@pulumi/aws-native 0.20.1-alpha.1661286973 → 0.21.0

package/types/output.d.ts

@@ -608,11 +608,26 @@ export declare namespace apigateway {
         value: string;
     }
     interface DocumentationPartLocation {
+        /**
+         * The HTTP verb of a method.
+         */
         method?: string;
+        /**
+         * The name of the targeted API entity.
+         */
         name?: string;
+        /**
+         * The URL path of the target.
+         */
         path?: string;
+        /**
+         * The HTTP status code of a response.
+         */
         statusCode?: string;
-        type?: string;
+        /**
+         * The type of API entity that the documentation content applies to.
+         */
+        type?: enums.apigateway.DocumentationPartLocationType;
     }
     interface DomainNameEndpointConfiguration {
         types?: string[];
@@ -993,6 +1008,14 @@ export declare namespace appflow {
         apiKey: string;
         secretKey: string;
     }
+    interface ConnectorProfileApiKeyCredentials {
+        apiKey: string;
+        apiSecretKey?: string;
+    }
+    interface ConnectorProfileBasicAuthCredentials {
+        password: string;
+        username: string;
+    }
     /**
      * Connector specific configurations needed to create connector profile
      */
@@ -1016,6 +1039,7 @@ export declare namespace appflow {
      */
     interface ConnectorProfileCredentials {
         amplitude?: outputs.appflow.ConnectorProfileAmplitudeConnectorProfileCredentials;
+        customConnector?: outputs.appflow.ConnectorProfileCustomConnectorProfileCredentials;
         datadog?: outputs.appflow.ConnectorProfileDatadogConnectorProfileCredentials;
         dynatrace?: outputs.appflow.ConnectorProfileDynatraceConnectorProfileCredentials;
         googleAnalytics?: outputs.appflow.ConnectorProfileGoogleAnalyticsConnectorProfileCredentials;
@@ -1032,6 +1056,26 @@ export declare namespace appflow {
         veeva?: outputs.appflow.ConnectorProfileVeevaConnectorProfileCredentials;
         zendesk?: outputs.appflow.ConnectorProfileZendeskConnectorProfileCredentials;
     }
+    /**
+     * A map for properties for custom authentication.
+     */
+    interface ConnectorProfileCredentialsMap {
+    }
+    interface ConnectorProfileCustomAuthCredentials {
+        credentialsMap?: outputs.appflow.ConnectorProfileCredentialsMap;
+        customAuthenticationType: string;
+    }
+    interface ConnectorProfileCustomConnectorProfileCredentials {
+        apiKey?: outputs.appflow.ConnectorProfileApiKeyCredentials;
+        authenticationType: enums.appflow.ConnectorProfileAuthenticationType;
+        basic?: outputs.appflow.ConnectorProfileBasicAuthCredentials;
+        custom?: outputs.appflow.ConnectorProfileCustomAuthCredentials;
+        oauth2?: outputs.appflow.ConnectorProfileOAuth2Credentials;
+    }
+    interface ConnectorProfileCustomConnectorProfileProperties {
+        oAuth2Properties?: outputs.appflow.ConnectorProfileOAuth2Properties;
+        profileProperties?: outputs.appflow.ConnectorProfileProfileProperties;
+    }
     interface ConnectorProfileDatadogConnectorProfileCredentials {
         /**
          * A unique alphanumeric identifier used to authenticate a user, developer, or calling program to your API.
@@ -1130,15 +1174,33 @@ export declare namespace appflow {
          */
         instanceUrl: string;
     }
+    interface ConnectorProfileOAuth2Credentials {
+        accessToken?: string;
+        clientId?: string;
+        clientSecret?: string;
+        oAuthRequest?: outputs.appflow.ConnectorProfileConnectorOAuthRequest;
+        refreshToken?: string;
+    }
+    interface ConnectorProfileOAuth2Properties {
+        oAuth2GrantType?: enums.appflow.ConnectorProfileOAuth2GrantType;
+        tokenUrl?: string;
+        tokenUrlCustomProperties?: outputs.appflow.ConnectorProfileTokenUrlCustomProperties;
+    }
     interface ConnectorProfileOAuthProperties {
         authCodeUrl?: string;
         oAuthScopes?: string[];
         tokenUrl?: string;
     }
+    /**
+     * A map for properties for custom connector.
+     */
+    interface ConnectorProfileProfileProperties {
+    }
     /**
      * Connector specific properties needed to create connector profile - currently not needed for Amplitude, Trendmicro, Googleanalytics and Singular
      */
     interface ConnectorProfileProperties {
+        customConnector?: outputs.appflow.ConnectorProfileCustomConnectorProfileProperties;
         datadog?: outputs.appflow.ConnectorProfileDatadogConnectorProfileProperties;
         dynatrace?: outputs.appflow.ConnectorProfileDynatraceConnectorProfileProperties;
         inforNexus?: outputs.appflow.ConnectorProfileInforNexusConnectorProfileProperties;
@@ -1181,19 +1243,9 @@ export declare namespace appflow {
         roleArn: string;
     }
     interface ConnectorProfileSAPODataConnectorProfileCredentials {
-        basicAuthCredentials?: outputs.appflow.ConnectorProfileSAPODataConnectorProfileCredentialsBasicAuthCredentialsProperties;
+        basicAuthCredentials?: outputs.appflow.ConnectorProfileBasicAuthCredentials;
         oAuthCredentials?: outputs.appflow.ConnectorProfileSAPODataConnectorProfileCredentialsOAuthCredentialsProperties;
     }
-    interface ConnectorProfileSAPODataConnectorProfileCredentialsBasicAuthCredentialsProperties {
-        /**
-         * The password that corresponds to the username.
-         */
-        password?: string;
-        /**
-         * The name of the user.
-         */
-        username?: string;
-    }
     interface ConnectorProfileSAPODataConnectorProfileCredentialsOAuthCredentialsProperties {
         accessToken?: string;
         clientId?: string;
@@ -1322,6 +1374,11 @@ export declare namespace appflow {
          */
         warehouse: string;
     }
+    /**
+     * A map for properties for custom connector Token Url.
+     */
+    interface ConnectorProfileTokenUrlCustomProperties {
+    }
     interface ConnectorProfileTrendmicroConnectorProfileCredentials {
         /**
          * The Secret Access Key portion of the credentials.
@@ -1379,6 +1436,7 @@ export declare namespace appflow {
      */
     interface FlowConnectorOperator {
         amplitude?: enums.appflow.FlowAmplitudeConnectorOperator;
+        customConnector?: enums.appflow.FlowOperator;
         datadog?: enums.appflow.FlowDatadogConnectorOperator;
         dynatrace?: enums.appflow.FlowDynatraceConnectorOperator;
         googleAnalytics?: enums.appflow.FlowGoogleAnalyticsConnectorOperator;
@@ -1394,6 +1452,25 @@ export declare namespace appflow {
         veeva?: enums.appflow.FlowVeevaConnectorOperator;
         zendesk?: enums.appflow.FlowZendeskConnectorOperator;
     }
+    interface FlowCustomConnectorDestinationProperties {
+        customProperties?: outputs.appflow.FlowCustomProperties;
+        entityName: string;
+        errorHandlingConfig?: outputs.appflow.FlowErrorHandlingConfig;
+        /**
+         * List of fields used as ID when performing a write operation.
+         */
+        idFieldNames?: string[];
+        writeOperationType?: enums.appflow.FlowWriteOperationType;
+    }
+    interface FlowCustomConnectorSourceProperties {
+        customProperties?: outputs.appflow.FlowCustomProperties;
+        entityName: string;
+    }
+    /**
+     * A map for properties for custom connector.
+     */
+    interface FlowCustomProperties {
+    }
     interface FlowDatadogSourceProperties {
         object: string;
     }
@@ -1401,6 +1478,7 @@ export declare namespace appflow {
      * Destination connector details
      */
     interface FlowDestinationConnectorProperties {
+        customConnector?: outputs.appflow.FlowCustomConnectorDestinationProperties;
         eventBridge?: outputs.appflow.FlowEventBridgeDestinationProperties;
         lookoutMetrics?: outputs.appflow.FlowLookoutMetricsDestinationProperties;
         marketo?: outputs.appflow.FlowMarketoDestinationProperties;
@@ -1416,6 +1494,10 @@ export declare namespace appflow {
      * Configurations of destination connector.
      */
     interface FlowDestinationFlowConfig {
+        /**
+         * The API version that the destination connector uses.
