@aws-sdk/client-fms 3.295.0 → 3.297.0

package/dist-types/models/models_0.d.ts

@@ -1,5 +1,8 @@
 import { ExceptionOptionType as __ExceptionOptionType } from "@aws-sdk/smithy-client";
 import { FMSServiceException as __BaseException } from "./FMSServiceException";
+/**
+ * @public
+ */
 export declare enum AccountRoleStatus {
     Creating = "CREATING",
     Deleted = "DELETED",
@@ -8,6 +11,7 @@ export declare enum AccountRoleStatus {
     Ready = "READY"
 }
 /**
+ * @public
  * <p>Describes a remediation action target.</p>
  */
 export interface ActionTarget {
@@ -21,6 +25,7 @@ export interface ActionTarget {
     Description?: string;
 }
 /**
+ * @public
  * <p>An individual Firewall Manager application.</p>
  */
 export interface App {
@@ -38,6 +43,7 @@ export interface App {
     Port: number | undefined;
 }
 /**
+ * @public
  * <p>An Firewall Manager applications list.</p>
  */
 export interface AppsListData {
@@ -73,6 +79,7 @@ export interface AppsListData {
     PreviousAppsList?: Record<string, App[]>;
 }
 /**
+ * @public
  * <p>Details of the Firewall Manager applications list.</p>
  */
 export interface AppsListDataSummary {
@@ -93,6 +100,9 @@ export interface AppsListDataSummary {
      */
     AppsList?: App[];
 }
+/**
+ * @public
+ */
 export interface AssociateAdminAccountRequest {
     /**
      * <p>The Amazon Web Services account ID to associate with Firewall Manager as the Firewall Manager
@@ -103,6 +113,7 @@ export interface AssociateAdminAccountRequest {
     AdminAccount: string | undefined;
 }
 /**
+ * @public
  * <p>The operation failed because of a system problem, even though the request was valid. Retry
  *       your request.</p>
  */
@@ -116,6 +127,7 @@ export declare class InternalErrorException extends __BaseException {
     constructor(opts: __ExceptionOptionType<InternalErrorException, __BaseException>);
 }
 /**
+ * @public
  * <p>The parameters of the request were invalid.</p>
  */
 export declare class InvalidInputException extends __BaseException {
@@ -128,6 +140,7 @@ export declare class InvalidInputException extends __BaseException {
     constructor(opts: __ExceptionOptionType<InvalidInputException, __BaseException>);
 }
 /**
+ * @public
  * <p>The operation failed because there was nothing to do or the operation wasn't possible. For example, you might have
  *         submitted an <code>AssociateAdminAccount</code> request for an account ID that
  *             was already set as the Firewall Manager administrator. Or you might have tried to access a Region
@@ -144,6 +157,7 @@ export declare class InvalidOperationException extends __BaseException {
     constructor(opts: __ExceptionOptionType<InvalidOperationException, __BaseException>);
 }
 /**
+ * @public
  * <p>The operation exceeds a resource limit, for example, the maximum number of
  *         <code>policy</code> objects that you can create for an Amazon Web Services account. For more information,
  *       see <a href="https://docs.aws.amazon.com/waf/latest/developerguide/fms-limits.html">Firewall
@@ -159,6 +173,7 @@ export declare class LimitExceededException extends __BaseException {
     constructor(opts: __ExceptionOptionType<LimitExceededException, __BaseException>);
 }
 /**
+ * @public
  * <p>The specified resource was not found.</p>
  */
 export declare class ResourceNotFoundException extends __BaseException {
@@ -170,16 +185,25 @@ export declare class ResourceNotFoundException extends __BaseException {
      */
     constructor(opts: __ExceptionOptionType<ResourceNotFoundException, __BaseException>);
 }
+/**
+ * @public
+ */
 export declare enum ThirdPartyFirewall {
     FORTIGATE_CLOUD_NATIVE_FIREWALL = "FORTIGATE_CLOUD_NATIVE_FIREWALL",
     PALO_ALTO_NETWORKS_CLOUD_NGFW = "PALO_ALTO_NETWORKS_CLOUD_NGFW"
 }
+/**
+ * @public
+ */
 export interface AssociateThirdPartyFirewallRequest {
     /**
      * <p>The name of the third-party firewall vendor.</p>
      */
     ThirdPartyFirewall: ThirdPartyFirewall | string | undefined;
 }
+/**
+ * @public
+ */
 export declare enum ThirdPartyFirewallAssociationStatus {
     NOT_EXIST = "NOT_EXIST",
     OFFBOARDING = "OFFBOARDING",
@@ -187,6 +211,9 @@ export declare enum ThirdPartyFirewallAssociationStatus {
     ONBOARDING = "ONBOARDING",
     ONBOARD_COMPLETE = "ONBOARD_COMPLETE"
 }
+/**
+ * @public
+ */
 export interface AssociateThirdPartyFirewallResponse {
     /**
      * <p>The current status for setting a Firewall Manager policy administrator's account as an administrator of the third-party firewall tenant.</p>
@@ -216,6 +243,7 @@ export interface AssociateThirdPartyFirewallResponse {
     ThirdPartyFirewallStatus?: ThirdPartyFirewallAssociationStatus | string;
 }
 /**
+ * @public
  * <p>Violation detail for network interfaces associated with an EC2 instance.</p>
  */
 export interface AwsEc2NetworkInterfaceViolation {
@@ -229,6 +257,7 @@ export interface AwsEc2NetworkInterfaceViolation {
     ViolatingSecurityGroups?: string[];
 }
 /**
+ * @public
  * <p>Violation detail for an EC2 instance resource.</p>
  */
 export interface AwsEc2InstanceViolation {
@@ -241,6 +270,9 @@ export interface AwsEc2InstanceViolation {
      */
     AwsEc2NetworkInterfaceViolations?: AwsEc2NetworkInterfaceViolation[];
 }
+/**
+ * @public
+ */
 export interface BatchAssociateResourceRequest {
     /**
      * <p>A unique identifier for the resource set, used in a TODO to refer to the resource set.</p>
@@ -251,6 +283,9 @@ export interface BatchAssociateResourceRequest {
      */
     Items: string[] | undefined;
 }
+/**
+ * @public
+ */
 export declare enum FailedItemReason {
     NotValidAccountId = "NOT_VALID_ACCOUNT_ID",
     NotValidArn = "NOT_VALID_ARN",
@@ -260,6 +295,7 @@ export declare enum FailedItemReason {
     NotValidService = "NOT_VALID_SERVICE"
 }
 /**
+ * @public
  * <p>Details of a resource that failed when trying to update it's association to a resource set.</p>
  */
 export interface FailedItem {
@@ -272,6 +308,9 @@ export interface FailedItem {
      */
     Reason?: FailedItemReason | string;
 }
+/**
+ * @public
+ */
 export interface BatchAssociateResourceResponse {
     /**
      * <p>A unique identifier for the resource set, used in a TODO to refer to the resource set.</p>
@@ -282,6 +321,9 @@ export interface BatchAssociateResourceResponse {
      */
     FailedItems: FailedItem[] | undefined;
 }
+/**
+ * @public
+ */
 export interface BatchDisassociateResourceRequest {
     /**
      * <p>A unique identifier for the resource set, used in a TODO to refer to the resource set.</p>
@@ -292,6 +334,9 @@ export interface BatchDisassociateResourceRequest {
      */
     Items: string[] | undefined;
 }
+/**
+ * @public
+ */
 export interface BatchDisassociateResourceResponse {
     /**
      * <p>A unique identifier for the resource set, used in a TODO to refer to the resource set.</p>
@@ -302,6 +347,9 @@ export interface BatchDisassociateResourceResponse {
      */
     FailedItems: FailedItem[] | undefined;
 }
+/**
+ * @public
+ */
 export interface DeleteAppsListRequest {
     /**
      * <p>The ID of the applications list that you want to delete. You can retrieve this ID from
@@ -309,8 +357,14 @@ export interface DeleteAppsListRequest {
      */
     ListId: string | undefined;
 }
+/**
+ * @public
+ */
 export interface DeleteNotificationChannelRequest {
 }
+/**
+ * @public
+ */
 export interface DeletePolicyRequest {
     /**
      * <p>The ID of the policy that you want to delete. You can retrieve this ID from
@@ -351,6 +405,9 @@ export interface DeletePolicyRequest {
      */
     DeleteAllPolicyResources?: boolean;
 }
+/**
+ * @public
+ */
 export interface DeleteProtocolsListRequest {
     /**
      * <p>The ID of the protocols list that you want to delete. You can retrieve this ID from
@@ -358,28 +415,46 @@ export interface DeleteProtocolsListRequest {
      */
     ListId: string | undefined;
 }
+/**
+ * @public
+ */
 export interface DeleteResourceSetRequest {
     /**
      * <p>A unique identifier for the resource set, used in a TODO to refer to the resource set.</p>
      */
     Identifier: string | undefined;
 }
+/**
+ * @public
+ */
 export interface DisassociateAdminAccountRequest {
 }
+/**
+ * @public
+ */
 export interface DisassociateThirdPartyFirewallRequest {
     /**
      * <p>The name of the third-party firewall vendor.</p>
      */
     ThirdPartyFirewall: ThirdPartyFirewall | string | undefined;
 }
+/**
+ * @public
+ */
 export interface DisassociateThirdPartyFirewallResponse {
     /**
      * <p>The current status for the disassociation of a Firewall Manager administrators account with a third-party firewall.</p>
      */
     ThirdPartyFirewallStatus?: ThirdPartyFirewallAssociationStatus | string;
 }
+/**
+ * @public
+ */
 export interface GetAdminAccountRequest {
 }
+/**
+ * @public
+ */
 export interface GetAdminAccountResponse {
     /**
      * <p>The Amazon Web Services account that is set as the Firewall Manager administrator.</p>
@@ -391,6 +466,9 @@ export interface GetAdminAccountResponse {
      */
     RoleStatus?: AccountRoleStatus | string;
 }
+/**
+ * @public
+ */
 export interface GetAppsListRequest {
