[loc] = value;
+        });
+    }
     if (input[_DOST] != null) {
         entries[_DOST] = input[_DOST];
     }
@@ -30954,6 +30968,13 @@ const se_ModifyClientVpnEndpointRequest = (input, context) => {
             entries[loc] = value;
         });
     }
+    if (input[_CREO] != null) {
+        const memberEntries = se_ClientRouteEnforcementOptions(input[_CREO], context);
+        Object.entries(memberEntries).forEach(([key, value]) => {
+            const loc = `ClientRouteEnforcementOptions.${key}`;
+            entries[loc] = value;
+        });
+    }
     if (input[_DOST] != null) {
         entries[_DOST] = input[_DOST];
     }
@@ -40559,6 +40580,13 @@ const de_ClientLoginBannerResponseOptions = (output, context) => {
     }
     return contents;
 };
+const de_ClientRouteEnforcementResponseOptions = (output, context) => {
+    const contents = {};
+    if (output[_enf] != null) {
+        contents[_Enf] = __parseBoolean(output[_enf]);
+    }
+    return contents;
+};
 const de_ClientVpnAuthentication = (output, context) => {
     const contents = {};
     if (output[_ty] != null) {
@@ -40744,6 +40772,9 @@ const de_ClientVpnEndpoint = (output, context) => {
     if (output[_cLBO] != null) {
         contents[_CLBO] = de_ClientLoginBannerResponseOptions(output[_cLBO], context);
     }
+    if (output[_cREO] != null) {
+        contents[_CREO] = de_ClientRouteEnforcementResponseOptions(output[_cREO], context);
+    }
     if (output[_dOST] != null) {
         contents[_DOST] = __parseBoolean(output[_dOST]);
     }
@@ -62155,6 +62186,7 @@ const _CRA = "CapacityReservationArn";
 const _CRBR = "CapacityReservationBillingRequests";
 const _CRCC = "ClientRootCertificateChain";
 const _CRCCA = "ClientRootCertificateChainArn";
+const _CREO = "ClientRouteEnforcementOptions";
 const _CRF = "CapacityReservationFleets";
 const _CRFA = "CapacityReservationFleetArn";
 const _CRFI = "CapacityReservationFleetIds";
@@ -62810,6 +62842,7 @@ const _En = "Enabled";
 const _Enc = "Encrypted";
 const _End = "End";
 const _Endp = "Endpoint";
+const _Enf = "Enforced";
 const _Ent = "Entries";
 const _Er = "Error";
 const _Err = "Errors";
@@ -64773,6 +64806,7 @@ const _cR = "capacityReservation";
 const _cRA = "capacityReservationArn";
 const _cRBRS = "capacityReservationBillingRequestSet";
 const _cRCC = "clientRootCertificateChain";
+const _cREO = "clientRouteEnforcementOptions";
 const _cRFA = "capacityReservationFleetArn";
 const _cRFI = "capacityReservationFleetId";
 const _cRFS = "capacityReservationFleetSet";
@@ -65020,6 +65054,7 @@ const _eb = "ebs";
 const _en = "enabled";
 const _enc = "encrypted";
 const _end = "end";
+const _enf = "enforced";
 const _er = "error";
 const _ev = "event";
 const _f = "format";

package/dist-types/commands/CreateClientVpnEndpointCommand.d.ts

@@ -93,6 +93,9 @@ declare const CreateClientVpnEndpointCommand_base: {
  *     Enabled: true || false,
  *     BannerText: "STRING_VALUE",
  *   },
+ *   ClientRouteEnforcementOptions: { // ClientRouteEnforcementOptions
+ *     Enforced: true || false,
+ *   },
  *   DisconnectOnSessionTimeout: true || false,
  * };
  * const command = new CreateClientVpnEndpointCommand(input);

package/dist-types/commands/CreateLaunchTemplateVersionCommand.d.ts

@@ -1,7 +1,8 @@
 import { Command as $Command } from "@smithy/smithy-client";
 import { MetadataBearer as __MetadataBearer } from "@smithy/types";
 import { EC2ClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../EC2Client";
-import { CreateLaunchTemplateVersionRequest, CreateLaunchTemplateVersionResult } from "../models/models_1";
+import { CreateLaunchTemplateVersionRequest } from "../models/models_1";
+import { CreateLaunchTemplateVersionResult } from "../models/models_2";
 /**
  * @public
  */

