@intentius/chant-lexicon-aws 0.18.14 → 0.18.16

package/dist/integrity.json

@@ -1,9 +1,9 @@
 {
   "algorithm": "sha256",
   "artifacts": {
-    "manifest.json": "183280f448ba830d5079946efc74c017286f4fcc5493c5d6dee346f9e42f5ca7",
-    "meta.json": "8c8333c2cc61ac2525f3418ea240c69d263e545e5947c15b984549d5207198c2",
-    "types/index.d.ts": "99c828846be7e9549f21a331ddd1b5e3410ad9618f7982b063190924f6c81677",
+    "manifest.json": "5add6f542b1ca426e7bd6175a4d9a373a93449986d082732ca3de1fb8d0cf1d9",
+    "meta.json": "556e862c3f936c84ec863d3ce90822544f9580613e1c3d4bf8724b3e3409ca2e",
+    "types/index.d.ts": "b6e4cae56f2c903c4f2690b9243cec6658d505f9e11536ff9e98ac9a15824da7",
     "rules/hardcoded-region.ts": "5a0eaf7ab391231fe6cd51426ece29539cb4b36f31c8dd060956638fed55722a",
     "rules/iam-wildcard.ts": "135d7217d278fef50939e605c5da32603ba35674b8c4b5c4d66a06c77903e945",
     "rules/s3-encryption.ts": "c4f9f8aa8dc382ed98c7b04e820a600590cc75335a8db2e087cbfbfe4003d09e",
@@ -58,5 +58,5 @@
     "skills/chant-aws.md": "4d65eb160e001f2af42eb7c622a5b498c2fd1f5afbd6c8155615c010fb265c63",
     "skills/chant-aws-eks.md": "8789255709ff004ad0a875fd5999edcdc66fc6e33d710db058d9f42703bcfdfe"
   },
-  "composite": "b4e8fb0290f3892c27f22c0e0f6c2a758207966537752d3c52534261a39e7166"
+  "composite": "6fd40695ae9751727198eb4e8a2f343d8e9754f120af043a798663a3c7eaca74"
 }

package/dist/manifest.json

@@ -1,6 +1,6 @@
 {
   "name": "aws",
-  "version": "0.18.14",
+  "version": "0.18.16",
   "chantVersion": ">=0.1.0",
   "namespace": "AWS",
   "intrinsics": [

