@pulumi/aws-native 1.2.0 → 1.3.0-alpha.1729176871

package/types/output.d.ts

@@ -3367,12 +3367,18 @@ export declare namespace appflow {
      * SAP Source connector page size
      */
     interface FlowSapoDataPaginationConfig {
+        /**
+         * The maximum number of records that Amazon AppFlow receives in each page of the response from your SAP application. For transfers of OData records, the maximum page size is 3,000. For transfers of data that comes from an ODP provider, the maximum page size is 10,000.
+         */
         maxPageSize: number;
     }
     /**
      * SAP Source connector parallelism factor
      */
     interface FlowSapoDataParallelismConfig {
+        /**
+         * The maximum number of processes that Amazon AppFlow runs at the same time when it retrieves your data from your SAP application.
+         */
         maxParallelism: number;
     }
     interface FlowSapoDataSourceProperties {
@@ -3380,7 +3386,13 @@ export declare namespace appflow {
          * The object path specified in the SAPOData flow source.
          */
         objectPath: string;
+        /**
+         * Sets the page size for each concurrent process that transfers OData records from your SAP instance.
+         */
         paginationConfig?: outputs.appflow.FlowSapoDataPaginationConfig;
+        /**
+         * Sets the number of concurrent processes that transfers OData records from your SAP instance.
+         */
         parallelismConfig?: outputs.appflow.FlowSapoDataParallelismConfig;
     }
     /**
@@ -5095,6 +5107,136 @@ export declare namespace appstream {
     }
 }
 export declare namespace appsync {
+    interface DataSourceAuthorizationConfig {
+        /**
+         * The authorization type that the HTTP endpoint requires.
+         */
+        authorizationType: string;
+        /**
+         * The AWS Identity and Access Management settings.
+         */
+        awsIamConfig?: outputs.appsync.DataSourceAwsIamConfig;
+    }
+    interface DataSourceAwsIamConfig {
+        /**
+         * The signing Region for AWS Identity and Access Management authorization.
+         */
+        signingRegion?: string;
+        /**
+         * The signing service name for AWS Identity and Access Management authorization.
+         */
+        signingServiceName?: string;
+    }
+    interface DataSourceDeltaSyncConfig {
+        /**
+         * The number of minutes that an Item is stored in the data source.
+         */
+        baseTableTtl: string;
+        /**
+         * The Delta Sync table name.
+         */
+        deltaSyncTableName: string;
+        /**
+         * The number of minutes that a Delta Sync log entry is stored in the Delta Sync table.
+         */
+        deltaSyncTableTtl: string;
+    }
+    interface DataSourceDynamoDbConfig {
+        /**
+         * The AWS Region.
+         */
+        awsRegion: string;
+        /**
+         * The DeltaSyncConfig for a versioned datasource.
+         */
+        deltaSyncConfig?: outputs.appsync.DataSourceDeltaSyncConfig;
+        /**
+         * The table name.
+         */
+        tableName: string;
+        /**
+         * Set to TRUE to use AWS Identity and Access Management with this data source.
+         */
+        useCallerCredentials?: boolean;
+        /**
+         * Set to TRUE to use Conflict Detection and Resolution with this data source.
+         */
+        versioned?: boolean;
+    }
+    interface DataSourceElasticsearchConfig {
+        /**
+         * The AWS Region.
+         */
+        awsRegion: string;
+        /**
+         * The endpoint.
+         */
+        endpoint: string;
+    }
+    interface DataSourceEventBridgeConfig {
+        /**
+         * ARN for the EventBridge bus.
+         */
+        eventBusArn: string;
+    }
+    interface DataSourceHttpConfig {
+        /**
+         * The authorization configuration.
+         */
+        authorizationConfig?: outputs.appsync.DataSourceAuthorizationConfig;
+        /**
+         * The endpoint.
+         */
+        endpoint: string;
+    }
+    interface DataSourceLambdaConfig {
+        /**
+         * The ARN for the Lambda function.
+         */
+        lambdaFunctionArn: string;
+    }
+    interface DataSourceOpenSearchServiceConfig {
+        /**
+         * The AWS Region.
+         */
+        awsRegion: string;
+        /**
+         * The endpoint.
+         */
+        endpoint: string;
+    }
+    interface DataSourceRdsHttpEndpointConfig {
+        /**
+         * AWS Region for RDS HTTP endpoint.
+         */
+        awsRegion: string;
+        /**
+         * The ARN for database credentials stored in AWS Secrets Manager.
+         */
+        awsSecretStoreArn: string;
+        /**
+         * Logical database name.
+         */
+        databaseName?: string;
+        /**
+         * Amazon RDS cluster Amazon Resource Name (ARN).
+         */
+        dbClusterIdentifier: string;
+        /**
+         * Logical schema name.
+         */
+        schema?: string;
+    }
+    interface DataSourceRelationalDatabaseConfig {
+        /**
+         * Information about the Amazon RDS resource.
+         */
+        rdsHttpEndpointConfig?: outputs.appsync.DataSourceRdsHttpEndpointConfig;
+        /**
+         * The type of relational data source.