package/dist-types/commands/DescribeAddressesCommand.d.ts

@@ -73,7 +73,7 @@ declare const DescribeAddressesCommand_base: {
  * //       CustomerOwnedIp: "STRING_VALUE",
  * //       CustomerOwnedIpv4Pool: "STRING_VALUE",
  * //       CarrierIp: "STRING_VALUE",
- * //       ServiceManaged: "alb" || "nlb",
+ * //       ServiceManaged: "alb" || "nlb" || "rnat",
  * //       InstanceId: "STRING_VALUE",
  * //       PublicIp: "STRING_VALUE",
  * //     },

package/dist-types/commands/DescribeClientVpnEndpointsCommand.d.ts

@@ -123,6 +123,9 @@ declare const DescribeClientVpnEndpointsCommand_base: {
  * //         Enabled: true || false,
  * //         BannerText: "STRING_VALUE",
  * //       },
+ * //       ClientRouteEnforcementOptions: { // ClientRouteEnforcementResponseOptions
+ * //         Enforced: true || false,
+ * //       },
  * //       DisconnectOnSessionTimeout: true || false,
  * //     },
  * //   ],

package/dist-types/commands/DescribeMovingAddressesCommand.d.ts

@@ -1,8 +1,7 @@
 import { Command as $Command } from "@smithy/smithy-client";
 import { MetadataBearer as __MetadataBearer } from "@smithy/types";
 import { EC2ClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../EC2Client";
-import { DescribeMovingAddressesRequest } from "../models/models_4";
-import { DescribeMovingAddressesResult } from "../models/models_5";
+import { DescribeMovingAddressesRequest, DescribeMovingAddressesResult } from "../models/models_5";
 /**
  * @public
  */

