@intentius/chant-lexicon-aws 0.0.22 → 0.1.0

package/dist/types/index.d.ts

@@ -176,6 +176,52 @@ export declare class AccessPointPolicy {
   }, attributes?: CFResourceAttributes);
 }
 
+export declare class AccessSource {
+  constructor(props: {
+    Cidr: string;
+    DnsViewId: string;
+    Protocol: AccessSource_DnsProtocol;
+    AccessSourceId?: string;
+    Arn?: string;
+    ClientToken?: string;
+    CreatedAt?: string;
+    IpAddressType?: AccessSource_IpAddressType;
+    Name?: string;
+    Status?: AccessSource_CRResourceStatus;
+    Tags?: AccessSource_Tag[];
+    UpdatedAt?: string;
+  }, attributes?: CFResourceAttributes);
+  readonly AccessSourceId: string;
+  readonly Arn: string;
+  readonly CreatedAt: string;
+  readonly Status: AccessSource_CRResourceStatus;
+  readonly UpdatedAt: string;
+}
+
+export declare class AccessToken {
+  constructor(props: {
+    DnsViewId: string;
+    AccessTokenId?: string;
+    Arn?: string;
+    ClientToken?: string;
+    CreatedAt?: string;
+    ExpiresAt?: string;
+    GlobalResolverId?: string;
+    Name?: string;
+    Status?: AccessToken_TokenStatus;
+    Tags?: AccessToken_Tag[];
+    UpdatedAt?: string;
+    Value?: string;
+  }, attributes?: CFResourceAttributes);
+  readonly AccessTokenId: string;
+  readonly Arn: string;
+  readonly CreatedAt: string;
+  readonly GlobalResolverId: string;
+  readonly Status: AccessToken_TokenStatus;
+  readonly UpdatedAt: string;
+  readonly Value: string;
+}
+
 export declare class AccountAlias {
   constructor(props: {
     /** An account alias associated with a customer's account. */
@@ -197,6 +243,20 @@ export declare class AccountAuditConfiguration {
   }, attributes?: CFResourceAttributes);
 }
 
+export declare class AccountCustomization {
+  constructor(props: {
+    /** The color theme assigned to the account for visual identification in the AWS Console. */
+    AccountColor?: "darkBlue" | "green" | "lightBlue" | "none" | "orange" | "pink" | "purple" | "red" | "teal" | "yellow";
+    /** The AWS account ID that this customization belongs to. This is automatically determined from the caller's identity. */
+    AccountId?: string;
+    /** A list of AWS region identifiers visible to the account in the AWS Console. */
+    VisibleRegions?: string[];
+    /** A list of AWS service identifiers visible to the account in the AWS Console. */
+    VisibleServices?: string[];
+  }, attributes?: CFResourceAttributes);
+  readonly AccountId: string;
+}
+
 export declare class AccountPolicy {
   constructor(props: {
     /** The body of the policy document you want to use for this topic.
@@ -3120,6 +3180,7 @@ export declare class BedrockAgentCoreGateway {
     GatewayUrl?: string;
     InterceptorConfigurations?: BedrockAgentCoreGateway_GatewayInterceptorConfiguration[];
     KmsKeyArn?: string;
+    PolicyEngineConfiguration?: BedrockAgentCoreGateway_GatewayPolicyEngineConfiguration;
     ProtocolConfiguration?: any;
     Status?: BedrockAgentCoreGateway_GatewayStatus;
     StatusReasons?: string[];
@@ -3676,6 +3737,8 @@ export declare class Bucket {
     /** A name for the bucket. If you don't specify a name, AWS CloudFormation generates a unique ID and uses that ID for the bucket name. The bucket name must contain only lowercase letters, numbers, periods (.), and dashes (-) and must follow [Amazon S3 bucket restrictions and limitations](https://docs.aws.amazon.com/AmazonS3/latest/dev/BucketRestrictions.html). For more information, see [Rules for naming Amazon S3 buckets](https://docs.aws.amazon.com/AmazonS3/latest/userguide/bucketnamingrules.html) in the *Amazon S3 User Guide*. 
   If you specify a name, you can't perform updates that require replacement of this resource. You can perform updates that require no or some interruption. If you need to replace the resource, specify a new name. */
     BucketName?: string;
+    BucketNamePrefix?: string;
+    BucketNamespace?: "account-regional" | "global";
     /** Describes the cross-origin access configuration for objects in an Amazon S3 bucket. For more information, see [Enabling Cross-Origin Resource Sharing](https://docs.aws.amazon.com/AmazonS3/latest/dev/cors.html) in the *Amazon S3 User Guide*. */
     CorsConfiguration?: Bucket_CorsConfiguration;
     DomainName?: string;
@@ -4091,6 +4154,52 @@ export declare class CassandraTable {
   }, attributes?: CFResourceAttributes);
 }
 
+export declare class Catalog {
+  constructor(props: {
+    /** The name of the catalog to create. */
+    Name: string;
+    /** Allows third-party engines to access data in Amazon S3 locations that are registered with Lake Formation. */
+    AllowFullTableExternalDataAccess?: "False" | "True";
+    /** The ID of the catalog. */
+    CatalogId?: string;
+    CatalogProperties?: Catalog_CatalogProperties;
+    /** An array of PrincipalPermissions objects for default database permissions. */
+    CreateDatabaseDefaultPermissions?: Catalog_PrincipalPermissions[];
+    /** An array of PrincipalPermissions objects for default table permissions. */
+    CreateTableDefaultPermissions?: Catalog_PrincipalPermissions[];
+    /** The time at which the catalog was created. */
+    CreateTime?: number;
+    /** A description of the catalog. */
+    Description?: string;
+    FederatedCatalog?: Catalog_FederatedCatalog;
+    /** Specifies whether to overwrite child resource permissions with the default permissions. */
+    OverwriteChildResourcePermissionsWithDefault?: "Accept" | "Deny";
+    /** A map of key-value pairs that define parameters and properties of the catalog. */
+    Parameters?: Record<string, unknown>;
+    /** The Amazon Resource Name (ARN) of the catalog. */
+    ResourceArn?: string;
+    /** An array of key-value pairs to apply to this resource. */
+    Tags?: Catalog_Tag[];
+    TargetRedshiftCatalog?: Catalog_TargetRedshiftCatalog;
+    /** The time at which the catalog was last updated. */
+    UpdateTime?: number;
+  }, attributes?: CFResourceAttributes);
+  readonly CatalogId: string;
+  readonly CatalogProperties_CustomProperties: string;
+  readonly CatalogProperties_DataLakeAccessProperties_ManagedWorkgroupName: string;
+  readonly CatalogProperties_DataLakeAccessProperties_ManagedWorkgroupStatus: string;
+  readonly CatalogProperties_DataLakeAccessProperties_RedshiftDatabaseName: string;
+  readonly CreateDatabaseDefaultPermissions_Item_Permissions: string;
+  readonly CreateDatabaseDefaultPermissions_Item_Principal: string;
+  readonly CreateDatabaseDefaultPermissions_Item_Principal_DataLakePrincipalIdentifier: string;
+  readonly CreateTableDefaultPermissions_Item_Permissions: string;
+  readonly CreateTableDefaultPermissions_Item_Principal: string;
+  readonly CreateTableDefaultPermissions_Item_Principal_DataLakePrincipalIdentifier: string;
+  readonly CreateTime: number;
+  readonly ResourceArn: string;
+  readonly UpdateTime: number;
+}
+
 export declare class Cell {
   constructor(props: {
     /** The Amazon Resource Name (ARN) of the cell. */
@@ -4499,6 +4608,8 @@ export declare class CloudAutonomousVmCluster {
     ExadataStorageInTBsLowestScaledValue?: number;
     /** The hostname for the Autonomous VM cluster. */
     Hostname?: string;
+    /** The AWS Identity and Access Management (IAM) service roles associated with the Autonomous VM cluster. */
+    IamRoles?: CloudAutonomousVmCluster_IamRole[];
     /** Indicates whether mutual TLS (mTLS) authentication is enabled for the Autonomous VM cluster. */
     IsMtlsEnabledVmCluster?: boolean;
     /** The Oracle license model that applies to the Autonomous VM cluster. Valid values are LICENSE_INCLUDED or BRING_YOUR_OWN_LICENSE. */
@@ -4561,6 +4672,7 @@ export declare class CloudAutonomousVmCluster {
   readonly Domain: string;
   readonly ExadataStorageInTBsLowestScaledValue: number;
   readonly Hostname: string;
+  readonly IamRoles_Item_Status: string;
   readonly MaxAcdsLowestScaledValue: number;
   readonly MemorySizeInGBs: number;
   readonly NodeCount: number;
@@ -4815,6 +4927,8 @@ export declare class CloudVmCluster {
     GiVersion?: string;
     /** The host name for the VM cluster. */
     Hostname?: string;
+    /** The AWS Identity and Access Management (IAM) service roles associated with the VM cluster. */
+    IamRoles?: CloudVmCluster_IamRole[];
     /** Indicates whether database backups to local Exadata storage is enabled for the VM cluster. */
     IsLocalBackupEnabled?: boolean;
     /** Indicates whether the VM cluster is configured with a sparse disk group. */
@@ -4875,6 +4989,7 @@ export declare class CloudVmCluster {
   readonly DbNodes_Item_VnicId: string;
   readonly DiskRedundancy: string;
   readonly Domain: string;
+  readonly IamRoles_Item_Status: string;
   readonly ListenerPort: number;
   readonly NodeCount: number;
   readonly Ocid: string;
@@ -5821,6 +5936,37 @@ Constraint: If both solution stack name and source configuration are specified,
   readonly TemplateName: string;
 }
 
+export declare class ConfiguredModelAlgorithm {
+  constructor(props: {
+    Name: string;
+    RoleArn: string;
+    ConfiguredModelAlgorithmArn?: string;
+    Description?: string;
+    InferenceContainerConfig?: ConfiguredModelAlgorithm_InferenceContainerConfig;
+    KmsKeyArn?: string;
+    /** An arbitrary set of tags (key-value pairs) for this cleanrooms-ml configured model algorithm. */
+    Tags?: ConfiguredModelAlgorithm_Tag[];
+    TrainingContainerConfig?: ConfiguredModelAlgorithm_ContainerConfig;
+  }, attributes?: CFResourceAttributes);
+  readonly ConfiguredModelAlgorithmArn: string;
+}
+
+export declare class ConfiguredModelAlgorithmAssociation {
+  constructor(props: {
+    ConfiguredModelAlgorithmArn: string;
+    MembershipIdentifier: string;
+    Name: string;
+    CollaborationIdentifier?: string;
+    ConfiguredModelAlgorithmAssociationArn?: string;
+    Description?: string;
+    PrivacyConfiguration?: ConfiguredModelAlgorithmAssociation_PrivacyConfiguration;
+    /** An arbitrary set of tags (key-value pairs) for this cleanrooms-ml configured model algorithm association. */
+    Tags?: ConfiguredModelAlgorithmAssociation_Tag[];
+  }, attributes?: CFResourceAttributes);
+  readonly CollaborationIdentifier: string;
+  readonly ConfiguredModelAlgorithmAssociationArn: string;
+}
+
 export declare class ConfiguredTable {
   constructor(props: {
     AllowedColumns: string[];
@@ -7592,17 +7738,17 @@ export declare class DataLake {
 
 export declare class DataLakeSettings {
   constructor(props: {
-    Admins?: Record<string, unknown>;
+    Admins?: DataLakeSettings_DataLakePrincipal[];
     AllowExternalDataFiltering?: boolean;
     AllowFullTableExternalDataAccess?: boolean;
     AuthorizedSessionTagValueList?: string[];
-    CreateDatabaseDefaultPermissions?: Record<string, unknown>;
-    CreateTableDefaultPermissions?: Record<string, unknown>;
-    ExternalDataFilteringAllowList?: Record<string, unknown>;
+    CreateDatabaseDefaultPermissions?: DataLakeSettings_PrincipalPermissions[];
+    CreateTableDefaultPermissions?: DataLakeSettings_PrincipalPermissions[];
+    ExternalDataFilteringAllowList?: DataLakeSettings_DataLakePrincipal[];
     Id?: string;
     MutationType?: string;
     Parameters?: Record<string, unknown>;
-    ReadOnlyAdmins?: Record<string, unknown>;
+    ReadOnlyAdmins?: DataLakeSettings_DataLakePrincipal[];
     TrustedResourceOwners?: string[];
   }, attributes?: CFResourceAttributes);
   readonly Id: string;
@@ -10269,7 +10415,7 @@ export declare class DLMLifecyclePolicy {
     Arn?: string;
     CopyTags?: boolean;
     CreateInterval?: number;
-    CrossRegionCopyTargets?: Record<string, unknown>;
+    CrossRegionCopyTargets?: DLMLifecyclePolicy_CrossRegionCopyTarget[];
     DefaultPolicy?: string;
     Description?: string;
     Exclusions?: DLMLifecyclePolicy_Exclusions;
@@ -10387,6 +10533,29 @@ export declare class DNSSEC {
   }, attributes?: CFResourceAttributes);
 }
 
+export declare class DnsView {
+  constructor(props: {
+    GlobalResolverId: string;
+    Name: string;
+    Arn?: string;
+    ClientToken?: string;
+    CreatedAt?: string;
+    Description?: string;
+    DnssecValidation?: DnsView_DnsSecValidationType;
+    DnsViewId?: string;
+    EdnsClientSubnet?: DnsView_EdnsClientSubnetType;
+    FirewallRulesFailOpen?: DnsView_FirewallRulesFailOpenType;
+    Status?: DnsView_ProfileResourceStatus;
+    Tags?: DnsView_Tag[];
+    UpdatedAt?: string;
+  }, attributes?: CFResourceAttributes);
+  readonly Arn: string;
+  readonly CreatedAt: string;
+  readonly DnsViewId: string;
+  readonly Status: DnsView_ProfileResourceStatus;
+  readonly UpdatedAt: string;
+}
+
 export declare class DocDBDBCluster {
   constructor(props: {
     AvailabilityZones?: string[];
@@ -13043,6 +13212,7 @@ export declare class Farm {
   constructor(props: {
     DisplayName: string;
     Arn?: string;
+    CostScaleFactor?: number;
     Description?: string;
     FarmId?: string;
     KmsKeyArn?: string;
@@ -13097,6 +13267,20 @@ export declare class FeatureGroup {
   readonly FeatureGroupStatus: string;
 }
 
+export declare class Feed {
+  constructor(props: {
+    Name: string;
+    Outputs: Feed_GetOutput[];
+    Arn?: string;
+    DataEndpoints?: string[];
+    Id?: string;
+    Tags?: Record<string, unknown>;
+  }, attributes?: CFResourceAttributes);
+  readonly Arn: string;
+  readonly DataEndpoints: string[];
+  readonly Id: string;
+}
+
 export declare class FHIRDatastore {
   constructor(props: {
     DatastoreTypeVersion: FHIRDatastore_DatastoreTypeVersion;
@@ -13257,45 +13441,6 @@ export declare class Firewall {
   readonly TransitGatewayAttachmentId: string;
 }
 
-export declare class FirewallDomainList {
-  constructor(props: {
-    /** Arn */
-    Arn?: string;
-    /** Rfc3339TimeString */
-    CreationTime?: string;
-    /** The id of the creator request. */
-    CreatorRequestId?: string;
-    /** Count */
-    DomainCount?: number;
-    /** S3 URL to import domains from. */
-    DomainFileUrl?: string;
-    Domains?: any;
-    /** ResourceId */
-    Id?: string;
-    /** ServicePrincipal */
-    ManagedOwnerName?: string;
-    /** Rfc3339TimeString */
-    ModificationTime?: string;
-    /** FirewallDomainListName */
-    Name?: string;
-    /** ResolverFirewallDomainList, possible values are COMPLETE, DELETING, UPDATING, COMPLETE_IMPORT_FAILED, IMPORTING, and INACTIVE_OWNER_ACCOUNT_CLOSED. */
-    Status?: "COMPLETE" | "COMPLETE_IMPORT_FAILED" | "DELETING" | "IMPORTING" | "INACTIVE_OWNER_ACCOUNT_CLOSED" | "UPDATING";
-    /** FirewallDomainListAssociationStatus */
-    StatusMessage?: string;
-    /** Tags */
-    Tags?: FirewallDomainList_Tag[];
-  }, attributes?: CFResourceAttributes);
-  readonly Arn: string;
-  readonly CreationTime: string;
-  readonly CreatorRequestId: string;
-  readonly DomainCount: number;
-  readonly Id: string;
-  readonly ManagedOwnerName: string;
-  readonly ModificationTime: string;
-  readonly Status: "COMPLETE" | "COMPLETE_IMPORT_FAILED" | "DELETING" | "IMPORTING" | "INACTIVE_OWNER_ACCOUNT_CLOSED" | "UPDATING";
-  readonly StatusMessage: string;
-}
-
 export declare class FirewallPolicy {
   constructor(props: {
     FirewallPolicy: FirewallPolicy_FirewallPolicy;
@@ -13309,6 +13454,35 @@ export declare class FirewallPolicy {
   readonly FirewallPolicyId: string;
 }
 
