@cdklabs/cdk-ssm-documents 0.0.57 → 0.0.59

package/node_modules/@aws-sdk/client-ec2/dist-types/models/models_0.d.ts

@@ -1,4 +1,4 @@
-import type { _InstanceType, AddressTransferStatus, AllocationType, ApplianceModeSupportValue, AsnAssociationState, AssociationStatusCode, AttachmentStatus, AutoPlacement, BatchState, BlockPublicAccessMode, BundleTaskState, ByoipCidrState, CancelBatchErrorCode, CancelSpotInstanceRequestState, CapacityReservationDeliveryPreference, CapacityReservationFleetState, CapacityReservationInstancePlatform, CapacityReservationState, CapacityReservationTenancy, CapacityReservationType, CarrierGatewayState, ClientVpnAuthenticationType, ClientVpnAuthorizationRuleStatusCode, ClientVpnEndpointStatusCode, ClientVpnRouteStatusCode, CurrencyCodeValues, DeviceTrustProviderType, DnsSupportValue, DomainType, DynamicRoutingValue, EndDateType, EndpointIpAddressType, FleetCapacityReservationTenancy, FleetInstanceMatchCriteria, GatewayType, HostMaintenance, HostnameType, HostRecovery, IamInstanceProfileAssociationState, InstanceEventWindowState, InstanceHealthStatus, InstanceMatchCriteria, InterfaceProtocolType, InterruptibleCapacityReservationAllocationStatus, InterruptionType, IpamAssociatedResourceDiscoveryStatus, IpamPoolAllocationResourceType, IpamResourceDiscoveryAssociationState, IpSource, Ipv6AddressAttribute, Ipv6SupportValue, ListingState, ListingStatus, MacModificationTaskState, MacModificationTaskType, MacSystemIntegrityProtectionSettingStatus, NatGatewayAddressStatus, OutputFormat, PrincipalType, Protocol, ResourceType, RouteServerAssociationState, RouteTableAssociationStateCode, Schedule, SecurityGroupReferencingSupportValue, SecurityGroupVpcAssociationState, SelfServicePortal, ServiceManaged, SSEType, SubnetCidrBlockStateCode, SubnetState, Tenancy, TrafficIpAddressType, TransitGatewayAssociationState, TransitGatewayAttachmentResourceType, TransitGatewayAttachmentState, TransitGatewayMulitcastDomainAssociationState, TransportProtocol, TrustProviderType, UserTrustProviderType, VolumeAttachmentState, VolumeState, VolumeType, VpcCidrBlockStateCode, VpcEncryptionControlExclusionState, VpcEncryptionControlMode, VpcEncryptionControlState, VpcPeeringConnectionStateReasonCode, VpcState, VpnTunnelProvisioningStatus, WeekDay } from "./enums";
+import type { _InstanceType, AddressTransferStatus, AllocationType, ApplianceModeSupportValue, AsnAssociationState, AssociationStatusCode, AttachmentStatus, AutoPlacement, BatchState, BlockPublicAccessMode, BundleTaskState, ByoipCidrState, CancelBatchErrorCode, CancelSpotInstanceRequestState, CapacityReservationDeliveryPreference, CapacityReservationFleetState, CapacityReservationInstancePlatform, CapacityReservationState, CapacityReservationTenancy, CapacityReservationType, CarrierGatewayState, ClientVpnAuthenticationType, ClientVpnAuthorizationRuleStatusCode, ClientVpnEndpointStatusCode, ClientVpnRouteStatusCode, CurrencyCodeValues, DeviceTrustProviderType, DnsSupportValue, DomainType, DynamicRoutingValue, EndDateType, EndpointIpAddressType, FleetCapacityReservationTenancy, FleetInstanceMatchCriteria, GatewayType, HostMaintenance, HostnameType, HostRecovery, IamInstanceProfileAssociationState, InstanceEventWindowState, InstanceHealthStatus, InstanceMatchCriteria, InterfaceProtocolType, InterruptibleCapacityReservationAllocationStatus, InterruptionType, IpamAssociatedResourceDiscoveryStatus, IpamPoolAllocationResourceType, IpamResourceDiscoveryAssociationState, IpSource, Ipv6AddressAttribute, Ipv6SupportValue, ListingState, ListingStatus, NatGatewayAddressStatus, OutputFormat, PrincipalType, Protocol, ResourceType, RouteServerAssociationState, RouteTableAssociationStateCode, Schedule, SecurityGroupReferencingSupportValue, SecurityGroupVpcAssociationState, SelfServicePortal, ServiceManaged, SSEType, SubnetCidrBlockStateCode, SubnetState, Tenancy, TrafficIpAddressType, TransitGatewayAssociationState, TransitGatewayAttachmentResourceType, TransitGatewayAttachmentState, TransitGatewayAttachmentStatusType, TransitGatewayMulitcastDomainAssociationState, TransportProtocol, TrustProviderType, UserTrustProviderType, VolumeAttachmentState, VolumeState, VolumeType, VpcCidrBlockStateCode, VpcEncryptionControlExclusionState, VpcEncryptionControlMode, VpcEncryptionControlState, VpcPeeringConnectionStateReasonCode, VpcState, VpnTunnelProvisioningStatus, WeekDay } from "./enums";
 /**
  * <p>The minimum and maximum number of accelerators (GPUs, FPGAs, or Amazon Web Services Inferentia chips)
  *          on an instance.</p>
@@ -268,6 +268,67 @@ export interface AcceptReservedInstancesExchangeQuoteResult {
      */
     ExchangeId?: string | undefined;
 }
+/**
+ * @public
+ */
+export interface AcceptTransitGatewayClientVpnAttachmentRequest {
+    /**
+     * <p>The ID of the Transit Gateway attachment.</p>
+     * @public
+     */
+    TransitGatewayAttachmentId: string | undefined;
+    /**
+     * <p>Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+     * @public
+     */
+    DryRun?: boolean | undefined;
+}
+/**
+ * <p>Describes a Transit Gateway attachment for a Client VPN endpoint.</p>
+ * @public
+ */
+export interface TransitGatewayClientVpnAttachment {
+    /**
+     * <p>The ID of the Transit Gateway attachment.</p>
+     * @public
+     */
+    TransitGatewayAttachmentId?: string | undefined;
+    /**
+     * <p>The ID of the Transit Gateway.</p>
+     * @public
+     */
+    TransitGatewayId?: string | undefined;
+    /**
+     * <p>The ID of the Client VPN endpoint.</p>
+     * @public
+     */
+    ClientVpnEndpointId?: string | undefined;
+    /**
+     * <p>The ID of the Amazon Web Services account that owns the Client VPN endpoint.</p>
+     * @public
+     */
+    ClientVpnOwnerId?: string | undefined;
+    /**
+     * <p>The state of the Transit Gateway attachment.</p>
+     * @public
+     */
+    State?: TransitGatewayAttachmentStatusType | undefined;
+    /**
+     * <p>The date and time the Transit Gateway attachment was created.</p>
+     * @public
+     */
+    CreationTime?: string | undefined;
+}
+/**
+ * @public
+ */
+export interface AcceptTransitGatewayClientVpnAttachmentResult {
+    /**
+     * <p>Information about the Transit Gateway Client VPN attachment.</p>
+     * @public
+     */
+    TransitGatewayClientVpnAttachment?: TransitGatewayClientVpnAttachment | undefined;
+}
 /**
  * @public
  */
@@ -3262,10 +3323,10 @@ export interface AssociateClientVpnTargetNetworkRequest {
      */
     ClientVpnEndpointId: string | undefined;
     /**
-     * <p>The ID of the subnet to associate with the Client VPN endpoint.</p>
+     * <p>The ID of the subnet to associate with the Client VPN endpoint. Required for VPC-based endpoints. For Transit Gateway-based endpoints, use <code>AvailabilityZone</code> or <code>AvailabilityZoneId</code> instead.</p>
      * @public
      */
-    SubnetId: string | undefined;
+    SubnetId?: string | undefined;
     /**
      * <p>Unique, case-sensitive identifier that you provide to ensure the idempotency of the request.
