@intentius/chant-lexicon-aws 0.1.13 → 0.1.15

package/dist/types/index.d.ts

@@ -695,7 +695,9 @@ export declare class Alarm {
     Dimensions?: Alarm_Dimension[];
     /** Used only for alarms based on percentiles. If ``ignore``, the alarm state does not change during periods with too few data points to be statistically significant. If ``evaluate`` or this parameter is not used, the alarm is always evaluated and possibly changes state no matter how many data points are available. */
     EvaluateLowSampleCountPercentile?: string;
+    /** The evaluation criteria for the alarm. */
     EvaluationCriteria?: Alarm_EvaluationCriteria;
+    /** The frequency, in seconds, at which the alarm is evaluated. */
     EvaluationInterval?: number;
     /** The number of periods over which data is compared to the specified threshold. If you are setting an alarm that requires that a number of consecutive data points be breaching to trigger the alarm, this value specifies that number. If you are setting an "M out of N" alarm, this value is the N, and ``DatapointsToAlarm`` is the M.
  For more information, see [Evaluating an Alarm](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/AlarmThatSendsEmail.html#alarm-evaluation) in the *User Guide*. */
@@ -1524,6 +1526,12 @@ export declare class ApiKeyCredentialProvider {
     ApiKey?: string;
     /** The ARN of the API key secret in AWS Secrets Manager */
     ApiKeySecretArn?: ApiKeyCredentialProvider_ApiKeySecretArn;
+    /** Configuration for a customer-provided secret containing the API key */
+    ApiKeySecretConfig?: ApiKeyCredentialProvider_SecretReference;
+    /** The JSON key within the secret that contains the API key value */
+    ApiKeySecretJsonKey?: string;
+    /** The source of the API key secret. Use MANAGED for service-managed secrets or EXTERNAL for customer-provided secrets. */
+    ApiKeySecretSource?: "EXTERNAL" | "MANAGED";
     /** The timestamp when the credential provider was created */
     CreatedTime?: string;
     /** The Amazon Resource Name (ARN) of the API key credential provider */
@@ -1534,6 +1542,7 @@ export declare class ApiKeyCredentialProvider {
     Tags?: ApiKeyCredentialProvider_Tag[];
   }, attributes?: CFResourceAttributes);
   readonly ApiKeySecretArn: ApiKeyCredentialProvider_ApiKeySecretArn;
+  readonly ApiKeySecretJsonKey: string;
   readonly CreatedTime: string;
   readonly CredentialProviderArn: string;
   readonly LastUpdatedTime: string;
@@ -2286,14 +2295,20 @@ export declare class AppStreamStack {
 
 export declare class AppStreamUser {
   constructor(props: {
+    /** The authentication type for the user. */
     AuthenticationType: string;
+    /** The email address of the user. */
     UserName: string;
+    /** Returns the Amazon Resource Name (ARN) for the Amazon AppStream User resource. */
+    Arn?: string;
+    /** The first name, or given name, of the user. */
     FirstName?: string;
-    Id?: string;
+    /** The last name, or surname, of the user. */
     LastName?: string;
+    /** The action to take for the welcome email that is sent to a user after the user is created in the user pool. If you specify SUPPRESS, no email is sent. If you specify RESEND, do not specify the first name or last name of the user. If the value is null, the email is sent. */
     MessageAction?: string;
   }, attributes?: CFResourceAttributes);
-  readonly Id: string;
+  readonly Arn: string;
 }
 
 export declare class AppSyncApi {
@@ -3264,7 +3279,6 @@ export declare class BedrockAgentCoreGateway {
   constructor(props: {
     AuthorizerType: BedrockAgentCoreGateway_AuthorizerType;
     Name: string;
-    ProtocolType: BedrockAgentCoreGateway_GatewayProtocolType;
     RoleArn: string;
     AuthorizerConfiguration?: any;
     CreatedAt?: string;
@@ -3277,6 +3291,7 @@ export declare class BedrockAgentCoreGateway {
     KmsKeyArn?: string;
     PolicyEngineConfiguration?: BedrockAgentCoreGateway_GatewayPolicyEngineConfiguration;
     ProtocolConfiguration?: any;
+    ProtocolType?: any;
     Status?: BedrockAgentCoreGateway_GatewayStatus;
     StatusReasons?: string[];
     Tags?: Record<string, unknown>;
@@ -3324,6 +3339,15 @@ export declare class BedrockAgentCorePolicy {
   readonly UpdatedAt: string;
 }
 
+export declare class BedrockAgentCoreResourcePolicy {
+  constructor(props: {
+    /** The resource policy to create or update. */
+    Policy: string;
+    /** The Amazon Resource Name (ARN) of the resource for which to create or update the resource policy. */
+    ResourceArn: string;
+  }, attributes?: CFResourceAttributes);
+}
+
 export declare class BedrockDataSource {
   constructor(props: {
     DataSourceConfiguration: BedrockDataSource_DataSourceConfiguration;
@@ -5689,6 +5713,17 @@ export declare class CollectionGroup {
   readonly Id: string;
 }
 
+export declare class CollectionIndex {
+  constructor(props: {
+    /** The identifier of the collection */
+    Id: string;
+    /** The name of the collection index */
+    IndexName: string;
+    /** The Mappings for the collection index */
+    IndexSchema?: string;
+  }, attributes?: CFResourceAttributes);
+}
+
 export declare class Command {
   constructor(props: {
     /** The unique identifier for the command. */
@@ -7346,7 +7381,7 @@ export declare class CustomDBEngineVersion {
     /** The ARN of a CEV to use as a source for creating a new CEV. You can specify a different Amazon Machine Imagine (AMI) by using either ``Source`` or ``UseAwsProvidedLatestImage``. You can't specify a different JSON manifest when you specify ``SourceCustomDbEngineVersionIdentifier``. */
     SourceCustomDbEngineVersionIdentifier?: string;
     /** A value that indicates the status of a custom engine version (CEV). */
-    Status?: "available" | "inactive" | "inactive-except-restore";
+    Status?: "available" | "inactive" | "inactive-except-restore" | "pending-validation";
     /** A list of tags. For more information, see [Tagging Amazon RDS Resources](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/USER_Tagging.html) in the *Amazon RDS User Guide.* */
     Tags?: CustomDBEngineVersion_Tag[];
     /** Specifies whether to use the latest service-provided Amazon Machine Image (AMI) for the CEV. If you specify ``UseAwsProvidedLatestImage``, you can't also specify ``ImageId``. */
@@ -7659,8 +7694,10 @@ export declare class DaemonTaskDefinition {
     ExecutionRoleArn?: string;
     /** The name of a family that this daemon task definition is registered to. */
     Family?: string;
+    IpcMode?: string;
     /** The amount of memory (in MiB) used by the daemon task. */
     Memory?: string;
+    PidMode?: string;
     Tags?: DaemonTaskDefinition_Tag[];
     /** The short name or full Amazon Resource Name (ARN) of the IAM role that grants containers in the daemon task permission to call Amazon Web Services APIs on your behalf. */
     TaskRoleArn?: string;
@@ -11361,6 +11398,7 @@ export declare class EC2Route {
     NatGatewayId?: string;
     /** The ID of a network interface. */
     NetworkInterfaceId?: string;
+    OdbNetworkArn?: string;
     /** The ID of a transit gateway. */
     TransitGatewayId?: string;
     /** The ID of a VPC endpoint. Supported for Gateway Load Balancer endpoints only. */
@@ -14582,7 +14620,7 @@ export declare class Function {
     Environment?: Function_Environment;
     /** The size of the function's ``/tmp`` directory in MB. The default value is 512, but it can be any whole number between 512 and 10,240 MB. */
     EphemeralStorage?: Function_EphemeralStorage;
-    /** Connection settings for an Amazon EFS file system. To connect a function to a file system, a mount target must be available in every Availability Zone that your function connects to. If your template contains an [AWS::EFS::MountTarget](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-efs-mounttarget.html) resource, you must also specify a ``DependsOn`` attribute to ensure that the mount target is created or updated before the function.
+    /** Connection settings for an Amazon EFS or Amazon S3 Files file system. To connect a function to a file system, a mount target must be available in every Availability Zone that your function connects to. If your template contains an [AWS::EFS::MountTarget](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-efs-mounttarget.html) or [AWS::S3Files::MountTarget](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-s3files-mounttarget.html) resource, you must also specify a ``DependsOn`` attribute to ensure that the mount target is created or updated before the function.
  For more information about using the ``DependsOn`` attribute, see [DependsOn Attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-dependson.html). */
     FileSystemConfigs?: Function_FileSystemConfig[];
     /** The name of the Lambda function, up to 64 characters in length. If you don't specify a name, CFN generates one.
@@ -14944,6 +14982,7 @@ export declare class GatewayTarget {
   constructor(props: {
     Name: string;
     TargetConfiguration: any;
+    AuthorizationData?: any;
     CreatedAt?: string;
     CredentialProviderConfigurations?: GatewayTarget_CredentialProviderConfiguration[];
     Description?: string;
@@ -14951,14 +14990,20 @@ export declare class GatewayTarget {
     GatewayIdentifier?: string;
     LastSynchronizedAt?: string;
     MetadataConfiguration?: GatewayTarget_MetadataConfiguration;
+    PrivateEndpoint?: any;
+    PrivateEndpointManagedResources?: GatewayTarget_ManagedResourceDetails[];
+    ProtocolType?: GatewayTarget_TargetProtocolType;
     Status?: GatewayTarget_TargetStatus;
     StatusReasons?: string[];
     TargetId?: string;
     UpdatedAt?: string;
   }, attributes?: CFResourceAttributes);
+  readonly AuthorizationData: any;
   readonly CreatedAt: string;
   readonly GatewayArn: string;
   readonly LastSynchronizedAt: string;
+  readonly PrivateEndpointManagedResources: GatewayTarget_ManagedResourceDetails[];
+  readonly ProtocolType: GatewayTarget_TargetProtocolType;
   readonly Status: GatewayTarget_TargetStatus;
   readonly StatusReasons: string[];
   readonly TargetId: string;
@@ -16848,10 +16893,14 @@ export declare class InfluxDBInstance {
     InfluxAuthParametersSecretArn?: string;
     /** Configuration for sending logs to customer account from the InfluxDB instance. */
     LogDeliveryConfiguration?: Record<string, unknown>;
+    /** The maintenance schedule for the InfluxDB instance. */
+    MaintenanceSchedule?: InfluxDBInstance_MaintenanceSchedule;
     /** The unique name that is associated with the InfluxDB instance. */
     Name?: string;
     /** Network type of the InfluxDB Instance. */
     NetworkType?: "DUAL" | "IPV4";
+    /** The timestamp of the next scheduled maintenance event. */
+    NextMaintenanceTime?: string;
     /** The organization for the InfluxDB instance. */
     Organization?: string;
     /** The password for the InfluxDB instance. */
@@ -16878,6 +16927,7 @@ export declare class InfluxDBInstance {
   readonly Endpoint: string;
   readonly Id: string;
   readonly InfluxAuthParametersSecretArn: string;
+  readonly NextMaintenanceTime: string;
   readonly SecondaryAvailabilityZone: string;
   readonly Status: "AVAILABLE" | "CREATING" | "DELETED" | "DELETING" | "FAILED" | "MAINTENANCE" | "MODIFYING" | "REBOOTING" | "REBOOT_FAILED" | "UPDATING" | "UPDATING_DEPLOYMENT_TYPE" | "UPDATING_INSTANCE_TYPE";
 }
@@ -17278,6 +17328,8 @@ export declare class IntegrationAssociation {
     IntegrationArn: string;
     IntegrationType: IntegrationAssociation_IntegrationType;
     IntegrationAssociationId?: string;
+    /** The tags used to organize, track, or control access for this resource. */
+    Tags?: IntegrationAssociation_Tag[];
   }, attributes?: CFResourceAttributes);
   readonly IntegrationAssociationId: string;
 }
@@ -18428,6 +18480,8 @@ export declare class Key {
     KeyIdentifier?: string;
     KeyOrigin?: Key_KeyOrigin;
     KeyState?: Key_KeyState;
+    /** The resource-based policy attached to the key, in JSON format. */
+    Policy?: string;
     ReplicationRegions?: string[];
     ReplicationStatus?: Record<string, unknown>;
     Tags?: Key_Tag[];
@@ -18876,6 +18930,7 @@ export declare class LambdaCapacityProvider {
     InstanceRequirements?: LambdaCapacityProvider_InstanceRequirements;
     /** The ARN of the KMS key used to encrypt the capacity provider's resources. */
     KmsKeyArn?: string;
+    PropagateTags?: LambdaCapacityProvider_PropagateTagsConfig;
     State?: LambdaCapacityProvider_CapacityProviderState;
     /** A key-value pair that provides metadata for the capacity provider. */
     Tags?: LambdaCapacityProvider_Tag[];
@@ -19594,6 +19649,26 @@ export declare class LinkAssociation {
   }, attributes?: CFResourceAttributes);
 }
 
+export declare class LinkRoutingRule {
+  constructor(props: {
+    Conditions: LinkRoutingRule_RuleCondition;
+    GatewayId: string;
+    LinkId: string;
+    Priority: number;
+    Arn?: string;
+    CreatedTimestamp?: string;
+    RuleId?: string;
+    Status?: LinkRoutingRule_RuleStatus;
+    Tags?: any;
+    UpdatedTimestamp?: string;
+  }, attributes?: CFResourceAttributes);
+  readonly Arn: string;
+  readonly CreatedTimestamp: string;
+  readonly RuleId: string;
+  readonly Status: LinkRoutingRule_RuleStatus;
+  readonly UpdatedTimestamp: string;
+}
+
 export declare class List {
   constructor(props: {
     /** The name of the list. */
@@ -21317,6 +21392,7 @@ export declare class MediaPackageV2OriginEndpoint {
     /** <p>The size of the window (in seconds) to create a window of the live stream that's available for on-demand viewing. Viewers can start-over or catch-up on content that falls within the window. The maximum startover window is 1,209,600 seconds (14 days).</p> */
     StartoverWindowSeconds?: number;
     Tags?: MediaPackageV2OriginEndpoint_Tag[];
+    UriSeparator?: MediaPackageV2OriginEndpoint_UriSeparator;
   }, attributes?: CFResourceAttributes);
   readonly Arn: string;
   readonly CreatedAt: string;
@@ -23409,6 +23485,10 @@ export declare class OAuth2CredentialProvider {
     CallbackUrl?: string;
     /** The ARN of the client secret in AWS Secrets Manager */
     ClientSecretArn?: OAuth2CredentialProvider_ClientSecretArn;
+    /** The JSON key within the secret that contains the client secret value */
+    ClientSecretJsonKey?: string;
+    /** The source of the client secret */
+    ClientSecretSource?: "EXTERNAL" | "MANAGED";
     /** The timestamp when the credential provider was created */
     CreatedTime?: string;
     /** The Amazon Resource Name (ARN) of the OAuth2 credential provider */
@@ -23424,6 +23504,8 @@ export declare class OAuth2CredentialProvider {
   }, attributes?: CFResourceAttributes);
   readonly CallbackUrl: string;
   readonly ClientSecretArn: OAuth2CredentialProvider_ClientSecretArn;
+  readonly ClientSecretJsonKey: string;
+  readonly ClientSecretSource: "EXTERNAL" | "MANAGED";
   readonly CreatedTime: string;
   readonly CredentialProviderArn: string;
   readonly LastUpdatedTime: string;
@@ -23728,6 +23810,7 @@ Contains between 3 and 64 characters
     CollectionGroupName?: string;
     /** The OpenSearch Dashboards endpoint for the collection. */
     DashboardEndpoint?: string;
+    DeletionProtection?: OpenSearchServerlessCollection_DeletionProtection;
     /** The description of the collection */
     Description?: string;
     EncryptionConfig?: OpenSearchServerlessCollection_EncryptionConfig;
@@ -23810,6 +23893,7 @@ export declare class OpenSearchServiceDomain {
     AdvancedSecurityOptions?: OpenSearchServiceDomain_AdvancedSecurityOptionsInput;
     AIMLOptions?: OpenSearchServiceDomain_AIMLOptions;
     Arn?: string;
+    AutomatedSnapshotPauseOptions?: OpenSearchServiceDomain_AutomatedSnapshotPauseOptions;
     ClusterConfig?: OpenSearchServiceDomain_ClusterConfig;
     CognitoOptions?: OpenSearchServiceDomain_CognitoOptions;
     DeploymentStrategyOptions?: OpenSearchServiceDomain_DeploymentStrategyOptions;
@@ -24645,6 +24729,34 @@ export declare class PatchBaseline {
   readonly Id: string;
 }
 
