@intentius/chant-lexicon-aws 0.3.0 → 0.5.0

package/dist/types/index.d.ts

@@ -366,11 +366,11 @@ export declare class ACMPCAPermission {
 export declare class ActionConnector {
   constructor(props: {
     ActionConnectorId: string;
+    AuthenticationConfig: ActionConnector_AuthConfig;
     AwsAccountId: string;
     Name: string;
     Type: ActionConnector_ActionConnectorType;
     Arn?: string;
-    AuthenticationConfig?: ActionConnector_AuthConfig;
     CreatedTime?: string;
     Description?: string;
     EnabledActions?: string[];
@@ -7781,9 +7781,13 @@ export declare class DaemonTaskDefinition {
     ExecutionRoleArn?: string;
     /** The name of a family that this daemon task definition is registered to. */
     Family?: string;
+    /** The IPC namespace mode for the daemon. The valid values are ``none`` and ``shared``. The default is ``none``.
+ If ``none`` is specified or no value is provided, the daemon runs with its own IPC namespace, isolated from other tasks. If ``shared`` is specified, the daemon joins the host IPC namespace, making it accessible to non-daemon tasks that use ``ipcMode: "host"`` or other daemons that use ``ipcMode: "shared"``. */
     IpcMode?: string;
     /** The amount of memory (in MiB) used by the daemon task. */
     Memory?: string;
+    /** The PID namespace mode for the daemon. The valid values are ``none`` and ``shared``. The default is ``none``.
+ If ``none`` is specified or no value is provided, the daemon runs with its own PID namespace, isolated from other tasks. If ``shared`` is specified, the daemon joins the host PID namespace, making it accessible to non-daemon tasks that use ``pidMode: "host"`` or other daemons that use ``pidMode: "shared"``. */
     PidMode?: string;
     Tags?: DaemonTaskDefinition_Tag[];
     /** The short name or full Amazon Resource Name (ARN) of the IAM role that grants containers in the daemon task permission to call Amazon Web Services APIs on your behalf. */
@@ -10535,6 +10539,19 @@ export declare class DHCPOptions {
   readonly DhcpOptionsId: string;
 }
 
+export declare class Dictionary {
+  constructor(props: {
+    Language: Dictionary_DictionaryLanguage;
+    Name: string;
+    Arn?: string;
+    Entries?: string;
+    Id?: string;
+    Tags?: Record<string, unknown>;
+  }, attributes?: CFResourceAttributes);
+  readonly Arn: string;
+  readonly Id: string;
+}
+
 export declare class Dimension {
   constructor(props: {
     /** Specifies the value or list of values for the dimension. */
@@ -12212,33 +12229,50 @@ export declare class ElasticsearchDomain {
 
 export declare class ElbLoadBalancer {
   constructor(props: {
+    /** The Listeners for the load balancer. You can specify at most one listener per port. */
     Listeners: ElbLoadBalancer_Listeners[];
+    /** Information about where and how access logs are stored for the load balancer. */
     AccessLoggingPolicy?: ElbLoadBalancer_AccessLoggingPolicy;
+    /** Information about a policy for application-controlled session stickiness. */
     AppCookieStickinessPolicy?: ElbLoadBalancer_AppCookieStickinessPolicy[];
+    /** The Availability Zones for a load balancer in a default VPC. For a load balancer in a nondefault VPC, specify Subnets instead. */
     AvailabilityZones?: string[];
+    /** The name of the Route 53 hosted zone that is associated with the load balancer. Internal-facing load balancers. */
     CanonicalHostedZoneName?: string;
+    /** The ID of the Route 53 hosted zone name that is associated with the load balancer. */
     CanonicalHostedZoneNameID?: string;
+    /** If enabled, the load balancer allows existing requests to complete before the load balancer shifts traffic away from a deregistered or unhealthy instance. */
     ConnectionDrainingPolicy?: ElbLoadBalancer_ConnectionDrainingPolicy;
+    /** If enabled, the load balancer allows the connections to remain idle (no data is sent over the connection) for the specified duration. */
     ConnectionSettings?: ElbLoadBalancer_ConnectionSettings;
+    /** If enabled, the load balancer routes the request traffic evenly across all instances regardless of the Availability Zones. */
     CrossZone?: boolean;
+    /** The DNS name for the load balancer */
     DNSName?: string;
+    /** The health check settings to use when evaluating the health of your EC2 instances. */
     HealthCheck?: ElbLoadBalancer_HealthCheck;
-    Id?: string;
+    /** The IDs of the instances for the load balancer. */
     Instances?: string[];
+    /** Information about a policy for duration-based session stickiness. */
     LBCookieStickinessPolicy?: ElbLoadBalancer_LBCookieStickinessPolicy[];
+    /** The name of the load balancer. This name must be unique within your set of load balancers for the region. */
     LoadBalancerName?: string;
+    /** The policies defined for your Classic Load Balancer. Specify only back-end server policies. */
     Policies?: ElbLoadBalancer_Policies[];
+    /** The type of load balancer. Valid only for load balancers in a VPC. */
     Scheme?: string;
+    /** The security groups for the load balancer. Valid only for load balancers in a VPC. */
     SecurityGroups?: string[];
-    SourceSecurityGroupGroupName?: string;
-    SourceSecurityGroupOwnerAlias?: string;
+    SourceSecurityGroup?: ElbLoadBalancer_SourceSecurityGroup;
+    /** The IDs of the subnets for the load balancer. You can specify at most one subnet per Availability Zone. */
     Subnets?: string[];
+    /** The tags associated with a load balancer. */
     Tags?: ElbLoadBalancer_Tag[];
   }, attributes?: CFResourceAttributes);
   readonly CanonicalHostedZoneName: string;
   readonly CanonicalHostedZoneNameID: string;
   readonly DNSName: string;
-  readonly Id: string;
+  readonly SourceSecurityGroup: ElbLoadBalancer_SourceSecurityGroup;
   readonly SourceSecurityGroup_GroupName: string;
   readonly SourceSecurityGroup_OwnerAlias: string;
 }
@@ -14211,6 +14245,8 @@ export declare class FlowLog {
     LogGroupName?: string;
     /** The maximum interval of time during which a flow of packets is captured and aggregated into a flow log record. You can specify 60 seconds (1 minute) or 600 seconds (10 minutes). */
     MaxAggregationInterval?: number;
+    /** The resource types and associated tags for EC2 resources associated with the EC2 Tags feature for log enrichment. */
+    TagFieldSpecifications?: FlowLog_TagFieldSpecification[];
     /** The tags to apply to the flow logs. */
     Tags?: FlowLog_Tag[];
     /** The type of traffic to log. You can log traffic that the resource accepts or rejects, or all traffic. */
@@ -20418,6 +20454,44 @@ export declare class LocationSMB {
   readonly ManagedSecretConfig: LocationSMB_ManagedSecretConfig;
 }
 
