@aws-sdk/client-ram 3.312.0 → 3.316.0

package/dist-types/models/models_0.d.ts

@@ -5,7 +5,7 @@ import { RAMServiceException as __BaseException } from "./RAMServiceException";
  */
 export interface AcceptResourceShareInvitationRequest {
     /**
-     * <p>The <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resoure Name (ARN)</a> of the invitation that you want to accept.</p>
+     * <p>The <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Name (ARN)</a> of the invitation that you want to accept.</p>
      */
     resourceShareInvitationArn: string | undefined;
     /**
@@ -17,6 +17,9 @@ export interface AcceptResourceShareInvitationRequest {
      *              value.</a>.</p>
      *          <p>If you don't provide this value, then Amazon Web Services generates a random one for
      *              you.</p>
+     *          <p>If you retry the operation with the same <code>ClientToken</code>, but with
+     *              different parameters, the retry fails with an <code>IdempotentParameterMismatch</code>
+     *              error.</p>
      */
     clientToken?: string;
 }
@@ -49,11 +52,11 @@ export declare const ResourceShareAssociationStatus: {
 export type ResourceShareAssociationStatus = (typeof ResourceShareAssociationStatus)[keyof typeof ResourceShareAssociationStatus];
 /**
  * @public
- * <p>Describes an association with a resource share and either a principal or a resource.</p>
+ * <p>Describes an association between a resource share and either a principal or a resource.</p>
  */
 export interface ResourceShareAssociation {
     /**
-     * <p>The <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resoure Name (ARN)</a> of the resource share.</p>
+     * <p>The <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Name (ARN)</a> of the resource share.</p>
      */
     resourceShareArn?: string;
     /**
@@ -64,7 +67,7 @@ export interface ResourceShareAssociation {
      * <p>The associated entity. This can be either of the following:</p>
      *          <ul>
      *             <li>
-     *                <p>For a resource association, this is the <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resoure Name (ARN)</a> of the resource.</p>
+     *                <p>For a resource association, this is the <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Name (ARN)</a> of the resource.</p>
      *             </li>
      *             <li>
      *                <p>For principal associations, this is one of the following:</p>
@@ -73,7 +76,7 @@ export interface ResourceShareAssociation {
      *                      <p>The ID of an Amazon Web Services account</p>
      *                   </li>
      *                   <li>
-     *                      <p>The <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resoure Name (ARN)</a> of an organization in Organizations</p>
+     *                      <p>The <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Name (ARN)</a> of an organization in Organizations</p>
      *                   </li>
      *                   <li>
      *                      <p>The ARN of an organizational unit (OU) in Organizations</p>
@@ -135,7 +138,7 @@ export type ResourceShareInvitationStatus = (typeof ResourceShareInvitationStatu
  */
 export interface ResourceShareInvitation {
     /**
-     * <p>The <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resoure Name (ARN)</a> of the invitation.</p>
+     * <p>The <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Name (ARN)</a> of the invitation.</p>
      */
     resourceShareInvitationArn?: string;
     /**
@@ -143,7 +146,7 @@ export interface ResourceShareInvitation {
      */
     resourceShareName?: string;
     /**
-     * <p>The <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resoure Name (ARN)</a> of the resource share</p>
+     * <p>The <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Name (ARN)</a> of the resource share</p>
      */
     resourceShareArn?: string;
     /**
@@ -169,7 +172,7 @@ export interface ResourceShareInvitation {
      */
     resourceShareAssociations?: ResourceShareAssociation[];
     /**
-     * <p>The <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resoure Name (ARN)</a> of the IAM user or role that received the invitation.</p>
+     * <p>The <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Name (ARN)</a> of the IAM user or role that received the invitation.</p>
      */
     receiverArn?: string;
 }
@@ -191,9 +194,9 @@ export interface AcceptResourceShareInvitationResponse {
 }
 /**
  * @public
- * <p>The client token input parameter was matched one used with a previous call to the
- *             operation, but at least one of the other input parameters is different from the previous
- *             call.</p>
+ * <p>The operation failed because the client token input parameter matched one that was
+ *             used with a previous call to the operation, but at least one of the other input
+ *             parameters is different from the previous call.</p>
  */
 export declare class IdempotentParameterMismatchException extends __BaseException {
     readonly name: "IdempotentParameterMismatchException";
@@ -205,7 +208,7 @@ export declare class IdempotentParameterMismatchException extends __BaseExceptio
 }
 /**
  * @public
- * <p>The client token is not valid.</p>
+ * <p>The operation failed because the specified client token isn't valid.</p>
  */
 export declare class InvalidClientTokenException extends __BaseException {
     readonly name: "InvalidClientTokenException";
@@ -217,7 +220,8 @@ export declare class InvalidClientTokenException extends __BaseException {
 }
 /**
  * @public
- * <p>The format of an Amazon Resource Name (ARN) is not valid.</p>
+ * <p>The operation failed because the specified <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Name (ARN)</a> has a format that isn't
+ *             valid.</p>
  */
 export declare class MalformedArnException extends __BaseException {
     readonly name: "MalformedArnException";
@@ -229,7 +233,7 @@ export declare class MalformedArnException extends __BaseException {
 }
 /**
  * @public
- * <p>The requested operation is not permitted.</p>
+ * <p>The operation failed because the requested operation isn't permitted.</p>
  */
 export declare class OperationNotPermittedException extends __BaseException {
     readonly name: "OperationNotPermittedException";
@@ -241,7 +245,7 @@ export declare class OperationNotPermittedException extends __BaseException {
 }
 /**
  * @public
- * <p>The specified invitation was already accepted.</p>
+ * <p>The operation failed because the specified invitation was already accepted.</p>
  */
 export declare class ResourceShareInvitationAlreadyAcceptedException extends __BaseException {
     readonly name: "ResourceShareInvitationAlreadyAcceptedException";
@@ -253,7 +257,7 @@ export declare class ResourceShareInvitationAlreadyAcceptedException extends __B
 }
 /**
  * @public
- * <p>The specified invitation was already rejected.</p>
+ * <p>The operation failed because the specified invitation was already rejected.</p>
  */
 export declare class ResourceShareInvitationAlreadyRejectedException extends __BaseException {
     readonly name: "ResourceShareInvitationAlreadyRejectedException";
@@ -265,7 +269,8 @@ export declare class ResourceShareInvitationAlreadyRejectedException extends __B
 }
 /**
  * @public
- * <p>The specified Amazon Resource Name (ARN) for an invitation was not found.</p>
+ * <p>The operation failed because the specified <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Name (ARN)</a> for an invitation was not
+ *             found.</p>
  */
 export declare class ResourceShareInvitationArnNotFoundException extends __BaseException {
     readonly name: "ResourceShareInvitationArnNotFoundException";
@@ -277,7 +282,8 @@ export declare class ResourceShareInvitationArnNotFoundException extends __BaseE
 }
 /**
  * @public
- * <p>The specified invitation is expired.</p>
+ * <p>The operation failed because the specified invitation is past its expiration date and
+ *             time.</p>
  */
 export declare class ResourceShareInvitationExpiredException extends __BaseException {
     readonly name: "ResourceShareInvitationExpiredException";
@@ -289,7 +295,8 @@ export declare class ResourceShareInvitationExpiredException extends __BaseExcep
 }
 /**
  * @public
- * <p>The service could not respond to the request due to an internal problem.</p>
+ * <p>The operation failed because the service could not respond to the request due to an
+ *             internal problem. Try again later.</p>
  */
 export declare class ServerInternalException extends __BaseException {
     readonly name: "ServerInternalException";
@@ -301,7 +308,7 @@ export declare class ServerInternalException extends __BaseException {
 }
 /**
  * @public
- * <p>The service is not available.</p>
+ * <p>The operation failed because the service isn't available. Try again later.</p>
  */
 export declare class ServiceUnavailableException extends __BaseException {
     readonly name: "ServiceUnavailableException";
@@ -316,7 +323,7 @@ export declare class ServiceUnavailableException extends __BaseException {
  */
 export interface AssociateResourceShareRequest {
     /**
-     * <p>Specifies the <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resoure Name (ARN)</a> of the resource share that you want to add principals or resources
+     * <p>Specifies the <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Name (ARN)</a> of the resource share that you want to add principals or resources
      *             to.</p>
      */
     resourceShareArn: string | undefined;
@@ -337,7 +344,7 @@ export interface AssociateResourceShareRequest {
      *                </p>
      *             </li>
      *             <li>
-     *                <p>An <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resoure Name (ARN)</a> of an organization in Organizations, for example:
+     *                <p>An <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Name (ARN)</a> of an organization in Organizations, for example:
      *                         <code>organizations::123456789012:organization/o-exampleorgid</code>
      *                </p>
      *             </li>
@@ -373,6 +380,9 @@ export interface AssociateResourceShareRequest {
      *              value.</a>.</p>
      *          <p>If you don't provide this value, then Amazon Web Services generates a random one for
      *              you.</p>
+     *          <p>If you retry the operation with the same <code>ClientToken</code>, but with
+     *              different parameters, the retry fails with an <code>IdempotentParameterMismatch</code>
+     *              error.</p>
      */
     clientToken?: string;
 }
@@ -394,7 +404,7 @@ export interface AssociateResourceShareResponse {
 }
 /**
  * @public
- * <p>A parameter is not valid.</p>
+ * <p>The operation failed because a parameter you specified isn't valid.</p>
  */
 export declare class InvalidParameterException extends __BaseException {
     readonly name: "InvalidParameterException";
@@ -406,7 +416,8 @@ export declare class InvalidParameterException extends __BaseException {
 }
 /**
  * @public
- * <p>The requested state transition is not valid.</p>
+ * <p>The operation failed because the requested operation isn't valid for the resource
+ *             share in its current state.</p>
  */
 export declare class InvalidStateTransitionException extends __BaseException {
     readonly name: "InvalidStateTransitionException";
@@ -418,7 +429,9 @@ export declare class InvalidStateTransitionException extends __BaseException {
 }
 /**
  * @public
- * <p>This request would exceed the limit for resource shares for your account.</p>
+ * <p>The operation failed because it would exceed the limit for resource shares for your account. To
+ *             view the limits for your Amazon Web Services account, see the <a href="https://console.aws.amazon.com/servicequotas/home/services/ram/quotas">RAM page in the Service Quotas
+ *                 console</a>.</p>
  */
 export declare class ResourceShareLimitExceededException extends __BaseException {
     readonly name: "ResourceShareLimitExceededException";
@@ -430,8 +443,8 @@ export declare class ResourceShareLimitExceededException extends __BaseException
 }
 /**
  * @public
- * <p>You exceeded the rate at which you are allowed to perform this operation. Please try
- *             again later.</p>
+ * <p>The operation failed because it exceeded the rate at which you are allowed to perform
+ *             this operation. Please try again later.</p>
  */
 export declare class ThrottlingException extends __BaseException {
     readonly name: "ThrottlingException";
@@ -443,7 +456,7 @@ export declare class ThrottlingException extends __BaseException {
 }
 /**
  * @public
- * <p>A specified resource was not found.</p>
+ * <p>The operation failed because a specified resource couldn't be found.</p>
  */
 export declare class UnknownResourceException extends __BaseException {
     readonly name: "UnknownResourceException";
@@ -458,21 +471,21 @@ export declare class UnknownResourceException extends __BaseException {
  */
 export interface AssociateResourceSharePermissionRequest {
     /**
-     * <p>Specifies the <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resoure Name (ARN)</a> of the resource share to which you want to add or replace
+     * <p>Specifies the <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Name (ARN)</a> of the resource share to which you want to add or replace
      *             permissions.</p>
      */
     resourceShareArn: string | undefined;
     /**
-     * <p>Specifies the <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resoure Name (ARN)</a> of the RAM permission to associate with the resource share.
