@cdklabs/cdk-ssm-documents 0.0.78 → 0.0.80

package/node_modules/@aws-sdk/client-ec2/dist-types/models/models_2.d.ts

@@ -1,6 +1,392 @@
-import type { ApplianceModeSupportValue, AutoAcceptSharedAssociationsValue, AutoAcceptSharedAttachmentsValue, BgpStatus, ConnectionNotificationState, ConnectionNotificationType, CopyTagsFromSource, CurrencyCodeValues, DatafeedSubscriptionState, DefaultRouteTableAssociationValue, DefaultRouteTablePropagationValue, DeleteFleetErrorCode, DeviceTrustProviderType, DnsNameState, DnsRecordIpType, DnsSupportValue, DynamicRoutingValue, EncryptionStateValue, FleetStateCode, GatewayAssociationState, GatewayType, Igmpv2SupportValue, InstanceEventWindowState, InterfacePermissionType, InternetGatewayExclusionMode, IpAddressType, Ipv6SupportValue, LaunchTemplateErrorCode, MulticastSupportValue, NetworkInterfacePermissionStateCode, PayerResponsibility, PayerResponsibilityScope, PayerResponsibilityType, PlacementGroupState, PlacementStrategy, ProtocolValue, ReplaceRootVolumeTaskState, RouteOrigin, RouteServerBfdState, RouteServerBgpState, RouteServerEndpointState, RouteServerPeerLivenessMode, RouteServerPeerState, RouteServerPersistRoutesAction, RouteServerPersistRoutesState, RouteServerState, RouteState, SecondaryNetworkCidrBlockAssociationState, SecondaryNetworkState, SecondaryNetworkType, SecondarySubnetCidrBlockAssociationState, SecondarySubnetState, SecurityGroupReferencingSupportValue, ServiceConnectivityType, ServiceState, ServiceType, SnapshotLocationEnum, SnapshotState, SpreadLevel, SSEType, State, StaticSourcesSupportValue, StorageTier, SubnetCidrReservationType, TelemetryStatus, Tenancy, TrafficDirection, TrafficMirrorNetworkService, TrafficMirrorRuleAction, TrafficMirrorTargetType, TransferType, TransitGatewayAttachmentResourceType, TransitGatewayAttachmentState, TransitGatewayConnectPeerState, TransitGatewayMeteringPayerType, TransitGatewayMeteringPolicyEntryState, TransitGatewayMeteringPolicyState, TransitGatewayMulticastDomainState, TransitGatewayPolicyTableEntryState, TransitGatewayPolicyTableState, TransitGatewayPrefixListReferenceState, TransitGatewayRouteState, TransitGatewayRouteTableAnnouncementDirection, TransitGatewayRouteTableAnnouncementState, TransitGatewayRouteTableState, TransitGatewayRouteType, TransitGatewayState, TrustProviderType, TunnelInsideIpVersion, UserTrustProviderType, VerifiedAccessEndpointAttachmentType, VerifiedAccessEndpointProtocol, VerifiedAccessEndpointStatusCode, VerifiedAccessEndpointType, VolumeType, VpcBlockPublicAccessExclusionState, VpcEncryptionControlExclusionStateInput, VpcEncryptionControlMode, VpcEndpointType, VpnConcentratorType, VpnEcmpSupportValue, VpnState, VpnStaticRouteSource, VpnTunnelBandwidth } from "./enums";
-import type { ApplicationStatusCheckResponseObject, CarrierGateway, IpamRoutingPolicyRegistrationDelta, OperatorResponse, ReservedInstancesListing, RouteTableAssociationState, Tag, TagSpecification, TransitGatewayPeeringAttachment, TransitGatewayVpcAttachment, UnsuccessfulItem, VerifiedAccessInstance, VerifiedAccessSseSpecificationResponse, VerifiedAccessTrustProvider, VpcAttachment, VpcPeeringConnection } from "./models_0";
-import type { ClientVpnEndpointStatus, ClientVpnRouteStatus, CoipCidr, CoipPool, Ec2InstanceConnectEndpoint, Ipam, IpamExternalResourceVerificationToken, IpamInternetRegistryAssociation, IpamPolicy, IpamPool, IpamPrefixListResolver, IpamPrefixListResolverTarget, IpamResourceDiscovery, IpamScope, LaunchTemplate, LocalGatewayRoute, LocalGatewayRouteTable, LocalGatewayRouteTableVirtualInterfaceGroupAssociation, OperatorRequest, Subnet, Vpc, VpcEncryptionControl } from "./models_1";
