@pulumi/aws-native 0.20.1-alpha.1661286973 → 0.21.0

package/types/input.d.ts

@@ -1313,11 +1313,26 @@ export declare namespace apigateway {
         value: pulumi.Input<string>;
     }
     interface DocumentationPartLocationArgs {
+        /**
+         * The HTTP verb of a method.
+         */
         method?: pulumi.Input<string>;
+        /**
+         * The name of the targeted API entity.
+         */
         name?: pulumi.Input<string>;
+        /**
+         * The URL path of the target.
+         */
         path?: pulumi.Input<string>;
+        /**
+         * The HTTP status code of a response.
+         */
         statusCode?: pulumi.Input<string>;
-        type?: pulumi.Input<string>;
+        /**
+         * The type of API entity that the documentation content applies to.
+         */
+        type?: pulumi.Input<enums.apigateway.DocumentationPartLocationType>;
     }
     interface DomainNameEndpointConfigurationArgs {
         types?: pulumi.Input<pulumi.Input<string>[]>;
@@ -1698,6 +1713,14 @@ export declare namespace appflow {
         apiKey: pulumi.Input<string>;
         secretKey: pulumi.Input<string>;
     }
+    interface ConnectorProfileApiKeyCredentialsArgs {
+        apiKey: pulumi.Input<string>;
+        apiSecretKey?: pulumi.Input<string>;
+    }
+    interface ConnectorProfileBasicAuthCredentialsArgs {
+        password: pulumi.Input<string>;
+        username: pulumi.Input<string>;
+    }
     /**
      * Connector specific configurations needed to create connector profile
      */
@@ -1721,6 +1744,7 @@ export declare namespace appflow {
      */
     interface ConnectorProfileCredentialsArgs {
         amplitude?: pulumi.Input<inputs.appflow.ConnectorProfileAmplitudeConnectorProfileCredentialsArgs>;
+        customConnector?: pulumi.Input<inputs.appflow.ConnectorProfileCustomConnectorProfileCredentialsArgs>;
         datadog?: pulumi.Input<inputs.appflow.ConnectorProfileDatadogConnectorProfileCredentialsArgs>;
         dynatrace?: pulumi.Input<inputs.appflow.ConnectorProfileDynatraceConnectorProfileCredentialsArgs>;
         googleAnalytics?: pulumi.Input<inputs.appflow.ConnectorProfileGoogleAnalyticsConnectorProfileCredentialsArgs>;
@@ -1737,6 +1761,26 @@ export declare namespace appflow {
         veeva?: pulumi.Input<inputs.appflow.ConnectorProfileVeevaConnectorProfileCredentialsArgs>;
         zendesk?: pulumi.Input<inputs.appflow.ConnectorProfileZendeskConnectorProfileCredentialsArgs>;
     }
+    /**
+     * A map for properties for custom authentication.
+     */
+    interface ConnectorProfileCredentialsMapArgs {
+    }
+    interface ConnectorProfileCustomAuthCredentialsArgs {
+        credentialsMap?: pulumi.Input<inputs.appflow.ConnectorProfileCredentialsMapArgs>;
+        customAuthenticationType: pulumi.Input<string>;
+    }
+    interface ConnectorProfileCustomConnectorProfileCredentialsArgs {
+        apiKey?: pulumi.Input<inputs.appflow.ConnectorProfileApiKeyCredentialsArgs>;
+        authenticationType: pulumi.Input<enums.appflow.ConnectorProfileAuthenticationType>;
+        basic?: pulumi.Input<inputs.appflow.ConnectorProfileBasicAuthCredentialsArgs>;
+        custom?: pulumi.Input<inputs.appflow.ConnectorProfileCustomAuthCredentialsArgs>;
+        oauth2?: pulumi.Input<inputs.appflow.ConnectorProfileOAuth2CredentialsArgs>;
+    }
+    interface ConnectorProfileCustomConnectorProfilePropertiesArgs {
+        oAuth2Properties?: pulumi.Input<inputs.appflow.ConnectorProfileOAuth2PropertiesArgs>;
+        profileProperties?: pulumi.Input<inputs.appflow.ConnectorProfileProfilePropertiesArgs>;
+    }
     interface ConnectorProfileDatadogConnectorProfileCredentialsArgs {
         /**
          * A unique alphanumeric identifier used to authenticate a user, developer, or calling program to your API.
@@ -1835,15 +1879,33 @@ export declare namespace appflow {
          */
         instanceUrl: pulumi.Input<string>;
     }
+    interface ConnectorProfileOAuth2CredentialsArgs {
+        accessToken?: pulumi.Input<string>;
+        clientId?: pulumi.Input<string>;
+        clientSecret?: pulumi.Input<string>;
+        oAuthRequest?: pulumi.Input<inputs.appflow.ConnectorProfileConnectorOAuthRequestArgs>;
+        refreshToken?: pulumi.Input<string>;
+    }
+    interface ConnectorProfileOAuth2PropertiesArgs {
+        oAuth2GrantType?: pulumi.Input<enums.appflow.ConnectorProfileOAuth2GrantType>;
+        tokenUrl?: pulumi.Input<string>;
+        tokenUrlCustomProperties?: pulumi.Input<inputs.appflow.ConnectorProfileTokenUrlCustomPropertiesArgs>;
+    }
     interface ConnectorProfileOAuthPropertiesArgs {
         authCodeUrl?: pulumi.Input<string>;
         oAuthScopes?: pulumi.Input<pulumi.Input<string>[]>;
         tokenUrl?: pulumi.Input<string>;
     }
+    /**
+     * A map for properties for custom connector.
+     */
+    interface ConnectorProfileProfilePropertiesArgs {
+    }
     /**
      * Connector specific properties needed to create connector profile - currently not needed for Amplitude, Trendmicro, Googleanalytics and Singular
      */
     interface ConnectorProfilePropertiesArgs {
+        customConnector?: pulumi.Input<inputs.appflow.ConnectorProfileCustomConnectorProfilePropertiesArgs>;
         datadog?: pulumi.Input<inputs.appflow.ConnectorProfileDatadogConnectorProfilePropertiesArgs>;
         dynatrace?: pulumi.Input<inputs.appflow.ConnectorProfileDynatraceConnectorProfilePropertiesArgs>;
         inforNexus?: pulumi.Input<inputs.appflow.ConnectorProfileInforNexusConnectorProfilePropertiesArgs>;
@@ -1886,19 +1948,9 @@ export declare namespace appflow {
         roleArn: pulumi.Input<string>;
     }
     interface ConnectorProfileSAPODataConnectorProfileCredentialsArgs {
-        basicAuthCredentials?: pulumi.Input<inputs.appflow.ConnectorProfileSAPODataConnectorProfileCredentialsBasicAuthCredentialsPropertiesArgs>;
+        basicAuthCredentials?: pulumi.Input<inputs.appflow.ConnectorProfileBasicAuthCredentialsArgs>;
         oAuthCredentials?: pulumi.Input<inputs.appflow.ConnectorProfileSAPODataConnectorProfileCredentialsOAuthCredentialsPropertiesArgs>;
     }
-    interface ConnectorProfileSAPODataConnectorProfileCredentialsBasicAuthCredentialsPropertiesArgs {
-        /**
-         * The password that corresponds to the username.
-         */
-        password?: pulumi.Input<string>;
-        /**
-         * The name of the user.
-         */
-        username?: pulumi.Input<string>;
-    }
     interface ConnectorProfileSAPODataConnectorProfileCredentialsOAuthCredentialsPropertiesArgs {
         accessToken?: pulumi.Input<string>;
         clientId?: pulumi.Input<string>;
@@ -2027,6 +2079,11 @@ export declare namespace appflow {
          */
         warehouse: pulumi.Input<string>;
     }
+    /**
+     * A map for properties for custom connector Token Url.
+     */
+    interface ConnectorProfileTokenUrlCustomPropertiesArgs {
+    }
     interface ConnectorProfileTrendmicroConnectorProfileCredentialsArgs {
         /**
          * The Secret Access Key portion of the credentials.
@@ -2084,6 +2141,7 @@ export declare namespace appflow {
      */
     interface FlowConnectorOperatorArgs {
         amplitude?: pulumi.Input<enums.appflow.FlowAmplitudeConnectorOperator>;
+        customConnector?: pulumi.Input<enums.appflow.FlowOperator>;
         datadog?: pulumi.Input<enums.appflow.FlowDatadogConnectorOperator>;
         dynatrace?: pulumi.Input<enums.appflow.FlowDynatraceConnectorOperator>;
         googleAnalytics?: pulumi.Input<enums.appflow.FlowGoogleAnalyticsConnectorOperator>;
@@ -2099,6 +2157,25 @@ export declare namespace appflow {
         veeva?: pulumi.Input<enums.appflow.FlowVeevaConnectorOperator>;
         zendesk?: pulumi.Input<enums.appflow.FlowZendeskConnectorOperator>;
     }
+    interface FlowCustomConnectorDestinationPropertiesArgs {
+        customProperties?: pulumi.Input<inputs.appflow.FlowCustomPropertiesArgs>;
+        entityName: pulumi.Input<string>;
+        errorHandlingConfig?: pulumi.Input<inputs.appflow.FlowErrorHandlingConfigArgs>;
+        /**
+         * List of fields used as ID when performing a write operation.
+         */
+        idFieldNames?: pulumi.Input<pulumi.Input<string>[]>;
+        writeOperationType?: pulumi.Input<enums.appflow.FlowWriteOperationType>;
+    }
+    interface FlowCustomConnectorSourcePropertiesArgs {
+        customProperties?: pulumi.Input<inputs.appflow.FlowCustomPropertiesArgs>;
+        entityName: pulumi.Input<string>;
+    }
+    /**
+     * A map for properties for custom connector.
+     */
+    interface FlowCustomPropertiesArgs {
+    }
     interface FlowDatadogSourcePropertiesArgs {
         object: pulumi.Input<string>;
     }
@@ -2106,6 +2183,7 @@ export declare namespace appflow {
      * Destination connector details
      */
     interface FlowDestinationConnectorPropertiesArgs {
+        customConnector?: pulumi.Input<inputs.appflow.FlowCustomConnectorDestinationPropertiesArgs>;
         eventBridge?: pulumi.Input<inputs.appflow.FlowEventBridgeDestinationPropertiesArgs>;
         lookoutMetrics?: pulumi.Input<inputs.appflow.FlowLookoutMetricsDestinationPropertiesArgs>;
         marketo?: pulumi.Input<inputs.appflow.FlowMarketoDestinationPropertiesArgs>;
@@ -2121,6 +2199,10 @@ export declare namespace appflow {
      * Configurations of destination connector.