+         */
+        relationalDatabaseSourceType: string;
+    }
     /**
      * Describes a runtime used by an AWS AppSync pipeline resolver or AWS AppSync function. Specifies the name and version of the runtime to use. Note that if a runtime is specified, code must also be specified.
      */
@@ -13537,6 +13679,10 @@ export declare namespace codepipeline {
          * Specifies the action type and the provider of the action.
          */
         actionTypeId: outputs.codepipeline.PipelineActionTypeId;
+        /**
+         * The shell commands to run with your compute action in CodePipeline.
+         */
+        commands?: string[];
         /**
          * The action's configuration. These are key-value pairs that specify input values for an action.
          */
@@ -13559,6 +13705,10 @@ export declare namespace codepipeline {
          * The name or ID of the result of the action declaration, such as a test or build artifact. While the field is not a required parameter, most actions have an action configuration that requires a specified quantity of output artifacts. To refer to the action configuration specification by action provider, see the [Action structure reference](https://docs.aws.amazon.com/codepipeline/latest/userguide/action-reference.html) in the *AWS CodePipeline User Guide* .
          */
         outputArtifacts?: outputs.codepipeline.PipelineOutputArtifact[];
+        /**
+         * The list of variables that are to be exported from the compute action.
+         */
+        outputVariables?: string[];
         /**
          * The action declaration's AWS Region, such as us-east-1.
          */
@@ -13793,6 +13943,10 @@ export declare namespace codepipeline {
      * Represents information about the output of an action.
      */
     interface PipelineOutputArtifact {
+        /**
+         * The files that you want to associate with the output artifact that will be exported from the compute action.
+         */
+        files?: string[];
         /**
          * The name of the output of an artifact, such as "My App".
          */
@@ -14024,7 +14178,7 @@ export declare namespace cognito {
     }
     interface UserPoolAccountRecoverySetting {
         /**
-         * The list of `RecoveryOptionTypes` .
+         * The list of options and priorities for user message delivery in forgot-password operations. Sets or displays user pool preferences for email or SMS message priority, whether users should fall back to a second delivery method, and whether passwords should only be reset by administrators.
          */
         recoveryMechanisms?: outputs.cognito.UserPoolRecoveryOption[];
     }
@@ -14041,7 +14195,7 @@ export declare namespace cognito {
          */
         allowAdminCreateUserOnly?: boolean;
         /**
-         * The message template to be used for the welcome message to new users.
+         * The template for the welcome message to new users.
          *
          * See also [Customizing User Invitation Messages](https://docs.aws.amazon.com/cognito/latest/developerguide/cognito-user-pool-settings-message-customizations.html#cognito-user-pool-settings-user-invitation-message-customization) .
          */
@@ -14060,7 +14214,7 @@ export declare namespace cognito {
     }
     interface UserPoolClientAnalyticsConfiguration {
         /**
-         * The Amazon Resource Name (ARN) of an Amazon Pinpoint project. You can use the Amazon Pinpoint project for integration with the chosen user pool client. Amazon Cognito publishes events to the Amazon Pinpoint project that the app ARN declares.
+         * The Amazon Resource Name (ARN) of an Amazon Pinpoint project that you want to connect to your user pool app client. Amazon Cognito publishes events to the Amazon Pinpoint project that `ApplicationArn` declares. You can also configure your application to pass an endpoint ID in the `AnalyticsMetadata` parameter of sign-in operations. The endpoint ID is information about the destination for push notifications
          */
         applicationArn?: string;
         /**
@@ -14096,21 +14250,25 @@ export declare namespace cognito {
     }
     interface UserPoolCustomEmailSender {
         /**
-         * The Amazon Resource Name (ARN) of the AWS Lambda function that Amazon Cognito triggers to send email notifications to users.
+         * The Amazon Resource Name (ARN) of the function that you want to assign to your Lambda trigger.
          */
         lambdaArn?: string;
         /**
-         * The Lambda version represents the signature of the "request" attribute in the "event" information that Amazon Cognito passes to your custom email sender AWS Lambda function. The only supported value is `V1_0` .
+         * The user pool trigger version of the request that Amazon Cognito sends to your Lambda function. Higher-numbered versions add fields that support new features.
+         *
+         * You must use a `LambdaVersion` of `V1_0` with a custom sender function.
          */
         lambdaVersion?: string;
     }
     interface UserPoolCustomSmsSender {
         /**
-         * The Amazon Resource Name (ARN) of the AWS Lambda function that Amazon Cognito triggers to send SMS notifications to users.
+         * The Amazon Resource Name (ARN) of the function that you want to assign to your Lambda trigger.
          */
         lambdaArn?: string;
         /**
-         * The Lambda version represents the signature of the "request" attribute in the "event" information Amazon Cognito passes to your custom SMS sender Lambda function. The only supported value is `V1_0` .
+         * The user pool trigger version of the request that Amazon Cognito sends to your Lambda function. Higher-numbered versions add fields that support new features.
+         *
+         * You must use a `LambdaVersion` of `V1_0` with a custom sender function.