      * For more information, see <a href="https://docs.aws.amazon.com/ec2/latest/devguide/ec2-api-idempotency.html">Ensuring idempotency</a>.</p>
@@ -3277,6 +3338,16 @@ export interface AssociateClientVpnTargetNetworkRequest {
      * @public
      */
     DryRun?: boolean | undefined;
+    /**
+     * <p>The Availability Zone name for the Transit Gateway association. Required if when associating an Availability Zone with a Client VPN endpoint that uses a Transit Gateway. You cannot specify both <code>SubnetId</code> and <code>AvailabilityZone</code>.</p>
+     * @public
+     */
+    AvailabilityZone?: string | undefined;
+    /**
+     * <p>The Availability Zone ID for the Transit Gateway association. Required if when associating an Availability Zone with a Client VPN endpoint that uses a Transit Gateway. You cannot specify both <code>AvailabilityZone</code> and <code>AvailabilityZoneId</code>.</p>
+     * @public
+     */
+    AvailabilityZoneId?: string | undefined;
 }
 /**
  * <p>Describes the state of a target network association.</p>
@@ -6879,6 +6950,12 @@ export interface OperatorResponse {
      * @public
      */
     Principal?: string | undefined;
+    /**
+     * <p>If <code>true</code>, the resource is hidden by default based on the managed resource
+     *             visibility settings for the account.</p>
+     * @public
+     */
+    HiddenByDefault?: boolean | undefined;
 }
 /**
  * <p>Describes a volume.</p>
@@ -8275,6 +8352,27 @@ export interface ConnectionLogOptions {
      */
     CloudwatchLogStream?: string | undefined;
 }
+/**
+ * <p>The Transit Gateway configuration for a Client VPN endpoint.</p>
+ * @public
+ */
+export interface TransitGatewayConfigurationInputStructure {
+    /**
+     * <p>The ID of the Transit Gateway to associate with the Client VPN endpoint.</p>
+     * @public
+     */
+    TransitGatewayId?: string | undefined;
+    /**
+     * <p>The Availability Zone names for the Transit Gateway association. You can specify up to the maximum number of Availability Zones supported by the Transit Gateway. You cannot specify both <code>AvailabilityZones</code> and <code>AvailabilityZoneIds</code>.</p>
+     * @public
+     */
+    AvailabilityZones?: string[] | undefined;
+    /**
+     * <p>The Availability Zone IDs for the Transit Gateway association. You can specify up to the maximum number of Availability Zones supported by the Transit Gateway. You cannot specify both <code>AvailabilityZones</code> and <code>AvailabilityZoneIds</code>.</p>
+     * @public
+     */
+    AvailabilityZoneIds?: string[] | undefined;
+}
 /**
  * @public
  */
@@ -8431,6 +8529,11 @@ export interface CreateClientVpnEndpointRequest {
      * @public
      */
     TrafficIpAddressType?: TrafficIpAddressType | undefined;
+    /**
+     * <p>The Transit Gateway configuration for the Client VPN endpoint. Use this parameter to associate the endpoint with a Transit Gateway instead of a VPC. You cannot specify both <code>TransitGatewayConfiguration</code> and <code>VpcId</code>/<code>SecurityGroupIds</code>.</p>
+     * @public
+     */
+    TransitGatewayConfiguration?: TransitGatewayConfigurationInputStructure | undefined;
 }
 /**
  * <p>Describes the state of a Client VPN endpoint.</p>
@@ -8460,6 +8563,10 @@ export interface ClientVpnEndpointStatus {
      *                   <code>deleted</code> - The Client VPN endpoint has been deleted. The Client VPN endpoint cannot accept
      * 					connections.</p>
      *             </li>
+     *             <li>
+     *                <p>
+     *                   <code>pending</code> - The Client VPN endpoint has been created with a Transit Gateway configuration and is waiting for the Transit Gateway attachment to be accepted. The Client VPN endpoint cannot accept connections.</p>
+     *             </li>
      *          </ul>
      * @public
      */
@@ -8523,9 +8630,10 @@ export interface CreateClientVpnRouteRequest {
      * <p>The ID of the subnet through which you want to route traffic. The specified subnet must be
      * 			an existing target network of the Client VPN endpoint.</p>
      *          <p>Alternatively, if you're adding a route for the local network, specify <code>local</code>.</p>
+     *          <p>This parameter is required for VPC-based Client VPN endpoints. For Transit Gateway-based endpoints, this parameter is not required.</p>
      * @public
      */
-    TargetVpcSubnetId: string | undefined;
+    TargetVpcSubnetId?: string | undefined;
     /**
      * <p>A brief description of the route.</p>
      * @public
@@ -9279,180 +9387,3 @@ export interface CreateDefaultVpcResult {