+export declare class FirewallRule {
+  constructor(props: {
+    Action: FirewallRule_FirewallRuleAction;
+    DnsViewId: string;
+    Name: string;
+    BlockOverrideDnsType?: FirewallRule_BlockOverrideDnsQueryType;
+    BlockOverrideDomain?: string;
+    BlockOverrideTtl?: number;
+    BlockResponse?: FirewallRule_FirewallBlockResponse;
+    ClientToken?: string;
+    ConfidenceThreshold?: FirewallRule_ConfidenceThreshold;
+    CreatedAt?: string;
+    Description?: string;
+    DnsAdvancedProtection?: FirewallRule_DnsAdvancedProtection;
+    FirewallDomainListId?: string;
+    FirewallRuleId?: string;
+    Priority?: number;
+    QType?: string;
+    QueryType?: string;
+    Status?: FirewallRule_CRResourceStatus;
+    UpdatedAt?: string;
+  }, attributes?: CFResourceAttributes);
+  readonly CreatedAt: string;
+  readonly FirewallRuleId: string;
+  readonly QueryType: string;
+  readonly Status: FirewallRule_CRResourceStatus;
+  readonly UpdatedAt: string;
+}
+
 export declare class FirewallRuleGroup {
   constructor(props: {
     /** Arn */
@@ -13476,6 +13650,8 @@ export declare class FlowEntitlement {
     EntitlementArn?: string;
     /**  An indication of whether the entitlement is enabled. */
     EntitlementStatus?: "DISABLED" | "ENABLED";
+    /** Key-value pairs that can be used to tag and organize this flow entitlement. */
+    Tags?: FlowEntitlement_Tag[];
   }, attributes?: CFResourceAttributes);
   readonly EntitlementArn: string;
 }
@@ -13542,7 +13718,7 @@ export declare class FlowOutput {
     /** The port to use when content is distributed to this output. */
     Port?: number;
     /** The protocol that is used by the source or output. */
-    Protocol?: "cdi" | "fujitsu-qos" | "ndi-speed-hq" | "rist" | "rtp" | "rtp-fec" | "srt-caller" | "srt-listener" | "st2110-jpegxs" | "zixi-pull" | "zixi-push";
+    Protocol?: "cdi" | "ndi-speed-hq" | "rist" | "rtp" | "rtp-fec" | "srt-caller" | "srt-listener" | "st2110-jpegxs" | "zixi-pull" | "zixi-push";
     /** The remote ID for the Zixi-pull stream. */
     RemoteId?: string;
     RouterIntegrationState?: "DISABLED" | "ENABLED";
@@ -13551,6 +13727,8 @@ export declare class FlowOutput {
     SmoothingLatency?: number;
     /** The stream ID that you want to use for this transport. This parameter applies only to Zixi-based streams. */
     StreamId?: string;
+    /** Key-value pairs that can be used to tag and organize this flow output. */
+    Tags?: FlowOutput_Tag[];
     /** The name of the VPC interface attachment to use for this output. */
     VpcInterfaceAttachment?: FlowOutput_VpcInterfaceAttachment;
   }, attributes?: CFResourceAttributes);
@@ -13561,14 +13739,14 @@ export declare class FlowSource {
   constructor(props: {
     /** A description for the source. This value is not used or seen outside of the current AWS Elemental MediaConnect account. */
     Description: string;
+    /** The ARN of the flow. */
+    FlowArn: string;
     /** The name of the source. */
     Name: string;
     /** The type of encryption that is used on the content ingested from this source. */
     Decryption?: FlowSource_Encryption;
     /** The ARN of the entitlement that allows you to subscribe to content that comes from another AWS account. The entitlement is set by the content originator and the ARN is generated as part of the originator's flow. */
     EntitlementArn?: string;
-    /** The ARN of the flow. */
-    FlowArn?: string;
     /** The source configuration for cloud flows receiving a stream from a bridge. */
     GatewayBridgeSource?: FlowSource_GatewayBridgeSource;
     /** The IP address that the flow will be listening on for incoming content. */
@@ -13597,6 +13775,8 @@ export declare class FlowSource {
     SourceListenerPort?: number;
     /** The stream ID that you want to use for this transport. This parameter applies only to Zixi-based streams. */
     StreamId?: string;
+    /** Key-value pairs that can be used to tag and organize this flow source. */
+    Tags?: FlowSource_Tag[];
     /** The name of the VPC Interface this Source is configured with. */
     VpcInterfaceName?: string;
     /** The range of IP addresses that should be allowed to contribute content to your source. These IP addresses should be in the form of a Classless Inter-Domain Routing (CIDR) block; for example, 10.0.0.0/16. */
@@ -14506,6 +14686,34 @@ export declare class GlobalReplicationGroup {
   readonly Status: string;
 }
 
+export declare class GlobalResolver {
+  constructor(props: {
+    Name: string;
+    Regions: string[];
+    Arn?: string;
+    ClientToken?: string;
+    CreatedAt?: string;
+    Description?: string;
+    DnsName?: string;
+    GlobalResolverId?: string;
+    IpAddressType?: GlobalResolver_GlobalResolverIpAddressType;
+    IPv4Addresses?: string[];
+    IPv6Addresses?: string[];
+    ObservabilityRegion?: string;
+    Status?: GlobalResolver_CRResourceStatus;
+    Tags?: GlobalResolver_Tag[];
+    UpdatedAt?: string;
+  }, attributes?: CFResourceAttributes);
+  readonly Arn: string;
+  readonly CreatedAt: string;
+  readonly DnsName: string;
+  readonly GlobalResolverId: string;
+  readonly IPv4Addresses: string[];
+  readonly IPv6Addresses: string[];
+  readonly Status: GlobalResolver_CRResourceStatus;
+  readonly UpdatedAt: string;
+}
+
 export declare class GlobalTable {
   constructor(props: {
     Replicas: GlobalTable_ReplicaSpecification[];
@@ -15218,6 +15426,24 @@ export declare class HostedZone {
   readonly NameServers: string[];
 }
 
+export declare class HostedZoneAssociation {
+  constructor(props: {
+    HostedZoneId: string;
+    Name: string;
+    ResourceArn: string;
+    CreatedAt?: string;
+    HostedZoneAssociationId?: string;
+    HostedZoneName?: string;
+    Status?: HostedZoneAssociation_HostedZoneAssociationStatus;
+    UpdatedAt?: string;
+  }, attributes?: CFResourceAttributes);
+  readonly CreatedAt: string;
+  readonly HostedZoneAssociationId: string;
+  readonly HostedZoneName: string;
+  readonly Status: HostedZoneAssociation_HostedZoneAssociationStatus;
+  readonly UpdatedAt: string;
+}
+
 export declare class HoursOfOperation {
   constructor(props: {
     /** Configuration information for the hours of operation: day, start time, and end time. */
@@ -16259,7 +16485,7 @@ export declare class InsightRule {
     ApplyOnTransformedLogs?: boolean;
     Arn?: string;
     Id?: string;
-    Tags?: Record<string, unknown>;
+    Tags?: InsightRule_Tag[];
   }, attributes?: CFResourceAttributes);
   readonly Arn: string;
   readonly Id: string;
@@ -16404,20 +16630,50 @@ export declare class InstanceAccessControlAttributeConfiguration {
 
 export declare class InstanceConnectEndpoint {
   constructor(props: {
-    /** The subnet id of the instance connect endpoint */
+    /** The ID of the subnet in which the EC2 Instance Connect Endpoint was created. */
     SubnetId: string;
+    /** The Availability Zone of the EC2 Instance Connect Endpoint */
+    AvailabilityZone?: string;
+    /** The ID of the Availability Zone of the EC2 Instance Connect Endpoint */
+    AvailabilityZoneId?: string;
     /** The client token of the instance connect endpoint. */
     ClientToken?: string;
-    /** The id of the instance connect endpoint */
+    /** The date and time that the EC2 Instance Connect Endpoint was created */
+    CreatedAt?: string;
+    /** The ID of the EC2 Instance Connect Endpoint. */
     Id?: string;
-    /** If true, the address of the instance connect endpoint client is preserved when connecting to the end resource */
+    /** The Amazon Resource Name (ARN) of the EC2 Instance Connect Endpoint */
+    InstanceConnectEndpointArn?: string;
+    /** The ID of the elastic network interface that Amazon EC2 automatically created when creating the EC2 Instance Connect Endpoint */
+    NetworkInterfaceIds?: string[];
+    /** The ID of the AWS account that created the EC2 Instance Connect Endpoint */
+    OwnerId?: string;
+    /** Indicates whether your client's IP address is preserved as the source when you connect to a resource. */
     PreserveClientIp?: boolean;
-    /** The security group IDs of the instance connect endpoint. */
+    /** The public DNS names of the endpoint */
+    PublicDnsNames?: InstanceConnectEndpoint_InstanceConnectEndpointPublicDnsNames;
+    /** The security groups associated with the endpoint. */
     SecurityGroupIds?: string[];
-    /** The tags of the instance connect endpoint. */
+    /** The current state of the EC2 Instance Connect Endpoint */
+    State?: "create-complete" | "create-failed" | "create-in-progress" | "delete-complete" | "delete-failed" | "delete-in-progress" | "update-complete" | "update-failed" | "update-in-progress";
+    /** The message for the current state of the EC2 Instance Connect Endpoint. Can include a failure message */
+    StateMessage?: string;
+    /** The tags assigned to the EC2 Instance Connect Endpoint. */
     Tags?: InstanceConnectEndpoint_Tag[];
+    /** The ID of the VPC in which the EC2 Instance Connect Endpoint was created */
+    VpcId?: string;
   }, attributes?: CFResourceAttributes);
+  readonly AvailabilityZone: string;
+  readonly AvailabilityZoneId: string;
+  readonly CreatedAt: string;
   readonly Id: string;
+  readonly InstanceConnectEndpointArn: string;
+  readonly NetworkInterfaceIds: string[];
+  readonly OwnerId: string;
+  readonly PublicDnsNames: InstanceConnectEndpoint_InstanceConnectEndpointPublicDnsNames;
+  readonly State: "create-complete" | "create-failed" | "create-in-progress" | "delete-complete" | "delete-failed" | "delete-in-progress" | "update-complete" | "update-failed" | "update-in-progress";
+  readonly StateMessage: string;
+  readonly VpcId: string;
 }
 
 export declare class InstanceFleetConfig {
@@ -17294,6 +17550,29 @@ export declare class IPAMPrefixListResolver {
   readonly IpamPrefixListResolverId: string;
 }
 
+export declare class IPAMPrefixListResolverTarget {
+  constructor(props: {
+    /** The Id of the IPAM Prefix List Resolver associated with this Target. */
+    IpamPrefixListResolverId: string;
+    /** The Id of the Managed Prefix List. */
+    PrefixListId: string;
+    /** The region that the Managed Prefix List is located in. */
+    PrefixListRegion: string;
+    /** Indicates whether this Target automatically tracks the latest version of the Prefix List Resolver. */
+    TrackLatestVersion: boolean;
+    /** The desired version of the Prefix List Resolver that this Target should synchronize with. */
+    DesiredVersion?: number;
+    /** Id of the IPAM Prefix List Resolver Target. */
+    IpamPrefixListResolverTargetArn?: string;
+    /** Id of the IPAM Prefix List Resolver Target. */
+    IpamPrefixListResolverTargetId?: string;
+    /** An array of key-value pairs to apply to this resource. */
+    Tags?: IPAMPrefixListResolverTarget_Tag[];
+  }, attributes?: CFResourceAttributes);
+  readonly IpamPrefixListResolverTargetArn: string;
+  readonly IpamPrefixListResolverTargetId: string;
+}
+
 export declare class IPAMResourceDiscovery {
   constructor(props: {
     Description?: string;
@@ -19610,7 +19889,7 @@ export declare class LogsScheduledQuery {
     CreationTime?: number;
     Description?: string;
     DestinationConfiguration?: LogsScheduledQuery_DestinationConfiguration;
-    LastExecutionStatus?: "Complete" | "Failed" | "InvalidQuery" | "Timeout";
+    LastExecutionStatus?: "Complete" | "Failed" | "InvalidQuery" | "Pending" | "Timeout";
     LastTriggeredTime?: number;
     LastUpdatedTime?: number;
     LogGroupIdentifiers?: string[];
@@ -19623,7 +19902,7 @@ export declare class LogsScheduledQuery {
     Timezone?: string;
   }, attributes?: CFResourceAttributes);
   readonly CreationTime: number;
-  readonly LastExecutionStatus: "Complete" | "Failed" | "InvalidQuery" | "Timeout";
+  readonly LastExecutionStatus: "Complete" | "Failed" | "InvalidQuery" | "Pending" | "Timeout";
   readonly LastTriggeredTime: number;
   readonly LastUpdatedTime: number;
   readonly ScheduledQueryArn: string;
@@ -20179,24 +20458,28 @@ export declare class MediaConnectFlow {
     AvailabilityZone?: string;
     /** The IP address from which video will be sent to output destinations. */
     EgressIp?: string;
+    /** The encoding configuration to apply to the NDI source content when transcoding it to a transport stream (TS) for downstream distribution. You can choose between several predefined encoding profiles based on common use cases. */
+    EncodingConfig?: MediaConnectFlow_EncodingConfig;
     /** The Amazon Resource Name (ARN), a unique identifier for any AWS resource, of the flow. */
     FlowArn?: string;
     /** The Availability Zone that you want to create the flow in. These options are limited to the Availability Zones within the current AWS.(ReadOnly) */
     FlowAvailabilityZone?: string;
     /** A prefix for the names of the NDI sources that the flow creates.(ReadOnly) */
     FlowNdiMachineName?: string;
-    /** Determines the processing capacity and feature set of the flow. Set this optional parameter to LARGE if you want to enable NDI outputs on the flow. */
-    FlowSize?: "LARGE" | "MEDIUM";
+    /** Determines the processing capacity and feature set of the flow. Set this optional parameter to LARGE if you want to enable NDI sources or outputs on the flow. */
+    FlowSize?: "LARGE" | "LARGE_4X" | "MEDIUM";
     /** The maintenance settings you want to use for the flow. */
     Maintenance?: MediaConnectFlow_Maintenance;
     /** The media streams associated with the flow. You can associate any of these media streams with sources and outputs on the flow. */
     MediaStreams?: MediaConnectFlow_MediaStream[];
-    /** Specifies the configuration settings for NDI outputs. Required when the flow includes NDI outputs. */
+    /** Specifies the configuration settings for NDI sources and outputs. Required when the flow includes NDI sources or outputs. */
     NdiConfig?: MediaConnectFlow_NdiConfig;
     /** The source failover config of the flow. */
     SourceFailoverConfig?: MediaConnectFlow_FailoverConfig;
     /** The source monitoring config of the flow. */
     SourceMonitoringConfig?: MediaConnectFlow_SourceMonitoringConfig;
+    /** Key-value pairs that can be used to tag this flow. */
+    Tags?: MediaConnectFlow_Tag[];
     /** The VPC interfaces that you added to this flow. */
     VpcInterfaces?: MediaConnectFlow_VpcInterface[];
   }, attributes?: CFResourceAttributes);
@@ -20204,11 +20487,9 @@ export declare class MediaConnectFlow {
   readonly FlowArn: string;
   readonly FlowAvailabilityZone: string;
   readonly FlowNdiMachineName: string;
-  readonly MediaStreams_Item_Fmt: string;
   readonly Source_IngestIp: string;
   readonly Source_SourceArn: string;
   readonly Source_SourceIngestPort: string;
-  readonly VpcInterfaces_Item_NetworkInterfaceIds: string;
 }
 