          */
         lambdaVersion?: string;
     }
@@ -14136,10 +14294,10 @@ export declare namespace cognito {
     }
     interface UserPoolEmailConfiguration {
         /**
-         * The set of configuration rules that can be applied to emails sent using Amazon SES. A configuration set is applied to an email by including a reference to the configuration set in the headers of the email. Once applied, all of the rules in that configuration set are applied to the email. Configuration sets can be used to apply the following types of rules to emails:
+         * The set of configuration rules that can be applied to emails sent using Amazon Simple Email Service. A configuration set is applied to an email by including a reference to the configuration set in the headers of the email. Once applied, all of the rules in that configuration set are applied to the email. Configuration sets can be used to apply the following types of rules to emails:
          *
-         * - Event publishing – Amazon SES can track the number of send, delivery, open, click, bounce, and complaint events for each email sent. Use event publishing to send information about these events to other AWS services such as SNS and CloudWatch.
-         * - IP pool management – When leasing dedicated IP addresses with Amazon SES, you can create groups of IP addresses, called dedicated IP pools. You can then associate the dedicated IP pools with configuration sets.
+         * - **Event publishing** - Amazon Simple Email Service can track the number of send, delivery, open, click, bounce, and complaint events for each email sent. Use event publishing to send information about these events to other AWS services such as and Amazon CloudWatch
+         * - **IP pool management** - When leasing dedicated IP addresses with Amazon Simple Email Service, you can create groups of IP addresses, called dedicated IP pools. You can then associate the dedicated IP pools with configuration sets.
          */
         configurationSet?: string;
         /**
@@ -14158,7 +14316,7 @@ export declare namespace cognito {
          */
         emailSendingAccount?: string;
         /**
-         * Identifies either the sender's email address or the sender's name with their email address. For example, `testuser@example.com` or `Test User <testuser@example.com>` . This address appears before the body of the email.
+         * Either the sender’s email address or the sender’s name with their email address. For example, `testuser@example.com` or `Test User <testuser@example.com>` . This address appears before the body of the email.
          */
         from?: string;
         /**
@@ -14195,7 +14353,7 @@ export declare namespace cognito {
          */
         createAuthChallenge?: string;
         /**
-         * A custom email sender AWS Lambda trigger.
+         * The configuration of a custom email sender Lambda trigger. This trigger routes all email notifications from a user pool to a Lambda function that delivers the message using custom logic.
          */
         customEmailSender?: outputs.cognito.UserPoolCustomEmailSender;
         /**
@@ -14203,7 +14361,7 @@ export declare namespace cognito {
          */
         customMessage?: string;
         /**
-         * A custom SMS sender AWS Lambda trigger.
+         * The configuration of a custom SMS sender Lambda trigger. This trigger routes all SMS notifications from a user pool to a Lambda function that delivers the message using custom logic.
          */
         customSmsSender?: outputs.cognito.UserPoolCustomSmsSender;
         /**
@@ -14211,7 +14369,7 @@ export declare namespace cognito {
          */
         defineAuthChallenge?: string;
         /**
-         * The Amazon Resource Name of a AWS Key Management Service ( AWS KMS ) key. Amazon Cognito uses the key to encrypt codes and temporary passwords sent to `CustomEmailSender` and `CustomSMSSender` .
+         * The ARN of an [KMS key](https://docs.aws.amazon.com//kms/latest/developerguide/concepts.html#master_keys) . Amazon Cognito uses the key to encrypt codes and temporary passwords sent to custom sender Lambda triggers.
          */
         kmsKeyId?: string;
         /**
@@ -14313,11 +14471,11 @@ export declare namespace cognito {
     }
     interface UserPoolRecoveryOption {
         /**
-         * Specifies the recovery method for a user.
+         * The recovery method that this object sets a recovery option for.
          */
         name?: string;
         /**
-         * A positive integer specifying priority of a method with 1 being the highest priority.
+         * Your priority preference for using the specified attribute in account recovery. The highest priority is `1` .
          */
         priority?: number;
     }
@@ -14442,9 +14600,9 @@ export declare namespace cognito {
          */
         attributeDataType?: string;
         /**
-         * > We recommend that you use [WriteAttributes](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UserPoolClientType.html#CognitoUserPools-Type-UserPoolClientType-WriteAttributes) in the user pool client to control how attributes can be mutated for new use cases instead of using `DeveloperOnlyAttribute` .
+         * > You should use [WriteAttributes](https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_UserPoolClientType.html#CognitoUserPools-Type-UserPoolClientType-WriteAttributes) in the user pool client to control how attributes can be mutated for new use cases instead of using `DeveloperOnlyAttribute` .
          *
-         * Specifies whether the attribute type is developer only. This attribute can only be modified by an administrator. Users will not be able to modify this attribute using their access token.
+         * Specifies whether the attribute type is developer only. This attribute can only be modified by an administrator. Users won't be able to modify this attribute using their access token. For example, `DeveloperOnlyAttribute` can be modified using AdminUpdateUserAttributes but can't be updated using UpdateUserAttributes.
          */
         developerOnlyAttribute?: boolean;
         /**
@@ -14472,7 +14630,9 @@ export declare namespace cognito {
     }
     interface UserPoolSmsConfiguration {
         /**
-         * The external ID is a value. We recommend you use `ExternalId` to add security to your IAM role, which is used to call Amazon SNS to send SMS messages for your user pool. If you provide an `ExternalId` , the Cognito User Pool uses it when attempting to assume your IAM role. You can also set your roles trust policy to require the `ExternalID` . If you use the Cognito Management Console to create a role for SMS MFA, Cognito creates a role with the required permissions and a trust policy that uses `ExternalId` .