+         */
+        apiVersion?: string;
         /**
          * Name of destination connector profile
          */
@@ -1485,6 +1567,7 @@ export declare namespace appflow {
         aggregationConfig?: outputs.appflow.FlowAggregationConfig;
         fileType?: enums.appflow.FlowFileType;
         prefixConfig?: outputs.appflow.FlowPrefixConfig;
+        preserveSourceDataTyping?: boolean;
     }
     interface FlowS3SourceProperties {
         bucketName: string;
@@ -1523,6 +1606,8 @@ export declare namespace appflow {
      */
     interface FlowScheduledTriggerProperties {
         dataPullMode?: enums.appflow.FlowScheduledTriggerPropertiesDataPullMode;
+        firstExecutionFrom?: number;
+        flowErrorDeactivationThreshold?: number;
         scheduleEndTime?: number;
         scheduleExpression: string;
         scheduleOffset?: number;
@@ -1549,6 +1634,7 @@ export declare namespace appflow {
      */
     interface FlowSourceConnectorProperties {
         amplitude?: outputs.appflow.FlowAmplitudeSourceProperties;
+        customConnector?: outputs.appflow.FlowCustomConnectorSourceProperties;
         datadog?: outputs.appflow.FlowDatadogSourceProperties;
         dynatrace?: outputs.appflow.FlowDynatraceSourceProperties;
         googleAnalytics?: outputs.appflow.FlowGoogleAnalyticsSourceProperties;
@@ -1568,6 +1654,10 @@ export declare namespace appflow {
      * Configurations of Source connector of the flow.
      */
     interface FlowSourceFlowConfig {
+        /**
+         * The API version that the destination connector uses.
+         */
+        apiVersion?: string;
         /**
          * Name of source connector profile
          */
@@ -3036,7 +3126,16 @@ export declare namespace appsync {
         conflictHandler?: string;
         lambdaConflictHandlerConfig?: outputs.appsync.FunctionConfigurationLambdaConflictHandlerConfig;
     }
-    interface GraphQLApiAdditionalAuthenticationProviders {
+    interface GraphQLApiAdditionalAuthenticationProvider {
+        authenticationType: string;
+        lambdaAuthorizerConfig?: outputs.appsync.GraphQLApiLambdaAuthorizerConfig;
+        openIDConnectConfig?: outputs.appsync.GraphQLApiOpenIDConnectConfig;
+        userPoolConfig?: outputs.appsync.GraphQLApiCognitoUserPoolConfig;
+    }
+    interface GraphQLApiCognitoUserPoolConfig {
+        appIdClientRegex?: string;
+        awsRegion?: string;
+        userPoolId?: string;
     }
     interface GraphQLApiLambdaAuthorizerConfig {
         authorizerResultTtlInSeconds?: number;
@@ -3054,7 +3153,9 @@ export declare namespace appsync {
         iatTTL?: number;
         issuer?: string;
     }
-    interface GraphQLApiTags {
+    interface GraphQLApiTag {
+        key: string;
+        value: string;
     }
     interface GraphQLApiUserPoolConfig {
         appIdClientRegex?: string;
@@ -3679,11 +3780,11 @@ export declare namespace backup {
         /**
          * The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
          */
-        key: string;
+        key?: string;
         /**
          * The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
          */
-        value: string;
+        value?: string;
     }
     /**
      * A structure that contains information about where and how to deliver your reports, specifically your Amazon S3 bucket name, S3 key prefix, and the formats of your reports.
@@ -4155,6 +4256,10 @@ export declare namespace cloudformation {
      *  The AWS OrganizationalUnitIds or Accounts for which to create stack instances in the specified Regions.
      */
     interface StackSetDeploymentTargets {
+        /**
+         * The filter type you want to apply on organizational units and accounts.
+         */
+        accountFilterType?: enums.cloudformation.StackSetDeploymentTargetsAccountFilterType;
         /**
          * AWS accounts that you want to create stack instances in the specified Region(s) for.
          */
@@ -4287,7 +4392,7 @@ export declare namespace cloudfront {
         comment?: string;
         customErrorResponses?: outputs.cloudfront.DistributionCustomErrorResponse[];
         customOrigin?: outputs.cloudfront.DistributionLegacyCustomOrigin;
-        defaultCacheBehavior?: outputs.cloudfront.DistributionDefaultCacheBehavior;
+        defaultCacheBehavior: outputs.cloudfront.DistributionDefaultCacheBehavior;
         defaultRootObject?: string;
         enabled: boolean;
         httpVersion?: string;
@@ -4578,6 +4683,65 @@ export declare namespace cloudfront {
     }
 }
 export declare namespace cloudtrail {
+    /**
+     * Advanced event selectors let you create fine-grained selectors for the following AWS CloudTrail event record fields. They help you control costs by logging only those events that are important to you.
+     */
+    interface EventDataStoreAdvancedEventSelector {
+        /**
+         * Contains all selector statements in an advanced event selector.
+         */
+        fieldSelectors: outputs.cloudtrail.EventDataStoreAdvancedFieldSelector[];
+        /**
+         * An optional, descriptive name for an advanced event selector, such as "Log data events for only two S3 buckets".
+         */
+        name?: string;
+    }
+    /**
+     * A single selector statement in an advanced event selector.
+     */
+    interface EventDataStoreAdvancedFieldSelector {
+        /**
+         * An operator that includes events that match the last few characters of the event record field specified as the value of Field.
+         */
+        endsWith?: string[];
+        /**
+         * An operator that includes events that match the exact value of the event record field specified as the value of Field. This is the only valid operator that you can use with the readOnly, eventCategory, and resources.type fields.
+         */
+        equals?: string[];
+        /**
+         * A field in an event record on which to filter events to be logged. Supported fields include readOnly, eventCategory, eventSource (for management events), eventName, resources.type, and resources.ARN.
+         */
+        field: string;
+        /**
+         * An operator that excludes events that match the last few characters of the event record field specified as the value of Field.
+         */
+        notEndsWith?: string[];
+        /**
+         * An operator that excludes events that match the exact value of the event record field specified as the value of Field.
+         */
+        notEquals?: string[];
+        /**
+         * An operator that excludes events that match the first few characters of the event record field specified as the value of Field.
+         */
+        notStartsWith?: string[];
+        /**
+         * An operator that includes events that match the first few characters of the event record field specified as the value of Field.
+         */
+        startsWith?: string[];
+    }
+    /**
+     * An arbitrary set of tags (key-value pairs) for this event data store.
+     */
+    interface EventDataStoreTag {
+        /**
+         * The key name of the tag. You can specify a value that is 1 to 127 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
+         */
+        key: string;
+        /**
+         * The value for the tag. You can specify a value that is 1 to 255 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
+         */
+        value: string;
+    }
     /**
      * CloudTrail supports data event logging for Amazon S3 objects and AWS Lambda functions. You can specify up to 250 resources for an individual event selector, but the total number of data resources cannot exceed 250 across all event selectors in a trail. This limit does not apply if you configure resource logging for all data events.
      */
@@ -6117,6 +6281,11 @@ export declare namespace configuration {
          */
         value: string;
     }
+    interface ConfigRuleCustomPolicyDetails {
+        enableDebugLogDelivery?: boolean;
+        policyRuntime?: string;
+        policyText?: string;
+    }
     interface ConfigRuleScope {
         complianceResourceId?: string;
         complianceResourceTypes?: string[];
@@ -6124,9 +6293,10 @@ export declare namespace configuration {
         tagValue?: string;
     }
     interface ConfigRuleSource {
+        customPolicyDetails?: outputs.configuration.ConfigRuleCustomPolicyDetails;
         owner: string;
         sourceDetails?: outputs.configuration.ConfigRuleSourceDetail[];
-        sourceIdentifier: string;
+        sourceIdentifier?: string;
     }
     interface ConfigRuleSourceDetail {
         eventSource: string;
@@ -6219,6 +6389,13 @@ export declare namespace configuration {
          */
         value: string;
     }
+    /**
+     * The TemplateSSMDocumentDetails object contains the name of the SSM document and the version of the SSM document.
+     */
+    interface TemplateSSMDocumentDetailsProperties {
+        documentName?: string;
+        documentVersion?: string;
+    }
 }
 export declare namespace connect {
     /**
@@ -6298,6 +6475,15 @@ export declare namespace connect {
          */
         minutes: number;
     }
+    interface InstanceAttributes {
+        autoResolveBestVoices?: boolean;
+        contactLens?: boolean;
+        contactflowLogs?: boolean;
+        earlyMedia?: boolean;
+        inboundCalls: boolean;
+        outboundCalls: boolean;
+        useCustomTTSVoices?: boolean;
+    }
     /**
      * A key-value pair to associate with a resource.
      */
@@ -7242,6 +7428,68 @@ export declare namespace datasync {
          */
         value: string;
     }
+    /**
+     * NFS protocol configuration for FSx ONTAP file system.
+     */
+    interface LocationFSxONTAPNFS {
+        mountOptions: outputs.datasync.LocationFSxONTAPNfsMountOptions;
+    }
+    /**
+     * The NFS mount options that DataSync can use to mount your NFS share.
+     */
+    interface LocationFSxONTAPNfsMountOptions {
+        /**
+         * The specific NFS version that you want DataSync to use to mount your NFS share.
+         */
+        version?: enums.datasync.LocationFSxONTAPNfsMountOptionsVersion;
+    }
+    /**
+     * Configuration settings for NFS or SMB protocol.