 export declare class MediaConnectGateway {
@@ -22656,6 +22937,8 @@ export declare class OdbNetwork {
     BackupSubnetCidr?: string;
     /** The CIDR range of the client subnet in the ODB network. */
     ClientSubnetCidr?: string;
+    /** The cross-Region Amazon S3 restore sources for the ODB network. */
+    CrossRegionS3RestoreSources?: string[];
     /** The domain name to use for the resources in the ODB network. */
     CustomDomainName?: string;
     /** The DNS prefix to the default DNS domain name. The default DNS domain name is oraclevcn.com. */
@@ -22664,6 +22947,10 @@ export declare class OdbNetwork {
     DeleteAssociatedResources?: boolean;
     /** The user-friendly name of the ODB network. */
     DisplayName?: string;
+    /** The AWS Key Management Service (KMS) access configuration for the ODB network. */
+    KmsAccess?: "DISABLED" | "ENABLED";
+    /** The AWS Key Management Service (KMS) policy document that defines permissions for key usage within the ODB network. */
+    KmsPolicyDocument?: string;
     ManagedServices?: OdbNetwork_ManagedServices;
     /** The unique identifier of the OCI network anchor for the ODB network. */
     OciNetworkAnchorId?: string;
@@ -22679,6 +22966,10 @@ export declare class OdbNetwork {
     S3Access?: "DISABLED" | "ENABLED";
     /** Specifies the endpoint policy for Amazon S3 access from the ODB network. */
     S3PolicyDocument?: string;
+    /** The AWS Security Token Service (STS) access configuration for the ODB network. */
+    StsAccess?: "DISABLED" | "ENABLED";
+    /** The AWS Security Token Service (STS) policy document that defines permissions for token service usage within the ODB network. */
+    StsPolicyDocument?: string;
     /** Tags to assign to the Odb Network. */
     Tags?: OdbNetwork_Tag[];
     /** Specifies the configuration for Zero-ETL access from the ODB network. */
@@ -22712,6 +23003,8 @@ export declare class OdbPeeringConnection {
     PeerNetworkCidrs?: string[];
     /** The unique identifier of the peer network. */
     PeerNetworkId?: string;
+    /** The unique identifier of the VPC route table for which a route to the ODB network is automatically created during peering connection establishment. */
+    PeerNetworkRouteTableIds?: string[];
     /** Tags to assign to the Odb peering connection. */
     Tags?: OdbPeeringConnection_Tag[];
   }, attributes?: CFResourceAttributes);
@@ -22856,6 +23149,7 @@ Contains between 3 and 32 characters
     /** List of tags to be added to the resource */
     Tags?: OpenSearchServerlessCollection_Tag[];
     Type?: OpenSearchServerlessCollection_CollectionType;
+    VectorOptions?: OpenSearchServerlessCollection_VectorOptions;
   }, attributes?: CFResourceAttributes);
   readonly Arn: string;
   readonly CollectionEndpoint: string;
@@ -22926,6 +23220,7 @@ export declare class OpenSearchServiceDomain {
     Arn?: string;
     ClusterConfig?: OpenSearchServiceDomain_ClusterConfig;
     CognitoOptions?: OpenSearchServiceDomain_CognitoOptions;
+    DeploymentStrategyOptions?: OpenSearchServiceDomain_DeploymentStrategyOptions;
     DomainArn?: string;
     DomainEndpoint?: string;
     DomainEndpointOptions?: OpenSearchServiceDomain_DomainEndpointOptions;
@@ -24390,7 +24685,7 @@ export declare class PolicyStore {
     EncryptionSettings?: Record<string, unknown>;
     EncryptionState?: any;
     PolicyStoreId?: string;
-    Schema?: any;
+    Schema?: PolicyStore_SchemaDefinition;
     /** The tags to add to the policy store */
     Tags?: PolicyStore_Tag[];
   }, attributes?: CFResourceAttributes);
@@ -25349,7 +25644,7 @@ export declare class Queue {
     DeduplicationScope?: string;
     /** The time in seconds for which the delivery of all messages in the queue is delayed. You can specify an integer value of ``0`` to ``900`` (15 minutes). The default value is ``0``. */
     DelaySeconds?: number;
-    /** If set to true, creates a FIFO queue. If you don't specify this property, SQS creates a standard queue. For more information, see [Amazon SQS FIFO queues](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-fifo-queues.html) in the *Developer Guide*. */
+    /** If set to true, creates a FIFO queue. If you don't specify this property, SQS creates a standard queue. For more information, see [FIFO queues](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/FIFO-queues.html) in the *Developer Guide*. */
     FifoQueue?: boolean;
     /** For high throughput for FIFO queues, specifies whether the FIFO queue throughput quota applies to the entire queue or per message group. Valid values are ``perQueue`` and ``perMessageGroupId``.
  To enable high throughput for a FIFO queue, set this attribute to ``perMessageGroupId`` *and* set the ``DeduplicationScope`` attribute to ``messageGroup``. If you set these attributes to anything other than these values, normal throughput is in effect and deduplication occurs as specified. For more information, see [High throughput for FIFO queues](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/high-throughput-fifo.html) and [Quotas related to messages](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/quotas-messages.html) in the *Developer Guide*. */
@@ -25357,17 +25652,17 @@ export declare class Queue {
     /** The length of time in seconds for which SQS can reuse a data key to encrypt or decrypt messages before calling KMS again. The value must be an integer between 60 (1 minute) and 86,400 (24 hours). The default is 300 (5 minutes).
   A shorter time period provides better security, but results in more calls to KMS, which might incur charges after Free Tier. For more information, see [Encryption at rest](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-server-side-encryption.html#sqs-how-does-the-data-key-reuse-period-work) in the *Developer Guide*. */
     KmsDataKeyReusePeriodSeconds?: number;
-    /** The ID of an AWS Key Management Service (KMS) for SQS, or a custom KMS. To use the AWS managed KMS for SQS, specify a (default) alias ARN, alias name (for example ``alias/aws/sqs``), key ARN, or key ID. For more information, see the following:
+    /** The ID of an AWS Key Management Service (KMS) for SQS, or a custom KMS. To use the AWS managed KMS for SQS, specify a (default) alias ARN, alias name (e.g. ``alias/aws/sqs``), key ARN, or key ID. For more information, see the following:
   +   [Encryption at rest](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-server-side-encryption.html) in the *Developer Guide* 
   +   [CreateQueue](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/APIReference/API_CreateQueue.html) in the *API Reference* 
   +   [Request Parameters](https://docs.aws.amazon.com/kms/latest/APIReference/API_DescribeKey.html#API_DescribeKey_RequestParameters) in the *Key Management Service API Reference* 
-  +   The Key Management Service (KMS) section of the [Security best practices for Key Management Service](https://docs.aws.amazon.com/kms/latest/developerguide/best-practices.html) in the *Key Management Service Developer Guide* */
+  +   The Key Management Service (KMS) section of the [Best Practices](https://docs.aws.amazon.com/https://d0.awsstatic.com/whitepapers/aws-kms-best-practices.pdf) whitepaper */
     KmsMasterKeyId?: string;
     /** The limit of how many bytes that a message can contain before SQS rejects it. You can specify an integer value from ``1,024`` bytes (1 KiB) to ``262,144`` bytes (256 KiB). The default value is ``262,144`` (256 KiB). */
     MaximumMessageSize?: number;
     /** The number of seconds that SQS retains a message. You can specify an integer value from ``60`` seconds (1 minute) to ``1,209,600`` seconds (14 days). The default value is ``345,600`` seconds (4 days). */
     MessageRetentionPeriod?: number;
-    /** A name for the queue. To create a FIFO queue, the name of your FIFO queue must end with the ``.fifo`` suffix. For more information, see [Amazon SQS FIFO queues](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-fifo-queues.html) in the *Developer Guide*.
+    /** A name for the queue. To create a FIFO queue, the name of your FIFO queue must end with the ``.fifo`` suffix. For more information, see [FIFO queues](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/FIFO-queues.html) in the *Developer Guide*.
  If you don't specify a name, CFN generates a unique physical ID and uses that ID for the queue name. For more information, see [Name type](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-name.html) in the *User Guide*. 
   If you specify a name, you can't perform updates that require replacement of this resource. You can perform updates that require no or some interruption. If you must replace the resource, specify a new name. */
     QueueName?: string;
@@ -25375,16 +25670,16 @@ export declare class Queue {
     /** Specifies the duration, in seconds, that the ReceiveMessage action call waits until a message is in the queue in order to include it in the response, rather than returning an empty response if a message isn't yet available. You can specify an integer from 1 to 20. Short polling is used as the default or when you specify 0 for this property. For more information, see [Consuming messages using long polling](https://docs.aws.amazon.com/AWSSimpleQueueService/latest/SQSDeveloperGuide/sqs-short-and-long-polling.html#sqs-long-polling) in the *Developer Guide*. */
     ReceiveMessageWaitTimeSeconds?: number;
     /** The string that includes the parameters for the permissions for the dead-letter queue redrive permission and which source queues can specify dead-letter queues as a JSON object. The parameters are as follows:
-  +   ``redrivePermission``: The permission type that defines which source queues can specify the current queue as the dead-letter queue. Valid values are:
-  +   ``allowAll``: (Default) Any source queues in this AWS account in the same Region can specify this queue as the dead-letter queue.
-  +   ``denyAll``: No source queues can specify this queue as the dead-letter queue.
-  +   ``byQueue``: Only queues specified by the ``sourceQueueArns`` parameter can specify this queue as the dead-letter queue.
+  +  ``redrivePermission``: The permission type that defines which source queues can specify the current queue as the dead-letter queue. Valid values are:
+  +  ``allowAll``: (Default) Any source queues in this AWS account in the same Region can specify this queue as the dead-letter queue.
+  +  ``denyAll``: No source queues can specify this queue as the dead-letter queue.
+  +  ``byQueue``: Only queues specified by the ``sourceQueueArns`` parameter can specify this queue as the dead-letter queue.
   
-  +   ``sourceQueueArns``: The Amazon Resource Names (ARN)s of the source queues that can specify this queue as the dead-letter queue and redrive messages. You can specify this parameter only when the ``redrivePermission`` parameter is set to ``byQueue``. You can specify up to 10 source queue ARNs. To allow more than 10 source queues to specify dead-letter queues, set the ``redrivePermission`` parameter to ``allowAll``. */
+  +  ``sourceQueueArns``: The Amazon Resource Names (ARN)s of the source queues that can specify this queue as the dead-letter queue and redrive messages. You can specify this parameter only when the ``redrivePermission`` parameter is set to ``byQueue``. You can specify up to 10 source queue ARNs. To allow more than 10 source queues to specify dead-letter queues, set the ``redrivePermission`` parameter to ``allowAll``. */
     RedriveAllowPolicy?: Record<string, unknown>;
     /** The string that includes the parameters for the dead-letter queue functionality of the source queue as a JSON object. The parameters are as follows:
-  +   ``deadLetterTargetArn``: The Amazon Resource Name (ARN) of the dead-letter queue to which SQS moves messages after the value of ``maxReceiveCount`` is exceeded.
-  +   ``maxReceiveCount``: The number of times a message is received by a consumer of the source queue before being moved to the dead-letter queue. When the ``ReceiveCount`` for a message exceeds the ``maxReceiveCount`` for a queue, SQS moves the message to the dead-letter-queue.
+  +  ``deadLetterTargetArn``: The Amazon Resource Name (ARN) of the dead-letter queue to which SQS moves messages after the value of ``maxReceiveCount`` is exceeded.
+  +  ``maxReceiveCount``: The number of times a message is delivered to the source queue before being moved to the dead-letter queue. When the ``ReceiveCount`` for a message exceeds the ``maxReceiveCount`` for a queue, SQS moves the message to the dead-letter-queue.
   
   The dead-letter queue of a FIFO queue must also be a FIFO queue. Similarly, the dead-letter queue of a standard queue must also be a standard queue.
    *JSON* 
@@ -25654,6 +25949,28 @@ export declare class QuickSightTopic {
   readonly Arn: string;
 }
 
+export declare class QuotaShare {
+  constructor(props: {
+    /** The capacity limits for the quota share. */
+    CapacityLimits: QuotaShare_QuotaShareCapacityLimit[];
+    /** The Amazon Resource Name (ARN) or name of the job queue. */
+    JobQueue: string;
+    /** The preemption configuration for the quota share. */
+    PreemptionConfiguration: QuotaShare_QuotaSharePreemptionConfiguration;
+    /** The name of the quota share. */
+    QuotaShareName: string;
+    /** The resource sharing configuration for the quota share. */
+    ResourceSharingConfiguration: QuotaShare_QuotaShareResourceSharingConfiguration;
+    /** The Amazon Resource Name (ARN) of the quota share. */
+    QuotaShareArn?: string;
+    /** The state of the quota share. */
+    State?: "DISABLED" | "ENABLED";
+    /** A key-value pair to associate with a resource. */
+    Tags?: Record<string, unknown>;
+  }, attributes?: CFResourceAttributes);
+  readonly QuotaShareArn: string;
+}
+
 export declare class RAMPermission {
   constructor(props: {
     /** The name of the permission. */
@@ -26079,7 +26396,7 @@ auto - Amazon Redshift determines whether to use AQUA.
     ClusterVersion?: string;
     /** A boolean indicating whether to enable the deferred maintenance window. */
     DeferMaintenance?: boolean;
-    /** An integer indicating the duration of the maintenance window in days. If you specify a duration, you can't specify an end time. The duration must be 45 days or less. */
+    /** An integer indicating the duration of the maintenance window in days. If you specify a duration, you can't specify an end time. The duration must be 60 days or less. */
     DeferMaintenanceDuration?: number;
     /** A timestamp indicating end time for the deferred maintenance window. If you specify an end time, you can't specify a duration. */
     DeferMaintenanceEndTime?: string;
@@ -26479,23 +26796,6 @@ export declare class RekognitionProject {
   readonly Arn: string;
 }
 
-export declare class RemediationConfiguration {
-  constructor(props: {
-    ConfigRuleName: string;
-    TargetId: string;
-    TargetType: string;
-    Automatic?: boolean;
-    ExecutionControls?: RemediationConfiguration_ExecutionControls;
-    Id?: string;
-    MaximumAutomaticAttempts?: number;
-    Parameters?: Record<string, unknown>;
-    ResourceType?: string;
-    RetryAttemptSeconds?: number;
-    TargetVersion?: string;
-  }, attributes?: CFResourceAttributes);
-  readonly Id: string;
-}
-
 export declare class ReplicaKey {
   constructor(props: {
     /** The key policy that authorizes use of the AWS KMS key. The key policy must observe the following rules. */
@@ -26555,67 +26855,106 @@ export declare class ReplicationConfiguration {
 