+         * The external ID provides additional security for your IAM role. You can use an `ExternalId` with the IAM role that you use with Amazon SNS to send SMS messages for your user pool. If you provide an `ExternalId` , your Amazon Cognito user pool includes it in the request to assume your IAM role. You can configure the role trust policy to require that Amazon Cognito, and any principal, provide the `ExternalID` . If you use the Amazon Cognito Management Console to create a role for SMS multi-factor authentication (MFA), Amazon Cognito creates a role with the required permissions and a trust policy that demonstrates use of the `ExternalId` .
+         *
+         * For more information about the `ExternalId` of a role, see [How to use an external ID when granting access to your AWS resources to a third party](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_roles_create_for-user_externalid.html) .
          */
         externalId?: string;
         /**
@@ -23285,59 +23445,193 @@ export declare namespace ec2 {
         userInfoEndpoint?: string;
     }
     interface VpnConnectionCloudwatchLogOptionsSpecification {
+        /**
+         * Enable or disable VPN tunnel logging feature. Default value is `False` .
+         *
+         * Valid values: `True` | `False`
+         */
         logEnabled?: boolean;
+        /**
+         * The Amazon Resource Name (ARN) of the CloudWatch log group to send logs to.
+         */
         logGroupArn?: string;
+        /**
+         * Set log format. Default format is `json` .
+         *
+         * Valid values: `json` | `text`
+         */
         logOutputFormat?: enums.ec2.VpnConnectionCloudwatchLogOptionsSpecificationLogOutputFormat;
     }
     interface VpnConnectionIkeVersionsRequestListValue {
+        /**
+         * The IKE version.
+         */
         value?: enums.ec2.VpnConnectionIkeVersionsRequestListValueValue;
     }
     interface VpnConnectionPhase1EncryptionAlgorithmsRequestListValue {
+        /**
+         * The value for the encryption algorithm.
+         */
         value?: enums.ec2.VpnConnectionPhase1EncryptionAlgorithmsRequestListValueValue;
     }
     interface VpnConnectionPhase1IntegrityAlgorithmsRequestListValue {
+        /**
+         * The value for the integrity algorithm.
+         */
         value?: enums.ec2.VpnConnectionPhase1IntegrityAlgorithmsRequestListValueValue;
     }
     interface VpnConnectionPhase1dhGroupNumbersRequestListValue {
+        /**
+         * The Diffie-Hellmann group number.
+         */
         value?: number;
     }
     interface VpnConnectionPhase2EncryptionAlgorithmsRequestListValue {
+        /**
+         * The encryption algorithm.
+         */
         value?: enums.ec2.VpnConnectionPhase2EncryptionAlgorithmsRequestListValueValue;
     }
     interface VpnConnectionPhase2IntegrityAlgorithmsRequestListValue {
+        /**
+         * The integrity algorithm.
+         */
         value?: enums.ec2.VpnConnectionPhase2IntegrityAlgorithmsRequestListValueValue;
     }
     interface VpnConnectionPhase2dhGroupNumbersRequestListValue {
+        /**
+         * The Diffie-Hellmann group number.
+         */
         value?: number;
     }
     interface VpnConnectionVpnTunnelLogOptionsSpecification {
+        /**
+         * Options for sending VPN tunnel logs to CloudWatch.
+         */
         cloudwatchLogOptions?: outputs.ec2.VpnConnectionCloudwatchLogOptionsSpecification;
     }
     /**
      * The tunnel options for a single VPN tunnel.
      */
     interface VpnConnectionVpnTunnelOptionsSpecification {
+        /**
+         * The action to take after DPD timeout occurs. Specify `restart` to restart the IKE initiation. Specify `clear` to end the IKE session.
+         *
+         * Valid Values: `clear` | `none` | `restart`
+         *
+         * Default: `clear`
+         */
         dpdTimeoutAction?: enums.ec2.VpnConnectionVpnTunnelOptionsSpecificationDpdTimeoutAction;
+        /**
+         * The number of seconds after which a DPD timeout occurs.
+         *
+         * Constraints: A value greater than or equal to 30.
+         *
+         * Default: `30`
+         */
         dpdTimeoutSeconds?: number;
+        /**
+         * Turn on or off tunnel endpoint lifecycle control feature.
+         */
         enableTunnelLifecycleControl?: boolean;
+        /**
+         * The IKE versions that are permitted for the VPN tunnel.
+         *
+         * Valid values: `ikev1` | `ikev2`
+         */
         ikeVersions?: outputs.ec2.VpnConnectionIkeVersionsRequestListValue[];
+        /**
+         * Options for logging VPN tunnel activity.
+         */
         logOptions?: outputs.ec2.VpnConnectionVpnTunnelLogOptionsSpecification;
+        /**
+         * One or more encryption algorithms that are permitted for the VPN tunnel for phase 1 IKE negotiations.