package/dist-types/commands/DescribeVpcEndpointServicePermissionsCommand.d.ts

@@ -28,7 +28,7 @@ declare const DescribeVpcEndpointServicePermissionsCommand_base: {
 };
 /**
  * <p>Describes the principals (service consumers) that are permitted to discover your VPC
- *             endpoint service.</p>
+ *             endpoint service. Principal ARNs with path components aren't supported.</p>
  * @example
  * Use a bare-bones client and the command you need to make an API call.
  * ```javascript

package/dist-types/commands/DisableImageDeregistrationProtectionCommand.d.ts

@@ -1,7 +1,8 @@
 import { Command as $Command } from "@smithy/smithy-client";
 import { MetadataBearer as __MetadataBearer } from "@smithy/types";
 import { EC2ClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../EC2Client";
-import { DisableImageDeregistrationProtectionRequest, DisableImageDeregistrationProtectionResult } from "../models/models_5";
+import { DisableImageDeregistrationProtectionRequest } from "../models/models_5";
+import { DisableImageDeregistrationProtectionResult } from "../models/models_6";
 /**
  * @public
  */

package/dist-types/commands/DisableIpamOrganizationAdminAccountCommand.d.ts

@@ -1,8 +1,7 @@
 import { Command as $Command } from "@smithy/smithy-client";
 import { MetadataBearer as __MetadataBearer } from "@smithy/types";
 import { EC2ClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../EC2Client";
-import { DisableIpamOrganizationAdminAccountRequest } from "../models/models_5";
-import { DisableIpamOrganizationAdminAccountResult } from "../models/models_6";
+import { DisableIpamOrganizationAdminAccountRequest, DisableIpamOrganizationAdminAccountResult } from "../models/models_6";
 /**
  * @public
  */

package/dist-types/commands/ModifyClientVpnEndpointCommand.d.ts

@@ -66,6 +66,9 @@ declare const ModifyClientVpnEndpointCommand_base: {
  *     Enabled: true || false,
  *     BannerText: "STRING_VALUE",
  *   },
+ *   ClientRouteEnforcementOptions: { // ClientRouteEnforcementOptions
+ *     Enforced: true || false,
+ *   },
  *   DisconnectOnSessionTimeout: true || false,
  * };
  * const command = new ModifyClientVpnEndpointCommand(input);

package/dist-types/commands/ModifyVpcEndpointServicePermissionsCommand.d.ts

@@ -24,12 +24,12 @@ export interface ModifyVpcEndpointServicePermissionsCommandOutput extends Modify
 declare const ModifyVpcEndpointServicePermissionsCommand_base: {
     new (input: ModifyVpcEndpointServicePermissionsCommandInput): import("@smithy/smithy-client").CommandImpl<ModifyVpcEndpointServicePermissionsCommandInput, ModifyVpcEndpointServicePermissionsCommandOutput, EC2ClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes>;
     new (__0_0: ModifyVpcEndpointServicePermissionsCommandInput): import("@smithy/smithy-client").CommandImpl<ModifyVpcEndpointServicePermissionsCommandInput, ModifyVpcEndpointServicePermissionsCommandOutput, EC2ClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes>;
-    getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions; /** @internal type navigation helper, not in runtime. */
+    getEndpointParameterInstructions(): import("@smithy/middleware-endpoint").EndpointParameterInstructions;
 };
 /**
  * <p>Modifies the permissions for your VPC endpoint service. You can add or remove permissions
  *             for service consumers (Amazon Web Services accounts, users, and IAM roles) to connect to
- *             your endpoint service.</p>
+ *             your endpoint service. Principal ARNs with path components aren't supported.</p>
  *          <p>If you grant permissions to all principals, the service is public. Any users who know the name of a
  * 	        public service can send a request to attach an endpoint. If the service does not require manual approval,
  * 	        attachments are automatically approved.</p>

package/dist-types/commands/RestoreImageFromRecycleBinCommand.d.ts

@@ -1,7 +1,7 @@
 import { Command as $Command } from "@smithy/smithy-client";
 import { MetadataBearer as __MetadataBearer } from "@smithy/types";
 import { EC2ClientResolvedConfig, ServiceInputTypes, ServiceOutputTypes } from "../EC2Client";
-import { RestoreImageFromRecycleBinRequest, RestoreImageFromRecycleBinResult } from "../models/models_7";
+import { RestoreImageFromRecycleBinRequest, RestoreImageFromRecycleBinResult } from "../models/models_8";
 /**
  * @public
  */

package/dist-types/models/models_0.d.ts

@@ -2503,6 +2503,7 @@ export type DomainType = (typeof DomainType)[keyof typeof DomainType];
 export declare const ServiceManaged: {
     readonly alb: "alb";
     readonly nlb: "nlb";
+    readonly rnat: "rnat";
 };
 /**
  * @public

package/dist-types/models/models_1.d.ts

@@ -2363,6 +2363,24 @@ export interface ClientLoginBannerOptions {
      */
     BannerText?: string | undefined;
 }
+/**