 export declare class ReplicationGroup {
   constructor(props: {
+    /** A user-created description for the replication group. */
     ReplicationGroupDescription: string;
+    /** A flag that enables encryption at rest when set to true.AtRestEncryptionEnabled after the replication group is created. To enable encryption at rest on a replication group you must set AtRestEncryptionEnabled to true when you create the replication group. */
     AtRestEncryptionEnabled?: boolean;
+    /** Reserved parameter. The password used to access a password protected server.AuthToken can be specified only on replication groups where TransitEncryptionEnabled is true. For more information. */
     AuthToken?: string;
+    /** Specifies whether a read-only replica is automatically promoted to read/write primary if the existing primary fails. AutomaticFailoverEnabled must be enabled for Redis (cluster mode enabled) replication groups. */
     AutomaticFailoverEnabled?: boolean;
+    /** This parameter is currently disabled. */
     AutoMinorVersionUpgrade?: boolean;
+    /** The compute and memory capacity of the nodes in the node group (shard). */
     CacheNodeType?: string;
+    /** The name of the parameter group to associate with this replication group. If this argument is omitted, the default cache parameter group for the specified engine is used. */
     CacheParameterGroupName?: string;
+    /** A list of cache security group names to associate with this replication group. */
     CacheSecurityGroupNames?: string[];
+    /** The name of the cache subnet group to be used for the replication group. */
     CacheSubnetGroupName?: string;
+    /** Enabled or Disabled. To modify cluster mode from Disabled to Enabled, you must first set the cluster mode to Compatible. Compatible mode allows your Redis OSS clients to connect using both cluster mode enabled and cluster mode disabled. After you migrate all Redis OSS clients to use cluster mode enabled, you can then complete cluster mode configuration and set the cluster mode to Enabled. For more information, see Modify cluster mode. */
     ClusterMode?: string;
-    ConfigurationEndPointAddress?: string;
-    ConfigurationEndPointPort?: string;
+    /** The configuration details of the replication group. */
+    ConfigurationEndPoint?: ReplicationGroup_Endpoint;
+    /** Enables data tiering. Data tiering is only supported for replication groups using the r6gd node type. This parameter must be set to true when using r6gd nodes. */
     DataTieringEnabled?: boolean;
+    /** The name of the cache engine to be used for the clusters in this replication group. */
     Engine?: string;
+    /** The version number of the cache engine to be used for the clusters in this replication group. To view the supported cache engine versions, use the DescribeCacheEngineVersions operation. */
     EngineVersion?: string;
+    /** The name of the Global datastore */
     GlobalReplicationGroupId?: string;
+    /** The network type you choose when creating a replication group, either ipv4 | ipv6. IPv6 is supported for workloads using Redis OSS engine version 6.2 onward or Memcached engine version 1.6.6 on all instances built on the Nitro system. */
     IpDiscovery?: string;
+    /** The ID of the KMS key used to encrypt the disk on the cluster. */
     KmsKeyId?: string;
+    /** Specifies the destination, format and type of the logs. */
     LogDeliveryConfigurations?: ReplicationGroup_LogDeliveryConfigurationRequest[];
+    /** A flag indicating if you have Multi-AZ enabled to enhance fault tolerance. For more information, see Minimizing Downtime: Multi-AZ. */
     MultiAZEnabled?: boolean;
+    /** Must be either ipv4 | ipv6 | dual_stack. IPv6 is supported for workloads using Redis OSS engine version 6.2 onward or Memcached engine version 1.6.6 on all instances built on the Nitro system */
     NetworkType?: string;
+    /** NodeGroupConfiguration is a property of the AWS::ElastiCache::ReplicationGroup resource that configures an Amazon ElastiCache (ElastiCache) Redis cluster node group. */
     NodeGroupConfiguration?: ReplicationGroup_NodeGroupConfiguration[];
+    /** The Amazon Resource Name (ARN) of the Amazon Simple Notification Service (SNS) topic to which notifications are sent. */
     NotificationTopicArn?: string;
+    /** The number of clusters this replication group initially has.This parameter is not used if there is more than one node group (shard). You should use ReplicasPerNodeGroup instead. */
     NumCacheClusters?: number;
+    /** An optional parameter that specifies the number of node groups (shards) for this Redis (cluster mode enabled) replication group. For Redis (cluster mode disabled) either omit this parameter or set it to 1. */
     NumNodeGroups?: number;
+    /** The port number on which each member of the replication group accepts connections. */
     Port?: number;
+    /** A list of EC2 Availability Zones in which the replication group's clusters are created. The order of the Availability Zones in the list is the order in which clusters are allocated. The primary cluster is created in the first AZ in the list. This parameter is not used if there is more than one node group (shard). You should use NodeGroupConfiguration instead. */
     PreferredCacheClusterAZs?: string[];
+    /** Specifies the weekly time range during which maintenance on the cluster is performed. It is specified as a range in the format ddd:hh24:mi-ddd:hh24:mi (24H Clock UTC). The minimum maintenance window is a 60 minute period. */
     PreferredMaintenanceWindow?: string;
+    /** The identifier of the cluster that serves as the primary for this replication group. This cluster must already exist and have a status of available. */
     PrimaryClusterId?: string;
-    PrimaryEndPointAddress?: string;
-    PrimaryEndPointPort?: string;
-    ReadEndPointAddresses?: string;
-    ReadEndPointAddressesList?: string[];
-    ReadEndPointPorts?: string;
-    ReadEndPointPortsList?: string[];
-    ReaderEndPointAddress?: string;
-    ReaderEndPointPort?: string;
+    /** The primary endpoint configuration */
+    PrimaryEndPoint?: ReplicationGroup_Endpoint;
+    ReadEndPoint?: Record<string, unknown>;
+    /** The endpoint of the reader node in the replication group. */
+    ReaderEndPoint?: ReplicationGroup_Endpoint;
+    /** An optional parameter that specifies the number of replica nodes in each node group (shard). Valid values are 0 to 5. */
     ReplicasPerNodeGroup?: number;
+    /** The replication group identifier. This parameter is stored as a lowercase string. */
     ReplicationGroupId?: string;
+    /** One or more Amazon VPC security groups associated with this replication group. */
     SecurityGroupIds?: string[];
+    /** A list of Amazon Resource Names (ARN) that uniquely identify the Redis RDB snapshot files stored in Amazon S3. */
     SnapshotArns?: string[];
+    /** The name of a snapshot from which to restore data into the new replication group. The snapshot status changes to restoring while the new replication group is being created. */
     SnapshotName?: string;
+    /** The number of days for which ElastiCache retains automatic snapshots before deleting them. For example, if you set SnapshotRetentionLimit to 5, a snapshot that was taken today is retained for 5 days before being deleted. */
     SnapshotRetentionLimit?: number;
+    /** The cluster ID that is used as the daily snapshot source for the replication group. This parameter cannot be set for Redis (cluster mode enabled) replication groups. */
     SnapshottingClusterId?: string;
+    /** The daily time range (in UTC) during which ElastiCache begins taking a daily snapshot of your node group (shard). */
     SnapshotWindow?: string;
+    /** A list of cost allocation tags to be added to this resource. Tags are comma-separated key,value pairs (e.g. Key=myKey, Value=myKeyValue. You can include multiple tags as shown following: Key=myKey, Value=myKeyValue Key=mySecondKey, Value=mySecondKeyValue. */
     Tags?: ReplicationGroup_Tag[];
+    /** A flag that enables in-transit encryption when set to true. */
     TransitEncryptionEnabled?: boolean;
+    /** A setting that allows you to migrate your clients to use in-transit encryption, with no downtime. When setting TransitEncryptionEnabled to true, you can set your TransitEncryptionMode to preferred in the same request, to allow both encrypted and unencrypted connections at the same time. Once you migrate all your Redis OSS clients to use encrypted connections you can modify the value to required to allow encrypted connections only. Setting TransitEncryptionMode to required is a two-step process that requires you to first set the TransitEncryptionMode to preferred, after that you can set TransitEncryptionMode to required. This process will not trigger the replacement of the replication group. */
     TransitEncryptionMode?: string;
+    /** The ID of user group to associate with the replication group. */
     UserGroupIds?: string[];
   }, attributes?: CFResourceAttributes);
+  readonly ConfigurationEndPoint: ReplicationGroup_Endpoint;
   readonly ConfigurationEndPoint_Address: string;
   readonly ConfigurationEndPoint_Port: string;
+  readonly PrimaryEndPoint: ReplicationGroup_Endpoint;
   readonly PrimaryEndPoint_Address: string;
   readonly PrimaryEndPoint_Port: string;
+  readonly ReadEndPoint: Record<string, unknown>;
   readonly ReadEndPoint_Addresses: string;
-  readonly ReadEndPoint_Addresses_List: string;
+  readonly ReadEndPoint_AddressesList: string;
   readonly ReadEndPoint_Ports: string;
-  readonly ReadEndPoint_Ports_List: string;
+  readonly ReadEndPoint_PortsList: string;
+  readonly ReaderEndPoint: ReplicationGroup_Endpoint;
   readonly ReaderEndPoint_Address: string;
   readonly ReaderEndPoint_Port: string;
-  readonly ReplicationGroupId: string;
 }
 
 export declare class ReplicationInstance {
@@ -27724,6 +28063,33 @@ export declare class RotationSchedule {
   readonly Id: string;
 }
 
+export declare class Route53GlobalResolverFirewallDomainList {
+  constructor(props: {
+    GlobalResolverId: string;
+    Name: string;
+    Arn?: string;
+    ClientToken?: string;
+    CreatedAt?: string;
+    Description?: string;
+    DomainCount?: number;
+    /** S3 URL to import domains from. */
+    DomainFileUrl?: string;
+    Domains?: any;
+    FirewallDomainListId?: string;
+    Status?: Route53GlobalResolverFirewallDomainList_CRResourceStatus;
+    StatusMessage?: string;
+    Tags?: Route53GlobalResolverFirewallDomainList_Tag[];
+    UpdatedAt?: string;
+  }, attributes?: CFResourceAttributes);
+  readonly Arn: string;
+  readonly CreatedAt: string;
+  readonly DomainCount: number;
+  readonly FirewallDomainListId: string;
+  readonly Status: Route53GlobalResolverFirewallDomainList_CRResourceStatus;
+  readonly StatusMessage: string;
+  readonly UpdatedAt: string;
+}
+
 export declare class Route53ProfilesProfile {
   constructor(props: {
     /** The name of the profile. */
@@ -27783,6 +28149,45 @@ AWS: :AutoScaling: :AutoScalingGroup, AWS: :CloudWatch: :Alarm, AWS: :EC2: :Cust
   readonly ResourceSetArn: string;
 }
 
+export declare class Route53ResolverFirewallDomainList {
+  constructor(props: {
+    /** Arn */
+    Arn?: string;
+    /** Rfc3339TimeString */
+    CreationTime?: string;
+    /** The id of the creator request. */
+    CreatorRequestId?: string;
+    /** Count */
+    DomainCount?: number;
+    /** S3 URL to import domains from. */
+    DomainFileUrl?: string;
+    Domains?: any;
+    /** ResourceId */
+    Id?: string;
+    /** ServicePrincipal */
+    ManagedOwnerName?: string;
+    /** Rfc3339TimeString */
+    ModificationTime?: string;
+    /** FirewallDomainListName */
+    Name?: string;
+    /** ResolverFirewallDomainList, possible values are COMPLETE, DELETING, UPDATING, COMPLETE_IMPORT_FAILED, IMPORTING, and INACTIVE_OWNER_ACCOUNT_CLOSED. */
+    Status?: "COMPLETE" | "COMPLETE_IMPORT_FAILED" | "DELETING" | "IMPORTING" | "INACTIVE_OWNER_ACCOUNT_CLOSED" | "UPDATING";
+    /** FirewallDomainListAssociationStatus */
+    StatusMessage?: string;
+    /** Tags */
+    Tags?: Route53ResolverFirewallDomainList_Tag[];
+  }, attributes?: CFResourceAttributes);
+  readonly Arn: string;
+  readonly CreationTime: string;
+  readonly CreatorRequestId: string;
+  readonly DomainCount: number;
+  readonly Id: string;
+  readonly ManagedOwnerName: string;
+  readonly ModificationTime: string;
+  readonly Status: "COMPLETE" | "COMPLETE_IMPORT_FAILED" | "DELETING" | "IMPORTING" | "INACTIVE_OWNER_ACCOUNT_CLOSED" | "UPDATING";
+  readonly StatusMessage: string;
+}
+
 export declare class RouteCalculator {
   constructor(props: {
     CalculatorName: string;
@@ -28991,6 +29396,7 @@ export declare class SchedulingPolicy {
     FairsharePolicy?: SchedulingPolicy_FairsharePolicy;
     /** Name of Scheduling Policy. */
     Name?: string;
+    QuotaSharePolicy?: SchedulingPolicy_QuotaSharePolicy;
     /** A key-value pair to associate with a resource. */
     Tags?: Record<string, unknown>;
   }, attributes?: CFResourceAttributes);
@@ -30790,15 +31196,25 @@ export declare class StackSet {
 
 export declare class StackSetConstraint {
   constructor(props: {
+    /** One or more AWS accounts that will have access to the provisioned product. */
     AccountList: string[];
+    /** AdminRole ARN. */
     AdminRole: string;
+    /** The description of the constraint. */
     Description: string;
+    /** ExecutionRole name. */
     ExecutionRole: string;
+    /** The portfolio identifier. */
     PortfolioId: string;
+    /** The product identifier. */
     ProductId: string;
+    /** One or more AWS Regions where the provisioned product will be available. */
     RegionList: string[];
+    /** Permission to create, update, and delete stack instances. Choose from ALLOWED and NOT_ALLOWED. */
     StackInstanceControl: string;
+    /** The language code. */
     AcceptLanguage?: string;
+    /** Unique identifier for the constraint */
     Id?: string;
   }, attributes?: CFResourceAttributes);
   readonly Id: string;
@@ -31982,6 +32398,14 @@ export declare class TaskTemplate {
   readonly Arn: string;
 }
 
+export declare class TelemetryEnrichment {
+  constructor(props: {
+    Scope?: TelemetryEnrichment_Scope;
+    Status?: TelemetryEnrichment_Status;
+  }, attributes?: CFResourceAttributes);
+  readonly Status: TelemetryEnrichment_Status;
+}
+
 export declare class TelemetryPipelines {
   constructor(props: {
     Configuration: TelemetryPipelines_TelemetryPipelineConfiguration;
@@ -35377,8 +35801,7 @@ export declare class Workgroup {
     Workgroup?: Workgroup_Workgroup;
   }, attributes?: CFResourceAttributes);
   readonly Workgroup_BaseCapacity: string;
-  readonly Workgroup_ConfigParameters_Item_ParameterKey: string;
-  readonly Workgroup_ConfigParameters_Item_ParameterValue: string;
+  readonly Workgroup_ConfigParameters: string;
   readonly Workgroup_CreationDate: string;
   readonly Workgroup_Endpoint_Address: string;
   readonly Workgroup_Endpoint_Port: string;
@@ -36057,6 +36480,20 @@ export declare class AccessScopePathRequest {
   });
 }
 
+export declare class AccessSource_Tag {
+  constructor(props: {
+    Key: string;
+    Value: string;
+  });
+}
+
+export declare class AccessToken_Tag {
+  constructor(props: {
+    Key: string;
+    Value: string;
+  });
+}
+
 export declare class AccountAggregationSource {
   constructor(props: {
     AccountIds: string[];
@@ -47626,6 +48063,7 @@ export declare class AthenaTableReference {
     DatabaseName: string;
     TableName: string;
     WorkGroup: string;
+    CatalogName?: string;
     OutputLocation?: string;
     Region?: ConfiguredTable_CommercialRegion;
   });
@@ -50560,6 +50998,14 @@ export declare class BedrockAgentCoreGateway_GatewayInterceptorConfiguration {
   });
 }
 
+export declare class BedrockAgentCoreGateway_GatewayPolicyEngineConfiguration {
+  constructor(props: {
+    /** The ARN of the policy engine. The policy engine contains Cedar policies that define fine-grained authorization rules specifying who can perform what actions on which resources as agents interact through the gateway. */
+    Arn: string;
+    Mode: BedrockAgentCoreGateway_GatewayPolicyEngineMode;
+  });
+}
+
 export declare class BedrockAgentCoreGateway_InterceptorInputConfiguration {
   constructor(props: {
     PassRequestHeaders: boolean;
@@ -55534,6 +55980,83 @@ export declare class CastColumnTypesOperation {
   });
 }
 
+export declare class Catalog_CatalogProperties {
+  constructor(props: {
+    /** Additional key-value properties for the catalog. */
+    CustomProperties?: Record<string, unknown>;
+    DataLakeAccessProperties?: Catalog_DataLakeAccessProperties;
+  });
+}
+
+export declare class Catalog_DataLakeAccessProperties {
+  constructor(props: {
+    /** Allows third-party engines to access data in Amazon S3 locations that are registered with Lake Formation. */
+    AllowFullTableExternalDataAccess?: "False" | "True";
+    /** Specifies a federated catalog type for the native catalog resource. */
+    CatalogType?: string;
+    /** Turns on or off data lake access for Apache Spark applications that access Amazon Redshift databases in the Data Catalog from any non-Redshift engine. */
+    DataLakeAccess?: boolean;
+    /** A role that will be assumed by Glue for transferring data into/out of the staging bucket during a query. */
+    DataTransferRole?: string;
+    /** An encryption key that will be used for the staging bucket that will be created along with the catalog. */
+    KmsKey?: string;
+    /** The name of the managed workgroup associated with the catalog. */
+    ManagedWorkgroupName?: string;
+    /** The status of the managed workgroup. */
+    ManagedWorkgroupStatus?: string;
+    /** The name of the Redshift database. */
+    RedshiftDatabaseName?: string;
+  });
+}
+
+export declare class Catalog_DataLakePrincipal {
+  constructor(props: {
+    /** An identifier for the Lake Formation principal. */
+    DataLakePrincipalIdentifier?: string;
+  });
+}
+
+export declare class Catalog_FederatedCatalog {
+  constructor(props: {
+    /** The name of the connection to an external data source. */
+    ConnectionName?: string;
+    /** A unique identifier for the federated catalog. */
+    Identifier?: string;
+  });
+}
+
+export declare class Catalog_PrincipalPermissions {
+  constructor(props: {
+    /** The permissions that are granted to the principal. */
+    Permissions?: "ALL" | "ALTER" | "CREATE_DATABASE" | "CREATE_TABLE" | "DATA_LOCATION_ACCESS" | "DELETE" | "DROP" | "INSERT" | "SELECT"[];
+    Principal?: Catalog_DataLakePrincipal;
+  });
+}
+
+export declare class Catalog_Tag {
+  constructor(props: {
+    /** The key name of the tag. */
+    Key: string;
+    /** The value for the tag. */
+    Value: string;
+  });
+}
+
+export declare class Catalog_TargetRedshiftCatalog {
+  constructor(props: {
+    /** The Amazon Resource Name (ARN) of the catalog resource. */
+    CatalogArn: string;
+  });
+}
+
+export declare class CatalogProperties {
+  constructor(props: {
+    /** Additional key-value properties for the catalog. */
+    CustomProperties?: Record<string, unknown>;
+    DataLakeAccessProperties?: Catalog_DataLakeAccessProperties;
+  });
+}
+
 export declare class CatalogTarget {
   constructor(props: {
     /** The name of the connection for an Amazon S3-backed Data Catalog table to be a target of the crawl when using a Catalog connection type paired with a NETWORK Connection type. */
@@ -57180,6 +57703,23 @@ export declare class ClientVpnEndpoint_TagSpecification {
   });
 }
 
+export declare class ClippingConfig {
+  constructor(props: {
+    CallbackMetadata?: string;
+  });
+}
+
+export declare class CloudAutonomousVmCluster_IamRole {
+  constructor(props: {
+    /** The AWS integration configuration settings for the AWS Identity and Access Management (IAM) service role. */
+    AwsIntegration?: string;
+    /** The Amazon Resource Name (ARN) of the AWS Identity and Access Management (IAM) service role. */
+    IamRoleArn?: string;
+    /** The current status of the AWS Identity and Access Management (IAM) service role. */
+    Status?: string;
+  });
+}
+
 export declare class CloudAutonomousVmCluster_MaintenanceWindow {
   constructor(props: {
     /** The days of the week when maintenance can be performed. */
@@ -57433,6 +57973,17 @@ export declare class CloudVmCluster_DbNode {
   });
 }
 