+         *
+         * Valid values: `AES128` | `AES256` | `AES128-GCM-16` | `AES256-GCM-16`
+         */
         phase1EncryptionAlgorithms?: outputs.ec2.VpnConnectionPhase1EncryptionAlgorithmsRequestListValue[];
+        /**
+         * One or more integrity algorithms that are permitted for the VPN tunnel for phase 1 IKE negotiations.
+         *
+         * Valid values: `SHA1` | `SHA2-256` | `SHA2-384` | `SHA2-512`
+         */
         phase1IntegrityAlgorithms?: outputs.ec2.VpnConnectionPhase1IntegrityAlgorithmsRequestListValue[];
+        /**
+         * The lifetime for phase 1 of the IKE negotiation, in seconds.
+         *
+         * Constraints: A value between 900 and 28,800.
+         *
+         * Default: `28800`
+         */
         phase1LifetimeSeconds?: number;
+        /**
+         * One or more Diffie-Hellman group numbers that are permitted for the VPN tunnel for phase 1 IKE negotiations.
+         *
+         * Valid values: `2` | `14` | `15` | `16` | `17` | `18` | `19` | `20` | `21` | `22` | `23` | `24`
+         */
         phase1dhGroupNumbers?: outputs.ec2.VpnConnectionPhase1dhGroupNumbersRequestListValue[];
+        /**
+         * One or more encryption algorithms that are permitted for the VPN tunnel for phase 2 IKE negotiations.
+         *
+         * Valid values: `AES128` | `AES256` | `AES128-GCM-16` | `AES256-GCM-16`
+         */
         phase2EncryptionAlgorithms?: outputs.ec2.VpnConnectionPhase2EncryptionAlgorithmsRequestListValue[];
+        /**
+         * One or more integrity algorithms that are permitted for the VPN tunnel for phase 2 IKE negotiations.
+         *
+         * Valid values: `SHA1` | `SHA2-256` | `SHA2-384` | `SHA2-512`
+         */
         phase2IntegrityAlgorithms?: outputs.ec2.VpnConnectionPhase2IntegrityAlgorithmsRequestListValue[];
+        /**
+         * The lifetime for phase 2 of the IKE negotiation, in seconds.
+         *
+         * Constraints: A value between 900 and 3,600. The value must be less than the value for `Phase1LifetimeSeconds` .
+         *
+         * Default: `3600`
+         */
         phase2LifetimeSeconds?: number;
+        /**
+         * One or more Diffie-Hellman group numbers that are permitted for the VPN tunnel for phase 2 IKE negotiations.
+         *
+         * Valid values: `2` | `5` | `14` | `15` | `16` | `17` | `18` | `19` | `20` | `21` | `22` | `23` | `24`
+         */
         phase2dhGroupNumbers?: outputs.ec2.VpnConnectionPhase2dhGroupNumbersRequestListValue[];
         /**
          * The pre-shared key (PSK) to establish initial authentication between the virtual private gateway and customer gateway.
          *  Constraints: Allowed characters are alphanumeric characters, periods (.), and underscores (_). Must be between 8 and 64 characters in length and cannot start with zero (0).
          */
         preSharedKey?: string;
+        /**
+         * The percentage of the rekey window (determined by `RekeyMarginTimeSeconds` ) during which the rekey time is randomly selected.
+         *
+         * Constraints: A value between 0 and 100.
+         *
+         * Default: `100`
+         */
         rekeyFuzzPercentage?: number;
+        /**
+         * The margin time, in seconds, before the phase 2 lifetime expires, during which the AWS side of the VPN connection performs an IKE rekey. The exact time of the rekey is randomly selected based on the value for `RekeyFuzzPercentage` .
+         *
+         * Constraints: A value between 60 and half of `Phase2LifetimeSeconds` .
+         *
+         * Default: `270`
+         */
         rekeyMarginTimeSeconds?: number;
+        /**
+         * The number of packets in an IKE replay window.
+         *
+         * Constraints: A value between 64 and 2048.
+         *
+         * Default: `1024`
+         */
         replayWindowSize?: number;
+        /**
+         * The action to take when the establishing the tunnel for the VPN connection. By default, your customer gateway device must initiate the IKE negotiation and bring up the tunnel. Specify `start` for AWS to initiate the IKE negotiation.
+         *
+         * Valid Values: `add` | `start`
+         *
+         * Default: `add`
+         */
         startupAction?: enums.ec2.VpnConnectionVpnTunnelOptionsSpecificationStartupAction;
         /**
          * The range of inside IP addresses for the tunnel. Any specified CIDR blocks must be unique across all VPN connections that use the same virtual private gateway.
@@ -23351,6 +23645,11 @@ export declare namespace ec2 {
          *   +   ``169.254.169.252/30``
          */
         tunnelInsideCidr?: string;
+        /**
+         * The range of inside IPv6 addresses for the tunnel. Any specified CIDR blocks must be unique across all VPN connections that use the same transit gateway.
+         *
+         * Constraints: A size /126 CIDR block from the local `fd00::/8` range.
