@pulumi/aws-native 1.27.0-alpha.1743532630 → 1.27.0-alpha.1744032579

package/types/input.d.ts

@@ -1821,6 +1821,10 @@ export declare namespace apigateway {
         type?: pulumi.Input<enums.apigateway.DocumentationPartLocationType>;
     }
     interface DomainNameEndpointConfigurationArgs {
+        /**
+         * The IP address types that can invoke this DomainName. Use `ipv4` to allow only IPv4 addresses to invoke this DomainName, or use `dualstack` to allow both IPv4 and IPv6 addresses to invoke this DomainName. For the `PRIVATE` endpoint type, only `dualstack` is supported.
+         */
+        ipAddressType?: pulumi.Input<string>;
         /**
          * A list of endpoint types of an API (RestApi) or its custom domain name (DomainName). For an edge-optimized API and its custom domain name, the endpoint type is `"EDGE"` . For a regional API and its custom domain name, the endpoint type is `REGIONAL` . For a private API, the endpoint type is `PRIVATE` .
          */
@@ -1967,6 +1971,10 @@ export declare namespace apigateway {
      *  ``EndpointConfiguration`` is a property of the [AWS::ApiGateway::RestApi](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigateway-restapi.html) resource.
      */
     interface RestApiEndpointConfigurationArgs {
+        /**
+         * The IP address types that can invoke an API (RestApi). Use `ipv4` to allow only IPv4 addresses to invoke an API, or use `dualstack` to allow both IPv4 and IPv6 addresses to invoke an API. For the `PRIVATE` endpoint type, only `dualstack` is supported.
+         */
+        ipAddressType?: pulumi.Input<string>;
         /**
          * A list of endpoint types of an API (RestApi) or its custom domain name (DomainName). For an edge-optimized API and its custom domain name, the endpoint type is `"EDGE"` . For a regional API and its custom domain name, the endpoint type is `REGIONAL` . For a private API, the endpoint type is `PRIVATE` .
          */
@@ -4829,6 +4837,21 @@ export declare namespace applicationsignals {
          */
         value: pulumi.Input<string>;
     }
+    /**
+     * This object defines a time exclusion window for this SLO. The time exclusion window is used to exclude breaching data points from affecting attainment rate, error budget, and burn rate metrics.
+     */
+    interface ServiceLevelObjectiveExclusionWindowArgs {
+        /**
+         * An optional reason for scheduling this time exclusion window. Default is 'No reason'.
+         */
+        reason?: pulumi.Input<string>;
+        recurrenceRule?: pulumi.Input<inputs.applicationsignals.ServiceLevelObjectiveRecurrenceRuleArgs>;
+        /**
+         * The time you want the exclusion window to start at. Note that time exclusion windows can only be scheduled in the future, not the past.
+         */
+        startTime?: pulumi.Input<string>;
+        window: pulumi.Input<inputs.applicationsignals.ServiceLevelObjectiveWindowArgs>;
+    }
     /**
      * A structure that contains the attributes that determine the goal of the SLO. This includes the time period for evaluation and the attainment threshold.
      */
@@ -4937,6 +4960,15 @@ export declare namespace applicationsignals {
          */
         goodCountMetric?: pulumi.Input<pulumi.Input<inputs.applicationsignals.ServiceLevelObjectiveMetricDataQueryArgs>[]>;
     }
+    /**
+     * This object defines how often to repeat a time exclusion window.
+     */
+    interface ServiceLevelObjectiveRecurrenceRuleArgs {
+        /**
+         * A cron or rate expression denoting how often to repeat this exclusion window.
+         */
+        expression: pulumi.Input<string>;
+    }
     /**
      * This structure contains information about the performance metric that a request-based SLO monitors.
      */
@@ -4966,6 +4998,7 @@ export declare namespace applicationsignals {
          * - `Name` specifies the name of the object. This is used only if the value of the `Type` field is `Service` , `RemoteService` , or `AWS::Service` .
          * - `Identifier` identifies the resource objects of this resource. This is used only if the value of the `Type` field is `Resource` or `AWS::Resource` .
          * - `Environment` specifies the location where this object is hosted, or what it belongs to.
+         * - `AwsAccountId` allows you to create an SLO for an object that exists in another account.
          */
         keyAttributes?: pulumi.Input<{
             [key: string]: pulumi.Input<string>;
@@ -5056,6 +5089,13 @@ export declare namespace applicationsignals {
          */
         statistic?: pulumi.Input<string>;
     }
+    /**
+     * This object defines the length of time an exclusion window should span.
+     */
+    interface ServiceLevelObjectiveWindowArgs {
+        duration: pulumi.Input<number>;
+        durationUnit: pulumi.Input<enums.applicationsignals.ServiceLevelObjectiveDurationUnit>;
+    }
 }
 export declare namespace apprunner {
     /**
@@ -10038,7 +10078,7 @@ export declare namespace bedrock {
      */
     interface DataSourceBedrockFoundationModelConfigurationArgs {
         /**
-         * The model's ARN.
+         * The ARN of the foundation model to use for parsing.
          */
         modelArn: pulumi.Input<string>;
         /**
@@ -10050,6 +10090,19 @@ export declare namespace bedrock {
          */
         parsingPrompt?: pulumi.Input<inputs.bedrock.DataSourceParsingPromptArgs>;
     }
+    /**
+     * Bedrock Foundation Model configuration to be used for Context Enrichment.
+     */
+    interface DataSourceBedrockFoundationModelContextEnrichmentConfigurationArgs {
+        /**
+         * The enrichment stategy used to provide additional context. For example, Neptune GraphRAG uses Amazon Bedrock foundation models to perform chunk entity extraction.
+         */
+        enrichmentStrategyConfiguration: pulumi.Input<inputs.bedrock.DataSourceEnrichmentStrategyConfigurationArgs>;
+        /**
+         * The Amazon Resource Name (ARN) of the model used to create vector embeddings for the knowledge base.
+         */
+        modelArn: pulumi.Input<string>;
+    }
     /**
      * Details about how to chunk the documents in the data source. A chunk refers to an excerpt from a data source that is returned when the knowledge base that it belongs to is queried.
      */
@@ -10156,6 +10209,19 @@ export declare namespace bedrock {
          */
         hostUrl: pulumi.Input<string>;
     }
+    /**
+     * Additional Enrichment Configuration for example when using GraphRag.
+     */
+    interface DataSourceContextEnrichmentConfigurationArgs {
+        /**
+         * The configuration of the Amazon Bedrock foundation model used for context enrichment.
+         */
+        bedrockFoundationModelConfiguration?: pulumi.Input<inputs.bedrock.DataSourceBedrockFoundationModelContextEnrichmentConfigurationArgs>;
+        /**
+         * The method used for context enrichment. It must be Amazon Bedrock foundation models.
+         */
+        type: pulumi.Input<enums.bedrock.DataSourceContextEnrichmentType>;
+    }
     /**
      * The type of filtering that you want to apply to certain objects or content of the data source. For example, the PATTERN type is regular expression patterns you can apply to filter your content.
      */
@@ -10182,6 +10248,15 @@ export declare namespace bedrock {
          */
         transformations: pulumi.Input<pulumi.Input<inputs.bedrock.DataSourceTransformationArgs>[]>;
     }
+    /**
+     * Strategy to be used when using Bedrock Foundation Model for Context Enrichment.
+     */
+    interface DataSourceEnrichmentStrategyConfigurationArgs {
+        /**
+         * The method used for the context enrichment strategy.
+         */
+        method: pulumi.Input<enums.bedrock.DataSourceEnrichmentStrategyMethod>;
+    }
     /**
      * Configurations for when you choose fixed-size chunking. If you set the chunkingStrategy as NONE, exclude this field.
      */
@@ -10471,6 +10546,10 @@ export declare namespace bedrock {
          * Details about how to chunk the documents in the data source. A *chunk* refers to an excerpt from a data source that is returned when the knowledge base that it belongs to is queried.
          */
         chunkingConfiguration?: pulumi.Input<inputs.bedrock.DataSourceChunkingConfigurationArgs>;
+        /**
+         * The context enrichment configuration used for ingestion of the data into the vector store.
+         */
+        contextEnrichmentConfiguration?: pulumi.Input<inputs.bedrock.DataSourceContextEnrichmentConfigurationArgs>;
         /**
          * A custom document transformer for parsed data source documents.
          */
@@ -10502,11 +10581,23 @@ export declare namespace bedrock {
          * You can choose to crawl only web pages that belong to the same host or primary domain. For example, only web pages that contain the seed URL "https://docs.aws.amazon.com/bedrock/latest/userguide/" and no other domains. You can choose to include sub domains in addition to the host or primary domain. For example, web pages that contain "aws.amazon.com" can also include sub domain "docs.aws.amazon.com".
          */
         scope?: pulumi.Input<enums.bedrock.DataSourceWebScopeType>;
+        /**
+         * The suffix that will be included in the user agent header.
+         */
+        userAgent?: pulumi.Input<string>;
+        /**
+         * The full user agent header, including UUID and suffix.
+         */
+        userAgentHeader?: pulumi.Input<string>;
     }
     /**
      * Limit settings for the web crawler.
      */
     interface DataSourceWebCrawlerLimitsArgs {
+        /**
+         * Maximum number of pages the crawler can crawl.
+         */
+        maxPages?: pulumi.Input<number>;
         /**
          * Rate of web URLs retrieved per minute.
          */
@@ -11000,10 +11091,18 @@ export declare namespace bedrock {
      * Content filter config in content policy.
      */
     interface GuardrailContentFilterConfigArgs {
+        /**
+         * List of modalities
+         */
+        inputModalities?: pulumi.Input<pulumi.Input<enums.bedrock.GuardrailModality>[]>;
         /**
          * The strength of the content filter to apply to prompts. As you increase the filter strength, the likelihood of filtering harmful content increases and the probability of seeing harmful content in your application reduces.
          */
         inputStrength: pulumi.Input<enums.bedrock.GuardrailFilterStrength>;
+        /**
+         * List of modalities
+         */
+        outputModalities?: pulumi.Input<pulumi.Input<enums.bedrock.GuardrailModality>[]>;
         /**
          * The strength of the content filter to apply to model responses. As you increase the filter strength, the likelihood of filtering harmful content increases and the probability of seeing harmful content in your application reduces.