+export declare class PaymentConnector {
+  constructor(props: {
+    /** The name of the payment connector */
+    ConnectorName: string;
+    ConnectorType: PaymentConnector_PaymentConnectorType;
+    /** The credential provider configurations for the connector */
+    CredentialProviderConfigurations: PaymentConnector_CredentialsProviderConfiguration[];
+    /** The identifier of the parent payment manager */
+    PaymentManagerId: string;
+    /** The timestamp when the connector was created */
+    ConnectorCreatedAt?: string;
+    /** The timestamp when the connector was last updated */
+    ConnectorLastUpdatedAt?: string;
+    ConnectorStatus?: PaymentConnector_PaymentConnectorStatus;
+    /** A description of the payment connector */
+    Description?: string;
+    /** Synthetic ARN for the payment connector (used for engine resolution) */
+    PaymentConnectorArn?: string;
+    /** The unique identifier for the payment connector */
+    PaymentConnectorId?: string;
+  }, attributes?: CFResourceAttributes);
+  readonly ConnectorCreatedAt: string;
+  readonly ConnectorLastUpdatedAt: string;
+  readonly ConnectorStatus: PaymentConnector_PaymentConnectorStatus;
+  readonly PaymentConnectorArn: string;
+  readonly PaymentConnectorId: string;
+}
+
 export declare class PaymentCredentialProvider {
   constructor(props: {
     CredentialProviderVendor: PaymentCredentialProvider_PaymentCredentialProviderVendorType;
@@ -24674,6 +24786,37 @@ export declare class PaymentCryptographyAlias {
   }, attributes?: CFResourceAttributes);
 }
 
+export declare class PaymentManager {
+  constructor(props: {
+    AuthorizerType: PaymentManager_PaymentsAuthorizerType;
+    /** The name of the payment manager */
+    Name: string;
+    /** The ARN of the IAM role for the payment manager */
+    RoleArn: string;
+    AuthorizerConfiguration?: PaymentManager_AuthorizerConfiguration;
+    /** The timestamp when the payment manager was created */
+    CreatedAt?: string;
+    /** A description of the payment manager */
+    Description?: string;
+    /** The timestamp when the payment manager was last updated */
+    LastUpdatedAt?: string;
+    /** The Amazon Resource Name (ARN) of the payment manager */
+    PaymentManagerArn?: string;
+    /** The unique identifier for the payment manager */
+    PaymentManagerId?: string;
+    Status?: PaymentManager_PaymentManagerStatus;
+    /** Tags to assign to the payment manager */
+    Tags?: PaymentManager_Tag[];
+    WorkloadIdentityDetails?: PaymentManager_WorkloadIdentityDetails;
+  }, attributes?: CFResourceAttributes);
+  readonly CreatedAt: string;
+  readonly LastUpdatedAt: string;
+  readonly PaymentManagerArn: string;
+  readonly PaymentManagerId: string;
+  readonly Status: PaymentManager_PaymentManagerStatus;
+  readonly WorkloadIdentityDetails: PaymentManager_WorkloadIdentityDetails;
+}
+
 export declare class PCAConnectorADConnector {
   constructor(props: {
     CertificateAuthorityArn: string;
@@ -25359,6 +25502,13 @@ export declare class PolicyStore {
   readonly PolicyStoreId: string;
 }
 
+export declare class PolicyStoreAlias {
+  constructor(props: {
+    AliasName: string;
+    PolicyStoreId: string;
+  }, attributes?: CFResourceAttributes);
+}
+
 export declare class PolicyTemplate {
   constructor(props: {
     PolicyStoreId: string;
@@ -27618,6 +27768,10 @@ export declare class ReplicationGroup {
     ConfigurationEndPoint?: ReplicationGroup_Endpoint;
     /** Enables data tiering. Data tiering is only supported for replication groups using the r6gd node type. This parameter must be set to true when using r6gd nodes. */
     DataTieringEnabled?: boolean;
+    /** The durability setting for the replication group. Valid values: default, async, sync, disabled. Enabling durability on an existing non-durable cluster or disabling durability on an existing durable cluster is not currently supported and will result in an error; specify the desired durability at create time. The resolved state is returned in EffectiveDurability. */
+    Durability?: "async" | "default" | "disabled" | "sync";
+    /** The resolved durability state of the replication group after resolving the default value. This is a read-only property. */
+    EffectiveDurability?: "async" | "disabled" | "sync";
     /** The name of the cache engine to be used for the clusters in this replication group. */
     Engine?: string;
     /** The version number of the cache engine to be used for the clusters in this replication group. To view the supported cache engine versions, use the DescribeCacheEngineVersions operation. */
@@ -27685,6 +27839,7 @@ export declare class ReplicationGroup {
   readonly ConfigurationEndPoint: ReplicationGroup_Endpoint;
   readonly ConfigurationEndPoint_Address: string;
   readonly ConfigurationEndPoint_Port: string;
+  readonly EffectiveDurability: "async" | "disabled" | "sync";
   readonly PrimaryEndPoint: ReplicationGroup_Endpoint;
   readonly PrimaryEndPoint_Address: string;
   readonly PrimaryEndPoint_Port: string;
@@ -27994,6 +28149,73 @@ export declare class ResilienceHubApp {
   readonly DriftStatus: "Detected" | "NotChecked" | "NotDetected";
 }
 
+export declare class ResilienceHubV2Policy {
+  constructor(props: {
+    /** The name of the policy. */
+    Name: string;
+    /** The number of services associated with this policy. */
+    AssociatedServiceCount?: number;
+    AvailabilitySlo?: ResilienceHubV2Policy_AvailabilitySlo;
+    /** The timestamp when the policy was created. */
+    CreatedAt?: string;
+    DataRecovery?: ResilienceHubV2Policy_DataRecoveryTargets;
+    /** The description of the policy. */
+    Description?: string;
+    /** The KMS key ID for encrypting policy data. */
+    KmsKeyId?: string;
+    MultiAz?: ResilienceHubV2Policy_MultiAzTargets;
+    MultiRegion?: ResilienceHubV2Policy_MultiRegionTargets;
+    /** The ARN of the policy. */
+    PolicyArn?: string;
+    /** Tags assigned to the policy. */
+    Tags?: ResilienceHubV2Policy_Tag[];
+    /** The timestamp when the policy was last updated. */
+    UpdatedAt?: string;
+  }, attributes?: CFResourceAttributes);
+  readonly AssociatedServiceCount: number;
+  readonly CreatedAt: string;
+  readonly PolicyArn: string;
+  readonly UpdatedAt: string;
+}
+
+export declare class ResilienceHubV2Service {
+  constructor(props: {
+    /** The name of the service. */
+    Name: string;
+    /** AWS regions for the service. */
+    Regions: string[];
+    /** Assertions associated with this service. */
+    Assertions?: ResilienceHubV2Service_AssertionDefinition[];
+    /** Systems associated with this service. */
+    AssociatedSystems?: ResilienceHubV2Service_AssociatedSystem[];
+    /** The timestamp when the service was created. */
+    CreatedAt?: string;
+    /** Dependency discovery state. */
+    DependencyDiscovery?: "DISABLED" | "ENABLED" | "INITIALIZING";
+    /** The description of the service. */
+    Description?: string;
+    EffectivePolicyValues?: ResilienceHubV2Service_EffectivePolicyValues;
+    /** Input sources for this service. */
+    InputSources?: ResilienceHubV2Service_InputSourceDefinition[];
+    /** The KMS key ID for encrypting service data. */
+    KmsKeyId?: string;
+    PermissionModel?: ResilienceHubV2Service_PermissionModel;
+    /** The ARN of the resilience policy to associate. */
+    PolicyArn?: string;
+    ReportConfiguration?: ResilienceHubV2Service_ServiceReportConfiguration;
+    /** The ARN of the service. */
+    ServiceArn?: string;
+    /** Tags assigned to the service. */
+    Tags?: ResilienceHubV2Service_Tag[];
+    /** The timestamp when the service was last updated. */
+    UpdatedAt?: string;
+  }, attributes?: CFResourceAttributes);
+  readonly CreatedAt: string;
+  readonly EffectivePolicyValues: ResilienceHubV2Service_EffectivePolicyValues;
+  readonly ServiceArn: string;
+  readonly UpdatedAt: string;
+}
+
 export declare class ResiliencyPolicy {
   constructor(props: {
     Policy: ResiliencyPolicy_PolicyMap;
@@ -28526,11 +28748,16 @@ export declare class ResponderGateway {
     SecurityGroupIds: any;
     SubnetIds: any;
     VpcId: string;
+    AcmCertificateArn?: string;
     Arn?: string;
+    CertificateAssociationStatus?: ResponderGateway_CertificateAssociationStatus;
     CreatedTimestamp?: string;
     Description?: string;
     DomainName?: string;
+    ExternalInboundEndpoint?: any;
     GatewayId?: string;
+    GatewayType?: ResponderGateway_GatewayType;
+    ListenerConfig?: ResponderGateway_ListenerConfig;
     ManagedEndpointConfiguration?: Record<string, unknown>;
     ResponderGatewayStatus?: ResponderGateway_ResponderGatewayStatus;
     Tags?: any;
@@ -28538,7 +28765,9 @@ export declare class ResponderGateway {
     UpdatedTimestamp?: string;
   }, attributes?: CFResourceAttributes);
   readonly Arn: string;
+  readonly CertificateAssociationStatus: ResponderGateway_CertificateAssociationStatus;
   readonly CreatedTimestamp: string;
+  readonly ExternalInboundEndpoint: any;
   readonly GatewayId: string;
   readonly ResponderGatewayStatus: ResponderGateway_ResponderGatewayStatus;
   readonly UpdatedTimestamp: string;
@@ -29915,6 +30144,8 @@ export declare class SageMakerDomain {
     /** The domain name. */
     DomainId?: string;
     DomainSettings?: SageMakerDomain_DomainSettings;
+    /** Indicates whether a home EFS file system is created for the domain. Set to Disabled to skip EFS creation and reduce domain creation time. */
+    HomeEfsFileSystemCreation?: "Disabled" | "Enabled";
     /** The ID of the Amazon Elastic File System (EFS) managed by this Domain. */
     HomeEfsFileSystemId?: string;
     /** SageMaker uses AWS KMS to encrypt the EFS volume attached to the domain with an AWS managed customer master key (CMK) by default. */
@@ -31094,6 +31325,34 @@ export declare class ServiceEnvironment {
   readonly ServiceEnvironmentArn: string;
 }
 
+export declare class ServiceFunction {
+  constructor(props: {
+    /** The criticality of the service function. */
+    Criticality: "PRIMARY" | "SUPPLEMENTAL";
+    /** The name of the service function. */
+    Name: string;
+    /** The ARN of the parent service. */
+    ServiceArn: string;
+    /** The timestamp when the service function was created. */
+    CreatedAt?: string;
+    /** The description of the service function. */
+    Description?: string;
+    /** The number of resources associated with this function. */
+    ResourceCount?: number;
+    /** The server-generated service function ID. */
+    ServiceFunctionId?: string;
+    /** The source of the service function. */
+    Source?: "AI_GENERATED" | "USER";
+    /** The timestamp when the service function was last updated. */
+    UpdatedAt?: string;
+  }, attributes?: CFResourceAttributes);
+  readonly CreatedAt: string;
+  readonly ResourceCount: number;
+  readonly ServiceFunctionId: string;
+  readonly Source: "AI_GENERATED" | "USER";
+  readonly UpdatedAt: string;
+}
+
 export declare class ServiceLevelObjective {
   constructor(props: {
     /** The name of this SLO. */
@@ -31225,8 +31484,8 @@ export declare class ServiceNetworkVpcAssociation {
 
 export declare class ServicePrincipalName {
   constructor(props: {
-    ConnectorArn?: string;
-    DirectoryRegistrationArn?: string;
+    ConnectorArn: string;
+    DirectoryRegistrationArn: string;
   }, attributes?: CFResourceAttributes);
 }
 
@@ -32091,6 +32350,8 @@ export declare class SSOApplication {
     ApplicationArn?: string;
     /** The description information for the Identity Center (SSO) Application */
     Description?: string;
+    /** The ARN of the identity store associated with the Identity Center instance */
+    IdentityStoreArn?: string;
     /** A structure that describes the options for the portal associated with an application */
     PortalOptions?: SSOApplication_PortalOptionsConfiguration;
     /** Specifies whether the application is enabled or disabled */
@@ -32098,6 +32359,7 @@ export declare class SSOApplication {
     Tags?: SSOApplication_Tag[];
   }, attributes?: CFResourceAttributes);
   readonly ApplicationArn: string;
+  readonly IdentityStoreArn: string;
 }
 
 export declare class SSOInstance {
@@ -32230,13 +32492,15 @@ export declare class StackSetConstraint {
 
 export declare class StackUserAssociation {
   constructor(props: {
+    /** The authentication type for the user who is associated with the stack. You must specify USERPOOL. */
     AuthenticationType: string;
+    /** The name of the stack that is associated with the user. */
     StackName: string;
+    /** The name of the user who is associated with the stack. */
     UserName: string;
-    Id?: string;
+    /** Specifies whether a welcome email is sent to a user after the user is created in the user pool. */
     SendEmailNotification?: boolean;
   }, attributes?: CFResourceAttributes);
-  readonly Id: string;
 }
 
 export declare class Standard {
@@ -32957,6 +33221,31 @@ export declare class SyntheticsGroup {
   readonly Id: string;
 }
 
+export declare class System {
+  constructor(props: {
+    /** The name of the system. */
+    Name: string;
+    /** The timestamp when the system was created. */
+    CreatedAt?: string;
+    /** The description of the system. */
+    Description?: string;
+    /** The KMS key ID for encrypting system data. */
+    KmsKeyId?: string;
+    /** The ARN of the system. */
+    SystemArn?: string;
+    /** The system ID. */
+    SystemId?: string;
+    /** Tags assigned to the system. */
+    Tags?: System_Tag[];
+    /** The timestamp when the system was last updated. */
+    UpdatedAt?: string;
+  }, attributes?: CFResourceAttributes);
+  readonly CreatedAt: string;
+  readonly SystemArn: string;
+  readonly SystemId: string;
+  readonly UpdatedAt: string;
+}
+
 export declare class SystemsManagerSAPApplication {
   constructor(props: {
     ApplicationId: string;
@@ -33181,7 +33470,7 @@ export declare class TargetDomain {
     /** Domain name of the target domain */
     TargetDomainName: string;
     /** Verification method for the target domain */
-    VerificationMethod: "DNS_TXT" | "HTTP_ROUTE";
+    VerificationMethod: "DNS_TXT" | "HTTP_ROUTE" | "PRIVATE_VPC";
     /** Timestamp when the target domain was registered */
     CreatedAt?: string;
     /** Tags for the target domain */
@@ -33191,6 +33480,8 @@ export declare class TargetDomain {
     VerificationDetails?: TargetDomain_VerificationDetails;
     /** Current verification status of the registered target domain */
     VerificationStatus?: "FAILED" | "PENDING" | "UNREACHABLE" | "VERIFIED";
+    /** Reason for the current target domain verification status */
+    VerificationStatusReason?: string;
     /** Timestamp when the target domain was last successfully verified */
     VerifiedAt?: string;
   }, attributes?: CFResourceAttributes);
@@ -33198,6 +33489,7 @@ export declare class TargetDomain {
   readonly TargetDomainId: string;
   readonly VerificationDetails: TargetDomain_VerificationDetails;
   readonly VerificationStatus: "FAILED" | "PENDING" | "UNREACHABLE" | "VERIFIED";
+  readonly VerificationStatusReason: string;
   readonly VerifiedAt: string;
 }
 
@@ -33480,8 +33772,8 @@ export declare class TemplateGroupAccessControlEntry {
   constructor(props: {
     AccessRights: TemplateGroupAccessControlEntry_AccessRights;
     GroupDisplayName: string;
-    GroupSecurityIdentifier?: string;
-    TemplateArn?: string;
+    GroupSecurityIdentifier: string;
+    TemplateArn: string;
   }, attributes?: CFResourceAttributes);
 }
 
@@ -34885,6 +35177,28 @@ export declare class UserHierarchyStructure {
   readonly UserHierarchyStructureArn: string;
 }
 
+export declare class UserJourney {
+  constructor(props: {
+    /** The name of the user journey. */
+    Name: string;
+    /** The system ARN or system ID that owns this user journey. */
+    SystemIdentifier: string;
+    /** The timestamp when the user journey was created. */
+    CreatedAt?: string;
+    /** The description of the user journey. */
+    Description?: string;
+    /** The ARN of the resilience policy to associate with this user journey. */
+    PolicyArn?: string;
+    /** The timestamp when the user journey was last updated. */
+    UpdatedAt?: string;
+    /** The server-generated user journey ID. */
+    UserJourneyId?: string;
+  }, attributes?: CFResourceAttributes);
+  readonly CreatedAt: string;
+  readonly UpdatedAt: string;
+  readonly UserJourneyId: string;
+}
+
 export declare class UserPolicy {
   constructor(props: {
     /** The name of the policy document.
@@ -38948,11 +39262,11 @@ export declare class AIPrompt_TextFullAIPromptEditTemplateConfiguration {
 
 export declare class Alarm_AlarmPromQLCriteria {
   constructor(props: {
-    /** The pending period for the alarm. */
+    /** The duration, in seconds, that a contributor must be continuously breaching before it transitions to the ``ALARM`` state. */
     PendingPeriod?: number;
-    /** The PromQL query string. */
+    /** The PromQL query that the alarm evaluates. The query must return a result of vector type. Each entry in the vector result represents an alarm contributor. */
     Query?: string;
-    /** The recovery period for the alarm. */
+    /** The duration, in seconds, that a contributor must continuously not be breaching before it transitions back to the ``OK`` state. */
     RecoveryPeriod?: number;
   });
 }
@@ -38968,6 +39282,7 @@ export declare class Alarm_Dimension {
 
 export declare class Alarm_EvaluationCriteria {
   constructor(props: {
+    /** The PromQL criteria for the alarm evaluation. */
     PromQLCriteria?: Alarm_AlarmPromQLCriteria;
   });
 }
@@ -39434,11 +39749,11 @@ export declare class AlarmMuteRule_Tag {
 
 export declare class AlarmPromQLCriteria {
   constructor(props: {
-    /** The pending period for the alarm. */
+    /** The duration, in seconds, that a contributor must be continuously breaching before it transitions to the ``ALARM`` state. */
     PendingPeriod?: number;
-    /** The PromQL query string. */
+    /** The PromQL query that the alarm evaluates. The query must return a result of vector type. Each entry in the vector result represents an alarm contributor. */
     Query?: string;
-    /** The recovery period for the alarm. */
+    /** The duration, in seconds, that a contributor must continuously not be breaching before it transitions back to the ``OK`` state. */
     RecoveryPeriod?: number;
   });
 }
@@ -45557,6 +45872,15 @@ export declare class ApiKeyCredentialProvider_ApiKeySecretArn {
   });
 }
 