+         */
         tunnelInsideIpv6Cidr?: string;
     }
 }
@@ -25123,8 +25422,21 @@ export declare namespace ecs {
         subnets: string[];
     }
     interface TaskSetCapacityProviderStrategyItem {
+        /**
+         * The *base* value designates how many tasks, at a minimum, to run on the specified capacity provider. Only one capacity provider in a capacity provider strategy can have a *base* defined. If no value is specified, the default value of `0` is used.
+         */
         base?: number;
+        /**
+         * The short name of the capacity provider.
+         */
         capacityProvider?: string;
+        /**
+         * The *weight* value designates the relative percentage of the total number of tasks launched that should use the specified capacity provider. The `weight` value is taken into consideration after the `base` value, if defined, is satisfied.
+         *
+         * If no `weight` value is specified, the default value of `0` is used. When multiple capacity providers are specified within a capacity provider strategy, at least one of the capacity providers must have a weight value greater than zero and any capacity providers with a weight of `0` can't be used to place tasks. If you specify multiple capacity providers in a strategy that all have a weight of `0` , any `RunTask` or `CreateService` actions using the capacity provider strategy will fail.
+         *
+         * An example scenario for using weights is defining a strategy that contains two capacity providers and both have a weight of `1` , then when the `base` is satisfied, the tasks will be split evenly across the two capacity providers. Using that same logic, if you specify a weight of `1` for *capacityProviderA* and a weight of `4` for *capacityProviderB* , then for every one task that's run using *capacityProviderA* , four tasks would use *capacityProviderB* .
+         */
         weight?: number;
     }
     /**
@@ -51261,6 +51573,9 @@ export declare namespace quicksight {
          * The configuration that selects all options.
          */
         selectAllValueOptions?: enums.quicksight.AnalysisSelectAllValueOptions;
+        /**
+         * A column of a data set.
+         */
         sourceColumn?: outputs.quicksight.AnalysisColumnIdentifier;
         /**
          * The source field ID of the destination parameter.
@@ -59061,6 +59376,9 @@ export declare namespace quicksight {
          * The configuration that selects all options.
          */
         selectAllValueOptions?: enums.quicksight.DashboardSelectAllValueOptions;
+        /**
+         * A column of a data set.
+         */
         sourceColumn?: outputs.quicksight.DashboardColumnIdentifier;
         /**
          * The source field ID of the destination parameter.
@@ -65225,7 +65543,7 @@ export declare namespace quicksight {
         /**
          * <p>The column schema from the SQL query result set.</p>
          */
-        columns: outputs.quicksight.DataSetInputColumn[];
+        columns?: outputs.quicksight.DataSetInputColumn[];
         /**
          * <p>The Amazon Resource Name (ARN) of the data source.</p>
          */
@@ -65650,7 +65968,7 @@ export declare namespace quicksight {
         /**
          * <p>The column schema of the table.</p>
          */
-        inputColumns: outputs.quicksight.DataSetInputColumn[];
+        inputColumns?: outputs.quicksight.DataSetInputColumn[];
         /**
          * <p>The name of the relational table.</p>
          */
@@ -65853,6 +66171,9 @@ export declare namespace quicksight {
          * An operation that filters rows based on some condition.
          */
         filterOperation?: outputs.quicksight.DataSetFilterOperation;
+        /**
+         * A transform operation that overrides the dataset parameter values that are defined in another dataset.
+         */
         overrideDatasetParameterOperation?: outputs.quicksight.DataSetOverrideDatasetParameterOperation;
         /**
          * An operation that projects columns. Operations that come after a projection can only refer to projected columns.
@@ -68503,6 +68824,9 @@ export declare namespace quicksight {
          * The configuration that selects all options.
          */
         selectAllValueOptions?: enums.quicksight.TemplateSelectAllValueOptions;
+        /**
+         * A column of a data set.
+         */
         sourceColumn?: outputs.quicksight.TemplateColumnIdentifier;
         /**
          * The source field ID of the destination parameter.
@@ -74435,6 +74759,9 @@ export declare namespace quicksight {
          * Display options related to sheets.
          */
         sheet?: outputs.quicksight.ThemeSheetStyle;
+        /**
+         * Determines the typography options.
+         */
         typography?: outputs.quicksight.ThemeTypography;
         /**
          * Color properties that apply to the UI and to charts, excluding the colors that apply to data.
@@ -85857,7 +86184,7 @@ export declare namespace ssmquicksetup {
          * - Description: (Optional) A boolean value that determines whether instances should scan for available patches at the next cron interval. The default value is " `false` ".
          * - `RebootOption`
          *
-         * - Description: (Optional) A boolean value that determines whether instances are rebooted after patches are installed. The default value is " `false` ".
+         * - Description: (Optional) Determines whether instances are rebooted after patches are installed. Valid values are `RebootIfNeeded` and `NoReboot` .
          * - `IsPolicyAttachAllowed`
          *
          * - Description: (Optional) A boolean value that determines whether Quick Setup attaches policies to instances profiles already associated with the target instances. The default value is " `false` ".
@@ -86519,6 +86846,156 @@ export declare namespace transfer {
          */
         signingAlgorithm?: enums.transfer.ConnectorAs2ConfigPropertiesSigningAlgorithm;
     }
+    interface ServerEndpointDetails {
+        /**
+         * A list of address allocation IDs that are required to attach an Elastic IP address to your server's endpoint.