+     */
+    interface LocationFSxONTAPProtocol {
+        nFS?: outputs.datasync.LocationFSxONTAPNFS;
+        sMB?: outputs.datasync.LocationFSxONTAPSMB;
+    }
+    /**
+     * SMB protocol configuration for FSx ONTAP file system.
+     */
+    interface LocationFSxONTAPSMB {
+        /**
+         * The name of the Windows domain that the SMB server belongs to.
+         */
+        domain?: string;
+        mountOptions: outputs.datasync.LocationFSxONTAPSmbMountOptions;
+        /**
+         * The password of the user who can mount the share and has the permissions to access files and folders in the SMB share.
+         */
+        password: string;
+        /**
+         * The user who can mount the share, has the permissions to access files and folders in the SMB share.
+         */
+        user: string;
+    }
+    /**
+     * The mount options used by DataSync to access the SMB server.
+     */
+    interface LocationFSxONTAPSmbMountOptions {
+        /**
+         * The specific SMB version that you want DataSync to use to mount your SMB share.
+         */
+        version?: enums.datasync.LocationFSxONTAPSmbMountOptionsVersion;
+    }
+    /**
+     * A key-value pair to associate with a resource.
+     */
+    interface LocationFSxONTAPTag {
+        /**
+         * The key for an AWS resource tag.
+         */
+        key: string;
+        /**
+         * The value for an AWS resource tag.
+         */
+        value: string;
+    }
     /**
      * The NFS mount options that DataSync can use to mount your NFS share.
      */
@@ -7707,6 +7955,7 @@ export declare namespace dlm {
     }
     interface LifecyclePolicyParameters {
         excludeBootVolume?: boolean;
+        excludeDataVolumeTags?: outputs.dlm.LifecyclePolicyTag[];
         noReboot?: boolean;
     }
     interface LifecyclePolicyPolicyDetails {
@@ -8123,6 +8372,10 @@ export declare namespace dynamodb {
     interface TableContributorInsightsSpecification {
         enabled: boolean;
     }
+    interface TableCsv {
+        delimiter?: string;
+        headerList?: string[];
+    }
     interface TableGlobalSecondaryIndex {
         contributorInsightsSpecification?: outputs.dynamodb.TableContributorInsightsSpecification;
         indexName: string;
@@ -8130,6 +8383,15 @@ export declare namespace dynamodb {
         projection: outputs.dynamodb.TableProjection;
         provisionedThroughput?: outputs.dynamodb.TableProvisionedThroughput;
     }
+    interface TableImportSourceSpecification {
+        inputCompressionType?: string;
+        inputFormat: string;
+        inputFormatOptions?: outputs.dynamodb.TableInputFormatOptions;
+        s3BucketSource: outputs.dynamodb.TableS3BucketSource;
+    }
+    interface TableInputFormatOptions {
+        csv?: outputs.dynamodb.TableCsv;
+    }
     interface TableKeySchema {
         attributeName: string;
         keyType: string;
@@ -8153,6 +8415,11 @@ export declare namespace dynamodb {
         readCapacityUnits: number;
         writeCapacityUnits: number;
     }
+    interface TableS3BucketSource {
+        s3Bucket: string;
+        s3BucketOwner?: string;
+        s3KeyPrefix?: string;
+    }
     interface TableSSESpecification {
         kMSMasterKeyId?: string;
         sSEEnabled: boolean;
@@ -8490,6 +8757,7 @@ export declare namespace ec2 {
         licenseConfigurationArn: string;
     }
     interface InstanceNetworkInterface {
+        associateCarrierIpAddress?: boolean;
         associatePublicIpAddress?: boolean;
         deleteOnTermination?: boolean;
         description?: string;
@@ -8816,6 +9084,10 @@ export declare namespace ec2 {
     interface NetworkInsightsAccessScopeThroughResourcesStatementRequest {
         resourceStatement?: outputs.ec2.NetworkInsightsAccessScopeResourceStatementRequest;
     }
+    interface NetworkInsightsAnalysisAdditionalDetail {
+        additionalDetailType?: string;
+        component?: outputs.ec2.NetworkInsightsAnalysisAnalysisComponent;
+    }
     interface NetworkInsightsAnalysisAlternatePathHint {
         componentArn?: string;
         componentId?: string;
@@ -8858,6 +9130,7 @@ export declare namespace ec2 {
         natGatewayId?: string;
         networkInterfaceId?: string;
         origin?: string;
+        state?: string;
         transitGatewayId?: string;
         vpcPeeringConnectionId?: string;
     }
@@ -8879,6 +9152,8 @@ export declare namespace ec2 {
         cidrs?: string[];
         classicLoadBalancerListener?: outputs.ec2.NetworkInsightsAnalysisAnalysisLoadBalancerListener;
         component?: outputs.ec2.NetworkInsightsAnalysisAnalysisComponent;
+        componentAccount?: string;
+        componentRegion?: string;
         customerGateway?: outputs.ec2.NetworkInsightsAnalysisAnalysisComponent;
         destination?: outputs.ec2.NetworkInsightsAnalysisAnalysisComponent;
         destinationVpc?: outputs.ec2.NetworkInsightsAnalysisAnalysisComponent;
@@ -8922,8 +9197,11 @@ export declare namespace ec2 {
     }
     interface NetworkInsightsAnalysisPathComponent {
         aclRule?: outputs.ec2.NetworkInsightsAnalysisAnalysisAclRule;
+        additionalDetails?: outputs.ec2.NetworkInsightsAnalysisAdditionalDetail[];
         component?: outputs.ec2.NetworkInsightsAnalysisAnalysisComponent;
         destinationVpc?: outputs.ec2.NetworkInsightsAnalysisAnalysisComponent;
+        elasticLoadBalancerListener?: outputs.ec2.NetworkInsightsAnalysisAnalysisComponent;
+        explanations?: outputs.ec2.NetworkInsightsAnalysisExplanation[];
         inboundHeader?: outputs.ec2.NetworkInsightsAnalysisAnalysisPacketHeader;
         outboundHeader?: outputs.ec2.NetworkInsightsAnalysisAnalysisPacketHeader;
         routeTableRoute?: outputs.ec2.NetworkInsightsAnalysisAnalysisRouteTableRoute;
@@ -9590,7 +9868,7 @@ export declare namespace ecs {
         /**
          * The image used to start a container. This string is passed directly to the Docker daemon.
          */
-        image?: string;
+        image: string;
         interactive?: boolean;
         links?: string[];
         linuxParameters?: outputs.ecs.TaskDefinitionLinuxParameters;
@@ -9604,7 +9882,7 @@ export declare namespace ecs {
         /**
          * The name of a container. Up to 255 letters (uppercase and lowercase), numbers, hyphens, and underscores are allowed
          */
-        name?: string;
+        name: string;
         /**
          * Port mappings allow containers to access ports on the host container instance to send or receive traffic.
          */
@@ -10234,21 +10512,51 @@ export declare namespace elasticache {
 }
 export declare namespace elasticbeanstalk {
     interface ApplicationMaxAgeRule {
+        /**
+         * Set to true to delete a version's source bundle from Amazon S3 when Elastic Beanstalk deletes the application version.
+         */
         deleteSourceFromS3?: boolean;
+        /**
+         * Specify true to apply the rule, or false to disable it.
+         */
         enabled?: boolean;
+        /**
+         * Specify the number of days to retain an application versions.
+         */
         maxAgeInDays?: number;
     }
     interface ApplicationMaxCountRule {
+        /**
+         * Set to true to delete a version's source bundle from Amazon S3 when Elastic Beanstalk deletes the application version.
+         */
         deleteSourceFromS3?: boolean;
+        /**
+         * Specify true to apply the rule, or false to disable it.
+         */
         enabled?: boolean;
+        /**
+         * Specify the maximum number of application versions to retain.
+         */
         maxCount?: number;
     }
     interface ApplicationResourceLifecycleConfig {
+        /**
+         * The ARN of an IAM service role that Elastic Beanstalk has permission to assume. The ServiceRole property is required the first time that you provide a ResourceLifecycleConfig for the application. After you provide it once, Elastic Beanstalk persists the Service Role with the application, and you don't need to specify it again. You can, however, specify it in subsequent updates to change the Service Role to another value.
+         */
         serviceRole?: string;
+        /**
+         * Defines lifecycle settings for application versions.
+         */
         versionLifecycleConfig?: outputs.elasticbeanstalk.ApplicationVersionLifecycleConfig;
     }
     interface ApplicationVersionLifecycleConfig {
+        /**
+         * Specify a max age rule to restrict the length of time that application versions are retained for an application.
+         */
         maxAgeRule?: outputs.elasticbeanstalk.ApplicationMaxAgeRule;
+        /**
+         * Specify a max count rule to restrict the number of application versions that are retained for an application.