+import type { ApplianceModeSupportValue, AttachmentStatus, AutoAcceptSharedAssociationsValue, AutoAcceptSharedAttachmentsValue, BgpStatus, ClientVpnAuthorizationPolicyStatus, ConnectionNotificationState, ConnectionNotificationType, CopyTagsFromSource, CurrencyCodeValues, DatafeedSubscriptionState, DefaultRouteTableAssociationValue, DefaultRouteTablePropagationValue, DeleteFleetErrorCode, DeviceTrustProviderType, DnsNameState, DnsRecordIpType, DnsSupportValue, DynamicRoutingValue, EncryptionStateValue, FleetStateCode, GatewayAssociationState, GatewayType, Igmpv2SupportValue, InstanceEventWindowState, InterfacePermissionType, InternetGatewayExclusionMode, IpAddressType, Ipv6SupportValue, MulticastSupportValue, NetworkInterfacePermissionStateCode, NetworkInterfaceStatus, NetworkInterfaceType, PayerResponsibility, PayerResponsibilityScope, PayerResponsibilityType, PlacementGroupState, PlacementStrategy, ProtocolValue, ReplaceRootVolumeTaskState, RouteOrigin, RouteServerBfdState, RouteServerBgpState, RouteServerEndpointState, RouteServerPeerLivenessMode, RouteServerPeerState, RouteServerPersistRoutesAction, RouteServerPersistRoutesState, RouteServerState, RouteState, SecondaryNetworkCidrBlockAssociationState, SecondaryNetworkState, SecondaryNetworkType, SecondarySubnetCidrBlockAssociationState, SecondarySubnetState, SecurityGroupReferencingSupportValue, ServiceConnectivityType, ServiceState, ServiceType, SnapshotLocationEnum, SnapshotState, SpreadLevel, SSEType, State, StaticSourcesSupportValue, StorageTier, SubnetCidrReservationType, TelemetryStatus, Tenancy, TrafficDirection, TrafficMirrorNetworkService, TrafficMirrorRuleAction, TrafficMirrorTargetType, TransferType, TransitGatewayAttachmentResourceType, TransitGatewayAttachmentState, TransitGatewayConnectPeerState, TransitGatewayMeteringPayerType, TransitGatewayMeteringPolicyEntryState, TransitGatewayMeteringPolicyState, TransitGatewayMulticastDomainState, TransitGatewayPolicyTableEntryState, TransitGatewayPolicyTableState, TransitGatewayPrefixListReferenceState, TransitGatewayRouteState, TransitGatewayRouteTableAnnouncementDirection, TransitGatewayRouteTableAnnouncementState, TransitGatewayRouteTableState, TransitGatewayRouteType, TransitGatewayState, TrustProviderType, TunnelInsideIpVersion, UserTrustProviderType, VerifiedAccessEndpointAttachmentType, VerifiedAccessEndpointProtocol, VerifiedAccessEndpointStatusCode, VerifiedAccessEndpointType, VolumeType, VpcBlockPublicAccessExclusionState, VpcEncryptionControlExclusionStateInput, VpcEncryptionControlMode, VpcEndpointType, VpnConcentratorType, VpnEcmpSupportValue, VpnState, VpnStaticRouteSource, VpnTunnelBandwidth } from "./enums";
+import type { ApplicationStatusCheckResponseObject, CarrierGateway, IpamRoutingPolicyRegistrationDelta, Ipv4PrefixSpecification, OperatorResponse, ReservedInstancesListing, RouteTableAssociationState, Tag, TagSpecification, TransitGatewayPeeringAttachment, TransitGatewayVpcAttachment, UnsuccessfulItem, VerifiedAccessInstance, VerifiedAccessSseSpecificationResponse, VerifiedAccessTrustProvider, VpcAttachment, VpcPeeringConnection } from "./models_0";
+import type { AttachmentEnaSrdSpecification, ClientVpnEndpointStatus, ClientVpnRouteStatus, CoipCidr, CoipPool, Ec2InstanceConnectEndpoint, Ipam, IpamExternalResourceVerificationToken, IpamInternetRegistryAssociation, IpamPolicy, IpamPool, IpamPrefixListResolver, IpamPrefixListResolverTarget, IpamResourceDiscovery, IpamScope, LaunchTemplate, NetworkInterfaceAssociation, OperatorRequest, Subnet, Vpc, VpcEncryptionControl } from "./models_1";
+/**
+ * <p>Describes a network interface attachment.</p>
+ * @public
+ */
+export interface NetworkInterfaceAttachment {
+    /**
+     * <p>The timestamp indicating when the attachment initiated.</p>
+     * @public
+     */
+    AttachTime?: Date | undefined;
+    /**
+     * <p>The ID of the network interface attachment.</p>
+     * @public
+     */
+    AttachmentId?: string | undefined;
+    /**
+     * <p>Indicates whether the network interface is deleted when the instance is
+     *             terminated.</p>
+     * @public
+     */
+    DeleteOnTermination?: boolean | undefined;
+    /**
+     * <p>The device index of the network interface attachment on the instance.</p>
+     * @public
+     */
+    DeviceIndex?: number | undefined;
+    /**
+     * <p>The index of the network card.</p>
+     * @public
+     */
+    NetworkCardIndex?: number | undefined;
+    /**
+     * <p>The ID of the instance.</p>
+     * @public
+     */
+    InstanceId?: string | undefined;
+    /**
+     * <p>The Amazon Web Services account ID of the owner of the instance.</p>
+     * @public
+     */
+    InstanceOwnerId?: string | undefined;
+    /**
+     * <p>The attachment state.</p>
+     * @public
+     */
+    Status?: AttachmentStatus | undefined;
+    /**
+     * <p>Configures ENA Express for the network interface that this action attaches to the