+export declare class LogAlarm {
+  constructor(props: {
+    /** The arithmetic operation to use when comparing the specified threshold and the query results. Valid values are GreaterThanOrEqualToThreshold, GreaterThanThreshold, LessThanThreshold, and LessThanOrEqualToThreshold. */
+    ComparisonOperator: string;
+    /** The number of query results that must be breaching to trigger the alarm. */
+    QueryResultsToAlarm: number;
+    /** The number of query results over which data is compared to the specified threshold. */
+    QueryResultsToEvaluate: number;
+    /** The scheduled query configuration for the log alarm. */
+    ScheduledQueryConfiguration: LogAlarm_ScheduledQueryConfiguration;
+    /** The value to compare against the results of the scheduled query evaluation. */
+    Threshold: number;
+    /** The number of log lines to include in alarm notifications. Valid values are 0 to 50. */
+    ActionLogLineCount?: number;
+    /** The ARN of the IAM role that grants CloudWatch permissions to fetch log lines for alarm notifications. Required when ActionLogLineCount is greater than 0. */
+    ActionLogLineRoleArn?: string;
+    /** Indicates whether actions should be executed during any changes to the alarm state. The default is TRUE. */
+    ActionsEnabled?: boolean;
+    /** The list of actions to execute when this alarm transitions into an ALARM state from any other state. */
+    AlarmActions?: string[];
+    /** The description of the log alarm. */
+    AlarmDescription?: string;
+    /** The name of the log alarm. */
+    AlarmName?: string;
+    /** The ARN of the log alarm. */
+    Arn?: string;
+    /** The actions to execute when this alarm transitions to the INSUFFICIENT_DATA state from any other state. */
+    InsufficientDataActions?: string[];
+    /** The actions to execute when this alarm transitions to the OK state from any other state. */
+    OKActions?: string[];
+    /** A list of key-value pairs to associate with the log alarm. */
+    Tags?: LogAlarm_Tag[];
+    /** Sets how this alarm is to handle missing data points. Valid values are breaching, notBreaching, ignore, and missing. */
+    TreatMissingData?: string;
+  }, attributes?: CFResourceAttributes);
+  readonly Arn: string;
+}
+
 export declare class LogAnomalyDetectionIntegration {
   constructor(props: {
     AccountId?: string;
@@ -22992,6 +23066,25 @@ export declare class NeptuneEventSubscription {
   }, attributes?: CFResourceAttributes);
 }
 
+export declare class NeptuneGlobalCluster {
+  constructor(props: {
+    /** Whether deletion protection is enabled. */
+    DeletionProtection?: boolean;
+    /** The name of the database engine. */
+    Engine?: "neptune";
+    /** The version number of the database engine. */
+    EngineVersion?: string;
+    /** The cluster identifier of the global database cluster. */
+    GlobalClusterIdentifier?: string;
+    /** The Amazon Resource Name (ARN) of an existing Neptune DB cluster to use as the primary cluster of the new global database. */
+    SourceDBClusterIdentifier?: string;
+    /** Whether the global database cluster is storage encrypted. */
+    StorageEncrypted?: boolean;
+    /** An array of key-value pairs to apply to this resource. */
+    Tags?: NeptuneGlobalCluster_Tag[];
+  }, attributes?: CFResourceAttributes);
+}
+
 export declare class NeptuneGraphGraph {
   constructor(props: {
     /** Memory for the Graph. */
@@ -25382,6 +25475,8 @@ export declare class PlaybackConfiguration {
     ConfigurationAliases?: any;
     /** The configuration for DASH content. */
     DashConfiguration?: PlaybackConfiguration_DashConfiguration;
+    /** A map of event names to function identifiers for custom processing during session lifecycle events. */
+    FunctionMapping?: Record<string, unknown>;
     /** The configuration for HLS content. */
     HlsConfiguration?: PlaybackConfiguration_HlsConfiguration;
     /** The setting that controls whether players can use stitched or guided ad insertion. The default, STITCHED_ONLY, forces all player sessions to use stitched (server-side) ad insertion. Choosing PLAYER_SELECT allows players to select either stitched or guided ad insertion at session-initialization time. The default for players that do not specify an insertion mode is stitched. */
@@ -30245,6 +30340,7 @@ export declare class SageMakerCluster {
     NodeRecovery?: "Automatic" | "None";
     Orchestrator?: Record<string, unknown>;
     RestrictedInstanceGroups?: any;
+    RestrictedInstanceGroupsConfig?: SageMakerCluster_RestrictedInstanceGroupsConfig;
     /** Custom tags for managing the SageMaker HyperPod cluster as an AWS resource. You can add tags to your cluster in the same way you add them in other AWS services that support tagging. */
     Tags?: SageMakerCluster_Tag[];
     TieredStorageConfig?: SageMakerCluster_TieredStorageConfig;
@@ -32398,6 +32494,8 @@ export declare class SSMAssociation {
     /** The name of the SSM document. */
     Name: string;
     ApplyOnlyAtCronInterval?: boolean;
+    /** A role used by association to take actions on your behalf. */
+    AssociationDispatchAssumeRole?: string;
     /** Unique identifier of the association. */
     AssociationId?: string;
     /** The name of the association. */
@@ -32418,6 +32516,8 @@ export declare class SSMAssociation {
     ScheduleExpression?: string;
     ScheduleOffset?: number;
     SyncCompliance?: "AUTO" | "MANUAL";
+    /** A key-value pair to associate with a resource. */
+    Tags?: SSMAssociation_Tag[];
     /** The targets that the SSM document sends commands to. */
     Targets?: SSMAssociation_Target[];
     WaitForSuccessTimeoutSeconds?: number;
@@ -37903,9 +38003,15 @@ export declare class AccessLog {
 
 export declare class AccessLoggingPolicy {
   constructor(props: {
+    /** Specifies whether access logs are enabled for the load balancer. */
     Enabled: boolean;
+    /** The name of the Amazon S3 bucket where the access logs are stored. */
     S3BucketName: string;
+    /** The interval for publishing the access logs. You can specify an interval of either 5 minutes or 60 minutes.
+
+Default: 60 minutes */
     EmitInterval?: number;
+    /** The logical hierarchy you created for your Amazon S3 bucket, for example `my-bucket-prefix/prod`. If the prefix is not provided, the log is placed at the root level of the bucket. */
     S3BucketPrefix?: string;
   });
 }
@@ -46199,7 +46305,9 @@ export declare class AppConfigResourceObject {
 
 export declare class AppCookieStickinessPolicy {
   constructor(props: {
+    /** The name of the application cookie used for stickiness. */
     CookieName: string;
+    /** The mnemonic name for the policy being created. The name must be unique within a set of policies for this load balancer. */
     PolicyName: string;
   });
 }
@@ -49235,6 +49343,13 @@ export declare class Asg {
   });
 }
 
+export declare class AspectRatio {
+  constructor(props: {
+    Height: number;
+    Width: number;
+  });
+}
+
 export declare class AssertionAttributes {
   constructor(props: {
     /** Name of the attribute within the SAML assert to use as the users email in Grafana. */
@@ -58499,6 +58614,7 @@ export declare class CentralizationRuleDestination {
     Region: string;
     Account?: string;
     DestinationLogsConfiguration?: OrganizationCentralizationRule_DestinationLogsConfiguration;
+    DestinationMetricsConfiguration?: OrganizationCentralizationRule_DestinationMetricsConfiguration;
   });
 }
 
@@ -58507,6 +58623,7 @@ export declare class CentralizationRuleSource {
     Regions: any;
     Scope?: string;
     SourceLogsConfiguration?: OrganizationCentralizationRule_SourceLogsConfiguration;
+    SourceMetricsConfiguration?: OrganizationCentralizationRule_SourceMetricsConfiguration;
   });
 }
 