      */
     Vpc?: Vpc | undefined;
 }
-/**
- * @public
- */
-export interface CreateDelegateMacVolumeOwnershipTaskRequest {
-    /**
-     * <p>Unique, case-sensitive identifier that you provide to ensure the idempotency of the request. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Run_Instance_Idempotency.html">Ensuring Idempotency</a>.</p>
-     * @public
-     */
-    ClientToken?: string | undefined;
-    /**
-     * <p>Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
-     * @public
-     */
-    DryRun?: boolean | undefined;
-    /**
-     * <p>The ID of the Amazon EC2 Mac instance.</p>
-     * @public
-     */
-    InstanceId: string | undefined;
-    /**
-     * <p>Specifies the following credentials:</p>
-     *          <ul>
-     *             <li>
-     *                <p>
-     *                   <b>Internal disk administrative user</b>
-     *                </p>
-     *                <ul>
-     *                   <li>
-     *                      <p>
-     *                         <b>Username</b> - Only the default administrative user
-     *                      (<code>aws-managed-user</code>) is supported and it is used by default. You can't
-     *                      specify a different administrative user.</p>
-     *                   </li>
-     *                   <li>
-     *                      <p>
-     *                         <b>Password</b> - If you did not change the default
-     *                      password for <code>aws-managed-user</code>, specify the default password, which is
-     *                      <i>blank</i>. Otherwise, specify your password.</p>
-     *                   </li>
-     *                </ul>
-     *             </li>
-     *             <li>
-     *                <p>
-     *                   <b>Amazon EBS root volume administrative user</b>
-     *                </p>
-     *                <ul>
-     *                   <li>
-     *                      <p>
-     *                         <b>Username</b> - If you did not change the default
-     *                      administrative user, specify <code>ec2-user</code>. Otherwise, specify the username
-     *                      for your administrative user.</p>
-     *                   </li>
-     *                   <li>
-     *                      <p>
-     *                         <b>Password</b> - Specify the password for the
-     *                      administrative user.</p>
-     *                   </li>
-     *                </ul>
-     *             </li>
-     *          </ul>
-     *          <p>The credentials must be specified in the following JSON format:</p>
-     *          <p>
-     *             <code>\{
-     *   "internalDiskPassword":"<i>internal-disk-admin_password</i>",
-     *   "rootVolumeUsername":"<i>root-volume-admin_username</i>",
-     *   "rootVolumepassword":"<i>root-volume-admin_password</i>"
-     * \}</code>
-     *          </p>
-     * @public
-     */
-    MacCredentials: string | undefined;
-    /**
-     * <p>The tags to assign to the volume ownership delegation task.</p>
-     * @public
-     */
-    TagSpecifications?: TagSpecification[] | undefined;
-}
-/**
- * <p>Describes the configuration for a System Integrity Protection (SIP) modification task.</p>
- * @public
- */
-export interface MacSystemIntegrityProtectionConfiguration {
-    /**
-     * <p>Indicates whether Apple Internal was enabled or disabled by the task.</p>
-     * @public
-     */
-    AppleInternal?: MacSystemIntegrityProtectionSettingStatus | undefined;
-    /**
-     * <p>Indicates whether Base System was enabled or disabled by the task.</p>
-     * @public
-     */
-    BaseSystem?: MacSystemIntegrityProtectionSettingStatus | undefined;
-    /**
-     * <p>Indicates whether Debugging Restrictions was enabled or disabled by the task.</p>
-     * @public
-     */
-    DebuggingRestrictions?: MacSystemIntegrityProtectionSettingStatus | undefined;
-    /**
-     * <p>Indicates whether Dtrace Restrictions was enabled or disabled by the task.</p>
-     * @public
-     */
-    DTraceRestrictions?: MacSystemIntegrityProtectionSettingStatus | undefined;
-    /**
-     * <p>Indicates whether Filesystem Protections was enabled or disabled by the task.</p>
-     * @public
-     */
-    FilesystemProtections?: MacSystemIntegrityProtectionSettingStatus | undefined;
-    /**
-     * <p>Indicates whether Kext Signing was enabled or disabled by the task.</p>
-     * @public
-     */
-    KextSigning?: MacSystemIntegrityProtectionSettingStatus | undefined;
-    /**