      */
     interface FlowDestinationFlowConfigArgs {
+        /**
+         * The API version that the destination connector uses.
+         */
+        apiVersion?: pulumi.Input<string>;
         /**
          * Name of destination connector profile
          */
@@ -2190,6 +2272,7 @@ export declare namespace appflow {
         aggregationConfig?: pulumi.Input<inputs.appflow.FlowAggregationConfigArgs>;
         fileType?: pulumi.Input<enums.appflow.FlowFileType>;
         prefixConfig?: pulumi.Input<inputs.appflow.FlowPrefixConfigArgs>;
+        preserveSourceDataTyping?: pulumi.Input<boolean>;
     }
     interface FlowS3SourcePropertiesArgs {
         bucketName: pulumi.Input<string>;
@@ -2228,6 +2311,8 @@ export declare namespace appflow {
      */
     interface FlowScheduledTriggerPropertiesArgs {
         dataPullMode?: pulumi.Input<enums.appflow.FlowScheduledTriggerPropertiesDataPullMode>;
+        firstExecutionFrom?: pulumi.Input<number>;
+        flowErrorDeactivationThreshold?: pulumi.Input<number>;
         scheduleEndTime?: pulumi.Input<number>;
         scheduleExpression: pulumi.Input<string>;
         scheduleOffset?: pulumi.Input<number>;
@@ -2254,6 +2339,7 @@ export declare namespace appflow {
      */
     interface FlowSourceConnectorPropertiesArgs {
         amplitude?: pulumi.Input<inputs.appflow.FlowAmplitudeSourcePropertiesArgs>;
+        customConnector?: pulumi.Input<inputs.appflow.FlowCustomConnectorSourcePropertiesArgs>;
         datadog?: pulumi.Input<inputs.appflow.FlowDatadogSourcePropertiesArgs>;
         dynatrace?: pulumi.Input<inputs.appflow.FlowDynatraceSourcePropertiesArgs>;
         googleAnalytics?: pulumi.Input<inputs.appflow.FlowGoogleAnalyticsSourcePropertiesArgs>;
@@ -2273,6 +2359,10 @@ export declare namespace appflow {
      * Configurations of Source connector of the flow.
      */
     interface FlowSourceFlowConfigArgs {
+        /**
+         * The API version that the destination connector uses.
+         */
+        apiVersion?: pulumi.Input<string>;
         /**
          * Name of source connector profile
          */
@@ -3709,7 +3799,16 @@ export declare namespace appsync {
         conflictHandler?: pulumi.Input<string>;
         lambdaConflictHandlerConfig?: pulumi.Input<inputs.appsync.FunctionConfigurationLambdaConflictHandlerConfigArgs>;
     }
-    interface GraphQLApiAdditionalAuthenticationProvidersArgs {
+    interface GraphQLApiAdditionalAuthenticationProviderArgs {
+        authenticationType: pulumi.Input<string>;
+        lambdaAuthorizerConfig?: pulumi.Input<inputs.appsync.GraphQLApiLambdaAuthorizerConfigArgs>;
+        openIDConnectConfig?: pulumi.Input<inputs.appsync.GraphQLApiOpenIDConnectConfigArgs>;
+        userPoolConfig?: pulumi.Input<inputs.appsync.GraphQLApiCognitoUserPoolConfigArgs>;
+    }
+    interface GraphQLApiCognitoUserPoolConfigArgs {
+        appIdClientRegex?: pulumi.Input<string>;
+        awsRegion?: pulumi.Input<string>;
+        userPoolId?: pulumi.Input<string>;
     }
     interface GraphQLApiLambdaAuthorizerConfigArgs {
         authorizerResultTtlInSeconds?: pulumi.Input<number>;
@@ -3727,7 +3826,9 @@ export declare namespace appsync {
         iatTTL?: pulumi.Input<number>;
         issuer?: pulumi.Input<string>;
     }
-    interface GraphQLApiTagsArgs {
+    interface GraphQLApiTagArgs {
+        key: pulumi.Input<string>;
+        value: pulumi.Input<string>;
     }
     interface GraphQLApiUserPoolConfigArgs {
         appIdClientRegex?: pulumi.Input<string>;
@@ -4336,11 +4437,11 @@ export declare namespace backup {
         /**
          * The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
          */
-        key: pulumi.Input<string>;
+        key?: pulumi.Input<string>;
         /**
          * The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
          */
-        value: pulumi.Input<string>;
+        value?: pulumi.Input<string>;
     }
     /**
      * A structure that contains information about where and how to deliver your reports, specifically your Amazon S3 bucket name, S3 key prefix, and the formats of your reports.
@@ -4812,6 +4913,10 @@ export declare namespace cloudformation {
      *  The AWS OrganizationalUnitIds or Accounts for which to create stack instances in the specified Regions.
      */
     interface StackSetDeploymentTargetsArgs {
+        /**
+         * The filter type you want to apply on organizational units and accounts.
+         */
+        accountFilterType?: pulumi.Input<enums.cloudformation.StackSetDeploymentTargetsAccountFilterType>;
         /**
          * AWS accounts that you want to create stack instances in the specified Region(s) for.
          */
@@ -4944,7 +5049,7 @@ export declare namespace cloudfront {
         comment?: pulumi.Input<string>;
         customErrorResponses?: pulumi.Input<pulumi.Input<inputs.cloudfront.DistributionCustomErrorResponseArgs>[]>;
         customOrigin?: pulumi.Input<inputs.cloudfront.DistributionLegacyCustomOriginArgs>;
-        defaultCacheBehavior?: pulumi.Input<inputs.cloudfront.DistributionDefaultCacheBehaviorArgs>;
+        defaultCacheBehavior: pulumi.Input<inputs.cloudfront.DistributionDefaultCacheBehaviorArgs>;
         defaultRootObject?: pulumi.Input<string>;
         enabled: pulumi.Input<boolean>;
         httpVersion?: pulumi.Input<string>;
@@ -5235,6 +5340,65 @@ export declare namespace cloudfront {
     }
 }
 export declare namespace cloudtrail {
+    /**
+     * Advanced event selectors let you create fine-grained selectors for the following AWS CloudTrail event record fields. They help you control costs by logging only those events that are important to you.
+     */
+    interface EventDataStoreAdvancedEventSelectorArgs {
+        /**
+         * Contains all selector statements in an advanced event selector.
+         */
+        fieldSelectors: pulumi.Input<pulumi.Input<inputs.cloudtrail.EventDataStoreAdvancedFieldSelectorArgs>[]>;
+        /**
+         * An optional, descriptive name for an advanced event selector, such as "Log data events for only two S3 buckets".
+         */
+        name?: pulumi.Input<string>;
+    }
+    /**
+     * A single selector statement in an advanced event selector.
+     */
+    interface EventDataStoreAdvancedFieldSelectorArgs {
+        /**
+         * An operator that includes events that match the last few characters of the event record field specified as the value of Field.
+         */
+        endsWith?: pulumi.Input<pulumi.Input<string>[]>;
+        /**
+         * An operator that includes events that match the exact value of the event record field specified as the value of Field. This is the only valid operator that you can use with the readOnly, eventCategory, and resources.type fields.
+         */
+        equals?: pulumi.Input<pulumi.Input<string>[]>;
+        /**
+         * A field in an event record on which to filter events to be logged. Supported fields include readOnly, eventCategory, eventSource (for management events), eventName, resources.type, and resources.ARN.
+         */
+        field: pulumi.Input<string>;
+        /**
+         * An operator that excludes events that match the last few characters of the event record field specified as the value of Field.
+         */
+        notEndsWith?: pulumi.Input<pulumi.Input<string>[]>;
+        /**
+         * An operator that excludes events that match the exact value of the event record field specified as the value of Field.
+         */
+        notEquals?: pulumi.Input<pulumi.Input<string>[]>;
+        /**
+         * An operator that excludes events that match the first few characters of the event record field specified as the value of Field.
+         */
+        notStartsWith?: pulumi.Input<pulumi.Input<string>[]>;
+        /**
+         * An operator that includes events that match the first few characters of the event record field specified as the value of Field.
+         */
+        startsWith?: pulumi.Input<pulumi.Input<string>[]>;
+    }
+    /**
+     * An arbitrary set of tags (key-value pairs) for this event data store.
+     */
+    interface EventDataStoreTagArgs {
+        /**
+         * The key name of the tag. You can specify a value that is 1 to 127 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
+         */
+        key: pulumi.Input<string>;
+        /**
+         * The value for the tag. You can specify a value that is 1 to 255 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
+         */
+        value: pulumi.Input<string>;
+    }
     /**
      * CloudTrail supports data event logging for Amazon S3 objects and AWS Lambda functions. You can specify up to 250 resources for an individual event selector, but the total number of data resources cannot exceed 250 across all event selectors in a trail. This limit does not apply if you configure resource logging for all data events.
      */
@@ -6070,6 +6234,11 @@ export declare namespace configuration {
          */
         value: pulumi.Input<string>;
     }
+    interface ConfigRuleCustomPolicyDetailsArgs {
+        enableDebugLogDelivery?: pulumi.Input<boolean>;
+        policyRuntime?: pulumi.Input<string>;
+        policyText?: pulumi.Input<string>;
+    }
     interface ConfigRuleScopeArgs {
         complianceResourceId?: pulumi.Input<string>;
         complianceResourceTypes?: pulumi.Input<pulumi.Input<string>[]>;
@@ -6077,9 +6246,10 @@ export declare namespace configuration {
         tagValue?: pulumi.Input<string>;
     }
     interface ConfigRuleSourceArgs {
+        customPolicyDetails?: pulumi.Input<inputs.configuration.ConfigRuleCustomPolicyDetailsArgs>;
         owner: pulumi.Input<string>;
         sourceDetails?: pulumi.Input<pulumi.Input<inputs.configuration.ConfigRuleSourceDetailArgs>[]>;
-        sourceIdentifier: pulumi.Input<string>;
+        sourceIdentifier?: pulumi.Input<string>;
     }
     interface ConfigRuleSourceDetailArgs {
         eventSource: pulumi.Input<string>;
@@ -6172,6 +6342,13 @@ export declare namespace configuration {
          */
         value: pulumi.Input<string>;
     }
+    /**
+     * The TemplateSSMDocumentDetails object contains the name of the SSM document and the version of the SSM document.