+export declare class CloudVmCluster_IamRole {
+  constructor(props: {
+    /** The AWS integration configuration settings for the AWS Identity and Access Management (IAM) service role. */
+    AwsIntegration?: string;
+    /** The Amazon Resource Name (ARN) of the AWS Identity and Access Management (IAM) service role. */
+    IamRoleArn?: string;
+    /** The current status of the AWS Identity and Access Management (IAM) service role. */
+    Status?: string;
+  });
+}
+
 export declare class CloudVmCluster_Tag {
   constructor(props: {
     /** The key name of the tag. You can specify a value that's 1 to 128 Unicode characters in length and can't be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., :, /, =, +, @, -, and ". */
@@ -60493,6 +61044,127 @@ export declare class ConfigurationTemplate_SourceConfiguration {
   });
 }
 
+export declare class ConfiguredModelAlgorithm_ContainerConfig {
+  constructor(props: {
+    ImageUri: string;
+    Arguments?: string[];
+    Entrypoint?: string[];
+    MetricDefinitions?: ConfiguredModelAlgorithm_MetricDefinition[];
+  });
+}
+
+export declare class ConfiguredModelAlgorithm_InferenceContainerConfig {
+  constructor(props: {
+    ImageUri: string;
+  });
+}
+
+export declare class ConfiguredModelAlgorithm_MetricDefinition {
+  constructor(props: {
+    Name: string;
+    Regex: string;
+  });
+}
+
+export declare class ConfiguredModelAlgorithm_Tag {
+  constructor(props: {
+    Key: string;
+    Value: string;
+  });
+}
+
+export declare class ConfiguredModelAlgorithmAssociation_CustomEntityConfig {
+  constructor(props: {
+    CustomDataIdentifiers: string[];
+  });
+}
+
+export declare class ConfiguredModelAlgorithmAssociation_LogRedactionConfiguration {
+  constructor(props: {
+    EntitiesToRedact: ConfiguredModelAlgorithmAssociation_EntityType[];
+    CustomEntityConfig?: ConfiguredModelAlgorithmAssociation_CustomEntityConfig;
+  });
+}
+
+export declare class ConfiguredModelAlgorithmAssociation_LogsConfigurationPolicy {
+  constructor(props: {
+    AllowedAccountIds: string[];
+    FilterPattern?: string;
+    LogRedactionConfiguration?: ConfiguredModelAlgorithmAssociation_LogRedactionConfiguration;
+    LogType?: ConfiguredModelAlgorithmAssociation_LogType;
+  });
+}
+
+export declare class ConfiguredModelAlgorithmAssociation_MetricsConfigurationPolicy {
+  constructor(props: {
+    NoiseLevel: ConfiguredModelAlgorithmAssociation_NoiseLevelType;
+  });
+}
+
+export declare class ConfiguredModelAlgorithmAssociation_PrivacyConfiguration {
+  constructor(props: {
+    Policies: ConfiguredModelAlgorithmAssociation_PrivacyConfigurationPolicies;
+  });
+}
+
+export declare class ConfiguredModelAlgorithmAssociation_PrivacyConfigurationPolicies {
+  constructor(props: {
+    TrainedModelExports?: ConfiguredModelAlgorithmAssociation_TrainedModelExportsConfigurationPolicy;
+    TrainedModelInferenceJobs?: ConfiguredModelAlgorithmAssociation_TrainedModelInferenceJobsConfigurationPolicy;
+    TrainedModels?: ConfiguredModelAlgorithmAssociation_TrainedModelsConfigurationPolicy;
+  });
+}
+
+export declare class ConfiguredModelAlgorithmAssociation_Tag {
+  constructor(props: {
+    Key: string;
+    Value: string;
+  });
+}
+
+export declare class ConfiguredModelAlgorithmAssociation_TrainedModelArtifactMaxSize {
+  constructor(props: {
+    Unit: ConfiguredModelAlgorithmAssociation_TrainedModelArtifactMaxSizeUnitType;
+    Value: number;
+  });
+}
+
+export declare class ConfiguredModelAlgorithmAssociation_TrainedModelExportsConfigurationPolicy {
+  constructor(props: {
+    FilesToExport: ConfiguredModelAlgorithmAssociation_TrainedModelExportFileType[];
+    MaxSize: ConfiguredModelAlgorithmAssociation_TrainedModelExportsMaxSize;
+  });
+}
+
+export declare class ConfiguredModelAlgorithmAssociation_TrainedModelExportsMaxSize {
+  constructor(props: {
+    Unit: ConfiguredModelAlgorithmAssociation_TrainedModelExportsMaxSizeUnitType;
+    Value: number;
+  });
+}
+
+export declare class ConfiguredModelAlgorithmAssociation_TrainedModelInferenceJobsConfigurationPolicy {
+  constructor(props: {
+    ContainerLogs?: ConfiguredModelAlgorithmAssociation_LogsConfigurationPolicy[];
+    MaxOutputSize?: ConfiguredModelAlgorithmAssociation_TrainedModelInferenceMaxOutputSize;
+  });
+}
+
+export declare class ConfiguredModelAlgorithmAssociation_TrainedModelInferenceMaxOutputSize {
+  constructor(props: {
+    Unit: ConfiguredModelAlgorithmAssociation_TrainedModelInferenceMaxOutputSizeUnitType;
+    Value: number;
+  });
+}
+
+export declare class ConfiguredModelAlgorithmAssociation_TrainedModelsConfigurationPolicy {
+  constructor(props: {
+    ContainerLogs?: ConfiguredModelAlgorithmAssociation_LogsConfigurationPolicy[];
+    ContainerMetrics?: ConfiguredModelAlgorithmAssociation_MetricsConfigurationPolicy;
+    MaxArtifactSize?: ConfiguredModelAlgorithmAssociation_TrainedModelArtifactMaxSize;
+  });
+}
+
 export declare class ConfiguredTable_AggregateColumn {
   constructor(props: {
     ColumnNames: string[];
@@ -60552,6 +61224,7 @@ export declare class ConfiguredTable_AthenaTableReference {
     DatabaseName: string;
     TableName: string;
     WorkGroup: string;
+    CatalogName?: string;
     OutputLocation?: string;
     Region?: ConfiguredTable_CommercialRegion;
   });
@@ -62582,17 +63255,6 @@ export declare class ContainerAction {
   });
 }
 
-export declare class ContainerConfig {
-  constructor(props: {
-    /** A list of arguments to apply to the container. */
-    ContainerArguments?: string[];
-    /** The custom entry point to use on container. */
-    ContainerEntrypoint?: string[];
-    /** A list of variables to apply to the custom container. */
-    ContainerEnvironmentVariables?: AppImageConfig_CustomImageContainerEnvironmentVariable[];
-  });
-}
-
 export declare class ContainerConfiguration {
   constructor(props: {
     ContainerUri: string;
@@ -63236,7 +63898,7 @@ export declare class ControlPlanePlacement {
 export declare class ControlPlaneScalingConfig {
   constructor(props: {
     /** The scaling tier for the provisioned control plane. */
-    Tier?: "standard" | "tier-2xl" | "tier-4xl" | "tier-8xl" | "tier-xl" | "ultra";
+    Tier?: "standard" | "tier-2xl" | "tier-4xl" | "tier-8xl" | "tier-ultra" | "tier-xl";
   });
 }
 
@@ -63909,6 +64571,23 @@ export declare class CrossRegionCopyRule {
   });
 }
 
+export declare class CrossRegionCopyTarget {
+  constructor(props: {
+    TargetRegion?: string;
+  });
+}
+
+export declare class CrossRegionS3RestoreSourcesAccess {
+  constructor(props: {
+    /** The IPv4 addresses allowed for cross-Region Amazon S3 restore access. */
+    Ipv4Addresses?: string[];
+    /** The AWS-Region for cross-Region Amazon S3 restore access. */
+    Region?: string;
+    /** The current status of the cross-Region Amazon S3 restore access configuration. */
+    Status?: OdbNetwork_ManagedResourceStatus;
+  });
+}
+
 export declare class CsrExtensions {
   constructor(props: {
     KeyUsage?: CertificateAuthority_KeyUsage;
@@ -64210,6 +64889,12 @@ export declare class CustomEmailSender {
   });
 }
 
+export declare class CustomEntityConfig {
+  constructor(props: {
+    CustomDataIdentifiers: string[];
+  });
+}
+
 export declare class CustomerContact {
   constructor(props: {
     /** The email address of the contact. */
@@ -66784,6 +67469,40 @@ export declare class DataLake_Transitions {
   });
 }
 
+export declare class DataLakeAccessProperties {
+  constructor(props: {
+    /** Allows third-party engines to access data in Amazon S3 locations that are registered with Lake Formation. */
+    AllowFullTableExternalDataAccess?: "False" | "True";
+    /** Specifies a federated catalog type for the native catalog resource. */
+    CatalogType?: string;
+    /** Turns on or off data lake access for Apache Spark applications that access Amazon Redshift databases in the Data Catalog from any non-Redshift engine. */
+    DataLakeAccess?: boolean;
+    /** A role that will be assumed by Glue for transferring data into/out of the staging bucket during a query. */
+    DataTransferRole?: string;
+    /** An encryption key that will be used for the staging bucket that will be created along with the catalog. */
+    KmsKey?: string;
+    /** The name of the managed workgroup associated with the catalog. */
+    ManagedWorkgroupName?: string;
+    /** The status of the managed workgroup. */
+    ManagedWorkgroupStatus?: string;
+    /** The name of the Redshift database. */
+    RedshiftDatabaseName?: string;
+  });
+}
+
+export declare class DataLakeSettings_DataLakePrincipal {
+  constructor(props: {
+    DataLakePrincipalIdentifier: string;
+  });
+}
+
+export declare class DataLakeSettings_PrincipalPermissions {
+  constructor(props: {
+    Permissions: string[];
+    Principal: DataLakeSettings_DataLakePrincipal;
+  });
+}
+
 export declare class DataMigration_DataMigrationSettings {
   constructor(props: {
     /** The property specifies whether to enable the CloudWatch log. */
@@ -71105,6 +71824,12 @@ export declare class DeploymentStrategy_Tag {
   });
 }
 
+export declare class DeploymentStrategyOptions {
+  constructor(props: {
+    DeploymentStrategy?: "CapacityOptimized" | "Default";
+  });
+}
+
 export declare class DeploymentStyle {
   constructor(props: {
     /** Indicates whether to route deployment traffic behind a load balancer. */
@@ -72767,6 +73492,12 @@ export declare class DLMLifecyclePolicy_CrossRegionCopyRule {
   });
 }
 
+export declare class DLMLifecyclePolicy_CrossRegionCopyTarget {
+  constructor(props: {
+    TargetRegion?: string;
+  });
+}
+
 export declare class DLMLifecyclePolicy_DeprecateRule {
   constructor(props: {
     Count?: number;
@@ -72800,8 +73531,8 @@ export declare class DLMLifecyclePolicy_EventSource {
 export declare class DLMLifecyclePolicy_Exclusions {
   constructor(props: {
     ExcludeBootVolumes?: boolean;
-    ExcludeTags?: Record<string, unknown>;
-    ExcludeVolumeTypes?: Record<string, unknown>;
+    ExcludeTags?: DLMLifecyclePolicy_Tag[];
+    ExcludeVolumeTypes?: Record<string, unknown>[];
   });
 }
 
@@ -72827,7 +73558,7 @@ export declare class DLMLifecyclePolicy_PolicyDetails {
     Actions?: DLMLifecyclePolicy_Action[];
     CopyTags?: boolean;
     CreateInterval?: number;
-    CrossRegionCopyTargets?: Record<string, unknown>;
+    CrossRegionCopyTargets?: DLMLifecyclePolicy_CrossRegionCopyTarget[];
     EventSource?: DLMLifecyclePolicy_EventSource;
     Exclusions?: DLMLifecyclePolicy_Exclusions;
     ExtendDeletion?: boolean;
@@ -73313,6 +74044,13 @@ export declare class DNSTargetResource {
   });
 }
 
+export declare class DnsView_Tag {
+  constructor(props: {
+    Key: string;
+    Value: string;
+  });
+}
+
 export declare class DocDBDBCluster_ServerlessV2ScalingConfiguration {
   constructor(props: {
     MaxCapacity: number;
@@ -74506,6 +75244,12 @@ export declare class EC2Fleet_Placement {
   });
 }
 
+export declare class EC2Fleet_ReservedCapacityOptionsRequest {
+  constructor(props: {
+    ReservationTypes?: "interruptible-capacity-reservation"[];
+  });
+}
+
 export declare class EC2Fleet_SpotOptionsRequest {
   constructor(props: {
     AllocationStrategy?: "capacity-optimized" | "capacity-optimized-prioritized" | "capacityOptimized" | "capacityOptimizedPrioritized" | "diversified" | "lowest-price" | "lowestPrice" | "price-capacity-optimized" | "priceCapacityOptimized";
@@ -74536,7 +75280,7 @@ export declare class EC2Fleet_TagSpecification {
 export declare class EC2Fleet_TargetCapacitySpecificationRequest {
   constructor(props: {
     TotalTargetCapacity: number;
-    DefaultTargetCapacityType?: "on-demand" | "spot";
+    DefaultTargetCapacityType?: "on-demand" | "reserved-capacity" | "spot";
     OnDemandTargetCapacity?: number;
     SpotTargetCapacity?: number;
     TargetCapacityUnitType?: "memory-mib" | "units" | "vcpu";
@@ -75964,7 +76708,7 @@ export declare class EKSCluster_ControlPlanePlacement {
 export declare class EKSCluster_ControlPlaneScalingConfig {
   constructor(props: {
     /** The scaling tier for the provisioned control plane. */
-    Tier?: "standard" | "tier-2xl" | "tier-4xl" | "tier-8xl" | "tier-xl" | "ultra";
+    Tier?: "standard" | "tier-2xl" | "tier-4xl" | "tier-8xl" | "tier-ultra" | "tier-xl";
   });
 }
 
@@ -76032,7 +76776,7 @@ export declare class EKSCluster_Provider {
 export declare class EKSCluster_RemoteNetworkConfig {
   constructor(props: {
     /** Network configuration of nodes run on-premises with EKS Hybrid Nodes. */
-    RemoteNodeNetworks: any;
+    RemoteNodeNetworks?: any;
     /** Network configuration of pods run on-premises with EKS Hybrid Nodes. */
     RemotePodNetworks?: any;
   });
@@ -77636,6 +78380,14 @@ export declare class EncoderSettings {
   });
 }
 
+export declare class EncodingConfig {
+  constructor(props: {
+    EncodingProfile?: MediaConnectFlow_EncodingProfile;
+    /** The maximum video bitrate to use when transcoding the NDI source to a Transport Stream. This parameter enables you to override the default video bitrate within the encoding profile's supported range. The supported range is 10,000,000 - 50,000,000 bits per second (bps). If you do not specify a value, MediaConnect uses the default value of 20,000,000 bps. */
+    VideoMaxBitrate?: number;
+  });
+}
+
 export declare class EncodingParameters {
   constructor(props: {
     /** A value that is used to calculate compression for an output. The bitrate of the output is calculated as follows: Output bitrate = (1 / compressionFactor) * (source bitrate) This property only applies to outputs that use the ST 2110 JPEG XS protocol, with a flow source that uses the CDI protocol. Valid values are in the range of 3.0 to 10.0, inclusive. */
@@ -80317,8 +81069,8 @@ export declare class ExclusionRules {
 export declare class Exclusions {
   constructor(props: {
     ExcludeBootVolumes?: boolean;
-    ExcludeTags?: Record<string, unknown>;
-    ExcludeVolumeTypes?: Record<string, unknown>;
+    ExcludeTags?: DLMLifecyclePolicy_Tag[];
+    ExcludeVolumeTypes?: Record<string, unknown>[];
   });
 }
 
@@ -80371,12 +81123,6 @@ export declare class ExecutionApprovalConfiguration {
   });
 }
 
-export declare class ExecutionControls {
-  constructor(props: {
-    SsmControls?: RemediationConfiguration_SsmControls;
-  });
-}
-
 export declare class ExecutionPlan_CapacityUnitsConfiguration {
   constructor(props: {
     RescoreCapacityUnits: number;
@@ -81427,6 +82173,15 @@ export declare class FederatedAuthenticationRequest {
   });
 }
 
+export declare class FederatedCatalog {
+  constructor(props: {
+    /** The name of the connection to an external data source. */
+    ConnectionName?: string;
+    /** A unique identifier for the federated catalog. */
+    Identifier?: string;
+  });
+}
+
 export declare class FederatedDatabase {
   constructor(props: {
     /** The name of the connection to the external metastore. */
@@ -81453,6 +82208,21 @@ export declare class FederationParameters {
   });
 }
 
+export declare class Feed_ClippingConfig {
+  constructor(props: {
+    CallbackMetadata?: string;
+  });
+}
+
+export declare class Feed_GetOutput {
+  constructor(props: {
+    Name: string;
+    OutputConfig: any;
+    Status: Feed_OutputStatus;
+    Description?: string;
+  });
+}
+
 export declare class FeedbackAttributes {
   constructor(props: {
     /** If the value is true, you receive email notifications when bounce or complaint events occur */
@@ -81913,15 +82683,6 @@ export declare class Firewall_Tag {
   });
 }
 