+         */
         maxCountRule?: outputs.elasticbeanstalk.ApplicationMaxCountRule;
     }
     interface ApplicationVersionSourceBundle {
@@ -10522,6 +10830,7 @@ export declare namespace elasticloadbalancingv2 {
 }
 export declare namespace elasticsearch {
     interface DomainAdvancedSecurityOptionsInput {
+        anonymousAuthEnabled?: boolean;
         enabled?: boolean;
         internalUserDatabaseEnabled?: boolean;
         masterUserOptions?: outputs.elasticsearch.DomainMasterUserOptions;
@@ -10599,6 +10908,9 @@ export declare namespace emr {
         constraints: outputs.emr.ClusterScalingConstraints;
         rules: outputs.emr.ClusterScalingRule[];
     }
+    interface ClusterAutoTerminationPolicy {
+        idleTimeout?: number;
+    }
     interface ClusterBootstrapActionConfig {
         name: string;
         scriptBootstrapAction: outputs.emr.ClusterScriptBootstrapActionConfig;
@@ -10687,6 +10999,8 @@ export declare namespace emr {
         masterInstanceGroup?: outputs.emr.ClusterInstanceGroupConfig;
         placement?: outputs.emr.ClusterPlacementType;
         serviceAccessSecurityGroup?: string;
+        taskInstanceFleets?: outputs.emr.ClusterInstanceFleetConfig[];
+        taskInstanceGroups?: outputs.emr.ClusterInstanceGroupConfig[];
         terminationProtected?: boolean;
     }
     interface ClusterKerberosAttributes {
@@ -11323,8 +11637,14 @@ export declare namespace evidently {
          */
         valueKey: string;
     }
+    interface LaunchSegmentOverride {
+        evaluationOrder: number;
+        segment: string;
+        weights: outputs.evidently.LaunchGroupToWeight[];
+    }
     interface LaunchStepConfig {
         groupWeights: outputs.evidently.LaunchGroupToWeight[];
+        segmentOverrides?: outputs.evidently.LaunchSegmentOverride[];
         startTime: string;
     }
     /**
@@ -11364,6 +11684,19 @@ export declare namespace evidently {
          */
         value: string;
     }
+    /**
+     * A key-value pair to associate with a resource.
+     */
+    interface SegmentTag {
+        /**
+         * The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
+         */
+        key: string;
+        /**
+         * The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
+         */
+        value: string;
+    }
 }
 export declare namespace finspace {
     /**
@@ -11449,6 +11782,19 @@ export declare namespace fms {
         aCCOUNT?: string[];
         oRGUNIT?: string[];
     }
+    /**
+     * Network firewall policy.
+     */
+    interface PolicyNetworkFirewallPolicy {
+        firewallDeploymentModel: enums.fms.PolicyFirewallDeploymentModel;
+    }
+    /**
+     * Firewall policy option.
+     */
+    interface PolicyOption {
+        networkFirewallPolicy?: outputs.fms.PolicyNetworkFirewallPolicy;
+        thirdPartyFirewallPolicy?: outputs.fms.PolicyThirdPartyFirewallPolicy;
+    }
     /**
      * A resource tag.
      */
@@ -11456,6 +11802,14 @@ export declare namespace fms {
         key: string;
         value?: string;
     }
+    /**
+     * Firewall security service policy data.
+     */
+    interface PolicySecurityServicePolicyData {
+        managedServiceData?: string;
+        policyOption?: outputs.fms.PolicyOption;
+        type: enums.fms.PolicyType;
+    }
     /**
      * A policy tag.
      */
@@ -11463,9 +11817,11 @@ export declare namespace fms {
         key: string;
         value: string;
     }
-    interface SecurityServicePolicyDataProperties {
-        managedServiceData?: string;
-        type: enums.fms.PolicySecurityServicePolicyDataPropertiesType;
+    /**
+     * Third party firewall policy.
+     */
+    interface PolicyThirdPartyFirewallPolicy {
+        firewallDeploymentModel: enums.fms.PolicyFirewallDeploymentModel;
     }
 }
 export declare namespace forecast {
@@ -12930,6 +13286,7 @@ export declare namespace groundstation {
 export declare namespace guardduty {
     interface DetectorCFNDataSourceConfigurations {
         kubernetes?: outputs.guardduty.DetectorCFNKubernetesConfiguration;
+        malwareProtection?: outputs.guardduty.DetectorCFNMalwareProtectionConfiguration;
         s3Logs?: outputs.guardduty.DetectorCFNS3LogsConfiguration;
     }
     interface DetectorCFNKubernetesAuditLogsConfiguration {
@@ -12938,9 +13295,19 @@ export declare namespace guardduty {
     interface DetectorCFNKubernetesConfiguration {
         auditLogs?: outputs.guardduty.DetectorCFNKubernetesAuditLogsConfiguration;
     }
+    interface DetectorCFNMalwareProtectionConfiguration {
+        scanEc2InstanceWithFindings?: outputs.guardduty.DetectorCFNScanEc2InstanceWithFindingsConfiguration;
+    }
     interface DetectorCFNS3LogsConfiguration {
         enable?: boolean;
     }
+    interface DetectorCFNScanEc2InstanceWithFindingsConfiguration {
+        ebsVolumes?: boolean;
+    }
+    interface DetectorTag {
+        key: string;
+        value: string;
+    }
     interface FilterCondition {
         eq?: string[];
         equals?: string[];
@@ -12959,6 +13326,18 @@ export declare namespace guardduty {
         criterion?: any;
         itemType?: outputs.guardduty.FilterCondition;
     }
+    interface FilterTag {
+        key: string;
+        value: string;
+    }
+    interface IPSetTag {
+        key: string;
+        value: string;
+    }
+    interface ThreatIntelSetTag {
+        key: string;
+        value: string;
+    }
 }
 export declare namespace healthlake {
     /**
@@ -13685,6 +14064,24 @@ export declare namespace iot {
         key: string;
         value: string;
     }
+    interface CACertificateRegistrationConfig {
+        roleArn?: string;
+        templateBody?: string;
+        templateName?: string;
+    }
+    /**
+     * A key-value pair to associate with a resource.
+     */
+    interface CACertificateTag {
+        /**
+         * The key name of the tag. You can specify a value that is 1 to 127 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
+         */
+        key: string;
+        /**
+         * The value for the tag. You can specify a value that is 1 to 255 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
+         */
+        value: string;
+    }
     /**
      * A key-value pair to associate with a resource.
      */
@@ -16708,7 +17105,11 @@ export declare namespace kinesisanalyticsv2 {
          */
         sqlApplicationConfiguration?: outputs.kinesisanalyticsv2.ApplicationSqlApplicationConfiguration;
         /**
-         * The configuration parameters for a Kinesis Data Analytics Studio notebook.
+         * The array of descriptions of VPC configurations available to the application.
+         */
+        vpcConfigurations?: outputs.kinesisanalyticsv2.ApplicationVpcConfiguration[];
+        /**
+         * The configuration parameters for a Kinesis Data Analytics Studio notebook.
          */
         zeppelinApplicationConfiguration?: outputs.kinesisanalyticsv2.ApplicationZeppelinApplicationConfiguration;
     }
@@ -16764,6 +17165,15 @@ export declare namespace kinesisanalyticsv2 {
          */
         parallelismConfiguration?: outputs.kinesisanalyticsv2.ApplicationParallelismConfiguration;
     }
+    /**
+     * Describes the starting parameters for a Flink-based Kinesis Data Analytics application.
+     */
+    interface ApplicationFlinkRunConfiguration {
+        /**
+         * When restoring from a snapshot, specifies whether the runtime is allowed to skip a state that cannot be mapped to the new program. Defaults to false. If you update your application without specifying this parameter, AllowNonRestoredState will be set to false, even if it was previously set to true.
+         */
+        allowNonRestoredState?: boolean;
+    }
     /**
      * The configuration of the Glue Data Catalog that you use for Apache Flink SQL queries and table API transforms that you write in an application.
      */
@@ -16873,6 +17283,15 @@ export declare namespace kinesisanalyticsv2 {
          */
         resourceARN: string;
     }
+    /**
+     * Describes the maintenance configuration for the application.
+     */
+    interface ApplicationMaintenanceConfiguration {
+        /**
+         * The start time for the maintenance window.
+         */
+        applicationMaintenanceWindowStartTime: string;
+    }
     /**
      * When you configure a SQL-based Kinesis Data Analytics application's input at the time of creating or updating an application, provides additional mapping information specific to the record format (such as JSON, CSV, or record fields delimited by some delimiter) on the streaming source.
      */
@@ -17038,6 +17457,32 @@ export declare namespace kinesisanalyticsv2 {
         bucketARN: string;
         fileKey: string;
     }
+    /**
+     * Describes the restore behavior of a restarting application.
+     */
+    interface ApplicationRestoreConfiguration {
+        /**
+         * Specifies how the application should be restored.
+         */
+        applicationRestoreType: enums.kinesisanalyticsv2.ApplicationRestoreConfigurationApplicationRestoreType;
+        /**
+         * The identifier of an existing snapshot of application state to use to restart an application. The application uses this value if RESTORE_FROM_CUSTOM_SNAPSHOT is specified for the ApplicationRestoreType.