+export declare class ApiKeyCredentialProvider_SecretReference {
+  constructor(props: {
+    /** The JSON key within the secret that contains the credential value */
+    JsonKey: string;
+    /** The ID or ARN of the secret in AWS Secrets Manager */
+    SecretId: string;
+  });
+}
+
 export declare class ApiKeyCredentialProvider_Tag {
   constructor(props: {
     Key: string;
@@ -48329,6 +48653,28 @@ export declare class ARCRegionSwitchPlan_AssociatedAlarm {
   });
 }
 
+export declare class ARCRegionSwitchPlan_AuroraProvisionedScalingConfiguration {
+  constructor(props: {
+    GlobalClusterIdentifier: string;
+    InstanceArns: Record<string, unknown>;
+    RegionDatabaseClusterArns: Record<string, unknown>;
+    CrossAccountRole?: string;
+    ExternalId?: string;
+    TimeoutMinutes?: number;
+  });
+}
+
+export declare class ARCRegionSwitchPlan_AuroraServerlessScalingConfiguration {
+  constructor(props: {
+    GlobalClusterIdentifier: string;
+    RegionDatabaseClusterArns: Record<string, unknown>;
+    CrossAccountRole?: string;
+    ExternalId?: string;
+    TargetPercent?: number;
+    TimeoutMinutes?: number;
+  });
+}
+
 export declare class ARCRegionSwitchPlan_CustomActionLambdaConfiguration {
   constructor(props: {
     Lambdas: ARCRegionSwitchPlan_Lambdas[];
@@ -48499,6 +48845,24 @@ export declare class ARCRegionSwitchPlan_LambdaUngraceful {
   });
 }
 
+export declare class ARCRegionSwitchPlan_NeptuneGlobalDatabaseConfiguration {
+  constructor(props: {
+    Behavior: any;
+    GlobalClusterIdentifier: string;
+    RegionDatabaseClusterArns: Record<string, unknown>;
+    CrossAccountRole?: string;
+    ExternalId?: string;
+    TimeoutMinutes?: number;
+    Ungraceful?: ARCRegionSwitchPlan_NeptuneUngraceful;
+  });
+}
+
+export declare class ARCRegionSwitchPlan_NeptuneUngraceful {
+  constructor(props: {
+    Ungraceful?: ARCRegionSwitchPlan_NeptuneUngracefulBehavior;
+  });
+}
+
 export declare class ARCRegionSwitchPlan_ParallelExecutionBlockConfiguration {
   constructor(props: {
     Steps: ARCRegionSwitchPlan_Step[];
@@ -48717,6 +49081,13 @@ export declare class AssertionAttributes {
   });
 }
 
+export declare class AssertionDefinition {
+  constructor(props: {
+    /** The text of the assertion. */
+    Text: string;
+  });
+}
+
 export declare class AssertionRule {
   constructor(props: {
     /** The routing controls that are part of transactions that are evaluated to determine if a request to change a routing control state is allowed. For example, you might include three routing controls, one for each of three AWS Regions. */
@@ -49137,6 +49508,15 @@ export declare class AssociatedAlarm {
   });
 }
 
+export declare class AssociatedSystem {
+  constructor(props: {
+    /** The system ARN. */
+    SystemArn: string;
+    /** User journey IDs associated with this system. */
+    UserJourneyIds?: string[];
+  });
+}
+
 export declare class AssociationConfig {
   constructor(props: {
     RequestBody?: Record<string, unknown>;
@@ -49260,7 +49640,9 @@ export declare class AthenaTableReference {
 export declare class AtlassianOauth2ProviderConfigInput {
   constructor(props: {
     ClientId: string;
-    ClientSecret: string;
+    ClientSecret?: string;
+    ClientSecretConfig?: OAuth2CredentialProvider_SecretReference;
+    ClientSecretSource?: "EXTERNAL" | "MANAGED";
   });
 }
 
@@ -49454,6 +49836,16 @@ export declare class AudioExtractionConfiguration {
   });
 }
 
+export declare class AudioFillerSettings {
+  constructor(props: {
+    Enabled: boolean;
+    AudioType?: "MELODY_CHIPPER_CHIME" | "MELODY_CURIOUS_CRAWL" | "MELODY_PATIENT_PING" | "MELODY_PONDERING_PONG" | "MELODY_RISING_RIPPLE" | "TYPING_KINETIC_KEYS" | "TYPING_QUIET_QWERTY";
+    MinimumPlayDurationInMilliseconds?: number;
+    ResponseDeliveryDelayInMilliseconds?: number;
+    StartDelayInMilliseconds?: number;
+  });
+}
+
 export declare class AudioHlsRenditionSelection {
   constructor(props: {
     GroupId?: string;
@@ -49672,6 +50064,28 @@ export declare class AuroraPostgreSqlParameters {
   });
 }
 
+export declare class AuroraProvisionedScalingConfiguration {
+  constructor(props: {
+    GlobalClusterIdentifier: string;
+    InstanceArns: Record<string, unknown>;
+    RegionDatabaseClusterArns: Record<string, unknown>;
+    CrossAccountRole?: string;
+    ExternalId?: string;
+    TimeoutMinutes?: number;
+  });
+}
+
+export declare class AuroraServerlessScalingConfiguration {
+  constructor(props: {
+    GlobalClusterIdentifier: string;
+    RegionDatabaseClusterArns: Record<string, unknown>;
+    CrossAccountRole?: string;
+    ExternalId?: string;
+    TargetPercent?: number;
+    TimeoutMinutes?: number;
+  });
+}
+
 export declare class Auth {
   constructor(props: {
     ApiKeyRequired?: boolean;
@@ -49927,6 +50341,14 @@ export declare class AutomatedReasoningPolicyVersion_Tag {
   });
 }
 
+export declare class AutomatedSnapshotPauseOptions {
+  constructor(props: {
+    Enabled: boolean;
+    EndTime?: string;
+    StartTime?: string;
+  });
+}
+
 export declare class AutomaticFailConfiguration {
   constructor(props: {
     /** The referenceId of the target section for auto failure. */
@@ -51082,6 +51504,13 @@ export declare class Av1Settings {
   });
 }
 
+export declare class AvailabilitySlo {
+  constructor(props: {
+    /** Availability target percentage. */
+    Target?: number;
+  });
+}
+
 export declare class AvailabilityZoneAddress {
   constructor(props: {
     /** The allocation IDs of the Elastic IP addresses (EIPs) to be used for handling outbound NAT traffic in this specific Availability Zone. */
@@ -53801,6 +54230,16 @@ export declare class Bot_AudioAndDTMFInputSpecification {
   });
 }
 
+export declare class Bot_AudioFillerSettings {
+  constructor(props: {
+    Enabled: boolean;
+    AudioType?: "MELODY_CHIPPER_CHIME" | "MELODY_CURIOUS_CRAWL" | "MELODY_PATIENT_PING" | "MELODY_PONDERING_PONG" | "MELODY_RISING_RIPPLE" | "TYPING_KINETIC_KEYS" | "TYPING_QUIET_QWERTY";
+    MinimumPlayDurationInMilliseconds?: number;
+    ResponseDeliveryDelayInMilliseconds?: number;
+    StartDelayInMilliseconds?: number;
+  });
+}
+
 export declare class Bot_AudioLogDestination {
   constructor(props: {
     S3Bucket: Bot_S3BucketLogDestination;
@@ -53855,6 +54294,7 @@ export declare class Bot_BotLocale {
   constructor(props: {
     LocaleId: string;
     NluConfidenceThreshold: number;
+    AudioFillerSettings?: Bot_AudioFillerSettings;
     CustomVocabulary?: Bot_CustomVocabulary;
     Description?: string;
     GenerativeAISettings?: Bot_GenerativeAISettings;
@@ -54672,6 +55112,7 @@ export declare class BotLocale {
   constructor(props: {
     LocaleId: string;
     NluConfidenceThreshold: number;
+    AudioFillerSettings?: Bot_AudioFillerSettings;
     CustomVocabulary?: Bot_CustomVocabulary;
     Description?: string;
     GenerativeAISettings?: Bot_GenerativeAISettings;
@@ -56821,6 +57262,7 @@ export declare class CanSignalDecoder {
 
 export declare class Capabilities {
   constructor(props: {
+    AccessAppsNativeDataStore?: CustomPermissions_CapabilityState;
     Action?: CustomPermissions_CapabilityState;
     AddOrRunAnomalyDetectionForAnalyses?: CustomPermissions_CapabilityState;
     AmazonBedrockARSAction?: CustomPermissions_CapabilityState;
@@ -56829,6 +57271,7 @@ export declare class Capabilities {
     AmazonSThreeAction?: CustomPermissions_CapabilityState;
     Analysis?: CustomPermissions_CapabilityState;
     ApproveFlowShareRequests?: CustomPermissions_CapabilityState;
+    Apps?: CustomPermissions_CapabilityState;
     AsanaAction?: CustomPermissions_CapabilityState;
     Automate?: CustomPermissions_CapabilityState;
     BambooHRAction?: CustomPermissions_CapabilityState;
@@ -56843,6 +57286,7 @@ export declare class Capabilities {
     CreateAndUpdateAmazonBedrockFSAction?: CustomPermissions_CapabilityState;
     CreateAndUpdateAmazonBedrockKRSAction?: CustomPermissions_CapabilityState;
     CreateAndUpdateAmazonSThreeAction?: CustomPermissions_CapabilityState;
+    CreateAndUpdateApps?: CustomPermissions_CapabilityState;
     CreateAndUpdateAsanaAction?: CustomPermissions_CapabilityState;
     CreateAndUpdateBambooHRAction?: CustomPermissions_CapabilityState;
     CreateAndUpdateBoxAgentAction?: CustomPermissions_CapabilityState;
@@ -56891,6 +57335,7 @@ export declare class Capabilities {
     CreateChatAgents?: CustomPermissions_CapabilityState;
     CreateDashboardExecutiveSummaryWithQ?: CustomPermissions_CapabilityState;
     CreateSharedFolders?: CustomPermissions_CapabilityState;
+    CreateSpaces?: CustomPermissions_CapabilityState;
     CreateSPICEDataset?: CustomPermissions_CapabilityState;
     Dashboard?: CustomPermissions_CapabilityState;
     EditVisualWithQ?: CustomPermissions_CapabilityState;
@@ -56910,6 +57355,7 @@ export declare class Capabilities {
     HuggingFaceAction?: CustomPermissions_CapabilityState;
     IncludeContentInScheduledReportsEmail?: CustomPermissions_CapabilityState;
     IntercomAction?: CustomPermissions_CapabilityState;
+    InvokeAppsAIInference?: CustomPermissions_CapabilityState;
     JiraAction?: CustomPermissions_CapabilityState;
     KnowledgeBase?: CustomPermissions_CapabilityState;
     LinearAction?: CustomPermissions_CapabilityState;
@@ -56942,10 +57388,12 @@ export declare class Capabilities {
     ShareAmazonBedrockKRSAction?: CustomPermissions_CapabilityState;
     ShareAmazonSThreeAction?: CustomPermissions_CapabilityState;
     ShareAnalyses?: CustomPermissions_CapabilityState;
+    ShareApps?: CustomPermissions_CapabilityState;
     ShareAsanaAction?: CustomPermissions_CapabilityState;
     ShareBambooHRAction?: CustomPermissions_CapabilityState;
     ShareBoxAgentAction?: CustomPermissions_CapabilityState;
     ShareCanvaAgentAction?: CustomPermissions_CapabilityState;
+    ShareChatAgents?: CustomPermissions_CapabilityState;
     ShareComprehendAction?: CustomPermissions_CapabilityState;
     ShareComprehendMedicalAction?: CustomPermissions_CapabilityState;
     ShareConfluenceAction?: CustomPermissions_CapabilityState;
@@ -56984,6 +57432,7 @@ export declare class Capabilities {
     ShareSharePointAction?: CustomPermissions_CapabilityState;
     ShareSlackAction?: CustomPermissions_CapabilityState;
     ShareSmartsheetAction?: CustomPermissions_CapabilityState;
+    ShareSpaces?: CustomPermissions_CapabilityState;
     ShareTextractAction?: CustomPermissions_CapabilityState;
     ShareZendeskAction?: CustomPermissions_CapabilityState;
     SlackAction?: CustomPermissions_CapabilityState;
@@ -57635,7 +58084,9 @@ export declare class CdiInputSpecification {
 
 export declare class CdnAuthConfiguration {
   constructor(props: {
+    /** <p>The ARN for the secret in Secrets Manager that your CDN uses for authorization to access the endpoint.</p> */
     CdnIdentifierSecretArns: string[];
+    /** <p>The ARN for the IAM role that gives MediaPackage read access to Secrets Manager and KMS for CDN authorization.</p> */
     SecretsRoleArn: string;
   });
 }
@@ -59824,16 +60275,18 @@ export declare class ClusterInstanceGroup {
     /** The number of instances you specified to add to the instance group of a SageMaker HyperPod cluster. */
     InstanceCount: number;
     InstanceGroupName: string;
-    InstanceType: string;
     CapacityRequirements?: SageMakerCluster_ClusterCapacityRequirements;
     /** The number of instances that are currently in the instance group of a SageMaker HyperPod cluster. */
     CurrentCount?: number;
     ImageId?: string;
+    InstanceRequirements?: SageMakerCluster_InstanceRequirements;
     InstanceStorageConfigs?: any;
+    InstanceType?: string;
     KubernetesConfig?: SageMakerCluster_ClusterKubernetesConfig;
     LifeCycleConfig?: SageMakerCluster_ClusterLifeCycleConfig;
     /** The minimum number of instances required for the instance group to be InService. MinInstanceCount must be less than or equal to InstanceCount. */
     MinInstanceCount?: number;
+    NetworkInterface?: SageMakerCluster_ClusterNetworkInterface;
     OnStartDeepHealthChecks?: any;
     OverrideVpcConfig?: SageMakerCluster_VpcConfig;
     ScheduledUpdateConfig?: SageMakerCluster_ScheduledUpdateConfig;
@@ -59880,6 +60333,13 @@ export declare class ClusterLogging {
   });
 }
 
+export declare class ClusterNetworkInterface {
+  constructor(props: {
+    /** The type of network interface. */
+    InterfaceType: "efa" | "efa-only";
+  });
+}
+
 export declare class ClusterNetworkSettings {
   constructor(props: {
     /** Default value if the customer does not define it in channel Output API */
@@ -60021,7 +60481,6 @@ export declare class Code {
     S3Bucket?: string;
     /** The Amazon S3 key of the deployment package. */
     S3Key?: string;
-    S3ObjectStorageMode?: "COPY" | "REFERENCE";
     /** For versioned objects, the version of the deployment package object to use. */
     S3ObjectVersion?: string;
     /** The ARN of the KMSlong (KMS) customer managed key that's used to encrypt your function's .zip deployment package. If you don't provide a customer managed key, Lambda uses an [owned key](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#aws-owned-cmk). */
@@ -60920,9 +61379,13 @@ export declare class CoinbaseCdpConfigurationInput {
     /** The Coinbase CDP API key ID */
     ApiKeyId: string;
     /** The Coinbase CDP API key secret */
-    ApiKeySecret: string;
+    ApiKeySecret?: string;
+    ApiKeySecretConfig?: PaymentCredentialProvider_SecretReference;
+    ApiKeySecretSource?: PaymentCredentialProvider_SecretSourceType;
     /** The Coinbase CDP wallet secret */
     WalletSecret?: string;
+    WalletSecretConfig?: PaymentCredentialProvider_SecretReference;
+    WalletSecretSource?: PaymentCredentialProvider_SecretSourceType;
   });
 }
 
@@ -60931,7 +61394,13 @@ export declare class CoinbaseCdpConfigurationOutput {
     /** The Coinbase CDP API key ID */
     ApiKeyId: string;
     ApiKeySecretArn: PaymentCredentialProvider_SecretInfo;
+    /** The JSON key within the secret that contains the API key secret value */
+    ApiKeySecretJsonKey?: string;
+    ApiKeySecretSource?: PaymentCredentialProvider_SecretSourceType;
     WalletSecretArn?: PaymentCredentialProvider_SecretInfo;
+    /** The JSON key within the secret that contains the wallet secret value */
+    WalletSecretJsonKey?: string;
+    WalletSecretSource?: PaymentCredentialProvider_SecretSourceType;
   });
 }
 
@@ -63364,6 +63833,7 @@ export declare class ConnectCampaignsV2Campaign_LocalTimeZoneConfig {
   constructor(props: {
     DefaultTimeZone?: string;
     LocalTimeZoneDetection?: any;
+    LocalTimeZoneDetectionScope?: ConnectCampaignsV2Campaign_LocalTimeZoneDetectionScope;
   });
 }
 