     /**
      * <p>The ID of the Firewall Manager applications list that you want the details for.</p>
@@ -401,6 +479,9 @@ export interface GetAppsListRequest {
      */
     DefaultList?: boolean;
 }
+/**
+ * @public
+ */
 export interface GetAppsListResponse {
     /**
      * <p>Information about the specified Firewall Manager applications list.</p>
@@ -411,6 +492,9 @@ export interface GetAppsListResponse {
      */
     AppsListArn?: string;
 }
+/**
+ * @public
+ */
 export interface GetComplianceDetailRequest {
     /**
      * <p>The ID of the policy that you want to get the details for. <code>PolicyId</code> is
@@ -422,12 +506,18 @@ export interface GetComplianceDetailRequest {
      */
     MemberAccount: string | undefined;
 }
+/**
+ * @public
+ */
 export declare enum DependentServiceName {
     AWSConfig = "AWSCONFIG",
     AWSShieldAdvanced = "AWSSHIELD_ADVANCED",
     AWSVirtualPrivateCloud = "AWSVPC",
     AWSWAF = "AWSWAF"
 }
+/**
+ * @public
+ */
 export declare enum ViolationReason {
     BlackHoleRouteDetected = "BLACK_HOLE_ROUTE_DETECTED",
     BlackHoleRouteDetectedInFirewallSubnet = "BLACK_HOLE_ROUTE_DETECTED_IN_FIREWALL_SUBNET",
@@ -459,6 +549,7 @@ export declare enum ViolationReason {
     WebAclMissingRuleGroup = "WEB_ACL_MISSING_RULE_GROUP"
 }
 /**
+ * @public
  * <p>Details of the resource that is not protected by the policy.</p>
  */
 export interface ComplianceViolator {
@@ -483,6 +574,7 @@ export interface ComplianceViolator {
     Metadata?: Record<string, string>;
 }
 /**
+ * @public
  * <p>Describes
  *       the noncompliant resources in a member account for a specific Firewall Manager policy. A maximum of 100 entries are displayed. If more than 100 resources are
  *       noncompliant, <code>EvaluationLimitExceeded</code> is set to <code>True</code>.</p>
@@ -521,6 +613,9 @@ export interface PolicyComplianceDetail {
      */
     IssueInfoMap?: Record<string, string>;
 }
+/**
+ * @public
+ */
 export interface GetComplianceDetailResponse {
     /**
      * <p>Information about the resources and the policy that you specified in the
@@ -528,8 +623,14 @@ export interface GetComplianceDetailResponse {
      */
     PolicyComplianceDetail?: PolicyComplianceDetail;
 }
+/**
+ * @public
+ */
 export interface GetNotificationChannelRequest {
 }
+/**
+ * @public
+ */
 export interface GetNotificationChannelResponse {
     /**
      * <p>The SNS topic that records Firewall Manager activity. </p>
@@ -540,17 +641,24 @@ export interface GetNotificationChannelResponse {
      */
     SnsRoleName?: string;
 }
+/**
+ * @public
+ */
 export interface GetPolicyRequest {
     /**
      * <p>The ID of the Firewall Manager policy that you want the details for.</p>
      */
     PolicyId: string | undefined;
 }
+/**
+ * @public
+ */
 export declare enum CustomerPolicyScopeIdType {
     ACCOUNT = "ACCOUNT",
     ORG_UNIT = "ORG_UNIT"
 }
 /**
+ * @public
  * <p>The resource tags that Firewall Manager uses to determine if a particular resource
  *       should be included or excluded from the Firewall Manager policy. Tags enable you to
  *       categorize your Amazon Web Services resources in different ways, for example, by purpose, owner, or
@@ -569,11 +677,15 @@ export interface ResourceTag {
      */
     Value?: string;
 }
+/**
+ * @public
+ */
 export declare enum FirewallDeploymentModel {
     CENTRALIZED = "CENTRALIZED",
     DISTRIBUTED = "DISTRIBUTED"
 }
 /**
+ * @public
  * <p>Configures the firewall policy deployment model of Network Firewall. For information about
  *          Network Firewall deployment models, see <a href="https://docs.aws.amazon.com/network-firewall/latest/developerguide/architectures.html">Network Firewall example
  *             architectures with routing</a> in the <i>Network Firewall Developer
@@ -587,6 +699,7 @@ export interface NetworkFirewallPolicy {
     FirewallDeploymentModel?: FirewallDeploymentModel | string;
 }
 /**
+ * @public
  * <p>Configures the deployment model for the third-party firewall.</p>
  */
 export interface ThirdPartyFirewallPolicy {
@@ -596,6 +709,7 @@ export interface ThirdPartyFirewallPolicy {
     FirewallDeploymentModel?: FirewallDeploymentModel | string;
 }
 /**
+ * @public
  * <p>Contains the Network Firewall firewall policy options to configure the policy's deployment model and third-party firewall policy settings.</p>
  */
 export interface PolicyOption {
@@ -608,6 +722,9 @@ export interface PolicyOption {
      */
     ThirdPartyFirewallPolicy?: ThirdPartyFirewallPolicy;
 }
+/**
+ * @public
+ */
 export declare enum SecurityServiceType {
     DNS_FIREWALL = "DNS_FIREWALL",
     IMPORT_NETWORK_FIREWALL = "IMPORT_NETWORK_FIREWALL",
@@ -621,6 +738,7 @@ export declare enum SecurityServiceType {
     WAFV2 = "WAFV2"
 }
 /**
+ * @public
  * <p>Details about the security service that is being used to protect the resources.</p>
  */
 export interface SecurityServicePolicyData {
@@ -639,7 +757,7 @@ export interface SecurityServicePolicyData {
      *                <p>Example: <code>DNS_FIREWALL</code>
      *                </p>
      *                <p>
-     *                   <code>"{\"type\":\"DNS_FIREWALL\",\"preProcessRuleGroups\":[{\"ruleGroupId\":\"rslvr-frg-1\",\"priority\":10}],\"postProcessRuleGroups\":[{\"ruleGroupId\":\"rslvr-frg-2\",\"priority\":9911}]}"</code>
+     *                   <code>"\{\"type\":\"DNS_FIREWALL\",\"preProcessRuleGroups\":[\{\"ruleGroupId\":\"rslvr-frg-1\",\"priority\":10\}],\"postProcessRuleGroups\":[\{\"ruleGroupId\":\"rslvr-frg-2\",\"priority\":9911\}]\}"</code>
      *                </p>
      *                <note>
      *                   <p>Valid values for <code>preProcessRuleGroups</code> are between 1 and 99. Valid
@@ -650,7 +768,7 @@ export interface SecurityServicePolicyData {
      *                <p>Example: <code>NETWORK_FIREWALL</code> - Centralized deployment
      *              model</p>
      *                <p>
-     *                   <code>"{\"type\":\"NETWORK_FIREWALL\",\"awsNetworkFirewallConfig\":{\"networkFirewallStatelessRuleGroupReferences\":[{\"resourceARN\":\"arn:aws:network-firewall:us-east-1:123456789011:stateless-rulegroup/test\",\"priority\":1}],\"networkFirewallStatelessDefaultActions\":[\"aws:forward_to_sfe\",\"customActionName\"],\"networkFirewallStatelessFragmentDefaultActions\":[\"aws:forward_to_sfe\",\"customActionName\"],\"networkFirewallStatelessCustomActions\":[{\"actionName\":\"customActionName\",\"actionDefinition\":{\"publishMetricAction\":{\"dimensions\":[{\"value\":\"metricdimensionvalue\"}]}}}],\"networkFirewallStatefulRuleGroupReferences\":[{\"resourceARN\":\"arn:aws:network-firewall:us-east-1:123456789011:stateful-rulegroup/test\"}],\"networkFirewallLoggingConfiguration\":{\"logDestinationConfigs\":[{\"logDestinationType\":\"S3\",\"logType\":\"ALERT\",\"logDestination\":{\"bucketName\":\"s3-bucket-name\"}},{\"logDestinationType\":\"S3\",\"logType\":\"FLOW\",\"logDestination\":{\"bucketName\":\"s3-bucket-name\"}}],\"overrideExistingConfig\":true}},\"firewallDeploymentModel\":{\"centralizedFirewallDeploymentModel\":{\"centralizedFirewallOrchestrationConfig\":{\"inspectionVpcIds\":[{\"resourceId\":\"vpc-1234\",\"accountId\":\"123456789011\"}],\"firewallCreationConfig\":{\"endpointLocation\":{\"availabilityZoneConfigList\":[{\"availabilityZoneId\":null,\"availabilityZoneName\":\"us-east-1a\",\"allowedIPV4CidrList\":[\"10.0.0.0/28\"]}]}},\"allowedIPV4CidrList\":[]}}}}"</code>
+     *                   <code>"\{\"type\":\"NETWORK_FIREWALL\",\"awsNetworkFirewallConfig\":\{\"networkFirewallStatelessRuleGroupReferences\":[\{\"resourceARN\":\"arn:aws:network-firewall:us-east-1:123456789011:stateless-rulegroup/test\",\"priority\":1\}],\"networkFirewallStatelessDefaultActions\":[\"aws:forward_to_sfe\",\"customActionName\"],\"networkFirewallStatelessFragmentDefaultActions\":[\"aws:forward_to_sfe\",\"customActionName\"],\"networkFirewallStatelessCustomActions\":[\{\"actionName\":\"customActionName\",\"actionDefinition\":\{\"publishMetricAction\":\{\"dimensions\":[\{\"value\":\"metricdimensionvalue\"\}]\}\}\}],\"networkFirewallStatefulRuleGroupReferences\":[\{\"resourceARN\":\"arn:aws:network-firewall:us-east-1:123456789011:stateful-rulegroup/test\"\}],\"networkFirewallLoggingConfiguration\":\{\"logDestinationConfigs\":[\{\"logDestinationType\":\"S3\",\"logType\":\"ALERT\",\"logDestination\":\{\"bucketName\":\"s3-bucket-name\"\}\},\{\"logDestinationType\":\"S3\",\"logType\":\"FLOW\",\"logDestination\":\{\"bucketName\":\"s3-bucket-name\"\}\}],\"overrideExistingConfig\":true\}\},\"firewallDeploymentModel\":\{\"centralizedFirewallDeploymentModel\":\{\"centralizedFirewallOrchestrationConfig\":\{\"inspectionVpcIds\":[\{\"resourceId\":\"vpc-1234\",\"accountId\":\"123456789011\"\}],\"firewallCreationConfig\":\{\"endpointLocation\":\{\"availabilityZoneConfigList\":[\{\"availabilityZoneId\":null,\"availabilityZoneName\":\"us-east-1a\",\"allowedIPV4CidrList\":[\"10.0.0.0/28\"]\}]\}\},\"allowedIPV4CidrList\":[]\}\}\}\}"</code>
      *                </p>