+         */
+        snapshotName?: string;
+    }
+    /**
+     * Identifies the run configuration (start parameters) of a Kinesis Data Analytics application. This section is evaluated only on stack updates for applications in running RUNNING state and has no effect during manual application start.
+     */
+    interface ApplicationRunConfiguration {
+        /**
+         * Describes the restore behavior of a restarting application.
+         */
+        applicationRestoreConfiguration?: outputs.kinesisanalyticsv2.ApplicationRestoreConfiguration;
+        /**
+         * Describes the starting parameters for a Flink-based Kinesis Data Analytics application.
+         */
+        flinkRunConfiguration?: outputs.kinesisanalyticsv2.ApplicationFlinkRunConfiguration;
+    }
     /**
      * The base location of the Amazon Data Analytics application.
      */
@@ -17099,6 +17544,19 @@ export declare namespace kinesisanalyticsv2 {
          */
         value: string;
     }
+    /**
+     * Describes the parameters of a VPC used by the application.
+     */
+    interface ApplicationVpcConfiguration {
+        /**
+         * The array of SecurityGroup IDs used by the VPC configuration.
+         */
+        securityGroupIds: string[];
+        /**
+         * The array of Subnet IDs used by the VPC configuration.
+         */
+        subnetIds: string[];
+    }
     /**
      * The configuration of a Kinesis Data Analytics Studio notebook.
      */
@@ -17425,6 +17883,28 @@ export declare namespace kms {
     }
 }
 export declare namespace lakeformation {
+    /**
+     * An object representing the Data Cells Filter's Columns. Either Column Names or a Wildcard is required.
+     */
+    interface DataCellsFilterColumnWildcard {
+        /**
+         * A list of column names to be excluded from the Data Cells Filter.
+         */
+        excludedColumnNames?: string[];
+    }
+    /**
+     * An object representing the Data Cells Filter's Row Filter. Either a Filter Expression or a Wildcard is required.
+     */
+    interface DataCellsFilterRowFilter {
+        /**
+         * An empty object representing a row wildcard.
+         */
+        allRowsWildcard?: any;
+        /**
+         * A PartiQL predicate.
+         */
+        filterExpression?: string;
+    }
     interface DataLakeSettingsAdmins {
     }
     interface PermissionsColumnWildcard {
@@ -17462,6 +17942,98 @@ export declare namespace lakeformation {
         databaseName?: string;
         name?: string;
     }
+    interface PrincipalPermissionsCatalogResource {
+    }
+    interface PrincipalPermissionsColumnWildcard {
+        excludedColumnNames?: string[];
+    }
+    interface PrincipalPermissionsDataCellsFilterResource {
+        databaseName: string;
+        name: string;
+        tableCatalogId: string;
+        tableName: string;
+    }
+    interface PrincipalPermissionsDataLakePrincipal {
+        dataLakePrincipalIdentifier?: string;
+    }
+    interface PrincipalPermissionsDataLocationResource {
+        catalogId: string;
+        resourceArn: string;
+    }
+    interface PrincipalPermissionsDatabaseResource {
+        catalogId: string;
+        name: string;
+    }
+    interface PrincipalPermissionsLFTag {
+        tagKey?: string;
+        tagValues?: string[];
+    }
+    interface PrincipalPermissionsLFTagKeyResource {
+        catalogId: string;
+        tagKey: string;
+        tagValues: string[];
+    }
+    interface PrincipalPermissionsLFTagPolicyResource {
+        catalogId: string;
+        expression: outputs.lakeformation.PrincipalPermissionsLFTag[];
+        resourceType: enums.lakeformation.PrincipalPermissionsResourceType;
+    }
+    interface PrincipalPermissionsResource {
+        catalog?: outputs.lakeformation.PrincipalPermissionsCatalogResource;
+        dataCellsFilter?: outputs.lakeformation.PrincipalPermissionsDataCellsFilterResource;
+        dataLocation?: outputs.lakeformation.PrincipalPermissionsDataLocationResource;
+        database?: outputs.lakeformation.PrincipalPermissionsDatabaseResource;
+        lFTag?: outputs.lakeformation.PrincipalPermissionsLFTagKeyResource;
+        lFTagPolicy?: outputs.lakeformation.PrincipalPermissionsLFTagPolicyResource;
+        table?: outputs.lakeformation.PrincipalPermissionsTableResource;
+        tableWithColumns?: outputs.lakeformation.PrincipalPermissionsTableWithColumnsResource;
+    }
+    interface PrincipalPermissionsTableResource {
+        catalogId: string;
+        databaseName: string;
+        name?: string;
+        tableWildcard?: outputs.lakeformation.PrincipalPermissionsTableWildcard;
+    }
+    interface PrincipalPermissionsTableWildcard {
+    }
+    interface PrincipalPermissionsTableWithColumnsResource {
+        catalogId: string;
+        columnNames?: string[];
+        columnWildcard?: outputs.lakeformation.PrincipalPermissionsColumnWildcard;
+        databaseName: string;
+        name: string;
+    }
+    interface TagAssociationCatalogResource {
+    }
+    interface TagAssociationDatabaseResource {
+        catalogId: string;
+        name: string;
+    }
+    interface TagAssociationLFTagPair {
+        catalogId: string;
+        tagKey: string;
+        tagValues: string[];
+    }
+    interface TagAssociationResource {
+        catalog?: outputs.lakeformation.TagAssociationCatalogResource;
+        database?: outputs.lakeformation.TagAssociationDatabaseResource;
+        table?: outputs.lakeformation.TagAssociationTableResource;
+        tableWithColumns?: outputs.lakeformation.TagAssociationTableWithColumnsResource;
+    }
+    interface TagAssociationTableResource {
+        catalogId: string;
+        databaseName: string;
+        name?: string;
+        tableWildcard?: outputs.lakeformation.TagAssociationTableWildcard;
+    }
+    interface TagAssociationTableWildcard {
+    }
+    interface TagAssociationTableWithColumnsResource {
+        catalogId: string;
+        columnNames: string[];
+        databaseName: string;
+        name: string;
+    }
 }
 export declare namespace lambda {
     interface AliasProvisionedConcurrencyConfiguration {
@@ -17502,6 +18074,15 @@ export declare namespace lambda {
     interface EventInvokeConfigOnSuccess {
         destination: string;
     }
+    /**
+     * Specific configuration settings for an MSK event source.
+     */
+    interface EventSourceMappingAmazonManagedKafkaEventSourceConfig {
+        /**
+         * The identifier for the Kafka Consumer Group to join.
+         */
+        consumerGroupId?: string;
+    }
     /**
      * (Streams) An Amazon SQS queue or Amazon SNS topic destination for discarded records.
      */
@@ -17556,6 +18137,15 @@ export declare namespace lambda {
          */
         endpoints?: outputs.lambda.EventSourceMappingEndpoints;
     }
+    /**
+     * Specific configuration settings for a Self-Managed Apache Kafka event source.
+     */
+    interface EventSourceMappingSelfManagedKafkaEventSourceConfig {
+        /**
+         * The identifier for the Kafka Consumer Group to join.
+         */
+        consumerGroupId?: string;
+    }
     /**
      * The configuration used by AWS Lambda to access event source
      */
@@ -18146,6 +18736,7 @@ export declare namespace lex {
         allowInterrupt?: boolean;
         maxRetries: number;
         messageGroupsList: outputs.lex.BotMessageGroup[];
+        messageSelectionStrategy?: enums.lex.BotMessageSelectionStrategy;
     }
     /**
      * A list of message groups that Amazon Lex uses to respond the user input.
@@ -19059,11 +19650,44 @@ export declare namespace logs {
          */
         value: string;
     }
+    /**
+     * the key-value pairs that further define a metric.
+     */
+    interface MetricFilterDimension {
+        /**
+         * The key of the dimension. Maximum length of 255.
+         */
+        key: string;
+        /**
+         * The value of the dimension. Maximum length of 255.
+         */
+        value: string;
+    }
     interface MetricFilterMetricTransformation {
+        /**
+         * The value to emit when a filter pattern does not match a log event. This value can be null.
+         */
         defaultValue?: number;
+        /**
+         * Dimensions are the key-value pairs that further define a metric
+         */
+        dimensions?: outputs.logs.MetricFilterDimension[];
+        /**
+         * The name of the CloudWatch metric. Metric name must be in ASCII format.
+         */
         metricName: string;
+        /**
+         * The namespace of the CloudWatch metric.
+         */
         metricNamespace: string;
+        /**
+         * The value to publish to the CloudWatch metric when a filter pattern matches a log event.
+         */
         metricValue: string;
+        /**
+         * The unit to assign to the metric. If you omit this, the unit is set as None.
+         */
+        unit?: enums.logs.MetricFilterMetricTransformationUnit;
     }
 }
 export declare namespace lookoutequipment {
@@ -20666,6 +21290,10 @@ export declare namespace mediapackage {
         adTriggers?: enums.mediapackage.OriginEndpointDashPackageAdTriggersItem[];
         adsOnDeliveryRestrictions?: enums.mediapackage.OriginEndpointAdsOnDeliveryRestrictions;
         encryption?: outputs.mediapackage.OriginEndpointDashEncryption;
+        /**
+         * When enabled, an I-Frame only stream will be included in the output.