+     *             instance.</p>
+     * @public
+     */
+    EnaSrdSpecification?: AttachmentEnaSrdSpecification | undefined;
+    /**
+     * <p>The number of ENA queues created with the instance.</p>
+     * @public
+     */
+    EnaQueueCount?: number | undefined;
+}
+/**
+ * <p>A security group connection tracking configuration that enables you to set the idle
+ *             timeout for connection tracking on an Elastic network interface. For more information,
+ *             see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/security-group-connection-tracking.html#connection-tracking-timeouts">Connection tracking timeouts</a> in the
+ *             <i>Amazon EC2 User Guide</i>.</p>
+ * @public
+ */
+export interface ConnectionTrackingConfiguration {
+    /**
+     * <p>Timeout (in seconds) for idle TCP
+     * 						connections in an established state. Min: 60 seconds. Max: 432000 seconds (5
+     * 						days). Default: 350 seconds for Nitro v6 instance types (excluding
+     * 						P6e-GB200); 432000 seconds for all other instance types (including
+     * 						P6e-GB200). Recommended: Less than 432000 seconds.</p>
+     * @public
+     */
+    TcpEstablishedTimeout?: number | undefined;
+    /**
+     * <p>Timeout (in seconds) for idle UDP
+     * 						flows classified as streams which have seen more than one request-response
+     * 						transaction. Min: 60 seconds. Max: 180 seconds (3 minutes). Default: 180
+     * 						seconds.</p>
+     * @public
+     */
+    UdpStreamTimeout?: number | undefined;
+    /**
+     * <p>Timeout (in seconds) for idle UDP flows that
+     * 						have seen traffic only in a single direction or a single request-response
+     * 						transaction. Min: 30 seconds. Max: 60 seconds. Default: 30 seconds.</p>
+     * @public
+     */
+    UdpTimeout?: number | undefined;
+}
+/**
+ * <p>Describes a security group.</p>
+ * @public
+ */
+export interface GroupIdentifier {
+    /**
+     * <p>The ID of the security group.</p>
+     * @public
+     */
+    GroupId?: string | undefined;
+    /**
+     * <p>The name of the security group.</p>
+     * @public
+     */
+    GroupName?: string | undefined;
+}
+/**
+ * <p>Describes an IPv6 address associated with a network interface.</p>
+ * @public
+ */
+export interface NetworkInterfaceIpv6Address {
+    /**
+     * <p>The IPv6 address.</p>
+     * @public
+     */
+    Ipv6Address?: string | undefined;
+    /**
+     * <p>An IPv6-enabled public hostname for a network interface. Requests from within the VPC or from the internet resolve to the IPv6 GUA of the network interface. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-naming.html">EC2 instance hostnames, DNS names, and domains</a> in the <i>Amazon EC2 User Guide</i>.</p>
+     * @public
+     */
+    PublicIpv6DnsName?: string | undefined;
+    /**
+     * <p>Determines if an IPv6 address associated with a network interface is the primary IPv6
+     *             address. When you enable an IPv6 GUA address to be a primary IPv6, the first IPv6 GUA
+     *             will be made the primary IPv6 address until the instance is terminated or the network
+     *             interface is detached. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_ModifyNetworkInterfaceAttribute.html">ModifyNetworkInterfaceAttribute</a>.</p>
+     * @public
+     */
+    IsPrimaryIpv6?: boolean | undefined;
+}
+/**
+ * <p>Describes the IPv6 prefix.</p>
+ * @public
+ */
+export interface Ipv6PrefixSpecification {
+    /**
+     * <p>The IPv6 prefix.</p>
+     * @public
+     */
+    Ipv6Prefix?: string | undefined;
+}
+/**
+ * <p>Describes the private IPv4 address of a network interface.</p>
+ * @public
+ */
+export interface NetworkInterfacePrivateIpAddress {
+    /**
+     * <p>The association information for an Elastic IP address (IPv4) associated with the
+     *             network interface.</p>
+     * @public
+     */
+    Association?: NetworkInterfaceAssociation | undefined;
+    /**
+     * <p>Indicates whether this IPv4 address is the primary private IPv4 address of the network
+     *             interface.</p>
+     * @public
+     */
+    Primary?: boolean | undefined;
+    /**
+     * <p>The private DNS name.</p>