package/dist/meta.json

@@ -8347,8 +8347,7 @@
       "KmsKeyArn": "KmsKeyArn"
     },
     "createOnly": [
-      "KmsKeyId",
-      "ForceDelete"
+      "KmsKeyId"
     ],
     "writeOnly": [
       "KmsKeyId",
@@ -49451,6 +49450,92 @@
     "kind": "property",
     "lexicon": "aws"
   },
+  "IntermediateTable": {
+    "resourceType": "AWS::CleanRooms::IntermediateTable",
+    "kind": "resource",
+    "lexicon": "aws",
+    "attrs": {
+      "IntermediateTableIdentifier": "IntermediateTableIdentifier",
+      "Arn": "Arn",
+      "MembershipArn": "MembershipArn",
+      "CollaborationIdentifier": "CollaborationIdentifier",
+      "CollaborationArn": "CollaborationArn",
+      "Status": "Status"
+    },
+    "propertyConstraints": {
+      "Arn": {
+        "maxLength": 256
+      },
+      "MembershipArn": {
+        "maxLength": 100
+      },
+      "CollaborationArn": {
+        "maxLength": 100
+      },
+      "Name": {
+        "pattern": "^(?!\\s*$)[\\u0020-\\uD7FF\\uE000-\\uFFFD\\uD800\\uDBFF-\\uDC00\\uDFFF\\t]*$",
+        "minLength": 1,
+        "maxLength": 100
+      },
+      "Description": {
+        "pattern": "^[\\u0020-\\uD7FF\\uE000-\\uFFFD\\uD800\\uDBFF-\\uDC00\\uDFFF\\t\\r\\n]*$",
+        "maxLength": 255
+      },
+      "KmsKeyArn": {
+        "minLength": 4,
+        "maxLength": 2048
+      }
+    },
+    "createOnly": [
+      "MembershipIdentifier",
+      "Name",
+      "PopulationAnalysisConfiguration"
+    ],
+    "primaryIdentifier": [
+      "IntermediateTableIdentifier",
+      "MembershipIdentifier"
+    ],
+    "tagging": {
+      "taggable": true,
+      "tagOnCreate": true,
+      "tagUpdatable": true
+    }
+  },
+  "IntermediateTableAnalysisRule": {
+    "resourceType": "AWS::CleanRooms::IntermediateTable.IntermediateTableAnalysisRule",
+    "kind": "property",
+    "lexicon": "aws"
+  },
+  "IntermediateTableAnalysisRulePolicy": {
+    "resourceType": "AWS::CleanRooms::IntermediateTable.IntermediateTableAnalysisRulePolicy",
+    "kind": "property",
+    "lexicon": "aws"
+  },
+  "IntermediateTable_IntermediateTableAnalysisRule": {
+    "resourceType": "AWS::CleanRooms::IntermediateTable.IntermediateTableAnalysisRule",
+    "kind": "property",
+    "lexicon": "aws"
+  },
+  "IntermediateTable_IntermediateTableAnalysisRulePolicy": {
+    "resourceType": "AWS::CleanRooms::IntermediateTable.IntermediateTableAnalysisRulePolicy",
+    "kind": "property",
+    "lexicon": "aws"
+  },
+  "IntermediateTable_PopulationAnalysisConfiguration": {
+    "resourceType": "AWS::CleanRooms::IntermediateTable.PopulationAnalysisConfiguration",
+    "kind": "property",
+    "lexicon": "aws"
+  },
+  "IntermediateTable_PopulationAnalysisSqlParameters": {
+    "resourceType": "AWS::CleanRooms::IntermediateTable.PopulationAnalysisSqlParameters",
+    "kind": "property",
+    "lexicon": "aws"
+  },
+  "IntermediateTable_Tag": {
+    "resourceType": "AWS::CleanRooms::IntermediateTable.Tag",
+    "kind": "property",
+    "lexicon": "aws"
+  },
   "InternetGateway": {
     "resourceType": "AWS::EC2::InternetGateway",
     "kind": "resource",
@@ -54791,7 +54876,12 @@
     ],
     "primaryIdentifier": [
       "ListenerArn"
-    ]
+    ],
+    "tagging": {
+      "taggable": true,
+      "tagOnCreate": true,
+      "tagUpdatable": true
+    }
   },
   "ListenerAttribute": {
     "resourceType": "AWS::ElasticLoadBalancingV2::Listener.ListenerAttribute",
@@ -55022,6 +55112,11 @@
     "kind": "property",
     "lexicon": "aws"
   },
+  "Listener_Tag": {
+    "resourceType": "AWS::ElasticLoadBalancingV2::Listener.Tag",
+    "kind": "property",
+    "lexicon": "aws"
+  },
   "Listener_TargetGroupStickinessConfig": {
     "resourceType": "AWS::ElasticLoadBalancingV2::Listener.TargetGroupStickinessConfig",
     "kind": "property",
@@ -71684,6 +71779,16 @@
     "kind": "property",
     "lexicon": "aws"
   },
+  "PopulationAnalysisConfiguration": {
+    "resourceType": "AWS::CleanRooms::IntermediateTable.PopulationAnalysisConfiguration",
+    "kind": "property",
+    "lexicon": "aws"
+  },
+  "PopulationAnalysisSqlParameters": {
+    "resourceType": "AWS::CleanRooms::IntermediateTable.PopulationAnalysisSqlParameters",
+    "kind": "property",
+    "lexicon": "aws"
+  },
   "Port": {
     "resourceType": "AWS::Lightsail::Instance.Port",
     "kind": "property",