+         */
+        includeIframeOnlyStream?: boolean;
         /**
          * Determines the position of some tags in the Media Presentation Description (MPD).  When set to FULL, elements like SegmentTemplate and ContentProtection are included in each Representation.  When set to COMPACT, duplicate elements are combined and presented at the AdaptationSet level.
          */
@@ -20708,7 +21336,7 @@ export declare namespace mediapackage {
          */
         utcTiming?: enums.mediapackage.OriginEndpointDashPackageUtcTiming;
         /**
-         * Specifies the value attribute of the UTCTiming field when utcTiming is set to HTTP-ISO or HTTP-HEAD
+         * Specifies the value attribute of the UTCTiming field when utcTiming is set to HTTP-ISO, HTTP-HEAD or HTTP-XSDATE
          */
         utcTimingUri?: string;
     }
@@ -21411,6 +22039,19 @@ export declare namespace msk {
     interface ClusterUnauthenticated {
         enabled: boolean;
     }
+    interface ServerlessClusterClientAuthentication {
+        sasl: outputs.msk.ServerlessClusterSasl;
+    }
+    interface ServerlessClusterIam {
+        enabled: boolean;
+    }
+    interface ServerlessClusterSasl {
+        iam: outputs.msk.ServerlessClusterIam;
+    }
+    interface ServerlessClusterVpcConfig {
+        securityGroups?: string[];
+        subnetIds: string[];
+    }
 }
 export declare namespace mwaa {
     /**
@@ -21893,13 +22534,14 @@ export declare namespace nimblestudio {
          * <p>Integer that determines if you can start and stop your sessions and how long a session
          *             can stay in the STOPPED state. The default value is 0. The maximum value is 5760.</p>
          *         <p>If the value is missing or set to 0, your sessions can’t be stopped. If you then call
-         *             StopStreamingSession, the session fails. If the time that a session stays in the READY
-         *             state exceeds the maxSessionLengthInMinutes value, the session will automatically be
-         *             terminated by AWS (instead of stopped).</p>
+         *                 <code>StopStreamingSession</code>, the session fails. If the time that a session
+         *             stays in the READY state exceeds the <code>maxSessionLengthInMinutes</code> value, the
+         *             session will automatically be terminated (instead of stopped).</p>
          *         <p>If the value is set to a positive number, the session can be stopped. You can call
-         *             StopStreamingSession to stop sessions in the READY state. If the time that a session
-         *             stays in the READY state exceeds the maxSessionLengthInMinutes value, the session will
-         *             automatically be stopped by AWS (instead of terminated).</p>
+         *                 <code>StopStreamingSession</code> to stop sessions in the READY state. If the time
+         *             that a session stays in the READY state exceeds the
+         *                 <code>maxSessionLengthInMinutes</code> value, the session will automatically be
+         *             stopped (instead of terminated).</p>
          */
         maxStoppedSessionLengthInMinutes?: number;
         sessionStorage?: outputs.nimblestudio.LaunchProfileStreamConfigurationSessionStorage;
@@ -21917,7 +22559,7 @@ export declare namespace nimblestudio {
          * <p>Allows artists to upload files to their workstations. The only valid option is
          *                 <code>UPLOAD</code>.</p>
          */
-        mode?: enums.nimblestudio.LaunchProfileStreamingSessionStorageMode[];
+        mode: enums.nimblestudio.LaunchProfileStreamingSessionStorageMode[];
         root?: outputs.nimblestudio.LaunchProfileStreamingSessionStorageRoot;
     }
     /**
@@ -21948,64 +22590,18 @@ export declare namespace nimblestudio {
     }
     interface StreamingImageTags {
     }
-    /**
-     * <p>An LDAP attribute of an Active Directory computer account, in the form of a name:value pair.</p>
-     */
-    interface StudioComponentActiveDirectoryComputerAttribute {
-        /**
-         * <p>The name for the LDAP attribute.</p>
-         */
-        name?: string;
-        /**
-         * <p>The value for the LDAP attribute.</p>
-         */
-        value?: string;
-    }
-    /**
-     * <p>The configuration for a Microsoft Active Directory (Microsoft AD) studio resource.</p>
-     */
-    interface StudioComponentActiveDirectoryConfiguration {
-        /**
-         * <p>A collection of custom attributes for an Active Directory computer.</p>
-         */
-        computerAttributes?: outputs.nimblestudio.StudioComponentActiveDirectoryComputerAttribute[];
-        /**
-         * <p>The directory ID of the Directory Service for Microsoft Active Directory to access using this studio component.</p>
-         */
-        directoryId?: string;
-        /**
-         * <p>The distinguished name (DN) and organizational unit (OU) of an Active Directory computer.</p>
-         */
-        organizationalUnitDistinguishedName?: string;
-    }
-    /**
-     * <p>The configuration for a render farm that is associated with a studio resource.</p>
-     */
-    interface StudioComponentComputeFarmConfiguration {
-        /**
-         * <p>The name of an Active Directory user that is used on ComputeFarm worker instances.</p>
-         */
-        activeDirectoryUser?: string;
-        /**
-         * <p>The endpoint of the ComputeFarm that is accessed by the studio component resource.</p>
-         */
-        endpoint?: string;
-    }
     /**
      * <p>The configuration of the studio component, based on component type.</p>
      */
     interface StudioComponentConfiguration {
-        activeDirectoryConfiguration?: outputs.nimblestudio.StudioComponentActiveDirectoryConfiguration;
-        computeFarmConfiguration?: outputs.nimblestudio.StudioComponentComputeFarmConfiguration;
-        licenseServiceConfiguration?: outputs.nimblestudio.StudioComponentLicenseServiceConfiguration;
-        sharedFileSystemConfiguration?: outputs.nimblestudio.StudioComponentSharedFileSystemConfiguration;
     }
     /**
      * <p>Initialization scripts for studio components.</p>
      */
     interface StudioComponentInitializationScript {
         /**
-         * <p>The version number of the protocol that is used by the launch profile. The only valid version is "2021-03-31".</p>
+         * <p>The version number of the protocol that is used by the launch profile. The only valid
+         *             version is "2021-03-31".</p>
          */
         launchProfileProtocolVersion?: string;
         platform?: enums.nimblestudio.StudioComponentLaunchProfilePlatform;
@@ -22015,15 +22611,6 @@ export declare namespace nimblestudio {
          */
         script?: string;
     }
-    /**
-     * <p>The configuration for a license service that is associated with a studio resource.</p>
-     */
-    interface StudioComponentLicenseServiceConfiguration {
-        /**
-         * <p>The endpoint of the license service that is accessed by the studio component resource.</p>
-         */
-        endpoint?: string;
-    }
     /**
      * <p>A parameter for a studio component script, in the form of a key:value pair.</p>
      */
@@ -22037,31 +22624,6 @@ export declare namespace nimblestudio {
          */
         value?: string;
     }
-    /**
-     * <p>The configuration for a shared file storage system that is associated with a studio resource.</p>
-     */
-    interface StudioComponentSharedFileSystemConfiguration {
-        /**
-         * <p>The endpoint of the shared file system that is accessed by the studio component resource.</p>
-         */
-        endpoint?: string;
-        /**
-         * <p>The unique identifier for a file system.</p>
-         */
-        fileSystemId?: string;
-        /**
-         * <p>The mount location for a shared file system on a Linux virtual workstation.</p>
-         */
-        linuxMountPoint?: string;
-        /**
-         * <p>The name of the file share.</p>
-         */
-        shareName?: string;
-        /**
-         * <p>The mount location for a shared file system on a Windows virtual workstation.</p>
-         */
-        windowsMountDrive?: string;
-    }
     interface StudioComponentTags {
     }
     /**
@@ -22104,6 +22666,7 @@ export declare namespace opensearchservice {
     interface DomainEBSOptions {
         eBSEnabled?: boolean;
         iops?: number;
+        throughput?: number;
         volumeSize?: number;
         volumeType?: string;
     }
@@ -23376,6 +23939,13 @@ export declare namespace quicksight {
          */
         value: string;
     }
+    /**
+     * <p>The dataset usage configuration for the dataset.</p>
+     */
+    interface DataSetUsageConfiguration {
+        disableUseAsDirectQuerySource?: boolean;
+        disableUseAsImportedSource?: boolean;
+    }
     /**
      * <p>Amazon Elasticsearch Service parameters.</p>
      */
@@ -24239,6 +24809,16 @@ export declare namespace ram {
     }
 }
 export declare namespace rds {
+    interface DBClusterEndpoint {
+        /**
+         * The connection endpoint for the DB cluster.
+         */
+        address?: string;
+        /**
+         * The port number that will accept connections on this DB cluster.
+         */
+        port?: string;
+    }
     /**
      * A key-value pair to associate with a resource.