+     * @public
+     */
+    PrivateDnsName?: string | undefined;
+    /**
+     * <p>The private IPv4 address.</p>
+     * @public
+     */
+    PrivateIpAddress?: string | undefined;
+}
+/**
+ * <p>Public hostname type options. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-naming.html">EC2 instance hostnames, DNS names, and domains</a> in the <i>Amazon EC2 User Guide</i>.</p>
+ * @public
+ */
+export interface PublicIpDnsNameOptions {
+    /**
+     * <p>The public hostname type. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-naming.html">EC2 instance hostnames, DNS names, and domains</a> in the <i>Amazon EC2 User Guide</i>.</p>
+     * @public
+     */
+    DnsHostnameType?: string | undefined;
+    /**
+     * <p>An IPv4-enabled public hostname for a network interface. Requests from within the VPC resolve to the private primary IPv4 address of the network interface. Requests from the internet resolve to the public IPv4 address of the network interface.</p>
+     * @public
+     */
+    PublicIpv4DnsName?: string | undefined;
+    /**
+     * <p>An IPv6-enabled public hostname for a network interface. Requests from within the VPC or from the internet resolve to the IPv6 GUA of the network interface.</p>
+     * @public
+     */
+    PublicIpv6DnsName?: string | undefined;
+    /**
+     * <p>A dual-stack public hostname for a network interface. Requests from within the VPC resolve to both the private IPv4 address and the IPv6 Global Unicast Address of the network interface. Requests from the internet resolve to both the public IPv4 and the IPv6 GUA address of the network interface.</p>
+     * @public
+     */
+    PublicDualStackDnsName?: string | undefined;
+}
+/**
+ * <p>Describes a network interface.</p>
+ * @public
+ */
+export interface NetworkInterface {
+    /**
+     * <p>The association information for an Elastic IP address (IPv4) associated with the
+     *             network interface.</p>
+     * @public
+     */
+    Association?: NetworkInterfaceAssociation | undefined;
+    /**
+     * <p>The network interface attachment.</p>
+     * @public
+     */
+    Attachment?: NetworkInterfaceAttachment | undefined;
+    /**
+     * <p>The Availability Zone.</p>
+     * @public
+     */
+    AvailabilityZone?: string | undefined;
+    /**
+     * <p>A security group connection tracking configuration that enables you to set the timeout
+     *             for connection tracking on an Elastic network interface. For more information, see
+     *                 <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/security-group-connection-tracking.html#connection-tracking-timeouts">Connection tracking timeouts</a> in the
+     *             <i>Amazon EC2 User Guide</i>.</p>
+     * @public
+     */
+    ConnectionTrackingConfiguration?: ConnectionTrackingConfiguration | undefined;
+    /**
+     * <p>A description.</p>
+     * @public
+     */
+    Description?: string | undefined;
+    /**
+     * <p>Any security groups for the network interface.</p>
+     * @public
+     */
+    Groups?: GroupIdentifier[] | undefined;
+    /**
+     * <p>The type of network interface.</p>
+     * @public
+     */
+    InterfaceType?: NetworkInterfaceType | undefined;
+    /**
+     * <p>The IPv6 addresses associated with the network interface.</p>
+     * @public
+     */
+    Ipv6Addresses?: NetworkInterfaceIpv6Address[] | undefined;
+    /**
+     * <p>The MAC address.</p>
+     * @public
+     */
+    MacAddress?: string | undefined;
+    /**
+     * <p>The ID of the network interface.</p>
+     * @public
+     */
+    NetworkInterfaceId?: string | undefined;
+    /**
+     * <p>The Amazon Resource Name (ARN) of the Outpost.</p>
+     * @public
+     */
+    OutpostArn?: string | undefined;
+    /**
+     * <p>The Amazon Web Services account ID of the owner of the network interface.</p>
+     * @public
+     */
+    OwnerId?: string | undefined;
+    /**
+     * <p>The private hostname. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-naming.html">EC2 instance hostnames, DNS names, and domains</a> in the <i>Amazon EC2 User Guide</i>.</p>
+     * @public
+     */
+    PrivateDnsName?: string | undefined;
+    /**