+     */
+    interface TemplateSSMDocumentDetailsPropertiesArgs {
+        documentName?: pulumi.Input<string>;
+        documentVersion?: pulumi.Input<string>;
+    }
 }
 export declare namespace connect {
     /**
@@ -6251,6 +6428,15 @@ export declare namespace connect {
          */
         minutes: pulumi.Input<number>;
     }
+    interface InstanceAttributesArgs {
+        autoResolveBestVoices?: pulumi.Input<boolean>;
+        contactLens?: pulumi.Input<boolean>;
+        contactflowLogs?: pulumi.Input<boolean>;
+        earlyMedia?: pulumi.Input<boolean>;
+        inboundCalls: pulumi.Input<boolean>;
+        outboundCalls: pulumi.Input<boolean>;
+        useCustomTTSVoices?: pulumi.Input<boolean>;
+    }
     /**
      * A key-value pair to associate with a resource.
      */
@@ -7195,6 +7381,68 @@ export declare namespace datasync {
          */
         value: pulumi.Input<string>;
     }
+    /**
+     * NFS protocol configuration for FSx ONTAP file system.
+     */
+    interface LocationFSxONTAPNFSArgs {
+        mountOptions: pulumi.Input<inputs.datasync.LocationFSxONTAPNfsMountOptionsArgs>;
+    }
+    /**
+     * The NFS mount options that DataSync can use to mount your NFS share.
+     */
+    interface LocationFSxONTAPNfsMountOptionsArgs {
+        /**
+         * The specific NFS version that you want DataSync to use to mount your NFS share.
+         */
+        version?: pulumi.Input<enums.datasync.LocationFSxONTAPNfsMountOptionsVersion>;
+    }
+    /**
+     * Configuration settings for NFS or SMB protocol.
+     */
+    interface LocationFSxONTAPProtocolArgs {
+        nFS?: pulumi.Input<inputs.datasync.LocationFSxONTAPNFSArgs>;
+        sMB?: pulumi.Input<inputs.datasync.LocationFSxONTAPSMBArgs>;
+    }
+    /**
+     * SMB protocol configuration for FSx ONTAP file system.
+     */
+    interface LocationFSxONTAPSMBArgs {
+        /**
+         * The name of the Windows domain that the SMB server belongs to.
+         */
+        domain?: pulumi.Input<string>;
+        mountOptions: pulumi.Input<inputs.datasync.LocationFSxONTAPSmbMountOptionsArgs>;
+        /**
+         * The password of the user who can mount the share and has the permissions to access files and folders in the SMB share.
+         */
+        password: pulumi.Input<string>;
+        /**
+         * The user who can mount the share, has the permissions to access files and folders in the SMB share.
+         */
+        user: pulumi.Input<string>;
+    }
+    /**
+     * The mount options used by DataSync to access the SMB server.
+     */
+    interface LocationFSxONTAPSmbMountOptionsArgs {
+        /**
+         * The specific SMB version that you want DataSync to use to mount your SMB share.
+         */
+        version?: pulumi.Input<enums.datasync.LocationFSxONTAPSmbMountOptionsVersion>;
+    }
+    /**
+     * A key-value pair to associate with a resource.
+     */
+    interface LocationFSxONTAPTagArgs {
+        /**
+         * The key for an AWS resource tag.
+         */
+        key: pulumi.Input<string>;
+        /**
+         * The value for an AWS resource tag.
+         */
+        value: pulumi.Input<string>;
+    }
     /**
      * The NFS mount options that DataSync can use to mount your NFS share.
      */
@@ -7660,6 +7908,7 @@ export declare namespace dlm {
     }
     interface LifecyclePolicyParametersArgs {
         excludeBootVolume?: pulumi.Input<boolean>;
+        excludeDataVolumeTags?: pulumi.Input<pulumi.Input<inputs.dlm.LifecyclePolicyTagArgs>[]>;
         noReboot?: pulumi.Input<boolean>;
     }
     interface LifecyclePolicyPolicyDetailsArgs {
@@ -8076,6 +8325,10 @@ export declare namespace dynamodb {
     interface TableContributorInsightsSpecificationArgs {
         enabled: pulumi.Input<boolean>;
     }
+    interface TableCsvArgs {
+        delimiter?: pulumi.Input<string>;
+        headerList?: pulumi.Input<pulumi.Input<string>[]>;
+    }
     interface TableGlobalSecondaryIndexArgs {
         contributorInsightsSpecification?: pulumi.Input<inputs.dynamodb.TableContributorInsightsSpecificationArgs>;
         indexName: pulumi.Input<string>;
@@ -8083,6 +8336,15 @@ export declare namespace dynamodb {
         projection: pulumi.Input<inputs.dynamodb.TableProjectionArgs>;
         provisionedThroughput?: pulumi.Input<inputs.dynamodb.TableProvisionedThroughputArgs>;
     }
+    interface TableImportSourceSpecificationArgs {
+        inputCompressionType?: pulumi.Input<string>;
+        inputFormat: pulumi.Input<string>;
+        inputFormatOptions?: pulumi.Input<inputs.dynamodb.TableInputFormatOptionsArgs>;
+        s3BucketSource: pulumi.Input<inputs.dynamodb.TableS3BucketSourceArgs>;
+    }
+    interface TableInputFormatOptionsArgs {
+        csv?: pulumi.Input<inputs.dynamodb.TableCsvArgs>;
+    }
     interface TableKeySchemaArgs {
         attributeName: pulumi.Input<string>;
         keyType: pulumi.Input<string>;
@@ -8106,6 +8368,11 @@ export declare namespace dynamodb {
         readCapacityUnits: pulumi.Input<number>;
         writeCapacityUnits: pulumi.Input<number>;
     }
+    interface TableS3BucketSourceArgs {
+        s3Bucket: pulumi.Input<string>;
+        s3BucketOwner?: pulumi.Input<string>;
+        s3KeyPrefix?: pulumi.Input<string>;
+    }
     interface TableSSESpecificationArgs {
         kMSMasterKeyId?: pulumi.Input<string>;
         sSEEnabled: pulumi.Input<boolean>;
@@ -8443,6 +8710,7 @@ export declare namespace ec2 {
         licenseConfigurationArn: pulumi.Input<string>;
     }
     interface InstanceNetworkInterfaceArgs {
+        associateCarrierIpAddress?: pulumi.Input<boolean>;
         associatePublicIpAddress?: pulumi.Input<boolean>;
         deleteOnTermination?: pulumi.Input<boolean>;
         description?: pulumi.Input<string>;
@@ -9401,7 +9669,7 @@ export declare namespace ecs {
         /**
          * The image used to start a container. This string is passed directly to the Docker daemon.
          */
-        image?: pulumi.Input<string>;
+        image: pulumi.Input<string>;
         interactive?: pulumi.Input<boolean>;
         links?: pulumi.Input<pulumi.Input<string>[]>;
         linuxParameters?: pulumi.Input<inputs.ecs.TaskDefinitionLinuxParametersArgs>;
@@ -9415,7 +9683,7 @@ export declare namespace ecs {
         /**
          * The name of a container. Up to 255 letters (uppercase and lowercase), numbers, hyphens, and underscores are allowed
          */
-        name?: pulumi.Input<string>;
+        name: pulumi.Input<string>;
         /**
          * Port mappings allow containers to access ports on the host container instance to send or receive traffic.
          */
@@ -10045,21 +10313,51 @@ export declare namespace elasticache {
 }
 export declare namespace elasticbeanstalk {
     interface ApplicationMaxAgeRuleArgs {
+        /**
+         * Set to true to delete a version's source bundle from Amazon S3 when Elastic Beanstalk deletes the application version.
+         */
         deleteSourceFromS3?: pulumi.Input<boolean>;
+        /**
+         * Specify true to apply the rule, or false to disable it.
+         */
         enabled?: pulumi.Input<boolean>;
+        /**
+         * Specify the number of days to retain an application versions.
+         */
         maxAgeInDays?: pulumi.Input<number>;
     }
     interface ApplicationMaxCountRuleArgs {
+        /**
+         * Set to true to delete a version's source bundle from Amazon S3 when Elastic Beanstalk deletes the application version.
+         */
         deleteSourceFromS3?: pulumi.Input<boolean>;
+        /**
+         * Specify true to apply the rule, or false to disable it.
+         */
         enabled?: pulumi.Input<boolean>;
+        /**
+         * Specify the maximum number of application versions to retain.
+         */
         maxCount?: pulumi.Input<number>;
     }
     interface ApplicationResourceLifecycleConfigArgs {
+        /**
+         * The ARN of an IAM service role that Elastic Beanstalk has permission to assume. The ServiceRole property is required the first time that you provide a ResourceLifecycleConfig for the application. After you provide it once, Elastic Beanstalk persists the Service Role with the application, and you don't need to specify it again. You can, however, specify it in subsequent updates to change the Service Role to another value.
+         */
         serviceRole?: pulumi.Input<string>;
+        /**
+         * Defines lifecycle settings for application versions.
+         */
         versionLifecycleConfig?: pulumi.Input<inputs.elasticbeanstalk.ApplicationVersionLifecycleConfigArgs>;
     }
     interface ApplicationVersionLifecycleConfigArgs {
+        /**
+         * Specify a max age rule to restrict the length of time that application versions are retained for an application.
+         */
         maxAgeRule?: pulumi.Input<inputs.elasticbeanstalk.ApplicationMaxAgeRuleArgs>;
+        /**
+         * Specify a max count rule to restrict the number of application versions that are retained for an application.