      *                <p> To use the centralized deployment model, you must set <a href="https://docs.aws.amazon.com/fms/2018-01-01/APIReference/API_PolicyOption.html">PolicyOption</a> to
      *                 <code>CENTRALIZED</code>. </p>
@@ -660,7 +778,7 @@ export interface SecurityServicePolicyData {
      *               automatic Availability Zone configuration</p>
      *                <p>
      *                   <code>
-     *                 "{\"type\":\"NETWORK_FIREWALL\",\"networkFirewallStatelessRuleGroupReferences\":[{\"resourceARN\":\"arn:aws:network-firewall:us-east-1:123456789011:stateless-rulegroup/test\",\"priority\":1}],\"networkFirewallStatelessDefaultActions\":[\"aws:forward_to_sfe\",\"customActionName\"],\"networkFirewallStatelessFragmentDefaultActions\":[\"aws:forward_to_sfe\",\"customActionName\"],\"networkFirewallStatelessCustomActions\":[{\"actionName\":\"customActionName\",\"actionDefinition\":{\"publishMetricAction\":{\"dimensions\":[{\"value\":\"metricdimensionvalue\"}]}}}],\"networkFirewallStatefulRuleGroupReferences\":[{\"resourceARN\":\"arn:aws:network-firewall:us-east-1:123456789011:stateful-rulegroup/test\"}],\"networkFirewallOrchestrationConfig\":{\"singleFirewallEndpointPerVPC\":false,\"allowedIPV4CidrList\":[\"10.0.0.0/28\",\"192.168.0.0/28\"],\"routeManagementAction\":\"OFF\"},\"networkFirewallLoggingConfiguration\":{\"logDestinationConfigs\":[{\"logDestinationType\":\"S3\",\"logType\":\"ALERT\",\"logDestination\":{\"bucketName\":\"s3-bucket-name\"}},{\"logDestinationType\":\"S3\",\"logType\":\"FLOW\",\"logDestination\":{\"bucketName\":\"s3-bucket-name\"}}],\"overrideExistingConfig\":true}}"
+     *                 "\{\"type\":\"NETWORK_FIREWALL\",\"networkFirewallStatelessRuleGroupReferences\":[\{\"resourceARN\":\"arn:aws:network-firewall:us-east-1:123456789011:stateless-rulegroup/test\",\"priority\":1\}],\"networkFirewallStatelessDefaultActions\":[\"aws:forward_to_sfe\",\"customActionName\"],\"networkFirewallStatelessFragmentDefaultActions\":[\"aws:forward_to_sfe\",\"customActionName\"],\"networkFirewallStatelessCustomActions\":[\{\"actionName\":\"customActionName\",\"actionDefinition\":\{\"publishMetricAction\":\{\"dimensions\":[\{\"value\":\"metricdimensionvalue\"\}]\}\}\}],\"networkFirewallStatefulRuleGroupReferences\":[\{\"resourceARN\":\"arn:aws:network-firewall:us-east-1:123456789011:stateful-rulegroup/test\"\}],\"networkFirewallOrchestrationConfig\":\{\"singleFirewallEndpointPerVPC\":false,\"allowedIPV4CidrList\":[\"10.0.0.0/28\",\"192.168.0.0/28\"],\"routeManagementAction\":\"OFF\"\},\"networkFirewallLoggingConfiguration\":\{\"logDestinationConfigs\":[\{\"logDestinationType\":\"S3\",\"logType\":\"ALERT\",\"logDestination\":\{\"bucketName\":\"s3-bucket-name\"\}\},\{\"logDestinationType\":\"S3\",\"logType\":\"FLOW\",\"logDestination\":\{\"bucketName\":\"s3-bucket-name\"\}\}],\"overrideExistingConfig\":true\}\}"
      *               </code>
      *                </p>
      *                <p> With automatic Availbility Zone configuration, Firewall Manager chooses which Availability Zones to create the endpoints in. To use the distributed deployment model, you must set <a href="https://docs.aws.amazon.com/fms/2018-01-01/APIReference/API_PolicyOption.html">PolicyOption</a> to
@@ -671,7 +789,7 @@ export interface SecurityServicePolicyData {
      *               automatic Availability Zone configuration and route management</p>
      *                <p>
      *                   <code>
-     *                 "{\"type\":\"NETWORK_FIREWALL\",\"networkFirewallStatelessRuleGroupReferences\":[{\"resourceARN\":\"arn:aws:network-firewall:us-east-1:123456789011:stateless-rulegroup/test\",\"priority\":1}],\"networkFirewallStatelessDefaultActions\":[\"aws:forward_to_sfe\",\"customActionName\"],\"networkFirewallStatelessFragmentDefaultActions\":[\"aws:forward_to_sfe\",\"customActionName\"],\"networkFirewallStatelessCustomActions\":[{\"actionName\":\"customActionName\",\"actionDefinition\":{\"publishMetricAction\":{\"dimensions\":[{\"value\":\"metricdimensionvalue\"}]}}}],\"networkFirewallStatefulRuleGroupReferences\":[{\"resourceARN\":\"arn:aws:network-firewall:us-east-1:123456789011:stateful-rulegroup/test\"}],\"networkFirewallOrchestrationConfig\":{\"singleFirewallEndpointPerVPC\":false,\"allowedIPV4CidrList\":[\"10.0.0.0/28\",\"192.168.0.0/28\"],\"routeManagementAction\":\"MONITOR\",\"routeManagementTargetTypes\":[\"InternetGateway\"]},\"networkFirewallLoggingConfiguration\":{\"logDestinationConfigs\":[{\"logDestinationType\":\"S3\",\"logType\":\"ALERT\",\"logDestination\":{\"bucketName\":\"s3-bucket-name\"}},{\"logDestinationType\":\"S3\",\"logType\": \"FLOW\",\"logDestination\":{\"bucketName\":\"s3-bucket-name\"}}],\"overrideExistingConfig\":true}}"
+     *                 "\{\"type\":\"NETWORK_FIREWALL\",\"networkFirewallStatelessRuleGroupReferences\":[\{\"resourceARN\":\"arn:aws:network-firewall:us-east-1:123456789011:stateless-rulegroup/test\",\"priority\":1\}],\"networkFirewallStatelessDefaultActions\":[\"aws:forward_to_sfe\",\"customActionName\"],\"networkFirewallStatelessFragmentDefaultActions\":[\"aws:forward_to_sfe\",\"customActionName\"],\"networkFirewallStatelessCustomActions\":[\{\"actionName\":\"customActionName\",\"actionDefinition\":\{\"publishMetricAction\":\{\"dimensions\":[\{\"value\":\"metricdimensionvalue\"\}]\}\}\}],\"networkFirewallStatefulRuleGroupReferences\":[\{\"resourceARN\":\"arn:aws:network-firewall:us-east-1:123456789011:stateful-rulegroup/test\"\}],\"networkFirewallOrchestrationConfig\":\{\"singleFirewallEndpointPerVPC\":false,\"allowedIPV4CidrList\":[\"10.0.0.0/28\",\"192.168.0.0/28\"],\"routeManagementAction\":\"MONITOR\",\"routeManagementTargetTypes\":[\"InternetGateway\"]\},\"networkFirewallLoggingConfiguration\":\{\"logDestinationConfigs\":[\{\"logDestinationType\":\"S3\",\"logType\":\"ALERT\",\"logDestination\":\{\"bucketName\":\"s3-bucket-name\"\}\},\{\"logDestinationType\":\"S3\",\"logType\": \"FLOW\",\"logDestination\":\{\"bucketName\":\"s3-bucket-name\"\}\}],\"overrideExistingConfig\":true\}\}"
      *               </code>
      *                </p>
      *                <p>To use the distributed deployment model, you must set <a href="https://docs.aws.amazon.com/fms/2018-01-01/APIReference/API_PolicyOption.html">PolicyOption</a> to
@@ -681,7 +799,7 @@ export interface SecurityServicePolicyData {
      *                <p>Example: <code>NETWORK_FIREWALL</code> - Distributed deployment model with
      *               custom Availability Zone configuration</p>
      *                <p>
-     *                   <code>"{\"type\":\"NETWORK_FIREWALL\",\"networkFirewallStatelessRuleGroupReferences\":[{\"resourceARN\":\"arn:aws:network-firewall:us-east-1:123456789011:stateless-rulegroup/test\",\"priority\":1}],\"networkFirewallStatelessDefaultActions\":[\"aws:forward_to_sfe\",\"customActionName\"],\"networkFirewallStatelessFragmentDefaultActions\":[\"aws:forward_to_sfe\",\"fragmentcustomactionname\"],\"networkFirewallStatelessCustomActions\":[{\"actionName\":\"customActionName\", \"actionDefinition\":{\"publishMetricAction\":{\"dimensions\":[{\"value\":\"metricdimensionvalue\"}]}}},{\"actionName\":\"fragmentcustomactionname\",\"actionDefinition\":{\"publishMetricAction\":{\"dimensions\":[{\"value\":\"fragmentmetricdimensionvalue\"}]}}}],\"networkFirewallStatefulRuleGroupReferences\":[{\"resourceARN\":\"arn:aws:network-firewall:us-east-1:123456789011:stateful-rulegroup/test\"}],\"networkFirewallOrchestrationConfig\":{\"firewallCreationConfig\":{ \"endpointLocation\":{\"availabilityZoneConfigList\":[{\"availabilityZoneName\":\"us-east-1a\",\"allowedIPV4CidrList\":[\"10.0.0.0/28\"]},{\"availabilityZoneName\":\"us-east-1b\",\"allowedIPV4CidrList\":[ \"10.0.0.0/28\"]}]} },\"singleFirewallEndpointPerVPC\":false,\"allowedIPV4CidrList\":null,\"routeManagementAction\":\"OFF\",\"networkFirewallLoggingConfiguration\":{\"logDestinationConfigs\":[{\"logDestinationType\":\"S3\",\"logType\":\"ALERT\",\"logDestination\":{\"bucketName\":\"s3-bucket-name\"}},{\"logDestinationType\":\"S3\",\"logType\":\"FLOW\",\"logDestination\":{\"bucketName\":\"s3-bucket-name\"}}],\"overrideExistingConfig\":boolean}}"
+     *                   <code>"\{\"type\":\"NETWORK_FIREWALL\",\"networkFirewallStatelessRuleGroupReferences\":[\{\"resourceARN\":\"arn:aws:network-firewall:us-east-1:123456789011:stateless-rulegroup/test\",\"priority\":1\}],\"networkFirewallStatelessDefaultActions\":[\"aws:forward_to_sfe\",\"customActionName\"],\"networkFirewallStatelessFragmentDefaultActions\":[\"aws:forward_to_sfe\",\"fragmentcustomactionname\"],\"networkFirewallStatelessCustomActions\":[\{\"actionName\":\"customActionName\", \"actionDefinition\":\{\"publishMetricAction\":\{\"dimensions\":[\{\"value\":\"metricdimensionvalue\"\}]\}\}\},\{\"actionName\":\"fragmentcustomactionname\",\"actionDefinition\":\{\"publishMetricAction\":\{\"dimensions\":[\{\"value\":\"fragmentmetricdimensionvalue\"\}]\}\}\}],\"networkFirewallStatefulRuleGroupReferences\":[\{\"resourceARN\":\"arn:aws:network-firewall:us-east-1:123456789011:stateful-rulegroup/test\"\}],\"networkFirewallOrchestrationConfig\":\{\"firewallCreationConfig\":\{ \"endpointLocation\":\{\"availabilityZoneConfigList\":[\{\"availabilityZoneName\":\"us-east-1a\",\"allowedIPV4CidrList\":[\"10.0.0.0/28\"]\},\{\"availabilityZoneName\":\"us-east-1b\",\"allowedIPV4CidrList\":[ \"10.0.0.0/28\"]\}]\} \},\"singleFirewallEndpointPerVPC\":false,\"allowedIPV4CidrList\":null,\"routeManagementAction\":\"OFF\",\"networkFirewallLoggingConfiguration\":\{\"logDestinationConfigs\":[\{\"logDestinationType\":\"S3\",\"logType\":\"ALERT\",\"logDestination\":\{\"bucketName\":\"s3-bucket-name\"\}\},\{\"logDestinationType\":\"S3\",\"logType\":\"FLOW\",\"logDestination\":\{\"bucketName\":\"s3-bucket-name\"\}\}],\"overrideExistingConfig\":boolean\}\}"