      */
@@ -24250,38 +24830,105 @@ export declare namespace rds {
         /**
          * The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
          */
-        value: string;
+        value?: string;
+    }
+    interface DBClusterReadEndpoint {
+        /**
+         * The reader endpoint for the DB cluster.
+         */
+        address?: string;
     }
+    /**
+     * Describes an AWS Identity and Access Management (IAM) role that is associated with a DB cluster.
+     */
     interface DBClusterRole {
+        /**
+         * The name of the feature associated with the AWS Identity and Access Management (IAM) role. For the list of supported feature names, see DBEngineVersion in the Amazon RDS API Reference.
+         */
         featureName?: string;
+        /**
+         * The Amazon Resource Name (ARN) of the IAM role that is associated with the DB cluster.
+         */
         roleArn: string;
     }
+    /**
+     * The ScalingConfiguration property type specifies the scaling configuration of an Aurora Serverless DB cluster.
+     */
     interface DBClusterScalingConfiguration {
+        /**
+         * A value that indicates whether to allow or disallow automatic pause for an Aurora DB cluster in serverless DB engine mode. A DB cluster can be paused only when it's idle (it has no connections).
+         */
         autoPause?: boolean;
+        /**
+         * The maximum capacity for an Aurora DB cluster in serverless DB engine mode.
+         * For Aurora MySQL, valid capacity values are 1, 2, 4, 8, 16, 32, 64, 128, and 256.
+         * For Aurora PostgreSQL, valid capacity values are 2, 4, 8, 16, 32, 64, 192, and 384.
+         * The maximum capacity must be greater than or equal to the minimum capacity.
+         */
         maxCapacity?: number;
+        /**
+         * The minimum capacity for an Aurora DB cluster in serverless DB engine mode.
+         * For Aurora MySQL, valid capacity values are 1, 2, 4, 8, 16, 32, 64, 128, and 256.
+         * For Aurora PostgreSQL, valid capacity values are 2, 4, 8, 16, 32, 64, 192, and 384.
+         * The minimum capacity must be less than or equal to the maximum capacity.
+         */
         minCapacity?: number;
+        /**
+         * The time, in seconds, before an Aurora DB cluster in serverless mode is paused.
+         */
         secondsUntilAutoPause?: number;
     }
+    /**
+     * A key-value pair to associate with a resource.
+     */
     interface DBClusterTag {
+        /**
+         * The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
+         */
         key: string;
-        value: string;
+        /**
+         * The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
+         */
+        value?: string;
+    }
+    interface DBInstanceEndpoint {
+        /**
+         * Specifies the DNS address of the DB instance.
+         */
+        address?: string;
+        /**
+         * Specifies the ID that Amazon Route 53 assigns when you create a hosted zone.
+         */
+        hostedZoneId?: string;
+        /**
+         * Specifies the port that the database engine is listening on.
+         */
+        port?: string;
     }
     interface DBInstanceProcessorFeature {
-        name?: string;
+        /**
+         * The name of the processor feature. Valid names are coreCount and threadsPerCore.
+         */
+        name?: enums.rds.DBInstanceProcessorFeatureName;
+        /**
+         * The value of a processor feature name.
+         */
         value?: string;
     }
     interface DBInstanceRole {
+        /**
+         * The name of the feature associated with the AWS Identity and Access Management (IAM) role. IAM roles that are associated with a DB instance grant permission for the DB instance to access other AWS services on your behalf.
+         */
         featureName: string;
+        /**
+         * The Amazon Resource Name (ARN) of the IAM role that is associated with the DB instance.
+         */
         roleArn: string;
     }
-    interface DBInstanceTag {
-        key: string;
-        value: string;
-    }
     /**
      * A key-value pair to associate with a resource.
      */
-    interface DBParameterGroupTag {
+    interface DBInstanceTag {
         /**
          * The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
          */
@@ -24289,6 +24936,10 @@ export declare namespace rds {
         /**
          * The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
          */
+        value?: string;
+    }
+    interface DBParameterGroupTag {
+        key: string;
         value: string;
     }
     interface DBProxyAuthFormat {
@@ -24364,7 +25015,7 @@ export declare namespace rds {
         /**
          * The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
          */
-        value: string;
+        value?: string;
     }
     /**
      * A key-value pair to associate with a resource.
@@ -24377,23 +25028,62 @@ export declare namespace rds {
         /**
          * The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
          */
-        value: string;
+        value?: string;
     }
+    /**
+     * The OptionConfiguration property type specifies an individual option, and its settings, within an AWS::RDS::OptionGroup resource.
+     */
     interface OptionGroupOptionConfiguration {
+        /**
+         * A list of DBSecurityGroupMembership name strings used for this option.
+         */
         dBSecurityGroupMemberships?: string[];
+        /**
+         * The configuration of options to include in a group.
+         */
         optionName: string;
+        /**
+         * The option settings to include in an option group.
+         */
         optionSettings?: outputs.rds.OptionGroupOptionSetting[];
+        /**
+         * The version for the option.
+         */
         optionVersion?: string;
+        /**
+         * The optional port for the option.
+         */
         port?: number;
+        /**
+         * A list of VpcSecurityGroupMembership name strings used for this option.
+         */
         vpcSecurityGroupMemberships?: string[];
     }
+    /**
+     * The OptionSetting property type specifies the value for an option within an OptionSetting property.
+     */
     interface OptionGroupOptionSetting {
+        /**
+         * The name of the option that has settings that you can set.
+         */
         name?: string;
+        /**
+         * The current value of the option setting.
+         */
         value?: string;
     }
+    /**
+     * A key-value pair to associate with a resource.
+     */
     interface OptionGroupTag {
+        /**
+         * The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
+         */
         key: string;
-        value: string;
+        /**
+         * The value for the tag. You can specify a value that is 0 to 256 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
+         */
+        value?: string;
     }
 }
 export declare namespace redshift {
@@ -24481,32 +25171,7 @@ export declare namespace redshift {
          */
         value: string;
     }
-    /**
-     * Describes a pause cluster operation. For example, a scheduled action to run the `PauseCluster` API operation.
-     */
-    interface ScheduledActionPauseClusterMessage {
-        clusterIdentifier: string;
-    }
-    /**
-     * Describes a resize cluster operation. For example, a scheduled action to run the `ResizeCluster` API operation.
-     */
-    interface ScheduledActionResizeClusterMessage {
-        classic?: boolean;
-        clusterIdentifier: string;
-        clusterType?: string;
-        nodeType?: string;
-        numberOfNodes?: number;
-    }
-    /**
-     * Describes a resume cluster operation. For example, a scheduled action to run the `ResumeCluster` API operation.
-     */
-    interface ScheduledActionResumeClusterMessage {
-        clusterIdentifier: string;
-    }
     interface ScheduledActionType {
-        pauseCluster?: outputs.redshift.ScheduledActionPauseClusterMessage;
-        resizeCluster?: outputs.redshift.ScheduledActionResizeClusterMessage;
-        resumeCluster?: outputs.redshift.ScheduledActionResumeClusterMessage;
     }
     /**
      * The connection endpoint for connecting to an Amazon Redshift cluster through the proxy.