+         */
         maxCountRule?: pulumi.Input<inputs.elasticbeanstalk.ApplicationMaxCountRuleArgs>;
     }
     interface ApplicationVersionSourceBundleArgs {
@@ -10333,6 +10631,7 @@ export declare namespace elasticloadbalancingv2 {
 }
 export declare namespace elasticsearch {
     interface DomainAdvancedSecurityOptionsInputArgs {
+        anonymousAuthEnabled?: pulumi.Input<boolean>;
         enabled?: pulumi.Input<boolean>;
         internalUserDatabaseEnabled?: pulumi.Input<boolean>;
         masterUserOptions?: pulumi.Input<inputs.elasticsearch.DomainMasterUserOptionsArgs>;
@@ -10410,6 +10709,9 @@ export declare namespace emr {
         constraints: pulumi.Input<inputs.emr.ClusterScalingConstraintsArgs>;
         rules: pulumi.Input<pulumi.Input<inputs.emr.ClusterScalingRuleArgs>[]>;
     }
+    interface ClusterAutoTerminationPolicyArgs {
+        idleTimeout?: pulumi.Input<number>;
+    }
     interface ClusterBootstrapActionConfigArgs {
         name: pulumi.Input<string>;
         scriptBootstrapAction: pulumi.Input<inputs.emr.ClusterScriptBootstrapActionConfigArgs>;
@@ -10498,6 +10800,8 @@ export declare namespace emr {
         masterInstanceGroup?: pulumi.Input<inputs.emr.ClusterInstanceGroupConfigArgs>;
         placement?: pulumi.Input<inputs.emr.ClusterPlacementTypeArgs>;
         serviceAccessSecurityGroup?: pulumi.Input<string>;
+        taskInstanceFleets?: pulumi.Input<pulumi.Input<inputs.emr.ClusterInstanceFleetConfigArgs>[]>;
+        taskInstanceGroups?: pulumi.Input<pulumi.Input<inputs.emr.ClusterInstanceGroupConfigArgs>[]>;
         terminationProtected?: pulumi.Input<boolean>;
     }
     interface ClusterKerberosAttributesArgs {
@@ -11134,8 +11438,14 @@ export declare namespace evidently {
          */
         valueKey: pulumi.Input<string>;
     }
+    interface LaunchSegmentOverrideArgs {
+        evaluationOrder: pulumi.Input<number>;
+        segment: pulumi.Input<string>;
+        weights: pulumi.Input<pulumi.Input<inputs.evidently.LaunchGroupToWeightArgs>[]>;
+    }
     interface LaunchStepConfigArgs {
         groupWeights: pulumi.Input<pulumi.Input<inputs.evidently.LaunchGroupToWeightArgs>[]>;
+        segmentOverrides?: pulumi.Input<pulumi.Input<inputs.evidently.LaunchSegmentOverrideArgs>[]>;
         startTime: pulumi.Input<string>;
     }
     /**
@@ -11175,6 +11485,19 @@ export declare namespace evidently {
          */
         value: pulumi.Input<string>;
     }
+    /**
+     * A key-value pair to associate with a resource.
+     */
+    interface SegmentTagArgs {
+        /**
+         * The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
+         */
+        key: pulumi.Input<string>;
+        /**
+         * The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
+         */
+        value: pulumi.Input<string>;
+    }
 }
 export declare namespace finspace {
     /**
@@ -11260,6 +11583,19 @@ export declare namespace fms {
         aCCOUNT?: pulumi.Input<pulumi.Input<string>[]>;
         oRGUNIT?: pulumi.Input<pulumi.Input<string>[]>;
     }
+    /**
+     * Network firewall policy.
+     */
+    interface PolicyNetworkFirewallPolicyArgs {
+        firewallDeploymentModel: pulumi.Input<enums.fms.PolicyFirewallDeploymentModel>;
+    }
+    /**
+     * Firewall policy option.
+     */
+    interface PolicyOptionArgs {
+        networkFirewallPolicy?: pulumi.Input<inputs.fms.PolicyNetworkFirewallPolicyArgs>;
+        thirdPartyFirewallPolicy?: pulumi.Input<inputs.fms.PolicyThirdPartyFirewallPolicyArgs>;
+    }
     /**
      * A resource tag.
      */
@@ -11267,6 +11603,14 @@ export declare namespace fms {
         key: pulumi.Input<string>;
         value?: pulumi.Input<string>;
     }
+    /**
+     * Firewall security service policy data.
+     */
+    interface PolicySecurityServicePolicyDataArgs {
+        managedServiceData?: pulumi.Input<string>;
+        policyOption?: pulumi.Input<inputs.fms.PolicyOptionArgs>;
+        type: pulumi.Input<enums.fms.PolicyType>;
+    }
     /**
      * A policy tag.
      */
@@ -11274,9 +11618,11 @@ export declare namespace fms {
         key: pulumi.Input<string>;
         value: pulumi.Input<string>;
     }
-    interface SecurityServicePolicyDataPropertiesArgs {
-        managedServiceData?: pulumi.Input<string>;
-        type: pulumi.Input<enums.fms.PolicySecurityServicePolicyDataPropertiesType>;
+    /**
+     * Third party firewall policy.
+     */
+    interface PolicyThirdPartyFirewallPolicyArgs {
+        firewallDeploymentModel: pulumi.Input<enums.fms.PolicyFirewallDeploymentModel>;
     }
 }
 export declare namespace forecast {
@@ -12741,6 +13087,7 @@ export declare namespace groundstation {
 export declare namespace guardduty {
     interface DetectorCFNDataSourceConfigurationsArgs {
         kubernetes?: pulumi.Input<inputs.guardduty.DetectorCFNKubernetesConfigurationArgs>;
+        malwareProtection?: pulumi.Input<inputs.guardduty.DetectorCFNMalwareProtectionConfigurationArgs>;
         s3Logs?: pulumi.Input<inputs.guardduty.DetectorCFNS3LogsConfigurationArgs>;
     }
     interface DetectorCFNKubernetesAuditLogsConfigurationArgs {
@@ -12749,9 +13096,19 @@ export declare namespace guardduty {
     interface DetectorCFNKubernetesConfigurationArgs {
         auditLogs?: pulumi.Input<inputs.guardduty.DetectorCFNKubernetesAuditLogsConfigurationArgs>;
     }
+    interface DetectorCFNMalwareProtectionConfigurationArgs {
+        scanEc2InstanceWithFindings?: pulumi.Input<inputs.guardduty.DetectorCFNScanEc2InstanceWithFindingsConfigurationArgs>;
+    }
     interface DetectorCFNS3LogsConfigurationArgs {
         enable?: pulumi.Input<boolean>;
     }
+    interface DetectorCFNScanEc2InstanceWithFindingsConfigurationArgs {
+        ebsVolumes?: pulumi.Input<boolean>;
+    }
+    interface DetectorTagArgs {
+        key: pulumi.Input<string>;
+        value: pulumi.Input<string>;
+    }
     interface FilterConditionArgs {
         eq?: pulumi.Input<pulumi.Input<string>[]>;
         equals?: pulumi.Input<pulumi.Input<string>[]>;
@@ -12770,6 +13127,18 @@ export declare namespace guardduty {
         criterion?: any;
         itemType?: pulumi.Input<inputs.guardduty.FilterConditionArgs>;
     }
+    interface FilterTagArgs {
+        key: pulumi.Input<string>;
+        value: pulumi.Input<string>;
+    }
+    interface IPSetTagArgs {
+        key: pulumi.Input<string>;
+        value: pulumi.Input<string>;
+    }
+    interface ThreatIntelSetTagArgs {
+        key: pulumi.Input<string>;
+        value: pulumi.Input<string>;
+    }
 }
 export declare namespace healthlake {
     /**
@@ -13483,6 +13852,24 @@ export declare namespace iot {
         key: pulumi.Input<string>;
         value: pulumi.Input<string>;
     }
+    interface CACertificateRegistrationConfigArgs {
+        roleArn?: pulumi.Input<string>;
+        templateBody?: pulumi.Input<string>;
+        templateName?: pulumi.Input<string>;
+    }
+    /**
+     * A key-value pair to associate with a resource.
+     */
+    interface CACertificateTagArgs {
+        /**
+         * The key name of the tag. You can specify a value that is 1 to 127 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
+         */
+        key: pulumi.Input<string>;
+        /**
+         * The value for the tag. You can specify a value that is 1 to 255 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
+         */
+        value: pulumi.Input<string>;
+    }
     /**
      * A key-value pair to associate with a resource.
      */
@@ -16479,6 +16866,10 @@ export declare namespace kinesisanalyticsv2 {
          * The creation and update parameters for a SQL-based Kinesis Data Analytics application.
          */
         sqlApplicationConfiguration?: pulumi.Input<inputs.kinesisanalyticsv2.ApplicationSqlApplicationConfigurationArgs>;
+        /**
+         * The array of descriptions of VPC configurations available to the application.
+         */
+        vpcConfigurations?: pulumi.Input<pulumi.Input<inputs.kinesisanalyticsv2.ApplicationVpcConfigurationArgs>[]>;
         /**
          * The configuration parameters for a Kinesis Data Analytics Studio notebook.
          */
@@ -16537,11 +16928,20 @@ export declare namespace kinesisanalyticsv2 {
         parallelismConfiguration?: pulumi.Input<inputs.kinesisanalyticsv2.ApplicationParallelismConfigurationArgs>;
     }
     /**
-     * The configuration of the Glue Data Catalog that you use for Apache Flink SQL queries and table API transforms that you write in an application.
+     * Describes the starting parameters for a Flink-based Kinesis Data Analytics application.
      */
-    interface ApplicationGlueDataCatalogConfigurationArgs {
+    interface ApplicationFlinkRunConfigurationArgs {
         /**
-         * The Amazon Resource Name (ARN) of the database.
+         * When restoring from a snapshot, specifies whether the runtime is allowed to skip a state that cannot be mapped to the new program. Defaults to false. If you update your application without specifying this parameter, AllowNonRestoredState will be set to false, even if it was previously set to true.
+         */
+        allowNonRestoredState?: pulumi.Input<boolean>;
+    }
+    /**
+     * The configuration of the Glue Data Catalog that you use for Apache Flink SQL queries and table API transforms that you write in an application.
+     */
+    interface ApplicationGlueDataCatalogConfigurationArgs {
+        /**
+         * The Amazon Resource Name (ARN) of the database.
          */
         databaseARN?: pulumi.Input<string>;
     }
@@ -16645,6 +17045,15 @@ export declare namespace kinesisanalyticsv2 {
          */
         resourceARN: pulumi.Input<string>;
     }
+    /**
+     * Describes the maintenance configuration for the application.
+     */
+    interface ApplicationMaintenanceConfigurationArgs {
+        /**
+         * The start time for the maintenance window.
+         */
+        applicationMaintenanceWindowStartTime: pulumi.Input<string>;
+    }
     /**
      * When you configure a SQL-based Kinesis Data Analytics application's input at the time of creating or updating an application, provides additional mapping information specific to the record format (such as JSON, CSV, or record fields delimited by some delimiter) on the streaming source.
      */
@@ -16810,6 +17219,32 @@ export declare namespace kinesisanalyticsv2 {
         bucketARN: pulumi.Input<string>;
         fileKey: pulumi.Input<string>;
     }
+    /**
+     * Describes the restore behavior of a restarting application.
+     */
+    interface ApplicationRestoreConfigurationArgs {
+        /**
+         * Specifies how the application should be restored.