+ * <p>Client route enforcement is a feature of the Client VPN service that helps enforce administrator defined routes on devices connected through the VPN. T
+ * 		his feature helps improve your security posture by ensuring that network traffic originating from a connected client is not inadvertently sent outside the VPN tunnel.</p>
+ *          <p>Client route enforcement works by monitoring the route table of a connected device for routing policy changes to the VPN connection. If the feature detects any VPN routing policy modifications, it will automatically force an update to the route table,
+ * 			reverting it back to the expected route configurations.</p>
+ * @public
+ */
+export interface ClientRouteEnforcementOptions {
+    /**
+     * <p>Enable or disable the client route enforcement feature.</p>
+     *          <p>Valid values: <code>true | false</code>
+     *          </p>
+     *          <p>Default value: <code>false</code>
+     *          </p>
+     * @public
+     */
+    Enforced?: boolean | undefined;
+}
 /**
  * <p>Describes the client connection logging options for the Client VPN endpoint.</p>
  * @public
@@ -2537,6 +2555,14 @@ export interface CreateClientVpnEndpointRequest {
      * @public
      */
     ClientLoginBannerOptions?: ClientLoginBannerOptions | undefined;
+    /**
+     * <p>Client route enforcement is a feature of the Client VPN service that helps enforce administrator defined routes on devices connected through the VPN. T
+     * 		his feature helps improve your security posture by ensuring that network traffic originating from a connected client is not inadvertently sent outside the VPN tunnel.</p>
+     *          <p>Client route enforcement works by monitoring the route table of a connected device for routing policy changes to the VPN connection. If the feature detects any VPN routing policy modifications, it will automatically force an update to the route table,
+     * 			reverting it back to the expected route configurations.</p>
+     * @public
+     */
+    ClientRouteEnforcementOptions?: ClientRouteEnforcementOptions | undefined;
     /**
      * <p>Indicates whether the client VPN session is disconnected after the maximum timeout specified in <code>SessionTimeoutHours</code> is reached. If <code>true</code>, users are prompted to reconnect client VPN. If <code>false</code>, client VPN attempts to reconnect automatically.
      *                    The default value is <code>false</code>.</p>
@@ -11355,23 +11381,6 @@ export interface LaunchTemplateVersion {
      */
     Operator?: OperatorResponse | undefined;
 }
-/**
- * @public
- */
-export interface CreateLaunchTemplateVersionResult {
-    /**
-     * <p>Information about the launch template version.</p>
-     * @public
-     */
-    LaunchTemplateVersion?: LaunchTemplateVersion | undefined;
-    /**
-     * <p>If the new version of the launch template contains parameters or parameter
-     *             combinations that are not valid, an error code and an error message are returned for
-     *             each issue that's found.</p>
-     * @public
-     */
-    Warning?: ValidationWarning | undefined;
-}
 /**
  * @internal
  */
@@ -11400,7 +11409,3 @@ export declare const ResponseLaunchTemplateDataFilterSensitiveLog: (obj: Respons
  * @internal
  */
 export declare const LaunchTemplateVersionFilterSensitiveLog: (obj: LaunchTemplateVersion) => any;
-/**
- * @internal
- */
-export declare const CreateLaunchTemplateVersionResultFilterSensitiveLog: (obj: CreateLaunchTemplateVersionResult) => any;

package/dist-types/models/models_2.d.ts

@@ -1,5 +1,22 @@
 import { AccessScopePath, AccessScopePathRequest, AddPrefixListEntry, ApplianceModeSupportValue, AttachmentStatus, CurrencyCodeValues, DeviceTrustProviderType, DnsSupportValue, DynamicRoutingValue, Ipv4PrefixSpecification, Ipv6SupportValue, NatGatewayAddress, PortRange, Protocol, ReservedInstancesListing, RouteTableAssociationState, SecurityGroupReferencingSupportValue, Tag, TagSpecification, TransitGatewayAttachmentResourceType, TransitGatewayAttachmentState, TransitGatewayPeeringAttachment, TransitGatewayVpcAttachment, TrustProviderType, UserTrustProviderType, VerifiedAccessInstance, VerifiedAccessSseSpecificationResponse, VerifiedAccessTrustProvider, VolumeAttachment, VpcPeeringConnection } from "./models_0";
-import { ConnectionTrackingSpecificationRequest, InstanceIpv6Address, Ipv4PrefixSpecificationRequest, Ipv6PrefixSpecificationRequest, OperatorRequest, OperatorResponse, PrivateIpAddressSpecification, Subnet, Tenancy, VolumeType, Vpc } from "./models_1";
+import { ConnectionTrackingSpecificationRequest, InstanceIpv6Address, Ipv4PrefixSpecificationRequest, Ipv6PrefixSpecificationRequest, LaunchTemplateVersion, OperatorRequest, OperatorResponse, PrivateIpAddressSpecification, Subnet, Tenancy, ValidationWarning, VolumeType, Vpc } from "./models_1";
+/**
+ * @public
+ */
+export interface CreateLaunchTemplateVersionResult {
+    /**