          */
@@ -11378,6 +11477,32 @@ export declare namespace bedrock {
          */
         vectorField: pulumi.Input<string>;
     }
+    /**
+     * Contains the configurations to use Neptune Analytics as Vector Store.
+     */
+    interface KnowledgeBaseNeptuneAnalyticsConfigurationArgs {
+        /**
+         * Contains the names of the fields to which to map information about the vector store.
+         */
+        fieldMapping: pulumi.Input<inputs.bedrock.KnowledgeBaseNeptuneAnalyticsFieldMappingArgs>;
+        /**
+         * ARN for Neptune Analytics graph database.
+         */
+        graphArn: pulumi.Input<string>;
+    }
+    /**
+     * A mapping of Bedrock Knowledge Base fields to Neptune Analytics fields.
+     */
+    interface KnowledgeBaseNeptuneAnalyticsFieldMappingArgs {
+        /**
+         * The name of the field in which Amazon Bedrock stores metadata about the vector store.
+         */
+        metadataField: pulumi.Input<string>;
+        /**
+         * The name of the field in which Amazon Bedrock stores the raw text from your data. The text is split according to the chunking strategy you choose.
+         */
+        textField: pulumi.Input<string>;
+    }
     /**
      * Contains the storage configuration of the knowledge base in Amazon OpenSearch Service.
      */
@@ -11675,6 +11800,10 @@ export declare namespace bedrock {
          * Contains the storage configuration of the knowledge base in MongoDB Atlas.
          */
         mongoDbAtlasConfiguration?: pulumi.Input<inputs.bedrock.KnowledgeBaseMongoDbAtlasConfigurationArgs>;
+        /**
+         * Contains details about the Neptune Analytics configuration of the knowledge base in Amazon Neptune. For more information, see [Create a vector index in Amazon Neptune Analytics.](https://docs.aws.amazon.com/bedrock/latest/userguide/knowledge-base-setup-neptune.html) .
+         */
+        neptuneAnalyticsConfiguration?: pulumi.Input<inputs.bedrock.KnowledgeBaseNeptuneAnalyticsConfigurationArgs>;
         /**
          * Contains the storage configuration of the knowledge base in Amazon OpenSearch Service.
          */
@@ -12090,7 +12219,9 @@ export declare namespace budgets {
 export declare namespace cassandra {
     interface KeyspaceReplicationSpecificationArgs {
         /**
-         * Specifies the AWS Regions that the keyspace is replicated in. You must specify at least two and up to six Regions, including the Region that the keyspace is being created in.
+         * Specifies the AWS Regions that the keyspace is replicated in. You must specify at least two Regions, including the Region that the keyspace is being created in.
+         *
+         * To specify a Region [that's disabled by default](https://docs.aws.amazon.com/accounts/latest/reference/manage-acct-regions.html#rande-manage-enable) , you must first enable the Region. For more information, see [Multi-Region replication in AWS Regions disabled by default](https://docs.aws.amazon.com/keyspaces/latest/devguide/multiRegion-replication_how-it-works.html#howitworks_mrr_opt_in) in the *Amazon Keyspaces Developer Guide* .
          */
         regionList?: pulumi.Input<pulumi.Input<enums.cassandra.KeyspaceRegionListItem>[]>;
         /**
@@ -13005,8 +13136,6 @@ export declare namespace cloudformation {
         regionConcurrencyType?: pulumi.Input<enums.cloudformation.StackSetRegionConcurrencyType>;
         /**
          * The order of the Regions where you want to perform the stack operation.
-         *
-         * > `RegionOrder` isn't followed if `AutoDeployment` is enabled.
          */
         regionOrder?: pulumi.Input<pulumi.Input<string>[]>;
     }
@@ -13932,6 +14061,7 @@ export declare namespace cloudfront {
      * An origin.
      *  An origin is the location where content is stored, and from which CloudFront gets content to serve to viewers. To specify an origin:
      *   +  Use ``S3OriginConfig`` to specify an Amazon S3 bucket that is not configured with static website hosting.
+     *   +  Use ``VpcOriginConfig`` to specify a VPC origin.
      *   +  Use ``CustomOriginConfig`` to specify all other kinds of origins, including:
      *   +  An Amazon S3 bucket that is configured with static website hosting
      *   +  An Elastic Load Balancing load balancer
@@ -14191,17 +14321,18 @@ export declare namespace cloudfront {
          */
         sslSupportMethod?: pulumi.Input<string>;
     }
+    /**
+     * An Amazon CloudFront VPC origin configuration.
+     */
     interface DistributionVpcOriginConfigArgs {
         /**
          * Specifies how long, in seconds, CloudFront persists its connection to the origin. The minimum timeout is 1 second, the maximum is 60 seconds, and the default (if you don't specify otherwise) is 5 seconds.
-         *
-         * For more information, see [Keep-alive timeout (custom origins only)](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-web-values-specify.html#DownloadDistValuesOriginKeepaliveTimeout) in the *Amazon CloudFront Developer Guide* .
+         *  For more information, see [Keep-alive timeout (custom origins only)](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-web-values-specify.html#DownloadDistValuesOriginKeepaliveTimeout) in the *Amazon CloudFront Developer Guide*.
          */
         originKeepaliveTimeout?: pulumi.Input<number>;
         /**
-         * Specifies how long, in seconds, CloudFront waits for a response from the origin. This is also known as the *origin response timeout* . The minimum timeout is 1 second, the maximum is 60 seconds, and the default (if you don't specify otherwise) is 30 seconds.
-         *
-         * For more information, see [Response timeout (custom origins only)](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-web-values-specify.html#DownloadDistValuesOriginResponseTimeout) in the *Amazon CloudFront Developer Guide* .
+         * Specifies how long, in seconds, CloudFront waits for a response from the origin. This is also known as the *origin response timeout*. The minimum timeout is 1 second, the maximum is 60 seconds, and the default (if you don't specify otherwise) is 30 seconds.
+         *  For more information, see [Response timeout (custom origins only)](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/distribution-web-values-specify.html#DownloadDistValuesOriginResponseTimeout) in the *Amazon CloudFront Developer Guide*.
          */
         originReadTimeout?: pulumi.Input<number>;
         /**
@@ -14776,17 +14907,20 @@ export declare namespace cloudfront {
          */
         reportUri?: pulumi.Input<string>;
     }
+    /**
+     * An Amazon CloudFront VPC origin endpoint configuration.
+     */
     interface VpcOriginEndpointConfigArgs {
         /**
          * The ARN of the CloudFront VPC origin endpoint configuration.
          */
         arn: pulumi.Input<string>;
         /**
-         * The HTTP port for the CloudFront VPC origin endpoint configuration. The default value is `80` .
+         * The HTTP port for the CloudFront VPC origin endpoint configuration. The default value is ``80``.
          */
         httpPort?: pulumi.Input<number>;
         /**
-         * The HTTPS port of the CloudFront VPC origin endpoint configuration. The default value is `443` .
+         * The HTTPS port of the CloudFront VPC origin endpoint configuration. The default value is ``443``.
          */
         httpsPort?: pulumi.Input<number>;
         /**
@@ -15156,13 +15290,7 @@ export declare namespace codeartifact {
         restrictions: pulumi.Input<inputs.codeartifact.PackageGroupRestrictionsArgs>;
     }
     interface PackageGroupRestrictionTypeArgs {
-        /**
-         * The repositories to add to the allowed repositories list. The allowed repositories list is used when the `RestrictionMode` is set to `ALLOW_SPECIFIC_REPOSITORIES` .
-         */
         repositories?: pulumi.Input<pulumi.Input<string>[]>;
-        /**
-         * The package group origin restriction setting. When the value is `INHERIT` , the value is set to the value of the first parent package group which does not have a value of `INHERIT` .
-         */
         restrictionMode: pulumi.Input<enums.codeartifact.PackageGroupRestrictionTypeRestrictionMode>;
     }
     interface PackageGroupRestrictionsArgs {
@@ -15880,15 +16008,15 @@ export declare namespace codestarconnections {
 export declare namespace codestarnotifications {
     interface NotificationRuleTargetArgs {
         /**
-         * The Amazon Resource Name (ARN) of the AWS Chatbot topic or AWS Chatbot client.
+         * The Amazon Resource Name (ARN) of the  topic or  client.
          */
         targetAddress: pulumi.Input<string>;
         /**
-         * The target type. Can be an Amazon Simple Notification Service topic or AWS Chatbot client.
+         * The target type. Can be an Amazon Simple Notification Service topic or  client.
          *
          * - Amazon Simple Notification Service topics are specified as `SNS` .
-         * - AWS Chatbot clients are specified as `AWSChatbotSlack` .
-         * - AWS Chatbot clients for Microsoft Teams are specified as `AWSChatbotMicrosoftTeams` .
+         * - clients are specified as `AWSChatbotSlack` .
+         * - clients for Microsoft Teams are specified as `AWSChatbotMicrosoftTeams` .
          */
         targetType: pulumi.Input<string>;
     }
@@ -18352,13 +18480,7 @@ export declare namespace connectcampaignsv2 {
 }
 export declare namespace controltower {
     interface EnabledBaselineParameterArgs {
-        /**
-         * A string denoting the parameter key.
-         */
         key?: pulumi.Input<string>;
-        /**
-         * A low-level `Document` object of any type (for example, a Java Object).
