@aws-sdk/client-ec2 3.936.0 → 3.938.0

package/dist-types/models/models_2.d.ts

@@ -1,6 +1,78 @@
-import { ApplianceModeSupportValue, AutoAcceptSharedAssociationsValue, AutoAcceptSharedAttachmentsValue, BgpStatus, ConnectionNotificationState, ConnectionNotificationType, DefaultRouteTableAssociationValue, DefaultRouteTablePropagationValue, DeleteFleetErrorCode, DeleteQueuedReservedInstancesErrorCode, DeviceTrustProviderType, DnsNameState, DnsRecordIpType, DnsSupportValue, DynamicRoutingValue, FleetStateCode, GatewayAssociationState, GatewayType, Igmpv2SupportValue, InstanceEventWindowState, InternetGatewayExclusionMode, IpAddressType, Ipv6SupportValue, LaunchTemplateErrorCode, MulticastSupportValue, PayerResponsibility, ProtocolValue, SecurityGroupReferencingSupportValue, ServiceConnectivityType, ServiceState, ServiceType, State, StaticSourcesSupportValue, SubnetCidrReservationType, TelemetryStatus, Tenancy, TrafficDirection, TrafficMirrorNetworkService, TrafficMirrorRuleAction, TrafficMirrorTargetType, TransitGatewayAttachmentResourceType, TransitGatewayAttachmentState, TransitGatewayConnectPeerState, TransitGatewayMulticastDomainState, TransitGatewayPolicyTableState, TransitGatewayPrefixListReferenceState, TransitGatewayRouteState, TransitGatewayRouteTableAnnouncementDirection, TransitGatewayRouteTableAnnouncementState, TransitGatewayRouteTableState, TransitGatewayRouteType, TransitGatewayState, TrustProviderType, TunnelInsideIpVersion, UserTrustProviderType, VerifiedAccessEndpointAttachmentType, VerifiedAccessEndpointProtocol, VerifiedAccessEndpointStatusCode, VerifiedAccessEndpointType, VolumeType, VpcBlockPublicAccessExclusionState, VpcEndpointType, VpnConcentratorType, VpnEcmpSupportValue, VpnState, VpnStaticRouteSource, VpnTunnelBandwidth } from "./enums";
-import { CarrierGateway, ClientVpnEndpointStatus, ClientVpnRouteStatus, CoipCidr, CoipPool, Subnet, Tag, TagSpecification, TransitGatewayPeeringAttachment, TransitGatewayVpcAttachment, UnsuccessfulItem, VerifiedAccessInstance, VerifiedAccessSseSpecificationResponse, VerifiedAccessTrustProvider, Vpc, VpcAttachment, VpcPeeringConnection } from "./models_0";
-import { Ec2InstanceConnectEndpoint, Ipam, IpamExternalResourceVerificationToken, IpamPolicy, IpamPool, IpamPrefixListResolver, IpamPrefixListResolverTarget, IpamResourceDiscovery, IpamScope, LaunchTemplate, LocalGatewayRoute, LocalGatewayRouteTable, LocalGatewayRouteTableVirtualInterfaceGroupAssociation, LocalGatewayRouteTableVpcAssociation, LocalGatewayVirtualInterface, LocalGatewayVirtualInterfaceGroup, ManagedPrefixList, OperatorRequest, RouteServer, RouteServerEndpoint, RouteServerPeer } from "./models_1";
+import { ApplianceModeSupportValue, AutoAcceptSharedAssociationsValue, AutoAcceptSharedAttachmentsValue, BgpStatus, ConnectionNotificationState, ConnectionNotificationType, DefaultRouteTableAssociationValue, DefaultRouteTablePropagationValue, DeleteFleetErrorCode, DeleteQueuedReservedInstancesErrorCode, DeviceTrustProviderType, DnsNameState, DnsRecordIpType, DnsSupportValue, DynamicRoutingValue, EncryptionStateValue, FleetStateCode, GatewayAssociationState, GatewayType, Igmpv2SupportValue, InstanceEventWindowState, InternetGatewayExclusionMode, IpAddressType, Ipv6SupportValue, LaunchTemplateErrorCode, MulticastSupportValue, PayerResponsibility, ProtocolValue, SecurityGroupReferencingSupportValue, ServiceConnectivityType, ServiceState, ServiceType, State, StaticSourcesSupportValue, SubnetCidrReservationType, TelemetryStatus, Tenancy, TrafficDirection, TrafficMirrorNetworkService, TrafficMirrorRuleAction, TrafficMirrorTargetType, TransitGatewayAttachmentResourceType, TransitGatewayAttachmentState, TransitGatewayConnectPeerState, TransitGatewayMeteringPayerType, TransitGatewayMeteringPolicyEntryState, TransitGatewayMeteringPolicyState, TransitGatewayMulticastDomainState, TransitGatewayPolicyTableState, TransitGatewayPrefixListReferenceState, TransitGatewayRouteState, TransitGatewayRouteTableAnnouncementDirection, TransitGatewayRouteTableAnnouncementState, TransitGatewayRouteTableState, TransitGatewayRouteType, TransitGatewayState, TrustProviderType, TunnelInsideIpVersion, UserTrustProviderType, VerifiedAccessEndpointAttachmentType, VerifiedAccessEndpointProtocol, VerifiedAccessEndpointStatusCode, VerifiedAccessEndpointType, VolumeType, VpcBlockPublicAccessExclusionState, VpcEncryptionControlExclusionStateInput, VpcEncryptionControlMode, VpcEndpointType, VpnConcentratorType, VpnEcmpSupportValue, VpnState, VpnStaticRouteSource, VpnTunnelBandwidth } from "./enums";