+     * <p>Information about the launch template version.</p>
+     * @public
+     */
+    LaunchTemplateVersion?: LaunchTemplateVersion | undefined;
+    /**
+     * <p>If the new version of the launch template contains parameters or parameter
+     *             combinations that are not valid, an error code and an error message are returned for
+     *             each issue that's found.</p>
+     * @public
+     */
+    Warning?: ValidationWarning | undefined;
+}
 /**
  * @public
  */
@@ -5196,7 +5213,11 @@ export interface TransitGatewayOptions {
      */
     AutoAcceptSharedAttachments?: AutoAcceptSharedAttachmentsValue | undefined;
     /**
-     * <p>Indicates whether resource attachments are automatically associated with the default association route table.</p>
+     * <p>Indicates whether resource attachments are automatically associated with the default
+     *          association route table. Enabled by default. If <code>defaultRouteTableAssociation</code>
+     *          is set to <code>enable</code>,
+     *          Amazon Web Services Transit Gateway will create the default transit gateway route
+     *          table.</p>
      * @public
      */
     DefaultRouteTableAssociation?: DefaultRouteTableAssociationValue | undefined;
@@ -5206,7 +5227,11 @@ export interface TransitGatewayOptions {
      */
     AssociationDefaultRouteTableId?: string | undefined;
     /**
-     * <p>Indicates whether resource attachments automatically propagate routes to the default propagation route table.</p>
+     * <p>Indicates whether resource attachments automatically propagate routes to the default
+     *          propagation route table. Enabled by default. If <code>defaultRouteTablePropagation</code>
+     *          is set to <code>enable</code>,
+     *          Amazon Web Services Transit Gateway will create the default transit gateway route
+     *          table.</p>
      * @public
      */
     DefaultRouteTablePropagation?: DefaultRouteTablePropagationValue | undefined;
@@ -8925,16 +8950,9 @@ export interface CloudWatchLogOptionsSpecification {
     LogOutputFormat?: string | undefined;
 }
 /**
- * <p>Options for logging VPN tunnel activity.</p>
- * @public
+ * @internal
  */
-export interface VpnTunnelLogOptionsSpecification {
-    /**
-     * <p>Options for sending VPN tunnel logs to CloudWatch.</p>
-     * @public
-     */
-    CloudWatchLogOptions?: CloudWatchLogOptionsSpecification | undefined;
-}
+export declare const CreateLaunchTemplateVersionResultFilterSensitiveLog: (obj: CreateLaunchTemplateVersionResult) => any;
 /**
  * @internal
  */

package/dist-types/models/models_3.d.ts

@@ -1,6 +1,17 @@
 import { AccountAttribute, AccountAttributeName, Address, AddressAttribute, AddressAttributeName, AddressTransfer, AssociationStatus, BundleTask, ByoipCidr, CapacityReservationFleetState, ClientVpnAuthorizationRuleStatus, InstanceEventWindowState, Tag, TagSpecification, TransitGatewayPeeringAttachment, TransitGatewayVpcAttachment, UnsuccessfulItem, VerifiedAccessInstance, VerifiedAccessTrustProvider, VpcAttachment } from "./models_0";
-import { CapacityReservation, CapacityReservationTenancy, CarrierGateway, ClientVpnAuthenticationType, ClientVpnEndpointStatus, ClientVpnRouteStatus, CoipCidr, CoipPool, DiskImageFormat, Ec2InstanceConnectEndpoint, FleetCapacityReservation, FleetCapacityReservationTenancy, FleetInstanceMatchCriteria, GatewayType, Ipam, IpamExternalResourceVerificationToken, IpamPool, IpamResourceDiscovery, IpamScope, LaunchTemplate, TransportProtocol } from "./models_1";
-import { GroupIdentifier, IKEVersionsRequestListValue, LocalGatewayRoute, LocalGatewayRouteTable, LocalGatewayRouteTableVirtualInterfaceGroupAssociation, LocalGatewayRouteTableVpcAssociation, ManagedPrefixList, RouteServer, RouteServerEndpoint, RouteServerPeer, SubnetCidrReservation, TransitGateway, TransitGatewayConnect, TransitGatewayConnectPeer, TransitGatewayMulticastDomain, TransitGatewayPolicyTable, TransitGatewayPrefixListReference, TransitGatewayRoute, TransitGatewayRouteTable, TransitGatewayRouteTableAnnouncement, TunnelInsideIpVersion, VerifiedAccessEndpoint, VerifiedAccessGroup, VpcBlockPublicAccessExclusion, VpnTunnelLogOptionsSpecification } from "./models_2";
+import { CapacityReservation, CapacityReservationTenancy, CarrierGateway, ClientVpnAuthenticationType, ClientVpnEndpointStatus, ClientVpnRouteStatus, CoipCidr, CoipPool, Ec2InstanceConnectEndpoint, FleetCapacityReservation, FleetCapacityReservationTenancy, FleetInstanceMatchCriteria, GatewayType, Ipam, IpamExternalResourceVerificationToken, IpamPool, IpamResourceDiscovery, IpamScope, LaunchTemplate, TransportProtocol } from "./models_1";