-         */
         value?: pulumi.Input<string | any | number | pulumi.Input<boolean | number | any | string>[] | boolean>;
     }
     interface EnabledControlParameterArgs {
@@ -20366,6 +20488,236 @@ export declare namespace datasync {
     }
 }
 export declare namespace datazone {
+    /**
+     * Athena Properties Input
+     */
+    interface ConnectionAthenaPropertiesInputArgs {
+        workgroupName: pulumi.Input<string>;
+    }
+    /**
+     * Authentication Configuration Input
+     */
+    interface ConnectionAuthenticationConfigurationInputArgs {
+        authenticationType?: pulumi.Input<enums.datazone.ConnectionAuthenticationType>;
+        basicAuthenticationCredentials?: pulumi.Input<inputs.datazone.ConnectionBasicAuthenticationCredentialsArgs>;
+        customAuthenticationCredentials?: pulumi.Input<{
+            [key: string]: pulumi.Input<string>;
+        }>;
+        kmsKeyArn?: pulumi.Input<string>;
+        oAuth2Properties?: pulumi.Input<inputs.datazone.ConnectionOAuth2PropertiesArgs>;
+        secretArn?: pulumi.Input<string>;
+    }
+    /**
+     * Authorization Code Properties
+     */
+    interface ConnectionAuthorizationCodePropertiesArgs {
+        authorizationCode?: pulumi.Input<string>;
+        redirectUri?: pulumi.Input<string>;
+    }
+    /**
+     * AWS Location of project
+     */
+    interface ConnectionAwsLocationArgs {
+        /**
+         * The access role of a connection.
+         */
+        accessRole?: pulumi.Input<string>;
+        /**
+         * The account ID of a connection.
+         */
+        awsAccountId?: pulumi.Input<string>;
+        /**
+         * The Region of a connection.
+         */
+        awsRegion?: pulumi.Input<string>;
+        /**
+         * The IAM connection ID of a connection.
+         */
+        iamConnectionId?: pulumi.Input<string>;
+    }
+    /**
+     * Basic Authentication Credentials
+     */
+    interface ConnectionBasicAuthenticationCredentialsArgs {
+        password?: pulumi.Input<string>;
+        userName?: pulumi.Input<string>;
+    }
+    /**
+     * Glue Connection Input
+     */
+    interface ConnectionGlueConnectionInputArgs {
+        athenaProperties?: pulumi.Input<{
+            [key: string]: pulumi.Input<string>;
+        }>;
+        authenticationConfiguration?: pulumi.Input<inputs.datazone.ConnectionAuthenticationConfigurationInputArgs>;
+        connectionProperties?: pulumi.Input<{
+            [key: string]: pulumi.Input<string>;
+        }>;
+        connectionType?: pulumi.Input<string>;
+        description?: pulumi.Input<string>;
+        matchCriteria?: pulumi.Input<string>;
+        name?: pulumi.Input<string>;
+        physicalConnectionRequirements?: pulumi.Input<inputs.datazone.ConnectionPhysicalConnectionRequirementsArgs>;
+        pythonProperties?: pulumi.Input<{
+            [key: string]: pulumi.Input<string>;
+        }>;
+        sparkProperties?: pulumi.Input<{
+            [key: string]: pulumi.Input<string>;
+        }>;
+        validateCredentials?: pulumi.Input<boolean>;
+        validateForComputeEnvironments?: pulumi.Input<pulumi.Input<string>[]>;
+    }
+    /**
+     * Glue OAuth2 Credentials
+     */
+    interface ConnectionGlueOAuth2CredentialsArgs {
+        accessToken?: pulumi.Input<string>;
+        jwtToken?: pulumi.Input<string>;
+        refreshToken?: pulumi.Input<string>;
+        userManagedClientApplicationClientSecret?: pulumi.Input<string>;
+    }
+    /**
+     * Glue Properties Input
+     */
+    interface ConnectionGluePropertiesInputArgs {
+        glueConnectionInput?: pulumi.Input<inputs.datazone.ConnectionGlueConnectionInputArgs>;
+    }
+    /**
+     * HyperPod Properties Input
+     */
+    interface ConnectionHyperPodPropertiesInputArgs {
+        clusterName: pulumi.Input<string>;
+    }
+    /**
+     * IAM Properties Input
+     */
+    interface ConnectionIamPropertiesInputArgs {
+        glueLineageSyncEnabled?: pulumi.Input<boolean>;
+    }
+    /**
+     * Lineage Sync Schedule
+     */
+    interface ConnectionLineageSyncScheduleArgs {
+        schedule?: pulumi.Input<string>;
+    }
+    /**
+     * OAuth2 Client Application
+     */
+    interface ConnectionOAuth2ClientApplicationArgs {
+        awsManagedClientApplicationReference?: pulumi.Input<string>;
+        userManagedClientApplicationClientId?: pulumi.Input<string>;
+    }
+    /**
+     * OAuth2 Properties
+     */
+    interface ConnectionOAuth2PropertiesArgs {
+        authorizationCodeProperties?: pulumi.Input<inputs.datazone.ConnectionAuthorizationCodePropertiesArgs>;
+        oAuth2ClientApplication?: pulumi.Input<inputs.datazone.ConnectionOAuth2ClientApplicationArgs>;
+        oAuth2Credentials?: pulumi.Input<inputs.datazone.ConnectionGlueOAuth2CredentialsArgs>;
+        oAuth2GrantType?: pulumi.Input<enums.datazone.ConnectionOAuth2GrantType>;
+        tokenUrl?: pulumi.Input<string>;
+        tokenUrlParametersMap?: pulumi.Input<{
+            [key: string]: pulumi.Input<string>;
+        }>;
+    }
+    /**
+     * Physical Connection Requirements
+     */
+    interface ConnectionPhysicalConnectionRequirementsArgs {
+        availabilityZone?: pulumi.Input<string>;
+        securityGroupIdList?: pulumi.Input<pulumi.Input<string>[]>;
+        subnetId?: pulumi.Input<string>;
+        subnetIdList?: pulumi.Input<pulumi.Input<string>[]>;
+    }
+    interface ConnectionPropertiesInput0PropertiesArgs {
+        athenaProperties: pulumi.Input<inputs.datazone.ConnectionAthenaPropertiesInputArgs>;
+    }
+    interface ConnectionPropertiesInput1PropertiesArgs {
+        glueProperties: pulumi.Input<inputs.datazone.ConnectionGluePropertiesInputArgs>;
+    }
+    interface ConnectionPropertiesInput2PropertiesArgs {
+        hyperPodProperties: pulumi.Input<inputs.datazone.ConnectionHyperPodPropertiesInputArgs>;
+    }
+    interface ConnectionPropertiesInput3PropertiesArgs {
+        iamProperties: pulumi.Input<inputs.datazone.ConnectionIamPropertiesInputArgs>;
+    }
+    interface ConnectionPropertiesInput4PropertiesArgs {
+        redshiftProperties: pulumi.Input<inputs.datazone.ConnectionRedshiftPropertiesInputArgs>;
+    }
+    interface ConnectionPropertiesInput5PropertiesArgs {
+        sparkEmrProperties: pulumi.Input<inputs.datazone.ConnectionSparkEmrPropertiesInputArgs>;
+    }
+    interface ConnectionPropertiesInput6PropertiesArgs {
+        sparkGlueProperties: pulumi.Input<inputs.datazone.ConnectionSparkGluePropertiesInputArgs>;
+    }
+    interface ConnectionRedshiftCredentials0PropertiesArgs {
+        secretArn: pulumi.Input<string>;
+    }
+    interface ConnectionRedshiftCredentials1PropertiesArgs {
+        usernamePassword: pulumi.Input<inputs.datazone.ConnectionUsernamePasswordArgs>;
+    }
+    /**
+     * Redshift Lineage Sync Configuration Input
+     */
+    interface ConnectionRedshiftLineageSyncConfigurationInputArgs {
+        enabled?: pulumi.Input<boolean>;
+        schedule?: pulumi.Input<inputs.datazone.ConnectionLineageSyncScheduleArgs>;
+    }
+    /**
+     * Redshift Properties Input
+     */
+    interface ConnectionRedshiftPropertiesInputArgs {
+        credentials?: pulumi.Input<inputs.datazone.ConnectionRedshiftCredentials0PropertiesArgs | inputs.datazone.ConnectionRedshiftCredentials1PropertiesArgs>;
+        databaseName?: pulumi.Input<string>;
+        host?: pulumi.Input<string>;
+        lineageSync?: pulumi.Input<inputs.datazone.ConnectionRedshiftLineageSyncConfigurationInputArgs>;
+        port?: pulumi.Input<number>;
+        storage?: pulumi.Input<inputs.datazone.ConnectionRedshiftStorageProperties0PropertiesArgs | inputs.datazone.ConnectionRedshiftStorageProperties1PropertiesArgs>;
+    }
+    interface ConnectionRedshiftStorageProperties0PropertiesArgs {
+        clusterName: pulumi.Input<string>;
+    }
+    interface ConnectionRedshiftStorageProperties1PropertiesArgs {
+        workgroupName: pulumi.Input<string>;
+    }
+    /**
+     * Spark EMR Properties Input.
+     */
+    interface ConnectionSparkEmrPropertiesInputArgs {
+        computeArn?: pulumi.Input<string>;
+        instanceProfileArn?: pulumi.Input<string>;
+        javaVirtualEnv?: pulumi.Input<string>;
+        logUri?: pulumi.Input<string>;
+        pythonVirtualEnv?: pulumi.Input<string>;
+        runtimeRole?: pulumi.Input<string>;
+        trustedCertificatesS3Uri?: pulumi.Input<string>;
+    }
+    /**
+     * Spark Glue Args.
+     */
+    interface ConnectionSparkGlueArgsArgs {
+        connection?: pulumi.Input<string>;
+    }
+    /**
+     * Spark Glue Properties Input.
+     */
+    interface ConnectionSparkGluePropertiesInputArgs {
+        additionalArgs?: pulumi.Input<inputs.datazone.ConnectionSparkGlueArgsArgs>;
+        glueConnectionName?: pulumi.Input<string>;
+        glueVersion?: pulumi.Input<string>;
+        idleTimeout?: pulumi.Input<number>;
+        javaVirtualEnv?: pulumi.Input<string>;
+        numberOfWorkers?: pulumi.Input<number>;
+        pythonVirtualEnv?: pulumi.Input<string>;
+        workerType?: pulumi.Input<string>;
+    }
+    /**
+     * The username and password to be used for authentication.
+     */
+    interface ConnectionUsernamePasswordArgs {
+        password: pulumi.Input<string>;
+        username: pulumi.Input<string>;
+    }
     /**
      * Specifies the configuration of the data source. It can be set to either glueRunConfiguration or redshiftRunConfiguration or sageMakerRunConfiguration.
      */
@@ -21328,7 +21680,7 @@ export declare namespace dynamodb {
         /**
          * Represents the non-key attribute names which will be projected into the index.