+import { CarrierGateway, ClientVpnEndpointStatus, ClientVpnRouteStatus, CoipCidr, CoipPool, Subnet, Tag, TagSpecification, TransitGatewayPeeringAttachment, TransitGatewayVpcAttachment, UnsuccessfulItem, VerifiedAccessInstance, VerifiedAccessSseSpecificationResponse, VerifiedAccessTrustProvider, Vpc, VpcAttachment, VpcEncryptionControl, VpcPeeringConnection } from "./models_0";
+import { Ec2InstanceConnectEndpoint, Ipam, IpamExternalResourceVerificationToken, IpamPolicy, IpamPool, IpamPrefixListResolver, IpamPrefixListResolverTarget, IpamResourceDiscovery, IpamScope, LaunchTemplate, LocalGatewayRoute, LocalGatewayRouteTable, LocalGatewayRouteTableVirtualInterfaceGroupAssociation, LocalGatewayRouteTableVpcAssociation, LocalGatewayVirtualInterface, LocalGatewayVirtualInterfaceGroup, ManagedPrefixList, OperatorRequest, RouteServer, RouteServerEndpoint, RouteServerPeer, SpotDatafeedSubscription } from "./models_1";
+/**
+ * <p>Contains the output of CreateSpotDatafeedSubscription.</p>
+ * @public
+ */
+export interface CreateSpotDatafeedSubscriptionResult {
+    /**
+     * <p>The Spot Instance data feed subscription.</p>
+     * @public
+     */
+    SpotDatafeedSubscription?: SpotDatafeedSubscription | undefined;
+}
+/**
+ * <p>The tags to apply to the AMI object that will be stored in the Amazon S3 bucket. For more
+ *       information, see <a href="https://docs.aws.amazon.com/AmazonS3/latest/userguide/object-tagging.html">Categorizing your storage using
+ *         tags</a> in the <i>Amazon Simple Storage Service User Guide</i>.</p>
+ * @public
+ */
+export interface S3ObjectTag {
+    /**
+     * <p>The key of the tag.</p>
+     *          <p>Constraints: Tag keys are case-sensitive and can be up to 128 Unicode characters in
+     *       length. May not begin with <code>aws</code>:.</p>
+     * @public
+     */
+    Key?: string | undefined;
+    /**
+     * <p>The value of the tag.</p>
+     *          <p>Constraints: Tag values are case-sensitive and can be up to 256 Unicode characters in
+     *       length.</p>
+     * @public
+     */
+    Value?: string | undefined;
+}
+/**
+ * @public
+ */
+export interface CreateStoreImageTaskRequest {
+    /**
+     * <p>The ID of the AMI.</p>
+     * @public
+     */
+    ImageId: string | undefined;
+    /**
+     * <p>The name of the Amazon S3 bucket in which the AMI object will be stored. The bucket must be in
+     *       the Region in which the request is being made. The AMI object appears in the bucket only after
+     *       the upload task has completed. </p>
+     * @public
+     */
+    Bucket: string | undefined;
+    /**
+     * <p>The tags to apply to the AMI object that will be stored in the Amazon S3 bucket. </p>
+     * @public
+     */
+    S3ObjectTags?: S3ObjectTag[] | undefined;
+    /**
+     * <p>Checks whether you have the required permissions for the action, without actually making the request,
+     * 			and provides an error response. If you have the required permissions, the error response is
+     * 			<code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+     * @public
+     */
+    DryRun?: boolean | undefined;
+}
+/**
+ * @public
+ */
+export interface CreateStoreImageTaskResult {
+    /**
+     * <p>The name of the stored AMI object in the S3 bucket.</p>
+     * @public
+     */
+    ObjectKey?: string | undefined;
+}
 /**
  * @public
  */
@@ -809,6 +881,22 @@ export interface CreateTransitGatewayRequest {
      */
     DryRun?: boolean | undefined;
 }
+/**
+ * <p>Describes the encryption support status for a transit gateway.</p>
+ * @public
+ */
+export interface EncryptionSupport {
+    /**
+     * <p>The current encryption state of the resource.</p>
+     * @public
+     */
+    EncryptionState?: EncryptionStateValue | undefined;
+    /**
+     * <p>A message describing the encryption state.</p>
+     * @public
+     */
+    StateMessage?: string | undefined;
+}
 /**
  * <p>Describes the options for a transit gateway.</p>
  * @public
@@ -878,6 +966,11 @@ export interface TransitGatewayOptions {
      * @public
      */
     MulticastSupport?: MulticastSupportValue | undefined;
+    /**
+     * <p>Defines if the Transit Gateway supports VPC Encryption Control.</p>
+     * @public
+     */
+    EncryptionSupport?: EncryptionSupport | undefined;
 }
 /**
  * <p>Describes a transit gateway.</p>
@@ -1202,6 +1295,248 @@ export interface CreateTransitGatewayConnectPeerResult {
      */
     TransitGatewayConnectPeer?: TransitGatewayConnectPeer | undefined;
 }
+/**
+ * @public
+ */
+export interface CreateTransitGatewayMeteringPolicyRequest {
+    /**
+     * <p>The ID of the transit gateway for which to create the metering policy.</p>
+     * @public
+     */