package/dist/plugin.d.ts

@@ -1,4 +1,8 @@
 import type { LexiconPlugin } from "@intentius/chant/lexicon";
+/** True when a CloudFormation CLI error means the stack simply isn't there yet
+ * (`ValidationError … does not exist`) — the pre-first-apply state, which live
+ * queries should treat as "nothing deployed", not a failure. Exported for testing. */
+export declare function stackDoesNotExist(stderr: string): boolean;
 /**
  * AWS CloudFormation lexicon plugin.
  *

package/dist/plugin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../src/plugin.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAuF,MAAM,0BAA0B,CAAC;AAuBnJ;;;;;GAKG;AACH,eAAO,MAAM,SAAS,EAAE,aA0qBvB,CAAC"}
+{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../src/plugin.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,aAAa,EAAuF,MAAM,0BAA0B,CAAC;AAwBnJ;;sFAEsF;AACtF,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAEzD;AAED;;;;;GAKG;AACH,eAAO,MAAM,SAAS,EAAE,aAyrBvB,CAAC"}

package/dist/types/index.d.ts

@@ -3071,7 +3071,7 @@ export declare class AutoScalingGroup {
     TrafficSources?: AutoScalingGroup_TrafficSourceIdentifier[];
     /** A list of subnet IDs for a virtual private cloud (VPC) where instances in the Auto Scaling group can be created.
  If this resource specifies public subnets and is also in a VPC that is defined in the same stack template, you must use the [DependsOn attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-dependson.html) to declare a dependency on the [VPC-gateway attachment](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpc-gateway-attachment.html).
-  When you update ``VPCZoneIdentifier``, this retains the same Auto Scaling group and replaces old instances with new ones, according to the specified subnets. You can optionally specify how CloudFormation handles these updates by using an [UpdatePolicy attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-updatepolicy.html).
+  When you update ``VPCZoneIdentifier``, this retains the same Auto Scaling group and replaces old instances with new ones, according to the specified subnets. To control how CloudFormation replaces the instances, add an [UpdatePolicy attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-updatepolicy.html) to your stack. Set the update policy to ``AutoScalingInstanceRefresh``. For more information, see the [AutoScalingInstanceRefresh policy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-updatepolicy.html#cfn-attributes-updatepolicy-instancerefresh).
   Required to launch instances into a nondefault VPC. If you specify ``VPCZoneIdentifier`` with ``AvailabilityZones``, the subnets that you specify for this property must reside in those Availability Zones. */
     VPCZoneIdentifier?: string[];
   }, attributes?: CFResourceAttributes);
@@ -17804,6 +17804,30 @@ export declare class InterconnectConnection {
   readonly Type: string;
 }
 