+         *
+         * An address allocation ID corresponds to the allocation ID of an Elastic IP address. This value can be retrieved from the `allocationId` field from the Amazon EC2 [Address](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_Address.html) data type. One way to retrieve this value is by calling the EC2 [DescribeAddresses](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeAddresses.html) API.
+         *
+         * This parameter is optional. Set this parameter if you want to make your VPC endpoint public-facing. For details, see [Create an internet-facing endpoint for your server](https://docs.aws.amazon.com/transfer/latest/userguide/create-server-in-vpc.html#create-internet-facing-endpoint) .
+         *
+         * > This property can only be set as follows:
+         * >
+         * > - `EndpointType` must be set to `VPC`
+         * > - The Transfer Family server must be offline.
+         * > - You cannot set this parameter for Transfer Family servers that use the FTP protocol.
+         * > - The server must already have `SubnetIds` populated ( `SubnetIds` and `AddressAllocationIds` cannot be updated simultaneously).
+         * > - `AddressAllocationIds` can't contain duplicates, and must be equal in length to `SubnetIds` . For example, if you have three subnet IDs, you must also specify three address allocation IDs.
+         * > - Call the `UpdateServer` API to set or change this parameter.
+         */
+        addressAllocationIds?: string[];
+        /**
+         * A list of security groups IDs that are available to attach to your server's endpoint.
+         *
+         * > This property can only be set when `EndpointType` is set to `VPC` .
+         * >
+         * > You can edit the `SecurityGroupIds` property in the [UpdateServer](https://docs.aws.amazon.com/transfer/latest/userguide/API_UpdateServer.html) API only if you are changing the `EndpointType` from `PUBLIC` or `VPC_ENDPOINT` to `VPC` . To change security groups associated with your server's VPC endpoint after creation, use the Amazon EC2 [ModifyVpcEndpoint](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_ModifyVpcEndpoint.html) API.
+         */
+        securityGroupIds?: string[];
+        /**
+         * A list of subnet IDs that are required to host your server endpoint in your VPC.
+         *
+         * > This property can only be set when `EndpointType` is set to `VPC` .
+         */
+        subnetIds?: string[];
+        /**
+         * The ID of the VPC endpoint.
+         *
+         * > This property can only be set when `EndpointType` is set to `VPC_ENDPOINT` .
+         */
+        vpcEndpointId?: string;
+        /**
+         * The VPC ID of the virtual private cloud in which the server's endpoint will be hosted.
+         *
+         * > This property can only be set when `EndpointType` is set to `VPC` .
+         */
+        vpcId?: string;
+    }
+    interface ServerIdentityProviderDetails {
+        /**
+         * The identifier of the AWS Directory Service directory that you want to use as your identity provider.
+         */
+        directoryId?: string;
+        /**
+         * The ARN for a Lambda function to use for the Identity provider.
+         */
+        function?: string;
+        /**
+         * This parameter is only applicable if your `IdentityProviderType` is `API_GATEWAY` . Provides the type of `InvocationRole` used to authenticate the user account.
+         */
+        invocationRole?: string;
+        /**
+         * For SFTP-enabled servers, and for custom identity providers *only* , you can specify whether to authenticate using a password, SSH key pair, or both.
+         *
+         * - `PASSWORD` - users must provide their password to connect.
+         * - `PUBLIC_KEY` - users must provide their private key to connect.
+         * - `PUBLIC_KEY_OR_PASSWORD` - users can authenticate with either their password or their key. This is the default value.
+         * - `PUBLIC_KEY_AND_PASSWORD` - users must provide both their private key and their password to connect. The server checks the key first, and then if the key is valid, the system prompts for a password. If the private key provided does not match the public key that is stored, authentication fails.
+         */
+        sftpAuthenticationMethods?: enums.transfer.ServerSftpAuthenticationMethods;
+        /**
+         * Provides the location of the service endpoint used to authenticate users.
+         */
+        url?: string;
+    }
+    interface ServerProtocolDetails {
+        /**
+         * List of `As2Transport` objects.
+         */
+        as2Transports?: enums.transfer.ServerAs2Transport[];
+        /**
+         * Indicates passive mode, for FTP and FTPS protocols. Enter a single IPv4 address, such as the public IP address of a firewall, router, or load balancer. For example:
+         *
+         * `aws transfer update-server --protocol-details PassiveIp=0.0.0.0`
+         *
+         * Replace `0.0.0.0` in the example above with the actual IP address you want to use.
+         *
+         * > If you change the `PassiveIp` value, you must stop and then restart your Transfer Family server for the change to take effect. For details on using passive mode (PASV) in a NAT environment, see [Configuring your FTPS server behind a firewall or NAT with AWS Transfer Family](https://docs.aws.amazon.com/storage/configuring-your-ftps-server-behind-a-firewall-or-nat-with-aws-transfer-family/) .