+    TransitGatewayId: string | undefined;
+    /**
+     * <p>The IDs of the middlebox attachments to include in the metering policy.</p>
+     * @public
+     */
+    MiddleboxAttachmentIds?: string[] | undefined;
+    /**
+     * <p>The tags to assign to the metering policy.</p>
+     * @public
+     */
+    TagSpecifications?: TagSpecification[] | undefined;
+    /**
+     * <p>Checks whether you have the required permissions for the action, without actually making the request,
+     *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+     *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+     * @public
+     */
+    DryRun?: boolean | undefined;
+}
+/**
+ * <p>Describes a transit gateway metering policy.</p>
+ * @public
+ */
+export interface TransitGatewayMeteringPolicy {
+    /**
+     * <p>The ID of the transit gateway metering policy.</p>
+     * @public
+     */
+    TransitGatewayMeteringPolicyId?: string | undefined;
+    /**
+     * <p>The ID of the transit gateway associated with the metering policy.</p>
+     * @public
+     */
+    TransitGatewayId?: string | undefined;
+    /**
+     * <p>The IDs of the middlebox attachments associated with the metering policy.</p>
+     * @public
+     */
+    MiddleboxAttachmentIds?: string[] | undefined;
+    /**
+     * <p>The state of the transit gateway metering policy.</p>
+     * @public
+     */
+    State?: TransitGatewayMeteringPolicyState | undefined;
+    /**
+     * <p>The date and time when the metering policy update becomes effective.</p>
+     * @public
+     */
+    UpdateEffectiveAt?: Date | undefined;
+    /**
+     * <p>The tags assigned to the transit gateway metering policy.</p>
+     * @public
+     */
+    Tags?: Tag[] | undefined;
+}
+/**
+ * @public
+ */
+export interface CreateTransitGatewayMeteringPolicyResult {
+    /**
+     * <p>Information about the created transit gateway metering policy.</p>
+     * @public
+     */
+    TransitGatewayMeteringPolicy?: TransitGatewayMeteringPolicy | undefined;
+}
+/**
+ * @public
+ */
+export interface CreateTransitGatewayMeteringPolicyEntryRequest {
+    /**
+     * <p>The ID of the transit gateway metering policy to add the entry to.</p>
+     * @public
+     */
+    TransitGatewayMeteringPolicyId: string | undefined;
+    /**
+     * <p>The rule number for the metering policy entry. Rules are processed in order from lowest to highest number.</p>
+     * @public
+     */
+    PolicyRuleNumber: number | undefined;
+    /**
+     * <p>The ID of the source transit gateway attachment for traffic matching.</p>
+     * @public
+     */
+    SourceTransitGatewayAttachmentId?: string | undefined;
+    /**
+     * <p>The type of the source transit gateway attachment for traffic matching. Note that the <code>tgw-peering</code> resource type has been deprecated. To configure metering policies for Connect, use the transport attachment type.</p>
+     * @public
+     */
+    SourceTransitGatewayAttachmentType?: TransitGatewayAttachmentResourceType | undefined;
+    /**
+     * <p>The source CIDR block for traffic matching.</p>
+     * @public
+     */
+    SourceCidrBlock?: string | undefined;
+    /**
+     * <p>The source port range for traffic matching.</p>
+     * @public
+     */
+    SourcePortRange?: string | undefined;
+    /**
+     * <p>The ID of the destination transit gateway attachment for traffic matching.</p>
+     * @public
+     */
+    DestinationTransitGatewayAttachmentId?: string | undefined;
+    /**
+     * <p>The type of the destination transit gateway attachment for traffic matching. Note that the <code>tgw-peering</code> resource type has been deprecated. To configure metering policies for Connect, use the transport attachment type.</p>
+     * @public
+     */
+    DestinationTransitGatewayAttachmentType?: TransitGatewayAttachmentResourceType | undefined;
+    /**
+     * <p>The destination CIDR block for traffic matching.</p>
+     * @public
+     */
+    DestinationCidrBlock?: string | undefined;
+    /**
+     * <p>The destination port range for traffic matching.</p>
+     * @public
+     */
+    DestinationPortRange?: string | undefined;
+    /**
+     * <p>The protocol for traffic matching (1, 6, 17, etc.).</p>
+     * @public
+     */
+    Protocol?: string | undefined;
+    /**
+     * <p>The Amazon Web Services account ID to which the metered traffic should be attributed.</p>
+     * @public
+     */
+    MeteredAccount: TransitGatewayMeteringPayerType | undefined;
+    /**
+     * <p>Checks whether you have the required permissions for the action, without actually making the request,