-export declare class FirewallDomainList_Tag {
-  constructor(props: {
-    /** The key name of the tag. You can specify a value that is 1 to 127 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. */
-    Key: string;
-    /** The value for the tag. You can specify a value that is 1 to 255 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. */
-    Value: string;
-  });
-}
-
 export declare class FirewallPolicy_ActionDefinition {
   constructor(props: {
     PublishMetricAction?: FirewallPolicy_PublishMetricAction;
@@ -82005,35 +82766,6 @@ export declare class FirewallPolicy_Tag {
   });
 }
 
-export declare class FirewallRule {
-  constructor(props: {
-    /** Rule Action */
-    Action: "ALERT" | "ALLOW" | "BLOCK";
-    /** Rule Priority */
-    Priority: number;
-    /** BlockOverrideDnsType */
-    BlockOverrideDnsType?: "CNAME";
-    /** BlockOverrideDomain */
-    BlockOverrideDomain?: string;
-    /** BlockOverrideTtl */
-    BlockOverrideTtl?: number;
-    /** BlockResponse */
-    BlockResponse?: "NODATA" | "NXDOMAIN" | "OVERRIDE";
-    /** FirewallDomainRedirectionAction */
-    ConfidenceThreshold?: "HIGH" | "LOW" | "MEDIUM";
-    /** FirewallDomainRedirectionAction */
-    DnsThreatProtection?: "DGA" | "DICTIONARY_DGA" | "DNS_TUNNELING";
-    /** ResourceId */
-    FirewallDomainListId?: string;
-    /** FirewallDomainRedirectionAction */
-    FirewallDomainRedirectionAction?: "INSPECT_REDIRECTION_DOMAIN" | "TRUST_REDIRECTION_DOMAIN";
-    /** ResourceId */
-    FirewallThreatProtectionId?: string;
-    /** Qtype */
-    Qtype?: string;
-  });
-}
-
 export declare class FirewallRuleGroup_FirewallRule {
   constructor(props: {
     /** Rule Action */
@@ -82246,6 +82978,13 @@ export declare class FlowEntitlement_Encryption {
   });
 }
 
+export declare class FlowEntitlement_Tag {
+  constructor(props: {
+    Key: string;
+    Value: string;
+  });
+}
+
 export declare class FlowLog_Tag {
   constructor(props: {
     Key: string;
@@ -82331,6 +83070,13 @@ export declare class FlowOutput_SecretsManagerEncryptionKeyConfiguration {
   });
 }
 
+export declare class FlowOutput_Tag {
+  constructor(props: {
+    Key: string;
+    Value: string;
+  });
+}
+
 export declare class FlowOutput_VpcInterfaceAttachment {
   constructor(props: {
     /** The name of the VPC interface to use for this output. */
@@ -82370,6 +83116,13 @@ export declare class FlowSource_GatewayBridgeSource {
   });
 }
 
+export declare class FlowSource_Tag {
+  constructor(props: {
+    Key: string;
+    Value: string;
+  });
+}
+
 export declare class FlowSource_VpcInterfaceAttachment {
   constructor(props: {
     /** The name of the VPC interface to use for this resource. */
@@ -84487,6 +85240,14 @@ export declare class GatewayPlatform {
   });
 }
 
+export declare class GatewayPolicyEngineConfiguration {
+  constructor(props: {
+    /** The ARN of the policy engine. The policy engine contains Cedar policies that define fine-grained authorization rules specifying who can perform what actions on which resources as agents interact through the gateway. */
+    Arn: string;
+    Mode: BedrockAgentCoreGateway_GatewayPolicyEngineMode;
+  });
+}
+
 export declare class GatewayRoute_GatewayRouteHostnameMatch {
   constructor(props: {
     Exact?: string;
@@ -84967,6 +85728,15 @@ export declare class GeoSpatialColumnGroup {
   });
 }
 
+export declare class GetOutput {
+  constructor(props: {
+    Name: string;
+    OutputConfig: any;
+    Status: Feed_OutputStatus;
+    Description?: string;
+  });
+}
+
 export declare class GitBranchFilterCriteria {
   constructor(props: {
     /** The list of patterns of Git branches that, when a commit is pushed, are to be excluded from starting the pipeline. */
@@ -85199,6 +85969,13 @@ export declare class GlobalReplicationGroupMember {
   });
 }
 
+export declare class GlobalResolver_Tag {
+  constructor(props: {
+    Key: string;
+    Value: string;
+  });
+}
+
 export declare class GlobalTable_AttributeDefinition {
   constructor(props: {
     AttributeName: string;
@@ -85727,7 +86504,7 @@ export declare class GlueSecurityConfiguration_EncryptionConfiguration {
   constructor(props: {
     CloudWatchEncryption?: GlueSecurityConfiguration_CloudWatchEncryption;
     JobBookmarksEncryption?: GlueSecurityConfiguration_JobBookmarksEncryption;
-    S3Encryptions?: Record<string, unknown>;
+    S3Encryptions?: GlueSecurityConfiguration_S3Encryption[];
   });
 }
 
@@ -85738,6 +86515,13 @@ export declare class GlueSecurityConfiguration_JobBookmarksEncryption {
   });
 }
 
+export declare class GlueSecurityConfiguration_S3Encryption {
+  constructor(props: {
+    KmsKeyArn?: string;
+    S3EncryptionMode?: string;
+  });
+}
+
 export declare class GlueTable_Column {
   constructor(props: {
     Name: string;
@@ -87926,13 +88710,6 @@ export declare class IamPropertiesInput {
   });
 }
 
-export declare class IamRole {
-  constructor(props: {
-    /** The ARN of the IAM role. */
-    arn?: string;
-  });
-}
-
 export declare class IamUser {
   constructor(props: {
     /** The ARN of the IAM user. */
@@ -89492,6 +90269,12 @@ export declare class InferenceComponentStartupParameters {
   });
 }
 
+export declare class InferenceContainerConfig {
+  constructor(props: {
+    ImageUri: string;
+  });
+}
+
 export declare class InferenceExecutionConfig {
   constructor(props: {
     Mode: string;
@@ -90442,6 +91225,13 @@ export declare class Insight_StringFilter {
   });
 }
 
+export declare class InsightRule_Tag {
+  constructor(props: {
+    Key: string;
+    Value: string;
+  });
+}
+
 export declare class InsightsConfiguration {
   constructor(props: {
     /** Set the InsightsEnabled value to true to enable insights or false to disable insights. */
@@ -90769,6 +91559,24 @@ export declare class InstanceConfig {
   });
 }
 
+export declare class InstanceConnectEndpoint_InstanceConnectEndpointDnsNames {
+  constructor(props: {
+    /** The DNS name of the EC2 Instance Connect Endpoint. */
+    DnsName?: string;
+    /** The Federal Information Processing Standards (FIPS) compliant DNS name of the EC2 Instance Connect Endpoint. */
+    FipsDnsName?: string;
+  });
+}
+
+export declare class InstanceConnectEndpoint_InstanceConnectEndpointPublicDnsNames {
+  constructor(props: {
+    /** The dualstack DNS name of the EC2 Instance Connect Endpoint. A dualstack DNS name supports connections from both IPv4 and IPv6 clients. */
+    Dualstack?: InstanceConnectEndpoint_InstanceConnectEndpointDnsNames;
+    /** The IPv4-only DNS name of the EC2 Instance Connect Endpoint. */
+    Ipv4?: InstanceConnectEndpoint_InstanceConnectEndpointDnsNames;
+  });
+}
+
 export declare class InstanceConnectEndpoint_Tag {
   constructor(props: {
     Key: string;
@@ -90776,6 +91584,24 @@ export declare class InstanceConnectEndpoint_Tag {
   });
 }
 
+export declare class InstanceConnectEndpointDnsNames {
+  constructor(props: {
+    /** The DNS name of the EC2 Instance Connect Endpoint. */
+    DnsName?: string;
+    /** The Federal Information Processing Standards (FIPS) compliant DNS name of the EC2 Instance Connect Endpoint. */
+    FipsDnsName?: string;
+  });
+}
+
+export declare class InstanceConnectEndpointPublicDnsNames {
+  constructor(props: {
+    /** The dualstack DNS name of the EC2 Instance Connect Endpoint. A dualstack DNS name supports connections from both IPv4 and IPv6 clients. */
+    Dualstack?: InstanceConnectEndpoint_InstanceConnectEndpointDnsNames;
+    /** The IPv4-only DNS name of the EC2 Instance Connect Endpoint. */
+    Ipv4?: InstanceConnectEndpoint_InstanceConnectEndpointDnsNames;
+  });
+}
+
 export declare class InstanceDefinition {
   constructor(props: {
     InstanceType: string;
@@ -91021,13 +91847,6 @@ export declare class InstanceMarketOptions {
   });
 }
 
-export declare class InstanceMarketOptionsRequest {
-  constructor(props: {
-    MarketType?: "capacity-block" | "spot";
-    SpotOptions?: WorkspaceInstance_SpotMarketOptions;
-  });
-}
-
 export declare class InstanceMetadataOptions {
   constructor(props: {
     /** Limit the number of hops that an instance metadata request can traverse to reach its destination. */
@@ -92759,6 +93578,15 @@ export declare class IpamPrefixListResolverRuleCondition {
   });
 }
 
+export declare class IPAMPrefixListResolverTarget_Tag {
+  constructor(props: {
+    /** The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. */
+    Key: string;
+    /** The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. */
+    Value: string;
+  });
+}
+
 export declare class IPAMResourceDiscovery_IpamOperatingRegion {
   constructor(props: {
     /** The name of the region. */
@@ -99190,6 +100018,13 @@ export declare class LogPublishingOptions {
   });
 }
 
+export declare class LogRedactionConfiguration {
+  constructor(props: {
+    EntitiesToRedact: ConfiguredModelAlgorithmAssociation_EntityType[];
+    CustomEntityConfig?: ConfiguredModelAlgorithmAssociation_CustomEntityConfig;
+  });
+}
+
 export declare class LogsBackupConfiguration {
   constructor(props: {
     Region: string;
@@ -99204,6 +100039,15 @@ export declare class LogsConfig {
   });
 }
 
+export declare class LogsConfigurationPolicy {
+  constructor(props: {
+    AllowedAccountIds: string[];
+    FilterPattern?: string;
+    LogRedactionConfiguration?: ConfiguredModelAlgorithmAssociation_LogRedactionConfiguration;
+    LogType?: ConfiguredModelAlgorithmAssociation_LogType;
+  });
+}
+
 export declare class LogsDestination_Tag {
   constructor(props: {
     /** The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., :, /, =, +, - and @. */
@@ -100330,6 +101174,10 @@ export declare class ManagedScalingPolicy {
 
 export declare class ManagedServices {
   constructor(props: {
+    /** The access configuration for the cross-Region Amazon S3 database restore source. */
+    CrossRegionS3RestoreSourcesAccess?: OdbNetwork_CrossRegionS3RestoreSourcesAccess[];
+    /** The AWS Key Management Service (KMS) access configuration. */
+    KmsAccess?: Record<string, unknown>;
     /** The managed Amazon S3 backup access configuration. */
     ManagedS3BackupAccess?: Record<string, unknown>;
     /** The IPv4 CIDR blocks for the managed services. */
@@ -100342,6 +101190,8 @@ export declare class ManagedServices {
     ServiceNetworkArn?: string;
     /** The service network endpoint configuration. */
     ServiceNetworkEndpoint?: Record<string, unknown>;
+    /** The AWS Security Token Service (STS) access configuration. */
+    StsAccess?: Record<string, unknown>;
     /** The Zero-ETL access configuration. */
     ZeroEtlAccess?: Record<string, unknown>;
   });
@@ -100929,6 +101779,14 @@ export declare class MediaConnectFlow_BlackFrames {
   });
 }
 
+export declare class MediaConnectFlow_EncodingConfig {
+  constructor(props: {
+    EncodingProfile?: MediaConnectFlow_EncodingProfile;
+    /** The maximum video bitrate to use when transcoding the NDI source to a Transport Stream. This parameter enables you to override the default video bitrate within the encoding profile's supported range. The supported range is 10,000,000 - 50,000,000 bits per second (bps). If you do not specify a value, MediaConnect uses the default value of 20,000,000 bps. */
+    VideoMaxBitrate?: number;
+  });
+}
+
 export declare class MediaConnectFlow_Encryption {
   constructor(props: {
     /** The ARN of the role that you created during setup (when you set up AWS Elemental MediaConnect as a trusted entity). */
@@ -101049,6 +101907,8 @@ export declare class MediaConnectFlow_MediaStream {
     Description?: string;
     /** The format type number (sometimes referred to as RTP payload type) of the media stream. MediaConnect assigns this value to the media stream. For ST 2110 JPEG XS outputs, you need to provide this value to the receiver. */
     Fmt?: number;
+    /** Key-value pairs that can be used to tag this media stream. */
+    Tags?: MediaConnectFlow_Tag[];
     /** The resolution of the video. */
     VideoFormat?: "1080i" | "1080p" | "2160p" | "480p" | "720p";
   });
@@ -101080,8 +101940,8 @@ export declare class MediaConnectFlow_NdiConfig {
     MachineName?: string;
     /** A list of up to three NDI discovery server configurations. While not required by the API, this configuration is necessary for NDI functionality to work properly. */
     NdiDiscoveryServers?: MediaConnectFlow_NdiDiscoveryServerConfig[];
-    /** A setting that controls whether NDI outputs can be used in the flow. Must be ENABLED to add NDI outputs. Default is DISABLED. */
-    NdiState?: "DISABLED" | "ENABLED";
+    /** A setting that controls whether NDI sources or outputs can be used in the flow. The default value is DISABLED. This value must be set as ENABLED for your flow to support NDI sources or outputs. */
+    NdiState?: MediaConnectFlow_NdiState;
   });
 }
 
@@ -101096,6 +101956,12 @@ export declare class MediaConnectFlow_NdiDiscoveryServerConfig {
   });
 }
 
+export declare class MediaConnectFlow_NdiSourceSettings {
+  constructor(props: {
+    SourceName?: string;
+  });
+}
+
 export declare class MediaConnectFlow_SecretsManagerEncryptionKeyConfiguration {
   constructor(props: {
     /** The ARN of the IAM role used for transit encryption from the router output using AWS Secrets Manager. */
@@ -101140,8 +102006,10 @@ export declare class MediaConnectFlow_Source {
     MinLatency?: number;
     /** The name of the source. */
     Name?: string;
+    /** The settings for the NDI flow source. This includes the exact name of the upstream NDI sender that you want to connect to your flow source. */
+    NdiSourceSettings?: MediaConnectFlow_NdiSourceSettings;
     /** The protocol that is used by the source. */
-    Protocol?: "cdi" | "fujitsu-qos" | "rist" | "rtp" | "rtp-fec" | "srt-caller" | "srt-listener" | "st2110-jpegxs" | "zixi-push";
+    Protocol?: "cdi" | "ndi-speed-hq" | "rist" | "rtp" | "rtp-fec" | "srt-caller" | "srt-listener" | "st2110-jpegxs" | "zixi-push";
     RouterIntegrationState?: "DISABLED" | "ENABLED";
     RouterIntegrationTransitDecryption?: MediaConnectFlow_FlowTransitEncryption;
     /** The port that the flow uses to send outbound requests to initiate connection with the sender for fujitsu-qos protocol. */
@@ -101158,6 +102026,8 @@ export declare class MediaConnectFlow_Source {
     SourceListenerPort?: number;
     /** The stream ID that you want to use for this transport. This parameter applies only to Zixi-based streams. */
     StreamId?: string;
+    /** Key-value pairs that can be used to tag this source. */
+    Tags?: MediaConnectFlow_Tag[];
     /** The name of the VPC Interface this Source is configured with. */
     VpcInterfaceName?: string;
     /** The range of IP addresses that should be allowed to contribute content to your source. These IP addresses should be in the form of a Classless Inter-Domain Routing (CIDR) block; for example, 10.0.0.0/16. */
@@ -101178,6 +102048,13 @@ export declare class MediaConnectFlow_SourceMonitoringConfig {
   });
 }
 
+export declare class MediaConnectFlow_Tag {
+  constructor(props: {
+    Key: string;
+    Value: string;
+  });
+}
+
 export declare class MediaConnectFlow_VideoMonitoringSetting {
   constructor(props: {
     BlackFrames?: MediaConnectFlow_BlackFrames;
@@ -101199,6 +102076,8 @@ export declare class MediaConnectFlow_VpcInterface {
     NetworkInterfaceIds?: string[];
     /** The type of network adapter that you want MediaConnect to use on this interface. If you don't set this value, it defaults to ENA. */
     NetworkInterfaceType?: "efa" | "ena";
+    /** Key-value pairs that can be used to tag this VPC interface. */
+    Tags?: MediaConnectFlow_Tag[];
   });
 }
 