+import { CloudWatchLogOptionsSpecification, GroupIdentifier, IKEVersionsRequestListValue, LocalGatewayRoute, LocalGatewayRouteTable, LocalGatewayRouteTableVirtualInterfaceGroupAssociation, LocalGatewayRouteTableVpcAssociation, ManagedPrefixList, RouteServer, RouteServerEndpoint, RouteServerPeer, SubnetCidrReservation, TransitGateway, TransitGatewayConnect, TransitGatewayConnectPeer, TransitGatewayMulticastDomain, TransitGatewayPolicyTable, TransitGatewayPrefixListReference, TransitGatewayRoute, TransitGatewayRouteTable, TransitGatewayRouteTableAnnouncement, TunnelInsideIpVersion, VerifiedAccessEndpoint, VerifiedAccessGroup, VpcBlockPublicAccessExclusion } from "./models_2";
+/**
+ * <p>Options for logging VPN tunnel activity.</p>
+ * @public
+ */
+export interface VpnTunnelLogOptionsSpecification {
+    /**
+     * <p>Options for sending VPN tunnel logs to CloudWatch.</p>
+     * @public
+     */
+    CloudWatchLogOptions?: CloudWatchLogOptionsSpecification | undefined;
+}
 /**
  * <p>Specifies a Diffie-Hellman group number for the VPN tunnel for phase 1 IKE
  *             negotiations.</p>
@@ -6294,6 +6305,21 @@ export interface ClientLoginBannerResponseOptions {
      */
     BannerText?: string | undefined;
 }
+/**
+ * <p>The current status of client route enforcement. The state will either be <code>true</code> (enabled) or <code>false</code> (disabled).</p>
+ * @public
+ */
+export interface ClientRouteEnforcementResponseOptions {
+    /**
+     * <p>Status of the client route enforcement feature.</p>
+     *          <p>Valid values: <code>true | false</code>
+     *          </p>
+     *          <p>Default value: <code>false</code>
+     *          </p>
+     * @public
+     */
+    Enforced?: boolean | undefined;
+}
 /**
  * <p>Information about the client connection logging options for a Client VPN endpoint.</p>
  * @public
@@ -6455,6 +6481,14 @@ export interface ClientVpnEndpoint {
      * @public
      */
     ClientLoginBannerOptions?: ClientLoginBannerResponseOptions | undefined;
+    /**
+     * <p>Client route enforcement is a feature of the Client VPN service that helps enforce administrator defined routes on devices connected through the VPN. T
+     * 		his feature helps improve your security posture by ensuring that network traffic originating from a connected client is not inadvertently sent outside the VPN tunnel.</p>
+     *          <p>Client route enforcement works by monitoring the route table of a connected device for routing policy changes to the VPN connection. If the feature detects any VPN routing policy modifications, it will automatically force an update to the route table,
+     * 			reverting it back to the expected route configurations.</p>
+     * @public
+     */
+    ClientRouteEnforcementOptions?: ClientRouteEnforcementResponseOptions | undefined;
     /**
      * <p>Indicates whether the client VPN session is disconnected after the maximum <code>sessionTimeoutHours</code> is reached. If <code>true</code>, users are prompted to reconnect client VPN. If <code>false</code>, client VPN attempts to reconnect automatically. The default value is <code>false</code>.</p>
      * @public
@@ -6754,51 +6788,6 @@ export interface DescribeConversionTasksRequest {
      */
     ConversionTaskIds?: string[] | undefined;
 }
-/**
- * <p>Describes a disk image.</p>
- * @public
- */
-export interface DiskImageDescription {
-    /**
-     * <p>The checksum computed for the disk image.</p>
-     * @public
-     */
-    Checksum?: string | undefined;
-    /**
-     * <p>The disk image format.</p>
-     * @public
-     */
-    Format?: DiskImageFormat | undefined;
-    /**
-     * <p>A presigned URL for the import manifest stored in Amazon S3. For information about creating a presigned URL for
-     *    an Amazon S3 object, read the "Query String Request Authentication Alternative" section of the <a href="https://docs.aws.amazon.com/AmazonS3/latest/dev/RESTAuthentication.html">Authenticating REST Requests</a> topic in
-     *    the <i>Amazon Simple Storage Service Developer Guide</i>.</p>
-     *          <p>For information about the import manifest referenced by this API action, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/manifest.html">VM Import Manifest</a>.</p>
-     * @public
-     */
-    ImportManifestUrl?: string | undefined;
-    /**
-     * <p>The size of the disk image, in GiB.</p>
-     * @public
-     */
-    Size?: number | undefined;
-}
-/**
- * <p>Describes a disk image volume.</p>
- * @public
- */
-export interface DiskImageVolumeDescription {
-    /**
-     * <p>The volume identifier.</p>
-     * @public
-     */
-    Id?: string | undefined;
-    /**
-     * <p>The size of the volume, in GiB.</p>
-     * @public
-     */
-    Size?: number | undefined;
-}
 /**
  * @internal
  */
@@ -6835,7 +6824,3 @@ export declare const DeleteVerifiedAccessTrustProviderResultFilterSensitiveLog:
  * @internal
  */
 export declare const DescribeBundleTasksResultFilterSensitiveLog: (obj: DescribeBundleTasksResult) => any;
-/**
- * @internal
- */
-export declare const DiskImageDescriptionFilterSensitiveLog: (obj: DiskImageDescription) => any;