+     * <p>Specifies the <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Name (ARN)</a> of the RAM permission to associate with the resource share.
      *             To find the ARN for a permission, use either the <a>ListPermissions</a> operation or go to the <a href="https://console.aws.amazon.com/ram/home#Permissions:">Permissions library</a> page in the RAM console and
      *              then choose the name of the permission. The ARN is displayed on the detail page.</p>
      */
     permissionArn: string | undefined;
     /**
-     * <p>Specifies whether the specified permission should replace or add to the existing
-     *             permission associated with the resource share. Use <code>true</code> to replace the current
-     *             permissions. Use <code>false</code> to add the permission to the current permission. The
-     *             default value is <code>false</code>.</p>
+     * <p>Specifies whether the specified permission should replace the existing permission
+     *             associated with the resource share. Use <code>true</code> to replace the current permissions. Use
+     *                 <code>false</code> to add the permission to a resource share that currently doesn't
+     *             have a permission. The default value is <code>false</code>.</p>
      *          <note>
      *             <p>A resource share can have only one permission per resource type. If a resource share already has a
      *                 permission for the specified resource type and you don't set <code>replace</code> to
@@ -490,25 +503,535 @@ export interface AssociateResourceSharePermissionRequest {
      *              value.</a>.</p>
      *          <p>If you don't provide this value, then Amazon Web Services generates a random one for
      *              you.</p>
+     *          <p>If you retry the operation with the same <code>ClientToken</code>, but with
+     *              different parameters, the retry fails with an <code>IdempotentParameterMismatch</code>
+     *              error.</p>
      */
     clientToken?: string;
     /**
-     * <p>Specifies the version of the RAM permission to associate with the resource share. If you don't
-     *             specify this parameter, the operation uses the version designated as the default. You
-     *             can use the <a>ListPermissionVersions</a> operation to discover the available
-     *             versions of a permission.</p>
+     * <p>Specifies the version of the RAM permission to associate with the resource share. You can
+     *             specify <i>only</i> the version that is currently set as the default
+     *             version for the permission. If you also set the <code>replace</code> pararameter to
+     *                 <code>true</code>, then this operation updates an outdated version of the permission
+     *             to the current default version.</p>
+     *          <note>
+     *             <p>You don't need to specify this parameter because the default behavior is to use
+     *                 the version that is currently set as the default version for the permission. This
+     *                 parameter is supported for backwards compatibility.</p>
+     *          </note>
+     */
+    permissionVersion?: number;
+}
+/**
+ * @public
+ */
+export interface AssociateResourceSharePermissionResponse {
+    /**
+     * <p>A return value of <code>true</code> indicates that the request succeeded.
+     *              A value of <code>false</code> indicates that the request failed.</p>
+     */
+    returnValue?: boolean;
+    /**
+     * <p>The idempotency identifier associated with this request. If you
+     *              want to repeat the same operation in an idempotent manner then you must include this
+     *              value in the <code>clientToken</code> request parameter of that later call. All other
+     *              parameters must also have the same values that you used in the first call.</p>
+     */
+    clientToken?: string;
+}
+/**
+ * @public
+ * <p>A structure containing a tag. A tag is metadata that you can attach to your resources
+ *             to help organize and categorize them. You can also use them to help you secure your
+ *             resources. For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/access_tags.html">Controlling access to Amazon Web Services resources
+ *                 using tags</a>.</p>
+ *          <p>For more information about tags, see <a href="https://docs.aws.amazon.com/general/latest/gr/aws_tagging.html">Tagging Amazon Web Services resources</a> in the
+ *                 <i>Amazon Web Services General Reference Guide</i>.</p>
+ */
+export interface Tag {
+    /**
+     * <p>The key, or name, attached to the tag. Every tag must have a key. Key names are case
+     *             sensitive.</p>
+     */
+    key?: string;
+    /**
+     * <p>The string value attached to the tag. The value can be an empty string. Key values are
+     *             case sensitive.</p>
+     */
+    value?: string;
+}
+/**
+ * @public
+ */
+export interface CreatePermissionRequest {
+    /**
+     * <p>Specifies the name of the customer managed permission. The name must be unique within the
+     *             Amazon Web Services Region.</p>
+     */
+    name: string | undefined;
+    /**
+     * <p>Specifies the name of the resource type that this customer managed permission applies to.</p>
+     *          <p>The format is
+     *                     <code>
+     *                <i><service-code></i>:<i><resource-type></i>
+     *             </code>
+     *             and is not case sensitive. For example, to specify an Amazon EC2 Subnet, you can use the
+     *             string <code>ec2:subnet</code>. To see the list of valid values for this parameter,
+     *             query the <a>ListResourceTypes</a> operation.</p>
+     */
+    resourceType: string | undefined;
+    /**
+     * <p>A string in JSON format string that contains the following elements of a
+     *             resource-based policy:</p>
+     *          <ul>
+     *             <li>
+     *                <p>
+     *                   <b>Effect</b>: must be set to
+     *                     <code>ALLOW</code>.</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <b>Action</b>: specifies the actions that are
+     *                     allowed by this customer managed permission. The list must contain only actions that are supported by
+     *                     the specified resource type. For a list of all actions supported by each
+     *                     resource type, see <a href="https://docs.aws.amazon.com/service-authorization/latest/reference/reference_policies_actions-resources-contextkeys.html">Actions, resources, and condition keys for Amazon Web Services services</a> in the
+     *                         <i>Identity and Access Management User Guide</i>.</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <b>Condition</b>: (optional) specifies conditional
+     *                     parameters that must evaluate to true when a user attempts an action for that
+     *                     action to be allowed. For more information about the Condition element, see
+     *                     <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition.html">IAM
+     *                         policies: Condition element</a> in the <i>Identity and Access Management User
+     *                     Guide</i>.</p>
+     *             </li>
+     *          </ul>
+     *          <p>This template can't include either the <code>Resource</code> or
+     *             <code>Principal</code> elements. Those are both filled in by RAM when it instantiates
+     *             the resource-based policy on each resource shared using this managed permission. The
+     *             <code>Resource</code> comes from the ARN of the specific resource that you are sharing.
+     *             The <code>Principal</code> comes from the list of identities added to the resource
+     *             share.</p>
+     */
+    policyTemplate: string | undefined;
+    /**
+     * <p>Specifies a unique, case-sensitive identifier that you provide to
+     *              ensure the idempotency of the request. This lets you safely retry the request without
+     *              accidentally performing the same operation a second time. Passing the same value to a
+     *              later call to an operation requires that you also pass the same value for all other
+     *              parameters. We recommend that you use a <a href="https://wikipedia.org/wiki/Universally_unique_identifier">UUID type of
+     *              value.</a>.</p>
+     *          <p>If you don't provide this value, then Amazon Web Services generates a random one for
+     *              you.</p>
+     *          <p>If you retry the operation with the same <code>ClientToken</code>, but with
+     *              different parameters, the retry fails with an <code>IdempotentParameterMismatch</code>
+     *              error.</p>
+     */
+    clientToken?: string;
+    /**
+     * <p>Specifies a list of one or more tag key and value pairs to attach to the
+     *             permission.</p>
+     */
+    tags?: Tag[];
+}
+/**
+ * @public
+ * @enum
+ */
+export declare const PermissionFeatureSet: {
+    readonly CREATED_FROM_POLICY: "CREATED_FROM_POLICY";
+    readonly PROMOTING_TO_STANDARD: "PROMOTING_TO_STANDARD";
+    readonly STANDARD: "STANDARD";
+};
+/**
+ * @public
+ */
+export type PermissionFeatureSet = (typeof PermissionFeatureSet)[keyof typeof PermissionFeatureSet];
+/**
+ * @public
+ * @enum
+ */
+export declare const PermissionType: {
+    readonly AWS_MANAGED: "AWS_MANAGED";
+    readonly CUSTOMER_MANAGED: "CUSTOMER_MANAGED";
+};
+/**
+ * @public
+ */
+export type PermissionType = (typeof PermissionType)[keyof typeof PermissionType];
+/**
+ * @public
+ * <p>Information about an RAM permission.</p>
+ */
+export interface ResourceSharePermissionSummary {
+    /**
+     * <p>The <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Name (ARN)</a> of the permission you want information about.</p>
+     */
+    arn?: string;
+    /**
+     * <p>The version of the permission associated with this resource share.</p>
+     */
+    version?: string;
+    /**
+     * <p>Specifies whether the version of the managed permission used by this resource share is the default version for
+     *             this managed permission.</p>
+     */
+    defaultVersion?: boolean;
+    /**
+     * <p>The name of this managed permission.</p>
+     */
+    name?: string;
+    /**
+     * <p>The type of resource to which this permission applies. This takes the form of:
+     *                 <code>service-code</code>:<code>resource-code</code>, and is case-insensitive. For
+     *             example, an Amazon EC2 Subnet would be represented by the string
+     *             <code>ec2:subnet</code>.</p>
+     */
+    resourceType?: string;
+    /**
+     * <p>The current status of the permission.</p>
+     */
+    status?: string;
+    /**
+     * <p>The date and time when the permission was created.</p>
+     */
+    creationTime?: Date;
+    /**
+     * <p>The date and time when the permission was last updated.</p>
+     */
+    lastUpdatedTime?: Date;
+    /**
+     * <p>Specifies whether the managed permission associated with this resource share is the default managed permission for all
+     *             resources of this resource type.</p>
+     */
+    isResourceTypeDefault?: boolean;
+    /**
+     * <p>The type of managed permission. This can be one of the following values:</p>
+     *          <ul>
+     *             <li>
+     *                <p>
+     *                   <code>AWS_MANAGED</code> – Amazon Web Services created and manages this
+     *                     managed permission. You can associate it with your resource shares, but you can't modify it.</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>CUSTOMER_MANAGED</code> – You, or another principal in
+     *                     your account created this managed permission. You can associate it with your resource shares and create
+     *                     new versions that have different permissions.</p>
+     *             </li>
+     *          </ul>
+     */
+    permissionType?: PermissionType | string;
+    /**
+     * <p>Indicates what features are available for this resource share. This parameter can have one of
+     *             the following values:</p>
+     *          <ul>
+     *             <li>
+     *                <p>
+     *                   <b>STANDARD</b> – A resource share that supports all
+     *                     functionality. These resource shares are visible to all principals you share the resource share with.