@@ -103813,6 +104692,8 @@ export declare class MediaStream {
     Description?: string;
     /** The format type number (sometimes referred to as RTP payload type) of the media stream. MediaConnect assigns this value to the media stream. For ST 2110 JPEG XS outputs, you need to provide this value to the receiver. */
     Fmt?: number;
+    /** Key-value pairs that can be used to tag this media stream. */
+    Tags?: MediaConnectFlow_Tag[];
     /** The resolution of the video. */
     VideoFormat?: "1080i" | "1080p" | "2160p" | "480p" | "720p";
   });
@@ -104980,123 +105861,6 @@ export declare class MetricCharacteristics {
   });
 }
 
-export declare class MetricDefinition {
-  constructor(props: {
-    /** The name for the metric that is defined in this structure. For extended metrics, valid values are the following:
-
-PerformanceNavigationDuration
-
-PerformanceResourceDuration
-
-NavigationSatisfiedTransaction
-
-NavigationToleratedTransaction
-
-NavigationFrustratedTransaction
-
-WebVitalsCumulativeLayoutShift
-
-WebVitalsFirstInputDelay
-
-WebVitalsLargestContentfulPaint
-
-WebVitalsInteractionToNextPaint
-
-JsErrorCount
-
-HttpErrorCount
-
-SessionCount
-
-PageViewCount
-
-Http4xxCount
-
-Http5xxCount
-
-SessionDuration
-
-PageViewCountPerSession
-
-JsErrorCountPerSession
-
-Http4xxCountPerSession
-
-Http5xxCountPerSession
-
-JsErrorCountPerPageView
-
-Http4xxCountPerPageView
-
-Http5xxCountPerPageView
-
-TimeOnPage
-
-ColdLaunchTime
-
-WarmLaunchTime
-
-CrashCount
-
-ANRCount
-
-AppHangCount
-
-ScreenLoadCount
-
-ScreenLoadTime
-
-NetworkLatency
-
-SpanPayloadSize
-
-LogEventPayloadSize */
-    Name: string;
-    /** Use this field only if you are sending the metric to CloudWatch.
-
-This field is a map of field paths to dimension names. It defines the dimensions to associate with this metric in CloudWatch. For extended metrics, valid values for the entries in this field are the following:
-
-"metadata.pageId": "PageId"
-
-"metadata.browserName": "BrowserName"
-
-"metadata.deviceType": "DeviceType"
-
-"metadata.osName": "OSName"
-
-"metadata.countryCode": "CountryCode"
-
-"event_details.fileType": "FileType"
-
-All dimensions listed in this field must also be included in EventPattern. */
-    DimensionKeys?: Record<string, unknown>;
-    /** The pattern that defines the metric, specified as a JSON object. RUM checks events that happen in a user's session against the pattern, and events that match the pattern are sent to the metric destination.
-
-When you define extended metrics, the metric definition is not valid if EventPattern is omitted.
-
-Example event patterns:
-
-'{ "event_type": ["com.amazon.rum.js_error_event"], "metadata": { "browserName": [ "Chrome", "Safari" ], } }'
-
-'{ "event_type": ["com.amazon.rum.performance_navigation_event"], "metadata": { "browserName": [ "Chrome", "Firefox" ] }, "event_details": { "duration": [{ "numeric": [ "<", 2000 ] }] } }'
-
-'{ "event_type": ["com.amazon.rum.performance_navigation_event"], "metadata": { "browserName": [ "Chrome", "Safari" ], "countryCode": [ "US" ] }, "event_details": { "duration": [{ "numeric": [ ">=", 2000, "<", 8000 ] }] } }'
-
-If the metrics destination' is CloudWatch and the event also matches a value in DimensionKeys, then the metric is published with the specified dimensions. */
-    EventPattern?: string;
-    /** The namespace used by CloudWatch Metrics for the metric that is defined in this structure */
-    Namespace?: string;
-    /** The CloudWatch metric unit to use for this metric. If you omit this field, the metric is recorded with no unit. */
-    UnitLabel?: string;
-    /** The field within the event object that the metric value is sourced from.
-
-If you omit this field, a hardcoded value of 1 is pushed as the metric value. This is useful if you just want to count the number of events that the filter catches.
-
-If this metric is sent to Evidently, this field will be passed to Evidently raw and Evidently will handle data extraction from the event. Note: Evidently has been discontinued. */
-    ValueKey?: string;
-  });
-}
-
 export declare class MetricDefinitionObject {
   constructor(props: {
     /** The JSON path to reference the entity id in the event. */
@@ -105247,6 +106011,12 @@ export declare class MetricsConfig {
   });
 }
 
+export declare class MetricsConfigurationPolicy {
+  constructor(props: {
+    NoiseLevel: ConfiguredModelAlgorithmAssociation_NoiseLevelType;
+  });
+}
+
 export declare class MetricsSource {
   constructor(props: {
     /** The type of content stored in the metric source. */
@@ -108531,8 +109301,8 @@ export declare class NdiConfig {
     MachineName?: string;
     /** A list of up to three NDI discovery server configurations. While not required by the API, this configuration is necessary for NDI functionality to work properly. */
     NdiDiscoveryServers?: MediaConnectFlow_NdiDiscoveryServerConfig[];
-    /** A setting that controls whether NDI outputs can be used in the flow. Must be ENABLED to add NDI outputs. Default is DISABLED. */
-    NdiState?: "DISABLED" | "ENABLED";
+    /** A setting that controls whether NDI sources or outputs can be used in the flow. The default value is DISABLED. This value must be set as ENABLED for your flow to support NDI sources or outputs. */
+    NdiState?: MediaConnectFlow_NdiState;
   });
 }
 
@@ -108547,6 +109317,12 @@ export declare class NdiDiscoveryServerConfig {
   });
 }
 
+export declare class NdiSourceSettings {
+  constructor(props: {
+    SourceName?: string;
+  });
+}
+
 export declare class NegativeFormat {
   constructor(props: {
     Prefix?: string;
@@ -109620,10 +110396,15 @@ export declare class Nodegroup_UpdateConfig {
 
 export declare class NodeGroupConfiguration {
   constructor(props: {
+    /** Either the ElastiCache for Redis supplied 4-digit id or a user supplied id for the node group these configuration values apply to. */
     NodeGroupId?: string;
+    /** The Availability Zone where the primary node of this node group (shard) is launched. */
     PrimaryAvailabilityZone?: string;
+    /** A list of Availability Zones to be used for the read replicas. The number of Availability Zones in this list must match the value of ReplicaCount or ReplicasPerNodeGroup if not specified. */
     ReplicaAvailabilityZones?: string[];
+    /** The number of read replica nodes in this node group (shard). */
     ReplicaCount?: number;
+    /** A string of comma-separated values where the first set of values are the slot numbers (zero based), and the second set of values are the keyspaces for each slot. The following example specifies three slots (numbered 0, 1, and 2): 0,1,2,0-4999,5000-9999,10000-16,383. */
     Slots?: string;
   });
 }
@@ -110244,8 +111025,23 @@ export declare class OcspConfiguration {
   });
 }
 
+export declare class OdbNetwork_CrossRegionS3RestoreSourcesAccess {
+  constructor(props: {
+    /** The IPv4 addresses allowed for cross-Region Amazon S3 restore access. */
+    Ipv4Addresses?: string[];
+    /** The AWS-Region for cross-Region Amazon S3 restore access. */
+    Region?: string;
+    /** The current status of the cross-Region Amazon S3 restore access configuration. */
+    Status?: OdbNetwork_ManagedResourceStatus;
+  });
+}
+
 export declare class OdbNetwork_ManagedServices {
   constructor(props: {
+    /** The access configuration for the cross-Region Amazon S3 database restore source. */
+    CrossRegionS3RestoreSourcesAccess?: OdbNetwork_CrossRegionS3RestoreSourcesAccess[];
+    /** The AWS Key Management Service (KMS) access configuration. */
+    KmsAccess?: Record<string, unknown>;
     /** The managed Amazon S3 backup access configuration. */
     ManagedS3BackupAccess?: Record<string, unknown>;
     /** The IPv4 CIDR blocks for the managed services. */
@@ -110258,6 +111054,8 @@ export declare class OdbNetwork_ManagedServices {
     ServiceNetworkArn?: string;
     /** The service network endpoint configuration. */
     ServiceNetworkEndpoint?: Record<string, unknown>;
+    /** The AWS Security Token Service (STS) access configuration. */
+    StsAccess?: Record<string, unknown>;
     /** The Zero-ETL access configuration. */
     ZeroEtlAccess?: Record<string, unknown>;
   });
@@ -110741,6 +111539,12 @@ export declare class OpenSearchServerlessCollection_Tag {
   });
 }
 
+export declare class OpenSearchServerlessCollection_VectorOptions {
+  constructor(props: {
+    ServerlessVectorAcceleration?: OpenSearchServerlessCollection_ServerlessVectorAcceleration;
+  });
+}
+
 export declare class OpenSearchServerlessConfiguration {
   constructor(props: {
     /** The ARN of the OpenSearch Service vector store. */
@@ -110874,6 +111678,12 @@ export declare class OpenSearchServiceDomain_ColdStorageOptions {
   });
 }
 
+export declare class OpenSearchServiceDomain_DeploymentStrategyOptions {
+  constructor(props: {
+    DeploymentStrategy?: "CapacityOptimized" | "Default";
+  });
+}
+
 export declare class OpenSearchServiceDomain_DomainEndpointOptions {
   constructor(props: {
     CustomEndpoint?: string;
@@ -115666,7 +116476,7 @@ export declare class PolicyDetails {
     Actions?: DLMLifecyclePolicy_Action[];
     CopyTags?: boolean;
     CreateInterval?: number;
-    CrossRegionCopyTargets?: Record<string, unknown>;
+    CrossRegionCopyTargets?: DLMLifecyclePolicy_CrossRegionCopyTarget[];
     EventSource?: DLMLifecyclePolicy_EventSource;
     Exclusions?: DLMLifecyclePolicy_Exclusions;
     ExtendDeletion?: boolean;
@@ -115835,6 +116645,12 @@ export declare class PolicyStore_KmsEncryptionState {
   });
 }
 
+export declare class PolicyStore_SchemaDefinition {
+  constructor(props: {
+    CedarJson?: string;
+  });
+}
+
 export declare class PolicyStore_Tag {
   constructor(props: {
     Key: string;
@@ -116473,6 +117289,20 @@ export declare class PrivacyBudgetTemplate_Tag {
   });
 }
 
+export declare class PrivacyConfiguration {
+  constructor(props: {
+    Policies: ConfiguredModelAlgorithmAssociation_PrivacyConfigurationPolicies;
+  });
+}
+
+export declare class PrivacyConfigurationPolicies {
+  constructor(props: {
+    TrainedModelExports?: ConfiguredModelAlgorithmAssociation_TrainedModelExportsConfigurationPolicy;
+    TrainedModelInferenceJobs?: ConfiguredModelAlgorithmAssociation_TrainedModelInferenceJobsConfigurationPolicy;
+    TrainedModels?: ConfiguredModelAlgorithmAssociation_TrainedModelsConfigurationPolicy;
+  });
+}
+
 export declare class PrivateDnsNameOptionsRequest {
   constructor(props: {
     EnableResourceNameDnsAAAARecord?: boolean;
@@ -128503,6 +129333,62 @@ export declare class QuotaSettings {
   });
 }
 
+export declare class QuotaShare_QuotaShareCapacityLimit {
+  constructor(props: {
+    /** The unit of compute capacity for the capacityLimit. */
+    CapacityUnit: string;
+    /** The maximum capacity available for the quota share. This value represents the maximum amount of resources that can be allocated to jobs in the quota share without borrowing */
+    MaxCapacity: number;
+  });
+}
+
+export declare class QuotaShare_QuotaSharePreemptionConfiguration {
+  constructor(props: {
+    /** Whether preemption is enabled within the quota share. */
+    InSharePreemption: "DISABLED" | "ENABLED";
+  });
+}
+
+export declare class QuotaShare_QuotaShareResourceSharingConfiguration {
+  constructor(props: {
+    /** The resource sharing strategy. */
+    Strategy: "LEND" | "LEND_AND_BORROW" | "RESERVE";
+    /** The maximum amount of compute capacity that can be borrowed. Use -1 for unlimited borrowing. */
+    BorrowLimit?: number;
+  });
+}
+
+export declare class QuotaShareCapacityLimit {
+  constructor(props: {
+    /** The unit of compute capacity for the capacityLimit. */
+    CapacityUnit: string;
+    /** The maximum capacity available for the quota share. This value represents the maximum amount of resources that can be allocated to jobs in the quota share without borrowing */
+    MaxCapacity: number;
+  });
+}
+
+export declare class QuotaSharePolicy {
+  constructor(props: {
+    IdleResourceAssignmentStrategy?: "FIFO";
+  });
+}
+
+export declare class QuotaSharePreemptionConfiguration {
+  constructor(props: {
+    /** Whether preemption is enabled within the quota share. */
+    InSharePreemption: "DISABLED" | "ENABLED";
+  });
+}
+
+export declare class QuotaShareResourceSharingConfiguration {
+  constructor(props: {
+    /** The resource sharing strategy. */
+    Strategy: "LEND" | "LEND_AND_BORROW" | "RESERVE";
+    /** The maximum amount of compute capacity that can be borrowed. Use -1 for unlimited borrowing. */
+    BorrowLimit?: number;
+  });
+}
+
 export declare class R53ResourceRecord {
   constructor(props: {
     /** The DNS target domain name. */
@@ -130384,19 +131270,6 @@ export declare class Relevance {
   });
 }
 
-export declare class RemediationConfiguration_ExecutionControls {
-  constructor(props: {
-    SsmControls?: RemediationConfiguration_SsmControls;
-  });
-}
-
-export declare class RemediationConfiguration_SsmControls {
-  constructor(props: {
-    ConcurrentExecutionRatePercentage?: number;
-    ErrorPercentage?: number;
-  });
-}
-
 export declare class RemixSettings {
   constructor(props: {
     ChannelMappings?: MediaLiveChannel_AudioChannelMapping[];
@@ -130415,7 +131288,7 @@ export declare class RemoteAccess {
 export declare class RemoteNetworkConfig {
   constructor(props: {
     /** Network configuration of nodes run on-premises with EKS Hybrid Nodes. */
-    RemoteNodeNetworks: any;
+    RemoteNodeNetworks?: any;
     /** Network configuration of pods run on-premises with EKS Hybrid Nodes. */
     RemotePodNetworks?: any;
   });
@@ -130621,6 +131494,7 @@ export declare class ReplicationConfiguration_RepositoryFilter {
 
 export declare class ReplicationGroup_CloudWatchLogsDestinationDetails {
   constructor(props: {
+    /** The name of the CloudWatch Logs log group. */
     LogGroup: string;
   });
 }
@@ -130632,8 +131506,18 @@ export declare class ReplicationGroup_DestinationDetails {
   });
 }
 
+export declare class ReplicationGroup_Endpoint {
+  constructor(props: {
+    /** The DNS hostname of the cache node. */
+    Address?: string;
+    /** The port number that the cache engine is listening on. */
+    Port?: string;
+  });
+}
+
 export declare class ReplicationGroup_KinesisFirehoseDestinationDetails {
   constructor(props: {
+    /** The name of the Kinesis Data Firehose delivery stream. */
     DeliveryStream: string;
   });
 }
@@ -130641,25 +131525,35 @@ export declare class ReplicationGroup_KinesisFirehoseDestinationDetails {
 export declare class ReplicationGroup_LogDeliveryConfigurationRequest {
   constructor(props: {
     DestinationDetails: ReplicationGroup_DestinationDetails;
+    /** Specify either CloudWatch Logs or Kinesis Data Firehose as the destination type. Valid values are either cloudwatch-logs or kinesis-firehose. */
     DestinationType: string;
+    /** Valid values are either json or text. */
     LogFormat: string;
+    /** Valid value is either slow-log, which refers to slow-log or engine-log. */
     LogType: string;
   });
 }
 
 export declare class ReplicationGroup_NodeGroupConfiguration {
   constructor(props: {
+    /** Either the ElastiCache for Redis supplied 4-digit id or a user supplied id for the node group these configuration values apply to. */
     NodeGroupId?: string;
+    /** The Availability Zone where the primary node of this node group (shard) is launched. */
     PrimaryAvailabilityZone?: string;
+    /** A list of Availability Zones to be used for the read replicas. The number of Availability Zones in this list must match the value of ReplicaCount or ReplicasPerNodeGroup if not specified. */
     ReplicaAvailabilityZones?: string[];
+    /** The number of read replica nodes in this node group (shard). */
     ReplicaCount?: number;
+    /** A string of comma-separated values where the first set of values are the slot numbers (zero based), and the second set of values are the keyspaces for each slot. The following example specifies three slots (numbered 0, 1, and 2): 0,1,2,0-4999,5000-9999,10000-16,383. */
     Slots?: string;
   });
 }
 
 export declare class ReplicationGroup_Tag {
   constructor(props: {
+    /** The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. */
     Key: string;
+    /** The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. */
     Value: string;
   });
 }
@@ -131136,6 +132030,12 @@ export declare class RequiredFieldInfo {
   });
 }
 