      *               </code>
      *                </p>
      *                <p>
@@ -696,7 +814,7 @@ export interface SecurityServicePolicyData {
      *                <p>Example: <code>NETWORK_FIREWALL</code> - Distributed deployment model with
      *               custom Availability Zone configuration and route management</p>
      *                <p>
-     *                   <code>"{\"type\":\"NETWORK_FIREWALL\",\"networkFirewallStatelessRuleGroupReferences\":[{\"resourceARN\":\"arn:aws:network-firewall:us-east-1:123456789011:stateless-rulegroup/test\",\"priority\":1}],\"networkFirewallStatelessDefaultActions\":[\"aws:forward_to_sfe\",\"customActionName\"],\"networkFirewallStatelessFragmentDefaultActions\":[\"aws:forward_to_sfe\",\"fragmentcustomactionname\"],\"networkFirewallStatelessCustomActions\":[{\"actionName\":\"customActionName\",\"actionDefinition\":{\"publishMetricAction\":{\"dimensions\":[{\"value\":\"metricdimensionvalue\"}]}}},{\"actionName\":\"fragmentcustomactionname\",\"actionDefinition\":{\"publishMetricAction\":{\"dimensions\":[{\"value\":\"fragmentmetricdimensionvalue\"}]}}}],\"networkFirewallStatefulRuleGroupReferences\":[{\"resourceARN\":\"arn:aws:network-firewall:us-east-1:123456789011:stateful-rulegroup/test\"}],\"networkFirewallOrchestrationConfig\":{\"firewallCreationConfig\":{\"endpointLocation\":{\"availabilityZoneConfigList\":[{\"availabilityZoneName\":\"us-east-1a\",\"allowedIPV4CidrList\":[\"10.0.0.0/28\"]},{\"availabilityZoneName\":\"us-east-1b\",\"allowedIPV4CidrList\":[\"10.0.0.0/28\"]}]}},\"singleFirewallEndpointPerVPC\":false,\"allowedIPV4CidrList\":null,\"routeManagementAction\":\"MONITOR\",\"routeManagementTargetTypes\":[\"InternetGateway\"],\"routeManagementConfig\":{\"allowCrossAZTrafficIfNoEndpoint\":true}},\"networkFirewallLoggingConfiguration\":{\"logDestinationConfigs\":[{\"logDestinationType\":\"S3\",\"logType\":\"ALERT\",\"logDestination\":{\"bucketName\":\"s3-bucket-name\"}},{\"logDestinationType\":\"S3\",\"logType\":\"FLOW\",\"logDestination\":{\"bucketName\":\"s3-bucket-name\"}}],\"overrideExistingConfig\":boolean}}"
+     *                   <code>"\{\"type\":\"NETWORK_FIREWALL\",\"networkFirewallStatelessRuleGroupReferences\":[\{\"resourceARN\":\"arn:aws:network-firewall:us-east-1:123456789011:stateless-rulegroup/test\",\"priority\":1\}],\"networkFirewallStatelessDefaultActions\":[\"aws:forward_to_sfe\",\"customActionName\"],\"networkFirewallStatelessFragmentDefaultActions\":[\"aws:forward_to_sfe\",\"fragmentcustomactionname\"],\"networkFirewallStatelessCustomActions\":[\{\"actionName\":\"customActionName\",\"actionDefinition\":\{\"publishMetricAction\":\{\"dimensions\":[\{\"value\":\"metricdimensionvalue\"\}]\}\}\},\{\"actionName\":\"fragmentcustomactionname\",\"actionDefinition\":\{\"publishMetricAction\":\{\"dimensions\":[\{\"value\":\"fragmentmetricdimensionvalue\"\}]\}\}\}],\"networkFirewallStatefulRuleGroupReferences\":[\{\"resourceARN\":\"arn:aws:network-firewall:us-east-1:123456789011:stateful-rulegroup/test\"\}],\"networkFirewallOrchestrationConfig\":\{\"firewallCreationConfig\":\{\"endpointLocation\":\{\"availabilityZoneConfigList\":[\{\"availabilityZoneName\":\"us-east-1a\",\"allowedIPV4CidrList\":[\"10.0.0.0/28\"]\},\{\"availabilityZoneName\":\"us-east-1b\",\"allowedIPV4CidrList\":[\"10.0.0.0/28\"]\}]\}\},\"singleFirewallEndpointPerVPC\":false,\"allowedIPV4CidrList\":null,\"routeManagementAction\":\"MONITOR\",\"routeManagementTargetTypes\":[\"InternetGateway\"],\"routeManagementConfig\":\{\"allowCrossAZTrafficIfNoEndpoint\":true\}\},\"networkFirewallLoggingConfiguration\":\{\"logDestinationConfigs\":[\{\"logDestinationType\":\"S3\",\"logType\":\"ALERT\",\"logDestination\":\{\"bucketName\":\"s3-bucket-name\"\}\},\{\"logDestinationType\":\"S3\",\"logType\":\"FLOW\",\"logDestination\":\{\"bucketName\":\"s3-bucket-name\"\}\}],\"overrideExistingConfig\":boolean\}\}"
      *               </code>
      *                </p>
      *                <p>To use the distributed deployment model, you must set <a href="https://docs.aws.amazon.com/fms/2018-01-01/APIReference/API_PolicyOption.html">PolicyOption</a> to
@@ -706,46 +824,46 @@ export interface SecurityServicePolicyData {
      *                <p>Example: <code>THIRD_PARTY_FIREWALL</code>
      *                </p>
      *                <p>
-     *                   <code>"{
+     *                   <code>"\{
      *               "type":"THIRD_PARTY_FIREWALL",
      *               "thirdPartyFirewall":"PALO_ALTO_NETWORKS_CLOUD_NGFW",
-     *               "thirdPartyFirewallConfig":{
+     *               "thirdPartyFirewallConfig":\{
      *                 "thirdPartyFirewallPolicyList":["global-1"]
-     *               },
-     * 	          "firewallDeploymentModel":{
-     *                 "distributedFirewallDeploymentModel":{
-     *                   "distributedFirewallOrchestrationConfig":{
-     *                     "firewallCreationConfig":{
-     *                       "endpointLocation":{
+     *               \},
+     * 	          "firewallDeploymentModel":\{
+     *                 "distributedFirewallDeploymentModel":\{
+     *                   "distributedFirewallOrchestrationConfig":\{
+     *                     "firewallCreationConfig":\{
+     *                       "endpointLocation":\{
      *                         "availabilityZoneConfigList":[
-     *                           {
-     *                             "availabilityZoneName":"${AvailabilityZone}"
-     *                           }
+     *                           \{
+     *                             "availabilityZoneName":"$\{AvailabilityZone\}"
+     *                           \}
      *                         ]
-     *                       }
-     *                     },
+     *                       \}
+     *                     \},
      *                     "allowedIPV4CidrList":[
      *                     ]
-     *                   }
-     *                 }
-     *               }
-     *             }"</code>
+     *                   \}
+     *                 \}
+     *               \}
+     *             \}"</code>
      *                </p>
      *             </li>
      *             <li>
      *                <p>Example: <code>SECURITY_GROUPS_COMMON</code>
      *                </p>
      *                <p>
-     *                   <code>"{\"type\":\"SECURITY_GROUPS_COMMON\",\"revertManualSecurityGroupChanges\":false,\"exclusiveResourceSecurityGroupManagement\":false,
-     *                  \"applyToAllEC2InstanceENIs\":false,\"securityGroups\":[{\"id\":\"
-     *                  sg-000e55995d61a06bd\"}]}"</code>
+     *                   <code>"\{\"type\":\"SECURITY_GROUPS_COMMON\",\"revertManualSecurityGroupChanges\":false,\"exclusiveResourceSecurityGroupManagement\":false,
+     *                  \"applyToAllEC2InstanceENIs\":false,\"securityGroups\":[\{\"id\":\"
+     *                  sg-000e55995d61a06bd\"\}]\}"</code>
      *                </p>
      *             </li>
      *             <li>
      *                <p>Example: <code>SECURITY_GROUPS_COMMON</code> - Security group tag distribution
      *            </p>
      *                <p>
-     *                   <code>""{\"type\":\"SECURITY_GROUPS_COMMON\",\"securityGroups\":[{\"id\":\"sg-000e55995d61a06bd\"}],\"revertManualSecurityGroupChanges\":true,\"exclusiveResourceSecurityGroupManagement\":false,\"applyToAllEC2InstanceENIs\":false,\"includeSharedVPC\":false,\"enableTagDistribution\":true}""</code>
+     *                   <code>""\{\"type\":\"SECURITY_GROUPS_COMMON\",\"securityGroups\":[\{\"id\":\"sg-000e55995d61a06bd\"\}],\"revertManualSecurityGroupChanges\":true,\"exclusiveResourceSecurityGroupManagement\":false,\"applyToAllEC2InstanceENIs\":false,\"includeSharedVPC\":false,\"enableTagDistribution\":true\}""</code>
      *                </p>
      *                <p>
      *              Firewall Manager automatically distributes tags from the primary group to the security groups created by this policy. To use security group tag distribution, you must also set <code>revertManualSecurityGroupChanges</code> to <code>true</code>, otherwise Firewall Manager won't be able to create the policy. When you enable <code>revertManualSecurityGroupChanges</code>, Firewall Manager identifies and reports when the security groups created by this policy become non-compliant.