          *
-         * For local secondary indexes, the total count of `NonKeyAttributes` summed across all of the local secondary indexes, must not exceed 100. If you project the same attribute into two different indexes, this counts as two distinct attributes when determining the total.
+         * For global and local secondary indexes, the total count of `NonKeyAttributes` summed across all of the secondary indexes, must not exceed 100. If you project the same attribute into two different indexes, this counts as two distinct attributes when determining the total. This limit only applies when you specify the ProjectionType of `INCLUDE` . You still can specify the ProjectionType of `ALL` to project all attributes from the source table, even if the table has more than 100 attributes.
          */
         nonKeyAttributes?: pulumi.Input<pulumi.Input<string>[]>;
         /**
@@ -22197,7 +22549,6 @@ export declare namespace ec2 {
          *
          * - For instance types with FPGA accelerators, specify `fpga` .
          * - For instance types with GPU accelerators, specify `gpu` .
-         * - For instance types with Inference accelerators, specify `inference` .
          *
          * Default: Any accelerator type
          */
@@ -22760,6 +23111,28 @@ export declare namespace ec2 {
          */
         type: pulumi.Input<string>;
     }
+    /**
+     * Specifies the ENA Express settings for the network interface that's attached to the instance.
+     */
+    interface InstanceEnaSrdSpecificationArgs {
+        /**
+         * Specifies whether ENA Express is enabled for the network interface when you launch an instance.
+         */
+        enaSrdEnabled?: pulumi.Input<boolean>;
+        /**
+         * Configures ENA Express for UDP network traffic.
+         */
+        enaSrdUdpSpecification?: pulumi.Input<inputs.ec2.InstanceEnaSrdUdpSpecificationArgs>;
+    }
+    /**
+     * Contains ENA Express settings for UDP network traffic for the network interface that's attached to the instance.
+     */
+    interface InstanceEnaSrdUdpSpecificationArgs {
+        /**
+         * Indicates whether UDP traffic uses ENA Express for your instance.
+         */
+        enaSrdUdpEnabled?: pulumi.Input<boolean>;
+    }
     interface InstanceIpv6AddressArgs {
         /**
          * The IPv6 address.
@@ -22807,6 +23180,10 @@ export declare namespace ec2 {
          * The position of the network interface in the attachment order. A primary network interface has a device index of 0.
          */
         deviceIndex: pulumi.Input<string>;
+        /**
+         * Configures ENA Express for UDP network traffic.
+         */
+        enaSrdSpecification?: pulumi.Input<inputs.ec2.InstanceEnaSrdSpecificationArgs>;
         /**
          * The IDs of the security groups for the network interface.
          */
@@ -24280,6 +24657,19 @@ export declare namespace ec2 {
          */
         hostnameType?: pulumi.Input<string>;
     }
+    /**
+     * BGP Options
+     */
+    interface RouteServerPeerBgpOptionsArgs {
+        /**
+         * BGP ASN of the Route Server Peer
+         */
+        peerAsn?: pulumi.Input<number>;
+        /**
+         * BGP Liveness Detection
+         */
+        peerLivenessDetection?: pulumi.Input<enums.ec2.RouteServerPeerBgpOptionsPeerLivenessDetection>;
+    }
     interface SecurityGroupEgressArgs {
         /**
          * The IPv4 address range, in CIDR format.
@@ -24657,7 +25047,6 @@ export declare namespace ec2 {
          *
          * - For instance types with FPGA accelerators, specify `fpga` .
          * - For instance types with GPU accelerators, specify `gpu` .
-         * - For instance types with Inference accelerators, specify `inference` .
          *
          * Default: Any accelerator type
          */
@@ -26176,7 +26565,6 @@ export declare namespace ecs {
          *  Consider the following when you set this value:
          *   +  When you use ``create-service`` or ``update-service``, the default is ``DISABLED``.
          *   +  When the service ``deploymentController`` is ``ECS``, the value must be ``DISABLED``.
-         *   +  When you use ``create-service`` or ``update-service``, the default is ``ENABLED``.
          */
         assignPublicIp?: pulumi.Input<enums.ecs.ServiceAwsVpcConfigurationAssignPublicIp>;
         /**
@@ -28790,7 +29178,7 @@ export declare namespace elasticloadbalancingv2 {
      */
     interface ListenerMutualAuthenticationArgs {
         /**
-         * Indicates whether trust store CA certificate names are advertised. The default value is ``off``.
+         * Indicates whether trust store CA certificate names are advertised.
          */
         advertiseTrustStoreCaNames?: pulumi.Input<string>;
         /**
@@ -28798,7 +29186,7 @@ export declare namespace elasticloadbalancingv2 {
          */
         ignoreClientCertificateExpiry?: pulumi.Input<boolean>;
         /**
-         * The client certificate handling method. The possible values are ``off``, ``passthrough``, and ``verify``. The default value is ``off``.
+         * The client certificate handling method. Options are ``off``, ``passthrough`` or ``verify``. The default value is ``off``.
          */
         mode?: pulumi.Input<string>;
         /**
@@ -32342,7 +32730,7 @@ export declare namespace gamelift {
          * A custom sequence to use when prioritizing where to place new game sessions. Each priority type is listed once.
          *
          * - `LATENCY` -- Amazon GameLift Servers prioritizes locations where the average player latency is lowest. Player latency data is provided in each game session placement request.
-         * - `COST` -- Amazon GameLift Servers prioritizes destinations with the lowest current hosting costs. Cost is evaluated based on the location, instance type, and fleet type (Spot or On-Demand) of each destination in the queue.
+         * - `COST` -- Amazon GameLift Servers prioritizes queue destinations with the lowest current hosting costs. Cost is evaluated based on the destination's location, instance type, and fleet type (Spot or On-Demand).
          * - `DESTINATION` -- Amazon GameLift Servers prioritizes based on the list order of destinations in the queue configuration.
          * - `LOCATION` -- Amazon GameLift Servers prioritizes based on the provided order of locations, as defined in `LocationOrder` .
          */
@@ -34341,10 +34729,6 @@ export declare namespace imagebuilder {
          * region
          */
         region: pulumi.Input<string>;
-        /**
-         * The SSM parameter configurations to use for AMI distribution.
-         */
-        ssmParameterConfigurations?: pulumi.Input<any[]>;
     }
     /**
      * The Windows faster-launching configuration to use for AMI distribution.
@@ -38735,6 +39119,36 @@ export declare namespace iotsitewise {
          */
         unit?: pulumi.Input<string>;
     }
+    interface DatasetKendraSourceDetailArgs {
+        /**
+         * The knowledgeBaseArn details for the Kendra dataset source.
+         */
+        knowledgeBaseArn: pulumi.Input<string>;
+        /**
+         * The roleARN details for the Kendra dataset source.
+         */
+        roleArn: pulumi.Input<string>;
+    }
+    interface DatasetSourceArgs {
+        /**
+         * The details of the dataset source associated with the dataset.
+         */
+        sourceDetail?: pulumi.Input<inputs.iotsitewise.DatasetSourceDetailArgs>;
+        /**
+         * The format of the dataset source associated with the dataset.
+         */
+        sourceFormat: pulumi.Input<enums.iotsitewise.DatasetSourceSourceFormat>;
+        /**
+         * The type of data source for the dataset.
+         */
+        sourceType: pulumi.Input<enums.iotsitewise.DatasetSourceSourceType>;
+    }
+    interface DatasetSourceDetailArgs {
+        /**
+         * Contains details about the Kendra dataset source.
+         */
+        kendra?: pulumi.Input<inputs.iotsitewise.DatasetKendraSourceDetailArgs>;
+    }
     /**
      * Contains a summary of a gateway capability configuration.
      */
@@ -42624,9 +43038,6 @@ export declare namespace kinesisfirehose {
          * The private key used to encrypt your Snowflake client. For information, see [Using Key Pair Authentication & Key Rotation](https://docs.aws.amazon.com/https://docs.snowflake.com/en/user-guide/data-load-snowpipe-streaming-configuration#using-key-pair-authentication-key-rotation) .
          */
         privateKey?: pulumi.Input<string>;
-        /**
-         * Specifies configuration for Snowflake.
-         */
         processingConfiguration?: pulumi.Input<inputs.kinesisfirehose.DeliveryStreamProcessingConfigurationArgs>;
         /**
          * The time period where Firehose will retry sending data to the chosen HTTP endpoint.
@@ -43143,10 +43554,14 @@ export declare namespace lambda {
     interface EventInvokeConfigDestinationConfigArgs {
         /**
          * The destination configuration for failed invocations.
+         *
+         * > When using an Amazon SQS queue as a destination, FIFO queues cannot be used.
          */
         onFailure?: pulumi.Input<inputs.lambda.EventInvokeConfigOnFailureArgs>;
         /**
          * The destination configuration for successful invocations.
+         *
+         * > When using an Amazon SQS queue as a destination, FIFO queues cannot be used.
          */
         onSuccess?: pulumi.Input<inputs.lambda.EventInvokeConfigOnSuccessArgs>;
     }
@@ -43726,6 +44141,40 @@ export declare namespace lex {
          */
         maxLengthMs: pulumi.Input<number>;
     }
+    /**
+     * Contains information about the Amazon Bedrock model used to interpret the prompt used in descriptive bot building.
+     */
+    interface BotBedrockModelSpecificationArgs {
+        /**
+         * The guardrail configuration in the Bedrock model specification details.
+         */
+        bedrockGuardrailConfiguration?: pulumi.Input<inputs.lex.BotBedrockModelSpecificationBedrockGuardrailConfigurationPropertiesArgs>;
+        /**
+         * The custom prompt used in the Bedrock model specification details.
+         */
+        bedrockModelCustomPrompt?: pulumi.Input<string>;
+        /**
+         * The Bedrock trace status in the Bedrock model specification details.
+         */
+        bedrockTraceStatus?: pulumi.Input<enums.lex.BotBedrockModelSpecificationBedrockTraceStatus>;
+        /**
+         * The ARN of the foundation model used in descriptive bot building.
+         */
+        modelArn: pulumi.Input<string>;
+    }
+    /**
+     * The guardrail configuration in the Bedrock model specification details.