+     *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+     *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+     * @public
+     */
+    DryRun?: boolean | undefined;
+}
+/**
+ * <p>Describes the traffic matching criteria for a transit gateway metering policy rule.</p>
+ * @public
+ */
+export interface TransitGatewayMeteringPolicyRule {
+    /**
+     * <p>The ID of the source transit gateway attachment.</p>
+     * @public
+     */
+    SourceTransitGatewayAttachmentId?: string | undefined;
+    /**
+     * <p>The type of the source transit gateway attachment. Note that the <code>tgw-peering</code> resource type has been deprecated. To configure metering policies for Connect, use the transport attachment type.</p>
+     * @public
+     */
+    SourceTransitGatewayAttachmentType?: TransitGatewayAttachmentResourceType | undefined;
+    /**
+     * <p>The source CIDR block for the rule.</p>
+     * @public
+     */
+    SourceCidrBlock?: string | undefined;
+    /**
+     * <p>The source port range for the rule.</p>
+     * @public
+     */
+    SourcePortRange?: string | undefined;
+    /**
+     * <p>The ID of the destination transit gateway attachment.</p>
+     * @public
+     */
+    DestinationTransitGatewayAttachmentId?: string | undefined;
+    /**
+     * <p>The type of the destination transit gateway attachment. Note that the <code>tgw-peering</code> resource type has been deprecated. To configure metering policies for Connect, use the transport attachment type.</p>
+     * @public
+     */
+    DestinationTransitGatewayAttachmentType?: TransitGatewayAttachmentResourceType | undefined;
+    /**
+     * <p>The destination CIDR block for the rule.</p>
+     * @public
+     */
+    DestinationCidrBlock?: string | undefined;
+    /**
+     * <p>The destination port range for the rule.</p>
+     * @public
+     */
+    DestinationPortRange?: string | undefined;
+    /**
+     * <p>The protocol for the rule (1, 6, 17, etc.).</p>
+     * @public
+     */
+    Protocol?: string | undefined;
+}
+/**
+ * <p>Describes an entry in a transit gateway metering policy.</p>
+ * @public
+ */
+export interface TransitGatewayMeteringPolicyEntry {
+    /**
+     * <p>The rule number of the metering policy entry.</p>
+     * @public
+     */
+    PolicyRuleNumber?: string | undefined;
+    /**
+     * <p>The Amazon Web Services account ID to which the metered traffic is attributed.</p>
+     * @public
+     */
+    MeteredAccount?: TransitGatewayMeteringPayerType | undefined;
+    /**
+     * <p>The state of the metering policy entry.</p>
+     * @public
+     */
+    State?: TransitGatewayMeteringPolicyEntryState | undefined;
+    /**
+     * <p>The date and time when the metering policy entry was last updated.</p>
+     * @public
+     */
+    UpdatedAt?: Date | undefined;
+    /**
+     * <p>The date and time when the metering policy entry update becomes effective.</p>
+     * @public
+     */
+    UpdateEffectiveAt?: Date | undefined;
+    /**
+     * <p>The metering policy rule that defines traffic matching criteria.</p>
+     * @public
+     */
+    MeteringPolicyRule?: TransitGatewayMeteringPolicyRule | undefined;
+}
+/**
+ * @public
+ */
+export interface CreateTransitGatewayMeteringPolicyEntryResult {
+    /**
+     * <p>Information about the created transit gateway metering policy entry.</p>
+     * @public
+     */
+    TransitGatewayMeteringPolicyEntry?: TransitGatewayMeteringPolicyEntry | undefined;
+}
 /**
  * <p>The options for the transit gateway multicast domain.</p>
  * @public
@@ -3016,6 +3351,58 @@ export interface CreateVolumeRequest {
      */
     DryRun?: boolean | undefined;
 }
+/**
+ * <p>Describes the configuration settings for VPC Encryption Control.</p>
+ *          <p>For more information, see <a href="https://docs.aws.amazon.com/vpc/latest/userguide/vpc-encryption-controls.html">Enforce VPC encryption in transit</a> in the <i>Amazon VPC User Guide</i>.</p>
+ * @public
+ */
+export interface VpcEncryptionControlConfiguration {
+    /**
+     * <p>The encryption mode for the VPC Encryption Control configuration.</p>
+     * @public
+     */
+    Mode: VpcEncryptionControlMode | undefined;
+    /**
+     * <p>Specifies whether to exclude internet gateway traffic from encryption enforcement.</p>
+     * @public
+     */
+    InternetGatewayExclusion?: VpcEncryptionControlExclusionStateInput | undefined;
+    /**
+     * <p>Specifies whether to exclude egress-only internet gateway traffic from encryption enforcement.</p>
+     * @public
+     */
+    EgressOnlyInternetGatewayExclusion?: VpcEncryptionControlExclusionStateInput | undefined;
+    /**
+     * <p>Specifies whether to exclude NAT gateway traffic from encryption enforcement.</p>