@@ -60756,7 +60873,6 @@ export declare class ClusterParameterGroup_Tag {
 
 export declare class ClusterRestrictedInstanceGroup {
   constructor(props: {
-    EnvironmentConfig: SageMakerCluster_EnvironmentConfig;
     ExecutionRole: string;
     /** The number of instances you specified to add to the restricted instance group of a SageMaker HyperPod cluster. */
     InstanceCount: number;
@@ -60764,6 +60880,7 @@ export declare class ClusterRestrictedInstanceGroup {
     InstanceType: string;
     /** The number of instances that are currently in the restricted instance group of a SageMaker HyperPod cluster. */
     CurrentCount?: number;
+    EnvironmentConfig?: SageMakerCluster_EnvironmentConfig;
     InstanceStorageConfigs?: any;
     OnStartDeepHealthChecks?: any;
     OverrideVpcConfig?: SageMakerCluster_VpcConfig;
@@ -64461,7 +64578,9 @@ export declare class ConnectionAliasAssociation {
 
 export declare class ConnectionDrainingPolicy {
   constructor(props: {
+    /** Specifies whether connection draining is enabled for the load balancer. */
     Enabled: boolean;
+    /** The maximum time, in seconds, to keep the existing connections open before deregistering the instances. */
     Timeout?: number;
   });
 }
@@ -64596,6 +64715,7 @@ export declare class ConnectionPortRange {
 
 export declare class ConnectionSettings {
   constructor(props: {
+    /** The time, in seconds, that the connection is allowed to be idle (no data has been sent over the connection) before it is closed by the load balancer. */
     IdleTimeout: number;
   });
 }
@@ -75419,6 +75539,12 @@ export declare class DestinationLogsConfiguration {
   });
 }
 
+export declare class DestinationMetricsConfiguration {
+  constructor(props: {
+    BackupConfiguration?: OrganizationCentralizationRule_MetricsBackupConfiguration;
+  });
+}
+
 export declare class DestinationPolicy {
   constructor(props: {
     /** The name of the delivery destination to assign this policy to */
@@ -80309,13 +80435,6 @@ export declare class EFSAccessPoint_RootDirectory {
   });
 }
 
-export declare class EfsAccessPointConfiguration {
-  constructor(props: {
-    AccessPointArn: string;
-    MountPath: string;
-  });
-}
-
 export declare class EFSAuthorizationConfig {
   constructor(props: {
     AccessPointId?: string;
@@ -81207,74 +81326,129 @@ export declare class ELBInfo {
 
 export declare class ElbLoadBalancer_AccessLoggingPolicy {
   constructor(props: {
+    /** Specifies whether access logs are enabled for the load balancer. */
     Enabled: boolean;
+    /** The name of the Amazon S3 bucket where the access logs are stored. */
     S3BucketName: string;
+    /** The interval for publishing the access logs. You can specify an interval of either 5 minutes or 60 minutes.
+
+Default: 60 minutes */
     EmitInterval?: number;
+    /** The logical hierarchy you created for your Amazon S3 bucket, for example `my-bucket-prefix/prod`. If the prefix is not provided, the log is placed at the root level of the bucket. */
     S3BucketPrefix?: string;
   });
 }
 
 export declare class ElbLoadBalancer_AppCookieStickinessPolicy {
   constructor(props: {
+    /** The name of the application cookie used for stickiness. */
     CookieName: string;
+    /** The mnemonic name for the policy being created. The name must be unique within a set of policies for this load balancer. */
     PolicyName: string;
   });
 }
 
 export declare class ElbLoadBalancer_ConnectionDrainingPolicy {
   constructor(props: {
+    /** Specifies whether connection draining is enabled for the load balancer. */
     Enabled: boolean;
+    /** The maximum time, in seconds, to keep the existing connections open before deregistering the instances. */
     Timeout?: number;
   });
 }
 
 export declare class ElbLoadBalancer_ConnectionSettings {
   constructor(props: {
+    /** The time, in seconds, that the connection is allowed to be idle (no data has been sent over the connection) before it is closed by the load balancer. */
     IdleTimeout: number;
   });
 }
 
 export declare class ElbLoadBalancer_HealthCheck {
   constructor(props: {
+    /** The number of consecutive health checks successes required before moving the instance to the `Healthy` state. */
     HealthyThreshold: string;
+    /** The approximate interval, in seconds, between health checks of an individual instance. */
     Interval: string;
+    /** The instance being checked. */
     Target: string;
+    /** The amount of time, in seconds, during which no response means a failed health check.
+
+This value must be less than the `Interval` value. */
     Timeout: string;
+    /** The number of consecutive health check failures required before moving the instance to the `Unhealthy` state. */
     UnhealthyThreshold: string;
   });
 }
 
 export declare class ElbLoadBalancer_LBCookieStickinessPolicy {
   constructor(props: {
+    /** The time period, in seconds, after which the cookie should be considered stale. If this parameter is not specified, the stickiness session lasts for the duration of the browser session. */
     CookieExpirationPeriod?: string;
+    /** The name of the policy. This name must be unique within the set of policies for this load balancer. */
     PolicyName?: string;
   });
 }
 
 export declare class ElbLoadBalancer_Listeners {
   constructor(props: {
+    /** The port on which the instance is listening. */
     InstancePort: string;
+    /** The port on which the load balancer is listening. On EC2-VPC, you can specify any port from the range 1-65535. On EC2-Classic, you can specify any port from the following list: 25, 80, 443, 465, 587, 1024-65535. */
     LoadBalancerPort: string;
+    /** The load balancer transport protocol to use for routing: HTTP, HTTPS, TCP, or SSL. */
     Protocol: "HTTP" | "HTTPS" | "SSL" | "TCP";
+    /** The protocol to use for routing traffic to instances: HTTP, HTTPS, TCP, or SSL.
+
+If the front-end protocol is TCP or SSL, the back-end protocol must be TCP or SSL. If the front-end protocol is HTTP or HTTPS, the back-end protocol must be HTTP or HTTPS.
+
+If there is another listener with the same `InstancePort` whose `InstanceProtocol` is secure, (HTTPS or SSL), the listener's `InstanceProtocol` must also be secure.
+
+If there is another listener with the same `InstancePort` whose `InstanceProtocol` is HTTP or TCP, the listener's `InstanceProtocol` must be HTTP or TCP. */
     InstanceProtocol?: string;
+    /** The names of the policies to associate with the listener. */
     PolicyNames?: string[];
+    /** The Amazon Resource Name (ARN) of the server certificate. */
     SSLCertificateId?: string;
   });
 }
 
 export declare class ElbLoadBalancer_Policies {
   constructor(props: {
-    Attributes: Record<string, unknown>[];
+    /** The policy attributes. */
+    Attributes: ElbLoadBalancer_PolicyItem[];
+    /** The name of the policy. */
     PolicyName: string;
+    /** The name of the policy type. */
     PolicyType: string;
+    /** The instance ports for the policy. Required only for some policy types. */
     InstancePorts?: string[];
+    /** The load balancer ports for the policy. Required only for some policy types. */
     LoadBalancerPorts?: string[];
   });
 }
 