+export declare class IntermediateTable {
+  constructor(props: {
+    MembershipIdentifier: string;
+    Name: string;
+    PopulationAnalysisConfiguration: IntermediateTable_PopulationAnalysisConfiguration;
+    AnalysisRules?: IntermediateTable_IntermediateTableAnalysisRule[];
+    Arn?: string;
+    CollaborationArn?: string;
+    CollaborationIdentifier?: string;
+    Description?: string;
+    IntermediateTableIdentifier?: string;
+    KmsKeyArn?: string;
+    MembershipArn?: string;
+    Status?: IntermediateTable_IntermediateTableStatus;
+    Tags?: IntermediateTable_Tag[];
+  }, attributes?: CFResourceAttributes);
+  readonly Arn: string;
+  readonly CollaborationArn: string;
+  readonly CollaborationIdentifier: string;
+  readonly IntermediateTableIdentifier: string;
+  readonly MembershipArn: string;
+  readonly Status: IntermediateTable_IntermediateTableStatus;
+}
+
 export declare class InternetGateway {
   constructor(props: {
     InternetGatewayId?: string;
@@ -20051,6 +20075,7 @@ export declare class Listener {
     /** [HTTPS and TLS listeners] The security policy that defines which protocols and ciphers are supported. For more information, see [Security policies](https://docs.aws.amazon.com/elasticloadbalancing/latest/application/describe-ssl-policies.html) in the *Application Load Balancers Guide* and [Security policies](https://docs.aws.amazon.com/elasticloadbalancing/latest/network/describe-ssl-policies.html) in the *Network Load Balancers Guide*.
  [HTTPS listeners] Updating the security policy can result in interruptions if the load balancer is handling a high volume of traffic. To decrease the possibility of an interruption if your load balancer is handling a high volume of traffic, create an additional load balancer or request an LCU reservation. */
     SslPolicy?: string;
+    Tags?: Listener_Tag[];
   }, attributes?: CFResourceAttributes);
   readonly ListenerArn: string;
 }
@@ -44843,7 +44868,8 @@ export declare class AutoScalingGroup_AvailabilityZoneDistribution {
   constructor(props: {
     /** If launches fail in an Availability Zone, the following strategies are available. The default is ``balanced-best-effort``. 
   +  ``balanced-only`` - If launches fail in an Availability Zone, Auto Scaling will continue to attempt to launch in the unhealthy zone to preserve a balanced distribution.
-  +  ``balanced-best-effort`` - If launches fail in an Availability Zone, Auto Scaling will attempt to launch in another healthy Availability Zone instead. */
+  +  ``balanced-best-effort`` - If launches fail in an Availability Zone, Auto Scaling will attempt to launch in another healthy Availability Zone instead.
+  +  ``reservations-then-balanced`` - Auto Scaling will first attempt to launch into your Capacity Reservations, and then balance any remaining capacity across healthy Availability Zones. */
     CapacityDistributionStrategy?: "balanced-best-effort" | "balanced-only" | "reservations-then-balanced";
   });
 }
@@ -45290,7 +45316,8 @@ export declare class AvailabilityZoneDistribution {
   constructor(props: {
     /** If launches fail in an Availability Zone, the following strategies are available. The default is ``balanced-best-effort``. 
   +  ``balanced-only`` - If launches fail in an Availability Zone, Auto Scaling will continue to attempt to launch in the unhealthy zone to preserve a balanced distribution.
-  +  ``balanced-best-effort`` - If launches fail in an Availability Zone, Auto Scaling will attempt to launch in another healthy Availability Zone instead. */
+  +  ``balanced-best-effort`` - If launches fail in an Availability Zone, Auto Scaling will attempt to launch in another healthy Availability Zone instead.
+  +  ``reservations-then-balanced`` - Auto Scaling will first attempt to launch into your Capacity Reservations, and then balance any remaining capacity across healthy Availability Zones. */
     CapacityDistributionStrategy?: "balanced-best-effort" | "balanced-only" | "reservations-then-balanced";
   });
 }
@@ -79394,6 +79421,52 @@ export declare class IntermediateStorage {
   });
 }
 
+export declare class IntermediateTable_IntermediateTableAnalysisRule {
+  constructor(props: {
+    Policy: IntermediateTable_IntermediateTableAnalysisRulePolicy;
+    Type: IntermediateTable_IntermediateTableAnalysisRuleType;
+  });
+}
+
+export declare class IntermediateTable_IntermediateTableAnalysisRulePolicy {
+  constructor(props: {
+    V1: any;
+  });
+}
+
+export declare class IntermediateTable_PopulationAnalysisConfiguration {
+  constructor(props: {
+    SqlParameters?: IntermediateTable_PopulationAnalysisSqlParameters;
+  });
+}
+
+export declare class IntermediateTable_PopulationAnalysisSqlParameters {
+  constructor(props: {
+    AnalysisTemplateArn?: string;
+    QueryString?: string;
+  });
+}
+
+export declare class IntermediateTable_Tag {
+  constructor(props: {
+    Key: string;
+    Value: string;
+  });
+}
+
+export declare class IntermediateTableAnalysisRule {
+  constructor(props: {
+    Policy: IntermediateTable_IntermediateTableAnalysisRulePolicy;
+    Type: IntermediateTable_IntermediateTableAnalysisRuleType;
+  });
+}
+
+export declare class IntermediateTableAnalysisRulePolicy {
+  constructor(props: {
+    V1: any;
+  });
+}
+
 export declare class InternetGateway_Tag {
   constructor(props: {
     /** The tag key. */
@@ -84843,6 +84916,13 @@ export declare class Listener_RedirectConfig {
   });
 }
 