+     *                     You can modify these resource shares in RAM using the console or APIs. This resource share might
+     *                     have been created by RAM, or it might have been <b>CREATED_FROM_POLICY</b> and then promoted.</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <b>CREATED_FROM_POLICY</b> – The customer
+     *                     manually shared a resource by attaching a resource-based policy. That policy did
+     *                     not match any existing managed permissions, so RAM created this customer managed permission automatically on the
+     *                     customer's behalf based on the attached policy document. This type of resource share
+     *                     is visible only to the Amazon Web Services account that created it. You can't modify it in
+     *                     RAM unless you promote it. For more information,
+     *                     see <a>PromoteResourceShareCreatedFromPolicy</a>.</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <b>PROMOTING_TO_STANDARD</b> – This
+     *                     resource share was originally <code>CREATED_FROM_POLICY</code>, but the customer ran
+     *                     the <a>PromoteResourceShareCreatedFromPolicy</a> and that operation
+     *                     is still in progress. This value changes to <code>STANDARD</code> when
+     *                     complete.</p>
+     *             </li>
+     *          </ul>
+     */
+    featureSet?: PermissionFeatureSet | string;
+    /**
+     * <p>A list of the tag key value pairs currently attached to the permission.</p>
+     */
+    tags?: Tag[];
+}
+/**
+ * @public
+ */
+export interface CreatePermissionResponse {
+    /**
+     * <p>A structure with information about this customer managed permission.</p>
+     */
+    permission?: ResourceSharePermissionSummary;
+    /**
+     * <p>The idempotency identifier associated with this request. If you
+     *              want to repeat the same operation in an idempotent manner then you must include this
+     *              value in the <code>clientToken</code> request parameter of that later call. All other
+     *              parameters must also have the same values that you used in the first call.</p>
+     */
+    clientToken?: string;
+}
+/**
+ * @public
+ * <p>The operation failed because a policy you specified isn't valid.</p>
+ */
+export declare class InvalidPolicyException extends __BaseException {
+    readonly name: "InvalidPolicyException";
+    readonly $fault: "client";
+    /**
+     * @internal
+     */
+    constructor(opts: __ExceptionOptionType<InvalidPolicyException, __BaseException>);
+}
+/**
+ * @public
+ * <p>The operation failed because the policy template that you provided isn't valid.</p>
+ */
+export declare class MalformedPolicyTemplateException extends __BaseException {
+    readonly name: "MalformedPolicyTemplateException";
+    readonly $fault: "client";
+    /**
+     * @internal
+     */
+    constructor(opts: __ExceptionOptionType<MalformedPolicyTemplateException, __BaseException>);
+}
+/**
+ * @public
+ * <p>The operation failed because a permission with the specified name already exists in
+ *             the requested Amazon Web Services Region. Choose a different name.</p>
+ */
+export declare class PermissionAlreadyExistsException extends __BaseException {
+    readonly name: "PermissionAlreadyExistsException";
+    readonly $fault: "client";
+    /**
+     * @internal
+     */
+    constructor(opts: __ExceptionOptionType<PermissionAlreadyExistsException, __BaseException>);
+}
+/**
+ * @public
+ * <p>The operation failed because it would exceed the maximum number of permissions you can
+ *             create in each Amazon Web Services Region. To view the limits for your Amazon Web Services account, see the <a href="https://console.aws.amazon.com/servicequotas/home/services/ram/quotas">RAM page in the
+ *                 Service Quotas console</a>.</p>
+ */
+export declare class PermissionLimitExceededException extends __BaseException {
+    readonly name: "PermissionLimitExceededException";
+    readonly $fault: "client";
+    /**
+     * @internal
+     */
+    constructor(opts: __ExceptionOptionType<PermissionLimitExceededException, __BaseException>);
+}
+/**
+ * @public
+ */
+export interface CreatePermissionVersionRequest {
+    /**
+     * <p>Specifies the <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Name (ARN)</a> of the customer managed permission you're creating a new version for.</p>
+     */
+    permissionArn: string | undefined;
+    /**
+     * <p>A string in JSON format string that contains the following elements of a
+     *             resource-based policy:</p>
+     *          <ul>
+     *             <li>
+     *                <p>
+     *                   <b>Effect</b>: must be set to
+     *                     <code>ALLOW</code>.</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <b>Action</b>: specifies the actions that are
+     *                     allowed by this customer managed permission. The list must contain only actions that are supported by
+     *                     the specified resource type. For a list of all actions supported by each
+     *                     resource type, see <a href="https://docs.aws.amazon.com/service-authorization/latest/reference/reference_policies_actions-resources-contextkeys.html">Actions, resources, and condition keys for Amazon Web Services services</a> in the
+     *                         <i>Identity and Access Management User Guide</i>.</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <b>Condition</b>: (optional) specifies conditional
+     *                     parameters that must evaluate to true when a user attempts an action for that
+     *                     action to be allowed. For more information about the Condition element, see
+     *                     <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_condition.html">IAM
+     *                         policies: Condition element</a> in the <i>Identity and Access Management User
+     *                     Guide</i>.</p>
+     *             </li>
+     *          </ul>
+     *          <p>This template can't include either the <code>Resource</code> or
+     *             <code>Principal</code> elements. Those are both filled in by RAM when it instantiates
+     *             the resource-based policy on each resource shared using this managed permission. The
+     *             <code>Resource</code> comes from the ARN of the specific resource that you are sharing.
+     *             The <code>Principal</code> comes from the list of identities added to the resource
+     *             share.</p>
+     */
+    policyTemplate: string | undefined;
+    /**
+     * <p>Specifies a unique, case-sensitive identifier that you provide to
+     *              ensure the idempotency of the request. This lets you safely retry the request without
+     *              accidentally performing the same operation a second time. Passing the same value to a
+     *              later call to an operation requires that you also pass the same value for all other
+     *              parameters. We recommend that you use a <a href="https://wikipedia.org/wiki/Universally_unique_identifier">UUID type of
+     *              value.</a>.</p>
+     *          <p>If you don't provide this value, then Amazon Web Services generates a random one for
+     *              you.</p>
+     *          <p>If you retry the operation with the same <code>ClientToken</code>, but with
+     *              different parameters, the retry fails with an <code>IdempotentParameterMismatch</code>
+     *              error.</p>
+     */
+    clientToken?: string;
+}
+/**
+ * @public
+ * @enum
+ */
+export declare const PermissionStatus: {
+    readonly ATTACHABLE: "ATTACHABLE";
+    readonly DELETED: "DELETED";
+    readonly DELETING: "DELETING";
+    readonly UNATTACHABLE: "UNATTACHABLE";
+};
+/**
+ * @public
+ */
+export type PermissionStatus = (typeof PermissionStatus)[keyof typeof PermissionStatus];
+/**
+ * @public
+ * <p>Information about a RAM managed permission.</p>
+ */
+export interface ResourceSharePermissionDetail {
+    /**
+     * <p>The <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Name (ARN)</a> of this RAM managed permission.</p>
+     */
+    arn?: string;
+    /**
+     * <p>The version of the permission described in this response.</p>
+     */
+    version?: string;
+    /**
+     * <p>Specifies whether the version of the permission represented in this response is the
+     *             default version for this permission.</p>
+     */
+    defaultVersion?: boolean;
+    /**
+     * <p>The name of this permission.</p>
+     */
+    name?: string;
+    /**
+     * <p>The resource type to which this permission applies.</p>
+     */
+    resourceType?: string;
+    /**
+     * <p>The permission's effect and actions in JSON format. The <code>effect</code> indicates
+     *             whether the specified actions are allowed or denied. The <code>actions</code> list the
+     *             operations to which the principal is granted or denied access.</p>
+     */
+    permission?: string;
+    /**
+     * <p>The date and time when the permission was created.</p>
+     */
+    creationTime?: Date;
+    /**
+     * <p>The date and time when the permission was last updated.</p>
+     */
+    lastUpdatedTime?: Date;
+    /**
+     * <p>Specifies whether the version of the permission represented in this response is the
+     *             default version for all resources of this resource type.</p>
+     */
+    isResourceTypeDefault?: boolean;
+    /**
+     * <p>The type of managed permission. This can be one of the following values:</p>
+     *          <ul>
+     *             <li>
+     *                <p>
+     *                   <code>AWS_MANAGED</code> – Amazon Web Services created and manages this
+     *                     managed permission. You can associate it with your resource shares, but you can't modify it.</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>CUSTOMER_MANAGED</code> – You, or another principal in
+     *                     your account created this managed permission. You can associate it with your resource shares and create
+     *                     new versions that have different permissions.</p>
+     *             </li>
+     *          </ul>
+     */
+    permissionType?: PermissionType | string;
+    /**
+     * <p>Indicates what features are available for this resource share. This parameter can have one of
+     *             the following values:</p>
+     *          <ul>
+     *             <li>
+     *                <p>
+     *                   <b>STANDARD</b> – A resource share that supports all
+     *                     functionality. These resource shares are visible to all principals you share the resource share with.
+     *                     You can modify these resource shares in RAM using the console or APIs. This resource share might
+     *                     have been created by RAM, or it might have been <b>CREATED_FROM_POLICY</b> and then promoted.</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <b>CREATED_FROM_POLICY</b> – The customer
+     *                     manually shared a resource by attaching a resource-based policy. That policy did
+     *                     not match any existing managed permissions, so RAM created this customer managed permission automatically on the
+     *                     customer's behalf based on the attached policy document. This type of resource share
+     *                     is visible only to the Amazon Web Services account that created it. You can't modify it in
+     *                     RAM unless you promote it. For more information,
+     *                     see <a>PromoteResourceShareCreatedFromPolicy</a>.</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <b>PROMOTING_TO_STANDARD</b> – This
+     *                     resource share was originally <code>CREATED_FROM_POLICY</code>, but the customer ran
+     *                     the <a>PromoteResourceShareCreatedFromPolicy</a> and that operation
+     *                     is still in progress. This value changes to <code>STANDARD</code> when
+     *                     complete.</p>
+     *             </li>
+     *          </ul>
+     */
+    featureSet?: PermissionFeatureSet | string;
+    /**
+     * <p>The current status of the association between the permission and the resource share.