+     * @public
+     */
+    NatGatewayExclusion?: VpcEncryptionControlExclusionStateInput | undefined;
+    /**
+     * <p>Specifies whether to exclude virtual private gateway traffic from encryption enforcement.</p>
+     * @public
+     */
+    VirtualPrivateGatewayExclusion?: VpcEncryptionControlExclusionStateInput | undefined;
+    /**
+     * <p>Specifies whether to exclude VPC peering connection traffic from encryption enforcement.</p>
+     * @public
+     */
+    VpcPeeringExclusion?: VpcEncryptionControlExclusionStateInput | undefined;
+    /**
+     * <p>Specifies whether to exclude Lambda function traffic from encryption enforcement.</p>
+     * @public
+     */
+    LambdaExclusion?: VpcEncryptionControlExclusionStateInput | undefined;
+    /**
+     * <p>Specifies whether to exclude VPC Lattice traffic from encryption enforcement.</p>
+     * @public
+     */
+    VpcLatticeExclusion?: VpcEncryptionControlExclusionStateInput | undefined;
+    /**
+     * <p>Specifies whether to exclude Elastic File System traffic from encryption enforcement.</p>
+     * @public
+     */
+    ElasticFileSystemExclusion?: VpcEncryptionControlExclusionStateInput | undefined;
+}
 /**
  * @public
  */
@@ -3065,6 +3452,12 @@ export interface CreateVpcRequest {
      * @public
      */
     Ipv6CidrBlockNetworkBorderGroup?: string | undefined;
+    /**
+     * <p>Specifies the encryption control configuration to apply to the VPC during creation. VPC Encryption Control enables you to enforce encryption for all data in transit within and between VPCs to meet compliance requirements.</p>
+     *          <p>For more information, see <a href="https://docs.aws.amazon.com/vpc/latest/userguide/vpc-encryption-controls.html">Enforce VPC encryption in transit</a> in the <i>Amazon VPC User Guide</i>.</p>
+     * @public
+     */
+    VpcEncryptionControl?: VpcEncryptionControlConfiguration | undefined;
     /**
      * <p>The tags to assign to the VPC.</p>
      * @public
@@ -3224,6 +3617,38 @@ export interface CreateVpcBlockPublicAccessExclusionResult {
      */
     VpcBlockPublicAccessExclusion?: VpcBlockPublicAccessExclusion | undefined;
 }
+/**
+ * @public
+ */
+export interface CreateVpcEncryptionControlRequest {
+    /**
+     * <p>Checks whether you have the required permissions for the action, without actually making the request,
+     *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
+     *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+     * @public
+     */
+    DryRun?: boolean | undefined;
+    /**
+     * <p>The ID of the VPC for which to create the encryption control configuration.</p>
+     * @public
+     */
+    VpcId: string | undefined;
+    /**
+     * <p>The tags to apply to the VPC Encryption Control resource.</p>
+     * @public
+     */
+    TagSpecifications?: TagSpecification[] | undefined;
+}
+/**
+ * @public
+ */
+export interface CreateVpcEncryptionControlResult {
+    /**
+     * <p>Information about the VPC Encryption Control configuration.</p>
+     * @public
+     */
+    VpcEncryptionControl?: VpcEncryptionControl | undefined;
+}
 /**
  * <p>Describes the DNS options for an endpoint.</p>
  * @public
@@ -4169,6 +4594,25 @@ export interface CloudWatchLogOptionsSpecification {
      * @public
      */
     LogOutputFormat?: string | undefined;
+    /**
+     * <p>Specifies whether to enable BGP logging for the VPN connection. Default value is <code>False</code>.</p>
+     *          <p>Valid values: <code>True</code> | <code>False</code>
+     *          </p>
+     * @public
+     */
+    BgpLogEnabled?: boolean | undefined;
+    /**
+     * <p>The Amazon Resource Name (ARN) of the CloudWatch log group where BGP logs will be sent.</p>
+     * @public
+     */
+    BgpLogGroupArn?: string | undefined;
+    /**
+     * <p>The desired output format for BGP logs to be sent to CloudWatch. Default format is <code>json</code>.</p>
+     *          <p>Valid values: <code>json</code> | <code>text</code>
+     *          </p>
+     * @public
+     */
+    BgpLogOutputFormat?: string | undefined;
 }
 /**
  * <p>Options for logging VPN tunnel activity.</p>
@@ -4646,6 +5090,25 @@ export interface CloudWatchLogOptions {
      * @public
      */
     LogOutputFormat?: string | undefined;
+    /**
+     * <p>Indicates whether Border Gateway Protocol (BGP) logging is enabled for the VPN connection. Default value is <code>False</code>.</p>
+     *          <p>Valid values: <code>True</code> | <code>False</code>
+     *          </p>
+     * @public
+     */
+    BgpLogEnabled?: boolean | undefined;
+    /**