@@ -24544,6 +25209,45 @@ export declare namespace redshiftserverless {
         key: string;
         value: string;
     }
+    interface Workgroup {
+        baseCapacity?: number;
+        configParameters?: outputs.redshiftserverless.WorkgroupConfigParameter[];
+        creationDate?: string;
+        endpoint?: outputs.redshiftserverless.WorkgroupEndpoint;
+        enhancedVpcRouting?: boolean;
+        namespaceName?: string;
+        publiclyAccessible?: boolean;
+        securityGroupIds?: string[];
+        status?: enums.redshiftserverless.WorkgroupStatus;
+        subnetIds?: string[];
+        workgroupArn?: string;
+        workgroupId?: string;
+        workgroupName?: string;
+    }
+    interface WorkgroupConfigParameter {
+        parameterKey?: string;
+        parameterValue?: string;
+    }
+    interface WorkgroupEndpoint {
+        address?: string;
+        port?: number;
+        vpcEndpoints?: outputs.redshiftserverless.WorkgroupVpcEndpoint[];
+    }
+    interface WorkgroupNetworkInterface {
+        availabilityZone?: string;
+        networkInterfaceId?: string;
+        privateIpAddress?: string;
+        subnetId?: string;
+    }
+    interface WorkgroupTag {
+        key: string;
+        value: string;
+    }
+    interface WorkgroupVpcEndpoint {
+        networkInterfaces?: outputs.redshiftserverless.WorkgroupNetworkInterface[];
+        vpcEndpointId?: string;
+        vpcId?: string;
+    }
 }
 export declare namespace refactorspaces {
     interface ApplicationApiGatewayProxyInput {
@@ -24576,6 +25280,9 @@ export declare namespace refactorspaces {
          */
         value: string;
     }
+    interface RouteDefaultRouteInput {
+        activationState: enums.refactorspaces.RouteActivationState;
+    }
     /**
      * A label for tagging Environment resource
      */
@@ -24894,6 +25601,26 @@ export declare namespace robomaker {
     interface SimulationApplicationTags {
     }
 }
+export declare namespace rolesanywhere {
+    interface CRLTag {
+        key: string;
+        value: string;
+    }
+    interface ProfileTag {
+        key: string;
+        value: string;
+    }
+    interface TrustAnchorSource {
+        sourceData?: outputs.rolesanywhere.TrustAnchorSourceData;
+        sourceType?: enums.rolesanywhere.TrustAnchorType;
+    }
+    interface TrustAnchorSourceData {
+    }
+    interface TrustAnchorTag {
+        key: string;
+        value: string;
+    }
+}
 export declare namespace route53 {
     interface CidrCollectionLocation {
         /**
@@ -25004,6 +25731,10 @@ export declare namespace route53 {
         evaluateTargetHealth?: boolean;
         hostedZoneId: string;
     }
+    interface RecordSetCidrRoutingConfig {
+        collectionId: string;
+        locationName: string;
+    }
     interface RecordSetGeoLocation {
         continentCode?: string;
         countryCode?: string;
@@ -25014,6 +25745,10 @@ export declare namespace route53 {
         evaluateTargetHealth?: boolean;
         hostedZoneId: string;
     }
+    interface RecordSetGroupCidrRoutingConfig {
+        collectionId: string;
+        locationName: string;
+    }
     interface RecordSetGroupGeoLocation {
         continentCode?: string;
         countryCode?: string;
@@ -25021,6 +25756,7 @@ export declare namespace route53 {
     }
     interface RecordSetGroupRecordSet {
         aliasTarget?: outputs.route53.RecordSetGroupAliasTarget;
+        cidrRoutingConfig?: outputs.route53.RecordSetGroupCidrRoutingConfig;
         failover?: string;
         geoLocation?: outputs.route53.RecordSetGroupGeoLocation;
         healthCheckId?: string;
@@ -28208,6 +28944,9 @@ export declare namespace sagemaker {
          */
         subnets: string[];
     }
+    interface NotebookInstanceInstanceMetadataServiceConfiguration {
+        minimumInstanceMetadataServiceVersion: string;
+    }
     interface NotebookInstanceLifecycleConfigNotebookInstanceLifecycleHook {
         content?: string;
     }
@@ -28422,11 +29161,15 @@ export declare namespace sagemaker {
         cognitoUserPool: string;
     }
     interface WorkteamMemberDefinition {
-        cognitoMemberDefinition: outputs.sagemaker.WorkteamCognitoMemberDefinition;
+        cognitoMemberDefinition?: outputs.sagemaker.WorkteamCognitoMemberDefinition;
+        oidcMemberDefinition?: outputs.sagemaker.WorkteamOidcMemberDefinition;
     }
     interface WorkteamNotificationConfiguration {
         notificationTopicArn: string;
     }
+    interface WorkteamOidcMemberDefinition {
+        oidcGroups: string[];
+    }
     interface WorkteamTag {
         key: string;
         value: string;
@@ -28704,6 +29447,63 @@ export declare namespace ses {
          */
         topicName: string;
     }
+    /**
+     * Used to associate a configuration set with an email identity.
+     */
+    interface EmailIdentityConfigurationSetAttributes {
+        /**
+         * The configuration set to use by default when sending from this identity. Note that any configuration set defined in the email sending request takes precedence.
+         */
+        configurationSetName?: string;
+    }
+    /**
+     * Used to enable or disable DKIM authentication for an email identity.
+     */
+    interface EmailIdentityDkimAttributes {
+        /**
+         * Sets the DKIM signing configuration for the identity. When you set this value true, then the messages that are sent from the identity are signed using DKIM. If you set this value to false, your messages are sent without DKIM signing.
+         */
+        signingEnabled?: boolean;
+    }
+    /**
+     * If your request includes this object, Amazon SES configures the identity to use Bring Your Own DKIM (BYODKIM) for DKIM authentication purposes, or, configures the key length to be used for Easy DKIM.
+     */
+    interface EmailIdentityDkimSigningAttributes {
+        /**
+         * [Bring Your Own DKIM] A private key that's used to generate a DKIM signature. The private key must use 1024 or 2048-bit RSA encryption, and must be encoded using base64 encoding.
+         */
+        domainSigningPrivateKey?: string;
+        /**
+         * [Bring Your Own DKIM] A string that's used to identify a public key in the DNS configuration for a domain.
+         */
+        domainSigningSelector?: string;
+        /**
+         * [Easy DKIM] The key length of the future DKIM key pair to be generated. This can be changed at most once per day.
+         */
+        nextSigningKeyLength?: string;
+    }
+    /**
+     * Used to enable or disable feedback forwarding for an identity.
+     */
+    interface EmailIdentityFeedbackAttributes {
+        /**
+         * If the value is true, you receive email notifications when bounce or complaint events occur
+         */
+        emailForwardingEnabled?: boolean;
+    }
+    /**
+     * Used to enable or disable the custom Mail-From domain configuration for an email identity.
+     */
+    interface EmailIdentityMailFromAttributes {
+        /**
+         * The action to take if the required MX record isn't found when you send an email. When you set this value to UseDefaultValue , the mail is sent using amazonses.com as the MAIL FROM domain. When you set this value to RejectMessage , the Amazon SES API v2 returns a MailFromDomainNotVerified error, and doesn't attempt to deliver the email.
+         */
+        behaviorOnMxFailure?: string;
+        /**
+         * The custom MAIL FROM domain that you want the verified identity to use
+         */
+        mailFromDomain?: string;
+    }
     interface ReceiptFilterFilter {
         ipFilter: outputs.ses.ReceiptFilterIpFilter;
         name?: string;
@@ -28801,7 +29601,13 @@ export declare namespace sns {
         protocol: string;
     }
     interface TopicTag {
+        /**
+         * The key name of the tag. You can specify a value that is 1 to 128 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, `_`, `.`, `/`, `=`, `+`, and `-`.
+         */
         key: string;
+        /**
+         * The value for the tag. You can specify a value that is 0 to 256 characters in length.
+         */
         value: string;
     }
 }
@@ -29067,6 +29873,10 @@ export declare namespace ssmincidents {
          * The impact value.
          */
         impact: number;
+        /**
+         * Tags that get applied to incidents created by the StartIncident API action.
+         */
+        incidentTags?: outputs.ssmincidents.ResponsePlanTag[];
         /**
          * The list of notification targets.
          */
@@ -29144,6 +29954,14 @@ export declare namespace sso {
     interface InstanceAccessControlAttributeConfigurationProperties {
         accessControlAttributes: outputs.sso.InstanceAccessControlAttributeConfigurationAccessControlAttribute[];
     }
+    interface PermissionSetCustomerManagedPolicyReference {
+        name: string;
+        path?: string;
+    }
+    interface PermissionSetPermissionsBoundary {
+        customerManagedPolicyReference?: outputs.sso.PermissionSetCustomerManagedPolicyReference;
+        managedPolicyArn?: string;
+    }
     /**
      * The metadata that you apply to the permission set to help you categorize and organize them.
      */
@@ -29269,6 +30087,19 @@ export declare namespace synthetics {
          */
         baseScreenshots?: outputs.synthetics.CanaryBaseScreenshot[];
     }
+    /**
+     * A key-value pair to associate with a resource.
+     */
+    interface GroupTag {
+        /**
+         * The key name of the tag. You can specify a value that is 1 to 127 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
+         */
+        key: string;
+        /**
+         * The value for the tag. You can specify a value that is 1 to 255 Unicode characters in length and cannot be prefixed with aws:. You can use any of the following characters: the set of Unicode letters, digits, whitespace, _, ., /, =, +, and -.
+         */
+        value: string;
+    }
 }
 export declare namespace timestream {
     /**
@@ -29432,6 +30263,8 @@ export declare namespace timestream {
     }
 }
 export declare namespace transfer {
+    interface ServerAs2Transport {
+    }
     interface ServerEndpointDetails {
         addressAllocationIds?: string[];
         securityGroupIds?: string[];
@@ -29448,6 +30281,7 @@ export declare namespace transfer {
     interface ServerProtocol {
     }
     interface ServerProtocolDetails {
+        as2Transports?: outputs.transfer.ServerAs2Transport[];
         passiveIp?: string;
         setStatOption?: string;
         tlsSessionResumptionMode?: string;
@@ -30152,6 +30986,7 @@ export declare namespace wafv2 {
      */
     interface RuleGroupSqliMatchStatement {
         fieldToMatch: outputs.wafv2.RuleGroupFieldToMatch;
+        sensitivityLevel?: enums.wafv2.RuleGroupSensitivityLevel;
         textTransformations: outputs.wafv2.RuleGroupTextTransformation[];
     }
     /**
@@ -30516,6 +31351,7 @@ export declare namespace wafv2 {
      */
     interface WebACLSqliMatchStatement {
         fieldToMatch: outputs.wafv2.WebACLFieldToMatch;
+        sensitivityLevel?: enums.wafv2.WebACLSensitivityLevel;
         textTransformations: outputs.wafv2.WebACLTextTransformation[];
     }
     /**