+         */
+        applicationRestoreType: pulumi.Input<enums.kinesisanalyticsv2.ApplicationRestoreConfigurationApplicationRestoreType>;
+        /**
+         * The identifier of an existing snapshot of application state to use to restart an application. The application uses this value if RESTORE_FROM_CUSTOM_SNAPSHOT is specified for the ApplicationRestoreType.
+         */
+        snapshotName?: pulumi.Input<string>;
+    }
+    /**
+     * Identifies the run configuration (start parameters) of a Kinesis Data Analytics application. This section is evaluated only on stack updates for applications in running RUNNING state and has no effect during manual application start.
+     */
+    interface ApplicationRunConfigurationArgs {
+        /**
+         * Describes the restore behavior of a restarting application.
+         */
+        applicationRestoreConfiguration?: pulumi.Input<inputs.kinesisanalyticsv2.ApplicationRestoreConfigurationArgs>;
+        /**
+         * Describes the starting parameters for a Flink-based Kinesis Data Analytics application.
+         */
+        flinkRunConfiguration?: pulumi.Input<inputs.kinesisanalyticsv2.ApplicationFlinkRunConfigurationArgs>;
+    }
     /**
      * The base location of the Amazon Data Analytics application.
      */
@@ -16871,6 +17306,19 @@ export declare namespace kinesisanalyticsv2 {
          */
         value: pulumi.Input<string>;
     }
+    /**
+     * Describes the parameters of a VPC used by the application.
+     */
+    interface ApplicationVpcConfigurationArgs {
+        /**
+         * The array of SecurityGroup IDs used by the VPC configuration.
+         */
+        securityGroupIds: pulumi.Input<pulumi.Input<string>[]>;
+        /**
+         * The array of Subnet IDs used by the VPC configuration.
+         */
+        subnetIds: pulumi.Input<pulumi.Input<string>[]>;
+    }
     /**
      * The configuration of a Kinesis Data Analytics Studio notebook.
      */
@@ -17197,6 +17645,28 @@ export declare namespace kms {
     }
 }
 export declare namespace lakeformation {
+    /**
+     * An object representing the Data Cells Filter's Columns. Either Column Names or a Wildcard is required.
+     */
+    interface DataCellsFilterColumnWildcardArgs {
+        /**
+         * A list of column names to be excluded from the Data Cells Filter.
+         */
+        excludedColumnNames?: pulumi.Input<pulumi.Input<string>[]>;
+    }
+    /**
+     * An object representing the Data Cells Filter's Row Filter. Either a Filter Expression or a Wildcard is required.
+     */
+    interface DataCellsFilterRowFilterArgs {
+        /**
+         * An empty object representing a row wildcard.
+         */
+        allRowsWildcard?: any;
+        /**
+         * A PartiQL predicate.
+         */
+        filterExpression?: pulumi.Input<string>;
+    }
     interface DataLakeSettingsAdminsArgs {
     }
     interface PermissionsColumnWildcardArgs {
@@ -17234,6 +17704,98 @@ export declare namespace lakeformation {
         databaseName?: pulumi.Input<string>;
         name?: pulumi.Input<string>;
     }
+    interface PrincipalPermissionsCatalogResourceArgs {
+    }
+    interface PrincipalPermissionsColumnWildcardArgs {
+        excludedColumnNames?: pulumi.Input<pulumi.Input<string>[]>;
+    }
+    interface PrincipalPermissionsDataCellsFilterResourceArgs {
+        databaseName: pulumi.Input<string>;
+        name: pulumi.Input<string>;
+        tableCatalogId: pulumi.Input<string>;
+        tableName: pulumi.Input<string>;
+    }
+    interface PrincipalPermissionsDataLakePrincipalArgs {
+        dataLakePrincipalIdentifier?: pulumi.Input<string>;
+    }
+    interface PrincipalPermissionsDataLocationResourceArgs {
+        catalogId: pulumi.Input<string>;
+        resourceArn: pulumi.Input<string>;
+    }
+    interface PrincipalPermissionsDatabaseResourceArgs {
+        catalogId: pulumi.Input<string>;
+        name: pulumi.Input<string>;
+    }
+    interface PrincipalPermissionsLFTagArgs {
+        tagKey?: pulumi.Input<string>;
+        tagValues?: pulumi.Input<pulumi.Input<string>[]>;
+    }
+    interface PrincipalPermissionsLFTagKeyResourceArgs {
+        catalogId: pulumi.Input<string>;
+        tagKey: pulumi.Input<string>;
+        tagValues: pulumi.Input<pulumi.Input<string>[]>;
+    }
+    interface PrincipalPermissionsLFTagPolicyResourceArgs {
+        catalogId: pulumi.Input<string>;
+        expression: pulumi.Input<pulumi.Input<inputs.lakeformation.PrincipalPermissionsLFTagArgs>[]>;
+        resourceType: pulumi.Input<enums.lakeformation.PrincipalPermissionsResourceType>;
+    }
+    interface PrincipalPermissionsResourceArgs {
+        catalog?: pulumi.Input<inputs.lakeformation.PrincipalPermissionsCatalogResourceArgs>;
+        dataCellsFilter?: pulumi.Input<inputs.lakeformation.PrincipalPermissionsDataCellsFilterResourceArgs>;
+        dataLocation?: pulumi.Input<inputs.lakeformation.PrincipalPermissionsDataLocationResourceArgs>;
+        database?: pulumi.Input<inputs.lakeformation.PrincipalPermissionsDatabaseResourceArgs>;
+        lFTag?: pulumi.Input<inputs.lakeformation.PrincipalPermissionsLFTagKeyResourceArgs>;
+        lFTagPolicy?: pulumi.Input<inputs.lakeformation.PrincipalPermissionsLFTagPolicyResourceArgs>;
+        table?: pulumi.Input<inputs.lakeformation.PrincipalPermissionsTableResourceArgs>;
+        tableWithColumns?: pulumi.Input<inputs.lakeformation.PrincipalPermissionsTableWithColumnsResourceArgs>;
+    }
+    interface PrincipalPermissionsTableResourceArgs {
+        catalogId: pulumi.Input<string>;
+        databaseName: pulumi.Input<string>;
+        name?: pulumi.Input<string>;
+        tableWildcard?: pulumi.Input<inputs.lakeformation.PrincipalPermissionsTableWildcardArgs>;
+    }
+    interface PrincipalPermissionsTableWildcardArgs {
+    }
+    interface PrincipalPermissionsTableWithColumnsResourceArgs {
+        catalogId: pulumi.Input<string>;
+        columnNames?: pulumi.Input<pulumi.Input<string>[]>;
+        columnWildcard?: pulumi.Input<inputs.lakeformation.PrincipalPermissionsColumnWildcardArgs>;
+        databaseName: pulumi.Input<string>;
+        name: pulumi.Input<string>;
+    }
+    interface TagAssociationCatalogResourceArgs {
+    }
+    interface TagAssociationDatabaseResourceArgs {
+        catalogId: pulumi.Input<string>;
+        name: pulumi.Input<string>;
+    }
+    interface TagAssociationLFTagPairArgs {
+        catalogId: pulumi.Input<string>;
+        tagKey: pulumi.Input<string>;
+        tagValues: pulumi.Input<pulumi.Input<string>[]>;
+    }
+    interface TagAssociationResourceArgs {
+        catalog?: pulumi.Input<inputs.lakeformation.TagAssociationCatalogResourceArgs>;
+        database?: pulumi.Input<inputs.lakeformation.TagAssociationDatabaseResourceArgs>;
+        table?: pulumi.Input<inputs.lakeformation.TagAssociationTableResourceArgs>;
+        tableWithColumns?: pulumi.Input<inputs.lakeformation.TagAssociationTableWithColumnsResourceArgs>;
+    }
+    interface TagAssociationTableResourceArgs {
+        catalogId: pulumi.Input<string>;
+        databaseName: pulumi.Input<string>;
+        name?: pulumi.Input<string>;
+        tableWildcard?: pulumi.Input<inputs.lakeformation.TagAssociationTableWildcardArgs>;
+    }
+    interface TagAssociationTableWildcardArgs {
+    }
+    interface TagAssociationTableWithColumnsResourceArgs {
+        catalogId: pulumi.Input<string>;
+        columnNames: pulumi.Input<pulumi.Input<string>[]>;
+        databaseName: pulumi.Input<string>;
+        name: pulumi.Input<string>;
+    }
 }
 export declare namespace lambda {
     interface AliasProvisionedConcurrencyConfigurationArgs {
@@ -17274,6 +17836,15 @@ export declare namespace lambda {
     interface EventInvokeConfigOnSuccessArgs {
         destination: pulumi.Input<string>;
     }
+    /**
+     * Specific configuration settings for an MSK event source.
+     */
+    interface EventSourceMappingAmazonManagedKafkaEventSourceConfigArgs {
+        /**
+         * The identifier for the Kafka Consumer Group to join.
+         */
+        consumerGroupId?: pulumi.Input<string>;
+    }
     /**
      * (Streams) An Amazon SQS queue or Amazon SNS topic destination for discarded records.
      */
@@ -17328,6 +17899,15 @@ export declare namespace lambda {
          */
         endpoints?: pulumi.Input<inputs.lambda.EventSourceMappingEndpointsArgs>;
     }
+    /**
+     * Specific configuration settings for a Self-Managed Apache Kafka event source.
+     */
+    interface EventSourceMappingSelfManagedKafkaEventSourceConfigArgs {
+        /**
+         * The identifier for the Kafka Consumer Group to join.
+         */
+        consumerGroupId?: pulumi.Input<string>;
+    }
     /**
      * The configuration used by AWS Lambda to access event source
      */
@@ -17918,6 +18498,7 @@ export declare namespace lex {
         allowInterrupt?: pulumi.Input<boolean>;
         maxRetries: pulumi.Input<number>;
         messageGroupsList: pulumi.Input<pulumi.Input<inputs.lex.BotMessageGroupArgs>[]>;
+        messageSelectionStrategy?: pulumi.Input<enums.lex.BotMessageSelectionStrategy>;
     }
     /**
      * A list of message groups that Amazon Lex uses to respond the user input.
@@ -18818,11 +19399,44 @@ export declare namespace logs {
          */
         value: pulumi.Input<string>;
     }
+    /**
+     * the key-value pairs that further define a metric.
+     */
+    interface MetricFilterDimensionArgs {
+        /**
+         * The key of the dimension. Maximum length of 255.
+         */
+        key: pulumi.Input<string>;
+        /**
+         * The value of the dimension. Maximum length of 255.
+         */
+        value: pulumi.Input<string>;
+    }
     interface MetricFilterMetricTransformationArgs {
+        /**
+         * The value to emit when a filter pattern does not match a log event. This value can be null.