+export declare class Listener_Tag {
+  constructor(props: {
+    Key: string;
+    Value: string;
+  });
+}
+
 export declare class Listener_TargetGroupStickinessConfig {
   constructor(props: {
     /** [Application Load Balancers] The time period, in seconds, during which requests from a client should be routed to the same target group. The range is 1-604800 seconds (7 days). You must specify this value when enabling target group stickiness. */
@@ -98971,6 +99051,19 @@ export declare class Pool_Tag {
   });
 }
 
+export declare class PopulationAnalysisConfiguration {
+  constructor(props: {
+    SqlParameters?: IntermediateTable_PopulationAnalysisSqlParameters;
+  });
+}
+
+export declare class PopulationAnalysisSqlParameters {
+  constructor(props: {
+    AnalysisTemplateArn?: string;
+    QueryString?: string;
+  });
+}
+
 export declare class Port {
   constructor(props: {
     /** Access Direction for Protocol of the Instance(inbound/outbound). */
@@ -127346,7 +127439,7 @@ export type EmailContact_EmailContactStatus = "active" | "inactive";
 
 export type EMRServerlessApplication_Architecture = "ARM64" | "X86_64";
 
-export type EnforcedGuardrailConfiguration_ConfigOwner = "ACCOUNT";
+export type EnforcedGuardrailConfiguration_ConfigOwner = "ACCOUNT" | "ORGANIZATION";
 
 export type EnvironmentAccountConnection_Status = "CONNECTED" | "PENDING" | "REJECTED";
 
@@ -127874,6 +127967,18 @@ export type IntelligentPromptRouter_PromptRouterStatus = "AVAILABLE";
 
 export type IntelligentPromptRouter_PromptRouterType = "custom" | "default";
 
+export type IntermediateTable_AdditionalAnalyses = "ALLOWED" | "NOT_ALLOWED" | "REQUIRED";
+
+export type IntermediateTable_IntermediateTableAnalysisRuleType = "CUSTOM";
+
+export type IntermediateTable_IntermediateTableStatus =
+  | "BASE_TABLE_REMOVED"
+  | "CREATED"
+  | "DISALLOWED_BY_DATA_PROVIDER"
+  | "POPULATE_FAILED"
+  | "POPULATE_STARTED"
+  | "POPULATE_SUCCESS";
+
 export type InternetMonitorMonitor_MonitorConfigState =
   | "ACTIVE"
   | "ERROR"

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@intentius/chant-lexicon-aws",
-  "version": "0.18.14",
+  "version": "0.18.16",
   "description": "AWS CloudFormation lexicon for chant — declarative IaC in TypeScript",
   "license": "Apache-2.0",
   "homepage": "https://intentius.io/chant",
@@ -80,7 +80,7 @@
     "typescript": "^5.9.3"
   },
   "peerDependencies": {
-    "@intentius/chant": "^0.18.14",
+    "@intentius/chant": "^0.18.16",
     "typescript": "^5.9.3"
   }
 }

package/src/components/cloud-executor.test.ts

@@ -1,5 +1,5 @@
 import { describe, test, expect } from "vitest";
-import { applyAwsEndpoint } from "./cloud-executor";
+import { applyAwsEndpoint, applyAwsEndpointArgv } from "./cloud-executor";
 