+export declare class ElbLoadBalancer_PolicyItem {
+  constructor(props: {
+    Name?: string;
+    Value?: string;
+  });
+}
+
+export declare class ElbLoadBalancer_SourceSecurityGroup {
+  constructor(props: {
+    /** The name of the security group that you can use as part of your inbound rules for your load balancer's back-end instances. */
+    GroupName?: string;
+    /** The owner of the source security group. */
+    OwnerAlias?: string;
+  });
+}
+
 export declare class ElbLoadBalancer_Tag {
   constructor(props: {
+    /** The key name of the tag. You can specify a value that's 1 to 128 Unicode characters in length and can't be prefixed with `aws:`. You can use any of the following characters: the set of Unicode letters, digits, whitespace, `_`, `.`, `/`, `=`, `+`, and `-`. */
     Key: string;
+    /** The value for the tag. You can specify a value that's 1 to 256 characters in length. */
     Value: string;
   });
 }
@@ -86198,6 +86372,13 @@ export declare class FederationParameters {
   });
 }
 
+export declare class Feed_AspectRatio {
+  constructor(props: {
+    Height: number;
+    Width: number;
+  });
+}
+
 export declare class Feed_ClippingConfig {
   constructor(props: {
     CallbackMetadata?: string;
@@ -86213,6 +86394,15 @@ export declare class Feed_GetOutput {
   });
 }
 
+export declare class Feed_SubtitlingConfig {
+  constructor(props: {
+    Language: Feed_TranscriptionLanguage;
+    AspectRatio?: Feed_AspectRatio;
+    Dictionary?: string;
+    ProfanityFilter?: Feed_ProfanityFilterMode;
+  });
+}
+
 export declare class FeedbackAttributes {
   constructor(props: {
     /** If the value is true, you receive email notifications when bounce or complaint events occur */
@@ -87025,6 +87215,13 @@ export declare class FlowLog_Tag {
   });
 }
 
+export declare class FlowLog_TagFieldSpecification {
+  constructor(props: {
+    ResourceType: string;
+    TagKeys: string[];
+  });
+}
+
 export declare class FlowModule {
   constructor(props: {
     /** The identifier of the application that you want to give access to. */
@@ -91907,12 +92104,23 @@ export declare class Harness_CustomJWTAuthorizerConfiguration {
     AllowedClients?: string[];
     AllowedScopes?: string[];
     CustomClaims?: Harness_CustomClaimValidationType[];
+    PrivateEndpoint?: Harness_PrivateEndpoint;
+    PrivateEndpointOverrides?: Harness_PrivateEndpointOverride[];
+  });
+}
+
+export declare class Harness_EfsAccessPointConfiguration {
+  constructor(props: {
+    AccessPointArn: string;
+    MountPath: string;
   });
 }
 
 export declare class Harness_FilesystemConfiguration {
   constructor(props: {
-    SessionStorage: Harness_SessionStorageConfiguration;
+    EfsAccessPoint?: Harness_EfsAccessPointConfiguration;
+    S3FilesAccessPoint?: Harness_S3FilesAccessPointConfiguration;
+    SessionStorage?: Harness_SessionStorageConfiguration;
   });
 }
 
@@ -91946,8 +92154,10 @@ export declare class Harness_HarnessAgentCoreMemoryConfiguration {
 
 export declare class Harness_HarnessAgentCoreMemoryRetrievalConfig {
   constructor(props: {
+    /** Minimum relevance score for retrieved memories. Typed as both number and string because CloudFormation marshals scalars nested in dynamic-key (patternProperties) maps as strings, while direct API/CDK callers send a JSON number; both forms must validate. */
     RelevanceScore?: number;
     StrategyId?: string;
+    /** Maximum number of memory records to retrieve. Typed as both integer and string because CloudFormation marshals scalars nested in dynamic-key (patternProperties) maps as strings, while direct API/CDK callers send a JSON integer; both forms must validate. */
     TopK?: number;
   });
 }
@@ -91969,6 +92179,9 @@ export declare class Harness_HarnessAgentCoreRuntimeEnvironment {
 export declare class Harness_HarnessBedrockModelConfig {
   constructor(props: {
     ModelId: string;
+    /** Provider-specific parameters passed through to the model provider unchanged. */
+    AdditionalParams?: Record<string, unknown>;
+    ApiFormat?: "chat_completions" | "converse_stream" | "responses";
     MaxTokens?: number;
     Temperature?: number;
     TopP?: number;
@@ -92014,6 +92227,19 @@ export declare class Harness_HarnessInlineFunctionConfig {
   });
 }
 
+export declare class Harness_HarnessLiteLlmModelConfig {
+  constructor(props: {
+    ModelId: string;
+    /** Provider-specific parameters passed through to LiteLLM unchanged. */
+    AdditionalParams?: Record<string, unknown>;
+    ApiBase?: string;
+    ApiKeyArn?: string;
+    MaxTokens?: number;
+    Temperature?: number;
+    TopP?: number;
+  });
+}
+
 export declare class Harness_HarnessMemoryConfiguration {
   constructor(props: {
     AgentCoreMemoryConfiguration?: Harness_HarnessAgentCoreMemoryConfiguration;
@@ -92024,6 +92250,7 @@ export declare class Harness_HarnessModelConfiguration {
   constructor(props: {
     BedrockModelConfig?: Harness_HarnessBedrockModelConfig;
     GeminiModelConfig?: Harness_HarnessGeminiModelConfig;
+    LiteLlmModelConfig?: Harness_HarnessLiteLlmModelConfig;
     OpenAiModelConfig?: Harness_HarnessOpenAiModelConfig;
   });
 }
@@ -92032,6 +92259,9 @@ export declare class Harness_HarnessOpenAiModelConfig {
   constructor(props: {
     ApiKeyArn: string;
     ModelId: string;
+    /** Provider-specific parameters passed through to the model provider unchanged. */
+    AdditionalParams?: Record<string, unknown>;
+    ApiFormat?: "chat_completions" | "responses";
     MaxTokens?: number;
     Temperature?: number;
     TopP?: number;
@@ -92047,8 +92277,36 @@ export declare class Harness_HarnessRemoteMcpConfig {
 
 export declare class Harness_HarnessSkill {
   constructor(props: {
+    Git?: Harness_HarnessSkillGitSource;
     /** The filesystem path to the skill definition. */
-    Path: string;
+    Path?: string;
+    S3?: Harness_HarnessSkillS3Source;
+  });
+}
+
+export declare class Harness_HarnessSkillGitAuth {
+  constructor(props: {
+    /** The ARN of the credential in AgentCore Identity containing the password or personal access token. */
+    CredentialArn: string;
+    /** Username for authentication. Defaults to 'oauth2' if not specified. */
+    Username?: string;
+  });
+}
+
+export declare class Harness_HarnessSkillGitSource {
+  constructor(props: {
+    /** The HTTPS URL of the git repository. */
+    Url: string;
+    Auth?: Harness_HarnessSkillGitAuth;
+    /** Subdirectory within the repository containing the skill. */
+    Path?: string;
+  });
+}
+
+export declare class Harness_HarnessSkillS3Source {
+  constructor(props: {
+    /** The S3 URI pointing to the skill directory (e.g., s3://bucket/skills/my-skill/). */
+    Uri: string;
   });
 }
 
@@ -92112,6 +92370,17 @@ export declare class Harness_LifecycleConfiguration {
   });
 }
 