-     * <p>Indicates whether NVRAM Protections was enabled or disabled by the task.</p>
-     * @public
-     */
-    NvramProtections?: MacSystemIntegrityProtectionSettingStatus | undefined;
-    /**
-     * <p>Indicates SIP was enabled or disabled by the task.</p>
-     * @public
-     */
-    Status?: MacSystemIntegrityProtectionSettingStatus | undefined;
-}
-/**
- * <p>Information about a System Integrity Protection (SIP) modification task or volume
- *          ownership delegation task for an Amazon EC2 Mac instance.</p>
- * @public
- */
-export interface MacModificationTask {
-    /**
-     * <p>The ID of the Amazon EC2 Mac instance.</p>
-     * @public
-     */
-    InstanceId?: string | undefined;
-    /**
-     * <p>The ID of task.</p>
-     * @public
-     */
-    MacModificationTaskId?: string | undefined;
-    /**
-     * <p>[SIP modification tasks only] Information about the SIP
-     *          configuration.</p>
-     * @public
-     */
-    MacSystemIntegrityProtectionConfig?: MacSystemIntegrityProtectionConfiguration | undefined;
-    /**
-     * <p>The date and time the task was created, in the UTC timezone
-     *          (<code>YYYY-MM-DDThh:mm:ss.sssZ</code>).</p>
-     * @public
-     */
-    StartTime?: Date | undefined;
-    /**
-     * <p>The tags assigned to the task.</p>
-     * @public
-     */
-    Tags?: Tag[] | undefined;
-    /**
-     * <p>The state of the task.</p>
-     * @public
-     */
-    TaskState?: MacModificationTaskState | undefined;
-    /**
-     * <p>The type of task.</p>
-     * @public
-     */
-    TaskType?: MacModificationTaskType | undefined;
-}
-/**
- * @public
- */
-export interface CreateDelegateMacVolumeOwnershipTaskResult {
-    /**
-     * <p>Information about the volume ownership delegation task.</p>
-     * @public
-     */
-    MacModificationTask?: MacModificationTask | undefined;
-}

package/node_modules/@aws-sdk/client-ec2/dist-types/models/models_1.d.ts

@@ -1,5 +1,182 @@
-import type { _InstanceType, AcceleratorManufacturer, AcceleratorName, AcceleratorType, AddressFamily, AmdSevSnpSpecification, AttachmentStatus, AutoProvisionZonesState, AutoScalingIpsState, AvailabilityMode, BareMetal, BurstablePerformance, CapacityReservationPreference, ConnectivityType, ContainerFormat, CpuManufacturer, CurrencyCodeValues, DefaultTargetCapacityType, DestinationFileFormat, DiskImageFormat, Ec2InstanceConnectEndpointState, ExportEnvironment, ExportTaskState, FleetCapacityReservationUsageStrategy, FleetExcessCapacityTerminationPolicy, FleetOnDemandAllocationStrategy, FleetReplacementStrategy, FleetReservationType, FleetType, FlowLogsResourceType, HostnameType, InstanceBandwidthWeighting, InstanceGeneration, InstanceInterruptionBehavior, InstanceLifecycle, InterfacePermissionType, InterruptibleCapacityReservationAllocationStatus, InterruptionType, IpAddressType, IpamExternalResourceVerificationTokenState, IpamMeteredAccount, IpamPolicyState, IpamPoolAwsService, IpamPoolPublicIpSource, IpamPoolSourceResourceType, IpamPoolState, IpamPrefixListResolverRuleConditionOperation, IpamPrefixListResolverRuleType, IpamPrefixListResolverState, IpamPrefixListResolverTargetState, IpamPrefixListResolverVersionCreationStatus, IpamResourceDiscoveryState, IpamResourceType, IpamScopeExternalAuthorityType, IpamScopeState, IpamScopeType, IpamState, IpamTier, KeyFormat, KeyType, LaunchTemplateAutoRecoveryState, LaunchTemplateHttpTokensState, LaunchTemplateInstanceMetadataEndpointState, LaunchTemplateInstanceMetadataOptionsState, LaunchTemplateInstanceMetadataProtocolIpv6, LaunchTemplateInstanceMetadataTagsState, LocalGatewayRouteState, LocalGatewayRouteTableMode, LocalGatewayRouteType, LocalGatewayVirtualInterfaceConfigurationState, LocalGatewayVirtualInterfaceGroupConfigurationState, LocalStorage, LocalStorageType, LogDestinationType, MacSystemIntegrityProtectionSettingStatus, MarketType, NatGatewayApplianceModifyState, NatGatewayApplianceState, NatGatewayApplianceType, NatGatewayState, NestedVirtualizationSpecification, NetworkInterfaceCreationType, NetworkInterfacePermissionStateCode, NetworkInterfaceStatus, NetworkInterfaceType, PlacementGroupState, PlacementStrategy, PlatformValues, PrefixListState, Protocol, ReplaceRootVolumeTaskState, ResourceType, RouteOrigin, RouteServerBfdState, RouteServerBgpState, RouteServerEndpointState, RouteServerPeerLivenessMode, RouteServerPeerState, RouteServerPersistRoutesAction, RouteServerPersistRoutesState, RouteServerState, RouteState, RuleAction, SecondaryInterfaceType, SecondaryNetworkCidrBlockAssociationState, SecondaryNetworkState, SecondaryNetworkType, ShutdownBehavior, SnapshotLocationEnum, SpotAllocationStrategy, SpotInstanceInterruptionBehavior, SpotInstanceType, SpreadLevel, TargetCapacityUnitType, Tenancy, TokenState, TrafficType, VolumeType, WeekDay } from "./enums";