+     */
+    interface BotBedrockModelSpecificationBedrockGuardrailConfigurationPropertiesArgs {
+        /**
+         * The unique guardrail id for the Bedrock guardrail configuration.
+         */
+        bedrockGuardrailIdentifier?: pulumi.Input<string>;
+        /**
+         * The guardrail version for the Bedrock guardrail configuration.
+         */
+        bedrockGuardrailVersion?: pulumi.Input<string>;
+    }
     /**
      * A button to use on a response card used to gather slot values from a user.
      */
@@ -44165,6 +44614,7 @@ export declare namespace lex {
          * A unique identifier for the built-in intent to base this intent on.
          */
         parentIntentSignature?: pulumi.Input<string>;
+        qnAIntentConfiguration?: pulumi.Input<inputs.lex.BotQnAIntentConfigurationArgs>;
         /**
          * A sample utterance that invokes an intent or respond to a slot elicitation prompt.
          */
@@ -44505,6 +44955,115 @@ export declare namespace lex {
             [key: string]: pulumi.Input<inputs.lex.BotPromptAttemptSpecificationArgs>;
         }>;
     }
+    /**
+     * Details about the the configuration of the built-in Amazon.QnAIntent.
+     */
+    interface BotQnAIntentConfigurationArgs {
+        bedrockModelConfiguration: pulumi.Input<inputs.lex.BotBedrockModelSpecificationArgs>;
+        /**
+         * Contains details about the configuration of the data source used for the AMAZON.QnAIntent.
+         */
+        dataSourceConfiguration: pulumi.Input<inputs.lex.BotQnAIntentConfigurationDataSourceConfigurationPropertiesArgs>;
+    }
+    /**
+     * Contains details about the configuration of the data source used for the AMAZON.QnAIntent.
+     */
+    interface BotQnAIntentConfigurationDataSourceConfigurationPropertiesArgs {
+        /**
+         * Contains details about the configuration of a Amazon Bedrock knowledge base.
+         */
+        bedrockKnowledgeStoreConfiguration?: pulumi.Input<inputs.lex.BotQnAIntentConfigurationDataSourceConfigurationPropertiesBedrockKnowledgeStoreConfigurationPropertiesArgs>;
+        kendraConfiguration?: pulumi.Input<inputs.lex.BotQnAKendraConfigurationArgs>;
+        /**
+         * Contains details about the configuration of the Amazon OpenSearch Service database used for the AMAZON.QnAIntent.
+         */
+        opensearchConfiguration?: pulumi.Input<inputs.lex.BotQnAIntentConfigurationDataSourceConfigurationPropertiesOpensearchConfigurationPropertiesArgs>;
+    }
+    /**
+     * Contains details about the configuration of a Amazon Bedrock knowledge base.
+     */
+    interface BotQnAIntentConfigurationDataSourceConfigurationPropertiesBedrockKnowledgeStoreConfigurationPropertiesArgs {
+        /**
+         * The base ARN of the knowledge base used.
+         */
+        bedrockKnowledgeBaseArn?: pulumi.Input<string>;
+        /**
+         * Contains the names of the fields used for an exact response to the user.
+         */
+        bkbExactResponseFields?: pulumi.Input<inputs.lex.BotQnAIntentConfigurationDataSourceConfigurationPropertiesBedrockKnowledgeStoreConfigurationPropertiesBkbExactResponseFieldsPropertiesArgs>;
+        /**
+         * Specifies whether to return an exact response, or to return an answer generated by the model, using the fields you specify from the database.
+         */
+        exactResponse?: pulumi.Input<boolean>;
+    }
+    /**
+     * Contains the names of the fields used for an exact response to the user.
+     */
+    interface BotQnAIntentConfigurationDataSourceConfigurationPropertiesBedrockKnowledgeStoreConfigurationPropertiesBkbExactResponseFieldsPropertiesArgs {
+        /**
+         * The answer field used for an exact response from Bedrock Knowledge Store.
+         */
+        answerField?: pulumi.Input<string>;
+    }
+    /**
+     * Contains details about the configuration of the Amazon OpenSearch Service database used for the AMAZON.QnAIntent.
+     */
+    interface BotQnAIntentConfigurationDataSourceConfigurationPropertiesOpensearchConfigurationPropertiesArgs {
+        /**
+         * The endpoint of the Amazon OpenSearch Service domain.
+         */
+        domainEndpoint?: pulumi.Input<string>;
+        /**
+         * Specifies whether to return an exact response or to return an answer generated by the model using the fields you specify from the database.
+         */
+        exactResponse?: pulumi.Input<boolean>;
+        /**
+         * Contains the names of the fields used for an exact response to the user.
+         */
+        exactResponseFields?: pulumi.Input<inputs.lex.BotQnAIntentConfigurationDataSourceConfigurationPropertiesOpensearchConfigurationPropertiesExactResponseFieldsPropertiesArgs>;
+        /**
+         * List of fields to include
+         */
+        includeFields?: pulumi.Input<pulumi.Input<string>[]>;
+        /**
+         * The name of the Amazon OpenSearch Service index.
+         */
+        indexName?: pulumi.Input<string>;
+    }
+    /**
+     * Contains the names of the fields used for an exact response to the user.
+     */
+    interface BotQnAIntentConfigurationDataSourceConfigurationPropertiesOpensearchConfigurationPropertiesExactResponseFieldsPropertiesArgs {
+        /**
+         * The name of the field that contains the answer to the query made to the OpenSearch Service database.
+         */
+        answerField?: pulumi.Input<string>;
+        /**
+         * The name of the field that contains the query made to the OpenSearch Service database.
+         */
+        questionField?: pulumi.Input<string>;
+    }
+    /**
+     * Contains details about the configuration of the Amazon Kendra index used for the AMAZON.QnAIntent.
+     */
+    interface BotQnAKendraConfigurationArgs {
+        /**
+         * Specifies whether to return an exact response from the Amazon Kendra index or to let the Amazon Bedrock model you select generate a response based on the results.
+         */
+        exactResponse: pulumi.Input<boolean>;
+        /**
+         * The ARN of the Amazon Kendra index to use.
+         */
+        kendraIndex: pulumi.Input<string>;
+        /**
+         * Contains the Amazon Kendra filter string to use if enabled.
+         */
+        queryFilterString?: pulumi.Input<string>;
+        /**
+         * Specifies whether to enable an Amazon Kendra filter string or not.
+         */
+        queryFilterStringEnabled: pulumi.Input<boolean>;
+    }
     /**
      * Parameter used to create a replication of the source bot in the secondary region.
      */
@@ -45503,18 +46062,38 @@ export declare namespace location {
          * - *Map actions*
          *
          * - `geo:GetMap*` - Allows all actions needed for map rendering.
+         * - *Enhanced Maps actions*
+         *
+         * - `geo-maps:GetTile` - Allows getting map tiles for rendering.
+         * - `geo-maps:GetStaticMap` - Allows getting static map images.
          * - *Place actions*
          *
-         * - `geo:SearchPlaceIndexForText` - Allows geocoding.
-         * - `geo:SearchPlaceIndexForPosition` - Allows reverse geocoding.
-         * - `geo:SearchPlaceIndexForSuggestions` - Allows generating suggestions from text.
-         * - `geo:GetPlace` - Allows finding a place by place ID.
+         * - `geo:SearchPlaceIndexForText` - Allows finding geo coordinates of a known place.
+         * - `geo:SearchPlaceIndexForPosition` - Allows getting nearest address to geo coordinates.
+         * - `geo:SearchPlaceIndexForSuggestions` - Allows suggestions based on an incomplete or misspelled query.
+         * - `geo:GetPlace` - Allows getting details of a place.
+         * - *Enhanced Places actions*
+         *
+         * - `geo-places:Autcomplete` - Allows auto-completion of search text.
+         * - `geo-places:Geocode` - Allows finding geo coordinates of a known place.
+         * - `geo-places:GetPlace` - Allows getting details of a place.
+         * - `geo-places:ReverseGeocode` - Allows getting nearest address to geo coordinates.
+         * - `geo-places:SearchNearby` - Allows category based places search around geo coordinates.
+         * - `geo-places:SearchText` - Allows place or address search based on free-form text.
+         * - `geo-places:Suggest` - Allows suggestions based on an incomplete or misspelled query.
          * - *Route actions*
          *
          * - `geo:CalculateRoute` - Allows point to point routing.
-         * - `geo:CalculateRouteMatrix` - Allows calculating a matrix of routes.
+         * - `geo:CalculateRouteMatrix` - Allows matrix routing.
+         * - *Enhanced Routes actions*
+         *
+         * - `geo-routes:CalculateIsolines` - Allows isoline calculation.
+         * - `geo-routes:CalculateRoutes` - Allows point to point routing.
+         * - `geo-routes:CalculateRouteMatrix` - Allows matrix routing.
+         * - `geo-routes:OptimizeWaypoints` - Allows computing the best sequence of waypoints.
+         * - `geo-routes:SnapToRoads` - Allows snapping GPS points to a likely route.
          *
-         * > You must use these strings exactly. For example, to provide access to map rendering, the only valid action is `geo:GetMap*` as an input to the list. `["geo:GetMap*"]` is valid but `["geo:GetMapTile"]` is not. Similarly, you cannot use `["geo:SearchPlaceIndexFor*"]` - you must list each of the Place actions separately.
+         * > You must use these strings exactly. For example, to provide access to map rendering, the only valid action is `geo:GetMap*` as an input to the list. `["geo:GetMap*"]` is valid but `["geo:GetTile"]` is not. Similarly, you cannot use `["geo:SearchPlaceIndexFor*"]` - you must list each of the Place actions separately.
          */
         allowActions: pulumi.Input<pulumi.Input<string>[]>;
         /**
@@ -46887,6 +47466,40 @@ export declare namespace mediaconnect {
          */
         mediaStreamName: pulumi.Input<string>;
     }
+    /**
+     * Specifies the configuration settings for NDI outputs. Required when the flow includes NDI outputs.
+     */
+    interface FlowNdiConfigArgs {
+        /**
+         * A prefix for the names of the NDI sources that the flow creates. If a custom name isn't specified, MediaConnect generates a unique 12-character ID as the prefix.