+     * <p>The Amazon Resource Name (ARN) of the CloudWatch log group for BGP logs.</p>
+     * @public
+     */
+    BgpLogGroupArn?: string | undefined;
+    /**
+     * <p>The output format for BGP logs sent to CloudWatch. Default format is <code>json</code>.</p>
+     *          <p>Valid values: <code>json</code> | <code>text</code>
+     *          </p>
+     * @public
+     */
+    BgpLogOutputFormat?: string | undefined;
 }
 /**
  * <p>Options for logging VPN tunnel activity.</p>
@@ -7173,98 +7636,12 @@ export interface DeleteTransitGatewayConnectPeerResult {
 /**
  * @public
  */
-export interface DeleteTransitGatewayMulticastDomainRequest {
-    /**
-     * <p>The ID of the transit gateway multicast domain.</p>
-     * @public
-     */
-    TransitGatewayMulticastDomainId: string | undefined;
-    /**
-     * <p>Checks whether you have the required permissions for the action, without actually making the request,
-     *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-     *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
-     * @public
-     */
-    DryRun?: boolean | undefined;
-}
-/**
- * @public
- */
-export interface DeleteTransitGatewayMulticastDomainResult {
-    /**
-     * <p>Information about the deleted transit gateway multicast domain.</p>
-     * @public
-     */
-    TransitGatewayMulticastDomain?: TransitGatewayMulticastDomain | undefined;
-}
-/**
- * @public
- */
-export interface DeleteTransitGatewayPeeringAttachmentRequest {
-    /**
-     * <p>The ID of the transit gateway peering attachment.</p>
-     * @public
-     */
-    TransitGatewayAttachmentId: string | undefined;
-    /**
-     * <p>Checks whether you have the required permissions for the action, without actually making the request,
-     *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-     *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
-     * @public
-     */
-    DryRun?: boolean | undefined;
-}
-/**
- * @public
- */
-export interface DeleteTransitGatewayPeeringAttachmentResult {
-    /**
-     * <p>The transit gateway peering attachment.</p>
-     * @public
-     */
-    TransitGatewayPeeringAttachment?: TransitGatewayPeeringAttachment | undefined;
-}
-/**
- * @public
- */
-export interface DeleteTransitGatewayPolicyTableRequest {
-    /**
-     * <p>The transit gateway policy table to delete.</p>
-     * @public
-     */
-    TransitGatewayPolicyTableId: string | undefined;
-    /**
-     * <p>Checks whether you have the required permissions for the action, without actually making the request,
-     *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-     *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
-     * @public
-     */
-    DryRun?: boolean | undefined;
-}
-/**
- * @public
- */
-export interface DeleteTransitGatewayPolicyTableResult {
-    /**
-     * <p>Provides details about the deleted transit gateway policy table.</p>
-     * @public
-     */
-    TransitGatewayPolicyTable?: TransitGatewayPolicyTable | undefined;
-}
-/**
- * @public
- */
-export interface DeleteTransitGatewayPrefixListReferenceRequest {
+export interface DeleteTransitGatewayMeteringPolicyRequest {
     /**
-     * <p>The ID of the route table.</p>
-     * @public
-     */
-    TransitGatewayRouteTableId: string | undefined;
-    /**
-     * <p>The ID of the prefix list.</p>
+     * <p>The ID of the transit gateway metering policy to delete.</p>
      * @public
      */
-    PrefixListId: string | undefined;
+    TransitGatewayMeteringPolicyId: string | undefined;
     /**
      * <p>Checks whether you have the required permissions for the action, without actually making the request,
      *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
@@ -7276,54 +7653,27 @@ export interface DeleteTransitGatewayPrefixListReferenceRequest {
 /**
  * @public
  */
-export interface DeleteTransitGatewayPrefixListReferenceResult {
-    /**
-     * <p>Information about the deleted prefix list reference.</p>
-     * @public
-     */
-    TransitGatewayPrefixListReference?: TransitGatewayPrefixListReference | undefined;
-}
-/**
- * @public
- */
-export interface DeleteTransitGatewayRouteRequest {
-    /**
-     * <p>The ID of the transit gateway route table.</p>
-     * @public
-     */
-    TransitGatewayRouteTableId: string | undefined;
-    /**
-     * <p>The CIDR range for the route. This must match the CIDR for the route exactly.</p>
-     * @public
-     */
-    DestinationCidrBlock: string | undefined;
+export interface DeleteTransitGatewayMeteringPolicyResult {
     /**
-     * <p>Checks whether you have the required permissions for the action, without actually making the request,