+     *             The following are the possible values:</p>
+     *          <ul>
+     *             <li>
+     *                <p>
+     *                   <code>ATTACHABLE</code> – This permission or version can be associated
+     *                 with resource shares.</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>UNATTACHABLE</code> – This permission or version can't
+     *                 currently be associated with resource shares.</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>DELETING</code> – This permission or version is in the process of
+     *                     being deleted.</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>DELETED</code> – This permission or version is deleted.</p>
+     *             </li>
+     *          </ul>
      */
-    permissionVersion?: number;
+    status?: PermissionStatus | string;
+    /**
+     * <p>The tag key and value pairs attached to the resource share.</p>
+     */
+    tags?: Tag[];
 }
 /**
  * @public
  */
-export interface AssociateResourceSharePermissionResponse {
+export interface CreatePermissionVersionResponse {
     /**
-     * <p>A return value of <code>true</code> indicates that the request succeeded.
-     *              A value of <code>false</code> indicates that the request failed.</p>
+     * <p>Information about a RAM managed permission.</p>
      */
-    returnValue?: boolean;
+    permission?: ResourceSharePermissionDetail;
     /**
      * <p>The idempotency identifier associated with this request. If you
      *              want to repeat the same operation in an idempotent manner then you must include this
@@ -519,24 +1042,17 @@ export interface AssociateResourceSharePermissionResponse {
 }
 /**
  * @public
- * <p>A structure containing a tag. A tag is metadata that you can attach to your resources
- *             to help organize and categorize them. You can also use them to help you secure your
- *             resources. For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/access_tags.html">Controlling access to Amazon Web Services resources
- *                 using tags</a>.</p>
- *          <p>For more information about tags, see <a href="https://docs.aws.amazon.com/general/latest/gr/aws_tagging.html">Tagging Amazon Web Services resources</a> in the
- *                 <i>Amazon Web Services General Reference Guide</i>.</p>
+ * <p>The operation failed because it would exceed the limit for the number of versions you
+ *             can have for a permission. To view the limits for your Amazon Web Services account, see the <a href="https://console.aws.amazon.com/servicequotas/home/services/ram/quotas">RAM page in the
+ *                 Service Quotas console</a>.</p>
  */
-export interface Tag {
-    /**
-     * <p>The key, or name, attached to the tag. Every tag must have a key. Key names are case
-     *             sensitive.</p>
-     */
-    key?: string;
+export declare class PermissionVersionsLimitExceededException extends __BaseException {
+    readonly name: "PermissionVersionsLimitExceededException";
+    readonly $fault: "client";
     /**
-     * <p>The string value attached to the tag. The value can be an empty string. Key values are
-     *             case sensitive.</p>
+     * @internal
      */
-    value?: string;
+    constructor(opts: __ExceptionOptionType<PermissionVersionsLimitExceededException, __BaseException>);
 }
 /**
  * @public
@@ -560,7 +1076,7 @@ export interface CreateResourceShareRequest {
      *                </p>
      *             </li>
      *             <li>
-     *                <p>An <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resoure Name (ARN)</a> of an organization in Organizations, for example:
+     *                <p>An <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Name (ARN)</a> of an organization in Organizations, for example:
      *                         <code>organizations::123456789012:organization/o-exampleorgid</code>
      *                </p>
      *             </li>
@@ -609,6 +1125,9 @@ export interface CreateResourceShareRequest {
      *              value.</a>.</p>
      *          <p>If you don't provide this value, then Amazon Web Services generates a random one for
      *              you.</p>
+     *          <p>If you retry the operation with the same <code>ClientToken</code>, but with
+     *              different parameters, the retry fails with an <code>IdempotentParameterMismatch</code>
+     *              error.</p>
      */
     clientToken?: string;
     /**
@@ -653,7 +1172,7 @@ export type ResourceShareStatus = (typeof ResourceShareStatus)[keyof typeof Reso
  */
 export interface ResourceShare {
     /**
-     * <p>The <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resoure Name (ARN)</a> of the resource share</p>
+     * <p>The <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Name (ARN)</a> of the resource share</p>
      */
     resourceShareArn?: string;
     /**
@@ -667,6 +1186,19 @@ export interface ResourceShare {
     /**
      * <p>Indicates whether principals outside your organization in Organizations can be associated
      *             with a resource share.</p>
+     *          <ul>
+     *             <li>
+     *                <p>
+     *                   <code>True</code> – the resource share can be shared with any
+     *                     Amazon Web Services account.</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>False</code> – the resource share can be shared with only
+     *                     accounts in the same organization as the account that owns the resource
+     *                     share.</p>
+     *             </li>
+     *          </ul>
      */
     allowExternalPrincipals?: boolean;
     /**
@@ -690,25 +1222,33 @@ export interface ResourceShare {
      */
     lastUpdatedTime?: Date;
     /**
-     * <p>Indicates how the resource share was created. Possible values include:</p>
+     * <p>Indicates what features are available for this resource share. This parameter can have one of
+     *             the following values:</p>
      *          <ul>
      *             <li>
      *                <p>
-     *                   <code>CREATED_FROM_POLICY</code> - Indicates that the resource share was created from an
-     *                     Identity and Access Management (IAM) resource-based permission policy attached to the resource.
-     *                     This type of resource share is visible only to the Amazon Web Services account that created it. You
-     *                     can't modify it in RAM unless you promote it. For more information, see <a>PromoteResourceShareCreatedFromPolicy</a>.</p>
+     *                   <b>STANDARD</b> – A resource share that supports all
+     *                     functionality. These resource shares are visible to all principals you share the resource share with.
+     *                     You can modify these resource shares in RAM using the console or APIs. This resource share might
+     *                     have been created by RAM, or it might have been <b>CREATED_FROM_POLICY</b> and then promoted.</p>
      *             </li>
      *             <li>
      *                <p>
-     *                   <code>PROMOTING_TO_STANDARD</code> - The resource share is in the process of being
-     *                     promoted. For more information, see <a>PromoteResourceShareCreatedFromPolicy</a>.</p>
+     *                   <b>CREATED_FROM_POLICY</b> – The customer
+     *                     manually shared a resource by attaching a resource-based policy. That policy did
+     *                     not match any existing managed permissions, so RAM created this customer managed permission automatically on the
+     *                     customer's behalf based on the attached policy document. This type of resource share
+     *                     is visible only to the Amazon Web Services account that created it. You can't modify it in
+     *                     RAM unless you promote it. For more information,
+     *                     see <a>PromoteResourceShareCreatedFromPolicy</a>.</p>
      *             </li>
      *             <li>
      *                <p>
-     *                   <code>STANDARD</code> - Indicates that the resource share was created in RAM using the
-     *                     console or APIs. These resource shares are visible to all principals you share the resource share
-     *                     with. You can modify these resource shares in RAM using the console or APIs.</p>
+     *                   <b>PROMOTING_TO_STANDARD</b> – This
+     *                     resource share was originally <code>CREATED_FROM_POLICY</code>, but the customer ran
+     *                     the <a>PromoteResourceShareCreatedFromPolicy</a> and that operation
+     *                     is still in progress. This value changes to <code>STANDARD</code> when
+     *                     complete.</p>
      *             </li>
      *          </ul>
      */
@@ -732,7 +1272,8 @@ export interface CreateResourceShareResponse {
 }
 /**
  * @public
- * <p>The specified tag key is a reserved word and can't be used.</p>
+ * <p>The operation failed because the specified tag key is a reserved word and can't be
+ *             used.</p>
  */
 export declare class TagPolicyViolationException extends __BaseException {
     readonly name: "TagPolicyViolationException";
@@ -742,12 +1283,111 @@ export declare class TagPolicyViolationException extends __BaseException {
      */
     constructor(opts: __ExceptionOptionType<TagPolicyViolationException, __BaseException>);
 }
+/**
+ * @public
+ */
+export interface DeletePermissionRequest {
+    /**
+     * <p>Specifies the <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Name (ARN)</a> of the customer managed permission that you want to delete.</p>
+     */
+    permissionArn: string | undefined;
+    /**
+     * <p>Specifies a unique, case-sensitive identifier that you provide to
+     *              ensure the idempotency of the request. This lets you safely retry the request without
+     *              accidentally performing the same operation a second time. Passing the same value to a
+     *              later call to an operation requires that you also pass the same value for all other
+     *              parameters. We recommend that you use a <a href="https://wikipedia.org/wiki/Universally_unique_identifier">UUID type of
+     *              value.</a>.</p>
+     *          <p>If you don't provide this value, then Amazon Web Services generates a random one for
+     *              you.</p>
+     *          <p>If you retry the operation with the same <code>ClientToken</code>, but with
+     *              different parameters, the retry fails with an <code>IdempotentParameterMismatch</code>
+     *              error.</p>
+     */
+    clientToken?: string;
+}
+/**
+ * @public
+ */
+export interface DeletePermissionResponse {
+    /**
+     * <p>A boolean that indicates whether the delete operations succeeded.</p>
+     */
+    returnValue?: boolean;
+    /**
+     * <p>The idempotency identifier associated with this request. If you
+     *              want to repeat the same operation in an idempotent manner then you must include this
+     *              value in the <code>clientToken</code> request parameter of that later call. All other
+     *              parameters must also have the same values that you used in the first call.</p>
+     */
+    clientToken?: string;
+    /**
+     * <p>This operation is performed asynchronously, and this response parameter indicates the
+     *             current status.</p>
+     */
+    permissionStatus?: PermissionStatus | string;
+}
+/**
+ * @public
+ */
+export interface DeletePermissionVersionRequest {
+    /**
+     * <p>Specifies the <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Name (ARN)</a> of the permission with the version you want to delete.</p>
+     */
+    permissionArn: string | undefined;
+    /**
+     * <p>Specifies the version number to delete.</p>
+     *          <p>You can't delete the default version for a customer managed permission.</p>
+     *          <p>You can't delete a version if it's the only version of the permission. You must either
+     *             first create another version, or delete the permission completely.</p>
+     *          <p>You can't delete a version if it is attached to any resource shares. If the version is
+     *             the default, you must first use <a>SetDefaultPermissionVersion</a> to set a
+     *             different version as the default for the customer managed permission, and then use <a>AssociateResourceSharePermission</a> to update your resource shares to use
+     *             the new default version.</p>
+     */
+    permissionVersion: number | undefined;
+    /**
+     * <p>Specifies a unique, case-sensitive identifier that you provide to
+     *              ensure the idempotency of the request. This lets you safely retry the request without
+     *              accidentally performing the same operation a second time. Passing the same value to a
+     *              later call to an operation requires that you also pass the same value for all other
+     *              parameters. We recommend that you use a <a href="https://wikipedia.org/wiki/Universally_unique_identifier">UUID type of
+     *              value.</a>.</p>
+     *          <p>If you don't provide this value, then Amazon Web Services generates a random one for