+         */
+        machineName?: pulumi.Input<string>;
+        /**
+         * A list of up to three NDI discovery server configurations. While not required by the API, this configuration is necessary for NDI functionality to work properly.
+         */
+        ndiDiscoveryServers?: pulumi.Input<pulumi.Input<inputs.mediaconnect.FlowNdiDiscoveryServerConfigArgs>[]>;
+        /**
+         * A setting that controls whether NDI outputs can be used in the flow. Must be ENABLED to add NDI outputs. Default is DISABLED.
+         */
+        ndiState?: pulumi.Input<enums.mediaconnect.FlowNdiConfigNdiState>;
+    }
+    /**
+     * Specifies the configuration settings for individual NDI discovery servers. A maximum of 3 servers is allowed.
+     */
+    interface FlowNdiDiscoveryServerConfigArgs {
+        /**
+         * The unique network address of the NDI discovery server.
+         */
+        discoveryServerAddress: pulumi.Input<string>;
+        /**
+         * The port for the NDI discovery server. Defaults to 5959 if a custom port isn't specified.
+         */
+        discoveryServerPort?: pulumi.Input<number>;
+        /**
+         * The identifier for the Virtual Private Cloud (VPC) network interface used by the flow.
+         */
+        vpcInterfaceAdapter: pulumi.Input<string>;
+    }
     /**
      * The definition of a media stream that is associated with the output.
      */
@@ -49481,9 +50094,9 @@ export declare namespace networkfirewall {
     }
     interface RuleGroupMatchAttributesArgs {
         /**
-         * The destination ports to inspect for. If not specified, this matches with any destination port. This setting is only used for protocols 6 (TCP) and 17 (UDP).
+         * The destination port to inspect for. You can specify an individual port, for example `1994` and you can specify a port range, for example `1990:1994` . To match with any port, specify `ANY` .
          *
-         * You can specify individual ports, for example `1994` and you can specify port ranges, for example `1990:1994` .
+         * This setting is only used for protocols 6 (TCP) and 17 (UDP).
          */
         destinationPorts?: pulumi.Input<pulumi.Input<inputs.networkfirewall.RuleGroupPortRangeArgs>[]>;
         /**
@@ -49491,13 +50104,15 @@ export declare namespace networkfirewall {
          */
         destinations?: pulumi.Input<pulumi.Input<inputs.networkfirewall.RuleGroupAddressArgs>[]>;
         /**
-         * The protocols to inspect for, specified using each protocol's assigned internet protocol number (IANA). If not specified, this matches with any protocol.
+         * The protocols to inspect for, specified using the assigned internet protocol number (IANA) for each protocol. If not specified, this matches with any protocol.
          */
         protocols?: pulumi.Input<pulumi.Input<number>[]>;
         /**
-         * The source ports to inspect for. If not specified, this matches with any source port. This setting is only used for protocols 6 (TCP) and 17 (UDP).
+         * The source port to inspect for. You can specify an individual port, for example `1994` and you can specify a port range, for example `1990:1994` . To match with any port, specify `ANY` .
          *
-         * You can specify individual ports, for example `1994` and you can specify port ranges, for example `1990:1994` .
+         * If not specified, this matches with any source port.
+         *
+         * This setting is only used for protocols 6 (TCP) and 17 (UDP).
          */
         sourcePorts?: pulumi.Input<pulumi.Input<inputs.networkfirewall.RuleGroupPortRangeArgs>[]>;
         /**
@@ -49767,8 +50382,9 @@ export declare namespace networkfirewall {
          */
         destinations?: pulumi.Input<pulumi.Input<inputs.networkfirewall.TlsInspectionConfigurationAddressArgs>[]>;
         /**
-         * The protocols to decrypt for inspection, specified using each protocol's assigned internet protocol number
-         * (IANA). Network Firewall currently supports only TCP.
+         * The protocols to inspect for, specified using the assigned internet protocol number (IANA) for each protocol. If not specified, this matches with any protocol.
+         *
+         * Network Firewall currently supports only TCP.
          */
         protocols?: pulumi.Input<pulumi.Input<number>[]>;
         /**
@@ -50342,7 +50958,7 @@ export declare namespace nimblestudio {
 export declare namespace oam {
     interface LinkConfigurationArgs {
         /**
-         * Use this structure to filter which log groups are to share log events from this source account to the monitoring account.
+         * Use this structure to filter which log groups are to send log events from the source account to the monitoring account.
          */
         logGroupConfiguration?: pulumi.Input<inputs.oam.LinkFilterArgs>;
         /**
@@ -50351,32 +50967,6 @@ export declare namespace oam {
         metricConfiguration?: pulumi.Input<inputs.oam.LinkFilterArgs>;
     }
     interface LinkFilterArgs {
-        /**
-         * When used in `MetricConfiguration` this field specifies which metric namespaces are to be shared with the monitoring account
-         *
-         * When used in `LogGroupConfiguration` this field specifies which log groups are to share their log events with the monitoring account. Use the term `LogGroupName` and one or more of the following operands.
-         *
-         * Use single quotation marks (') around log group names and metric namespaces.
-         *
-         * The matching of log group names and metric namespaces is case sensitive. Each filter has a limit of five conditional operands. Conditional operands are `AND` and `OR` .
-         *
-         * - `=` and `!=`
-         * - `AND`
-         * - `OR`
-         * - `LIKE` and `NOT LIKE` . These can be used only as prefix searches. Include a `%` at the end of the string that you want to search for and include.
-         * - `IN` and `NOT IN` , using parentheses `( )`
-         *
-         * Examples:
-         *
-         * - `Namespace NOT LIKE 'AWS/%'` includes only namespaces that don't start with `AWS/` , such as custom namespaces.
-         * - `Namespace IN ('AWS/EC2', 'AWS/ELB', 'AWS/S3')` includes only the metrics in the EC2, Elastic Load Balancing , and Amazon S3 namespaces.
-         * - `Namespace = 'AWS/EC2' OR Namespace NOT LIKE 'AWS/%'` includes only the EC2 namespace and your custom namespaces.
-         * - `LogGroupName IN ('This-Log-Group', 'Other-Log-Group')` includes only the log groups with names `This-Log-Group` and `Other-Log-Group` .
-         * - `LogGroupName NOT IN ('Private-Log-Group', 'Private-Log-Group-2')` includes all log groups except the log groups with names `Private-Log-Group` and `Private-Log-Group-2` .
-         * - `LogGroupName LIKE 'aws/lambda/%' OR LogGroupName LIKE 'AWSLogs%'` includes all log groups that have names that start with `aws/lambda/` or `AWSLogs` .
-         *
-         * > If you are updating a link that uses filters, you can specify `*` as the only value for the `filter` parameter to delete the filter and share all log groups with the monitoring account.
-         */
         filter: pulumi.Input<string>;
     }
 }
@@ -50526,8 +51116,14 @@ export declare namespace opensearchserverless {
         m?: pulumi.Input<number>;
     }
     interface IndexSettingsArgs {
+        /**
+         * Index settings.
+         */
         index?: pulumi.Input<inputs.opensearchserverless.IndexSettingsIndexPropertiesArgs>;
     }
+    /**
+     * Index settings.
+     */
     interface IndexSettingsIndexPropertiesArgs {
         /**
          * Enable/disable k-nearest neighbor search capability
@@ -50882,25 +51478,25 @@ export declare namespace opensearchservice {
     }
     interface DomainNodeConfigArgs {
         /**
-         * The number of nodes of a particular node type in the cluster.
+         * The number of nodes of a specific type within the cluster.
          */
         count?: pulumi.Input<number>;
         /**
-         * A boolean that indicates whether a particular node type is enabled or not.
+         * A boolean value indicating whether a specific node type is active or inactive.
          */
         enabled?: pulumi.Input<boolean>;
         /**
-         * The instance type of a particular node type in the cluster.
+         * The instance type of a particular node within the cluster.
          */
         type?: pulumi.Input<string>;
     }
     interface DomainNodeOptionArgs {
         /**
-         * Container for specifying configuration of any node type.
+         * Configuration options for defining the setup of any node type.
          */
         nodeConfig?: pulumi.Input<inputs.opensearchservice.DomainNodeConfigArgs>;
         /**
-         * Container for node type like coordinating.
+         * Defines the type of node, such as coordinating nodes.
          */
         nodeType?: pulumi.Input<enums.opensearchservice.DomainNodeOptionNodeType>;
     }
@@ -51231,6 +51827,9 @@ export declare namespace paymentcryptography {
 }
 export declare namespace pcaconnectorad {
     interface ConnectorVpcInformationArgs {
+        /**
+         * The VPC IP address type.
+         */
         ipAddressType?: pulumi.Input<enums.pcaconnectorad.ConnectorVpcInformationIpAddressType>;
         /**
          * The security groups used with the connector. You can use a maximum of 4 security groups with a connector.
@@ -71090,7 +71689,7 @@ export declare namespace quicksight {
         /**
          * <p>Calculated columns to create.</p>
          */
-        columns: pulumi.Input<pulumi.Input<inputs.quicksight.DataSetCalculatedColumnArgs>[]>;
+        columns?: pulumi.Input<pulumi.Input<inputs.quicksight.DataSetCalculatedColumnArgs>[]>;
     }
     /**
      * <p>A physical table type built from the results of the custom SQL query.</p>
@@ -71482,10 +72081,26 @@ export declare namespace quicksight {
          */
         incrementalRefresh: pulumi.Input<inputs.quicksight.DataSetIncrementalRefreshArgs>;
     }
+    interface DataSetRefreshFailureConfigurationArgs {
+        /**
+         * The email alert configuration for a dataset refresh failure.
+         */
+        emailAlert?: pulumi.Input<inputs.quicksight.DataSetRefreshFailureEmailAlertArgs>;
+    }
+    interface DataSetRefreshFailureEmailAlertArgs {
+        /**
+         * The status value that determines if email alerts are sent.
+         */
+        alertStatus?: pulumi.Input<enums.quicksight.DataSetRefreshFailureAlertStatus>;
+    }
     /**
      * <p>The refresh properties of a dataset.</p>
      */
     interface DataSetRefreshPropertiesArgs {
+        /**
+         * The failure configuration for a dataset.