-     *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-     *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+     * <p>Information about the deleted transit gateway metering policy.</p>
      * @public
      */
-    DryRun?: boolean | undefined;
+    TransitGatewayMeteringPolicy?: TransitGatewayMeteringPolicy | undefined;
 }
 /**
  * @public
  */
-export interface DeleteTransitGatewayRouteResult {
+export interface DeleteTransitGatewayMeteringPolicyEntryRequest {
     /**
-     * <p>Information about the route.</p>
+     * <p>The ID of the transit gateway metering policy containing the entry to delete.</p>
      * @public
      */
-    Route?: TransitGatewayRoute | undefined;
-}
-/**
- * @public
- */
-export interface DeleteTransitGatewayRouteTableRequest {
+    TransitGatewayMeteringPolicyId: string | undefined;
     /**
-     * <p>The ID of the transit gateway route table.</p>
+     * <p>The rule number of the metering policy entry to delete.</p>
      * @public
      */
-    TransitGatewayRouteTableId: string | undefined;
+    PolicyRuleNumber: number | undefined;
     /**
      * <p>Checks whether you have the required permissions for the action, without actually making the request,
      *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
@@ -7335,22 +7685,22 @@ export interface DeleteTransitGatewayRouteTableRequest {
 /**
  * @public
  */
-export interface DeleteTransitGatewayRouteTableResult {
+export interface DeleteTransitGatewayMeteringPolicyEntryResult {
     /**
-     * <p>Information about the deleted transit gateway route table.</p>
+     * <p>Information about the deleted transit gateway metering policy entry.</p>
      * @public
      */
-    TransitGatewayRouteTable?: TransitGatewayRouteTable | undefined;
+    TransitGatewayMeteringPolicyEntry?: TransitGatewayMeteringPolicyEntry | undefined;
 }
 /**
  * @public
  */
-export interface DeleteTransitGatewayRouteTableAnnouncementRequest {
+export interface DeleteTransitGatewayMulticastDomainRequest {
     /**
-     * <p>The transit gateway route table ID that's being deleted. </p>
+     * <p>The ID of the transit gateway multicast domain.</p>
      * @public
      */
-    TransitGatewayRouteTableAnnouncementId: string | undefined;
+    TransitGatewayMulticastDomainId: string | undefined;
     /**
      * <p>Checks whether you have the required permissions for the action, without actually making the request,
      *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
@@ -7362,19 +7712,19 @@ export interface DeleteTransitGatewayRouteTableAnnouncementRequest {
 /**
  * @public
  */
-export interface DeleteTransitGatewayRouteTableAnnouncementResult {
+export interface DeleteTransitGatewayMulticastDomainResult {
     /**
-     * <p>Provides details about a deleted transit gateway route table.</p>
+     * <p>Information about the deleted transit gateway multicast domain.</p>
      * @public
      */
-    TransitGatewayRouteTableAnnouncement?: TransitGatewayRouteTableAnnouncement | undefined;
+    TransitGatewayMulticastDomain?: TransitGatewayMulticastDomain | undefined;
 }
 /**
  * @public
  */
-export interface DeleteTransitGatewayVpcAttachmentRequest {
+export interface DeleteTransitGatewayPeeringAttachmentRequest {
     /**
-     * <p>The ID of the attachment.</p>
+     * <p>The ID of the transit gateway peering attachment.</p>
      * @public
      */
     TransitGatewayAttachmentId: string | undefined;
@@ -7389,121 +7739,22 @@ export interface DeleteTransitGatewayVpcAttachmentRequest {
 /**
  * @public
  */
-export interface DeleteTransitGatewayVpcAttachmentResult {
-    /**
-     * <p>Information about the deleted VPC attachment.</p>
-     * @public
-     */
-    TransitGatewayVpcAttachment?: TransitGatewayVpcAttachment | undefined;
-}
-/**
- * @public
- */
-export interface DeleteVerifiedAccessEndpointRequest {
-    /**
-     * <p>The ID of the Verified Access endpoint.</p>
-     * @public
-     */
-    VerifiedAccessEndpointId: string | undefined;
-    /**
-     * <p>A unique, case-sensitive token that you provide to ensure idempotency of your
-     *             modification request. For more information, see <a href="https://docs.aws.amazon.com/ec2/latest/devguide/ec2-api-idempotency.html">Ensuring idempotency</a>.</p>
-     * @public
-     */
-    ClientToken?: string | undefined;
-    /**
-     * <p>Checks whether you have the required permissions for the action, without actually making the request,
-     *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-     *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
-     * @public
-     */
-    DryRun?: boolean | undefined;
-}