+export declare class ReservedCapacityOptionsRequest {
+  constructor(props: {
+    ReservationTypes?: "interruptible-capacity-reservation"[];
+  });
+}
+
 export declare class ResetTimer {
   constructor(props: {
     /** The name of the timer to reset. */
@@ -132682,6 +133582,13 @@ export declare class Route {
   });
 }
 
+export declare class Route53GlobalResolverFirewallDomainList_Tag {
+  constructor(props: {
+    Key: string;
+    Value: string;
+  });
+}
+
 export declare class Route53HealthCheckConfiguration {
   constructor(props: {
     HostedZoneId: string;
@@ -132772,6 +133679,15 @@ export declare class Route53RecoveryReadinessResourceSet_TargetResource {
   });
 }
 
+export declare class Route53ResolverFirewallDomainList_Tag {
+  constructor(props: {
+    /** The key name of the tag. You can specify a value that is 1 to 127 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. */
+    Key: string;
+    /** The value for the tag. You can specify a value that is 1 to 255 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. */
+    Value: string;
+  });
+}
+
 export declare class Route53ResourceRecordSet {
   constructor(props: {
     RecordSetIdentifier?: string;
@@ -134147,15 +135063,6 @@ export declare class S3DestinationProperties {
   });
 }
 
-export declare class S3Encryption {
-  constructor(props: {
-    /** Encryption mode for encrypting artifacts when uploading to S3. Valid values: SSE_S3 and SSE_KMS. */
-    EncryptionMode?: string;
-    /** KMS key Arn for encrypting artifacts when uploading to S3. You must specify KMS key Arn for SSE_KMS encryption mode only. */
-    KmsKeyArn?: string;
-  });
-}
-
 export declare class S3EncryptionConfiguration {
   constructor(props: {
     /** The S3 encryption option. */
@@ -136875,6 +137782,12 @@ export declare class SchedulingPolicy_FairsharePolicy {
   });
 }
 
+export declare class SchedulingPolicy_QuotaSharePolicy {
+  constructor(props: {
+    IdleResourceAssignmentStrategy?: "FIFO";
+  });
+}
+
 export declare class SchedulingPolicy_ShareAttributes {
   constructor(props: {
     ShareIdentifier?: string;
@@ -141757,15 +142670,6 @@ export declare class SpotMaintenanceStrategies {
   });
 }
 
-export declare class SpotMarketOptions {
-  constructor(props: {
-    InstanceInterruptionBehavior?: "hibernate" | "stop";
-    MaxPrice?: string;
-    SpotInstanceType?: "one-time" | "persistent";
-    ValidUntilUtc?: string;
-  });
-}
-
 export declare class SpotOptions {
   constructor(props: {
     /** Deprecated. */
@@ -142106,13 +143010,6 @@ export declare class SSMContactsPlan_Targets {
   });
 }
 
-export declare class SsmControls {
-  constructor(props: {
-    ConcurrentExecutionRatePercentage?: number;
-    ErrorPercentage?: number;
-  });
-}
-
 export declare class SSMLMessage {
   constructor(props: {
     Value: string;
@@ -144351,7 +145248,7 @@ export declare class TargetAddress {
 export declare class TargetCapacitySpecificationRequest {
   constructor(props: {
     TotalTargetCapacity: number;
-    DefaultTargetCapacityType?: "on-demand" | "spot";
+    DefaultTargetCapacityType?: "on-demand" | "reserved-capacity" | "spot";
     OnDemandTargetCapacity?: number;
     SpotTargetCapacity?: number;
     TargetCapacityUnitType?: "memory-mib" | "units" | "vcpu";
@@ -144463,6 +145360,13 @@ export declare class TargetGroupsConfig {
   });
 }
 
+export declare class TargetRedshiftCatalog {
+  constructor(props: {
+    /** The Amazon Resource Name (ARN) of the catalog resource. */
+    CatalogArn: string;
+  });
+}
+
 export declare class TargetResource {
   constructor(props: {
     NLBResource?: Route53RecoveryReadinessResourceSet_NLBResource;
@@ -147616,6 +148520,49 @@ export declare class Trail_Tag {
   });
 }
 
+export declare class TrainedModelArtifactMaxSize {
+  constructor(props: {
+    Unit: ConfiguredModelAlgorithmAssociation_TrainedModelArtifactMaxSizeUnitType;
+    Value: number;
+  });
+}
+
+export declare class TrainedModelExportsConfigurationPolicy {
+  constructor(props: {
+    FilesToExport: ConfiguredModelAlgorithmAssociation_TrainedModelExportFileType[];
+    MaxSize: ConfiguredModelAlgorithmAssociation_TrainedModelExportsMaxSize;
+  });
+}
+
+export declare class TrainedModelExportsMaxSize {
+  constructor(props: {
+    Unit: ConfiguredModelAlgorithmAssociation_TrainedModelExportsMaxSizeUnitType;
+    Value: number;
+  });
+}
+
+export declare class TrainedModelInferenceJobsConfigurationPolicy {
+  constructor(props: {
+    ContainerLogs?: ConfiguredModelAlgorithmAssociation_LogsConfigurationPolicy[];
+    MaxOutputSize?: ConfiguredModelAlgorithmAssociation_TrainedModelInferenceMaxOutputSize;
+  });
+}
+
+export declare class TrainedModelInferenceMaxOutputSize {
+  constructor(props: {
+    Unit: ConfiguredModelAlgorithmAssociation_TrainedModelInferenceMaxOutputSizeUnitType;
+    Value: number;
+  });
+}
+
+export declare class TrainedModelsConfigurationPolicy {
+  constructor(props: {
+    ContainerLogs?: ConfiguredModelAlgorithmAssociation_LogsConfigurationPolicy[];
+    ContainerMetrics?: ConfiguredModelAlgorithmAssociation_MetricsConfigurationPolicy;
+    MaxArtifactSize?: ConfiguredModelAlgorithmAssociation_TrainedModelArtifactMaxSize;
+  });
+}
+
 export declare class TrainingDataset_ColumnSchema {
   constructor(props: {
     ColumnName: string;
@@ -149726,6 +150673,12 @@ export declare class VectorKnowledgeBaseConfiguration {
   });
 }
 
+export declare class VectorOptions {
+  constructor(props: {
+    ServerlessVectorAcceleration?: OpenSearchServerlessCollection_ServerlessVectorAcceleration;
+  });
+}
+
 export declare class VectorSearchConfiguration {
   constructor(props: {
     /** The vector search dimension */
@@ -151605,6 +152558,8 @@ export declare class VpcInterface {
     NetworkInterfaceIds?: string[];
     /** The type of network adapter that you want MediaConnect to use on this interface. If you don't set this value, it defaults to ENA. */
     NetworkInterfaceType?: "efa" | "ena";
+    /** Key-value pairs that can be used to tag this VPC interface. */
+    Tags?: MediaConnectFlow_Tag[];
   });
 }
 
@@ -154668,13 +155623,6 @@ export declare class WorkspaceInstance_InstanceMaintenanceOptionsRequest {
   });
 }
 
-export declare class WorkspaceInstance_InstanceMarketOptionsRequest {
-  constructor(props: {
-    MarketType?: "capacity-block" | "spot";
-    SpotOptions?: WorkspaceInstance_SpotMarketOptions;
-  });
-}
-
 export declare class WorkspaceInstance_InstanceMetadataOptionsRequest {
   constructor(props: {
     HttpEndpoint?: "disabled" | "enabled";
@@ -154749,15 +155697,6 @@ export declare class WorkspaceInstance_RunInstancesMonitoringEnabled {
   });
 }
 
-export declare class WorkspaceInstance_SpotMarketOptions {
-  constructor(props: {
-    InstanceInterruptionBehavior?: "hibernate" | "stop";
-    MaxPrice?: string;
-    SpotInstanceType?: "one-time" | "persistent";
-    ValidUntilUtc?: string;
-  });
-}
-
 export declare class WorkspaceInstance_Tag {
   constructor(props: {
     Key: string;
@@ -155240,6 +156179,14 @@ export type Accessor_NetworkAccessorType =
   | "POLYGON_MAINNET"
   | "POLYGON_MUMBAI";
 
+export type AccessSource_CRResourceStatus = "CREATING" | "DELETING" | "OPERATIONAL" | "UPDATING";
+
+export type AccessSource_DnsProtocol = "DO53" | "DOH" | "DOT";
+
+export type AccessSource_IpAddressType = "IPV4" | "IPV6";
+
+export type AccessToken_TokenStatus = "CREATING" | "DELETING" | "OPERATIONAL";
+
 export type ActionConnector_ActionConnectorType =
   | "AMAZON_BEDROCK_AGENT_RUNTIME"
   | "AMAZON_BEDROCK_DATA_AUTOMATION_RUNTIME"
@@ -157158,6 +158105,8 @@ export type BedrockAgentCoreGateway_ExceptionLevel = "DEBUG";
 
 export type BedrockAgentCoreGateway_GatewayInterceptionPoint = "REQUEST" | "RESPONSE";
 
+export type BedrockAgentCoreGateway_GatewayPolicyEngineMode = "ENFORCE" | "LOG_ONLY";
+
 export type BedrockAgentCoreGateway_GatewayProtocolType = "MCP";
 
 export type BedrockAgentCoreGateway_GatewayStatus =
@@ -157629,6 +158578,27 @@ export type ConfigurationManager_Status =
 
 export type ConfigurationManager_StatusType = "AsyncExecutions" | "Deployment";
 
+export type ConfiguredModelAlgorithmAssociation_EntityType =
+  | "ALL_PERSONALLY_IDENTIFIABLE_INFORMATION"
+  | "CUSTOM"
+  | "NUMBERS";
+
+export type ConfiguredModelAlgorithmAssociation_LogType = "ALL" | "ERROR_SUMMARY";
+
+export type ConfiguredModelAlgorithmAssociation_NoiseLevelType =
+  | "HIGH"
+  | "LOW"
+  | "MEDIUM"
+  | "NONE";
+
+export type ConfiguredModelAlgorithmAssociation_TrainedModelArtifactMaxSizeUnitType = "GB";
+
+export type ConfiguredModelAlgorithmAssociation_TrainedModelExportFileType = "MODEL" | "OUTPUT";
+
+export type ConfiguredModelAlgorithmAssociation_TrainedModelExportsMaxSizeUnitType = "GB";
+
+export type ConfiguredModelAlgorithmAssociation_TrainedModelInferenceMaxOutputSizeUnitType = "GB";
+
 export type ConfiguredTable_AdditionalAnalyses = "ALLOWED" | "NOT_ALLOWED" | "REQUIRED";
 
 export type ConfiguredTable_AggregateFunctionName =
@@ -158342,6 +159312,21 @@ export type DevOpsGuruNotificationChannel_NotificationMessageType =
   | "NEW_RECOMMENDATION"
   | "SEVERITY_UPGRADED";
 
+export type DnsView_DnsSecValidationType = "DISABLED" | "ENABLED";
+
+export type DnsView_EdnsClientSubnetType = "DISABLED" | "ENABLED";
+
+export type DnsView_FirewallRulesFailOpenType = "DISABLED" | "ENABLED";
+
+export type DnsView_ProfileResourceStatus =
+  | "CREATING"
+  | "DELETING"
+  | "DISABLED"
+  | "DISABLING"
+  | "ENABLING"
+  | "OPERATIONAL"
+  | "UPDATING";
+
 export type ECRRepository_EncryptionType = "AES256" | "KMS" | "KMS_DSSE";
 
 export type ECRRepository_ImageTagMutabilityExclusionFilterType = "WILDCARD";
@@ -158426,6 +159411,8 @@ export type FeatureGroup_ThroughputMode = "OnDemand" | "Provisioned";
 
 export type FeatureGroup_Unit = "Days" | "Hours" | "Minutes" | "Seconds" | "Weeks";
 
+export type Feed_OutputStatus = "DISABLED" | "ENABLED";
+
 export type FHIRDatastore_DatastoreStatus = "ACTIVE" | "CREATING" | "DELETED" | "DELETING";
 
 export type FHIRDatastore_DatastoreTypeVersion = "R4";
@@ -158449,6 +159436,18 @@ export type FirewallPolicy_RuleOrder = "DEFAULT_ACTION_ORDER" | "STRICT_ORDER";
 
 export type FirewallPolicy_StreamExceptionPolicy = "CONTINUE" | "DROP" | "REJECT";
 
+export type FirewallRule_BlockOverrideDnsQueryType = "CNAME";
+
+export type FirewallRule_ConfidenceThreshold = "HIGH" | "LOW" | "MEDIUM";
+
+export type FirewallRule_CRResourceStatus = "CREATING" | "DELETING" | "OPERATIONAL" | "UPDATING";
+
+export type FirewallRule_DnsAdvancedProtection = "DGA" | "DICTIONARY_DGA" | "DNS_TUNNELING";
+
+export type FirewallRule_FirewallBlockResponse = "NODATA" | "NXDOMAIN" | "OVERRIDE";
+
+export type FirewallRule_FirewallRuleAction = "ALERT" | "ALLOW" | "BLOCK";
+
 export type FlowAlias_ConcurrencyType = "Automatic" | "Manual";
 
 export type FlowOutput_FlowTransitEncryptionKeyType = "AUTOMATIC" | "SECRETS_MANAGER";
@@ -158570,6 +159569,10 @@ export type GatewayTarget_TargetStatus =
 
 export type GeofenceCollection_PricingPlan = "RequestBasedUsage";
 
+export type GlobalResolver_CRResourceStatus = "CREATING" | "DELETING" | "OPERATIONAL" | "UPDATING";
+
+export type GlobalResolver_GlobalResolverIpAddressType = "DUAL_STACK" | "IPV4";
+
 export type GrafanaWorkspace_AccountAccessType = "CURRENT_ACCOUNT" | "ORGANIZATION";
 
 export type GrafanaWorkspace_AuthenticationProviderTypes = "AWS_SSO" | "SAML";
@@ -158693,6 +159696,11 @@ export type HealthImagingDatastore_DatastoreStatus =
   | "DELETED"
   | "DELETING";
 
+export type HostedZoneAssociation_HostedZoneAssociationStatus =
+  | "CREATING"
+  | "DELETING"
+  | "OPERATIONAL";
+
 export type HoursOfOperation_OverrideType = "CLOSED" | "OPEN" | "STANDARD";
 
 export type HoursOfOperation_RecurrenceFrequency = "MONTHLY" | "WEEKLY" | "YEARLY";
@@ -159286,8 +160294,14 @@ export type Map_PricingPlan = "RequestBasedUsage";
 
 export type MatchingWorkflow_ResolutionType = "ML_MATCHING" | "PROVIDER" | "RULE_MATCHING";
 
+export type MediaConnectFlow_EncodingProfile =
+  | "CONTRIBUTION_H264_DEFAULT"
+  | "DISTRIBUTION_H264_DEFAULT";
+
 export type MediaConnectFlow_FlowTransitEncryptionKeyType = "AUTOMATIC" | "SECRETS_MANAGER";
 
+export type MediaConnectFlow_NdiState = "DISABLED" | "ENABLED";
+
 export type MediaLiveCluster_ClusterState =
   | "ACTIVE"
   | "CREATE_FAILED"
@@ -159580,6 +160594,11 @@ export type OpenSearchServerlessCollection_CollectionType =
   | "TIMESERIES"
   | "VECTORSEARCH";
 
+export type OpenSearchServerlessCollection_ServerlessVectorAcceleration =
+  | "ALLOWED"
+  | "DISABLED"
+  | "ENABLED";
+
 export type OpenSearchServerlessCollection_StandbyReplicas = "DISABLED" | "ENABLED";
 
 export type OpenSearchServerlessLifecyclePolicy_LifecyclePolicyType = "retention";
@@ -161213,6 +162232,12 @@ export type RolesAnywhereProfile_CertificateField = "x509Issuer" | "x509SAN" | "
 
 export type Rotation_DayOfWeek = "FRI" | "MON" | "SAT" | "SUN" | "THU" | "TUE" | "WED";
 
+export type Route53GlobalResolverFirewallDomainList_CRResourceStatus =
+  | "CREATING"
+  | "DELETING"
+  | "OPERATIONAL"
+  | "UPDATING";
+
 export type RouteCalculator_PricingPlan = "RequestBasedUsage";
 
 export type RouterInput_Day =
@@ -162069,6 +163094,10 @@ export type TaskTemplate_FieldType =
 
 export type TaskTemplate_Status = "ACTIVE" | "INACTIVE";
 
+export type TelemetryEnrichment_Scope = "ACCOUNT";
+
+export type TelemetryEnrichment_Status = "IMPAIRED" | "RUNNING" | "STOPPED";
+
 export type TelemetryPipelines_TelemetryPipelineStatus =
   | "ACTIVE"
   | "CREATE_FAILED"
@@ -162216,6 +163245,7 @@ export type TransferUser_HomeDirectoryType = "LOGICAL" | "PATH";
 export type TransferUser_MapType = "DIRECTORY" | "FILE";
 
 export type TransitGatewayMeteringPolicyEntry_TransitGatewayAttachmentResourceType =
+  | "client-vpn"
   | "direct-connect-gateway"
   | "network-function"
   | "peering"