-import type { AcceleratorCount, AcceleratorCountRequest, AcceleratorTotalMemoryMiB, AcceleratorTotalMemoryMiBRequest, AccessScopePath, AccessScopePathRequest, AddIpamOperatingRegion, AddPrefixListEntry, InstanceEventWindow, Ipv4PrefixSpecification, MacModificationTask, NatGatewayAddress, OperatorResponse, PortRange, ReservedInstancesListing, RouteTableAssociationState, Tag, TagSpecification, UnsuccessfulItem } from "./models_0";
+import type { _InstanceType, AcceleratorManufacturer, AcceleratorName, AcceleratorType, AddressFamily, AmdSevSnpSpecification, AttachmentStatus, AutoProvisionZonesState, AutoScalingIpsState, AvailabilityMode, BareMetal, BurstablePerformance, CapacityReservationPreference, ConnectivityType, ContainerFormat, CpuManufacturer, CurrencyCodeValues, DefaultTargetCapacityType, DestinationFileFormat, DiskImageFormat, Ec2InstanceConnectEndpointState, ExportEnvironment, ExportTaskState, FleetCapacityReservationUsageStrategy, FleetExcessCapacityTerminationPolicy, FleetOnDemandAllocationStrategy, FleetReplacementStrategy, FleetReservationType, FleetType, FlowLogsResourceType, HostnameType, InstanceBandwidthWeighting, InstanceGeneration, InstanceInterruptionBehavior, InstanceLifecycle, InterfacePermissionType, InterruptibleCapacityReservationAllocationStatus, InterruptionType, IpAddressType, IpamExternalResourceVerificationTokenState, IpamMeteredAccount, IpamPolicyState, IpamPoolAwsService, IpamPoolPublicIpSource, IpamPoolSourceResourceType, IpamPoolState, IpamPrefixListResolverRuleConditionOperation, IpamPrefixListResolverRuleType, IpamPrefixListResolverState, IpamPrefixListResolverTargetState, IpamPrefixListResolverVersionCreationStatus, IpamResourceDiscoveryState, IpamResourceType, IpamScopeExternalAuthorityType, IpamScopeState, IpamScopeType, IpamState, IpamTier, KeyFormat, KeyType, LaunchTemplateAutoRecoveryState, LaunchTemplateHttpTokensState, LaunchTemplateInstanceMetadataEndpointState, LaunchTemplateInstanceMetadataOptionsState, LaunchTemplateInstanceMetadataProtocolIpv6, LaunchTemplateInstanceMetadataTagsState, LocalGatewayRouteState, LocalGatewayRouteTableMode, LocalGatewayRouteType, LocalGatewayVirtualInterfaceConfigurationState, LocalGatewayVirtualInterfaceGroupConfigurationState, LocalStorage, LocalStorageType, LogDestinationType, MacModificationTaskState, MacModificationTaskType, MacSystemIntegrityProtectionSettingStatus, MarketType, NatGatewayApplianceModifyState, NatGatewayApplianceState, NatGatewayApplianceType, NatGatewayState, NestedVirtualizationSpecification, NetworkInterfaceCreationType, NetworkInterfacePermissionStateCode, NetworkInterfaceStatus, NetworkInterfaceType, PlacementGroupState, PlacementStrategy, PlatformValues, PrefixListState, Protocol, ReplaceRootVolumeTaskState, ResourceType, RouteOrigin, RouteServerBfdState, RouteServerBgpState, RouteServerEndpointState, RouteServerPeerLivenessMode, RouteServerPeerState, RouteServerPersistRoutesAction, RouteServerPersistRoutesState, RouteServerState, RouteState, RuleAction, SecondaryInterfaceType, ShutdownBehavior, SnapshotLocationEnum, SpotAllocationStrategy, SpotInstanceInterruptionBehavior, SpotInstanceType, SpreadLevel, TargetCapacityUnitType, Tenancy, TokenState, TrafficType, VolumeType, WeekDay } from "./enums";
+import type { AcceleratorCount, AcceleratorCountRequest, AcceleratorTotalMemoryMiB, AcceleratorTotalMemoryMiBRequest, AccessScopePath, AccessScopePathRequest, AddIpamOperatingRegion, AddPrefixListEntry, InstanceEventWindow, Ipv4PrefixSpecification, NatGatewayAddress, OperatorResponse, PortRange, ReservedInstancesListing, RouteTableAssociationState, Tag, TagSpecification, UnsuccessfulItem } from "./models_0";
+/**
+ * @public
+ */
+export interface CreateDelegateMacVolumeOwnershipTaskRequest {
+    /**
+     * <p>Unique, case-sensitive identifier that you provide to ensure the idempotency of the request. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Run_Instance_Idempotency.html">Ensuring Idempotency</a>.</p>
+     * @public
+     */
+    ClientToken?: string | undefined;
+    /**
+     * <p>Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+     * @public
+     */
+    DryRun?: boolean | undefined;
+    /**
+     * <p>The ID of the Amazon EC2 Mac instance.</p>
+     * @public
+     */
+    InstanceId: string | undefined;
+    /**
+     * <p>Specifies the following credentials:</p>
+     *          <ul>
+     *             <li>
+     *                <p>