+         */
         defaultValue?: pulumi.Input<number>;
+        /**
+         * Dimensions are the key-value pairs that further define a metric
+         */
+        dimensions?: pulumi.Input<pulumi.Input<inputs.logs.MetricFilterDimensionArgs>[]>;
+        /**
+         * The name of the CloudWatch metric. Metric name must be in ASCII format.
+         */
         metricName: pulumi.Input<string>;
+        /**
+         * The namespace of the CloudWatch metric.
+         */
         metricNamespace: pulumi.Input<string>;
+        /**
+         * The value to publish to the CloudWatch metric when a filter pattern matches a log event.
+         */
         metricValue: pulumi.Input<string>;
+        /**
+         * The unit to assign to the metric. If you omit this, the unit is set as None.
+         */
+        unit?: pulumi.Input<enums.logs.MetricFilterMetricTransformationUnit>;
     }
 }
 export declare namespace lookoutequipment {
@@ -20375,6 +20989,10 @@ export declare namespace mediapackage {
         adTriggers?: pulumi.Input<pulumi.Input<enums.mediapackage.OriginEndpointDashPackageAdTriggersItem>[]>;
         adsOnDeliveryRestrictions?: pulumi.Input<enums.mediapackage.OriginEndpointAdsOnDeliveryRestrictions>;
         encryption?: pulumi.Input<inputs.mediapackage.OriginEndpointDashEncryptionArgs>;
+        /**
+         * When enabled, an I-Frame only stream will be included in the output.
+         */
+        includeIframeOnlyStream?: pulumi.Input<boolean>;
         /**
          * Determines the position of some tags in the Media Presentation Description (MPD).  When set to FULL, elements like SegmentTemplate and ContentProtection are included in each Representation.  When set to COMPACT, duplicate elements are combined and presented at the AdaptationSet level.
          */
@@ -20417,7 +21035,7 @@ export declare namespace mediapackage {
          */
         utcTiming?: pulumi.Input<enums.mediapackage.OriginEndpointDashPackageUtcTiming>;
         /**
-         * Specifies the value attribute of the UTCTiming field when utcTiming is set to HTTP-ISO or HTTP-HEAD
+         * Specifies the value attribute of the UTCTiming field when utcTiming is set to HTTP-ISO, HTTP-HEAD or HTTP-XSDATE
          */
         utcTimingUri?: pulumi.Input<string>;
     }
@@ -21120,6 +21738,19 @@ export declare namespace msk {
     interface ClusterUnauthenticatedArgs {
         enabled: pulumi.Input<boolean>;
     }
+    interface ServerlessClusterClientAuthenticationArgs {
+        sasl: pulumi.Input<inputs.msk.ServerlessClusterSaslArgs>;
+    }
+    interface ServerlessClusterIamArgs {
+        enabled: pulumi.Input<boolean>;
+    }
+    interface ServerlessClusterSaslArgs {
+        iam: pulumi.Input<inputs.msk.ServerlessClusterIamArgs>;
+    }
+    interface ServerlessClusterVpcConfigArgs {
+        securityGroups?: pulumi.Input<pulumi.Input<string>[]>;
+        subnetIds: pulumi.Input<pulumi.Input<string>[]>;
+    }
 }
 export declare namespace mwaa {
     /**
@@ -21516,13 +22147,14 @@ export declare namespace nimblestudio {
          * <p>Integer that determines if you can start and stop your sessions and how long a session
          *             can stay in the STOPPED state. The default value is 0. The maximum value is 5760.</p>
          *         <p>If the value is missing or set to 0, your sessions can’t be stopped. If you then call
-         *             StopStreamingSession, the session fails. If the time that a session stays in the READY
-         *             state exceeds the maxSessionLengthInMinutes value, the session will automatically be
-         *             terminated by AWS (instead of stopped).</p>
+         *                 <code>StopStreamingSession</code>, the session fails. If the time that a session
+         *             stays in the READY state exceeds the <code>maxSessionLengthInMinutes</code> value, the
+         *             session will automatically be terminated (instead of stopped).</p>
          *         <p>If the value is set to a positive number, the session can be stopped. You can call
-         *             StopStreamingSession to stop sessions in the READY state. If the time that a session
-         *             stays in the READY state exceeds the maxSessionLengthInMinutes value, the session will
-         *             automatically be stopped by AWS (instead of terminated).</p>
+         *                 <code>StopStreamingSession</code> to stop sessions in the READY state. If the time
+         *             that a session stays in the READY state exceeds the
+         *                 <code>maxSessionLengthInMinutes</code> value, the session will automatically be
+         *             stopped (instead of terminated).</p>
          */
         maxStoppedSessionLengthInMinutes?: pulumi.Input<number>;
         sessionStorage?: pulumi.Input<inputs.nimblestudio.LaunchProfileStreamConfigurationSessionStorageArgs>;
@@ -21540,7 +22172,7 @@ export declare namespace nimblestudio {
          * <p>Allows artists to upload files to their workstations. The only valid option is
          *                 <code>UPLOAD</code>.</p>
          */
-        mode?: pulumi.Input<pulumi.Input<enums.nimblestudio.LaunchProfileStreamingSessionStorageMode>[]>;
+        mode: pulumi.Input<pulumi.Input<enums.nimblestudio.LaunchProfileStreamingSessionStorageMode>[]>;
         root?: pulumi.Input<inputs.nimblestudio.LaunchProfileStreamingSessionStorageRootArgs>;
     }
     /**
@@ -21561,64 +22193,18 @@ export declare namespace nimblestudio {
     }
     interface StreamingImageTagsArgs {
     }
-    /**
-     * <p>An LDAP attribute of an Active Directory computer account, in the form of a name:value pair.</p>
-     */
-    interface StudioComponentActiveDirectoryComputerAttributeArgs {
-        /**
-         * <p>The name for the LDAP attribute.</p>
-         */
-        name?: pulumi.Input<string>;
-        /**
-         * <p>The value for the LDAP attribute.</p>
-         */
-        value?: pulumi.Input<string>;
-    }
-    /**
-     * <p>The configuration for a Microsoft Active Directory (Microsoft AD) studio resource.</p>
-     */
-    interface StudioComponentActiveDirectoryConfigurationArgs {
-        /**
-         * <p>A collection of custom attributes for an Active Directory computer.</p>
-         */
-        computerAttributes?: pulumi.Input<pulumi.Input<inputs.nimblestudio.StudioComponentActiveDirectoryComputerAttributeArgs>[]>;
-        /**
-         * <p>The directory ID of the Directory Service for Microsoft Active Directory to access using this studio component.</p>
-         */
-        directoryId?: pulumi.Input<string>;
-        /**
-         * <p>The distinguished name (DN) and organizational unit (OU) of an Active Directory computer.</p>
-         */
-        organizationalUnitDistinguishedName?: pulumi.Input<string>;
-    }
-    /**
-     * <p>The configuration for a render farm that is associated with a studio resource.</p>
-     */
-    interface StudioComponentComputeFarmConfigurationArgs {
-        /**
-         * <p>The name of an Active Directory user that is used on ComputeFarm worker instances.</p>
-         */
-        activeDirectoryUser?: pulumi.Input<string>;
-        /**
-         * <p>The endpoint of the ComputeFarm that is accessed by the studio component resource.</p>
-         */
-        endpoint?: pulumi.Input<string>;
-    }
     /**
      * <p>The configuration of the studio component, based on component type.</p>
      */
     interface StudioComponentConfigurationArgs {
-        activeDirectoryConfiguration?: pulumi.Input<inputs.nimblestudio.StudioComponentActiveDirectoryConfigurationArgs>;
-        computeFarmConfiguration?: pulumi.Input<inputs.nimblestudio.StudioComponentComputeFarmConfigurationArgs>;
-        licenseServiceConfiguration?: pulumi.Input<inputs.nimblestudio.StudioComponentLicenseServiceConfigurationArgs>;
-        sharedFileSystemConfiguration?: pulumi.Input<inputs.nimblestudio.StudioComponentSharedFileSystemConfigurationArgs>;
     }
     /**
      * <p>Initialization scripts for studio components.</p>
      */
     interface StudioComponentInitializationScriptArgs {
         /**
-         * <p>The version number of the protocol that is used by the launch profile. The only valid version is "2021-03-31".</p>
+         * <p>The version number of the protocol that is used by the launch profile. The only valid
+         *             version is "2021-03-31".</p>
          */
         launchProfileProtocolVersion?: pulumi.Input<string>;
         platform?: pulumi.Input<enums.nimblestudio.StudioComponentLaunchProfilePlatform>;
@@ -21628,15 +22214,6 @@ export declare namespace nimblestudio {
          */
         script?: pulumi.Input<string>;
     }
-    /**
-     * <p>The configuration for a license service that is associated with a studio resource.</p>
-     */
-    interface StudioComponentLicenseServiceConfigurationArgs {
-        /**
-         * <p>The endpoint of the license service that is accessed by the studio component resource.</p>
-         */
-        endpoint?: pulumi.Input<string>;
-    }
     /**
      * <p>A parameter for a studio component script, in the form of a key:value pair.</p>
      */
@@ -21650,31 +22227,6 @@ export declare namespace nimblestudio {
          */
         value?: pulumi.Input<string>;
     }
-    /**
-     * <p>The configuration for a shared file storage system that is associated with a studio resource.</p>
-     */
-    interface StudioComponentSharedFileSystemConfigurationArgs {
-        /**
-         * <p>The endpoint of the shared file system that is accessed by the studio component resource.</p>
-         */
-        endpoint?: pulumi.Input<string>;
-        /**
-         * <p>The unique identifier for a file system.</p>
-         */
-        fileSystemId?: pulumi.Input<string>;
-        /**
-         * <p>The mount location for a shared file system on a Linux virtual workstation.</p>
-         */
-        linuxMountPoint?: pulumi.Input<string>;
-        /**
-         * <p>The name of the file share.</p>
-         */
-        shareName?: pulumi.Input<string>;
-        /**
-         * <p>The mount location for a shared file system on a Windows virtual workstation.</p>
-         */
-        windowsMountDrive?: pulumi.Input<string>;
-    }
     interface StudioComponentTagsArgs {
     }
     /**
@@ -21717,6 +22269,7 @@ export declare namespace opensearchservice {
     interface DomainEBSOptionsArgs {
         eBSEnabled?: pulumi.Input<boolean>;
         iops?: pulumi.Input<number>;
+        throughput?: pulumi.Input<number>;
         volumeSize?: pulumi.Input<number>;
         volumeType?: pulumi.Input<string>;
     }
@@ -22869,6 +23422,13 @@ export declare namespace quicksight {
          */
         value: pulumi.Input<string>;
     }
+    /**
+     * <p>The dataset usage configuration for the dataset.</p>
+     */
+    interface DataSetUsageConfigurationArgs {
+        disableUseAsDirectQuerySource?: pulumi.Input<boolean>;
+        disableUseAsImportedSource?: pulumi.Input<boolean>;
+    }
     /**
      * <p>Amazon Elasticsearch Service parameters.</p>
      */
@@ -23570,38 +24130,105 @@ export declare namespace rds {
         /**
          * The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
          */
-        value: pulumi.Input<string>;
+        value?: pulumi.Input<string>;
     }
+    interface DBClusterReadEndpointArgs {
+        /**
+         * The reader endpoint for the DB cluster.