@@ -758,16 +876,16 @@ export interface SecurityServicePolicyData {
      *                <p>Example: Shared VPCs. Apply the preceding policy to resources in shared VPCs as
      *               well as to those in VPCs that the account owns </p>
      *                <p>
-     *                   <code>"{\"type\":\"SECURITY_GROUPS_COMMON\",\"revertManualSecurityGroupChanges\":false,\"exclusiveResourceSecurityGroupManagement\":false,
-     *                  \"applyToAllEC2InstanceENIs\":false,\"includeSharedVPC\":true,\"securityGroups\":[{\"id\":\"
-     *                  sg-000e55995d61a06bd\"}]}"</code>
+     *                   <code>"\{\"type\":\"SECURITY_GROUPS_COMMON\",\"revertManualSecurityGroupChanges\":false,\"exclusiveResourceSecurityGroupManagement\":false,
+     *                  \"applyToAllEC2InstanceENIs\":false,\"includeSharedVPC\":true,\"securityGroups\":[\{\"id\":\"
+     *                  sg-000e55995d61a06bd\"\}]\}"</code>
      *                </p>
      *             </li>
      *             <li>
      *                <p>Example: <code>SECURITY_GROUPS_CONTENT_AUDIT</code>
      *                </p>
      *                <p>
-     *                   <code>"{\"type\":\"SECURITY_GROUPS_CONTENT_AUDIT\",\"securityGroups\":[{\"id\":\"sg-000e55995d61a06bd\"}],\"securityGroupAction\":{\"type\":\"ALLOW\"}}"</code>
+     *                   <code>"\{\"type\":\"SECURITY_GROUPS_CONTENT_AUDIT\",\"securityGroups\":[\{\"id\":\"sg-000e55995d61a06bd\"\}],\"securityGroupAction\":\{\"type\":\"ALLOW\"\}\}"</code>
      *                </p>
      *                <p>The security group action for content audit can be <code>ALLOW</code> or
      *                  <code>DENY</code>. For <code>ALLOW</code>, all in-scope security group rules must
@@ -779,21 +897,21 @@ export interface SecurityServicePolicyData {
      *                <p>Example: <code>SECURITY_GROUPS_USAGE_AUDIT</code>
      *                </p>
      *                <p>
-     *                   <code>"{\"type\":\"SECURITY_GROUPS_USAGE_AUDIT\",\"deleteUnusedSecurityGroups\":true,\"coalesceRedundantSecurityGroups\":true}"</code>
+     *                   <code>"\{\"type\":\"SECURITY_GROUPS_USAGE_AUDIT\",\"deleteUnusedSecurityGroups\":true,\"coalesceRedundantSecurityGroups\":true\}"</code>
      *                </p>
      *             </li>
      *             <li>
      *                <p>Specification for <code>SHIELD_ADVANCED</code> for Amazon CloudFront distributions </p>
      *                <p>
-     *                   <code>"{\"type\":\"SHIELD_ADVANCED\",\"automaticResponseConfiguration\":
-     *                  {\"automaticResponseStatus\":\"ENABLED|IGNORED|DISABLED\",
-     *                  \"automaticResponseAction\":\"BLOCK|COUNT\"},
-     *                  \"overrideCustomerWebaclClassic\":true|false}"</code>
+     *                   <code>"\{\"type\":\"SHIELD_ADVANCED\",\"automaticResponseConfiguration\":
+     *                  \{\"automaticResponseStatus\":\"ENABLED|IGNORED|DISABLED\",
+     *                  \"automaticResponseAction\":\"BLOCK|COUNT\"\},
+     *                  \"overrideCustomerWebaclClassic\":true|false\}"</code>
      *                </p>
      *                <p>For example:
-     *                  <code>"{\"type\":\"SHIELD_ADVANCED\",\"automaticResponseConfiguration\":
-     *                  {\"automaticResponseStatus\":\"ENABLED\",
-     *                  \"automaticResponseAction\":\"COUNT\"}}"</code>
+     *                  <code>"\{\"type\":\"SHIELD_ADVANCED\",\"automaticResponseConfiguration\":
+     *                  \{\"automaticResponseStatus\":\"ENABLED\",
+     *                  \"automaticResponseAction\":\"COUNT\"\}\}"</code>
      *                </p>
      *                <p>The default value for <code>automaticResponseStatus</code> is
      *                  <code>IGNORED</code>. The value for <code>automaticResponseAction</code> is only
@@ -807,7 +925,7 @@ export interface SecurityServicePolicyData {
      *                <p>Example: <code>WAFV2</code>
      *                </p>
      *                <p>
-     *                   <code>"{\"type\":\"WAFV2\",\"preProcessRuleGroups\":[{\"ruleGroupArn\":null,\"overrideAction\":{\"type\":\"NONE\"},\"managedRuleGroupIdentifier\":{\"version\":null,\"vendorName\":\"AWS\",\"managedRuleGroupName\":\"AWSManagedRulesAmazonIpReputationList\"},\"ruleGroupType\":\"ManagedRuleGroup\",\"excludeRules\":[{\"name\":\"NoUserAgent_HEADER\"}]}],\"postProcessRuleGroups\":[],\"defaultAction\":{\"type\":\"ALLOW\"},\"overrideCustomerWebACLAssociation\":false,\"loggingConfiguration\":{\"logDestinationConfigs\":[\"arn:aws:firehose:us-west-2:12345678912:deliverystream/aws-waf-logs-fms-admin-destination\"],\"redactedFields\":[{\"redactedFieldType\":\"SingleHeader\",\"redactedFieldValue\":\"Cookies\"},{\"redactedFieldType\":\"Method\"}]}}"</code>
+     *                   <code>"\{\"type\":\"WAFV2\",\"preProcessRuleGroups\":[\{\"ruleGroupArn\":null,\"overrideAction\":\{\"type\":\"NONE\"\},\"managedRuleGroupIdentifier\":\{\"version\":null,\"vendorName\":\"AWS\",\"managedRuleGroupName\":\"AWSManagedRulesAmazonIpReputationList\"\},\"ruleGroupType\":\"ManagedRuleGroup\",\"excludeRules\":[\{\"name\":\"NoUserAgent_HEADER\"\}]\}],\"postProcessRuleGroups\":[],\"defaultAction\":\{\"type\":\"ALLOW\"\},\"overrideCustomerWebACLAssociation\":false,\"loggingConfiguration\":\{\"logDestinationConfigs\":[\"arn:aws:firehose:us-west-2:12345678912:deliverystream/aws-waf-logs-fms-admin-destination\"],\"redactedFields\":[\{\"redactedFieldType\":\"SingleHeader\",\"redactedFieldValue\":\"Cookies\"\},\{\"redactedFieldType\":\"Method\"\}]\}\}"</code>
      *                </p>
      *                <p>In the <code>loggingConfiguration</code>, you can specify one
      *                  <code>logDestinationConfigs</code>, you can optionally provide up to 20
@@ -819,7 +937,7 @@ export interface SecurityServicePolicyData {
      *                <p>Example: <code>WAFV2</code> -  Firewall Manager support for WAF managed rule group versioning
      *           </p>
      *                <p>
-     *                   <code>"{\"type\":\"WAFV2\",\"preProcessRuleGroups\":[{\"ruleGroupArn\":null,\"overrideAction\":{\"type\":\"NONE\"},\"managedRuleGroupIdentifier\":{\"versionEnabled\":true,\"version\":\"Version_2.0\",\"vendorName\":\"AWS\",\"managedRuleGroupName\":\"AWSManagedRulesCommonRuleSet\"},\"ruleGroupType\":\"ManagedRuleGroup\",\"excludeRules\":[{\"name\":\"NoUserAgent_HEADER\"}]}],\"postProcessRuleGroups\":[],\"defaultAction\":{\"type\":\"ALLOW\"},\"overrideCustomerWebACLAssociation\":false,\"loggingConfiguration\":{\"logDestinationConfigs\":[\"arn:aws:firehose:us-west-2:12345678912:deliverystream/aws-waf-logs-fms-admin-destination\"],\"redactedFields\":[{\"redactedFieldType\":\"SingleHeader\",\"redactedFieldValue\":\"Cookies\"},{\"redactedFieldType\":\"Method\"}]}}"</code>
+     *                   <code>"\{\"type\":\"WAFV2\",\"preProcessRuleGroups\":[\{\"ruleGroupArn\":null,\"overrideAction\":\{\"type\":\"NONE\"\},\"managedRuleGroupIdentifier\":\{\"versionEnabled\":true,\"version\":\"Version_2.0\",\"vendorName\":\"AWS\",\"managedRuleGroupName\":\"AWSManagedRulesCommonRuleSet\"\},\"ruleGroupType\":\"ManagedRuleGroup\",\"excludeRules\":[\{\"name\":\"NoUserAgent_HEADER\"\}]\}],\"postProcessRuleGroups\":[],\"defaultAction\":\{\"type\":\"ALLOW\"\},\"overrideCustomerWebACLAssociation\":false,\"loggingConfiguration\":\{\"logDestinationConfigs\":[\"arn:aws:firehose:us-west-2:12345678912:deliverystream/aws-waf-logs-fms-admin-destination\"],\"redactedFields\":[\{\"redactedFieldType\":\"SingleHeader\",\"redactedFieldValue\":\"Cookies\"\},\{\"redactedFieldType\":\"Method\"\}]\}\}"</code>
      *                </p>
      *                <p>
      *             To use a specific version of a WAF managed rule group in your Firewall Manager policy, you must set <code>versionEnabled</code> to <code>true</code>, and set <code>version</code> to the version you'd like to use. If you don't set <code>versionEnabled</code> to <code>true</code>, or if you omit <code>versionEnabled</code>, then Firewall Manager uses the default version of the WAF managed rule group.