+export declare class Harness_ManagedVpcResource {
+  constructor(props: {
+    EndpointIpAddressType: "IPV4" | "IPV6";
+    SubnetIds: string[];
+    VpcIdentifier: string;
+    RoutingDomain?: string;
+    SecurityGroupIds?: string[];
+    Tags?: Record<string, unknown>;
+  });
+}
+
 export declare class Harness_NetworkConfiguration {
   constructor(props: {
     NetworkMode: "PUBLIC" | "VPC";
@@ -92129,6 +92398,33 @@ export declare class Harness_OAuthCredentialProvider {
   });
 }
 
+export declare class Harness_PrivateEndpoint {
+  constructor(props: {
+    ManagedVpcResource?: Harness_ManagedVpcResource;
+    SelfManagedLatticeResource?: Harness_SelfManagedLatticeResource;
+  });
+}
+
+export declare class Harness_PrivateEndpointOverride {
+  constructor(props: {
+    Domain: string;
+    PrivateEndpoint: Harness_PrivateEndpoint;
+  });
+}
+
+export declare class Harness_S3FilesAccessPointConfiguration {
+  constructor(props: {
+    AccessPointArn: string;
+    MountPath: string;
+  });
+}
+
+export declare class Harness_SelfManagedLatticeResource {
+  constructor(props: {
+    ResourceConfigurationIdentifier: string;
+  });
+}
+
 export declare class Harness_SessionStorageConfiguration {
   constructor(props: {
     MountPath: string;
@@ -92179,8 +92475,10 @@ export declare class HarnessAgentCoreMemoryConfiguration {
 
 export declare class HarnessAgentCoreMemoryRetrievalConfig {
   constructor(props: {
+    /** Minimum relevance score for retrieved memories. Typed as both number and string because CloudFormation marshals scalars nested in dynamic-key (patternProperties) maps as strings, while direct API/CDK callers send a JSON number; both forms must validate. */
     RelevanceScore?: number;
     StrategyId?: string;
+    /** Maximum number of memory records to retrieve. Typed as both integer and string because CloudFormation marshals scalars nested in dynamic-key (patternProperties) maps as strings, while direct API/CDK callers send a JSON integer; both forms must validate. */
     TopK?: number;
   });
 }
@@ -92202,6 +92500,9 @@ export declare class HarnessAgentCoreRuntimeEnvironment {
 export declare class HarnessBedrockModelConfig {
   constructor(props: {
     ModelId: string;
+    /** Provider-specific parameters passed through to the model provider unchanged. */
+    AdditionalParams?: Record<string, unknown>;
+    ApiFormat?: "chat_completions" | "converse_stream" | "responses";
     MaxTokens?: number;
     Temperature?: number;
     TopP?: number;
@@ -92247,6 +92548,19 @@ export declare class HarnessInlineFunctionConfig {
   });
 }
 
+export declare class HarnessLiteLlmModelConfig {
+  constructor(props: {
+    ModelId: string;
+    /** Provider-specific parameters passed through to LiteLLM unchanged. */
+    AdditionalParams?: Record<string, unknown>;
+    ApiBase?: string;
+    ApiKeyArn?: string;
+    MaxTokens?: number;
+    Temperature?: number;
+    TopP?: number;
+  });
+}
+
 export declare class HarnessMemoryConfiguration {
   constructor(props: {
     AgentCoreMemoryConfiguration?: Harness_HarnessAgentCoreMemoryConfiguration;
@@ -92257,6 +92571,7 @@ export declare class HarnessModelConfiguration {
   constructor(props: {
     BedrockModelConfig?: Harness_HarnessBedrockModelConfig;
     GeminiModelConfig?: Harness_HarnessGeminiModelConfig;
+    LiteLlmModelConfig?: Harness_HarnessLiteLlmModelConfig;
     OpenAiModelConfig?: Harness_HarnessOpenAiModelConfig;
   });
 }
@@ -92265,6 +92580,9 @@ export declare class HarnessOpenAiModelConfig {
   constructor(props: {
     ApiKeyArn: string;
     ModelId: string;
+    /** Provider-specific parameters passed through to the model provider unchanged. */
+    AdditionalParams?: Record<string, unknown>;
+    ApiFormat?: "chat_completions" | "responses";
     MaxTokens?: number;
     Temperature?: number;
     TopP?: number;
@@ -92280,8 +92598,36 @@ export declare class HarnessRemoteMcpConfig {
 
 export declare class HarnessSkill {
   constructor(props: {
+    Git?: Harness_HarnessSkillGitSource;
     /** The filesystem path to the skill definition. */
-    Path: string;
+    Path?: string;
+    S3?: Harness_HarnessSkillS3Source;
+  });
+}
+
+export declare class HarnessSkillGitAuth {
+  constructor(props: {
+    /** The ARN of the credential in AgentCore Identity containing the password or personal access token. */
+    CredentialArn: string;
+    /** Username for authentication. Defaults to 'oauth2' if not specified. */
+    Username?: string;
+  });
+}
+
+export declare class HarnessSkillGitSource {
+  constructor(props: {
+    /** The HTTPS URL of the git repository. */
+    Url: string;
+    Auth?: Harness_HarnessSkillGitAuth;
+    /** Subdirectory within the repository containing the skill. */
+    Path?: string;
+  });
+}
+
+export declare class HarnessSkillS3Source {
+  constructor(props: {
+    /** The S3 URI pointing to the skill directory (e.g., s3://bucket/skills/my-skill/). */
+    Uri: string;
   });
 }
 
@@ -101340,7 +101686,6 @@ export declare class LambdaCapacityProvider_InstanceRequirements {
 
 export declare class LambdaCapacityProvider_PropagateTagsConfig {
   constructor(props: {
-    /** A list of tags to explicitly propagate to managed resources. */
     ExplicitTags?: LambdaCapacityProvider_Tag[];
     Mode?: LambdaCapacityProvider_PropagateTagsMode;
   });
@@ -101786,7 +102131,7 @@ export declare class LaunchTemplate_CapacityReservationTarget {
 
 export declare class LaunchTemplate_ConnectionTrackingSpecification {
   constructor(props: {
-    /** Timeout (in seconds) for idle TCP connections in an established state. Min: 60 seconds. Max: 432000 seconds (5 days). Default: 432000 seconds. Recommended: Less than 432000 seconds. */
+    /** Timeout (in seconds) for idle TCP connections in an established state. Min: 60 seconds. Max: 432000 seconds (5 days). Default: 350 seconds for Nitro v6 instance types (excluding P6e-GB200); 432000 seconds for all other instance types (including P6e-GB200). Recommended: Less than 432000 seconds. */
     TcpEstablishedTimeout?: number;
     /** Timeout (in seconds) for idle UDP flows classified as streams which have seen more than one request-response transaction. Min: 60 seconds. Max: 180 seconds (3 minutes). Default: 180 seconds. */
     UdpStreamTimeout?: number;
@@ -102711,7 +103056,9 @@ export declare class LayoutSections {
 
 export declare class LBCookieStickinessPolicy {
   constructor(props: {
+    /** The time period, in seconds, after which the cookie should be considered stale. If this parameter is not specified, the stickiness session lasts for the duration of the browser session. */
     CookieExpirationPeriod?: string;
+    /** The name of the policy. This name must be unique within the set of policies for this load balancer. */
     PolicyName?: string;
   });
 }
@@ -104009,11 +104356,23 @@ export declare class ListenerRule_Transform {
 