+     * <p>A public hostname. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-naming.html">EC2 instance hostnames, DNS names, and domains</a> in the <i>Amazon EC2 User Guide</i>.</p>
+     * @public
+     */
+    PublicDnsName?: string | undefined;
+    /**
+     * <p>Public hostname type options. For more information, see <a href="https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-naming.html">EC2 instance hostnames, DNS names, and domains</a> in the <i>Amazon EC2 User Guide</i>.</p>
+     * @public
+     */
+    PublicIpDnsNameOptions?: PublicIpDnsNameOptions | undefined;
+    /**
+     * <p>The IPv4 address of the network interface within the subnet.</p>
+     * @public
+     */
+    PrivateIpAddress?: string | undefined;
+    /**
+     * <p>The private IPv4 addresses associated with the network interface.</p>
+     * @public
+     */
+    PrivateIpAddresses?: NetworkInterfacePrivateIpAddress[] | undefined;
+    /**
+     * <p>The IPv4 prefixes that are assigned to the network interface.</p>
+     * @public
+     */
+    Ipv4Prefixes?: Ipv4PrefixSpecification[] | undefined;
+    /**
+     * <p>The IPv6 prefixes that are assigned to the network interface.</p>
+     * @public
+     */
+    Ipv6Prefixes?: Ipv6PrefixSpecification[] | undefined;
+    /**
+     * <p>The alias or Amazon Web Services account ID of the principal or service that created
+     *             the network interface.</p>
+     * @public
+     */
+    RequesterId?: string | undefined;
+    /**
+     * <p>Indicates whether the network interface is being managed by Amazon Web Services.</p>
+     * @public
+     */
+    RequesterManaged?: boolean | undefined;
+    /**
+     * <p>Indicates whether source/destination checking is enabled.</p>
+     * @public
+     */
+    SourceDestCheck?: boolean | undefined;
+    /**
+     * <p>The status of the network interface.</p>
+     * @public
+     */
+    Status?: NetworkInterfaceStatus | undefined;
+    /**
+     * <p>The ID of the subnet.</p>
+     * @public
+     */
+    SubnetId?: string | undefined;
+    /**
+     * <p>Any tags assigned to the network interface.</p>
+     * @public
+     */
+    TagSet?: Tag[] | undefined;
+    /**
+     * <p>The ID of the VPC.</p>
+     * @public
+     */
+    VpcId?: string | undefined;
+    /**
+     * <p>Indicates whether a network interface with an IPv6 address is unreachable from the
+     *             public internet. If the value is <code>true</code>, inbound traffic from the internet is
+     *             dropped and you cannot assign an elastic IP address to the network interface. The
+     *             network interface is reachable from peered VPCs and resources connected through a
+     *             transit gateway, including on-premises networks.</p>
+     * @public
+     */
+    DenyAllIgwTraffic?: boolean | undefined;
+    /**
+     * <p>Indicates whether this is an IPv6 only network interface.</p>
+     * @public
+     */
+    Ipv6Native?: boolean | undefined;
+    /**
+     * <p>The IPv6 globally unique address associated with the network interface.</p>
+     * @public
+     */
+    Ipv6Address?: string | undefined;
+    /**
+     * <p>The service provider that manages the network interface.</p>
+     * @public
+     */
+    Operator?: OperatorResponse | undefined;
+    /**
+     * <p>The subnets associated with this network interface.</p>
+     * @public
+     */
+    AssociatedSubnets?: string[] | undefined;
+    /**
+     * <p>The ID of the Availability Zone.</p>
+     * @public
+     */
+    AvailabilityZoneId?: string | undefined;
+}
+/**
+ * @public
+ */
+export interface CreateNetworkInterfaceResult {
+    /**
+     * <p>Information about the network interface.</p>
+     * @public
+     */
+    NetworkInterface?: NetworkInterface | undefined;
+    /**
+     * <p>The token to use to retrieve the next page of results. This value is <code>null</code> when there are no more results to return.</p>
+     * @public
+     */
+    ClientToken?: string | undefined;
+}
 /**
  * <p>Contains the parameters for CreateNetworkInterfacePermission.</p>
  * @public
@@ -6063,6 +6449,7 @@ export interface CreateVpcEndpointRequest {
     DryRun?: boolean | undefined;
     /**
      * <p>The type of endpoint.</p>