@@ -66149,6 +66619,13 @@ export declare class CredentialProviderConfiguration {
   });
 }
 
+export declare class CredentialsProviderConfiguration {
+  constructor(props: {
+    CoinbaseCDP?: PaymentConnector_PaymentCredentialProviderConfiguration;
+    StripePrivy?: PaymentConnector_PaymentCredentialProviderConfiguration;
+  });
+}
+
 export declare class CreditSpecification {
   constructor(props: {
     /** The credit option for CPU usage of a T instance.
@@ -66223,6 +66700,15 @@ export declare class CrossAccountConfiguration {
   });
 }
 
+export declare class CrossAccountRoleConfiguration {
+  constructor(props: {
+    /** ARN of the cross-account IAM role. */
+    CrossAccountRoleArn: string;
+    /** External ID for cross-account access. */
+    ExternalId?: string;
+  });
+}
+
 export declare class CrossChannelBehavior {
   constructor(props: {
     BehaviorType: RoutingProfile_BehaviorType;
@@ -67285,10 +67771,15 @@ export declare class CustomMetric_Tag {
 export declare class CustomOauth2ProviderConfigInput {
   constructor(props: {
     OauthDiscovery: OAuth2CredentialProvider_Oauth2Discovery;
+    /** The client authentication method to use when authenticating with the token endpoint */
+    ClientAuthenticationMethod?: "AWS_IAM_ID_TOKEN_JWT" | "CLIENT_SECRET_BASIC" | "CLIENT_SECRET_POST";
     /** The client ID for the custom OAuth2 provider */
     ClientId?: string;
     /** The client secret for the custom OAuth2 provider */
     ClientSecret?: string;
+    ClientSecretConfig?: OAuth2CredentialProvider_SecretReference;
+    /** The source of the client secret */
+    ClientSecretSource?: "EXTERNAL" | "MANAGED";
     OnBehalfOfTokenExchangeConfig?: OAuth2CredentialProvider_OnBehalfOfTokenExchangeConfig;
   });
 }
@@ -67349,6 +67840,7 @@ export declare class CustomPayload {
 
 export declare class CustomPermissions_Capabilities {
   constructor(props: {
+    AccessAppsNativeDataStore?: CustomPermissions_CapabilityState;
     Action?: CustomPermissions_CapabilityState;
     AddOrRunAnomalyDetectionForAnalyses?: CustomPermissions_CapabilityState;
     AmazonBedrockARSAction?: CustomPermissions_CapabilityState;
@@ -67357,6 +67849,7 @@ export declare class CustomPermissions_Capabilities {
     AmazonSThreeAction?: CustomPermissions_CapabilityState;
     Analysis?: CustomPermissions_CapabilityState;
     ApproveFlowShareRequests?: CustomPermissions_CapabilityState;
+    Apps?: CustomPermissions_CapabilityState;
     AsanaAction?: CustomPermissions_CapabilityState;
     Automate?: CustomPermissions_CapabilityState;
     BambooHRAction?: CustomPermissions_CapabilityState;
@@ -67371,6 +67864,7 @@ export declare class CustomPermissions_Capabilities {
     CreateAndUpdateAmazonBedrockFSAction?: CustomPermissions_CapabilityState;
     CreateAndUpdateAmazonBedrockKRSAction?: CustomPermissions_CapabilityState;
     CreateAndUpdateAmazonSThreeAction?: CustomPermissions_CapabilityState;
+    CreateAndUpdateApps?: CustomPermissions_CapabilityState;
     CreateAndUpdateAsanaAction?: CustomPermissions_CapabilityState;
     CreateAndUpdateBambooHRAction?: CustomPermissions_CapabilityState;
     CreateAndUpdateBoxAgentAction?: CustomPermissions_CapabilityState;
@@ -67419,6 +67913,7 @@ export declare class CustomPermissions_Capabilities {
     CreateChatAgents?: CustomPermissions_CapabilityState;
     CreateDashboardExecutiveSummaryWithQ?: CustomPermissions_CapabilityState;
     CreateSharedFolders?: CustomPermissions_CapabilityState;
+    CreateSpaces?: CustomPermissions_CapabilityState;
     CreateSPICEDataset?: CustomPermissions_CapabilityState;
     Dashboard?: CustomPermissions_CapabilityState;
     EditVisualWithQ?: CustomPermissions_CapabilityState;
@@ -67438,6 +67933,7 @@ export declare class CustomPermissions_Capabilities {
     HuggingFaceAction?: CustomPermissions_CapabilityState;
     IncludeContentInScheduledReportsEmail?: CustomPermissions_CapabilityState;
     IntercomAction?: CustomPermissions_CapabilityState;
+    InvokeAppsAIInference?: CustomPermissions_CapabilityState;
     JiraAction?: CustomPermissions_CapabilityState;
     KnowledgeBase?: CustomPermissions_CapabilityState;
     LinearAction?: CustomPermissions_CapabilityState;
@@ -67470,10 +67966,12 @@ export declare class CustomPermissions_Capabilities {
     ShareAmazonBedrockKRSAction?: CustomPermissions_CapabilityState;
     ShareAmazonSThreeAction?: CustomPermissions_CapabilityState;
     ShareAnalyses?: CustomPermissions_CapabilityState;
+    ShareApps?: CustomPermissions_CapabilityState;
     ShareAsanaAction?: CustomPermissions_CapabilityState;
     ShareBambooHRAction?: CustomPermissions_CapabilityState;
     ShareBoxAgentAction?: CustomPermissions_CapabilityState;
     ShareCanvaAgentAction?: CustomPermissions_CapabilityState;
+    ShareChatAgents?: CustomPermissions_CapabilityState;
     ShareComprehendAction?: CustomPermissions_CapabilityState;
     ShareComprehendMedicalAction?: CustomPermissions_CapabilityState;
     ShareConfluenceAction?: CustomPermissions_CapabilityState;
@@ -67512,6 +68010,7 @@ export declare class CustomPermissions_Capabilities {
     ShareSharePointAction?: CustomPermissions_CapabilityState;
     ShareSlackAction?: CustomPermissions_CapabilityState;
     ShareSmartsheetAction?: CustomPermissions_CapabilityState;
+    ShareSpaces?: CustomPermissions_CapabilityState;
     ShareTextractAction?: CustomPermissions_CapabilityState;
     ShareZendeskAction?: CustomPermissions_CapabilityState;
     SlackAction?: CustomPermissions_CapabilityState;
@@ -68389,6 +68888,7 @@ export declare class DashManifestConfiguration {
   constructor(props: {
     /** <p>A short string that's appended to the endpoint URL. The manifest name creates a unique path to this endpoint. If you don't enter a value, MediaPackage uses the default manifest name, index. </p> */
     ManifestName: string;
+    AvailabilityStartTimeConfiguration?: any;
     /** <p>The base URL to use for retrieving segments.</p> */
     BaseUrls?: MediaPackageV2OriginEndpoint_DashBaseUrl[];
     Compactness?: MediaPackageV2OriginEndpoint_DashCompactness;
@@ -68411,6 +68911,7 @@ export declare class DashManifestConfiguration {
     SubtitleConfiguration?: MediaPackageV2OriginEndpoint_DashSubtitleConfiguration;
     /** <p>The amount of time (in seconds) that the player should be from the end of the manifest.</p> */
     SuggestedPresentationDelaySeconds?: number;
+    UriPathType?: MediaPackageV2OriginEndpoint_UriPathType;
     UtcTiming?: MediaPackageV2OriginEndpoint_DashUtcTiming;
   });
 }
@@ -70342,6 +70843,13 @@ export declare class DataReadCacheConfiguration {
   });
 }
 
+export declare class DataRecoveryTargets {
+  constructor(props: {
+    /** Time between backups in minutes. */
+    TimeBetweenBackupsInMinutes?: number;
+  });
+}
+
 export declare class DataRepositoryAssociation_AutoExportPolicy {
   constructor(props: {
     Events: any;
@@ -75779,6 +76287,13 @@ export declare class DisabledLockingSettings {
   });
 }
 
+export declare class DisasterRecoverySource {
+  constructor(props: {
+    PolicyName?: string;
+    Value?: string;
+  });
+}
+
 export declare class Discoverer_TagsEntry {
   constructor(props: {
     Key: string;
@@ -79259,6 +79774,18 @@ export declare class EdiConfiguration {
   });
 }
 
+export declare class EffectivePolicyValues {
+  constructor(props: {
+    AvailabilitySlo?: ResilienceHubV2Service_SloSource;
+    MultiAzDrApproach?: ResilienceHubV2Service_DisasterRecoverySource;
+    MultiAzRpo?: ResilienceHubV2Service_TargetSource;
+    MultiAzRto?: ResilienceHubV2Service_TargetSource;
+    MultiRegionDrApproach?: ResilienceHubV2Service_DisasterRecoverySource;
+    MultiRegionRpo?: ResilienceHubV2Service_TargetSource;
+    MultiRegionRto?: ResilienceHubV2Service_TargetSource;
+  });
+}
+
 export declare class EFSAccessPoint_AccessPointTag {
   constructor(props: {
     /** The tag key (String). The key can't start with ``aws:``. */
@@ -79856,6 +80383,15 @@ export declare class EksSecret {
   });
 }
 
+export declare class EksSource {
+  constructor(props: {
+    /** ARN of the EKS cluster. */
+    ClusterArn: string;
+    /** EKS namespaces. */
+    Namespaces: string[];
+  });
+}
+
 export declare class EksVolume {
   constructor(props: {
     Name: string;
@@ -82167,6 +82703,7 @@ export declare class EvaluateOnExit {
 
 export declare class EvaluationCriteria {
   constructor(props: {
+    /** The PromQL criteria for the alarm evaluation. */
     PromQLCriteria?: Alarm_AlarmPromQLCriteria;
   });
 }
@@ -87578,7 +88115,6 @@ export declare class Function_Code {
     S3Bucket?: string;
     /** The Amazon S3 key of the deployment package. */
     S3Key?: string;
-    S3ObjectStorageMode?: "COPY" | "REFERENCE";
     /** For versioned objects, the version of the deployment package object to use. */
     S3ObjectVersion?: string;
     /** The ARN of the KMSlong (KMS) customer managed key that's used to encrypt your function's .zip deployment package. If you don't provide a customer managed key, Lambda uses an [owned key](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#aws-owned-cmk). */
@@ -87625,7 +88161,7 @@ export declare class Function_EphemeralStorage {
 
 export declare class Function_FileSystemConfig {
   constructor(props: {
-    /** The Amazon Resource Name (ARN) of the Amazon EFS access point that provides access to the file system. */
+    /** The Amazon Resource Name (ARN) of the Amazon EFS or Amazon S3 Files access point that provides access to the file system. */
     Arn: string;
     /** The path where the function can access the file system, starting with ``/mnt/``. */
     LocalMountPath: string;
@@ -88563,6 +89099,24 @@ export declare class GatewayTarget_IamCredentialProvider {
   });
 }
 
+export declare class GatewayTarget_ManagedResourceDetails {
+  constructor(props: {
+    Domain?: string;
+    ResourceAssociationArn?: string;
+    ResourceGatewayArn?: string;
+  });
+}
+
+export declare class GatewayTarget_ManagedVpcResource {
+  constructor(props: {
+    EndpointIpAddressType: GatewayTarget_EndpointIpAddressType;
+    SubnetIds: string[];
+    VpcIdentifier: string;
+    RoutingDomain?: string;
+    SecurityGroupIds?: string[];
+  });
+}
+
 export declare class GatewayTarget_McpLambdaTargetConfiguration {
   constructor(props: {
     LambdaArn: string;
@@ -88574,6 +89128,7 @@ export declare class GatewayTarget_McpServerTargetConfiguration {
   constructor(props: {
     Endpoint: string;
     ListingMode?: GatewayTarget_McpServerListingMode;
+    McpToolSchema?: any;
   });
 }
 
@@ -88585,6 +89140,13 @@ export declare class GatewayTarget_MetadataConfiguration {
   });
 }
 
+export declare class GatewayTarget_OAuth2AuthorizationData {
+  constructor(props: {
+    AuthorizationUrl: string;
+    UserId?: string;
+  });
+}
+
 export declare class GatewayTarget_OAuthCredentialProvider {
   constructor(props: {
     ProviderArn: string;
@@ -88596,6 +89158,13 @@ export declare class GatewayTarget_OAuthCredentialProvider {
   });
 }
 
+export declare class GatewayTarget_RuntimeTargetConfiguration {
+  constructor(props: {
+    Arn: string;
+    Qualifier?: string;
+  });
+}
+
 export declare class GatewayTarget_S3Configuration {
   constructor(props: {
     BucketOwnerAccountId?: string;
@@ -88844,7 +89413,9 @@ export declare class GitHubLocation {
 export declare class GithubOauth2ProviderConfigInput {
   constructor(props: {
     ClientId: string;
-    ClientSecret: string;
+    ClientSecret?: string;
+    ClientSecretConfig?: OAuth2CredentialProvider_SecretReference;
+    ClientSecretSource?: "EXTERNAL" | "MANAGED";
   });
 }
 
@@ -89832,7 +90403,9 @@ export declare class GoogleDriveConfiguration {
 export declare class GoogleOauth2ProviderConfigInput {
   constructor(props: {
     ClientId: string;
-    ClientSecret: string;
+    ClientSecret?: string;
+    ClientSecretConfig?: OAuth2CredentialProvider_SecretReference;
+    ClientSecretSource?: "EXTERNAL" | "MANAGED";
   });
 }
 
@@ -91550,6 +92123,7 @@ export declare class HlsManifestConfiguration {
     ProgramDateTimeIntervalSeconds?: number;
     ScteHls?: MediaPackageV2OriginEndpoint_ScteHls;
     StartTag?: MediaPackageV2OriginEndpoint_StartTag;
+    UriPathType?: MediaPackageV2OriginEndpoint_UriPathType;
     /** <p>The egress domain URL for stream delivery from MediaPackage.</p> */
     Url?: string;
     /** <p>When enabled, MediaPackage URL-encodes the query string for API requests for HLS child manifests to comply with Amazon Web Services Signature Version 4 (SigV4) signature signing protocol. For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_sigv.html">Amazon Web Services Signature Version 4 for API requests</a> in <i>Identity and Access Management User Guide</i>.</p> */
@@ -93711,9 +94285,11 @@ export declare class IncidentTemplate {
 export declare class IncludedOauth2ProviderConfigInput {
   constructor(props: {
     ClientId: string;
-    ClientSecret: string;
     /** OAuth2 authorization endpoint for your isolated OAuth2 application tenant */
     AuthorizationEndpoint?: string;
+    ClientSecret?: string;
+    ClientSecretConfig?: OAuth2CredentialProvider_SecretReference;
+    ClientSecretSource?: "EXTERNAL" | "MANAGED";
     /** Token issuer of your isolated OAuth2 application tenant */
     Issuer?: string;
     /** OAuth2 token endpoint for your isolated OAuth2 application tenant */
@@ -94117,6 +94693,15 @@ export declare class InfluxDBCluster_Tag {
   });
 }
 
+export declare class InfluxDBInstance_MaintenanceSchedule {
+  constructor(props: {
+    /** The preferred maintenance window in format ddd:HH:MM-ddd:HH:MM. */
+    PreferredMaintenanceWindow: string;
+    /** The IANA timezone identifier for the maintenance schedule. */
+    Timezone: string;
+  });
+}
+
 export declare class InfluxDBInstance_Tag {
   constructor(props: {
     /** The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.  */
@@ -94604,6 +95189,12 @@ export declare class InputSource {
   });
 }
 
+export declare class InputSourceDefinition {
+  constructor(props: {
+    ResourceConfiguration: ResilienceHubV2Service_ResourceConfiguration;
+  });
+}
+
 export declare class InputSourceRequest {
   constructor(props: {
     PasswordParam?: string;
@@ -94622,8 +95213,9 @@ export declare class InputSpecification {
 
 export declare class InputSwitchConfiguration {
   constructor(props: {
-    /** <p>When true, AWS Elemental MediaPackage performs input switching based on the MQCS. Default is true. This setting is valid only when <code>InputType</code> is <code>CMAF</code>.</p> */
+    /** <p>When true, AWS Elemental MediaPackage performs input switching based on the MQCS. Default is false. This setting is valid only when <code>InputType</code> is <code>CMAF</code>.</p> */
     MQCSInputSwitching?: boolean;
+    /** <p>For CMAF inputs, indicates which input MediaPackage should prefer when both inputs have equal MQCS scores. Select <code>1</code> to prefer the first ingest endpoint, or <code>2</code> to prefer the second ingest endpoint. If you don't specify a preferred input, MediaPackage uses its default switching behavior when MQCS scores are equal.</p> */
     PreferredInput?: number;
   });
 }
@@ -95733,6 +96325,15 @@ export declare class IntegratedResource {
   });
 }
 
+export declare class IntegrationAssociation_Tag {
+  constructor(props: {
+    /** The key name of the tag. */
+    Key: string;
+    /** The value for the tag. */
+    Value: string;
+  });
+}
+
 export declare class IntegrationConfig {
   constructor(props: {
     /** Enables continuous synchronization for on-demand data extractions. */
@@ -100232,6 +100833,14 @@ export declare class LambdaCapacityProvider_InstanceRequirements {
   });
 }
 