 export declare class Listeners {
   constructor(props: {
+    /** The port on which the instance is listening. */
     InstancePort: string;
+    /** The port on which the load balancer is listening. On EC2-VPC, you can specify any port from the range 1-65535. On EC2-Classic, you can specify any port from the following list: 25, 80, 443, 465, 587, 1024-65535. */
     LoadBalancerPort: string;
+    /** The load balancer transport protocol to use for routing: HTTP, HTTPS, TCP, or SSL. */
     Protocol: "HTTP" | "HTTPS" | "SSL" | "TCP";
+    /** The protocol to use for routing traffic to instances: HTTP, HTTPS, TCP, or SSL.
+
+If the front-end protocol is TCP or SSL, the back-end protocol must be TCP or SSL. If the front-end protocol is HTTP or HTTPS, the back-end protocol must be HTTP or HTTPS.
+
+If there is another listener with the same `InstancePort` whose `InstanceProtocol` is secure, (HTTPS or SSL), the listener's `InstanceProtocol` must also be secure.
+
+If there is another listener with the same `InstancePort` whose `InstanceProtocol` is HTTP or TCP, the listener's `InstanceProtocol` must be HTTP or TCP. */
     InstanceProtocol?: string;
+    /** The names of the policies to associate with the listener. */
     PolicyNames?: string[];
+    /** The Amazon Resource Name (ARN) of the server certificate. */
     SSLCertificateId?: string;
   });
 }
@@ -104773,6 +105132,41 @@ export declare class Log {
   });
 }
 
+export declare class LogAlarm_ScheduleConfiguration {
+  constructor(props: {
+    /** The expression that defines when the scheduled query runs, e.g. rate(1 minute). */
+    ScheduleExpression: string;
+    /** The number of seconds into the past to end the query window. */
+    EndTimeOffset?: number;
+    /** The number of seconds into the past to start the query window. */
+    StartTimeOffset?: number;
+  });
+}
+
+export declare class LogAlarm_ScheduledQueryConfiguration {
+  constructor(props: {
+    /** The aggregation expression for the scheduled query, e.g. count(*) or avg(latency) by host. */
+    AggregationExpression: string;
+    /** The log groups to query. */
+    LogGroupIdentifiers: string[];
+    /** The query string to execute against the specified log groups. */
+    QueryString: string;
+    /** The schedule configuration. */
+    ScheduleConfiguration: LogAlarm_ScheduleConfiguration;
+    /** The ARN of the IAM role that grants permissions to execute the scheduled query. */
+    ScheduledQueryRoleARN: string;
+  });
+}
+
+export declare class LogAlarm_Tag {
+  constructor(props: {
+    /** A unique identifier for the tag. The combination of tag keys and values can help you organize and categorize your resources. */
+    Key: string;
+    /** The value for the specified tag key. */
+    Value: string;
+  });
+}
+
 export declare class LogConfig {
   constructor(props: {
     /** The service role that AWS AppSync will assume to publish to Amazon CloudWatch Logs in your account. */
@@ -106260,16 +106654,6 @@ export declare class ManagedStorageEncryptionConfiguration {
   });
 }
 
-export declare class ManagedVpcResource {
-  constructor(props: {
-    EndpointIpAddressType: GatewayTarget_EndpointIpAddressType;
-    SubnetIds: string[];
-    VpcIdentifier: string;
-    RoutingDomain?: string;
-    SecurityGroupIds?: string[];
-  });
-}
-
 export declare class ManagedWordsConfig {
   constructor(props: {
     Type: Guardrail_ManagedWordsType;
@@ -111293,6 +111677,12 @@ export declare class Metrics {
   });
 }
 
+export declare class MetricsBackupConfiguration {
+  constructor(props: {
+    Region: string;
+  });
+}
+
 export declare class MetricsCollection {
   constructor(props: {
     /** The frequency at which Amazon EC2 Auto Scaling sends aggregated data to CloudWatch. The only valid value is ``1Minute``. */
@@ -114802,6 +115192,15 @@ export declare class NeptuneEventSubscription_Tag {
   });
 }
 
+export declare class NeptuneGlobalCluster_Tag {
+  constructor(props: {
+    /** The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.  */
+    Key: string;
+    /** The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.  */
+    Value?: string;
+  });
+}
+
 export declare class NeptuneGlobalDatabaseConfiguration {
   constructor(props: {
     Behavior: any;
@@ -118004,6 +118403,7 @@ export declare class OrganizationCentralizationRule_CentralizationRuleDestinatio
     Region: string;
     Account?: string;
     DestinationLogsConfiguration?: OrganizationCentralizationRule_DestinationLogsConfiguration;
+    DestinationMetricsConfiguration?: OrganizationCentralizationRule_DestinationMetricsConfiguration;
   });
 }
 
@@ -118012,6 +118412,7 @@ export declare class OrganizationCentralizationRule_CentralizationRuleSource {
     Regions: any;
     Scope?: string;
     SourceLogsConfiguration?: OrganizationCentralizationRule_SourceLogsConfiguration;
+    SourceMetricsConfiguration?: OrganizationCentralizationRule_SourceMetricsConfiguration;
   });
 }
 
@@ -118023,6 +118424,12 @@ export declare class OrganizationCentralizationRule_DestinationLogsConfiguration
   });
 }
 
+export declare class OrganizationCentralizationRule_DestinationMetricsConfiguration {
+  constructor(props: {
+    BackupConfiguration?: OrganizationCentralizationRule_MetricsBackupConfiguration;
+  });
+}
+
 export declare class OrganizationCentralizationRule_LogGroupNameConfiguration {
   constructor(props: {
     LogGroupNamePattern: string;
@@ -118044,6 +118451,12 @@ export declare class OrganizationCentralizationRule_LogsEncryptionConfiguration
   });
 }
 
+export declare class OrganizationCentralizationRule_MetricsBackupConfiguration {
+  constructor(props: {
+    Region: string;
+  });
+}
+
 export declare class OrganizationCentralizationRule_SourceLogsConfiguration {
   constructor(props: {
     EncryptedLogGroupStrategy: "ALLOW" | "SKIP";
@@ -118052,6 +118465,12 @@ export declare class OrganizationCentralizationRule_SourceLogsConfiguration {
   });
 }
 
+export declare class OrganizationCentralizationRule_SourceMetricsConfiguration {
+  constructor(props: {
+    MetricsSelectionCriteria?: string;
+  });
+}
+
 export declare class OrganizationCentralizationRule_Tag {
   constructor(props: {
     /** The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. */
@@ -122684,6 +123103,13 @@ export declare class PolicyInformation {
   });
 }
 
+export declare class PolicyItem {
+  constructor(props: {
+    Name?: string;
+    Value?: string;
+  });
+}
+
 export declare class PolicyMap {
   constructor(props: {
     AZ: ResiliencyPolicy_FailurePolicy;
@@ -123475,6 +123901,20 @@ export declare class PrivateDnsPropertiesMutable {
   });
 }
 