 describe("applyAwsEndpoint", () => {
   const url = "http://localhost:4566";
@@ -23,3 +23,22 @@ describe("applyAwsEndpoint", () => {
     );
   });
 });
+
+describe("applyAwsEndpointArgv (#926)", () => {
+  const url = "http://localhost:4566";
+
+  test("inserts --endpoint-url after `aws` in an argv when set", () => {
+    expect(
+      applyAwsEndpointArgv(["aws", "cloudformation", "describe-stack-resources", "--stack-name", "prod"], url),
+    ).toEqual(["aws", "--endpoint-url", url, "cloudformation", "describe-stack-resources", "--stack-name", "prod"]);
+  });
+
+  test("passes the argv through unchanged when no endpoint is set", () => {
+    expect(applyAwsEndpointArgv(["aws", "s3", "ls"], undefined)).toEqual(["aws", "s3", "ls"]);
+    expect(applyAwsEndpointArgv(["aws", "s3", "ls"], "")).toEqual(["aws", "s3", "ls"]);
+  });
+
+  test("leaves a non-aws argv untouched", () => {
+    expect(applyAwsEndpointArgv(["docker", "ps"], url)).toEqual(["docker", "ps"]);
+  });
+});

package/src/components/cloud-executor.ts

@@ -344,6 +344,18 @@ export function applyAwsEndpoint(command: string, endpoint: string | undefined):
   return command.replace(/^aws\s/, `aws --endpoint-url ${q(endpoint)} `);
 }
 
+/**
+ * argv-form of {@link applyAwsEndpoint}: insert `--endpoint-url <endpoint>` right
+ * after `aws` (argv[0]) when an endpoint is set, so a *spawned* `aws …` call (live
+ * acquisition, `graph --live`) targets a local emulator instead of real AWS.
+ * Non-`aws` argvs pass through untouched. Same reason as the string form — older
+ * `aws` v2 (<2.13) ignores `AWS_ENDPOINT_URL`.
+ */
+export function applyAwsEndpointArgv(argv: string[], endpoint: string | undefined): string[] {
+  if (!endpoint || argv[0] !== "aws") return argv;
+  return [argv[0], "--endpoint-url", endpoint, ...argv.slice(1)];
+}
+
 function run(command: string): Promise<{ stdout: string; stderr: string }> {
   return execFileAsync(applyAwsEndpoint(command, process.env.AWS_ENDPOINT_URL), {
     maxBuffer: 64 * 1024 * 1024,

package/src/generated/index.d.ts

@@ -3071,7 +3071,7 @@ export declare class AutoScalingGroup {
     TrafficSources?: AutoScalingGroup_TrafficSourceIdentifier[];
     /** A list of subnet IDs for a virtual private cloud (VPC) where instances in the Auto Scaling group can be created.
  If this resource specifies public subnets and is also in a VPC that is defined in the same stack template, you must use the [DependsOn attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-dependson.html) to declare a dependency on the [VPC-gateway attachment](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-vpc-gateway-attachment.html).
-  When you update ``VPCZoneIdentifier``, this retains the same Auto Scaling group and replaces old instances with new ones, according to the specified subnets. You can optionally specify how CloudFormation handles these updates by using an [UpdatePolicy attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-updatepolicy.html).
+  When you update ``VPCZoneIdentifier``, this retains the same Auto Scaling group and replaces old instances with new ones, according to the specified subnets. To control how CloudFormation replaces the instances, add an [UpdatePolicy attribute](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-updatepolicy.html) to your stack. Set the update policy to ``AutoScalingInstanceRefresh``. For more information, see the [AutoScalingInstanceRefresh policy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-attribute-updatepolicy.html#cfn-attributes-updatepolicy-instancerefresh).
   Required to launch instances into a nondefault VPC. If you specify ``VPCZoneIdentifier`` with ``AvailabilityZones``, the subnets that you specify for this property must reside in those Availability Zones. */
     VPCZoneIdentifier?: string[];
   }, attributes?: CFResourceAttributes);
@@ -17804,6 +17804,30 @@ export declare class InterconnectConnection {
   readonly Type: string;
 }
 