+export declare class LambdaCapacityProvider_PropagateTagsConfig {
+  constructor(props: {
+    /** A list of tags to explicitly propagate to managed resources. */
+    ExplicitTags?: LambdaCapacityProvider_Tag[];
+    Mode?: LambdaCapacityProvider_PropagateTagsMode;
+  });
+}
+
 export declare class LambdaCapacityProvider_Tag {
   constructor(props: {
     /** The key name of the tag. */
@@ -102294,7 +102903,9 @@ export declare class LinkedChannelSettings {
 export declare class LinkedinOauth2ProviderConfigInput {
   constructor(props: {
     ClientId: string;
-    ClientSecret: string;
+    ClientSecret?: string;
+    ClientSecretConfig?: OAuth2CredentialProvider_SecretReference;
+    ClientSecretSource?: "EXTERNAL" | "MANAGED";
   });
 }
 
@@ -102304,6 +102915,41 @@ export declare class LinkFilter {
   });
 }
 
+export declare class LinkRoutingRule_QueryStringKeyValuePair {
+  constructor(props: {
+    /** Query string key — RFC 3986 unreserved characters. */
+    Key: string;
+    /** Query string value — RFC 3986 unreserved characters. */
+    Value: string;
+  });
+}
+
+export declare class LinkRoutingRule_RuleCondition {
+  constructor(props: {
+    /** Exact host match — RFC 3986 unreserved characters. Mutually exclusive with HostHeaderWildcard. */
+    HostHeader?: string;
+    /** Wildcard host pattern (e.g., *.example.com) — RFC 3986 unreserved characters plus *. Mutually exclusive with HostHeader. */
+    HostHeaderWildcard?: string;
+    /** Exact path match — must start with /. Mutually exclusive with PathPrefix. */
+    PathExact?: string;
+    /** Path prefix matching — strict starts-with, must start with /. Mutually exclusive with PathExact. */
+    PathPrefix?: string;
+    /** Query string key=value pair match (single pair). */
+    QueryStringEquals?: LinkRoutingRule_QueryStringKeyValuePair;
+    /** Query string key presence check (any value accepted). */
+    QueryStringExists?: string;
+  });
+}
+
+export declare class LinkRoutingRule_Tag {
+  constructor(props: {
+    /** The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. */
+    Key: string;
+    /** The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. */
+    Value?: string;
+  });
+}
+
 export declare class LinkSharingConfiguration {
   constructor(props: {
     Permissions?: QuickSightDashboard_ResourcePermission[];
@@ -102566,6 +103212,12 @@ export declare class ListenerCertificate_Certificate {
   });
 }
 
+export declare class ListenerConfig {
+  constructor(props: {
+    Protocols: ResponderGateway_Protocol[];
+  });
+}
+
 export declare class ListenerRule_Action {
   constructor(props: {
     /** The type of action. */
@@ -103197,6 +103849,7 @@ export declare class LocalTimeZoneConfig {
   constructor(props: {
     DefaultTimeZone?: string;
     LocalTimeZoneDetection?: any;
+    LocalTimeZoneDetectionScope?: ConnectCampaignsV2Campaign_LocalTimeZoneDetectionScope;
   });
 }
 
@@ -104173,6 +104826,7 @@ export declare class LowLatencyHlsManifestConfiguration {
     ProgramDateTimeIntervalSeconds?: number;
     ScteHls?: MediaPackageV2OriginEndpoint_ScteHls;
     StartTag?: MediaPackageV2OriginEndpoint_StartTag;
+    UriPathType?: MediaPackageV2OriginEndpoint_UriPathType;
     /** <p>The egress domain URL for stream delivery from MediaPackage.</p> */
     Url?: string;
     /** <p>When enabled, MediaPackage URL-encodes the query string for API requests for LL-HLS child manifests to comply with Amazon Web Services Signature Version 4 (SigV4) signature signing protocol. For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_sigv.html">Amazon Web Services Signature Version 4 for API requests</a> in <i>Identity and Access Management User Guide</i>.</p> */
@@ -104673,6 +105327,15 @@ export declare class MaintenanceOptions {
   });
 }
 
+export declare class MaintenanceSchedule {
+  constructor(props: {
+    /** The preferred maintenance window in format ddd:HH:MM-ddd:HH:MM. */
+    PreferredMaintenanceWindow: string;
+    /** The IANA timezone identifier for the maintenance schedule. */
+    Timezone: string;
+  });
+}
+
 export declare class MaintenanceStrategies {
   constructor(props: {
     CapacityRebalance?: EC2Fleet_CapacityRebalance;
@@ -104995,6 +105658,14 @@ export declare class ManagedQueryResultsConfiguration {
   });
 }
 
+export declare class ManagedResourceDetails {
+  constructor(props: {
+    Domain?: string;
+    ResourceAssociationArn?: string;
+    ResourceGatewayArn?: string;
+  });
+}
+
 export declare class ManagedRuleGroupConfig {
   constructor(props: {
     AWSManagedRulesACFPRuleSet?: WAFv2WebACL_AWSManagedRulesACFPRuleSet;
@@ -105084,6 +105755,16 @@ export declare class ManagedStorageEncryptionConfiguration {
   });
 }
 
+export declare class ManagedVpcResource {
+  constructor(props: {
+    EndpointIpAddressType: GatewayTarget_EndpointIpAddressType;
+    SubnetIds: string[];
+    VpcIdentifier: string;
+    RoutingDomain?: string;
+    SecurityGroupIds?: string[];
+  });
+}
+
 export declare class ManagedWordsConfig {
   constructor(props: {
     Type: Guardrail_ManagedWordsType;
@@ -105692,6 +106373,7 @@ export declare class McpServerTargetConfiguration {
   constructor(props: {
     Endpoint: string;
     ListingMode?: GatewayTarget_McpServerListingMode;
+    McpToolSchema?: any;
   });
 }
 
@@ -106062,6 +106744,40 @@ export declare class MediaConnectGateway_GatewayNetwork {
   });
 }
 
+export declare class MediaConnectRouterContainerSettings {
+  constructor(props: {
+    M2tsSettings?: MediaLiveChannel_M2tsSettings;
+  });
+}
+
+export declare class MediaConnectRouterGroupSettings {
+  constructor(props: {
+    AvailabilityZones?: string[];
+  });
+}
+
+export declare class MediaConnectRouterOutputConnectionMap {
+  constructor(props: {
+    Pipeline0?: string;
+    Pipeline1?: string;
+  });
+}
+
+export declare class MediaConnectRouterOutputDestinationSettings {
+  constructor(props: {
+    EncryptionType?: string;
+    SecretArn?: string;
+  });
+}
+
+export declare class MediaConnectRouterOutputSettings {
+  constructor(props: {
+    ConnectedRouterInputs?: MediaLiveChannel_MediaConnectRouterOutputConnectionMap;
+    ContainerSettings?: MediaLiveChannel_MediaConnectRouterContainerSettings;
+    Destination?: MediaLiveChannel_OutputLocationRef;
+  });
+}
+
 export declare class MediaConvertJobTemplate_AccelerationSettings {
   constructor(props: {
     Mode: string;
@@ -107212,6 +107928,40 @@ export declare class MediaLiveChannel_MaintenanceCreateSettings {
   });
 }
 
+export declare class MediaLiveChannel_MediaConnectRouterContainerSettings {
+  constructor(props: {
+    M2tsSettings?: MediaLiveChannel_M2tsSettings;
+  });
+}
+
+export declare class MediaLiveChannel_MediaConnectRouterGroupSettings {
+  constructor(props: {
+    AvailabilityZones?: string[];
+  });
+}
+
+export declare class MediaLiveChannel_MediaConnectRouterOutputConnectionMap {
+  constructor(props: {
+    Pipeline0?: string;
+    Pipeline1?: string;
+  });
+}
+
+export declare class MediaLiveChannel_MediaConnectRouterOutputDestinationSettings {
+  constructor(props: {
+    EncryptionType?: string;
+    SecretArn?: string;
+  });
+}
+
+export declare class MediaLiveChannel_MediaConnectRouterOutputSettings {
+  constructor(props: {
+    ConnectedRouterInputs?: MediaLiveChannel_MediaConnectRouterOutputConnectionMap;
+    ContainerSettings?: MediaLiveChannel_MediaConnectRouterContainerSettings;
+    Destination?: MediaLiveChannel_OutputLocationRef;
+  });
+}
+
 export declare class MediaLiveChannel_MediaPackageAdditionalDestinations {
   constructor(props: {
     Destination?: MediaLiveChannel_OutputLocationRef;
@@ -107444,6 +108194,7 @@ export declare class MediaLiveChannel_OutputDestination {
   constructor(props: {
     Id?: string;
     LogicalInterfaceNames?: string[];
+    MediaConnectRouterSettings?: MediaLiveChannel_MediaConnectRouterOutputDestinationSettings[];
     MediaPackageSettings?: MediaLiveChannel_MediaPackageOutputDestinationSettings[];
     MultiplexSettings?: MediaLiveChannel_MultiplexProgramChannelDestinationSettings;
     Settings?: MediaLiveChannel_OutputDestinationSettings[];
@@ -107474,6 +108225,7 @@ export declare class MediaLiveChannel_OutputGroupSettings {
     CmafIngestGroupSettings?: MediaLiveChannel_CmafIngestGroupSettings;
     FrameCaptureGroupSettings?: MediaLiveChannel_FrameCaptureGroupSettings;
     HlsGroupSettings?: MediaLiveChannel_HlsGroupSettings;
+    MediaConnectRouterGroupSettings?: MediaLiveChannel_MediaConnectRouterGroupSettings;
     MediaPackageGroupSettings?: MediaLiveChannel_MediaPackageGroupSettings;
     MsSmoothGroupSettings?: MediaLiveChannel_MsSmoothGroupSettings;
     MultiplexGroupSettings?: Record<string, unknown>;
@@ -107503,6 +108255,7 @@ export declare class MediaLiveChannel_OutputSettings {
     CmafIngestOutputSettings?: MediaLiveChannel_CmafIngestOutputSettings;
     FrameCaptureOutputSettings?: MediaLiveChannel_FrameCaptureOutputSettings;
     HlsOutputSettings?: MediaLiveChannel_HlsOutputSettings;
+    MediaConnectRouterOutputSettings?: MediaLiveChannel_MediaConnectRouterOutputSettings;
     MediaPackageOutputSettings?: MediaLiveChannel_MediaPackageOutputSettings;
     MsSmoothOutputSettings?: MediaLiveChannel_MsSmoothOutputSettings;
     MultiplexOutputSettings?: MediaLiveChannel_MultiplexOutputSettings;
@@ -108254,8 +109007,9 @@ export declare class MediaPackageV2Channel_IngestEndpoint {
 
 export declare class MediaPackageV2Channel_InputSwitchConfiguration {
   constructor(props: {
-    /** <p>When true, AWS Elemental MediaPackage performs input switching based on the MQCS. Default is true. This setting is valid only when <code>InputType</code> is <code>CMAF</code>.</p> */
+    /** <p>When true, AWS Elemental MediaPackage performs input switching based on the MQCS. Default is false. This setting is valid only when <code>InputType</code> is <code>CMAF</code>.</p> */
     MQCSInputSwitching?: boolean;
+    /** <p>For CMAF inputs, indicates which input MediaPackage should prefer when both inputs have equal MQCS scores. Select <code>1</code> to prefer the first ingest endpoint, or <code>2</code> to prefer the second ingest endpoint. If you don't specify a preferred input, MediaPackage uses its default switching behavior when MQCS scores are equal.</p> */
     PreferredInput?: number;
   });
 }
@@ -108344,6 +109098,7 @@ export declare class MediaPackageV2OriginEndpoint_DashManifestConfiguration {
   constructor(props: {
     /** <p>A short string that's appended to the endpoint URL. The manifest name creates a unique path to this endpoint. If you don't enter a value, MediaPackage uses the default manifest name, index. </p> */
     ManifestName: string;
+    AvailabilityStartTimeConfiguration?: any;
     /** <p>The base URL to use for retrieving segments.</p> */
     BaseUrls?: MediaPackageV2OriginEndpoint_DashBaseUrl[];
     Compactness?: MediaPackageV2OriginEndpoint_DashCompactness;
@@ -108366,6 +109121,7 @@ export declare class MediaPackageV2OriginEndpoint_DashManifestConfiguration {
     SubtitleConfiguration?: MediaPackageV2OriginEndpoint_DashSubtitleConfiguration;
     /** <p>The amount of time (in seconds) that the player should be from the end of the manifest.</p> */
     SuggestedPresentationDelaySeconds?: number;
+    UriPathType?: MediaPackageV2OriginEndpoint_UriPathType;
     UtcTiming?: MediaPackageV2OriginEndpoint_DashUtcTiming;
   });
 }
@@ -108470,6 +109226,7 @@ export declare class MediaPackageV2OriginEndpoint_HlsManifestConfiguration {
     ProgramDateTimeIntervalSeconds?: number;
     ScteHls?: MediaPackageV2OriginEndpoint_ScteHls;
     StartTag?: MediaPackageV2OriginEndpoint_StartTag;
+    UriPathType?: MediaPackageV2OriginEndpoint_UriPathType;
     /** <p>The egress domain URL for stream delivery from MediaPackage.</p> */
     Url?: string;
     /** <p>When enabled, MediaPackage URL-encodes the query string for API requests for HLS child manifests to comply with Amazon Web Services Signature Version 4 (SigV4) signature signing protocol. For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_sigv.html">Amazon Web Services Signature Version 4 for API requests</a> in <i>Identity and Access Management User Guide</i>.</p> */
@@ -108490,6 +109247,7 @@ export declare class MediaPackageV2OriginEndpoint_LowLatencyHlsManifestConfigura
     ProgramDateTimeIntervalSeconds?: number;
     ScteHls?: MediaPackageV2OriginEndpoint_ScteHls;
     StartTag?: MediaPackageV2OriginEndpoint_StartTag;
+    UriPathType?: MediaPackageV2OriginEndpoint_UriPathType;
     /** <p>The egress domain URL for stream delivery from MediaPackage.</p> */
     Url?: string;
     /** <p>When enabled, MediaPackage URL-encodes the query string for API requests for LL-HLS child manifests to comply with Amazon Web Services Signature Version 4 (SigV4) signature signing protocol. For more information, see <a href="https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_sigv.html">Amazon Web Services Signature Version 4 for API requests</a> in <i>Identity and Access Management User Guide</i>.</p> */
@@ -108510,6 +109268,8 @@ export declare class MediaPackageV2OriginEndpoint_MssManifestConfiguration {
 
 export declare class MediaPackageV2OriginEndpoint_Scte {
   constructor(props: {
+    /** <p>A list of additional non-Ad SCTE-35 event types to treat as advertisements. When configured, events matching these types produce ad markers (such as <code>SCTE35-OUT</code> and <code>SCTE35-IN</code> in HLS DATERANGE tags) in manifests.</p> <p>Valid values: <code>PROGRAM</code> | <code>CHAPTER</code> | <code>UNSCHEDULED_EVENT</code> | <code>ALTERNATE_CONTENT_OPPORTUNITY</code> | <code>NETWORK</code> </p> <p>If you don't specify any values, the default is empty (only default ad types are used).</p> */
+    CustomAdTypes?: MediaPackageV2OriginEndpoint_CustomAdType[];
     /** <p>The SCTE-35 message types that you want to be treated as ad markers in the output.</p> */
     ScteFilter?: MediaPackageV2OriginEndpoint_ScteFilter[];
     ScteInSegments?: MediaPackageV2OriginEndpoint_ScteInSegments;
@@ -108519,12 +109279,14 @@ export declare class MediaPackageV2OriginEndpoint_Scte {
 export declare class MediaPackageV2OriginEndpoint_ScteDash {
   constructor(props: {
     AdMarkerDash?: MediaPackageV2OriginEndpoint_AdMarkerDash;
+    ScteInManifests?: MediaPackageV2OriginEndpoint_ScteInManifests;
   });
 }
 
 export declare class MediaPackageV2OriginEndpoint_ScteHls {
   constructor(props: {
     AdMarkerHls?: MediaPackageV2OriginEndpoint_AdMarkerHls;
+    ScteInManifests?: MediaPackageV2OriginEndpoint_ScteInManifests;
   });
 }
 
@@ -108556,7 +109318,7 @@ export declare class MediaPackageV2OriginEndpoint_SpekeKeyProvider {
     RoleArn: string;
     /** <p>The URL of the API Gateway proxy that you set up to talk to your key server. The API Gateway proxy must reside in the same AWS Region as MediaPackage and must start with https://.</p> <p>The following example shows a URL: <code>https://1wm2dx1f33.execute-api.us-west-2.amazonaws.com/SpekeSample/copyProtection</code> </p> */
     Url: string;
-    /** <p>The ARN for the certificate that you imported to AWS Certificate Manager to add content key encryption to this endpoint. For this feature to work, your DRM key provider must support content key encryption.</p> */
+    /** <p>The ARN for the certificate that you imported to Amazon Web Services Certificate Manager to add content key encryption to this endpoint. For this feature to work, your DRM key provider must support content key encryption.</p> */
     CertificateArn?: string;
   });
 }
@@ -110208,7 +110970,9 @@ export declare class MicrosoftAD_VpcSettings {
 export declare class MicrosoftOauth2ProviderConfigInput {
   constructor(props: {
     ClientId: string;
-    ClientSecret: string;
+    ClientSecret?: string;
+    ClientSecretConfig?: OAuth2CredentialProvider_SecretReference;
+    ClientSecretSource?: "EXTERNAL" | "MANAGED";
     /** The Microsoft Entra ID tenant ID */
     TenantId?: string;
   });
@@ -112739,6 +113503,17 @@ export declare class MsSmoothOutputSettings {
   });
 }
 