+     *              you.</p>
+     *          <p>If you retry the operation with the same <code>ClientToken</code>, but with
+     *              different parameters, the retry fails with an <code>IdempotentParameterMismatch</code>
+     *              error.</p>
+     */
+    clientToken?: string;
+}
+/**
+ * @public
+ */
+export interface DeletePermissionVersionResponse {
+    /**
+     * <p>A boolean value that indicates whether the operation is successful.</p>
+     */
+    returnValue?: boolean;
+    /**
+     * <p>The idempotency identifier associated with this request. If you
+     *              want to repeat the same operation in an idempotent manner then you must include this
+     *              value in the <code>clientToken</code> request parameter of that later call. All other
+     *              parameters must also have the same values that you used in the first call.</p>
+     */
+    clientToken?: string;
+    /**
+     * <p>This operation is performed asynchronously, and this response parameter indicates the
+     *             current status.</p>
+     */
+    permissionStatus?: PermissionStatus | string;
+}
 /**
  * @public
  */
 export interface DeleteResourceShareRequest {
     /**
-     * <p>Specifies the <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resoure Name (ARN)</a> of the resource share to delete.</p>
+     * <p>Specifies the <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Name (ARN)</a> of the resource share to delete.</p>
      */
     resourceShareArn: string | undefined;
     /**
@@ -759,6 +1399,9 @@ export interface DeleteResourceShareRequest {
      *              value.</a>.</p>
      *          <p>If you don't provide this value, then Amazon Web Services generates a random one for
      *              you.</p>
+     *          <p>If you retry the operation with the same <code>ClientToken</code>, but with
+     *              different parameters, the retry fails with an <code>IdempotentParameterMismatch</code>
+     *              error.</p>
      */
     clientToken?: string;
 }
@@ -784,13 +1427,14 @@ export interface DeleteResourceShareResponse {
  */
 export interface DisassociateResourceShareRequest {
     /**
-     * <p>Specifies <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resoure Name (ARN)</a> of the resource share that you want to remove resources from.</p>
+     * <p>Specifies <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Name (ARN)</a> of the resource share that you want to remove resources or principals
+     *             from.</p>
      */
     resourceShareArn: string | undefined;
     /**
      * <p>Specifies a list of <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Names (ARNs)</a> for one or more resources that you want to remove from
      *             the resource share. After the operation runs, these resources are no longer shared with principals
-     *             outside of the Amazon Web Services account that created the resources.</p>
+     *             associated with the resource share.</p>
      */
     resourceArns?: string[];
     /**
@@ -803,7 +1447,7 @@ export interface DisassociateResourceShareRequest {
      *                </p>
      *             </li>
      *             <li>
-     *                <p>An <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resoure Name (ARN)</a> of an organization in Organizations, for example:
+     *                <p>An <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Name (ARN)</a> of an organization in Organizations, for example:
      *                         <code>organizations::123456789012:organization/o-exampleorgid</code>
      *                </p>
      *             </li>
@@ -839,6 +1483,9 @@ export interface DisassociateResourceShareRequest {
      *              value.</a>.</p>
      *          <p>If you don't provide this value, then Amazon Web Services generates a random one for
      *              you.</p>
+     *          <p>If you retry the operation with the same <code>ClientToken</code>, but with
+     *              different parameters, the retry fails with an <code>IdempotentParameterMismatch</code>
+     *              error.</p>
      */
     clientToken?: string;
 }
@@ -847,7 +1494,7 @@ export interface DisassociateResourceShareRequest {
  */
 export interface DisassociateResourceShareResponse {
     /**
-     * <p>An array of objects that contain information about the updated associations for this
+     * <p>An array of objects with information about the updated associations for this
      *             resource share.</p>
      */
     resourceShareAssociations?: ResourceShareAssociation[];
@@ -864,12 +1511,12 @@ export interface DisassociateResourceShareResponse {
  */
 export interface DisassociateResourceSharePermissionRequest {
     /**
-     * <p>The <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resoure Name (ARN)</a> of the resource share from which you want to disassociate a permission.</p>
+     * <p>The <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Name (ARN)</a> of the resource share that you want to remove the managed permission from.</p>
      */
     resourceShareArn: string | undefined;
     /**
-     * <p>The <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resoure Name (ARN)</a> of the permission to disassociate from the resource share. Changes to permissions
-     *             take effect immediately.</p>
+     * <p>The <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Name (ARN)</a> of the managed permission to disassociate from the resource share. Changes to permissions take
+     *             effect immediately.</p>
      */
     permissionArn: string | undefined;
     /**
@@ -881,6 +1528,9 @@ export interface DisassociateResourceSharePermissionRequest {
      *              value.</a>.</p>
      *          <p>If you don't provide this value, then Amazon Web Services generates a random one for
      *              you.</p>
+     *          <p>If you retry the operation with the same <code>ClientToken</code>, but with
+     *              different parameters, the retry fails with an <code>IdempotentParameterMismatch</code>
+     *              error.</p>
      */
     clientToken?: string;
 }
@@ -921,69 +1571,24 @@ export interface EnableSharingWithAwsOrganizationResponse {
  */
 export interface GetPermissionRequest {
     /**
-     * <p>Specifies the <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resoure Name (ARN)</a> of the permission whose contents you want to retrieve.
+     * <p>Specifies the <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Name (ARN)</a> of the permission whose contents you want to retrieve.
      *             To find the ARN for a permission, use either the <a>ListPermissions</a> operation or go to the <a href="https://console.aws.amazon.com/ram/home#Permissions:">Permissions library</a> page in the RAM console and
      *              then choose the name of the permission. The ARN is displayed on the detail page.</p>
      */
     permissionArn: string | undefined;
     /**
-     * <p>Specifies identifier for the version of the RAM permission to retrieve. If you don't
-     *             specify this parameter, the operation retrieves the default version.</p>
+     * <p>Specifies the version number of the RAM permission to retrieve. If you don't specify
+     *             this parameter, the operation retrieves the default version.</p>
+     *          <p>To see the list of available versions, use <a>ListPermissionVersions</a>.</p>
      */
     permissionVersion?: number;
 }
-/**
- * @public
- * <p>Information about an RAM permission.</p>
- */
-export interface ResourceSharePermissionDetail {
-    /**
-     * <p>The <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resoure Name (ARN)</a> of this RAM permission.</p>
-     */
-    arn?: string;
-    /**
-     * <p>The version of the permission represented in this structure.</p>
-     */
-    version?: string;
-    /**
-     * <p>Specifies whether the version of the permission represented in this structure is the
-     *             default version for this permission.</p>
-     */
-    defaultVersion?: boolean;
-    /**
-     * <p>The name of this permission.</p>
-     */
-    name?: string;
-    /**
-     * <p>The resource type to which this permission applies.</p>
-     */
-    resourceType?: string;
-    /**
-     * <p>The permission's effect and actions in JSON format. The <code>effect</code> indicates
-     *             whether the specified actions are allowed or denied. The <code>actions</code> list the
-     *             operations to which the principal is granted or denied access.</p>
-     */
-    permission?: string;
-    /**
-     * <p>The date and time when the permission was created.</p>
-     */
-    creationTime?: Date;
-    /**
-     * <p>The date and time when the permission was last updated.</p>
-     */
-    lastUpdatedTime?: Date;
-    /**
-     * <p>Specifies whether the version of the permission represented in this structure is the
-     *             default version for all resources of this resource type.</p>
-     */
-    isResourceTypeDefault?: boolean;
-}
 /**
  * @public
  */
 export interface GetPermissionResponse {
     /**
-     * <p>An object that contains information about the permission.</p>
+     * <p>An object with details about the permission.</p>
      */
     permission?: ResourceSharePermissionDetail;
 }
@@ -1039,7 +1644,9 @@ export interface GetResourcePoliciesResponse {
 }
 /**
  * @public
- * <p>The specified value for <code>NextToken</code> is not valid.</p>
+ * <p>The operation failed because the specified value for <code>NextToken</code> isn't
+ *             valid. You must specify a value you received in the <code>NextToken</code> response of a
+ *             previous call to this operation.</p>
  */
 export declare class InvalidNextTokenException extends __BaseException {
     readonly name: "InvalidNextTokenException";
@@ -1051,7 +1658,7 @@ export declare class InvalidNextTokenException extends __BaseException {
 }
 /**
  * @public
- * <p>The specified Amazon Resource Name (ARN) was not found.</p>
+ * <p>The operation failed because the specified <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Name (ARN)</a> was not found.</p>
  */
 export declare class ResourceArnNotFoundException extends __BaseException {
     readonly name: "ResourceArnNotFoundException";
@@ -1071,13 +1678,13 @@ export interface GetResourceShareAssociationsRequest {
      *          <ul>
      *             <li>
      *                <p>
-     *                   <code>PRINCIPAL</code> – list the principals that are associated with
-     *                     the specified resource share.</p>
+     *                   <code>PRINCIPAL</code> – list the principals whose associations you
+     *                     want to see.</p>
      *             </li>
      *             <li>
      *                <p>
-     *                   <code>RESOURCE</code> – list the resources that are associated with the
-     *                     specified resource share.</p>
+     *                   <code>RESOURCE</code> – list the resources whose associations you want
+     *                     to see.</p>
      *             </li>
      *          </ul>
      */
@@ -1088,21 +1695,21 @@ export interface GetResourceShareAssociationsRequest {
      */
     resourceShareArns?: string[];
     /**
-     * <p>Specifies the <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resoure Name (ARN)</a> of the resource whose resource shares you want to retrieve.</p>
+     * <p>Specifies the <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Name (ARN)</a> of a resource whose resource shares you want to retrieve.</p>
      *          <p>You cannot specify this parameter if the association type is
      *             <code>PRINCIPAL</code>.</p>
      */
     resourceArn?: string;
     /**
      * <p>Specifies the ID of the principal whose resource shares you want to retrieve. This can be an
-     *             Amazon Web Services account ID, an organization ID, an organizational unit ID, or the <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resoure Name (ARN)</a> of an
+     *             Amazon Web Services account ID, an organization ID, an organizational unit ID, or the <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Name (ARN)</a> of an
      *             individual IAM user or role.</p>
      *          <p>You cannot specify this parameter if the association type is
      *             <code>RESOURCE</code>.</p>
      */
     principal?: string;
     /**
-     * <p>Specifies that you want to retrieve only associations with this status.</p>
+     * <p>Specifies that you want to retrieve only associations that have this status.</p>
      */
     associationStatus?: ResourceShareAssociationStatus | string;
     /**
@@ -1197,7 +1804,8 @@ export interface GetResourceShareInvitationsResponse {
 }
 /**
  * @public
- * <p>The specified value for <code>MaxResults</code> is not valid.</p>
+ * <p>The operation failed because the specified value for <code>MaxResults</code> isn't
+ *             valid.</p>
  */
 export declare class InvalidMaxResultsException extends __BaseException {
     readonly name: "InvalidMaxResultsException";
@@ -1300,10 +1908,15 @@ export interface GetResourceSharesRequest {
      */
     maxResults?: number;
     /**
-     * <p>Specifies that you want to retrieve details of only those resource shares that use the RAM