+     *                   <b>Internal disk administrative user</b>
+     *                </p>
+     *                <ul>
+     *                   <li>
+     *                      <p>
+     *                         <b>Username</b> - Only the default administrative user
+     *                      (<code>aws-managed-user</code>) is supported and it is used by default. You can't
+     *                      specify a different administrative user.</p>
+     *                   </li>
+     *                   <li>
+     *                      <p>
+     *                         <b>Password</b> - If you did not change the default
+     *                      password for <code>aws-managed-user</code>, specify the default password, which is
+     *                      <i>blank</i>. Otherwise, specify your password.</p>
+     *                   </li>
+     *                </ul>
+     *             </li>
+     *             <li>
+     *                <p>
+     *                   <b>Amazon EBS root volume administrative user</b>
+     *                </p>
+     *                <ul>
+     *                   <li>
+     *                      <p>
+     *                         <b>Username</b> - If you did not change the default
+     *                      administrative user, specify <code>ec2-user</code>. Otherwise, specify the username
+     *                      for your administrative user.</p>
+     *                   </li>
+     *                   <li>
+     *                      <p>
+     *                         <b>Password</b> - Specify the password for the
+     *                      administrative user.</p>
+     *                   </li>
+     *                </ul>
+     *             </li>
+     *          </ul>
+     *          <p>The credentials must be specified in the following JSON format:</p>
+     *          <p>
+     *             <code>\{
+     *   "internalDiskPassword":"<i>internal-disk-admin_password</i>",
+     *   "rootVolumeUsername":"<i>root-volume-admin_username</i>",
+     *   "rootVolumepassword":"<i>root-volume-admin_password</i>"
+     * \}</code>
+     *          </p>
+     * @public
+     */
+    MacCredentials: string | undefined;
+    /**
+     * <p>The tags to assign to the volume ownership delegation task.</p>
+     * @public
+     */
+    TagSpecifications?: TagSpecification[] | undefined;
+}
+/**
+ * <p>Describes the configuration for a System Integrity Protection (SIP) modification task.</p>
+ * @public
+ */
+export interface MacSystemIntegrityProtectionConfiguration {
+    /**
+     * <p>Indicates whether Apple Internal was enabled or disabled by the task.</p>
+     * @public
+     */
+    AppleInternal?: MacSystemIntegrityProtectionSettingStatus | undefined;
+    /**
+     * <p>Indicates whether Base System was enabled or disabled by the task.</p>
+     * @public
+     */
+    BaseSystem?: MacSystemIntegrityProtectionSettingStatus | undefined;
+    /**
+     * <p>Indicates whether Debugging Restrictions was enabled or disabled by the task.</p>
+     * @public
+     */
+    DebuggingRestrictions?: MacSystemIntegrityProtectionSettingStatus | undefined;
+    /**
+     * <p>Indicates whether Dtrace Restrictions was enabled or disabled by the task.</p>
+     * @public
+     */
+    DTraceRestrictions?: MacSystemIntegrityProtectionSettingStatus | undefined;
+    /**
+     * <p>Indicates whether Filesystem Protections was enabled or disabled by the task.</p>
+     * @public
+     */
+    FilesystemProtections?: MacSystemIntegrityProtectionSettingStatus | undefined;
+    /**
+     * <p>Indicates whether Kext Signing was enabled or disabled by the task.</p>
+     * @public
+     */
+    KextSigning?: MacSystemIntegrityProtectionSettingStatus | undefined;
+    /**
+     * <p>Indicates whether NVRAM Protections was enabled or disabled by the task.</p>
+     * @public
+     */
+    NvramProtections?: MacSystemIntegrityProtectionSettingStatus | undefined;
+    /**
+     * <p>Indicates SIP was enabled or disabled by the task.</p>
+     * @public
+     */
+    Status?: MacSystemIntegrityProtectionSettingStatus | undefined;
+}
+/**
+ * <p>Information about a System Integrity Protection (SIP) modification task or volume
+ *          ownership delegation task for an Amazon EC2 Mac instance.</p>
+ * @public
+ */
+export interface MacModificationTask {
+    /**
+     * <p>The ID of the Amazon EC2 Mac instance.</p>
+     * @public
+     */
+    InstanceId?: string | undefined;
+    /**
+     * <p>The ID of task.</p>
+     * @public
+     */
+    MacModificationTaskId?: string | undefined;
+    /**
+     * <p>[SIP modification tasks only] Information about the SIP