+export declare class MultiAzTargets {
+  constructor(props: {
+    /** Multi-AZ disaster recovery approach. */
+    DisasterRecoveryApproach?: "ACTIVE_ACTIVE" | "BACKUP_AND_RESTORE" | "HOT_STANDBY" | "PILOT_LIGHT" | "WARM_STANDBY";
+    /** Recovery Point Objective in minutes. */
+    RpoInMinutes?: number;
+    /** Recovery Time Objective in minutes. */
+    RtoInMinutes?: number;
+  });
+}
+
 export declare class MulticastGroup_LoRaWAN {
   constructor(props: {
     /** Multicast group LoRaWAN DL Class */
@@ -113103,6 +113878,17 @@ export declare class MultiRegionEndpoint_Tag {
   });
 }
 
+export declare class MultiRegionTargets {
+  constructor(props: {
+    /** Multi-Region disaster recovery approach. */
+    DisasterRecoveryApproach?: "ACTIVE_ACTIVE" | "BACKUP_AND_RESTORE" | "HOT_STANDBY" | "PILOT_LIGHT" | "WARM_STANDBY";
+    /** Recovery Point Objective in minutes. */
+    RpoInMinutes?: number;
+    /** Recovery Time Objective in minutes. */
+    RtoInMinutes?: number;
+  });
+}
+
 export declare class MultiSelectQuestionRuleCategoryAutomation {
   constructor(props: {
     /** The category name for this automation rule. */
@@ -113497,6 +114283,18 @@ export declare class NeptuneEventSubscription_Tag {
   });
 }
 
+export declare class NeptuneGlobalDatabaseConfiguration {
+  constructor(props: {
+    Behavior: any;
+    GlobalClusterIdentifier: string;
+    RegionDatabaseClusterArns: Record<string, unknown>;
+    CrossAccountRole?: string;
+    ExternalId?: string;
+    TimeoutMinutes?: number;
+    Ungraceful?: ARCRegionSwitchPlan_NeptuneUngraceful;
+  });
+}
+
 export declare class NeptuneGraphGraph_Tag {
   constructor(props: {
     /** The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.  */
@@ -113525,6 +114323,12 @@ export declare class NeptuneSettings {
   });
 }
 
+export declare class NeptuneUngraceful {
+  constructor(props: {
+    Ungraceful?: ARCRegionSwitchPlan_NeptuneUngracefulBehavior;
+  });
+}
+
 export declare class NetWeaverPrometheusExporter {
   constructor(props: {
     /** SAP instance numbers for ASCS, ERS, and App Servers. */
@@ -114881,6 +115685,13 @@ export declare class OamLink_LinkFilter {
   });
 }
 
+export declare class OAuth2AuthorizationData {
+  constructor(props: {
+    AuthorizationUrl: string;
+    UserId?: string;
+  });
+}
+
 export declare class Oauth2AuthorizationServerMetadata {
   constructor(props: {
     /** The authorization endpoint URL */
@@ -114906,7 +115717,9 @@ export declare class OAuth2ClientCredentialConfiguration {
 export declare class OAuth2CredentialProvider_AtlassianOauth2ProviderConfigInput {
   constructor(props: {
     ClientId: string;
-    ClientSecret: string;
+    ClientSecret?: string;
+    ClientSecretConfig?: OAuth2CredentialProvider_SecretReference;
+    ClientSecretSource?: "EXTERNAL" | "MANAGED";
   });
 }
 
@@ -114920,10 +115733,15 @@ export declare class OAuth2CredentialProvider_ClientSecretArn {
 export declare class OAuth2CredentialProvider_CustomOauth2ProviderConfigInput {
   constructor(props: {
     OauthDiscovery: OAuth2CredentialProvider_Oauth2Discovery;
+    /** The client authentication method to use when authenticating with the token endpoint */
+    ClientAuthenticationMethod?: "AWS_IAM_ID_TOKEN_JWT" | "CLIENT_SECRET_BASIC" | "CLIENT_SECRET_POST";
     /** The client ID for the custom OAuth2 provider */
     ClientId?: string;
     /** The client secret for the custom OAuth2 provider */
     ClientSecret?: string;
+    ClientSecretConfig?: OAuth2CredentialProvider_SecretReference;
+    /** The source of the client secret */
+    ClientSecretSource?: "EXTERNAL" | "MANAGED";
     OnBehalfOfTokenExchangeConfig?: OAuth2CredentialProvider_OnBehalfOfTokenExchangeConfig;
   });
 }
@@ -114931,23 +115749,29 @@ export declare class OAuth2CredentialProvider_CustomOauth2ProviderConfigInput {
 export declare class OAuth2CredentialProvider_GithubOauth2ProviderConfigInput {
   constructor(props: {
     ClientId: string;
-    ClientSecret: string;
+    ClientSecret?: string;
+    ClientSecretConfig?: OAuth2CredentialProvider_SecretReference;
+    ClientSecretSource?: "EXTERNAL" | "MANAGED";
   });
 }
 
 export declare class OAuth2CredentialProvider_GoogleOauth2ProviderConfigInput {
   constructor(props: {
     ClientId: string;
-    ClientSecret: string;
+    ClientSecret?: string;
+    ClientSecretConfig?: OAuth2CredentialProvider_SecretReference;
+    ClientSecretSource?: "EXTERNAL" | "MANAGED";
   });
 }
 
 export declare class OAuth2CredentialProvider_IncludedOauth2ProviderConfigInput {
   constructor(props: {
     ClientId: string;
-    ClientSecret: string;
     /** OAuth2 authorization endpoint for your isolated OAuth2 application tenant */
     AuthorizationEndpoint?: string;
+    ClientSecret?: string;
+    ClientSecretConfig?: OAuth2CredentialProvider_SecretReference;
+    ClientSecretSource?: "EXTERNAL" | "MANAGED";
     /** Token issuer of your isolated OAuth2 application tenant */
     Issuer?: string;
     /** OAuth2 token endpoint for your isolated OAuth2 application tenant */
@@ -114958,14 +115782,18 @@ export declare class OAuth2CredentialProvider_IncludedOauth2ProviderConfigInput
 export declare class OAuth2CredentialProvider_LinkedinOauth2ProviderConfigInput {
   constructor(props: {
     ClientId: string;
-    ClientSecret: string;
+    ClientSecret?: string;
+    ClientSecretConfig?: OAuth2CredentialProvider_SecretReference;
+    ClientSecretSource?: "EXTERNAL" | "MANAGED";
   });
 }
 
 export declare class OAuth2CredentialProvider_MicrosoftOauth2ProviderConfigInput {
   constructor(props: {
     ClientId: string;
-    ClientSecret: string;
+    ClientSecret?: string;
+    ClientSecretConfig?: OAuth2CredentialProvider_SecretReference;
+    ClientSecretSource?: "EXTERNAL" | "MANAGED";
     /** The Microsoft Entra ID tenant ID */
     TenantId?: string;
   });
@@ -115008,6 +115836,8 @@ export declare class OAuth2CredentialProvider_Oauth2ProviderConfigInput {
 
 export declare class OAuth2CredentialProvider_Oauth2ProviderConfigOutput {
   constructor(props: {
+    /** The client authentication method used when authenticating with the token endpoint */
+    ClientAuthenticationMethod?: "AWS_IAM_ID_TOKEN_JWT" | "CLIENT_SECRET_BASIC" | "CLIENT_SECRET_POST";
     ClientId?: string;
     OauthDiscovery?: OAuth2CredentialProvider_Oauth2Discovery;
     OnBehalfOfTokenExchangeConfig?: OAuth2CredentialProvider_OnBehalfOfTokenExchangeConfig;
@@ -115025,14 +115855,27 @@ export declare class OAuth2CredentialProvider_OnBehalfOfTokenExchangeConfig {
 export declare class OAuth2CredentialProvider_SalesforceOauth2ProviderConfigInput {
   constructor(props: {
     ClientId: string;
-    ClientSecret: string;
+    ClientSecret?: string;
+    ClientSecretConfig?: OAuth2CredentialProvider_SecretReference;
+    ClientSecretSource?: "EXTERNAL" | "MANAGED";
+  });
+}
+
+export declare class OAuth2CredentialProvider_SecretReference {
+  constructor(props: {
+    /** The JSON key within the secret that contains the credential value */
+    JsonKey: string;
+    /** The ID or ARN of the secret in AWS Secrets Manager */
+    SecretId: string;
   });
 }
 
 export declare class OAuth2CredentialProvider_SlackOauth2ProviderConfigInput {
   constructor(props: {
     ClientId: string;
-    ClientSecret: string;
+    ClientSecret?: string;
+    ClientSecretConfig?: OAuth2CredentialProvider_SecretReference;
+    ClientSecretSource?: "EXTERNAL" | "MANAGED";
   });
 }
 
@@ -115087,6 +115930,8 @@ export declare class Oauth2ProviderConfigInput {
 
 export declare class Oauth2ProviderConfigOutput {
   constructor(props: {
+    /** The client authentication method used when authenticating with the token endpoint */
+    ClientAuthenticationMethod?: "AWS_IAM_ID_TOKEN_JWT" | "CLIENT_SECRET_BASIC" | "CLIENT_SECRET_POST";
     ClientId?: string;
     OauthDiscovery?: OAuth2CredentialProvider_Oauth2Discovery;
     OnBehalfOfTokenExchangeConfig?: OAuth2CredentialProvider_OnBehalfOfTokenExchangeConfig;
@@ -115995,6 +116840,14 @@ export declare class OpenSearchServiceDomain_AIMLOptions {
   });
 }
 
+export declare class OpenSearchServiceDomain_AutomatedSnapshotPauseOptions {
+  constructor(props: {
+    Enabled: boolean;
+    EndTime?: string;
+    StartTime?: string;
+  });
+}
+
 export declare class OpenSearchServiceDomain_ClusterConfig {
   constructor(props: {
     ColdStorageOptions?: OpenSearchServiceDomain_ColdStorageOptions;
@@ -116213,6 +117066,8 @@ export declare class OpenSearchServiceDomain_Tag {
 
 export declare class OpenSearchServiceDomain_VPCOptions {
   constructor(props: {
+    /** Controls whether egress traffic from the domain is routed through the customer VPC. */
+    EgressEnabled?: boolean;
     SecurityGroupIds?: string[];
     SubnetIds?: string[];
   });
@@ -117056,7 +117911,9 @@ export declare class OriginCustomHeader {
 
 export declare class OriginEndpointPolicy_CdnAuthConfiguration {
   constructor(props: {
+    /** <p>The ARN for the secret in Secrets Manager that your CDN uses for authorization to access the endpoint.</p> */
     CdnIdentifierSecretArns: string[];
+    /** <p>The ARN for the IAM role that gives MediaPackage read access to Secrets Manager and KMS for CDN authorization.</p> */
     SecretsRoleArn: string;
   });
 }
@@ -117438,6 +118295,7 @@ export declare class OutputDestination {
   constructor(props: {
     Id?: string;
     LogicalInterfaceNames?: string[];
+    MediaConnectRouterSettings?: MediaLiveChannel_MediaConnectRouterOutputDestinationSettings[];
     MediaPackageSettings?: MediaLiveChannel_MediaPackageOutputDestinationSettings[];
     MultiplexSettings?: MediaLiveChannel_MultiplexProgramChannelDestinationSettings;
     Settings?: MediaLiveChannel_OutputDestinationSettings[];
@@ -117492,6 +118350,7 @@ export declare class OutputGroupSettings {
     CmafIngestGroupSettings?: MediaLiveChannel_CmafIngestGroupSettings;
     FrameCaptureGroupSettings?: MediaLiveChannel_FrameCaptureGroupSettings;
     HlsGroupSettings?: MediaLiveChannel_HlsGroupSettings;
+    MediaConnectRouterGroupSettings?: MediaLiveChannel_MediaConnectRouterGroupSettings;
     MediaPackageGroupSettings?: MediaLiveChannel_MediaPackageGroupSettings;
     MsSmoothGroupSettings?: MediaLiveChannel_MsSmoothGroupSettings;
     MultiplexGroupSettings?: Record<string, unknown>;
@@ -117536,6 +118395,7 @@ export declare class OutputSettings {
     CmafIngestOutputSettings?: MediaLiveChannel_CmafIngestOutputSettings;
     FrameCaptureOutputSettings?: MediaLiveChannel_FrameCaptureOutputSettings;
     HlsOutputSettings?: MediaLiveChannel_HlsOutputSettings;
+    MediaConnectRouterOutputSettings?: MediaLiveChannel_MediaConnectRouterOutputSettings;
     MediaPackageOutputSettings?: MediaLiveChannel_MediaPackageOutputSettings;
     MsSmoothOutputSettings?: MediaLiveChannel_MsSmoothOutputSettings;
     MultiplexOutputSettings?: MediaLiveChannel_MultiplexOutputSettings;
@@ -118672,14 +119532,32 @@ export declare class PaymentConfiguration {
   });
 }
 
+export declare class PaymentConnector_CredentialsProviderConfiguration {
+  constructor(props: {
+    CoinbaseCDP?: PaymentConnector_PaymentCredentialProviderConfiguration;
+    StripePrivy?: PaymentConnector_PaymentCredentialProviderConfiguration;
+  });
+}
+
+export declare class PaymentConnector_PaymentCredentialProviderConfiguration {
+  constructor(props: {
+    /** The ARN of the payment credential provider */
+    CredentialProviderArn: string;
+  });
+}
+
 export declare class PaymentCredentialProvider_CoinbaseCdpConfigurationInput {
   constructor(props: {
     /** The Coinbase CDP API key ID */
     ApiKeyId: string;
     /** The Coinbase CDP API key secret */
-    ApiKeySecret: string;
+    ApiKeySecret?: string;
+    ApiKeySecretConfig?: PaymentCredentialProvider_SecretReference;
+    ApiKeySecretSource?: PaymentCredentialProvider_SecretSourceType;
     /** The Coinbase CDP wallet secret */
     WalletSecret?: string;
+    WalletSecretConfig?: PaymentCredentialProvider_SecretReference;
+    WalletSecretSource?: PaymentCredentialProvider_SecretSourceType;
   });
 }
 
@@ -118688,7 +119566,13 @@ export declare class PaymentCredentialProvider_CoinbaseCdpConfigurationOutput {
     /** The Coinbase CDP API key ID */
     ApiKeyId: string;
     ApiKeySecretArn: PaymentCredentialProvider_SecretInfo;
+    /** The JSON key within the secret that contains the API key secret value */
+    ApiKeySecretJsonKey?: string;
+    ApiKeySecretSource?: PaymentCredentialProvider_SecretSourceType;
     WalletSecretArn?: PaymentCredentialProvider_SecretInfo;
+    /** The JSON key within the secret that contains the wallet secret value */
+    WalletSecretJsonKey?: string;
+    WalletSecretSource?: PaymentCredentialProvider_SecretSourceType;
   });
 }
 
@@ -118713,16 +119597,29 @@ export declare class PaymentCredentialProvider_SecretInfo {
   });
 }
 
+export declare class PaymentCredentialProvider_SecretReference {
+  constructor(props: {
+    /** The JSON key within the secret that contains the credential value */
+    JsonKey: string;
+    /** The ID or ARN of the secret in AWS Secrets Manager */
+    SecretId: string;
+  });
+}
+
 export declare class PaymentCredentialProvider_StripePrivyConfigurationInput {
   constructor(props: {
     /** The app ID provided by Privy */
     AppId: string;
-    /** The app secret provided by Privy */
-    AppSecret: string;
     /** The authorization ID for the Stripe Privy integration */
     AuthorizationId: string;
+    /** The app secret provided by Privy */
+    AppSecret?: string;
+    AppSecretConfig?: PaymentCredentialProvider_SecretReference;
+    AppSecretSource?: PaymentCredentialProvider_SecretSourceType;
     /** The authorization private key for the Stripe Privy integration */
-    AuthorizationPrivateKey: string;
+    AuthorizationPrivateKey?: string;
+    AuthorizationPrivateKeyConfig?: PaymentCredentialProvider_SecretReference;
+    AuthorizationPrivateKeySource?: PaymentCredentialProvider_SecretSourceType;
   });
 }
 
@@ -118734,6 +119631,12 @@ export declare class PaymentCredentialProvider_StripePrivyConfigurationOutput {
     /** The authorization ID for the Stripe Privy integration */
     AuthorizationId: string;
     AuthorizationPrivateKeyArn: PaymentCredentialProvider_SecretInfo;
+    /** The JSON key within the secret that contains the app secret value */
+    AppSecretJsonKey?: string;
+    AppSecretSource?: PaymentCredentialProvider_SecretSourceType;
+    /** The JSON key within the secret that contains the authorization private key value */
+    AuthorizationPrivateKeyJsonKey?: string;
+    AuthorizationPrivateKeySource?: PaymentCredentialProvider_SecretSourceType;
   });
 }
 
@@ -118744,6 +119647,64 @@ export declare class PaymentCredentialProvider_Tag {
   });
 }
 