+     *          <p>For more information about the types of VPC endpoints, see <a href="https://docs.aws.amazon.com/vpc/latest/privatelink/concepts.html#concepts-vpc-endpoints">VPC endpoints</a> in the <i>Amazon Web Services PrivateLink User Guide</i>.</p>
      *          <p>Default: Gateway</p>
      * @public
      */
@@ -6090,15 +6477,19 @@ export interface CreateVpcEndpointRequest {
      */
     RouteTableIds?: string[] | undefined;
     /**
-     * <p>(Interface and Gateway Load Balancer endpoints) The IDs of the subnets in which to create endpoint
-     *             network interfaces. For a Gateway Load Balancer endpoint, you can specify only one subnet.</p>
+     * <p>(Interface, Gateway Load Balancer endpoints, Resource, ServiceNetwork, and Tunnel endpoints only) The IDs of the
+     *             subnets in which to create endpoint network interfaces. For a Gateway Load Balancer endpoint, you can
+     *             specify only one subnet. For a <code>Tunnel</code> endpoint, the subnets must be in the
+     *             Availability Zones of the resource gateway associated with the shared resource
+     *             configuration. An endpoint network interface is created only in an Availability Zone
+     *             that the resource gateway is also in.</p>
      * @public
      */
     SubnetIds?: string[] | undefined;
     /**
-     * <p>(Interface endpoint) The IDs of the security groups to associate with the
-     *             endpoint network interfaces. If this parameter is not specified, we use the default
-     *             security group for the VPC.</p>
+     * <p>(Interface, Resource, ServiceNetwork, and Tunnel endpoints only) The IDs of the security groups
+     *             to associate with the endpoint network interfaces. If this parameter is not specified,
+     *             we use the default security group for the VPC.</p>
      * @public
      */
     SecurityGroupIds?: string[] | undefined;
@@ -6151,8 +6542,25 @@ export interface CreateVpcEndpointRequest {
      */
     ServiceNetworkArn?: string | undefined;
     /**
-     * <p>The Amazon Resource Name (ARN) of a resource configuration that will be associated with
-     *          the VPC endpoint of type resource.</p>
+     * <p>(Resource and Tunnel endpoints only) The Amazon Resource Name (ARN) of a resource
+     *          configuration associated with the VPC endpoint. The type of resource configuration depends
+     *          on the endpoint type:</p>
+     *          <ul>
+     *             <li>
+     *                <p>For a Resource endpoint, you can specify a resource configuration that is of type
+     *                <code>SINGLE</code>, <code>GROUP</code>, or <code>ARN</code>. To reach a resource
+     *                that belongs to a group, specify the parent <code>GROUP</code> resource
+     *                configuration.</p>
+     *             </li>
+     *             <li>
+     *                <p>For a Tunnel endpoint, you can specify a resource configuration that is of type
+     *                <code>CIDR</code>.</p>
+     *             </li>
+     *          </ul>
+     *          <p>For more information about the types of resource configurations, see <a href="https://docs.aws.amazon.com/vpc/latest/privatelink/resource-configuration.html">Types of resource configurations</a> in the <i>Amazon Web Services PrivateLink User Guide</i>.</p>
+     *          <p>This request fails if a VPC endpoint owned by a different Amazon Web Services account
+     *          already exists on a resource gateway that is enabled for <code>ResourceGatewayCharges</code>
+     *          payer responsibility.</p>
      * @public
      */
     ResourceConfigurationArn?: string | undefined;
@@ -6302,6 +6710,7 @@ export interface VpcEndpoint {
     VpcEndpointId?: string | undefined;
     /**
      * <p>The type of endpoint.</p>
+     *          <p>For more information about the types of VPC endpoints, see <a href="https://docs.aws.amazon.com/vpc/latest/privatelink/concepts.html#concepts-vpc-endpoints">VPC endpoints</a> in the <i>Amazon Web Services PrivateLink User Guide</i>.</p>
      * @public
      */
     VpcEndpointType?: VpcEndpointType | undefined;
@@ -6331,12 +6740,12 @@ export interface VpcEndpoint {
      */
     RouteTableIds?: string[] | undefined;
     /**