-/**
- * @public
- */
-export interface DeleteVerifiedAccessEndpointResult {
-    /**
-     * <p>Details about the Verified Access endpoint.</p>
-     * @public
-     */
-    VerifiedAccessEndpoint?: VerifiedAccessEndpoint | undefined;
-}
-/**
- * @public
- */
-export interface DeleteVerifiedAccessGroupRequest {
-    /**
-     * <p>The ID of the Verified Access group.</p>
-     * @public
-     */
-    VerifiedAccessGroupId: string | undefined;
-    /**
-     * <p>A unique, case-sensitive token that you provide to ensure idempotency of your
-     *             modification request. For more information, see <a href="https://docs.aws.amazon.com/ec2/latest/devguide/ec2-api-idempotency.html">Ensuring idempotency</a>.</p>
-     * @public
-     */
-    ClientToken?: string | undefined;
-    /**
-     * <p>Checks whether you have the required permissions for the action, without actually making the request,
-     *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-     *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
-     * @public
-     */
-    DryRun?: boolean | undefined;
-}
-/**
- * @public
- */
-export interface DeleteVerifiedAccessGroupResult {
-    /**
-     * <p>Details about the Verified Access group.</p>
-     * @public
-     */
-    VerifiedAccessGroup?: VerifiedAccessGroup | undefined;
-}
-/**
- * @public
- */
-export interface DeleteVerifiedAccessInstanceRequest {
-    /**
-     * <p>The ID of the Verified Access instance.</p>
-     * @public
-     */
-    VerifiedAccessInstanceId: string | undefined;
-    /**
-     * <p>Checks whether you have the required permissions for the action, without actually making the request,
-     *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-     *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
-     * @public
-     */
-    DryRun?: boolean | undefined;
-    /**
-     * <p>A unique, case-sensitive token that you provide to ensure idempotency of your
-     *             modification request. For more information, see <a href="https://docs.aws.amazon.com/ec2/latest/devguide/ec2-api-idempotency.html">Ensuring idempotency</a>.</p>
-     * @public
-     */
-    ClientToken?: string | undefined;
-}
-/**
- * @public
- */
-export interface DeleteVerifiedAccessInstanceResult {
+export interface DeleteTransitGatewayPeeringAttachmentResult {
     /**
-     * <p>Details about the Verified Access instance.</p>
+     * <p>The transit gateway peering attachment.</p>
      * @public
      */
-    VerifiedAccessInstance?: VerifiedAccessInstance | undefined;
+    TransitGatewayPeeringAttachment?: TransitGatewayPeeringAttachment | undefined;
 }
 /**
  * @public
  */
-export interface DeleteVerifiedAccessTrustProviderRequest {
+export interface DeleteTransitGatewayPolicyTableRequest {
     /**
-     * <p>The ID of the Verified Access trust provider.</p>
+     * <p>The transit gateway policy table to delete.</p>
      * @public
      */
-    VerifiedAccessTrustProviderId: string | undefined;
+    TransitGatewayPolicyTableId: string | undefined;
     /**
      * <p>Checks whether you have the required permissions for the action, without actually making the request,
      *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
@@ -7511,37 +7762,14 @@ export interface DeleteVerifiedAccessTrustProviderRequest {
      * @public
      */
     DryRun?: boolean | undefined;
-    /**
-     * <p>A unique, case-sensitive token that you provide to ensure idempotency of your
-     *             modification request. For more information, see <a href="https://docs.aws.amazon.com/ec2/latest/devguide/ec2-api-idempotency.html">Ensuring idempotency</a>.</p>
-     * @public
-     */
-    ClientToken?: string | undefined;
 }
 /**
  * @public
  */
-export interface DeleteVerifiedAccessTrustProviderResult {
-    /**
-     * <p>Details about the Verified Access trust provider.</p>
-     * @public
-     */
-    VerifiedAccessTrustProvider?: VerifiedAccessTrustProvider | undefined;
-}
-/**
- * @public
- */
-export interface DeleteVolumeRequest {
-    /**
-     * <p>The ID of the volume.</p>
-     * @public
-     */
-    VolumeId: string | undefined;
+export interface DeleteTransitGatewayPolicyTableResult {
     /**
-     * <p>Checks whether you have the required permissions for the action, without actually making the request,
-     *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-     *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+     * <p>Provides details about the deleted transit gateway policy table.</p>
      * @public
      */
-    DryRun?: boolean | undefined;
+    TransitGatewayPolicyTable?: TransitGatewayPolicyTable | undefined;
 }