-     *             permission with this <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resoure Name (ARN)</a>.</p>
+     * <p>Specifies that you want to retrieve details of only those resource shares that use the managed permission with
+     *             this <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Name (ARN)</a>.</p>
      */
     permissionArn?: string;
+    /**
+     * <p>Specifies that you want to retrieve details for only those resource shares that use the
+     *             specified version of the managed permission.</p>
+     */
+    permissionVersion?: number;
 }
 /**
  * @public
@@ -1340,7 +1953,7 @@ export type ResourceRegionScopeFilter = (typeof ResourceRegionScopeFilter)[keyof
  */
 export interface ListPendingInvitationResourcesRequest {
     /**
-     * <p>Specifies the <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resoure Name (ARN)</a> of the invitation. You can use <a>GetResourceShareInvitations</a> to find the ARN of the invitation.</p>
+     * <p>Specifies the <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Name (ARN)</a> of the invitation. You can use <a>GetResourceShareInvitations</a> to find the ARN of the invitation.</p>
      */
     resourceShareInvitationArn: string | undefined;
     /**
@@ -1420,21 +2033,22 @@ export type ResourceStatus = (typeof ResourceStatus)[keyof typeof ResourceStatus
  */
 export interface Resource {
     /**
-     * <p>The <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resoure Name (ARN)</a> of the resource.</p>
+     * <p>The <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Name (ARN)</a> of the resource.</p>
      */
     arn?: string;
     /**
      * <p>The resource type. This takes the form of:
-     *                 <code>service-code</code>:<code>resource-code</code>
-     *          </p>
+     *                 <code>service-code</code>:<code>resource-code</code>, and is case-insensitive. For
+     *             example, an Amazon EC2 Subnet would be represented by the string
+     *             <code>ec2:subnet</code>.</p>
      */
     type?: string;
     /**
-     * <p>The <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resoure Name (ARN)</a> of the resource share this resource is associated with.</p>
+     * <p>The <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Name (ARN)</a> of the resource share this resource is associated with.</p>
      */
     resourceShareArn?: string;
     /**
-     * <p>The <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resoure Name (ARN)</a> of the resource group. This value is available only if the resource is
+     * <p>The <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Name (ARN)</a> of the resource group. This value is available only if the resource is
      *             part of a resource group.</p>
      */
     resourceGroupArn?: string;
@@ -1451,7 +2065,8 @@ export interface Resource {
      */
     creationTime?: Date;
     /**
-     * <p>The date an time when the association was last updated.</p>
+     * <p>The date an time when the association between the resource and the resource share was
+     *             last updated.</p>
      */
     lastUpdatedTime?: Date;
     /**
@@ -1492,7 +2107,7 @@ export interface ListPendingInvitationResourcesResponse {
 }
 /**
  * @public
- * <p>A required input parameter is missing.</p>
+ * <p>The operation failed because a required input parameter is missing.</p>
  */
 export declare class MissingRequiredParameterException extends __BaseException {
     readonly name: "MissingRequiredParameterException";
@@ -1505,14 +2120,40 @@ export declare class MissingRequiredParameterException extends __BaseException {
 /**
  * @public
  */
-export interface ListPermissionsRequest {
+export interface ListPermissionAssociationsRequest {
     /**
-     * <p>Specifies that you want to list permissions for only the specified resource type. For
-     *             example, to list only permissions that apply to EC2 subnets, specify
-     *                 <code>ec2:Subnet</code>. You can use the <a>ListResourceTypes</a>
-     *             operation to get the specific string required.</p>
+     * <p>Specifies the <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Name (ARN)</a> of the managed permission.</p>
+     */
+    permissionArn?: string;
+    /**
+     * <p>Specifies that you want to list only those associations with resource shares that use this
+     *             version of the managed permission. If you don't provide a value for this parameter, then the operation
+     *             returns information about associations with resource shares that use any version of the
+     *             managed permission.</p>
+     */
+    permissionVersion?: number;
+    /**
+     * <p>Specifies that you want to list only those associations with resource shares that match this
+     *             status.</p>
+     */
+    associationStatus?: ResourceShareAssociationStatus | string;
+    /**
+     * <p>Specifies that you want to list only those associations with resource shares that include at
+     *             least one resource of this resource type.</p>
      */
     resourceType?: string;
+    /**
+     * <p>Specifies that you want to list only those associations with resource shares that have a
+     *                 <code>featureSet</code> with this value.</p>
+     */
+    featureSet?: PermissionFeatureSet | string;
+    /**
+     * <p>When <code>true</code>, specifies that you want to list only those associations with
+     *             resource shares that use the default version of the specified managed permission.</p>
+     *          <p>When <code>false</code> (the default value), lists associations with resource shares that use
+     *             any version of the specified managed permission.</p>
+     */
+    defaultVersion?: boolean;
     /**
      * <p>Specifies that you want to receive the next page of results. Valid
      *              only if you received a <code>NextToken</code> response in the previous request. If you
@@ -1536,48 +2177,175 @@ export interface ListPermissionsRequest {
 }
 /**
  * @public
- * <p>Information about an RAM permission that is associated with a resource share and any of its
- *             resources of a specified type.</p>
+ * <p>An object that describes a managed permission associated with a resource share.</p>
  */
-export interface ResourceSharePermissionSummary {
+export interface AssociatedPermission {
     /**
-     * <p>The <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resoure Name (ARN)</a> of the permission you want information about.</p>
+     * <p>The <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Name (ARN)</a> of the associated managed permission.</p>
      */
     arn?: string;
     /**
-     * <p>The version of the permission represented in this structure.</p>
+     * <p>The version of the permission currently associated with the resource share.</p>
      */
-    version?: string;
+    permissionVersion?: string;
     /**
-     * <p>Specifies whether the version of the permission represented in this structure is the
-     *             default version for this permission.</p>
+     * <p>Indicates whether the associated resource share is using the default version of the
+     *             permission.</p>
      */
     defaultVersion?: boolean;
     /**
-     * <p>The name of this permission.</p>
-     */
-    name?: string;
-    /**
-     * <p>The type of resource to which this permission applies.</p>
+     * <p>The resource type to which this permission applies.</p>
      */
     resourceType?: string;
     /**
-     * <p>The current status of the permission.</p>
+     * <p>The current status of the association between the permission and the resource share.
+     *             The following are the possible values:</p>
+     *          <ul>
+     *             <li>
+     *                <p>
+     *                   <code>ATTACHABLE</code> – This permission or version can be associated
+     *                 with resource shares.</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>UNATTACHABLE</code> – This permission or version can't
+     *                 currently be associated with resource shares.</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>DELETING</code> – This permission or version is in the process of
+     *                     being deleted.</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>DELETED</code> – This permission or version is deleted.</p>
+     *             </li>
+     *          </ul>
      */
     status?: string;
     /**
-     * <p>The date and time when the permission was created.</p>
+     * <p>Indicates what features are available for this resource share. This parameter can have one of
+     *             the following values:</p>
+     *          <ul>
+     *             <li>
+     *                <p>
+     *                   <b>STANDARD</b> – A resource share that supports all
+     *                     functionality. These resource shares are visible to all principals you share the resource share with.
+     *                     You can modify these resource shares in RAM using the console or APIs. This resource share might
+     *                     have been created by RAM, or it might have been <b>CREATED_FROM_POLICY</b> and then promoted.</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <b>CREATED_FROM_POLICY</b> – The customer
+     *                     manually shared a resource by attaching a resource-based policy. That policy did
+     *                     not match any existing managed permissions, so RAM created this customer managed permission automatically on the
+     *                     customer's behalf based on the attached policy document. This type of resource share
+     *                     is visible only to the Amazon Web Services account that created it. You can't modify it in
+     *                     RAM unless you promote it. For more information,
+     *                     see <a>PromoteResourceShareCreatedFromPolicy</a>.</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <b>PROMOTING_TO_STANDARD</b> – This
+     *                     resource share was originally <code>CREATED_FROM_POLICY</code>, but the customer ran
+     *                     the <a>PromoteResourceShareCreatedFromPolicy</a> and that operation
+     *                     is still in progress. This value changes to <code>STANDARD</code> when
+     *                     complete.</p>
+     *             </li>
+     *          </ul>
+     */
+    featureSet?: PermissionFeatureSet | string;
+    /**
+     * <p>The date and time when the association between the permission and the resource share
+     *             was last updated.</p>
+     */
+    lastUpdatedTime?: Date;
+    /**
+     * <p>The <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Name (ARN)</a> of a resource share associated with this permission.</p>
+     */
+    resourceShareArn?: string;
+}
+/**
+ * @public
+ */
+export interface ListPermissionAssociationsResponse {
+    /**
+     * <p>A structure with information about this customer managed permission.</p>
+     */
+    permissions?: AssociatedPermission[];
+    /**
+     * <p>If present, this value indicates that more output is available than
+     *              is included in the current response. Use this value in the <code>NextToken</code>
+     *              request parameter in a subsequent call to the operation to get the next part of the
+     *              output. You should repeat this until the <code>NextToken</code> response element comes
+     *              back as <code>null</code>. This indicates that this is the last page of results.</p>
+     */
+    nextToken?: string;
+}
+/**
+ * @public
+ * @enum
+ */
+export declare const PermissionTypeFilter: {
+    readonly ALL: "ALL";
+    readonly AWS_MANAGED: "AWS_MANAGED";
+    readonly CUSTOMER_MANAGED: "CUSTOMER_MANAGED";
+};
+/**
+ * @public
+ */
+export type PermissionTypeFilter = (typeof PermissionTypeFilter)[keyof typeof PermissionTypeFilter];
+/**
+ * @public
+ */
+export interface ListPermissionsRequest {
+    /**
+     * <p>Specifies that you want to list only those permissions that apply to the specified
+     *             resource type. This parameter is not case sensitive.</p>
+     *          <p>For example, to list only permissions that apply to Amazon EC2 subnets, specify
+     *                 <code>ec2:subnet</code>. You can use the <a>ListResourceTypes</a>
+     *             operation to get the specific string required.</p>
+     */
+    resourceType?: string;
+    /**
+     * <p>Specifies that you want to receive the next page of results. Valid
+     *              only if you received a <code>NextToken</code> response in the previous request. If you
+     *              did, it indicates that more output is available. Set this parameter to the value
+     *              provided by the previous call's <code>NextToken</code> response to request the
+     *              next page of results.</p>
      */
-    creationTime?: Date;
+    nextToken?: string;
     /**
-     * <p>The date and time when the permission was last updated.</p>
+     * <p>Specifies the total number of results that you want included on each page
+     *              of the response. If you do not include this parameter, it defaults to a value that is
+     *              specific to the operation. If additional items exist beyond the number you specify, the
+     *              <code>NextToken</code> response element is returned with a value (not null).