+export declare class PrivateEndpoint {
+  constructor(props: {
+    ManagedVpcResource?: Harness_ManagedVpcResource;
+    SelfManagedLatticeResource?: Harness_SelfManagedLatticeResource;
+  });
+}
+
+export declare class PrivateEndpointOverride {
+  constructor(props: {
+    Domain: string;
+    PrivateEndpoint: Harness_PrivateEndpoint;
+  });
+}
+
 export declare class PrivateIpAdd {
   constructor(props: {
     /** Indicates whether the private IPv4 address is the primary private IPv4 address. Only one IPv4 address can be designated as primary. */
@@ -124304,7 +124744,6 @@ export declare class PromptVersion_ToolSpecification {
 
 export declare class PropagateTagsConfig {
   constructor(props: {
-    /** A list of tags to explicitly propagate to managed resources. */
     ExplicitTags?: LambdaCapacityProvider_Tag[];
     Mode?: LambdaCapacityProvider_PropagateTagsMode;
   });
@@ -139822,6 +140261,12 @@ export declare class RestoreTestingSelection_ProtectedResourceConditions {
   });
 }
 
+export declare class RestrictedInstanceGroupsConfig {
+  constructor(props: {
+    SharedEnvironmentConfig: SageMakerCluster_SharedEnvironmentConfig;
+  });
+}
+
 export declare class RestrictedPeriod {
   constructor(props: {
     EndDate: string;
@@ -141927,13 +142372,6 @@ export declare class S3FilesAccessPoint_RootDirectory {
   });
 }
 
-export declare class S3FilesAccessPointConfiguration {
-  constructor(props: {
-    AccessPointArn: string;
-    MountPath: string;
-  });
-}
-
 export declare class S3FilesFileSystem_ExpirationDataRule {
   constructor(props: {
     DaysAfterLastAccess: number;
@@ -142855,7 +143293,6 @@ export declare class SageMakerCluster_ClusterOrchestratorSlurmConfig {
 
 export declare class SageMakerCluster_ClusterRestrictedInstanceGroup {
   constructor(props: {
-    EnvironmentConfig: SageMakerCluster_EnvironmentConfig;
     ExecutionRole: string;
     /** The number of instances you specified to add to the restricted instance group of a SageMaker HyperPod cluster. */
     InstanceCount: number;
@@ -142863,6 +143300,7 @@ export declare class SageMakerCluster_ClusterRestrictedInstanceGroup {
     InstanceType: string;
     /** The number of instances that are currently in the restricted instance group of a SageMaker HyperPod cluster. */
     CurrentCount?: number;
+    EnvironmentConfig?: SageMakerCluster_EnvironmentConfig;
     InstanceStorageConfigs?: any;
     OnStartDeepHealthChecks?: any;
     OverrideVpcConfig?: SageMakerCluster_VpcConfig;
@@ -142913,6 +143351,12 @@ export declare class SageMakerCluster_InstanceRequirements {
   });
 }
 
+export declare class SageMakerCluster_RestrictedInstanceGroupsConfig {
+  constructor(props: {
+    SharedEnvironmentConfig: SageMakerCluster_SharedEnvironmentConfig;
+  });
+}
+
 export declare class SageMakerCluster_RollingUpdatePolicy {
   constructor(props: {
     MaximumBatchSize: SageMakerCluster_CapacitySizeConfig;
@@ -142928,6 +143372,14 @@ export declare class SageMakerCluster_ScheduledUpdateConfig {
   });
 }
 
+export declare class SageMakerCluster_SharedEnvironmentConfig {
+  constructor(props: {
+    /** The deletion policy for the shared FSx Lustre file system. Keep retains the FSx when RIGs are deleted. DeleteIfNotUsed deletes the FSx when no RIGs reference it. */
+    FSxLustreDeletionPolicy: "DeleteIfNotUsed" | "Keep";
+    FSxLustreConfig?: SageMakerCluster_FSxLustreConfig;
+  });
+}
+
 export declare class SageMakerCluster_Tag {
   constructor(props: {
     /** The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -. */
@@ -144520,6 +144972,21 @@ export declare class ScheduledAudit_Tag {
   });
 }
 
+export declare class ScheduledQueryConfiguration {
+  constructor(props: {
+    /** The aggregation expression for the scheduled query, e.g. count(*) or avg(latency) by host. */
+    AggregationExpression: string;
+    /** The log groups to query. */
+    LogGroupIdentifiers: string[];
+    /** The query string to execute against the specified log groups. */
+    QueryString: string;
+    /** The schedule configuration. */
+    ScheduleConfiguration: LogAlarm_ScheduleConfiguration;
+    /** The ARN of the IAM role that grants permissions to execute the scheduled query. */
+    ScheduledQueryRoleARN: string;
+  });
+}
+
 export declare class ScheduledUpdateConfig {
   constructor(props: {
     /** A cron expression that specifies the schedule that SageMaker follows when updating the AMI. */
@@ -146089,6 +146556,12 @@ export declare class SelfManagedKafkaEventSourceConfig {
   });
 }
 
+export declare class SelfManagedLatticeResource {
+  constructor(props: {
+    ResourceConfigurationIdentifier: string;
+  });
+}
+
 export declare class SelfManagedMode {
   constructor(props: {
     /** The ARN of the Resource Configuration. */
@@ -147659,6 +148132,14 @@ export declare class SharedColumnSemanticMetadata {
   });
 }
 
+export declare class SharedEnvironmentConfig {
+  constructor(props: {
+    /** The deletion policy for the shared FSx Lustre file system. Keep retains the FSx when RIGs are deleted. DeleteIfNotUsed deletes the FSx when no RIGs reference it. */
+    FSxLustreDeletionPolicy: "DeleteIfNotUsed" | "Keep";
+    FSxLustreConfig?: SageMakerCluster_FSxLustreConfig;
+  });
+}
+
 export declare class SharePointConfiguration {
   constructor(props: {
     SecretArn: string;
@@ -149140,6 +149621,12 @@ export declare class SourceLogsConfiguration {
   });
 }
 
+export declare class SourceMetricsConfiguration {
+  constructor(props: {
+    MetricsSelectionCriteria?: string;
+  });
+}
+
 export declare class SourceMonitoringConfig {
   constructor(props: {
     /** Contains the settings for audio stream metrics monitoring. */
@@ -149169,6 +149656,15 @@ export declare class SourceResource {
   });
 }
 
+export declare class SourceSecurityGroup {
+  constructor(props: {
+    /** The name of the security group that you can use as part of your inbound rules for your load balancer's back-end instances. */
+    GroupName?: string;
+    /** The owner of the source security group. */
+    OwnerAlias?: string;
+  });
+}
+
 export declare class SourceSegment {
   constructor(props: {
     SegmentDefinitionName?: string;
@@ -150245,6 +150741,15 @@ export declare class SSMAssociation_S3OutputLocation {
   });
 }
 
+export declare class SSMAssociation_Tag {
+  constructor(props: {
+    /** The name of the tag. */
+    Key: string;
+    /** The value of the tag. */
+    Value: string;
+  });
+}
+
 export declare class SSMAssociation_Target {
   constructor(props: {
     Key: string;
@@ -151838,6 +152343,15 @@ export declare class SubstitutionValue {
   });
 }
 
+export declare class SubtitlingConfig {
+  constructor(props: {
+    Language: Feed_TranscriptionLanguage;
+    AspectRatio?: Feed_AspectRatio;
+    Dictionary?: string;
+    ProfanityFilter?: Feed_ProfanityFilterMode;
+  });
+}
+
 export declare class SuccessConditions {
   constructor(props: {
     Conditions?: CodePipelinePipeline_Condition[];
@@ -152588,6 +153102,13 @@ export declare class TagCondition {
   });
 }
 