+         *
+         * *Special values*
+         *
+         * The `AUTO` and `0.0.0.0` are special values for the `PassiveIp` parameter. The value `PassiveIp=AUTO` is assigned by default to FTP and FTPS type servers. In this case, the server automatically responds with one of the endpoint IPs within the PASV response. `PassiveIp=0.0.0.0` has a more unique application for its usage. For example, if you have a High Availability (HA) Network Load Balancer (NLB) environment, where you have 3 subnets, you can only specify a single IP address using the `PassiveIp` parameter. This reduces the effectiveness of having High Availability. In this case, you can specify `PassiveIp=0.0.0.0` . This tells the client to use the same IP address as the Control connection and utilize all AZs for their connections. Note, however, that not all FTP clients support the `PassiveIp=0.0.0.0` response. FileZilla and WinSCP do support it. If you are using other clients, check to see if your client supports the `PassiveIp=0.0.0.0` response.
+         */
+        passiveIp?: string;
+        /**
+         * Use the `SetStatOption` to ignore the error that is generated when the client attempts to use `SETSTAT` on a file you are uploading to an S3 bucket.
+         *
+         * Some SFTP file transfer clients can attempt to change the attributes of remote files, including timestamp and permissions, using commands, such as `SETSTAT` when uploading the file. However, these commands are not compatible with object storage systems, such as Amazon S3. Due to this incompatibility, file uploads from these clients can result in errors even when the file is otherwise successfully uploaded.
+         *
+         * Set the value to `ENABLE_NO_OP` to have the Transfer Family server ignore the `SETSTAT` command, and upload files without needing to make any changes to your SFTP client. While the `SetStatOption` `ENABLE_NO_OP` setting ignores the error, it does generate a log entry in Amazon CloudWatch Logs, so you can determine when the client is making a `SETSTAT` call.
+         *
+         * > If you want to preserve the original timestamp for your file, and modify other file attributes using `SETSTAT` , you can use Amazon EFS as backend storage with Transfer Family.
+         */
+        setStatOption?: enums.transfer.ServerSetStatOption;
+        /**
+         * A property used with Transfer Family servers that use the FTPS protocol. TLS Session Resumption provides a mechanism to resume or share a negotiated secret key between the control and data connection for an FTPS session. `TlsSessionResumptionMode` determines whether or not the server resumes recent, negotiated sessions through a unique session ID. This property is available during `CreateServer` and `UpdateServer` calls. If a `TlsSessionResumptionMode` value is not specified during `CreateServer` , it is set to `ENFORCED` by default.
+         *
+         * - `DISABLED` : the server does not process TLS session resumption client requests and creates a new TLS session for each request.
+         * - `ENABLED` : the server processes and accepts clients that are performing TLS session resumption. The server doesn't reject client data connections that do not perform the TLS session resumption client processing.
+         * - `ENFORCED` : the server processes and accepts clients that are performing TLS session resumption. The server rejects client data connections that do not perform the TLS session resumption client processing. Before you set the value to `ENFORCED` , test your clients.
+         *
+         * > Not all FTPS clients perform TLS session resumption. So, if you choose to enforce TLS session resumption, you prevent any connections from FTPS clients that don't perform the protocol negotiation. To determine whether or not you can use the `ENFORCED` value, you need to test your clients.
+         */
+        tlsSessionResumptionMode?: enums.transfer.ServerTlsSessionResumptionMode;
+    }
+    interface ServerS3StorageOptions {
+        /**
+         * Specifies whether or not performance for your Amazon S3 directories is optimized. This is disabled by default.
+         *
+         * By default, home directory mappings have a `TYPE` of `DIRECTORY` . If you enable this option, you would then need to explicitly set the `HomeDirectoryMapEntry` `Type` to `FILE` if you want a mapping to have a file target.
+         */
+        directoryListingOptimization?: enums.transfer.ServerDirectoryListingOptimization;
+    }
+    interface ServerWorkflowDetail {
+        /**
+         * Includes the necessary permissions for S3, EFS, and Lambda operations that Transfer can assume, so that all workflow steps can operate on the required resources
+         */
+        executionRole: string;
+        /**
+         * A unique identifier for the workflow.
+         */
+        workflowId: string;
+    }
+    interface ServerWorkflowDetails {
+        /**
+         * A trigger that starts a workflow if a file is only partially uploaded. You can attach a workflow to a server that executes whenever there is a partial upload.
+         *
+         * A *partial upload* occurs when a file is open when the session disconnects.
+         *
+         * > `OnPartialUpload` can contain a maximum of one `WorkflowDetail` object.
+         */
+        onPartialUpload?: outputs.transfer.ServerWorkflowDetail[];
+        /**
+         * A trigger that starts a workflow: the workflow begins to execute after a file is uploaded.
+         *
+         * To remove an associated workflow from a server, you can provide an empty `OnUpload` object, as in the following example.
+         *
+         * `aws transfer update-server --server-id s-01234567890abcdef --workflow-details '{"OnUpload":[]}'`
+         *
+         * > `OnUpload` can contain a maximum of one `WorkflowDetail` object.
+         */
+        onUpload?: outputs.transfer.ServerWorkflowDetail[];
+    }
     /**
      * Configuration for an SFTP connector.
      */
@@ -89840,6 +90317,8 @@ export declare namespace wafv2 {
     }
 }
 export declare namespace wisdom {
+    interface AiPromptAiPromptTemplateConfiguration {
+    }
     interface AssistantAssociationAssociationData {
         /**
          * The identifier of the knowledge base.