+         */
+        failureConfiguration?: pulumi.Input<inputs.quicksight.DataSetRefreshFailureConfigurationArgs>;
         /**
          * The refresh configuration for a dataset.
          */
@@ -71527,7 +72142,7 @@ export declare namespace quicksight {
         /**
          * <p>The new name for the column.</p>
          */
-        newColumnName: pulumi.Input<string>;
+        newColumnName?: pulumi.Input<string>;
     }
     /**
      * <p>Permission for the resource.</p>
@@ -71640,11 +72255,11 @@ export declare namespace quicksight {
          *             <p>For files that aren't JSON, only <code>STRING</code> data types are supported in input columns.</p>
          *          </note>
          */
-        inputColumns: pulumi.Input<pulumi.Input<inputs.quicksight.DataSetInputColumnArgs>[]>;
+        inputColumns?: pulumi.Input<pulumi.Input<inputs.quicksight.DataSetInputColumnArgs>[]>;
         /**
          * Information about the format for the S3 source file or files.
          */
-        uploadSettings?: any;
+        uploadSettings?: pulumi.Input<inputs.quicksight.DataSetUploadSettingsArgs>;
     }
     /**
      * <p>A string parameter for a dataset.</p>
@@ -71743,6 +72358,31 @@ export declare namespace quicksight {
          */
         tagNames: pulumi.Input<pulumi.Input<enums.quicksight.DataSetColumnTagName>[]>;
     }
+    /**
+     * <p>Information about the format for a source file or files.</p>
+     */
+    interface DataSetUploadSettingsArgs {
+        /**
+         * <p>Whether the file has a header row, or the files each have a header row.</p>
+         */
+        containsHeader?: pulumi.Input<boolean>;
+        /**
+         * <p>The delimiter between values in the file.</p>
+         */
+        delimiter?: pulumi.Input<string>;
+        /**
+         * File format.
+         */
+        format?: pulumi.Input<enums.quicksight.DataSetFileFormat>;
+        /**
+         * <p>A row number to start reading data from.</p>
+         */
+        startFromRow?: pulumi.Input<number>;
+        /**
+         * Text qualifier.
+         */
+        textQualifier?: pulumi.Input<enums.quicksight.DataSetTextQualifier>;
+    }
     /**
      * <p>The usage configuration to apply to child datasets that reference this dataset as a source.</p>
      */
@@ -81552,18 +82192,6 @@ export declare namespace rds {
          */
         secretArn?: pulumi.Input<string>;
     }
-    /**
-     * The ``ReadEndpoint`` return value specifies the reader endpoint for the DB cluster.
-     *  The reader endpoint for a DB cluster load-balances connections across the Aurora Replicas that are available in a DB cluster. As clients request new connections to the reader endpoint, Aurora distributes the connection requests among the Aurora Replicas in the DB cluster. This functionality can help balance your read workload across multiple Aurora Replicas in your DB cluster.
-     *  If a failover occurs, and the Aurora Replica that you are connected to is promoted to be the primary instance, your connection is dropped. To continue sending your read workload to other Aurora Replicas in the cluster, you can then reconnect to the reader endpoint.
-     *  For more information about Aurora endpoints, see [Amazon Aurora connection management](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/Aurora.Overview.Endpoints.html) in the *Amazon Aurora User Guide*.
-     */
-    interface DbClusterReadEndpointArgs {
-        /**
-         * The host address of the reader endpoint.
-         */
-        address?: pulumi.Input<string>;
-    }
     /**
      * The ``ScalingConfiguration`` property type specifies the scaling configuration of an Aurora Serverless v1 DB cluster.
      *  For more information, see [Using Amazon Aurora Serverless](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/aurora-serverless.html) in the *Amazon Aurora User Guide*.
@@ -81632,20 +82260,6 @@ export declare namespace rds {
          */
         secondsUntilAutoPause?: pulumi.Input<number>;
     }
-    /**
-     * The details of the DB instance’s server certificate.
-     *  For more information, see [Using SSL/TLS to encrypt a connection to a DB instance](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/UsingWithRDS.SSL.html) in the *Amazon RDS User Guide* and [Using SSL/TLS to encrypt a connection to a DB cluster](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/UsingWithRDS.SSL.html) in the *Amazon Aurora User Guide*.
-     */
-    interface DbInstanceCertificateDetailsArgs {
-        /**
-         * The CA identifier of the CA certificate used for the DB instance's server certificate.
-         */
-        caIdentifier?: pulumi.Input<string>;
-        /**
-         * The expiration date of the DB instance’s server certificate.
-         */
-        validTill?: pulumi.Input<string>;
-    }
     /**
      * Information about an AWS Identity and Access Management (IAM) role that is associated with a DB instance.
      */
@@ -81659,28 +82273,6 @@ export declare namespace rds {
          */
         roleArn: pulumi.Input<string>;
     }
-    /**
-     * This data type represents the information you need to connect to an Amazon RDS DB instance. This data type is used as a response element in the following actions:
-     *   +   ``CreateDBInstance``
-     *   +   ``DescribeDBInstances``
-     *   +   ``DeleteDBInstance``
-     *
-     *  For the data structure that represents Amazon Aurora DB cluster endpoints, see ``DBClusterEndpoint``.
-     */
-    interface DbInstanceEndpointArgs {
-        /**
-         * Specifies the DNS address of the DB instance.
-         */
-        address?: pulumi.Input<string>;
-        /**
-         * Specifies the ID that Amazon Route 53 assigns when you create a hosted zone.
-         */
-        hostedZoneId?: pulumi.Input<string>;
-        /**
-         * Specifies the port that the database engine is listening on.
-         */
-        port?: pulumi.Input<string>;
-    }
     /**
      * The ``MasterUserSecret`` return value specifies the secret managed by RDS in AWS Secrets Manager for the master user password.
      *  For more information, see [Password management with Secrets Manager](https://docs.aws.amazon.com/AmazonRDS/latest/UserGuide/rds-secrets-manager.html) in the *Amazon RDS User Guide* and [Password management with Secrets Manager](https://docs.aws.amazon.com/AmazonRDS/latest/AuroraUserGuide/rds-secrets-manager.html) in the *Amazon Aurora User Guide.*
@@ -81859,6 +82451,72 @@ export declare namespace redshiftserverless {
          */
         snapshotRetentionPeriod?: pulumi.Input<number>;
     }
+    interface WorkgroupArgs {
+        /**
+         * The base data warehouse capacity of the workgroup in Redshift Processing Units (RPUs).
+         */
+        baseCapacity?: pulumi.Input<number>;
+        /**
+         * An array of parameters to set for advanced control over a database. The options are `auto_mv` , `datestyle` , `enable_case_sensitive_identifier` , `enable_user_activity_logging` , `query_group` , `search_path` , `require_ssl` , `use_fips_ssl` , and query monitoring metrics that let you define performance boundaries. For more information about query monitoring rules and available metrics, see [Query monitoring metrics for Amazon Redshift Serverless](https://docs.aws.amazon.com/redshift/latest/dg/cm-c-wlm-query-monitoring-rules.html#cm-c-wlm-query-monitoring-metrics-serverless) .
+         */
+        configParameters?: pulumi.Input<pulumi.Input<inputs.redshiftserverless.WorkgroupConfigParameterArgs>[]>;
+        /**
+         * The creation date of the workgroup.
+         */
+        creationDate?: pulumi.Input<string>;
+        /**
+         * The endpoint that is created from the workgroup.
+         */
+        endpoint?: pulumi.Input<inputs.redshiftserverless.WorkgroupEndpointArgs>;
+        /**
+         * The value that specifies whether to enable enhanced virtual private cloud (VPC) routing, which forces Amazon Redshift Serverless to route traffic through your VPC.
+         */
+        enhancedVpcRouting?: pulumi.Input<boolean>;
+        /**
+         * The maximum data-warehouse capacity Amazon Redshift Serverless uses to serve queries. The max capacity is specified in RPUs.
+         */
+        maxCapacity?: pulumi.Input<number>;
+        /**
+         * The namespace the workgroup is associated with.
+         */
+        namespaceName?: pulumi.Input<string>;
+        /**
+         * An object that represents the price performance target settings for the workgroup.
+         */
+        pricePerformanceTarget?: pulumi.Input<inputs.redshiftserverless.WorkgroupPerformanceTargetArgs>;
+        /**
+         * A value that specifies whether the workgroup can be accessible from a public network.
+         */
+        publiclyAccessible?: pulumi.Input<boolean>;
+        /**
+         * An array of security group IDs to associate with the workgroup.
+         */
+        securityGroupIds?: pulumi.Input<pulumi.Input<string>[]>;
+        /**
+         * The status of the workgroup.
+         */
+        status?: pulumi.Input<enums.redshiftserverless.WorkgroupStatus>;
+        /**
+         * An array of subnet IDs the workgroup is associated with.
+         */
+        subnetIds?: pulumi.Input<pulumi.Input<string>[]>;
+        /**
+         * The name of the track for the workgroup.
+         */
+        trackName?: pulumi.Input<string>;
+        /**
+         * The Amazon Resource Name (ARN) that links to the workgroup.
+         */
+        workgroupArn?: pulumi.Input<string>;
+        /**
+         * The unique identifier of the workgroup.
+         */
+        workgroupId?: pulumi.Input<string>;
+        /**
+         * The name of the workgroup.
+         */
+        workgroupName?: pulumi.Input<string>;
+    }
     interface WorkgroupConfigParameterArgs {
         /**
          * The key of the parameter. The options are `datestyle` , `enable_user_activity_logging` , `query_group` , `search_path` , `max_query_execution_time` , and `require_ssl` .
@@ -81869,6 +82527,38 @@ export declare namespace redshiftserverless {
          */
         parameterValue?: pulumi.Input<string>;
     }
+    interface WorkgroupEndpointArgs {
+        /**
+         * The DNS address of the VPC endpoint.
+         */
+        address?: pulumi.Input<string>;
+        /**
+         * The port that Amazon Redshift Serverless listens on.
+         */
+        port?: pulumi.Input<number>;
+        /**
+         * An array of `VpcEndpoint` objects.