@@ -829,9 +947,9 @@ export interface SecurityServicePolicyData {
      *                <p>Example: <code>WAF Classic</code>
      *                </p>
      *                <p>
-     *                   <code>"{\"type\": \"WAF\", \"ruleGroups\":
-     *                  [{\"id\":\"12345678-1bcd-9012-efga-0987654321ab\", \"overrideAction\" : {\"type\":
-     *                  \"COUNT\"}}], \"defaultAction\": {\"type\": \"BLOCK\"}}"</code>
+     *                   <code>"\{\"type\": \"WAF\", \"ruleGroups\":
+     *                  [\{\"id\":\"12345678-1bcd-9012-efga-0987654321ab\", \"overrideAction\" : \{\"type\":
+     *                  \"COUNT\"\}\}], \"defaultAction\": \{\"type\": \"BLOCK\"\}\}"</code>
      *                </p>
      *             </li>
      *          </ul>
@@ -844,6 +962,7 @@ export interface SecurityServicePolicyData {
     PolicyOption?: PolicyOption;
 }
 /**
+ * @public
  * <p>An Firewall Manager policy.</p>
  */
 export interface Policy {
@@ -919,15 +1038,15 @@ export interface Policy {
      *          <ul>
      *             <li>
      *                <p>Specify account IDs by setting the key to <code>ACCOUNT</code>. For example, the following is a valid map:
-     *       <code>{“ACCOUNT” : [“accountID1”, “accountID2”]}</code>.</p>
+     *       <code>\{“ACCOUNT” : [“accountID1”, “accountID2”]\}</code>.</p>
      *             </li>
      *             <li>
      *                <p>Specify OUs by setting the key to <code>ORG_UNIT</code>. For example, the following is a valid map:
-     *   <code>{“ORG_UNIT” : [“ouid111”, “ouid112”]}</code>.</p>
+     *   <code>\{“ORG_UNIT” : [“ouid111”, “ouid112”]\}</code>.</p>
      *             </li>
      *             <li>
      *                <p>Specify accounts and OUs together in a single map, separated with a comma. For example, the following is a valid map:
-     *       <code>{“ACCOUNT” : [“accountID1”, “accountID2”], “ORG_UNIT” : [“ouid111”, “ouid112”]}</code>.</p>
+     *       <code>\{“ACCOUNT” : [“accountID1”, “accountID2”], “ORG_UNIT” : [“ouid111”, “ouid112”]\}</code>.</p>
      *             </li>
      *          </ul>
      */
@@ -943,15 +1062,15 @@ export interface Policy {
      *          <ul>
      *             <li>
      *                <p>Specify account IDs by setting the key to <code>ACCOUNT</code>. For example, the following is a valid map:
-     *       <code>{“ACCOUNT” : [“accountID1”, “accountID2”]}</code>.</p>
+     *       <code>\{“ACCOUNT” : [“accountID1”, “accountID2”]\}</code>.</p>
      *             </li>
      *             <li>
      *                <p>Specify OUs by setting the key to <code>ORG_UNIT</code>. For example, the following is a valid map:
-     *   <code>{“ORG_UNIT” : [“ouid111”, “ouid112”]}</code>.</p>
+     *   <code>\{“ORG_UNIT” : [“ouid111”, “ouid112”]\}</code>.</p>
      *             </li>
      *             <li>
      *                <p>Specify accounts and OUs together in a single map, separated with a comma. For example, the following is a valid map:
-     *       <code>{“ACCOUNT” : [“accountID1”, “accountID2”], “ORG_UNIT” : [“ouid111”, “ouid112”]}</code>.</p>
+     *       <code>\{“ACCOUNT” : [“accountID1”, “accountID2”], “ORG_UNIT” : [“ouid111”, “ouid112”]\}</code>.</p>
      *             </li>
      *          </ul>
      */
@@ -965,6 +1084,9 @@ export interface Policy {
      */
     PolicyDescription?: string;
 }
+/**
+ * @public
+ */
 export interface GetPolicyResponse {
     /**
      * <p>Information about the specified Firewall Manager policy.</p>
@@ -976,6 +1098,7 @@ export interface GetPolicyResponse {
     PolicyArn?: string;
 }
 /**
+ * @public
  * <p>The value of the <code>Type</code> parameter is invalid.</p>
  */
 export declare class InvalidTypeException extends __BaseException {
@@ -987,6 +1110,9 @@ export declare class InvalidTypeException extends __BaseException {
      */
     constructor(opts: __ExceptionOptionType<InvalidTypeException, __BaseException>);
 }
+/**
+ * @public
+ */
 export interface GetProtectionStatusRequest {
     /**
      * <p>The ID of the policy for which you want to get the attack information.</p>
@@ -1023,6 +1149,9 @@ export interface GetProtectionStatusRequest {
      */
     MaxResults?: number;
 }
+/**
+ * @public
+ */
 export interface GetProtectionStatusResponse {
     /**
      * <p>The ID of the Firewall Manager administrator account for this policy.</p>
@@ -1067,6 +1196,9 @@ export interface GetProtectionStatusResponse {
      */
     NextToken?: string;
 }
+/**
+ * @public
+ */
 export interface GetProtocolsListRequest {
     /**
      * <p>The ID of the Firewall Manager protocols list that you want the details for.</p>
@@ -1078,6 +1210,7 @@ export interface GetProtocolsListRequest {
     DefaultList?: boolean;
 }
 /**
+ * @public
  * <p>An Firewall Manager protocols list.</p>
  */
 export interface ProtocolsListData {
@@ -1112,6 +1245,9 @@ export interface ProtocolsListData {
      */
     PreviousProtocolsList?: Record<string, string[]>;
 }
+/**
+ * @public
+ */
 export interface GetProtocolsListResponse {
     /**
      * <p>Information about the specified Firewall Manager protocols list.</p>
@@ -1122,6 +1258,9 @@ export interface GetProtocolsListResponse {
      */
     ProtocolsListArn?: string;
 }
+/**
+ * @public
+ */
 export interface GetResourceSetRequest {
     /**
      * <p>A unique identifier for the resource set, used in a TODO to refer to the resource set.</p>
@@ -1129,6 +1268,7 @@ export interface GetResourceSetRequest {
     Identifier: string | undefined;
 }
 /**
+ * @public
  * <p>A set of resources to include in a policy.</p>
  */
 export interface ResourceSet {
@@ -1162,6 +1302,9 @@ export interface ResourceSet {
      */
     LastUpdateTime?: Date;
 }
+/**
+ * @public
+ */
 export interface GetResourceSetResponse {
     /**
      * <p>Information about the specified resource set.</p>
@@ -1172,17 +1315,26 @@ export interface GetResourceSetResponse {
      */
     ResourceSetArn: string | undefined;
 }
+/**
+ * @public
+ */
 export interface GetThirdPartyFirewallAssociationStatusRequest {
     /**
      * <p>The name of the third-party firewall vendor.</p>
      */
     ThirdPartyFirewall: ThirdPartyFirewall | string | undefined;
 }
+/**
+ * @public
+ */
 export declare enum MarketplaceSubscriptionOnboardingStatus {
     COMPLETE = "COMPLETE",
     NOT_COMPLETE = "NOT_COMPLETE",
     NO_SUBSCRIPTION = "NO_SUBSCRIPTION"
 }
+/**
+ * @public
+ */
 export interface GetThirdPartyFirewallAssociationStatusResponse {
     /**
      * <p>The current status for setting a Firewall Manager policy administrators account as an administrator of the third-party firewall tenant.</p>
@@ -1229,6 +1381,9 @@ export interface GetThirdPartyFirewallAssociationStatusResponse {
      */
     MarketplaceOnboardingStatus?: MarketplaceSubscriptionOnboardingStatus | string;
 }
+/**
+ * @public
+ */
 export interface GetViolationDetailsRequest {
     /**
      * <p>The ID of the Firewall Manager policy that you want the details for. This currently only supports security group content audit policies.</p>
@@ -1255,6 +1410,7 @@ export interface GetViolationDetailsRequest {
     ResourceType: string | undefined;
 }
 /**
+ * @public
  * <p>A collection of key:value pairs associated with an Amazon Web Services resource. The key:value pair can be anything you define. Typically, the tag key represents a category (such as "environment") and the tag value represents a specific value within that category (such as "test," "development," or "production"). You can add up to 50 tags to each Amazon Web Services resource.  </p>
  */
 export interface Tag {
@@ -1268,6 +1424,7 @@ export interface Tag {
     Value: string | undefined;
 }
 /**
+ * @public
  * <p>The reference rule that partially matches the <code>ViolationTarget</code> rule and violation reason.</p>
  */
 export interface PartialMatch {
@@ -1280,11 +1437,15 @@ export interface PartialMatch {
      */
     TargetViolationReasons?: string[];
 }
+/**
+ * @public
+ */
 export declare enum RemediationActionType {
     Modify = "MODIFY",
     Remove = "REMOVE"
 }
 /**
+ * @public
  * <p>Describes a set of permissions for a security group rule.</p>
  */
 export interface SecurityGroupRuleDescription {
@@ -1314,6 +1475,7 @@ export interface SecurityGroupRuleDescription {
     ToPort?: number;
 }
 /**
+ * @public
  * <p>Remediation option for the rule specified in the <code>ViolationTarget</code>.</p>
  */
 export interface SecurityGroupRemediationAction {
@@ -1335,6 +1497,7 @@ export interface SecurityGroupRemediationAction {
     IsDefaultAction?: boolean;
 }
 /**
+ * @public
  * <p>Violation detail for the rule violation in a security group when compared to the primary security group of the Firewall Manager policy.</p>
  */
 export interface AwsVPCSecurityGroupViolation {
@@ -1356,6 +1519,7 @@ export interface AwsVPCSecurityGroupViolation {
     PossibleSecurityGroupRemediationActions?: SecurityGroupRemediationAction[];
 }
 /**
+ * @public
  * <p>A DNS Firewall rule group that Firewall Manager
  *        tried to associate with a VPC is already associated with the VPC and can't be associated again. </p>
  */
@@ -1370,6 +1534,7 @@ export interface DnsDuplicateRuleGroupViolation {
     ViolationTargetDescription?: string;
 }
 /**
+ * @public
  * <p>The VPC that Firewall Manager was applying a DNS Fireall policy to reached the limit for associated DNS Firewall rule groups. Firewall Manager tried to associate another rule group with the VPC and failed due to the limit. </p>
  */
 export interface DnsRuleGroupLimitExceededViolation {
@@ -1387,6 +1552,7 @@ export interface DnsRuleGroupLimitExceededViolation {
     NumberOfRuleGroupsAlreadyAssociated?: number;
 }
 /**
+ * @public
  * <p>A rule group that Firewall Manager
  *        tried to associate with a VPC has the same priority as a rule group that's already associated. </p>
  */
@@ -1415,6 +1581,7 @@ export interface DnsRuleGroupPriorityConflictViolation {
     UnavailablePriorities?: number[];
 }
 /**
+ * @public
  * <p>Contains details about the firewall subnet that violates the policy scope.</p>
  */
 export interface FirewallSubnetIsOutOfScopeViolation {
@@ -1440,6 +1607,7 @@ export interface FirewallSubnetIsOutOfScopeViolation {
     VpcEndpointId?: string;
 }
 /**
+ * @public
  * <p>The violation details for a firewall subnet's VPC endpoint that's deleted or missing.</p>
  */
 export interface FirewallSubnetMissingVPCEndpointViolation {
@@ -1460,11 +1628,17 @@ export interface FirewallSubnetMissingVPCEndpointViolation {
      */
     SubnetAvailabilityZoneId?: string;
 }
+/**
+ * @public
+ */
 export declare enum DestinationType {
     IPV4 = "IPV4",
     IPV6 = "IPV6",
     PrefixList = "PREFIX_LIST"
 }
+/**
+ * @public
+ */
 export declare enum TargetType {