+export declare class IntermediateTable {
+  constructor(props: {
+    MembershipIdentifier: string;
+    Name: string;
+    PopulationAnalysisConfiguration: IntermediateTable_PopulationAnalysisConfiguration;
+    AnalysisRules?: IntermediateTable_IntermediateTableAnalysisRule[];
+    Arn?: string;
+    CollaborationArn?: string;
+    CollaborationIdentifier?: string;
+    Description?: string;
+    IntermediateTableIdentifier?: string;
+    KmsKeyArn?: string;
+    MembershipArn?: string;
+    Status?: IntermediateTable_IntermediateTableStatus;
+    Tags?: IntermediateTable_Tag[];
+  }, attributes?: CFResourceAttributes);
+  readonly Arn: string;
+  readonly CollaborationArn: string;
+  readonly CollaborationIdentifier: string;
+  readonly IntermediateTableIdentifier: string;
+  readonly MembershipArn: string;
+  readonly Status: IntermediateTable_IntermediateTableStatus;
+}
+
 export declare class InternetGateway {
   constructor(props: {
     InternetGatewayId?: string;
@@ -20051,6 +20075,7 @@ export declare class Listener {
     /** [HTTPS and TLS listeners] The security policy that defines which protocols and ciphers are supported. For more information, see [Security policies](https://docs.aws.amazon.com/elasticloadbalancing/latest/application/describe-ssl-policies.html) in the *Application Load Balancers Guide* and [Security policies](https://docs.aws.amazon.com/elasticloadbalancing/latest/network/describe-ssl-policies.html) in the *Network Load Balancers Guide*.
  [HTTPS listeners] Updating the security policy can result in interruptions if the load balancer is handling a high volume of traffic. To decrease the possibility of an interruption if your load balancer is handling a high volume of traffic, create an additional load balancer or request an LCU reservation. */
     SslPolicy?: string;
+    Tags?: Listener_Tag[];
   }, attributes?: CFResourceAttributes);
   readonly ListenerArn: string;
 }
@@ -44843,7 +44868,8 @@ export declare class AutoScalingGroup_AvailabilityZoneDistribution {
   constructor(props: {
     /** If launches fail in an Availability Zone, the following strategies are available. The default is ``balanced-best-effort``. 
   +  ``balanced-only`` - If launches fail in an Availability Zone, Auto Scaling will continue to attempt to launch in the unhealthy zone to preserve a balanced distribution.
-  +  ``balanced-best-effort`` - If launches fail in an Availability Zone, Auto Scaling will attempt to launch in another healthy Availability Zone instead. */
+  +  ``balanced-best-effort`` - If launches fail in an Availability Zone, Auto Scaling will attempt to launch in another healthy Availability Zone instead.
+  +  ``reservations-then-balanced`` - Auto Scaling will first attempt to launch into your Capacity Reservations, and then balance any remaining capacity across healthy Availability Zones. */
     CapacityDistributionStrategy?: "balanced-best-effort" | "balanced-only" | "reservations-then-balanced";
   });
 }
@@ -45290,7 +45316,8 @@ export declare class AvailabilityZoneDistribution {
   constructor(props: {
     /** If launches fail in an Availability Zone, the following strategies are available. The default is ``balanced-best-effort``. 
   +  ``balanced-only`` - If launches fail in an Availability Zone, Auto Scaling will continue to attempt to launch in the unhealthy zone to preserve a balanced distribution.
-  +  ``balanced-best-effort`` - If launches fail in an Availability Zone, Auto Scaling will attempt to launch in another healthy Availability Zone instead. */
+  +  ``balanced-best-effort`` - If launches fail in an Availability Zone, Auto Scaling will attempt to launch in another healthy Availability Zone instead.
+  +  ``reservations-then-balanced`` - Auto Scaling will first attempt to launch into your Capacity Reservations, and then balance any remaining capacity across healthy Availability Zones. */
     CapacityDistributionStrategy?: "balanced-best-effort" | "balanced-only" | "reservations-then-balanced";
   });
 }
@@ -79394,6 +79421,52 @@ export declare class IntermediateStorage {
   });
 }
 