+     *              Include the specified value as the <code>NextToken</code> request parameter in the next
+     *              call to the operation to get the next part of the results. Note that the service might
+     *              return fewer results than the maximum even when there are more results available. You
+     *              should check <code>NextToken</code> after every operation to ensure that you receive all
+     *              of the results.</p>
      */
-    lastUpdatedTime?: Date;
+    maxResults?: number;
     /**
-     * <p>Specifies whether the version of the permission represented in this structure is the
-     *             default version for all resources of this resource type.</p>
+     * <p>Specifies that you want to list only permissions of this type:</p>
+     *          <ul>
+     *             <li>
+     *                <p>
+     *                   <code>AWS</code> – returns only Amazon Web Services managed permissions.</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>LOCAL</code> – returns only customer managed permissions</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>ALL</code> – returns both Amazon Web Services managed permissions and customer managed permissions.</p>
+     *             </li>
+     *          </ul>
+     *          <p>If you don't specify this parameter, the default is <code>All</code>.</p>
      */
-    isResourceTypeDefault?: boolean;
+    permissionType?: PermissionTypeFilter | string;
 }
 /**
  * @public
@@ -1601,7 +2369,7 @@ export interface ListPermissionsResponse {
  */
 export interface ListPermissionVersionsRequest {
     /**
-     * <p>Specifies the <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resoure Name (ARN)</a> of the RAM permission whose versions you want to list. You
+     * <p>Specifies the <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Name (ARN)</a> of the RAM permission whose versions you want to list. You
      *             can use the <code>permissionVersion</code> parameter on the <a>AssociateResourceSharePermission</a> operation to specify a non-default
      *             version to attach.</p>
      */
@@ -1671,7 +2439,7 @@ export interface ListPrincipalsRequest {
     resourceOwner: ResourceOwner | string | undefined;
     /**
      * <p>Specifies that you want to list principal information for the resource share with the specified
-     *             <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resoure Name (ARN)</a>.</p>
+     *             <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Name (ARN)</a>.</p>
      */
     resourceArn?: string;
     /**
@@ -1683,7 +2451,7 @@ export interface ListPrincipalsRequest {
      *                </p>
      *             </li>
      *             <li>
-     *                <p>An <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resoure Name (ARN)</a> of an organization in Organizations, for example:
+     *                <p>An <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Name (ARN)</a> of an organization in Organizations, for example:
      *                         <code>organizations::123456789012:organization/o-exampleorgid</code>
      *                </p>
      *             </li>
@@ -1749,11 +2517,11 @@ export interface ListPrincipalsRequest {
  */
 export interface Principal {
     /**
-     * <p>The ID of the principal.</p>
+     * <p>The ID of the principal that can be associated with a resource share.</p>
      */
     id?: string;
     /**
-     * <p>The <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resoure Name (ARN)</a> of a resource share the principal is associated with.</p>
+     * <p>The <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Name (ARN)</a> of a resource share the principal is associated with.</p>
      */
     resourceShareArn?: string;
     /**
@@ -1761,12 +2529,25 @@ export interface Principal {
      */
     creationTime?: Date;
     /**
-     * <p>The date and time when the association was last updated.</p>
+     * <p>The date and time when the association between the resource share and the principal
+     *             was last updated.</p>
      */
     lastUpdatedTime?: Date;
     /**
-     * <p>Indicates whether the principal belongs to the same organization in Organizations as the
-     *             Amazon Web Services account that owns the resource share.</p>
+     * <p>Indicates the relationship between the Amazon Web Services account the principal belongs to and the
+     *             account that owns the resource share:</p>
+     *          <ul>
+     *             <li>
+     *                <p>
+     *                   <code>True</code> – The two accounts belong to same
+     *                     organization.</p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>False</code> – The two accounts do not belong to the same
+     *                     organization.</p>
+     *             </li>
+     *          </ul>
      */
     external?: boolean;
 }
@@ -1789,7 +2570,137 @@ export interface ListPrincipalsResponse {
 }
 /**
  * @public
- * <p>The specified resource type is not valid.</p>
+ * @enum
+ */
+export declare const ReplacePermissionAssociationsWorkStatus: {
+    readonly COMPLETED: "COMPLETED";
+    readonly FAILED: "FAILED";
+    readonly IN_PROGRESS: "IN_PROGRESS";
+};
+/**
+ * @public
+ */
+export type ReplacePermissionAssociationsWorkStatus = (typeof ReplacePermissionAssociationsWorkStatus)[keyof typeof ReplacePermissionAssociationsWorkStatus];
+/**
+ * @public
+ */
+export interface ListReplacePermissionAssociationsWorkRequest {
+    /**
+     * <p>A list of IDs. These values come from the <code>id</code>field of the
+     *                 <code>replacePermissionAssociationsWork</code>structure returned by the <a>ReplacePermissionAssociations</a> operation. </p>
+     */
+    workIds?: string[];
+    /**
+     * <p>Specifies that you want to see only the details about requests with a status that
+     *             matches this value.</p>
+     */
+    status?: ReplacePermissionAssociationsWorkStatus | string;
+    /**
+     * <p>Specifies that you want to receive the next page of results. Valid
+     *              only if you received a <code>NextToken</code> response in the previous request. If you
+     *              did, it indicates that more output is available. Set this parameter to the value
+     *              provided by the previous call's <code>NextToken</code> response to request the
+     *              next page of results.</p>
+     */
+    nextToken?: string;
+    /**
+     * <p>Specifies the total number of results that you want included on each page
+     *              of the response. If you do not include this parameter, it defaults to a value that is
+     *              specific to the operation. If additional items exist beyond the number you specify, the
+     *              <code>NextToken</code> response element is returned with a value (not null).
+     *              Include the specified value as the <code>NextToken</code> request parameter in the next
+     *              call to the operation to get the next part of the results. Note that the service might
+     *              return fewer results than the maximum even when there are more results available. You
+     *              should check <code>NextToken</code> after every operation to ensure that you receive all
+     *              of the results.</p>
+     */
+    maxResults?: number;
+}
+/**
+ * @public
+ * <p>A structure that represents the background work that RAM performs when you invoke
+ *             the <a>ReplacePermissionAssociations</a> operation.</p>
+ */
+export interface ReplacePermissionAssociationsWork {
+    /**
+     * <p>The unique identifier for the background task associated with one <a>ReplacePermissionAssociations</a> request.</p>
+     */
+    id?: string;
+    /**
+     * <p>The <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Name (ARN)</a> of the managed permission that this background task is replacing.</p>
+     */
+    fromPermissionArn?: string;
+    /**
+     * <p>The version of the managed permission that this background task is replacing.</p>
+     */
+    fromPermissionVersion?: string;
+    /**
+     * <p>The ARN of the managed permission that this background task is associating with the resource shares in place
+     *             of the managed permission and version specified in <code>fromPermissionArn</code> and
+     *                 <code>fromPermissionVersion</code>.</p>
+     */
+    toPermissionArn?: string;
+    /**
+     * <p>The version of the managed permission that this background task is associating with the resource shares. This
+     *             is always the version that is currently the default for this managed permission.</p>
+     */
+    toPermissionVersion?: string;
+    /**
+     * <p>Specifies the current status of the background tasks for the specified ID. The output
+     *             is one of the following strings:</p>
+     *          <ul>
+     *             <li>
+     *                <p>
+     *                   <code>IN_PROGRESS</code>
+     *                </p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>COMPLETED</code>
+     *                </p>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>FAILED</code>
+     *                </p>
+     *             </li>
+     *          </ul>
+     */
+    status?: ReplacePermissionAssociationsWorkStatus | string;
+    /**
+     * <p>Specifies the reason for a <code>FAILED</code> status. This field is present only when
+     *             there <code>status</code> is <code>FAILED</code>.</p>
+     */
+    statusMessage?: string;
+    /**
+     * <p>The date and time when this asynchronous background task was created.</p>
+     */
+    creationTime?: Date;
+    /**
+     * <p>The date and time when the status of this background task was last updated.</p>
+     */
+    lastUpdatedTime?: Date;
+}
+/**
+ * @public
+ */
+export interface ListReplacePermissionAssociationsWorkResponse {
+    /**
+     * <p>An array of data structures that provide details of the matching work IDs.</p>
+     */
+    replacePermissionAssociationsWorks?: ReplacePermissionAssociationsWork[];
+    /**
+     * <p>If present, this value indicates that more output is available than
+     *              is included in the current response. Use this value in the <code>NextToken</code>
+     *              request parameter in a subsequent call to the operation to get the next part of the
+     *              output. You should repeat this until the <code>NextToken</code> response element comes
+     *              back as <code>null</code>. This indicates that this is the last page of results.</p>
+     */
+    nextToken?: string;
+}
+/**
+ * @public
+ * <p>The operation failed because the specified resource type isn't valid.</p>
  */
 export declare class InvalidResourceTypeException extends __BaseException {
     readonly name: "InvalidResourceTypeException";
@@ -1910,7 +2821,7 @@ export interface ListResourcesResponse {
  */
 export interface ListResourceSharePermissionsRequest {
     /**
-     * <p>Specifies the <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resoure Name (ARN)</a> of the resource share for which you want to retrieve the associated
+     * <p>Specifies the <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Name (ARN)</a> of the resource share for which you want to retrieve the associated
      *             permissions.</p>
      */
     resourceShareArn: string | undefined;
@@ -2007,7 +2918,10 @@ export interface ListResourceTypesRequest {
  */
 export interface ServiceNameAndResourceType {
     /**
-     * <p>The type of the resource.</p>
+     * <p>The type of the resource. This takes the form of:
+     *                 <code>service-code</code>:<code>resource-code</code>, and is case-insensitive. For
+     *             example, an Amazon EC2 Subnet would be represented by the string
+     *             <code>ec2:subnet</code>.</p>
      */
     resourceType?: string;
     /**
@@ -2050,12 +2964,56 @@ export interface ListResourceTypesResponse {
      */
     nextToken?: string;
 }
+/**
+ * @public
+ */
+export interface PromotePermissionCreatedFromPolicyRequest {
+    /**
+     * <p>Specifies the <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Name (ARN)</a> of the <code>CREATED_FROM_POLICY</code> permission that you
+     *             want to promote. You can get this <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Name (ARN)</a> by calling the <a>ListResourceSharePermissions</a> operation.</p>
+     */
+    permissionArn: string | undefined;
+    /**
+     * <p>Specifies a name for the promoted customer managed permission.</p>
+     */
+    name: string | undefined;
+    /**
+     * <p>Specifies a unique, case-sensitive identifier that you provide to