+export declare class PaymentCredentialProviderConfiguration {
+  constructor(props: {
+    /** The ARN of the payment credential provider */
+    CredentialProviderArn: string;
+  });
+}
+
+export declare class PaymentManager_AuthorizerConfiguration {
+  constructor(props: {
+    CustomJWTAuthorizer: PaymentManager_CustomJWTAuthorizerConfiguration;
+  });
+}
+
+export declare class PaymentManager_AuthorizingClaimMatchValueType {
+  constructor(props: {
+    ClaimMatchOperator: "CONTAINS" | "CONTAINS_ANY" | "EQUALS";
+    ClaimMatchValue: PaymentManager_ClaimMatchValueType;
+  });
+}
+
+export declare class PaymentManager_ClaimMatchValueType {
+  constructor(props: {
+    MatchValueString?: string;
+    MatchValueStringList?: string[];
+  });
+}
+
+export declare class PaymentManager_CustomClaimValidationType {
+  constructor(props: {
+    AuthorizingClaimMatchValue: PaymentManager_AuthorizingClaimMatchValueType;
+    InboundTokenClaimName: string;
+    InboundTokenClaimValueType: "STRING" | "STRING_ARRAY";
+  });
+}
+
+export declare class PaymentManager_CustomJWTAuthorizerConfiguration {
+  constructor(props: {
+    DiscoveryUrl: string;
+    AllowedAudience?: string[];
+    AllowedClients?: string[];
+    AllowedScopes?: string[];
+    CustomClaims?: PaymentManager_CustomClaimValidationType[];
+  });
+}
+
+export declare class PaymentManager_Tag {
+  constructor(props: {
+    Key: string;
+    Value: string;
+  });
+}
+
+export declare class PaymentManager_WorkloadIdentityDetails {
+  constructor(props: {
+    WorkloadIdentityArn: string;
+  });
+}
+
 export declare class PaymentProviderConfigurationInput {
   constructor(props: {
     CoinbaseCdpConfiguration?: PaymentCredentialProvider_CoinbaseCdpConfigurationInput;
@@ -119324,17 +120285,6 @@ export declare class PeriodicStateTemplateUpdateStrategy {
   });
 }
 
-export declare class PermissionModel {
-  constructor(props: {
-    /** Defines how AWS Resilience Hub scans your resources. It can scan for the resources by using a pre-existing role in your AWS account, or by using the credentials of the current IAM user. */
-    Type: "LegacyIAMUser" | "RoleBased";
-    /** Defines a list of role Amazon Resource Names (ARNs) to be used in other accounts. These ARNs are used for querying purposes while importing resources and assessing your application. */
-    CrossAccountRoleArns?: string[];
-    /** Existing AWS IAM role name in the primary AWS account that will be assumed by AWS Resilience Hub Service Principle to obtain a read-only access to your application resources while running an assessment. */
-    InvokerRoleName?: string;
-  });
-}
-
 export declare class Permissions_ColumnWildcard {
   constructor(props: {
     ExcludedColumnNames?: string[];
@@ -122805,6 +123755,14 @@ export declare class PromptVersion_ToolSpecification {
   });
 }
 
+export declare class PropagateTagsConfig {
+  constructor(props: {
+    /** A list of tags to explicitly propagate to managed resources. */
+    ExplicitTags?: LambdaCapacityProvider_Tag[];
+    Mode?: LambdaCapacityProvider_PropagateTagsMode;
+  });
+}
+
 export declare class PropagatingAttribute {
   constructor(props: {
     UserPropertyKey: string;
@@ -123613,6 +124571,15 @@ export declare class QueryStringKeyValue {
   });
 }
 
+export declare class QueryStringKeyValuePair {
+  constructor(props: {
+    /** Query string key — RFC 3986 unreserved characters. */
+    Key: string;
+    /** Query string value — RFC 3986 unreserved characters. */
+    Value: string;
+  });
+}
+
 export declare class QueryStringObject {
   constructor(props: {
     /** Indicates whether the distribution forwards and caches based on query strings. */
@@ -136755,6 +137722,12 @@ export declare class ReportGroup_Tag {
   });
 }
 
+export declare class ReportOutputConfiguration {
+  constructor(props: {
+    S3?: ResilienceHubV2Service_S3ReportOutputConfiguration;
+  });
+}
+
 export declare class ReportPlan_Tag {
   constructor(props: {
     /** The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. */
@@ -137028,6 +138001,187 @@ export declare class ResilienceHubApp_ResourceMapping {
   });
 }
 
+export declare class ResilienceHubV2Policy_AvailabilitySlo {
+  constructor(props: {
+    /** Availability target percentage. */
+    Target?: number;
+  });
+}
+
+export declare class ResilienceHubV2Policy_DataRecoveryTargets {
+  constructor(props: {
+    /** Time between backups in minutes. */
+    TimeBetweenBackupsInMinutes?: number;
+  });
+}
+
+export declare class ResilienceHubV2Policy_MultiAzTargets {
+  constructor(props: {
+    /** Multi-AZ disaster recovery approach. */
+    DisasterRecoveryApproach?: "ACTIVE_ACTIVE" | "BACKUP_AND_RESTORE" | "HOT_STANDBY" | "PILOT_LIGHT" | "WARM_STANDBY";
+    /** Recovery Point Objective in minutes. */
+    RpoInMinutes?: number;
+    /** Recovery Time Objective in minutes. */
+    RtoInMinutes?: number;
+  });
+}
+
+export declare class ResilienceHubV2Policy_MultiRegionTargets {
+  constructor(props: {
+    /** Multi-Region disaster recovery approach. */
+    DisasterRecoveryApproach?: "ACTIVE_ACTIVE" | "BACKUP_AND_RESTORE" | "HOT_STANDBY" | "PILOT_LIGHT" | "WARM_STANDBY";
+    /** Recovery Point Objective in minutes. */
+    RpoInMinutes?: number;
+    /** Recovery Time Objective in minutes. */
+    RtoInMinutes?: number;
+  });
+}
+
+export declare class ResilienceHubV2Policy_Tag {
+  constructor(props: {
+    /** The tag key. */
+    Key: string;
+    /** The tag value. */
+    Value: string;
+  });
+}
+
+export declare class ResilienceHubV2Service_AssertionDefinition {
+  constructor(props: {
+    /** The text of the assertion. */
+    Text: string;
+  });
+}
+
+export declare class ResilienceHubV2Service_AssociatedSystem {
+  constructor(props: {
+    /** The system ARN. */
+    SystemArn: string;
+    /** User journey IDs associated with this system. */
+    UserJourneyIds?: string[];
+  });
+}
+
+export declare class ResilienceHubV2Service_CrossAccountRoleConfiguration {
+  constructor(props: {
+    /** ARN of the cross-account IAM role. */
+    CrossAccountRoleArn: string;
+    /** External ID for cross-account access. */
+    ExternalId?: string;
+  });
+}
+
+export declare class ResilienceHubV2Service_DisasterRecoverySource {
+  constructor(props: {
+    PolicyName?: string;
+    Value?: string;
+  });
+}
+
+export declare class ResilienceHubV2Service_EffectivePolicyValues {
+  constructor(props: {
+    AvailabilitySlo?: ResilienceHubV2Service_SloSource;
+    MultiAzDrApproach?: ResilienceHubV2Service_DisasterRecoverySource;
+    MultiAzRpo?: ResilienceHubV2Service_TargetSource;
+    MultiAzRto?: ResilienceHubV2Service_TargetSource;
+    MultiRegionDrApproach?: ResilienceHubV2Service_DisasterRecoverySource;
+    MultiRegionRpo?: ResilienceHubV2Service_TargetSource;
+    MultiRegionRto?: ResilienceHubV2Service_TargetSource;
+  });
+}
+
+export declare class ResilienceHubV2Service_EksSource {
+  constructor(props: {
+    /** ARN of the EKS cluster. */
+    ClusterArn: string;
+    /** EKS namespaces. */
+    Namespaces: string[];
+  });
+}
+
+export declare class ResilienceHubV2Service_InputSourceDefinition {
+  constructor(props: {
+    ResourceConfiguration: ResilienceHubV2Service_ResourceConfiguration;
+  });
+}
+
+export declare class ResilienceHubV2Service_PermissionModel {
+  constructor(props: {
+    /** Name of the invoker IAM role. */
+    InvokerRoleName: string;
+    /** Cross-account role ARNs. */
+    CrossAccountRoleArns?: ResilienceHubV2Service_CrossAccountRoleConfiguration[];
+  });
+}
+
+export declare class ResilienceHubV2Service_ReportOutputConfiguration {
+  constructor(props: {
+    S3?: ResilienceHubV2Service_S3ReportOutputConfiguration;
+  });
+}
+
+export declare class ResilienceHubV2Service_ResourceConfiguration {
+  constructor(props: {
+    /** ARN of a CloudFormation stack. */
+    CfnStackArn?: string;
+    /** S3 URL of a design file. */
+    DesignFileS3Url?: string;
+    Eks?: ResilienceHubV2Service_EksSource;
+    /** Resource tags to discover resources. */
+    ResourceTags?: ResilienceHubV2Service_ResourceTag[];
+    /** URL of a Terraform state file. */
+    TfStateFileUrl?: string;
+  });
+}
+
+export declare class ResilienceHubV2Service_ResourceTag {
+  constructor(props: {
+    /** Tag key. */
+    Key: string;
+    /** Tag values. */
+    Values: string[];
+  });
+}
+
+export declare class ResilienceHubV2Service_S3ReportOutputConfiguration {
+  constructor(props: {
+    /** Account ID of the bucket owner. */
+    BucketOwner: string;
+    /** S3 bucket path where reports will be written. */
+    BucketPath: string;
+  });
+}
+
+export declare class ResilienceHubV2Service_ServiceReportConfiguration {
+  constructor(props: {
+    /** Output destinations for generated reports. */
+    ReportOutput: ResilienceHubV2Service_ReportOutputConfiguration[];
+  });
+}
+
+export declare class ResilienceHubV2Service_SloSource {
+  constructor(props: {
+    PolicyName?: string;
+    Value?: number;
+  });
+}
+
+export declare class ResilienceHubV2Service_Tag {
+  constructor(props: {
+    /** The tag key. */
+    Key: string;
+    /** The tag value. */
+    Value: string;
+  });
+}
+
+export declare class ResilienceHubV2Service_TargetSource {
+  constructor(props: {
+    PolicyName?: string;
+    Value?: number;
+  });
+}
+
 export declare class ResiliencyPolicy_FailurePolicy {
   constructor(props: {
     /** RPO in seconds. */
@@ -137601,6 +138755,12 @@ export declare class ResponderGateway_HealthCheckConfig {
   });
 }
 
+export declare class ResponderGateway_ListenerConfig {
+  constructor(props: {
+    Protocols: ResponderGateway_Protocol[];
+  });
+}
+
 export declare class ResponderGateway_Tag {
   constructor(props: {
     /** The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.  */
@@ -139862,6 +141022,13 @@ export declare class RuntimePolicy {
   });
 }
 
+export declare class RuntimeTargetConfiguration {
+  constructor(props: {
+    Arn: string;
+    Qualifier?: string;
+  });
+}
+
 export declare class S3AccessPoint_PublicAccessBlockConfiguration {
   constructor(props: {
     /** Specifies whether Amazon S3 should block public access control lists (ACLs) for buckets in this account. Setting this element to TRUE causes the following behavior:
@@ -140559,13 +141726,6 @@ export declare class S3ReportExportConfig {
   });
 }
 
-export declare class S3ReportOutputConfiguration {
-  constructor(props: {
-    BucketOwner?: string;
-    BucketPath?: string;
-  });
-}
-
 export declare class S3Settings {
   constructor(props: {
     AddColumnName?: boolean;
@@ -141034,16 +142194,18 @@ export declare class SageMakerCluster_ClusterInstanceGroup {
     /** The number of instances you specified to add to the instance group of a SageMaker HyperPod cluster. */
     InstanceCount: number;
     InstanceGroupName: string;
-    InstanceType: string;
     CapacityRequirements?: SageMakerCluster_ClusterCapacityRequirements;
     /** The number of instances that are currently in the instance group of a SageMaker HyperPod cluster. */
     CurrentCount?: number;
     ImageId?: string;
+    InstanceRequirements?: SageMakerCluster_InstanceRequirements;
     InstanceStorageConfigs?: any;
+    InstanceType?: string;
     KubernetesConfig?: SageMakerCluster_ClusterKubernetesConfig;
     LifeCycleConfig?: SageMakerCluster_ClusterLifeCycleConfig;
     /** The minimum number of instances required for the instance group to be InService. MinInstanceCount must be less than or equal to InstanceCount. */
     MinInstanceCount?: number;
+    NetworkInterface?: SageMakerCluster_ClusterNetworkInterface;
     OnStartDeepHealthChecks?: any;
     OverrideVpcConfig?: SageMakerCluster_VpcConfig;
     ScheduledUpdateConfig?: SageMakerCluster_ScheduledUpdateConfig;
@@ -141084,6 +142246,13 @@ export declare class SageMakerCluster_ClusterLifeCycleConfig {
   });
 }
 
+export declare class SageMakerCluster_ClusterNetworkInterface {
+  constructor(props: {
+    /** The type of network interface. */
+    InterfaceType: "efa" | "efa-only";
+  });
+}
+
 export declare class SageMakerCluster_ClusterOrchestratorEksConfig {
   constructor(props: {
     /** The ARN of the EKS cluster, such as arn:aws:eks:us-west-2:123456789012:cluster/my-eks-cluster */
@@ -141151,6 +142320,13 @@ export declare class SageMakerCluster_FSxLustreConfig {
   });
 }
 
+export declare class SageMakerCluster_InstanceRequirements {
+  constructor(props: {
+    /** A list of instance types that can be used for this instance group. */
+    InstanceTypes: string[];
+  });
+}
+
 export declare class SageMakerCluster_RollingUpdatePolicy {
   constructor(props: {
     MaximumBatchSize: SageMakerCluster_CapacitySizeConfig;
@@ -141398,6 +142574,8 @@ export declare class SageMakerDomain_ResourceSpec {
     SageMakerImageArn?: string;
     /** The Amazon Resource Name (ARN) of the image version created on the instance. */
     SageMakerImageVersionArn?: string;
+    /** The Amazon Resource Name (ARN) of the training plan to use for the ResourceSpec. */
+    TrainingPlanArn?: string;
   });
 }
 
@@ -142114,7 +143292,9 @@ export declare class SalesforceKnowledgeArticleConfiguration {
 export declare class SalesforceOauth2ProviderConfigInput {
   constructor(props: {
     ClientId: string;
-    ClientSecret: string;
+    ClientSecret?: string;
+    ClientSecretConfig?: OAuth2CredentialProvider_SecretReference;
+    ClientSecretSource?: "EXTERNAL" | "MANAGED";
   });
 }
 
@@ -143271,6 +144451,8 @@ export declare class ScriptDetails {
 
 export declare class Scte {
   constructor(props: {
+    /** <p>A list of additional non-Ad SCTE-35 event types to treat as advertisements. When configured, events matching these types produce ad markers (such as <code>SCTE35-OUT</code> and <code>SCTE35-IN</code> in HLS DATERANGE tags) in manifests.</p> <p>Valid values: <code>PROGRAM</code> | <code>CHAPTER</code> | <code>UNSCHEDULED_EVENT</code> | <code>ALTERNATE_CONTENT_OPPORTUNITY</code> | <code>NETWORK</code> </p> <p>If you don't specify any values, the default is empty (only default ad types are used).</p> */
+    CustomAdTypes?: MediaPackageV2OriginEndpoint_CustomAdType[];
     /** <p>The SCTE-35 message types that you want to be treated as ad markers in the output.</p> */
     ScteFilter?: MediaPackageV2OriginEndpoint_ScteFilter[];
     ScteInSegments?: MediaPackageV2OriginEndpoint_ScteInSegments;
@@ -143310,12 +144492,14 @@ export declare class Scte35TimeSignalApos {
 export declare class ScteDash {
   constructor(props: {
     AdMarkerDash?: MediaPackageV2OriginEndpoint_AdMarkerDash;
+    ScteInManifests?: MediaPackageV2OriginEndpoint_ScteInManifests;
   });
 }
 
 export declare class ScteHls {
   constructor(props: {
     AdMarkerHls?: MediaPackageV2OriginEndpoint_AdMarkerHls;
+    ScteInManifests?: MediaPackageV2OriginEndpoint_ScteInManifests;
   });
 }
 
@@ -145508,6 +146692,13 @@ export declare class ServiceProfile_Tag {
   });
 }
 
+export declare class ServiceReportConfiguration {
+  constructor(props: {
+    /** Output destinations for generated reports. */
+    ReportOutput: ResilienceHubV2Service_ReportOutputConfiguration[];
+  });
+}
+
 export declare class ServiceSoftwareOptions {
   constructor(props: {
     AutomatedUpdateDate?: string;
@@ -146483,7 +147674,9 @@ export declare class SlackConnectorProfileProperties {
 export declare class SlackOauth2ProviderConfigInput {
   constructor(props: {
     ClientId: string;
-    ClientSecret: string;
+    ClientSecret?: string;
+    ClientSecretConfig?: OAuth2CredentialProvider_SecretReference;
+    ClientSecretSource?: "EXTERNAL" | "MANAGED";
   });
 }
 