-     * <p>(Interface endpoint) The subnets for the endpoint.</p>
+     * <p>(Interface, Gateway Load Balancer endpoints, Resource, ServiceNetwork, and Tunnel endpoints only) The subnets for the endpoint.</p>
      * @public
      */
     SubnetIds?: string[] | undefined;
     /**
-     * <p>(Interface endpoint) Information about the security groups that are associated with
+     * <p>(Interface, Resource, ServiceNetwork, and Tunnel endpoints only) Information about the security groups that are associated with
      *             the network interface.</p>
      * @public
      */
@@ -6362,7 +6771,7 @@ export interface VpcEndpoint {
      */
     RequesterManaged?: boolean | undefined;
     /**
-     * <p>(Interface endpoint) The network interfaces for the endpoint.</p>
+     * <p>(Interface, Gateway Load Balancer endpoints, Resource, ServiceNetwork, and Tunnel endpoints only) The network interfaces for the endpoint.</p>
      * @public
      */
     NetworkInterfaceIds?: string[] | undefined;
@@ -8106,6 +8515,31 @@ export interface DeleteClientVpnEndpointResult {
      */
     Status?: ClientVpnEndpointStatus | undefined;
 }
+/**
+ * @public
+ */
+export interface DeleteClientVpnEndpointAuthorizationPolicyRequest {
+    /**
+     * <p>The ID of the Client VPN endpoint.</p>
+     * @public
+     */
+    ClientVpnEndpointId: string | undefined;
+    /**
+     * <p>Checks whether you have the required permissions for the action, without actually making the request, and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is <code>UnauthorizedOperation</code>.</p>
+     * @public
+     */
+    DryRun?: boolean | undefined;
+}
+/**
+ * @public
+ */
+export interface DeleteClientVpnEndpointAuthorizationPolicyResult {
+    /**
+     * <p>The current state of the authorization policy.</p>
+     * @public
+     */
+    Status?: ClientVpnAuthorizationPolicyStatus | undefined;
+}
 /**
  * @public
  */
@@ -8931,213 +9365,3 @@ export interface DeleteLaunchTemplateResult {
      */
     LaunchTemplate?: LaunchTemplate | undefined;
 }
-/**
- * @public
- */
-export interface DeleteLaunchTemplateVersionsRequest {
-    /**
-     * <p>Checks whether you have the required permissions for the action, without actually
-     *             making the request, and provides an error response. If you have the required
-     *             permissions, the error response is <code>DryRunOperation</code>. Otherwise, it is
-     *                 <code>UnauthorizedOperation</code>.</p>
-     * @public
-     */
-    DryRun?: boolean | undefined;
-    /**
-     * <p>The ID of the launch template.</p>
-     *          <p>You must specify either the launch template ID or the launch template name, but not
-     *             both.</p>
-     * @public
-     */
-    LaunchTemplateId?: string | undefined;
-    /**
-     * <p>The name of the launch template.</p>
-     *          <p>You must specify either the launch template ID or the launch template name, but not
-     *             both.</p>
-     * @public
-     */
-    LaunchTemplateName?: string | undefined;
-    /**
-     * <p>The version numbers of one or more launch template versions to delete. You can specify
-     *             up to 200 launch template version numbers.</p>
-     * @public
-     */
-    Versions: string[] | undefined;
-}
-/**
- * <p>Describes a launch template version that was successfully deleted.</p>
- * @public
- */
-export interface DeleteLaunchTemplateVersionsResponseSuccessItem {
-    /**
-     * <p>The ID of the launch template.</p>
-     * @public
-     */
-    LaunchTemplateId?: string | undefined;
-    /**
-     * <p>The name of the launch template.</p>
-     * @public
-     */
-    LaunchTemplateName?: string | undefined;
-    /**
-     * <p>The version number of the launch template.</p>
-     * @public
-     */
-    VersionNumber?: number | undefined;
-}
-/**
- * <p>Describes the error that's returned when you cannot delete a launch template
- *             version.</p>
- * @public
- */
-export interface ResponseError {
-    /**
-     * <p>The error code.</p>
-     * @public
-     */
-    Code?: LaunchTemplateErrorCode | undefined;
-    /**
-     * <p>The error message, if applicable.</p>
-     * @public
-     */
-    Message?: string | undefined;
-}
-/**