+export declare class TagFieldSpecification {
+  constructor(props: {
+    ResourceType: string;
+    TagKeys: string[];
+  });
+}
+
 export declare class TagMap {
   constructor(props: {
     /** TagKey */
@@ -153141,7 +153662,7 @@ export declare class TaskDefinition_ContainerDefinition {
     ReadonlyRootFilesystem?: boolean;
     /** The private repository authentication credentials to use. */
     RepositoryCredentials?: TaskDefinition_RepositoryCredentials;
-    /** The type and amount of a resource to assign to a container. The only supported resource is a GPU. */
+    /** The type and amount of a resource to assign to a container. The supported resources are GPUs and Neuron devices. */
     ResourceRequirements?: TaskDefinition_ResourceRequirement[];
     /** The restart policy for a container. When you set up a restart policy, Amazon ECS can restart the container without needing to replace the task. For more information, see [Restart individual containers in Amazon ECS tasks with container restart policies](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/container-restart-policy.html) in the *Amazon Elastic Container Service Developer Guide*. */
     RestartPolicy?: TaskDefinition_RestartPolicy;
@@ -153384,8 +153905,7 @@ export declare class TaskDefinition_LinuxParameters {
   If you're using tasks that use the Fargate launch type, the ``swappiness`` parameter isn't supported.
  If you're using tasks on Amazon Linux 2023 the ``swappiness`` parameter isn't supported. */
     Swappiness?: number;
-    /** The container path, mount options, and size (in MiB) of the tmpfs mount. This parameter maps to the ``--tmpfs`` option to docker run.
-  If you're using tasks that use the Fargate launch type, the ``tmpfs`` parameter isn't supported. */
+    /** The container path, mount options, and size (in MiB) of the tmpfs mount. This parameter maps to the ``--tmpfs`` option to docker run. */
     Tmpfs?: TaskDefinition_Tmpfs[];
   });
 }
@@ -153508,7 +154028,8 @@ export declare class TaskDefinition_ResourceRequirement {
     /** The type of resource to assign to a container. */
     Type: string;
     /** The value for the specified resource type.
- When the type is ``GPU``, the value is the number of physical ``GPUs`` the Amazon ECS container agent reserves for the container. The number of GPUs that's reserved for all containers in a task can't exceed the number of available GPUs on the container instance that the task is launched on.
+ When the type is ``GPU``, the value is the number of physical ``GPUs`` the Amazon ECS container agent reserves for the container. The number of GPUs that's reserved for all containers in a task can't exceed the number of available GPUs on the container instance that the task is launched on. You can also specify ``ALL`` to allocate all available GPUs on the instance to the container.
+ When the type is ``NeuronDevice``, the value must be ``ALL``. This allocates all available Neuron devices on the instance to the container. Only one container in a task can specify ``NeuronDevice`` resources. This resource type is only supported on Managed Instances.
  When the type is ``InferenceAccelerator``, the ``value`` matches the ``deviceName`` for an [InferenceAccelerator](https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_InferenceAccelerator.html) specified in a task definition. */
     Value: string;
   });
@@ -153537,9 +154058,14 @@ export declare class TaskDefinition_RuntimePlatform {
 
 export declare class TaskDefinition_S3FilesVolumeConfiguration {
   constructor(props: {
+    /** The full ARN of the S3 Files file system to mount. */
     FileSystemArn: string;
+    /** The full ARN of the S3 Files access point to use. If an access point is specified, the root directory value specified in the ``S3FilesVolumeConfiguration`` must either be omitted or set to ``/`` which will enforce the path set on the S3 Files access point. For more information, see [Creating S3 Files access points](https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-files-access-points-creating.html). */
     AccessPointArn?: string;
+    /** The directory within the Amazon S3 Files file system to mount as the root directory. If this parameter is omitted, the root of the Amazon S3 Files file system will be used. Specifying ``/`` will have the same effect as omitting this parameter.
+  If a S3 Files access point is specified in the ``accessPointArn``, the root directory parameter must either be omitted or set to ``/`` which will enforce the path set on the S3 Files access point. */
     RootDirectory?: string;
+    /** The port to use for sending encrypted data between the ECS host and the S3 Files file system. If you do not specify a transit encryption port, it will use the port selection strategy that the Amazon S3 Files mount helper uses. For more information, see [S3 Files mount helper](https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-files-mounting.html). */
     TransitEncryptionPort?: number;
   });
 }
@@ -153627,8 +154153,10 @@ export declare class TaskDefinition_Volume {
     /** The name of the volume. Up to 255 letters (uppercase and lowercase), numbers, underscores, and hyphens are allowed.
  When using a volume configured at launch, the ``name`` is required and must also be specified as the volume name in the ``ServiceVolumeConfiguration`` or ``TaskVolumeConfiguration`` parameter when creating your service or standalone task.
  For all other types of volumes, this name is referenced in the ``sourceVolume`` parameter of the ``mountPoints`` object in the container definition.
- When a volume is using the ``efsVolumeConfiguration``, the name is required. */
+ When a volume is using the ``efsVolumeConfiguration``, the name is required.
+ When a volume is using the ``s3filesVolumeConfiguration``, the name is required. */
     Name?: string;
+    /** This parameter is specified when you use an Amazon S3 Files file system for task storage. */
     S3FilesVolumeConfiguration?: TaskDefinition_S3FilesVolumeConfiguration;
   });
 }
@@ -167057,6 +167585,8 @@ export type DevOpsGuruNotificationChannel_NotificationMessageType =
   | "NEW_RECOMMENDATION"
   | "SEVERITY_UPGRADED";
 
+export type Dictionary_DictionaryLanguage = "deu" | "eng" | "fra" | "ita" | "por" | "spa";
+
 export type DnsView_DnsSecValidationType = "DISABLED" | "ENABLED";
 
 export type DnsView_EdnsClientSubnetType = "DISABLED" | "ENABLED";
@@ -167160,6 +167690,19 @@ export type FeatureGroup_Unit = "Days" | "Hours" | "Minutes" | "Seconds" | "Week
 
 export type Feed_OutputStatus = "DISABLED" | "ENABLED";
 
+export type Feed_ProfanityFilterMode = "CENSOR" | "DISABLED" | "DROP";
+
+export type Feed_TranscriptionLanguage =
+  | "deu"
+  | "eng"
+  | "eng-au"
+  | "eng-gb"
+  | "eng-us"
+  | "fra"
+  | "ita"
+  | "por"
+  | "spa";
+
 export type FHIRDatastore_DatastoreStatus = "ACTIVE" | "CREATING" | "DELETED" | "DELETING";
 
 export type FHIRDatastore_DatastoreTypeVersion = "R4";
@@ -170417,6 +170960,12 @@ export type SageMakerDomain_AppInstanceType =
   | "ml.g6e.4xlarge"
   | "ml.g6e.8xlarge"
   | "ml.g6e.xlarge"
+  | "ml.g7e.12xlarge"
+  | "ml.g7e.24xlarge"
+  | "ml.g7e.2xlarge"
+  | "ml.g7e.48xlarge"
+  | "ml.g7e.4xlarge"
+  | "ml.g7e.8xlarge"
   | "ml.geospatial.interactive"
   | "ml.m5.12xlarge"
   | "ml.m5.16xlarge"