@@ -146538,6 +147731,13 @@ export declare class SliMetric {
   });
 }
 
+export declare class SloSource {
+  constructor(props: {
+    PolicyName?: string;
+    Value?: number;
+  });
+}
+
 export declare class Slot {
   constructor(props: {
     Name: string;
@@ -149747,12 +150947,16 @@ export declare class StripePrivyConfigurationInput {
   constructor(props: {
     /** The app ID provided by Privy */
     AppId: string;
-    /** The app secret provided by Privy */
-    AppSecret: string;
     /** The authorization ID for the Stripe Privy integration */
     AuthorizationId: string;
+    /** The app secret provided by Privy */
+    AppSecret?: string;
+    AppSecretConfig?: PaymentCredentialProvider_SecretReference;
+    AppSecretSource?: PaymentCredentialProvider_SecretSourceType;
     /** The authorization private key for the Stripe Privy integration */
-    AuthorizationPrivateKey: string;
+    AuthorizationPrivateKey?: string;
+    AuthorizationPrivateKeyConfig?: PaymentCredentialProvider_SecretReference;
+    AuthorizationPrivateKeySource?: PaymentCredentialProvider_SecretSourceType;
   });
 }
 
@@ -149764,6 +150968,12 @@ export declare class StripePrivyConfigurationOutput {
     /** The authorization ID for the Stripe Privy integration */
     AuthorizationId: string;
     AuthorizationPrivateKeyArn: PaymentCredentialProvider_SecretInfo;
+    /** The JSON key within the secret that contains the app secret value */
+    AppSecretJsonKey?: string;
+    AppSecretSource?: PaymentCredentialProvider_SecretSourceType;
+    /** The JSON key within the secret that contains the authorization private key value */
+    AuthorizationPrivateKeyJsonKey?: string;
+    AuthorizationPrivateKeySource?: PaymentCredentialProvider_SecretSourceType;
   });
 }
 
@@ -150207,6 +151417,15 @@ export declare class SyntheticsGroup_Tag {
   });
 }
 
+export declare class System_Tag {
+  constructor(props: {
+    /** The tag key. */
+    Key: string;
+    /** The tag value. */
+    Value: string;
+  });
+}
+
 export declare class SystemAttributes {
   constructor(props: {
     /** The CustomerEndpoint attribute. */
@@ -150867,7 +152086,7 @@ export declare class TargetDomain_VerificationDetails {
     DnsTxt?: TargetDomain_DnsVerification;
     HttpRoute?: TargetDomain_HttpVerification;
     /** Type of domain ownership verification method */
-    Method?: "DNS_TXT" | "HTTP_ROUTE";
+    Method?: "DNS_TXT" | "HTTP_ROUTE" | "PRIVATE_VPC";
   });
 }
 
@@ -150970,6 +152189,13 @@ export declare class TargetResource {
   });
 }
 
+export declare class TargetSource {
+  constructor(props: {
+    PolicyName?: string;
+    Value?: number;
+  });
+}
+
 export declare class TargetTrackingMetric {
   constructor(props: {
     /** The dimensions for the metric. For the list of available dimensions, see the AWS documentation available from the table in [services that publish CloudWatch metrics](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/aws-services-cloudwatch-metrics.html) in the *Amazon CloudWatch User Guide*. 
@@ -156431,7 +157657,7 @@ export declare class VerificationDetails {
     DnsTxt?: TargetDomain_DnsVerification;
     HttpRoute?: TargetDomain_HttpVerification;
     /** Type of domain ownership verification method */
-    Method?: "DNS_TXT" | "HTTP_ROUTE";
+    Method?: "DNS_TXT" | "HTTP_ROUTE" | "PRIVATE_VPC";
   });
 }
 
@@ -163011,6 +164237,8 @@ export type ARCRegionSwitchPlan_ExecutionBlockType =
   | "ARCRegionSwitchPlan"
   | "ARCRoutingControl"
   | "AuroraGlobalDatabase"
+  | "AuroraProvisionedScaling"
+  | "AuroraServerlessScaling"
   | "CustomActionLambda"
   | "DocumentDb"
   | "EC2AutoScaling"
@@ -163018,6 +164246,7 @@ export type ARCRegionSwitchPlan_ExecutionBlockType =
   | "EKSResourceScaling"
   | "LambdaEventSourceMapping"
   | "ManualApproval"
+  | "NeptuneGlobalDatabase"
   | "Parallel"
   | "RdsCreateCrossRegionReplica"
   | "RdsPromoteReadReplica"
@@ -163029,6 +164258,10 @@ export type ARCRegionSwitchPlan_GlobalAuroraUngracefulBehavior = "failover";
 
 export type ARCRegionSwitchPlan_LambdaUngracefulBehavior = "skip";
 
+export type ARCRegionSwitchPlan_NeptuneDefaultBehavior = "failover" | "switchoverOnly";
+
+export type ARCRegionSwitchPlan_NeptuneUngracefulBehavior = "failover";
+
 export type ARCRegionSwitchPlan_RecoveryApproach = "activeActive" | "activePassive";
 
 export type ARCRegionSwitchPlan_RegionToRunIn =
@@ -163877,7 +165110,11 @@ export type BedrockAgent_RequireConfirmation = "DISABLED" | "ENABLED";
 
 export type BedrockAgent_Type = "array" | "boolean" | "integer" | "number" | "string";
 
-export type BedrockAgentCoreGateway_AuthorizerType = "AWS_IAM" | "CUSTOM_JWT" | "NONE";
+export type BedrockAgentCoreGateway_AuthorizerType =
+  | "AUTHENTICATE_ONLY"
+  | "AWS_IAM"
+  | "CUSTOM_JWT"
+  | "NONE";
 
 export type BedrockAgentCoreGateway_ClaimMatchOperator = "CONTAINS" | "CONTAINS_ANY" | "EQUALS";
 
@@ -164065,7 +165302,7 @@ export type Bot_SpeechDetectionSensitivity =
   | "HighNoiseTolerance"
   | "MaximumNoiseTolerance";
 
-export type Bot_SpeechModelPreference = "Deepgram" | "Enhanced" | "Neural" | "Standard";
+export type Bot_SpeechModelPreference = "Advanced" | "Deepgram" | "Neural" | "Standard";
 
 export type BotAlias_BotAliasStatus = "Available" | "Creating" | "Deleting" | "Failed";
 
@@ -164488,6 +165725,10 @@ export type ConnectCampaignsV2Campaign_DayOfWeek =
 
 export type ConnectCampaignsV2Campaign_InstanceLimitsHandling = "OPT_IN" | "OPT_OUT";
 
+export type ConnectCampaignsV2Campaign_LocalTimeZoneDetectionScope =
+  | "ALL_AVAILABLE"
+  | "PRIMARY_ONLY";
+
 export type ConnectCampaignsV2Campaign_LocalTimeZoneDetectionType = "AREA_CODE" | "ZIP_CODE";
 
 export type ConnectorProfile_AuthenticationType = "APIKEY" | "BASIC" | "CUSTOM" | "OAUTH2";
@@ -165340,11 +166581,21 @@ export type GameServerGroup_Status =
 
 export type GatewayTarget_ApiKeyCredentialLocation = "HEADER" | "QUERY_PARAMETER";
 
-export type GatewayTarget_CredentialProviderType = "API_KEY" | "GATEWAY_IAM_ROLE" | "OAUTH";
+export type GatewayTarget_CredentialProviderType =
+  | "API_KEY"
+  | "CALLER_IAM_CREDENTIALS"
+  | "GATEWAY_IAM_ROLE"
+  | "JWT_PASSTHROUGH"
+  | "OAUTH";
+
+export type GatewayTarget_EndpointIpAddressType = "IPV4" | "IPV6";
 
 export type GatewayTarget_McpServerListingMode = "DEFAULT" | "DYNAMIC";
 
-export type GatewayTarget_OAuthGrantType = "AUTHORIZATION_CODE" | "CLIENT_CREDENTIALS";
+export type GatewayTarget_OAuthGrantType =
+  | "AUTHORIZATION_CODE"
+  | "CLIENT_CREDENTIALS"
+  | "TOKEN_EXCHANGE";
 
 export type GatewayTarget_RestApiMethod =
   | "DELETE"
@@ -165363,13 +166614,18 @@ export type GatewayTarget_SchemaType =
   | "object"
   | "string";
 
+export type GatewayTarget_TargetProtocolType = "HTTP" | "MCP";
+
 export type GatewayTarget_TargetStatus =
+  | "CREATE_PENDING_AUTH"
   | "CREATING"
   | "DELETING"
   | "FAILED"
   | "READY"
+  | "SYNCHRONIZE_PENDING_AUTH"
   | "SYNCHRONIZE_UNSUCCESSFUL"
   | "SYNCHRONIZING"
+  | "UPDATE_PENDING_AUTH"
   | "UPDATE_UNSUCCESSFUL"
   | "UPDATING";
 
@@ -165601,11 +166857,18 @@ export type InstanceStorageConfig_EncryptionType = "KMS";
 
 export type InstanceStorageConfig_InstanceStorageResourceType =
   | "AGENT_EVENTS"
+  | "ATTACHMENTS"
   | "CALL_RECORDINGS"
   | "CHAT_TRANSCRIPTS"
+  | "CONTACT_EVALUATIONS"
   | "CONTACT_TRACE_RECORDS"
+  | "EMAIL_MESSAGES"
   | "MEDIA_STREAMS"
-  | "SCHEDULED_REPORTS";
+  | "REAL_TIME_CONTACT_ANALYSIS_CHAT_SEGMENTS"
+  | "REAL_TIME_CONTACT_ANALYSIS_SEGMENTS"
+  | "REAL_TIME_CONTACT_ANALYSIS_VOICE_SEGMENTS"
+  | "SCHEDULED_REPORTS"
+  | "SCREEN_RECORDINGS";
 
 export type InstanceStorageConfig_StorageType =
   | "KINESIS_FIREHOSE"
@@ -165616,8 +166879,15 @@ export type InstanceStorageConfig_StorageType =
 export type IntegrationAssociation_IntegrationType =
   | "APPLICATION"
   | "CASES_DOMAIN"
+  | "FILE_SCANNER"
   | "LAMBDA_FUNCTION"
-  | "LEX_BOT";
+  | "LEX_BOT"
+  | "MESSAGE_PROCESSOR"
+  | "Q_MESSAGE_TEMPLATES"
+  | "SES_IDENTITY"
+  | "WISDOM_ASSISTANT"
+  | "WISDOM_KNOWLEDGE_BASE"
+  | "WISDOM_QUICK_RESPONSES";
 
 export type IntelligentPromptRouter_PromptRouterStatus = "AVAILABLE";
 
@@ -165909,6 +167179,8 @@ export type LambdaCapacityProvider_CapacityProviderState =
   | "Failed"
   | "Pending";
 
+export type LambdaCapacityProvider_PropagateTagsMode = "Explicit" | "None";
+
 export type LambdaHook_Action = "CREATE" | "DELETE" | "UPDATE";
 
 export type LambdaHook_InvocationPoint = "PRE_PROVISION";
@@ -165936,6 +167208,14 @@ export type LicenseEndpoint_LicenseEndpointStatus =
   | "NOT_READY"
   | "READY";
 
+export type LinkRoutingRule_RuleStatus =
+  | "ACTIVE"
+  | "CREATION_IN_PROGRESS"
+  | "DELETED"
+  | "DELETION_IN_PROGRESS"
+  | "FAILED"
+  | "UPDATE_IN_PROGRESS";
+
 export type LiveSource_Type = "DASH" | "HLS";
 
 export type LogsScheduledQuery_ScheduledQueryState = "DISABLED" | "ENABLED";
@@ -166162,6 +167442,13 @@ export type MediaPackageV2OriginEndpoint_CmafEncryptionMethod = "CBCS" | "CENC";
 
 export type MediaPackageV2OriginEndpoint_ContainerType = "CMAF" | "ISM" | "TS";
 
+export type MediaPackageV2OriginEndpoint_CustomAdType =
+  | "ALTERNATE_CONTENT_OPPORTUNITY"
+  | "CHAPTER"
+  | "NETWORK"
+  | "PROGRAM"
+  | "UNSCHEDULED_EVENT";
+
 export type MediaPackageV2OriginEndpoint_DashCompactness = "NONE" | "STANDARD";
 
 export type MediaPackageV2OriginEndpoint_DashDrmSignaling = "INDIVIDUAL" | "REFERENCED";
@@ -166222,20 +167509,34 @@ export type MediaPackageV2OriginEndpoint_PresetSpeke20Video =
   | "UNENCRYPTED";
 
 export type MediaPackageV2OriginEndpoint_ScteFilter =
+  | "ALTERNATE_CONTENT_OPPORTUNITY"
   | "BREAK"
+  | "CHAPTER"
   | "DISTRIBUTOR_ADVERTISEMENT"
+  | "DISTRIBUTOR_AD_BLOCK"
   | "DISTRIBUTOR_OVERLAY_PLACEMENT_OPPORTUNITY"
   | "DISTRIBUTOR_PLACEMENT_OPPORTUNITY"
+  | "DISTRIBUTOR_PROMO"
+  | "NETWORK"
   | "PROGRAM"
   | "PROVIDER_ADVERTISEMENT"
+  | "PROVIDER_AD_BLOCK"
   | "PROVIDER_OVERLAY_PLACEMENT_OPPORTUNITY"
   | "PROVIDER_PLACEMENT_OPPORTUNITY"
-  | "SPLICE_INSERT";
+  | "PROVIDER_PROMO"
+  | "SPLICE_INSERT"
+  | "UNSCHEDULED_EVENT";
 
-export type MediaPackageV2OriginEndpoint_ScteInSegments = "ALL" | "NONE";
+export type MediaPackageV2OriginEndpoint_ScteInManifests = "ALL" | "MATCHES_FILTER";
+
+export type MediaPackageV2OriginEndpoint_ScteInSegments = "ALL" | "MATCHES_FILTER" | "NONE";
 
 export type MediaPackageV2OriginEndpoint_TsEncryptionMethod = "AES_128" | "SAMPLE_AES";
 
+export type MediaPackageV2OriginEndpoint_UriPathType = "LEAF" | "ROOT";
+
+export type MediaPackageV2OriginEndpoint_UriSeparator = "HYPHEN" | "UNDERSCORE";
+
 export type MediaTailorChannel_AdMarkupType = "DATERANGE" | "SCTE35_ENHANCED";
 
 export type MediaTailorChannel_LogType = "AS_RUN";
@@ -166314,7 +167615,10 @@ export type MWAAEnvironment_LoggingLevel = "CRITICAL" | "DEBUG" | "ERROR" | "INF
 
 export type MWAAEnvironment_UpdateStatus = "FAILED" | "PENDING" | "SUCCESS";
 
-export type MWAAEnvironment_WebserverAccessMode = "PRIVATE_ONLY" | "PUBLIC_ONLY";
+export type MWAAEnvironment_WebserverAccessMode =
+  | "PRIVATE_ONLY"
+  | "PUBLIC_AND_PRIVATE"
+  | "PUBLIC_ONLY";
 
 export type MWAAEnvironment_WorkerReplacementStrategy = "FORCED" | "GRACEFUL";
 
@@ -166427,6 +167731,8 @@ export type OpenSearchServerlessCollection_CollectionType =
   | "TIMESERIES"
   | "VECTORSEARCH";
 
+export type OpenSearchServerlessCollection_DeletionProtection = "DISABLED" | "ENABLED";
+
 export type OpenSearchServerlessCollection_ServerlessVectorAcceleration =
   | "ALLOWED"
   | "DISABLED"
@@ -166519,10 +167825,34 @@ export type Partnership_X12GS05TimeFormat = "HHMM" | "HHMMSS" | "HHMMSSDD";
 
 export type Partnership_X12TechnicalAcknowledgment = "DO_NOT_GENERATE" | "GENERATE_ALL_SEGMENTS";
 
+export type PaymentConnector_PaymentConnectorStatus =
+  | "CREATE_FAILED"
+  | "CREATING"
+  | "DELETE_FAILED"
+  | "DELETING"
+  | "READY"
+  | "UPDATE_FAILED"
+  | "UPDATING";
+
+export type PaymentConnector_PaymentConnectorType = "CoinbaseCDP" | "StripePrivy";
+
 export type PaymentCredentialProvider_PaymentCredentialProviderVendorType =
   | "CoinbaseCDP"
   | "StripePrivy";
 
+export type PaymentCredentialProvider_SecretSourceType = "EXTERNAL" | "MANAGED";
+
+export type PaymentManager_PaymentManagerStatus =
+  | "CREATE_FAILED"
+  | "CREATING"
+  | "DELETE_FAILED"
+  | "DELETING"
+  | "READY"
+  | "UPDATE_FAILED"
+  | "UPDATING";
+
+export type PaymentManager_PaymentsAuthorizerType = "AWS_IAM" | "CUSTOM_JWT";
+
 export type PCAConnectorADTemplate_ApplicationPolicyType =
   | "ALL_APPLICATION_POLICIES"
   | "ANY_PURPOSE"
@@ -168095,6 +169425,16 @@ export type ResourceExplorer2Index_IndexState =
 
 export type ResourceExplorer2Index_IndexType = "AGGREGATOR" | "LOCAL";
 
+export type ResponderGateway_CertificateAssociationStatus =
+  | "ASSOCIATED"
+  | "DISASSOCIATED"
+  | "EXPIRED"
+  | "FAILED"
+  | "PENDING_ASSOCIATION"
+  | "PENDING_DISASSOCIATION";
+
+export type ResponderGateway_GatewayType = "EXTERNAL" | "INTERNAL";
+
 export type ResponderGateway_Protocol = "HTTP" | "HTTPS";
 
 export type ResponderGateway_ResponderGatewayStatus =