- * <p>Describes a launch template version that could not be deleted.</p>
- * @public
- */
-export interface DeleteLaunchTemplateVersionsResponseErrorItem {
-    /**
-     * <p>The ID of the launch template.</p>
-     * @public
-     */
-    LaunchTemplateId?: string | undefined;
-    /**
-     * <p>The name of the launch template.</p>
-     * @public
-     */
-    LaunchTemplateName?: string | undefined;
-    /**
-     * <p>The version number of the launch template.</p>
-     * @public
-     */
-    VersionNumber?: number | undefined;
-    /**
-     * <p>Information about the error.</p>
-     * @public
-     */
-    ResponseError?: ResponseError | undefined;
-}
-/**
- * @public
- */
-export interface DeleteLaunchTemplateVersionsResult {
-    /**
-     * <p>Information about the launch template versions that were successfully deleted.</p>
-     * @public
-     */
-    SuccessfullyDeletedLaunchTemplateVersions?: DeleteLaunchTemplateVersionsResponseSuccessItem[] | undefined;
-    /**
-     * <p>Information about the launch template versions that could not be deleted.</p>
-     * @public
-     */
-    UnsuccessfullyDeletedLaunchTemplateVersions?: DeleteLaunchTemplateVersionsResponseErrorItem[] | undefined;
-}
-/**
- * @public
- */
-export interface DeleteLocalGatewayRouteRequest {
-    /**
-     * <p>The CIDR range for the route. This must match the CIDR for the route exactly.</p>
-     * @public
-     */
-    DestinationCidrBlock?: string | undefined;
-    /**
-     * <p>The ID of the local gateway route table.</p>
-     * @public
-     */
-    LocalGatewayRouteTableId: string | undefined;
-    /**
-     * <p>Checks whether you have the required permissions for the action, without actually making the request,
-     *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-     *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
-     * @public
-     */
-    DryRun?: boolean | undefined;
-    /**
-     * <p>
-     *          Use a prefix list in place of <code>DestinationCidrBlock</code>. You cannot use
-     *          <code>DestinationPrefixListId</code> and <code>DestinationCidrBlock</code> in the same request.
-     *       </p>
-     * @public
-     */
-    DestinationPrefixListId?: string | undefined;
-}
-/**
- * @public
- */
-export interface DeleteLocalGatewayRouteResult {
-    /**
-     * <p>Information about the route.</p>
-     * @public
-     */
-    Route?: LocalGatewayRoute | undefined;
-}
-/**
- * @public
- */
-export interface DeleteLocalGatewayRouteTableRequest {
-    /**
-     * <p>
-     *       The ID of the local gateway route table.
-     *       </p>
-     * @public
-     */
-    LocalGatewayRouteTableId: string | undefined;
-    /**
-     * <p>Checks whether you have the required permissions for the action, without actually making the request,
-     *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-     *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
-     * @public
-     */
-    DryRun?: boolean | undefined;
-}
-/**
- * @public
- */
-export interface DeleteLocalGatewayRouteTableResult {
-    /**
-     * <p>Information about the local gateway route table.</p>
-     * @public
-     */
-    LocalGatewayRouteTable?: LocalGatewayRouteTable | undefined;
-}
-/**
- * @public
- */
-export interface DeleteLocalGatewayRouteTableVirtualInterfaceGroupAssociationRequest {
-    /**
-     * <p>
-     *          The ID of the local gateway route table virtual interface group association.
-     *       </p>
-     * @public
-     */
-    LocalGatewayRouteTableVirtualInterfaceGroupAssociationId: string | undefined;
-    /**
-     * <p>Checks whether you have the required permissions for the action, without actually making the request,
-     *    and provides an error response. If you have the required permissions, the error response is <code>DryRunOperation</code>.
-     *    Otherwise, it is <code>UnauthorizedOperation</code>.</p>
-     * @public
-     */
-    DryRun?: boolean | undefined;
-}
-/**
- * @public
- */
-export interface DeleteLocalGatewayRouteTableVirtualInterfaceGroupAssociationResult {
-    /**
-     * <p>Information about the association.</p>
-     * @public
-     */
-    LocalGatewayRouteTableVirtualInterfaceGroupAssociation?: LocalGatewayRouteTableVirtualInterfaceGroupAssociation | undefined;
-}