+         */
+        address?: pulumi.Input<string>;
+    }
+    /**
+     * Describes an AWS Identity and Access Management (IAM) role that is associated with a DB cluster.
+     */
     interface DBClusterRoleArgs {
+        /**
+         * The name of the feature associated with the AWS Identity and Access Management (IAM) role. For the list of supported feature names, see DBEngineVersion in the Amazon RDS API Reference.
+         */
         featureName?: pulumi.Input<string>;
+        /**
+         * The Amazon Resource Name (ARN) of the IAM role that is associated with the DB cluster.
+         */
         roleArn: pulumi.Input<string>;
     }
+    /**
+     * The ScalingConfiguration property type specifies the scaling configuration of an Aurora Serverless DB cluster.
+     */
     interface DBClusterScalingConfigurationArgs {
+        /**
+         * A value that indicates whether to allow or disallow automatic pause for an Aurora DB cluster in serverless DB engine mode. A DB cluster can be paused only when it's idle (it has no connections).
+         */
         autoPause?: pulumi.Input<boolean>;
+        /**
+         * The maximum capacity for an Aurora DB cluster in serverless DB engine mode.
+         * For Aurora MySQL, valid capacity values are 1, 2, 4, 8, 16, 32, 64, 128, and 256.
+         * For Aurora PostgreSQL, valid capacity values are 2, 4, 8, 16, 32, 64, 192, and 384.
+         * The maximum capacity must be greater than or equal to the minimum capacity.
+         */
         maxCapacity?: pulumi.Input<number>;
+        /**
+         * The minimum capacity for an Aurora DB cluster in serverless DB engine mode.
+         * For Aurora MySQL, valid capacity values are 1, 2, 4, 8, 16, 32, 64, 128, and 256.
+         * For Aurora PostgreSQL, valid capacity values are 2, 4, 8, 16, 32, 64, 192, and 384.
+         * The minimum capacity must be less than or equal to the maximum capacity.
+         */
         minCapacity?: pulumi.Input<number>;
+        /**
+         * The time, in seconds, before an Aurora DB cluster in serverless mode is paused.
+         */
         secondsUntilAutoPause?: pulumi.Input<number>;
     }
+    /**
+     * A key-value pair to associate with a resource.
+     */
     interface DBClusterTagArgs {
+        /**
+         * The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
+         */
         key: pulumi.Input<string>;
-        value: pulumi.Input<string>;
+        /**
+         * The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
+         */
+        value?: pulumi.Input<string>;
+    }
+    interface DBInstanceEndpointArgs {
+        /**
+         * Specifies the DNS address of the DB instance.
+         */
+        address?: pulumi.Input<string>;
+        /**
+         * Specifies the ID that Amazon Route 53 assigns when you create a hosted zone.
+         */
+        hostedZoneId?: pulumi.Input<string>;
+        /**
+         * Specifies the port that the database engine is listening on.
+         */
+        port?: pulumi.Input<string>;
     }
     interface DBInstanceProcessorFeatureArgs {
-        name?: pulumi.Input<string>;
+        /**
+         * The name of the processor feature. Valid names are coreCount and threadsPerCore.
+         */
+        name?: pulumi.Input<enums.rds.DBInstanceProcessorFeatureName>;
+        /**
+         * The value of a processor feature name.
+         */
         value?: pulumi.Input<string>;
     }
     interface DBInstanceRoleArgs {
+        /**
+         * The name of the feature associated with the AWS Identity and Access Management (IAM) role. IAM roles that are associated with a DB instance grant permission for the DB instance to access other AWS services on your behalf.
+         */
         featureName: pulumi.Input<string>;
+        /**
+         * The Amazon Resource Name (ARN) of the IAM role that is associated with the DB instance.
+         */
         roleArn: pulumi.Input<string>;
     }
-    interface DBInstanceTagArgs {
-        key: pulumi.Input<string>;
-        value: pulumi.Input<string>;
-    }
     /**
      * A key-value pair to associate with a resource.
      */
-    interface DBParameterGroupTagArgs {
+    interface DBInstanceTagArgs {
         /**
          * The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
          */
@@ -23609,6 +24236,10 @@ export declare namespace rds {
         /**
          * The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
          */
+        value?: pulumi.Input<string>;
+    }
+    interface DBParameterGroupTagArgs {
+        key: pulumi.Input<string>;
         value: pulumi.Input<string>;
     }
     interface DBProxyAuthFormatArgs {
@@ -23684,7 +24315,7 @@ export declare namespace rds {
         /**
          * The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
          */
-        value: pulumi.Input<string>;
+        value?: pulumi.Input<string>;
     }
     /**
      * A key-value pair to associate with a resource.
@@ -23697,23 +24328,62 @@ export declare namespace rds {
         /**
          * The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
          */
-        value: pulumi.Input<string>;
+        value?: pulumi.Input<string>;
     }
+    /**
+     * The OptionConfiguration property type specifies an individual option, and its settings, within an AWS::RDS::OptionGroup resource.
+     */
     interface OptionGroupOptionConfigurationArgs {
+        /**
+         * A list of DBSecurityGroupMembership name strings used for this option.
+         */
         dBSecurityGroupMemberships?: pulumi.Input<pulumi.Input<string>[]>;
+        /**
+         * The configuration of options to include in a group.
+         */
         optionName: pulumi.Input<string>;
+        /**
+         * The option settings to include in an option group.
+         */
         optionSettings?: pulumi.Input<pulumi.Input<inputs.rds.OptionGroupOptionSettingArgs>[]>;
+        /**
+         * The version for the option.
+         */
         optionVersion?: pulumi.Input<string>;
+        /**
+         * The optional port for the option.
+         */
         port?: pulumi.Input<number>;
+        /**
+         * A list of VpcSecurityGroupMembership name strings used for this option.
+         */
         vpcSecurityGroupMemberships?: pulumi.Input<pulumi.Input<string>[]>;
     }
+    /**
+     * The OptionSetting property type specifies the value for an option within an OptionSetting property.
+     */
     interface OptionGroupOptionSettingArgs {
+        /**
+         * The name of the option that has settings that you can set.
+         */
         name?: pulumi.Input<string>;
+        /**
+         * The current value of the option setting.
+         */
         value?: pulumi.Input<string>;
     }
+    /**
+     * A key-value pair to associate with a resource.
+     */
     interface OptionGroupTagArgs {
+        /**
+         * The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
+         */
         key: pulumi.Input<string>;
-        value: pulumi.Input<string>;
+        /**
+         * The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
+         */
+        value?: pulumi.Input<string>;
     }
 }
 export declare namespace redshift {
@@ -23767,32 +24437,7 @@ export declare namespace redshift {
          */
         value: pulumi.Input<string>;
     }
-    /**
-     * Describes a pause cluster operation. For example, a scheduled action to run the `PauseCluster` API operation.
-     */
-    interface ScheduledActionPauseClusterMessageArgs {
-        clusterIdentifier: pulumi.Input<string>;
-    }
-    /**
-     * Describes a resize cluster operation. For example, a scheduled action to run the `ResizeCluster` API operation.
-     */
-    interface ScheduledActionResizeClusterMessageArgs {
-        classic?: pulumi.Input<boolean>;
-        clusterIdentifier: pulumi.Input<string>;
-        clusterType?: pulumi.Input<string>;
-        nodeType?: pulumi.Input<string>;
-        numberOfNodes?: pulumi.Input<number>;
-    }
-    /**
-     * Describes a resume cluster operation. For example, a scheduled action to run the `ResumeCluster` API operation.