     CarrierGateway = "CARRIER_GATEWAY",
     EgressOnlyInternetGateway = "EGRESS_ONLY_INTERNET_GATEWAY",
@@ -1478,6 +1652,7 @@ export declare enum TargetType {
     VPCPeeringConnection = "VPC_PEERING_CONNECTION"
 }
 /**
+ * @public
  * <p>Describes a route in a route table.</p>
  */
 export interface Route {
@@ -1499,6 +1674,7 @@ export interface Route {
     Target?: string;
 }
 /**
+ * @public
  * <p>Violation detail for an internet gateway route with an inactive state in the customer subnet route table or Network Firewall subnet route table.</p>
  */
 export interface NetworkFirewallBlackHoleRouteDetectedViolation {
@@ -1520,6 +1696,7 @@ export interface NetworkFirewallBlackHoleRouteDetectedViolation {
     ViolatingRoutes?: Route[];
 }
 /**
+ * @public
  * <p>Information about the expected route in the route table.</p>
  */
 export interface ExpectedRoute {
@@ -1549,6 +1726,7 @@ export interface ExpectedRoute {
     RouteTableId?: string;
 }
 /**
+ * @public
  * <p>Violation detail for the subnet for which internet traffic that hasn't been inspected.</p>
  */
 export interface NetworkFirewallInternetTrafficNotInspectedViolation {
@@ -1614,6 +1792,7 @@ export interface NetworkFirewallInternetTrafficNotInspectedViolation {
     VpcId?: string;
 }
 /**
+ * @public
  * <p>Violation detail for the improperly configured subnet route. It's possible there is a missing route table route,
  *       or a configuration that causes traffic to cross an Availability Zone boundary.</p>
  */
@@ -1684,6 +1863,7 @@ export interface NetworkFirewallInvalidRouteConfigurationViolation {
     VpcId?: string;
 }
 /**
+ * @public
  * <p>Violation detail for an expected route missing in Network Firewall.</p>
  */
 export interface NetworkFirewallMissingExpectedRoutesViolation {
@@ -1701,6 +1881,7 @@ export interface NetworkFirewallMissingExpectedRoutesViolation {
     VpcId?: string;
 }
 /**
+ * @public
  * <p>Violation detail for Network Firewall for a subnet that's not associated to the expected
  *        Firewall Manager managed route table.</p>
  */
@@ -1727,6 +1908,7 @@ export interface NetworkFirewallMissingExpectedRTViolation {
     ExpectedRouteTable?: string;
 }
 /**
+ * @public
  * <p>Violation detail for Network Firewall for a subnet that doesn't have a
  *        Firewall Manager managed firewall in its VPC. </p>
  */
@@ -1749,6 +1931,7 @@ export interface NetworkFirewallMissingFirewallViolation {
     TargetViolationReason?: string;
 }
 /**
+ * @public
  * <p>Violation detail for Network Firewall for an Availability Zone that's
  *        missing the expected Firewall Manager managed subnet.</p>
  */
@@ -1770,11 +1953,15 @@ export interface NetworkFirewallMissingSubnetViolation {
      */
     TargetViolationReason?: string;
 }
+/**
+ * @public
+ */
 export declare enum RuleOrder {
     DEFAULT_ACTION_ORDER = "DEFAULT_ACTION_ORDER",
     STRICT_ORDER = "STRICT_ORDER"
 }
 /**
+ * @public
  * <p>Configuration settings for the handling of the stateful rule groups in a Network Firewall firewall policy.</p>
  */
 export interface StatefulEngineOptions {
@@ -1786,10 +1973,14 @@ export interface StatefulEngineOptions {
      */
     RuleOrder?: RuleOrder | string;
 }
+/**
+ * @public
+ */
 export declare enum NetworkFirewallOverrideAction {
     DROP_TO_ALERT = "DROP_TO_ALERT"
 }
 /**
+ * @public
  * <p>The setting that allows the policy owner to change the behavior of the rule group within a policy.</p>
  */
 export interface NetworkFirewallStatefulRuleGroupOverride {
@@ -1799,6 +1990,7 @@ export interface NetworkFirewallStatefulRuleGroupOverride {
     Action?: NetworkFirewallOverrideAction | string;
 }
 /**
+ * @public
  * <p>Network Firewall stateful rule group, used in a <a>NetworkFirewallPolicyDescription</a>. </p>
  */
 export interface StatefulRuleGroup {
@@ -1830,6 +2022,7 @@ export interface StatefulRuleGroup {
     Override?: NetworkFirewallStatefulRuleGroupOverride;
 }
 /**
+ * @public
  * <p>Network Firewall stateless rule group, used in a <a>NetworkFirewallPolicyDescription</a>. </p>
  */
 export interface StatelessRuleGroup {
@@ -1847,6 +2040,7 @@ export interface StatelessRuleGroup {
     Priority?: number;
 }
 /**
+ * @public
  * <p>The definition of the Network Firewall firewall policy.</p>
  */
 export interface NetworkFirewallPolicyDescription {
@@ -1900,6 +2094,7 @@ export interface NetworkFirewallPolicyDescription {
     StatefulEngineOptions?: StatefulEngineOptions;
 }
 /**
+ * @public
  * <p>Violation detail for Network Firewall for a firewall policy that has a different
  *        <a>NetworkFirewallPolicyDescription</a> than is required by the Firewall Manager policy. </p>
  */
@@ -1918,6 +2113,7 @@ export interface NetworkFirewallPolicyModifiedViolation {
     ExpectedPolicyDescription?: NetworkFirewallPolicyDescription;
 }
 /**
+ * @public
  * <p>Violation detail for an unexpected route that's present in a route table.</p>
  */
 export interface NetworkFirewallUnexpectedFirewallRoutesViolation {
@@ -1943,6 +2139,7 @@ export interface NetworkFirewallUnexpectedFirewallRoutesViolation {
     VpcId?: string;
 }
 /**
+ * @public
  * <p>Violation detail for an unexpected gateway route that’s present in a route table.</p>
  */
 export interface NetworkFirewallUnexpectedGatewayRoutesViolation {
@@ -1964,6 +2161,7 @@ export interface NetworkFirewallUnexpectedGatewayRoutesViolation {
     VpcId?: string;
 }
 /**
+ * @public
  * <p>The action of associating an EC2 resource, such as a subnet or internet gateway, with a route table.</p>
  */
 export interface EC2AssociateRouteTableAction {
@@ -1985,6 +2183,7 @@ export interface EC2AssociateRouteTableAction {
     GatewayId?: ActionTarget;
 }
 /**
+ * @public
  * <p>An action that copies the EC2 route table for use in remediation.</p>
  */
 export interface EC2CopyRouteTableAction {
@@ -2002,6 +2201,7 @@ export interface EC2CopyRouteTableAction {
     RouteTableId: ActionTarget | undefined;
 }
 /**
+ * @public
  * <p>Information about the CreateRoute action in Amazon EC2.</p>
  */
 export interface EC2CreateRouteAction {
@@ -2035,6 +2235,7 @@ export interface EC2CreateRouteAction {
     RouteTableId: ActionTarget | undefined;
 }
 /**
+ * @public
  * <p>Information about the CreateRouteTable action in Amazon EC2.</p>
  */
 export interface EC2CreateRouteTableAction {
@@ -2048,6 +2249,7 @@ export interface EC2CreateRouteTableAction {
     VpcId: ActionTarget | undefined;
 }
 /**
+ * @public
  * <p>Information about the DeleteRoute action in Amazon EC2.</p>
  */
 export interface EC2DeleteRouteAction {
@@ -2073,6 +2275,7 @@ export interface EC2DeleteRouteAction {
     RouteTableId: ActionTarget | undefined;
 }
 /**
+ * @public
  * <p>Information about the ReplaceRoute action in Amazon EC2.</p>
  */
 export interface EC2ReplaceRouteAction {
@@ -2102,6 +2305,7 @@ export interface EC2ReplaceRouteAction {
     RouteTableId: ActionTarget | undefined;
 }
 /**
+ * @public
  * <p>Information about the ReplaceRouteTableAssociation action in Amazon EC2.</p>
  */
 export interface EC2ReplaceRouteTableAssociationAction {
@@ -2119,6 +2323,7 @@ export interface EC2ReplaceRouteTableAssociationAction {
     RouteTableId: ActionTarget | undefined;
 }
 /**
+ * @public
  * <p>Contains information about the actions that you can take to remediate scope violations
  *          caused by your policy's <code>FirewallCreationConfig</code>.
  *             <code>FirewallCreationConfig</code> is an optional configuration that you can use to
@@ -2136,6 +2341,7 @@ export interface FMSPolicyUpdateFirewallCreationConfigAction {
     FirewallCreationConfig?: string;
 }
 /**
+ * @public
  * <p>Information about an individual action you can take to remediate a violation.</p>
  */
 export interface RemediationAction {
@@ -2177,6 +2383,7 @@ export interface RemediationAction {
     FMSPolicyUpdateFirewallCreationConfigAction?: FMSPolicyUpdateFirewallCreationConfigAction;
 }
 /**
+ * @public
  * <p>An ordered list of actions you can take to remediate a violation.</p>
  */
 export interface RemediationActionWithOrder {
@@ -2190,6 +2397,7 @@ export interface RemediationActionWithOrder {
     Order?: number;
 }
 /**
+ * @public
  * <p>A list of remediation actions.</p>
  */
 export interface PossibleRemediationAction {
@@ -2207,6 +2415,7 @@ export interface PossibleRemediationAction {
     IsDefaultAction?: boolean;
 }
 /**
+ * @public
  * <p>A list of possible remediation action lists. Each individual possible remediation action is a list of individual remediation actions.</p>
  */
 export interface PossibleRemediationActions {
@@ -2220,6 +2429,7 @@ export interface PossibleRemediationActions {
     Actions?: PossibleRemediationAction[];
 }
 /**
+ * @public
  * <p>Contains details about the route endpoint that violates the policy scope.</p>
  */
 export interface RouteHasOutOfScopeEndpointViolation {
@@ -2273,6 +2483,7 @@ export interface RouteHasOutOfScopeEndpointViolation {
     InternetGatewayRoutes?: Route[];
 }
 /**
+ * @public
  * <p>The violation details for a third-party firewall that's not associated with an Firewall Manager managed route table.</p>
  */
 export interface ThirdPartyFirewallMissingExpectedRouteTableViolation {
@@ -2298,6 +2509,7 @@ export interface ThirdPartyFirewallMissingExpectedRouteTableViolation {
     ExpectedRouteTable?: string;
 }
 /**
+ * @public
  * <p>The violation details about a third-party firewall's subnet that doesn't have a Firewall Manager managed firewall in its VPC.</p>
  */
 export interface ThirdPartyFirewallMissingFirewallViolation {
@@ -2319,6 +2531,7 @@ export interface ThirdPartyFirewallMissingFirewallViolation {
     TargetViolationReason?: string;
 }
 /**
+ * @public
  * <p>The violation details for a third-party firewall for an Availability Zone that's missing the Firewall Manager managed subnet.</p>
  */
 export interface ThirdPartyFirewallMissingSubnetViolation {
@@ -2340,6 +2553,7 @@ export interface ThirdPartyFirewallMissingSubnetViolation {
     TargetViolationReason?: string;
 }
 /**
+ * @public
  * <p>Violation detail based on resource type.</p>
  */
 export interface ResourceViolation {
@@ -2445,6 +2659,7 @@ export interface ResourceViolation {
     FirewallSubnetMissingVPCEndpointViolation?: FirewallSubnetMissingVPCEndpointViolation;
 }
 /**
+ * @public
  * <p>Violations for a resource based on the specified Firewall Manager policy and Amazon Web Services account.</p>
  */
 export interface ViolationDetail {
@@ -2477,12 +2692,18 @@ export interface ViolationDetail {
      */
     ResourceDescription?: string;
 }
+/**
+ * @public
+ */
 export interface GetViolationDetailsResponse {
     /**
      * <p>Violation detail for a resource.</p>
      */
     ViolationDetail?: ViolationDetail;
 }
+/**
+ * @public
+ */
 export interface ListAppsListsRequest {
     /**