+     *              ensure the idempotency of the request. This lets you safely retry the request without
+     *              accidentally performing the same operation a second time. Passing the same value to a
+     *              later call to an operation requires that you also pass the same value for all other
+     *              parameters. We recommend that you use a <a href="https://wikipedia.org/wiki/Universally_unique_identifier">UUID type of
+     *              value.</a>.</p>
+     *          <p>If you don't provide this value, then Amazon Web Services generates a random one for
+     *              you.</p>
+     *          <p>If you retry the operation with the same <code>ClientToken</code>, but with
+     *              different parameters, the retry fails with an <code>IdempotentParameterMismatch</code>
+     *              error.</p>
+     */
+    clientToken?: string;
+}
+/**
+ * @public
+ */
+export interface PromotePermissionCreatedFromPolicyResponse {
+    /**
+     * <p>Information about an RAM permission.</p>
+     */
+    permission?: ResourceSharePermissionSummary;
+    /**
+     * <p>The idempotency identifier associated with this request. If you
+     *              want to repeat the same operation in an idempotent manner then you must include this
+     *              value in the <code>clientToken</code> request parameter of that later call. All other
+     *              parameters must also have the same values that you used in the first call.</p>
+     */
+    clientToken?: string;
+}
 /**
  * @public
  */
 export interface PromoteResourceShareCreatedFromPolicyRequest {
     /**
-     * <p>Specifies the <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resoure Name (ARN)</a> of the resource share to promote.</p>
+     * <p>Specifies the <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Name (ARN)</a> of the resource share to promote.</p>
      */
     resourceShareArn: string | undefined;
 }
@@ -2069,12 +3027,25 @@ export interface PromoteResourceShareCreatedFromPolicyResponse {
      */
     returnValue?: boolean;
 }
+/**
+ * @public
+ * <p>There isn't an existing managed permission defined in RAM that has the same IAM permissions as
+ *             the resource-based policy attached to the resource. You should first run <a>PromotePermissionCreatedFromPolicy</a> to create that managed permission.</p>
+ */
+export declare class UnmatchedPolicyPermissionException extends __BaseException {
+    readonly name: "UnmatchedPolicyPermissionException";
+    readonly $fault: "client";
+    /**
+     * @internal
+     */
+    constructor(opts: __ExceptionOptionType<UnmatchedPolicyPermissionException, __BaseException>);
+}
 /**
  * @public
  */
 export interface RejectResourceShareInvitationRequest {
     /**
-     * <p>Specifies the <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resoure Name (ARN)</a> of the invitation that you want to reject.</p>
+     * <p>Specifies the <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Name (ARN)</a> of the invitation that you want to reject.</p>
      */
     resourceShareInvitationArn: string | undefined;
     /**
@@ -2086,6 +3057,9 @@ export interface RejectResourceShareInvitationRequest {
      *              value.</a>.</p>
      *          <p>If you don't provide this value, then Amazon Web Services generates a random one for
      *              you.</p>
+     *          <p>If you retry the operation with the same <code>ClientToken</code>, but with
+     *              different parameters, the retry fails with an <code>IdempotentParameterMismatch</code>
+     *              error.</p>
      */
     clientToken?: string;
 }
@@ -2107,7 +3081,106 @@ export interface RejectResourceShareInvitationResponse {
 }
 /**
  * @public
- * <p>This request would exceed the limit for tags for your account.</p>
+ */
+export interface ReplacePermissionAssociationsRequest {
+    /**
+     * <p>Specifies the <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Name (ARN)</a> of the managed permission that you want to replace.</p>
+     */
+    fromPermissionArn: string | undefined;
+    /**
+     * <p>Specifies that you want to updated the permissions for only those resource shares that use the
+     *             specified version of the managed permission.</p>
+     */
+    fromPermissionVersion?: number;
+    /**
+     * <p>Specifies the ARN of the managed permission that you want to associate with resource
+     *             shares in place of the one specified by <code>fromPerssionArn</code> and
+     *                 <code>fromPermissionVersion</code>.</p>
+     *          <p>The operation always associates the version that is currently the default for the
+     *             specified managed permission.</p>
+     */
+    toPermissionArn: string | undefined;
+    /**
+     * <p>Specifies a unique, case-sensitive identifier that you provide to
+     *              ensure the idempotency of the request. This lets you safely retry the request without
+     *              accidentally performing the same operation a second time. Passing the same value to a
+     *              later call to an operation requires that you also pass the same value for all other
+     *              parameters. We recommend that you use a <a href="https://wikipedia.org/wiki/Universally_unique_identifier">UUID type of
+     *              value.</a>.</p>
+     *          <p>If you don't provide this value, then Amazon Web Services generates a random one for
+     *              you.</p>
+     *          <p>If you retry the operation with the same <code>ClientToken</code>, but with
+     *              different parameters, the retry fails with an <code>IdempotentParameterMismatch</code>
+     *              error.</p>
+     */
+    clientToken?: string;
+}
+/**
+ * @public
+ */
+export interface ReplacePermissionAssociationsResponse {
+    /**
+     * <p>Specifies a data structure that you can use to track the asynchronous tasks that RAM
+     *             performs to complete this operation. You can use the <a>ListReplacePermissionAssociationsWork</a> operation and pass the
+     *                 <code>id</code> value returned in this structure.</p>
+     */
+    replacePermissionAssociationsWork?: ReplacePermissionAssociationsWork;
+    /**
+     * <p>The idempotency identifier associated with this request. If you
+     *              want to repeat the same operation in an idempotent manner then you must include this
+     *              value in the <code>clientToken</code> request parameter of that later call. All other
+     *              parameters must also have the same values that you used in the first call.</p>
+     */
+    clientToken?: string;
+}
+/**
+ * @public
+ */
+export interface SetDefaultPermissionVersionRequest {
+    /**
+     * <p>Specifies the <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Name (ARN)</a> of the customer managed permission whose default version you want to change.</p>
+     */
+    permissionArn: string | undefined;
+    /**
+     * <p>Specifies the version number that you want to designate as the default for customer managed permission. To
+     *             see a list of all available version numbers, use <a>ListPermissionVersions</a>.</p>
+     */
+    permissionVersion: number | undefined;
+    /**
+     * <p>Specifies a unique, case-sensitive identifier that you provide to
+     *              ensure the idempotency of the request. This lets you safely retry the request without
+     *              accidentally performing the same operation a second time. Passing the same value to a
+     *              later call to an operation requires that you also pass the same value for all other
+     *              parameters. We recommend that you use a <a href="https://wikipedia.org/wiki/Universally_unique_identifier">UUID type of
+     *              value.</a>.</p>
+     *          <p>If you don't provide this value, then Amazon Web Services generates a random one for
+     *              you.</p>
+     *          <p>If you retry the operation with the same <code>ClientToken</code>, but with
+     *              different parameters, the retry fails with an <code>IdempotentParameterMismatch</code>
+     *              error.</p>
+     */
+    clientToken?: string;
+}
+/**
+ * @public
+ */
+export interface SetDefaultPermissionVersionResponse {
+    /**
+     * <p>A boolean value that indicates whether the operation was successful.</p>
+     */
+    returnValue?: boolean;
+    /**
+     * <p>The idempotency identifier associated with this request. If you
+     *              want to repeat the same operation in an idempotent manner then you must include this
+     *              value in the <code>clientToken</code> request parameter of that later call. All other
+     *              parameters must also have the same values that you used in the first call.</p>
+     */
+    clientToken?: string;
+}
+/**
+ * @public
+ * <p>The operation failed because it would exceed the limit for tags for your
+ *             Amazon Web Services account.</p>
  */
 export declare class TagLimitExceededException extends __BaseException {
     readonly name: "TagLimitExceededException";
@@ -2122,14 +3195,22 @@ export declare class TagLimitExceededException extends __BaseException {
  */
 export interface TagResourceRequest {
     /**
-     * <p>Specifies the <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resoure Name (ARN)</a> of the resource share that you want to add tags to.</p>
+     * <p>Specifies the <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Name (ARN)</a> of the resource share that you want to add tags to. You must specify
+     *                 <i>either</i>
+     *             <code>resourceShareArn</code>, or <code>resourceArn</code>, but not both.</p>
      */
-    resourceShareArn: string | undefined;
+    resourceShareArn?: string;
     /**
      * <p>A list of one or more tag key and value pairs. The tag key must be present and not be
      *             an empty string. The tag value must be present but can be an empty string.</p>
      */
     tags: Tag[] | undefined;
+    /**
+     * <p>Specifies the <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Name (ARN)</a> of the managed permission that you want to add tags to. You must specify
+     *                 <i>either</i>
+     *             <code>resourceArn</code>, or <code>resourceShareArn</code>, but not both.</p>
+     */
+    resourceArn?: string;
 }
 /**
  * @public
@@ -2141,14 +3222,21 @@ export interface TagResourceResponse {
  */
 export interface UntagResourceRequest {
     /**
-     * <p>Specifies the <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resoure Name (ARN)</a> of the resource share that you want to remove tags from. The tags are
-     *             removed from the resource share, not the resources in the resource share.</p>
+     * <p>Specifies the <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Name (ARN)</a> of the resource share that you want to remove tags from. The tags are
+     *             removed from the resource share, not the resources in the resource share. You must specify either
+     *                 <code>resourceShareArn</code>, or <code>resourceArn</code>, but not both.</p>
      */
-    resourceShareArn: string | undefined;
+    resourceShareArn?: string;
     /**
      * <p>Specifies a list of one or more tag keys that you want to remove.</p>
      */
     tagKeys: string[] | undefined;
+    /**
+     * <p>Specifies the <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Name (ARN)</a> of the managed permission that you want to remove tags from. You must
+     *             specify either <code>resourceArn</code>, or <code>resourceShareArn</code>, but not
+     *             both.</p>
+     */
+    resourceArn?: string;
 }
 /**
  * @public
@@ -2160,7 +3248,7 @@ export interface UntagResourceResponse {
  */
 export interface UpdateResourceShareRequest {
     /**
-     * <p>Specifies the <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resoure Name (ARN)</a> of the resource share that you want to modify.</p>
+     * <p>Specifies the <a href="https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html">Amazon Resource Name (ARN)</a> of the resource share that you want to modify.</p>
      */
     resourceShareArn: string | undefined;
     /**
@@ -2181,6 +3269,9 @@ export interface UpdateResourceShareRequest {
      *              value.</a>.</p>
      *          <p>If you don't provide this value, then Amazon Web Services generates a random one for
      *              you.</p>
+     *          <p>If you retry the operation with the same <code>ClientToken</code>, but with
+     *              different parameters, the retry fails with an <code>IdempotentParameterMismatch</code>
+     *              error.</p>
      */
     clientToken?: string;
 }