-     */
-    interface ScheduledActionResumeClusterMessageArgs {
-        clusterIdentifier: pulumi.Input<string>;
-    }
     interface ScheduledActionTypeArgs {
-        pauseCluster?: pulumi.Input<inputs.redshift.ScheduledActionPauseClusterMessageArgs>;
-        resizeCluster?: pulumi.Input<inputs.redshift.ScheduledActionResizeClusterMessageArgs>;
-        resumeCluster?: pulumi.Input<inputs.redshift.ScheduledActionResumeClusterMessageArgs>;
     }
 }
 export declare namespace redshiftserverless {
@@ -23800,6 +24445,14 @@ export declare namespace redshiftserverless {
         key: pulumi.Input<string>;
         value: pulumi.Input<string>;
     }
+    interface WorkgroupConfigParameterArgs {
+        parameterKey?: pulumi.Input<string>;
+        parameterValue?: pulumi.Input<string>;
+    }
+    interface WorkgroupTagArgs {
+        key: pulumi.Input<string>;
+        value: pulumi.Input<string>;
+    }
 }
 export declare namespace refactorspaces {
     interface ApplicationApiGatewayProxyInputArgs {
@@ -23832,6 +24485,9 @@ export declare namespace refactorspaces {
          */
         value: pulumi.Input<string>;
     }
+    interface RouteDefaultRouteInputArgs {
+        activationState: pulumi.Input<enums.refactorspaces.RouteActivationState>;
+    }
     /**
      * A label for tagging Environment resource
      */
@@ -24150,6 +24806,26 @@ export declare namespace robomaker {
     interface SimulationApplicationTagsArgs {
     }
 }
+export declare namespace rolesanywhere {
+    interface CRLTagArgs {
+        key: pulumi.Input<string>;
+        value: pulumi.Input<string>;
+    }
+    interface ProfileTagArgs {
+        key: pulumi.Input<string>;
+        value: pulumi.Input<string>;
+    }
+    interface TrustAnchorSourceArgs {
+        sourceData?: pulumi.Input<inputs.rolesanywhere.TrustAnchorSourceDataArgs>;
+        sourceType?: pulumi.Input<enums.rolesanywhere.TrustAnchorType>;
+    }
+    interface TrustAnchorSourceDataArgs {
+    }
+    interface TrustAnchorTagArgs {
+        key: pulumi.Input<string>;
+        value: pulumi.Input<string>;
+    }
+}
 export declare namespace route53 {
     interface CidrCollectionLocationArgs {
         /**
@@ -24260,6 +24936,10 @@ export declare namespace route53 {
         evaluateTargetHealth?: pulumi.Input<boolean>;
         hostedZoneId: pulumi.Input<string>;
     }
+    interface RecordSetCidrRoutingConfigArgs {
+        collectionId: pulumi.Input<string>;
+        locationName: pulumi.Input<string>;
+    }
     interface RecordSetGeoLocationArgs {
         continentCode?: pulumi.Input<string>;
         countryCode?: pulumi.Input<string>;
@@ -24270,6 +24950,10 @@ export declare namespace route53 {
         evaluateTargetHealth?: pulumi.Input<boolean>;
         hostedZoneId: pulumi.Input<string>;
     }
+    interface RecordSetGroupCidrRoutingConfigArgs {
+        collectionId: pulumi.Input<string>;
+        locationName: pulumi.Input<string>;
+    }
     interface RecordSetGroupGeoLocationArgs {
         continentCode?: pulumi.Input<string>;
         countryCode?: pulumi.Input<string>;
@@ -24277,6 +24961,7 @@ export declare namespace route53 {
     }
     interface RecordSetGroupRecordSetArgs {
         aliasTarget?: pulumi.Input<inputs.route53.RecordSetGroupAliasTargetArgs>;
+        cidrRoutingConfig?: pulumi.Input<inputs.route53.RecordSetGroupCidrRoutingConfigArgs>;
         failover?: pulumi.Input<string>;
         geoLocation?: pulumi.Input<inputs.route53.RecordSetGroupGeoLocationArgs>;
         healthCheckId?: pulumi.Input<string>;
@@ -27422,6 +28107,9 @@ export declare namespace sagemaker {
          */
         subnets: pulumi.Input<pulumi.Input<string>[]>;
     }
+    interface NotebookInstanceInstanceMetadataServiceConfigurationArgs {
+        minimumInstanceMetadataServiceVersion: pulumi.Input<string>;
+    }
     interface NotebookInstanceLifecycleConfigNotebookInstanceLifecycleHookArgs {
         content?: pulumi.Input<string>;
     }
@@ -27629,11 +28317,15 @@ export declare namespace sagemaker {
         cognitoUserPool: pulumi.Input<string>;
     }
     interface WorkteamMemberDefinitionArgs {
-        cognitoMemberDefinition: pulumi.Input<inputs.sagemaker.WorkteamCognitoMemberDefinitionArgs>;
+        cognitoMemberDefinition?: pulumi.Input<inputs.sagemaker.WorkteamCognitoMemberDefinitionArgs>;
+        oidcMemberDefinition?: pulumi.Input<inputs.sagemaker.WorkteamOidcMemberDefinitionArgs>;
     }
     interface WorkteamNotificationConfigurationArgs {
         notificationTopicArn: pulumi.Input<string>;
     }
+    interface WorkteamOidcMemberDefinitionArgs {
+        oidcGroups: pulumi.Input<pulumi.Input<string>[]>;
+    }
     interface WorkteamTagArgs {
         key: pulumi.Input<string>;
         value: pulumi.Input<string>;
@@ -27911,6 +28603,63 @@ export declare namespace ses {
          */
         topicName: pulumi.Input<string>;
     }
+    /**
+     * Used to associate a configuration set with an email identity.
+     */
+    interface EmailIdentityConfigurationSetAttributesArgs {
+        /**
+         * The configuration set to use by default when sending from this identity. Note that any configuration set defined in the email sending request takes precedence.
+         */
+        configurationSetName?: pulumi.Input<string>;
+    }
+    /**
+     * Used to enable or disable DKIM authentication for an email identity.
+     */
+    interface EmailIdentityDkimAttributesArgs {
+        /**
+         * Sets the DKIM signing configuration for the identity. When you set this value true, then the messages that are sent from the identity are signed using DKIM. If you set this value to false, your messages are sent without DKIM signing.
+         */
+        signingEnabled?: pulumi.Input<boolean>;
+    }
+    /**
+     * If your request includes this object, Amazon SES configures the identity to use Bring Your Own DKIM (BYODKIM) for DKIM authentication purposes, or, configures the key length to be used for Easy DKIM.
+     */
+    interface EmailIdentityDkimSigningAttributesArgs {
+        /**
+         * [Bring Your Own DKIM] A private key that's used to generate a DKIM signature. The private key must use 1024 or 2048-bit RSA encryption, and must be encoded using base64 encoding.
+         */
+        domainSigningPrivateKey?: pulumi.Input<string>;
+        /**
+         * [Bring Your Own DKIM] A string that's used to identify a public key in the DNS configuration for a domain.
+         */
+        domainSigningSelector?: pulumi.Input<string>;
+        /**
+         * [Easy DKIM] The key length of the future DKIM key pair to be generated. This can be changed at most once per day.
+         */
+        nextSigningKeyLength?: pulumi.Input<string>;
+    }
+    /**
+     * Used to enable or disable feedback forwarding for an identity.
+     */
+    interface EmailIdentityFeedbackAttributesArgs {
+        /**
+         * If the value is true, you receive email notifications when bounce or complaint events occur
+         */
+        emailForwardingEnabled?: pulumi.Input<boolean>;
+    }
+    /**
+     * Used to enable or disable the custom Mail-From domain configuration for an email identity.
+     */
+    interface EmailIdentityMailFromAttributesArgs {
+        /**
+         * The action to take if the required MX record isn't found when you send an email. When you set this value to UseDefaultValue , the mail is sent using amazonses.com as the MAIL FROM domain. When you set this value to RejectMessage , the Amazon SES API v2 returns a MailFromDomainNotVerified error, and doesn't attempt to deliver the email.
+         */
+        behaviorOnMxFailure?: pulumi.Input<string>;
+        /**
+         * The custom MAIL FROM domain that you want the verified identity to use
+         */
+        mailFromDomain?: pulumi.Input<string>;
+    }
     interface ReceiptFilterFilterArgs {
         ipFilter: pulumi.Input<inputs.ses.ReceiptFilterIpFilterArgs>;
         name?: pulumi.Input<string>;
@@ -28008,7 +28757,13 @@ export declare namespace sns {
         protocol: pulumi.Input<string>;
     }
     interface TopicTagArgs {
+        /**
+         * The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, `_`, `.`, `/`, `=`, `+`, and `-`.
+         */
         key: pulumi.Input<string>;
+        /**
+         * The value for the tag. You can specify a value that is 0 to 256 characters in length.
+         */
         value: pulumi.Input<string>;
     }
 }
@@ -28274,6 +29029,10 @@ export declare namespace ssmincidents {
          * The impact value.
          */
         impact: pulumi.Input<number>;
+        /**
+         * Tags that get applied to incidents created by the StartIncident API action.
+         */
+        incidentTags?: pulumi.Input<pulumi.Input<inputs.ssmincidents.ResponsePlanTagArgs>[]>;
         /**
          * The list of notification targets.
          */
@@ -28351,6 +29110,14 @@ export declare namespace sso {
     interface InstanceAccessControlAttributeConfigurationPropertiesArgs {
         accessControlAttributes: pulumi.Input<pulumi.Input<inputs.sso.InstanceAccessControlAttributeConfigurationAccessControlAttributeArgs>[]>;
     }
+    interface PermissionSetCustomerManagedPolicyReferenceArgs {
+        name: pulumi.Input<string>;
+        path?: pulumi.Input<string>;
+    }
+    interface PermissionSetPermissionsBoundaryArgs {
+        customerManagedPolicyReference?: pulumi.Input<inputs.sso.PermissionSetCustomerManagedPolicyReferenceArgs>;
+        managedPolicyArn?: pulumi.Input<string>;
+    }
     /**
      * The metadata that you apply to the permission set to help you categorize and organize them.
      */
@@ -28476,6 +29243,19 @@ export declare namespace synthetics {
          */
         baseScreenshots?: pulumi.Input<pulumi.Input<inputs.synthetics.CanaryBaseScreenshotArgs>[]>;
     }
+    /**
+     * A key-value pair to associate with a resource.
+     */
+    interface GroupTagArgs {
+        /**
+         * The key name of the tag. You can specify a value that is 1 to 127 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
+         */
+        key: pulumi.Input<string>;
+        /**
+         * The value for the tag. You can specify a value that is 1 to 255 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
+         */
+        value: pulumi.Input<string>;
+    }
 }
 export declare namespace timestream {
     /**
@@ -28639,6 +29419,8 @@ export declare namespace timestream {
     }
 }
 export declare namespace transfer {
+    interface ServerAs2TransportArgs {
+    }
     interface ServerEndpointDetailsArgs {
         addressAllocationIds?: pulumi.Input<pulumi.Input<string>[]>;
         securityGroupIds?: pulumi.Input<pulumi.Input<string>[]>;
@@ -28655,6 +29437,7 @@ export declare namespace transfer {
     interface ServerProtocolArgs {
     }
     interface ServerProtocolDetailsArgs {
+        as2Transports?: pulumi.Input<pulumi.Input<inputs.transfer.ServerAs2TransportArgs>[]>;
         passiveIp?: pulumi.Input<string>;
         setStatOption?: pulumi.Input<string>;
         tlsSessionResumptionMode?: pulumi.Input<string>;
@@ -29356,6 +30139,7 @@ export declare namespace wafv2 {
      */
     interface RuleGroupSqliMatchStatementArgs {
         fieldToMatch: pulumi.Input<inputs.wafv2.RuleGroupFieldToMatchArgs>;
+        sensitivityLevel?: pulumi.Input<enums.wafv2.RuleGroupSensitivityLevel>;
         textTransformations: pulumi.Input<pulumi.Input<inputs.wafv2.RuleGroupTextTransformationArgs>[]>;
     }
     /**
@@ -29720,6 +30504,7 @@ export declare namespace wafv2 {
      */
     interface WebACLSqliMatchStatementArgs {
         fieldToMatch: pulumi.Input<inputs.wafv2.WebACLFieldToMatchArgs>;
+        sensitivityLevel?: pulumi.Input<enums.wafv2.WebACLSensitivityLevel>;
         textTransformations: pulumi.Input<pulumi.Input<inputs.wafv2.WebACLTextTransformationArgs>[]>;
     }
     /**