+export declare class IntermediateTable_IntermediateTableAnalysisRule {
+  constructor(props: {
+    Policy: IntermediateTable_IntermediateTableAnalysisRulePolicy;
+    Type: IntermediateTable_IntermediateTableAnalysisRuleType;
+  });
+}
+
+export declare class IntermediateTable_IntermediateTableAnalysisRulePolicy {
+  constructor(props: {
+    V1: any;
+  });
+}
+
+export declare class IntermediateTable_PopulationAnalysisConfiguration {
+  constructor(props: {
+    SqlParameters?: IntermediateTable_PopulationAnalysisSqlParameters;
+  });
+}
+
+export declare class IntermediateTable_PopulationAnalysisSqlParameters {
+  constructor(props: {
+    AnalysisTemplateArn?: string;
+    QueryString?: string;
+  });
+}
+
+export declare class IntermediateTable_Tag {
+  constructor(props: {
+    Key: string;
+    Value: string;
+  });
+}
+
+export declare class IntermediateTableAnalysisRule {
+  constructor(props: {
+    Policy: IntermediateTable_IntermediateTableAnalysisRulePolicy;
+    Type: IntermediateTable_IntermediateTableAnalysisRuleType;
+  });
+}
+
+export declare class IntermediateTableAnalysisRulePolicy {
+  constructor(props: {
+    V1: any;
+  });
+}
+
 export declare class InternetGateway_Tag {
   constructor(props: {
     /** The tag key. */
@@ -84843,6 +84916,13 @@ export declare class Listener_RedirectConfig {
   });
 }
 
+export declare class Listener_Tag {
+  constructor(props: {
+    Key: string;
+    Value: string;
+  });
+}
+
 export declare class Listener_TargetGroupStickinessConfig {
   constructor(props: {
     /** [Application Load Balancers] The time period, in seconds, during which requests from a client should be routed to the same target group. The range is 1-604800 seconds (7 days). You must specify this value when enabling target group stickiness. */
@@ -98971,6 +99051,19 @@ export declare class Pool_Tag {
   });
 }
 
+export declare class PopulationAnalysisConfiguration {
+  constructor(props: {
+    SqlParameters?: IntermediateTable_PopulationAnalysisSqlParameters;
+  });
+}
+
+export declare class PopulationAnalysisSqlParameters {
+  constructor(props: {
+    AnalysisTemplateArn?: string;
+    QueryString?: string;
+  });
+}
+
 export declare class Port {
   constructor(props: {
     /** Access Direction for Protocol of the Instance(inbound/outbound). */
@@ -127346,7 +127439,7 @@ export type EmailContact_EmailContactStatus = "active" | "inactive";
 
 export type EMRServerlessApplication_Architecture = "ARM64" | "X86_64";
 
-export type EnforcedGuardrailConfiguration_ConfigOwner = "ACCOUNT";
+export type EnforcedGuardrailConfiguration_ConfigOwner = "ACCOUNT" | "ORGANIZATION";
 
 export type EnvironmentAccountConnection_Status = "CONNECTED" | "PENDING" | "REJECTED";
 
@@ -127874,6 +127967,18 @@ export type IntelligentPromptRouter_PromptRouterStatus = "AVAILABLE";
 
 export type IntelligentPromptRouter_PromptRouterType = "custom" | "default";
 
+export type IntermediateTable_AdditionalAnalyses = "ALLOWED" | "NOT_ALLOWED" | "REQUIRED";
+
+export type IntermediateTable_IntermediateTableAnalysisRuleType = "CUSTOM";
+
+export type IntermediateTable_IntermediateTableStatus =
+  | "BASE_TABLE_REMOVED"
+  | "CREATED"
+  | "DISALLOWED_BY_DATA_PROVIDER"
+  | "POPULATE_FAILED"
+  | "POPULATE_STARTED"
+  | "POPULATE_SUCCESS";
+
 export type InternetMonitorMonitor_MonitorConfigState =
   | "ACTIVE"
   | "ERROR"