+     *          configuration.</p>
+     * @public
+     */
+    MacSystemIntegrityProtectionConfig?: MacSystemIntegrityProtectionConfiguration | undefined;
+    /**
+     * <p>The date and time the task was created, in the UTC timezone
+     *          (<code>YYYY-MM-DDThh:mm:ss.sssZ</code>).</p>
+     * @public
+     */
+    StartTime?: Date | undefined;
+    /**
+     * <p>The tags assigned to the task.</p>
+     * @public
+     */
+    Tags?: Tag[] | undefined;
+    /**
+     * <p>The state of the task.</p>
+     * @public
+     */
+    TaskState?: MacModificationTaskState | undefined;
+    /**
+     * <p>The type of task.</p>
+     * @public
+     */
+    TaskType?: MacModificationTaskType | undefined;
+}
+/**
+ * @public
+ */
+export interface CreateDelegateMacVolumeOwnershipTaskResult {
+    /**
+     * <p>Information about the volume ownership delegation task.</p>
+     * @public
+     */
+    MacModificationTask?: MacModificationTask | undefined;
+}
 /**
  * <p>Describes a DHCP configuration option.</p>
  * @public
@@ -12432,120 +12609,3 @@ export interface CreateRouteTableResult {
      */
     ClientToken?: string | undefined;
 }
-/**
- * @public
- */
-export interface CreateSecondaryNetworkRequest {
-    /**
-     * <p>Unique, case-sensitive identifier that you provide to ensure the idempotency of the request. For more information, see <a href="https://docs.aws.amazon.com/ec2/latest/devguide/ec2-api-idempotency.html">Ensure Idempotency</a>.</p>
-     * @public
-     */
-    ClientToken?: string | undefined;
-    /**
-     * <p>Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
-     * @public
-     */
-    DryRun?: boolean | undefined;
-    /**
-     * <p>The IPv4 CIDR block for the secondary network. The CIDR block size must be between /12 and /28.</p>
-     * @public
-     */
-    Ipv4CidrBlock: string | undefined;
-    /**
-     * <p>The type of secondary network.</p>
-     * @public
-     */
-    NetworkType: SecondaryNetworkType | undefined;
-    /**
-     * <p>The tags to assign to the secondary network.</p>
-     * @public
-     */
-    TagSpecifications?: TagSpecification[] | undefined;
-}
-/**
- * <p>Describes an IPv4 CIDR block associated with a secondary network.</p>
- * @public
- */
-export interface SecondaryNetworkIpv4CidrBlockAssociation {
-    /**
-     * <p>The association ID for the IPv4 CIDR block.</p>
-     * @public
-     */
-    AssociationId?: string | undefined;
-    /**
-     * <p>The IPv4 CIDR block.</p>
-     * @public
-     */
-    CidrBlock?: string | undefined;
-    /**
-     * <p>The state of the CIDR block association.</p>
-     * @public
-     */
-    State?: SecondaryNetworkCidrBlockAssociationState | undefined;
-    /**
-     * <p>The reason for the current state of the CIDR block association.</p>
-     * @public
-     */
-    StateReason?: string | undefined;
-}
-/**
- * <p>Describes a secondary network.</p>
- * @public
- */
-export interface SecondaryNetwork {
-    /**
-     * <p>The ID of the secondary network.</p>
-     * @public
-     */
-    SecondaryNetworkId?: string | undefined;
-    /**
-     * <p>The Amazon Resource Name (ARN) of the secondary network.</p>
-     * @public
-     */
-    SecondaryNetworkArn?: string | undefined;
-    /**
-     * <p>The ID of the Amazon Web Services account that owns the secondary network.</p>
-     * @public
-     */
-    OwnerId?: string | undefined;
-    /**
-     * <p>The type of the secondary network.</p>
-     * @public
-     */
-    Type?: SecondaryNetworkType | undefined;
-    /**
-     * <p>The state of the secondary network.</p>
-     * @public
-     */
-    State?: SecondaryNetworkState | undefined;
-    /**
-     * <p>The reason for the current state of the secondary network.</p>
-     * @public
-     */
-    StateReason?: string | undefined;
-    /**
-     * <p>Information about the IPv4 CIDR blocks associated with the secondary network.</p>
-     * @public
-     */
-    Ipv4CidrBlockAssociations?: SecondaryNetworkIpv4CidrBlockAssociation[] | undefined;
-    /**
-     * <p>The tags assigned to the secondary network.</p>
-     * @public
-     */
-    Tags?: Tag[] | undefined;
-}
-/**
- * @public
- */
-export interface CreateSecondaryNetworkResult {
-    /**
-     * <p>Information about the secondary network.</p>
-     * @public
-     */
-    SecondaryNetwork?: SecondaryNetwork | undefined;
-    /**
-     * <p>Unique, case-sensitive identifier to ensure the idempotency of the request. Only returned if a client token was provided in the request.</p>
-     * @public
-     */
-    ClientToken?: string | undefined;
-}