      * <p>Specifies whether the lists to retrieve are default lists owned by Firewall Manager.</p>
@@ -2502,6 +2723,9 @@ export interface ListAppsListsRequest {
      */
     MaxResults: number | undefined;
 }
+/**
+ * @public
+ */
 export interface ListAppsListsResponse {
     /**
      * <p>An array of <code>AppsListDataSummary</code> objects.</p>
@@ -2513,6 +2737,9 @@ export interface ListAppsListsResponse {
      */
     NextToken?: string;
 }
+/**
+ * @public
+ */
 export interface ListComplianceStatusRequest {
     /**
      * <p>The ID of the Firewall Manager policy that you want the details for.</p>
@@ -2537,11 +2764,15 @@ export interface ListComplianceStatusRequest {
      */
     MaxResults?: number;
 }
+/**
+ * @public
+ */
 export declare enum PolicyComplianceStatusType {
     Compliant = "COMPLIANT",
     NonCompliant = "NON_COMPLIANT"
 }
 /**
+ * @public
  * <p>Describes the compliance status for the account. An account is considered noncompliant if
  *       it includes resources that are not protected by the specified policy or that don't comply with
  *       the policy.</p>
@@ -2565,6 +2796,7 @@ export interface EvaluationResult {
     EvaluationLimitExceeded?: boolean;
 }
 /**
+ * @public
  * <p>Indicates whether the account is compliant with the specified policy. An account is
  *       considered noncompliant if it includes resources that are not protected by the policy, for
  *       WAF and Shield Advanced policies, or that are noncompliant with the policy, for security group
@@ -2601,6 +2833,9 @@ export interface PolicyComplianceStatus {
      */
     IssueInfoMap?: Record<string, string>;
 }
+/**
+ * @public
+ */
 export interface ListComplianceStatusResponse {
     /**
      * <p>An array of <code>PolicyComplianceStatus</code> objects.</p>
@@ -2616,6 +2851,9 @@ export interface ListComplianceStatusResponse {
      */
     NextToken?: string;
 }
+/**
+ * @public
+ */
 export interface ListDiscoveredResourcesRequest {
     /**
      * <p>The Amazon Web Services account IDs to discover resources in. Only one account is supported per request. The account must be a member of your organization.</p>
@@ -2639,6 +2877,7 @@ export interface ListDiscoveredResourcesRequest {
     NextToken?: string;
 }
 /**
+ * @public
  * <p>A resource in the organization that's available to be associated with a Firewall Manager resource set.</p>
  */
 export interface DiscoveredResource {
@@ -2659,6 +2898,9 @@ export interface DiscoveredResource {
      */
     Name?: string;
 }
+/**
+ * @public
+ */
 export interface ListDiscoveredResourcesResponse {
     /**
      * <p>Details of the resources that were discovered.</p>
@@ -2671,6 +2913,9 @@ export interface ListDiscoveredResourcesResponse {
      */
     NextToken?: string;
 }
+/**
+ * @public
+ */
 export interface ListMemberAccountsRequest {
     /**
      * <p>If you specify a value for <code>MaxResults</code> and you have more account IDs than the
@@ -2689,6 +2934,9 @@ export interface ListMemberAccountsRequest {
      */
     MaxResults?: number;
 }
+/**
+ * @public
+ */
 export interface ListMemberAccountsResponse {
     /**
      * <p>An array of account IDs.</p>
@@ -2703,6 +2951,9 @@ export interface ListMemberAccountsResponse {
      */
     NextToken?: string;
 }
+/**
+ * @public
+ */
 export interface ListPoliciesRequest {
     /**
      * <p>If you specify a value for <code>MaxResults</code> and you have more
@@ -2723,6 +2974,7 @@ export interface ListPoliciesRequest {
     MaxResults?: number;
 }
 /**
+ * @public
  * <p>Details of the Firewall Manager policy. </p>
  */
 export interface PolicySummary {
@@ -2770,6 +3022,9 @@ export interface PolicySummary {
      */
     DeleteUnusedFMManagedResources?: boolean;
 }
+/**
+ * @public
+ */
 export interface ListPoliciesResponse {
     /**
      * <p>An array of <code>PolicySummary</code> objects.</p>
@@ -2784,6 +3039,9 @@ export interface ListPoliciesResponse {
      */
     NextToken?: string;
 }
+/**
+ * @public
+ */
 export interface ListProtocolsListsRequest {
     /**
      * <p>Specifies whether the lists to retrieve are default lists owned by Firewall Manager.</p>
@@ -2804,6 +3062,7 @@ export interface ListProtocolsListsRequest {
     MaxResults: number | undefined;
 }
 /**
+ * @public
  * <p>Details of the Firewall Manager protocols list.</p>
  */
 export interface ProtocolsListDataSummary {
@@ -2824,6 +3083,9 @@ export interface ProtocolsListDataSummary {
      */
     ProtocolsList?: string[];
 }
+/**
+ * @public
+ */
 export interface ListProtocolsListsResponse {
     /**
      * <p>An array of <code>ProtocolsListDataSummary</code> objects.</p>
@@ -2835,6 +3097,9 @@ export interface ListProtocolsListsResponse {
      */
     NextToken?: string;
 }
+/**
+ * @public
+ */
 export interface ListResourceSetResourcesRequest {
     /**
      * <p>A unique identifier for the resource set, used in a TODO to refer to the resource set.</p>
@@ -2854,6 +3119,7 @@ export interface ListResourceSetResourcesRequest {
     NextToken?: string;
 }
 /**
+ * @public
  * <p>Details of a resource that is associated to an Firewall Manager resource set.</p>
  */
 export interface Resource {
@@ -2866,6 +3132,9 @@ export interface Resource {
      */
     AccountId?: string;
 }
+/**
+ * @public
+ */
 export interface ListResourceSetResourcesResponse {
     /**
      * <p>An array of the associated resources' uniform resource identifiers (URI).</p>
@@ -2878,6 +3147,9 @@ export interface ListResourceSetResourcesResponse {
      */
     NextToken?: string;
 }
+/**
+ * @public
+ */
 export interface ListResourceSetsRequest {
     /**
      * <p>When you request a list of objects with a <code>MaxResults</code> setting, if the number of objects that are still available
@@ -2893,6 +3165,7 @@ export interface ListResourceSetsRequest {
     MaxResults?: number;
 }
 /**
+ * @public
  * <p>Summarizes the resource sets used in a policy.</p>
  */
 export interface ResourceSetSummary {
@@ -2913,6 +3186,9 @@ export interface ResourceSetSummary {
      */
     LastUpdateTime?: Date;
 }
+/**
+ * @public
+ */
 export interface ListResourceSetsResponse {
     /**
      * <p>An array of <code>ResourceSetSummary</code> objects.</p>
@@ -2925,18 +3201,27 @@ export interface ListResourceSetsResponse {
      */
     NextToken?: string;
 }
+/**
+ * @public
+ */
 export interface ListTagsForResourceRequest {
     /**
      * <p>The Amazon Resource Name (ARN) of the resource to return tags for. The Firewall Manager resources that support tagging are policies, applications lists, and protocols lists. </p>
      */
     ResourceArn: string | undefined;
 }
+/**
+ * @public
+ */
 export interface ListTagsForResourceResponse {
     /**
      * <p>The tags associated with the resource.</p>
      */
     TagList?: Tag[];
 }
+/**
+ * @public
+ */
 export interface ListThirdPartyFirewallFirewallPoliciesRequest {
     /**
      * <p>The name of the third-party firewall vendor.</p>
@@ -2961,6 +3246,7 @@ export interface ListThirdPartyFirewallFirewallPoliciesRequest {
     MaxResults: number | undefined;
 }
 /**
+ * @public
  * <p>Configures the third-party firewall's firewall policy.</p>
  */
 export interface ThirdPartyFirewallFirewallPolicy {
@@ -2973,6 +3259,9 @@ export interface ThirdPartyFirewallFirewallPolicy {
      */
     FirewallPolicyName?: string;
 }
+/**
+ * @public
+ */
 export interface ListThirdPartyFirewallFirewallPoliciesResponse {
     /**
      * <p>A list that contains one <code>ThirdPartyFirewallFirewallPolicies</code> element for each third-party firewall policies that the specified
@@ -2984,6 +3273,9 @@ export interface ListThirdPartyFirewallFirewallPoliciesResponse {
      */
     NextToken?: string;
 }
+/**
+ * @public
+ */
 export interface PutAppsListRequest {
     /**
      * <p>The details of the Firewall Manager applications list to be created.</p>
@@ -2994,6 +3286,9 @@ export interface PutAppsListRequest {
      */
     TagList?: Tag[];
 }
+/**
+ * @public
+ */
 export interface PutAppsListResponse {
     /**
      * <p>The details of the Firewall Manager applications list.</p>
@@ -3004,6 +3299,9 @@ export interface PutAppsListResponse {
      */
     AppsListArn?: string;
 }
+/**
+ * @public
+ */
 export interface PutNotificationChannelRequest {
     /**
      * <p>The Amazon Resource Name (ARN) of the SNS topic that collects notifications from
@@ -3016,6 +3314,9 @@ export interface PutNotificationChannelRequest {
      */
     SnsRoleName: string | undefined;
 }
+/**
+ * @public
+ */
 export interface PutPolicyRequest {
     /**
      * <p>The details of the Firewall Manager policy to be created.</p>
@@ -3026,6 +3327,9 @@ export interface PutPolicyRequest {
      */
     TagList?: Tag[];
 }
+/**
+ * @public
+ */
 export interface PutPolicyResponse {
     /**
      * <p>The details of the Firewall Manager policy.</p>
@@ -3036,6 +3340,9 @@ export interface PutPolicyResponse {
      */
     PolicyArn?: string;
 }
+/**
+ * @public
+ */
 export interface PutProtocolsListRequest {
     /**
      * <p>The details of the Firewall Manager protocols list to be created.</p>
@@ -3046,6 +3353,9 @@ export interface PutProtocolsListRequest {
      */
     TagList?: Tag[];
 }
+/**
+ * @public
+ */
 export interface PutProtocolsListResponse {
     /**
      * <p>The details of the Firewall Manager protocols list.</p>
@@ -3056,6 +3366,9 @@ export interface PutProtocolsListResponse {
      */
     ProtocolsListArn?: string;
 }
+/**
+ * @public
+ */
 export interface PutResourceSetRequest {
     /**
      * <p>Details about the resource set to be created or updated.></p>
@@ -3070,6 +3383,9 @@ export interface PutResourceSetRequest {
      */
     TagList?: Tag[];
 }
+/**
+ * @public
+ */
 export interface PutResourceSetResponse {
     /**
      * <p>Details about the resource set.</p>
@@ -3080,6 +3396,9 @@ export interface PutResourceSetResponse {
      */
     ResourceSetArn: string | undefined;
 }
+/**
+ * @public
+ */
 export interface TagResourceRequest {
     /**
      * <p>The Amazon Resource Name (ARN) of the resource to return tags for. The Firewall Manager resources that support tagging are policies, applications lists, and protocols lists. </p>
@@ -3090,8 +3409,14 @@ export interface TagResourceRequest {
      */
     TagList: Tag[] | undefined;
 }
+/**
+ * @public
+ */
 export interface TagResourceResponse {
 }
+/**
+ * @public
+ */
 export interface UntagResourceRequest {
     /**
      * <p>The Amazon Resource Name (ARN) of the resource to return tags for. The Firewall Manager resources that support tagging are policies, applications lists, and protocols lists. </p>
@@ -3102,6 +3427,9 @@ export interface UntagResourceRequest {
      */
     TagKeys: string[] | undefined;
 }
+/**
+ * @public
+ */
 export interface UntagResourceResponse {
 }
 /**