+         */
+        vpcEndpoints?: pulumi.Input<pulumi.Input<inputs.redshiftserverless.WorkgroupVpcEndpointArgs>[]>;
+    }
+    interface WorkgroupNetworkInterfaceArgs {
+        /**
+         * The availability Zone.
+         */
+        availabilityZone?: pulumi.Input<string>;
+        /**
+         * The unique identifier of the network interface.
+         */
+        networkInterfaceId?: pulumi.Input<string>;
+        /**
+         * The IPv4 address of the network interface within the subnet.
+         */
+        privateIpAddress?: pulumi.Input<string>;
+        /**
+         * The unique identifier of the subnet.
+         */
+        subnetId?: pulumi.Input<string>;
+    }
     interface WorkgroupPerformanceTargetArgs {
         /**
          * The target price performance level for the workgroup. Valid values include 1, 25, 50, 75, and 100. These correspond to the price performance levels LOW_COST, ECONOMICAL, BALANCED, RESOURCEFUL, and HIGH_PERFORMANCE.
@@ -81879,6 +82569,20 @@ export declare namespace redshiftserverless {
          */
         status?: pulumi.Input<enums.redshiftserverless.WorkgroupPerformanceTargetStatus>;
     }
+    interface WorkgroupVpcEndpointArgs {
+        /**
+         * One or more network interfaces of the endpoint. Also known as an interface endpoint.
+         */
+        networkInterfaces?: pulumi.Input<pulumi.Input<inputs.redshiftserverless.WorkgroupNetworkInterfaceArgs>[]>;
+        /**
+         * The connection endpoint ID for connecting to Amazon Redshift Serverless.
+         */
+        vpcEndpointId?: pulumi.Input<string>;
+        /**
+         * The VPC identifier that the endpoint is associated with.
+         */
+        vpcId?: pulumi.Input<string>;
+    }
 }
 export declare namespace refactorspaces {
     interface ApplicationApiGatewayProxyInputArgs {
@@ -82915,6 +83619,28 @@ export declare namespace rum {
          */
         status?: pulumi.Input<enums.rum.AppMonitorCustomEventsStatus>;
     }
+    /**
+     * A structure that contains the configuration for how an app monitor can deobfuscate stack traces.
+     */
+    interface AppMonitorDeobfuscationConfigurationArgs {
+        /**
+         * A structure that contains the configuration for how an app monitor can unminify JavaScript error stack traces using source maps.
+         */
+        javaScriptSourceMaps?: pulumi.Input<inputs.rum.AppMonitorDeobfuscationConfigurationJavaScriptSourceMapsPropertiesArgs>;
+    }
+    /**
+     * A structure that contains the configuration for how an app monitor can unminify JavaScript error stack traces using source maps.
+     */
+    interface AppMonitorDeobfuscationConfigurationJavaScriptSourceMapsPropertiesArgs {
+        /**
+         * The S3Uri of the bucket or folder that stores the source map files. It is required if status is ENABLED.
+         */
+        s3Uri?: pulumi.Input<string>;
+        /**
+         * Specifies whether JavaScript error stack traces should be unminified for this app monitor. The default is for JavaScript error stack trace unminification to be DISABLED
+         */
+        status: pulumi.Input<enums.rum.AppMonitorDeobfuscationConfigurationJavaScriptSourceMapsPropertiesStatus>;
+    }
     /**
      * A single metric definition
      */
@@ -83397,9 +84123,12 @@ export declare namespace s3 {
          */
         targetObjectKeyFormat?: pulumi.Input<inputs.s3.BucketTargetObjectKeyFormatArgs>;
     }
+    /**
+     * The metadata table configuration of an S3 general purpose bucket. For more information, see [Accelerating data discovery with S3 Metadata](https://docs.aws.amazon.com/AmazonS3/latest/userguide/metadata-tables-overview.html) and [Setting up permissions for configuring metadata tables](https://docs.aws.amazon.com/AmazonS3/latest/userguide/metadata-tables-permissions.html).
+     */
     interface BucketMetadataTableConfigurationArgs {
         /**
-         * The destination information for the metadata table configuration. The destination table bucket must be in the same Region and AWS account as the general purpose bucket. The specified metadata table name must be unique within the `aws_s3_metadata` namespace in the destination table bucket.
+         * The destination information for the metadata table configuration. The destination table bucket must be in the same Region and AWS-account as the general purpose bucket. The specified metadata table name must be unique within the ``aws_s3_metadata`` namespace in the destination table bucket.
          */
         s3TablesDestination: pulumi.Input<inputs.s3.BucketS3TablesDestinationArgs>;
     }
@@ -83898,21 +84627,24 @@ export declare namespace s3 {
          */
         rules: pulumi.Input<pulumi.Input<inputs.s3.BucketFilterRuleArgs>[]>;
     }
+    /**
+     * The destination information for the metadata table configuration. The destination table bucket must be in the same Region and AWS-account as the general purpose bucket. The specified metadata table name must be unique within the ``aws_s3_metadata`` namespace in the destination table bucket.
+     */
     interface BucketS3TablesDestinationArgs {
         /**
-         * The Amazon Resource Name (ARN) for the metadata table in the metadata table configuration. The specified metadata table name must be unique within the <code>aws_s3_metadata</code> namespace in the destination table bucket.
+         * The Amazon Resource Name (ARN) for the metadata table in the metadata table configuration. The specified metadata table name must be unique within the ``aws_s3_metadata`` namespace in the destination table bucket.
          */
         tableArn?: pulumi.Input<string>;
         /**
-         * The Amazon Resource Name (ARN) for the table bucket that's specified as the destination in the metadata table configuration. The destination table bucket must be in the same Region and AWS account as the general purpose bucket.
+         * The Amazon Resource Name (ARN) for the table bucket that's specified as the destination in the metadata table configuration. The destination table bucket must be in the same Region and AWS-account as the general purpose bucket.
          */
         tableBucketArn: pulumi.Input<string>;
         /**
-         * The name for the metadata table in your metadata table configuration. The specified metadata table name must be unique within the <code>aws_s3_metadata</code> namespace in the destination table bucket.
+         * The name for the metadata table in your metadata table configuration. The specified metadata table name must be unique within the ``aws_s3_metadata`` namespace in the destination table bucket.
          */
         tableName: pulumi.Input<string>;
         /**
-         * The table bucket namespace for the metadata table in your metadata table configuration. This value is always <code>aws_s3_metadata</code>.
+         * The table bucket namespace for the metadata table in your metadata table configuration. This value is always ``aws_s3_metadata``.
          */
         tableNamespace?: pulumi.Input<string>;
     }
@@ -91817,7 +92549,7 @@ export declare namespace ssmincidents {
      */
     interface ResponsePlanChatChannelArgs {
         /**
-         * The Amazon SNS targets that AWS Chatbot uses to notify the chat channel of updates to an incident. You can also make updates to the incident through the chat channel by using the Amazon SNS topics
+         * The Amazon SNS targets that  uses to notify the chat channel of updates to an incident. You can also make updates to the incident through the chat channel by using the Amazon SNS topics
          */
         chatbotSns?: pulumi.Input<pulumi.Input<string>[]>;
     }
@@ -92072,7 +92804,7 @@ export declare namespace ssmquicksetup {
          * - Description: (Required) A comma separated list of organizational units (OUs) you want to deploy the configuration to.
          * - `TargetRegions`
          *
-         * - Description: (Required) A comma separated list of AWS Regions you want to deploy the configuration to.
+         * - Description: (Required) The AWS Regions to deploy the configuration to. For this type, the parameter only accepts a value of `AllRegions` .
          * - **DevOps Guru (Type: AWS QuickSetupType-DevOpsGuru)** - - `AnalyseAllResources`
          *
          * - Description: (Optional) A boolean value that determines whether DevOps Guru analyzes all AWS CloudFormation stacks in the account. The default value is " `false` ".
@@ -92192,7 +92924,10 @@ export declare namespace ssmquicksetup {
          * - Description: (Required) An array of JSON objects containing the information for the patch baselines to include in your patch policy.
          * - `PatchBaselineUseDefault`
          *
-         * - Description: (Optional) A boolean value that determines whether the selected patch baselines are all AWS provided.
+         * - Description: (Optional) A value that determines whether the selected patch baselines are all AWS provided. Supported values are `default` and `custom` .
+         * - `PatchBaselineRegion`
+         *
+         * - Description: (Required) The AWS Region where the patch baseline exist.
          * - `ConfigurationOptionsPatchOperation`
          *
          * - Description: (Optional) Determines whether target instances scan for available patches, or scan and install available patches. The valid values are `Scan` and `ScanAndInstall` . The default value for the parameter is `Scan` .
@@ -92595,6 +93330,26 @@ export declare namespace synthetics {
     }
 }
 export declare namespace systemsmanagersap {
+    interface ApplicationComponentInfoArgs {
+        /**
+         * This string is the type of the component.
+         *
+         * Accepted value is `WD` .
+         */
+        componentType?: pulumi.Input<enums.systemsmanagersap.ApplicationComponentInfoComponentType>;
+        /**
+         * This is the Amazon EC2 instance on which your SAP component is running.
+         *
+         * Accepted values are alphanumeric.
+         */
+        ec2InstanceId?: pulumi.Input<string>;
+        /**
+         * This string is the SAP System ID of the component.
+         *
+         * Accepted values are alphanumeric.
+         */
+        sid?: pulumi.Input<string>;
+    }
     interface ApplicationCredentialArgs {
         /**
          * The type of the application credentials.
@@ -93811,6 +94566,7 @@ export declare namespace wafv2 {
          *
          * - For Application Load Balancer and AWS AppSync , the limit is fixed at 8 KB (8,192 bytes).
          * - For CloudFront, API Gateway, Amazon Cognito, App Runner, and Verified Access, the default limit is 16 KB (16,384 bytes), and you can increase the limit for each resource type in the web ACL `AssociationConfig` , for additional processing fees.
+         * - For AWS Amplify , use the CloudFront limit.
          *
          * The options for oversize handling are the following:
          *
@@ -94046,6 +94802,7 @@ export declare namespace wafv2 {
          *
          * - For Application Load Balancer and AWS AppSync , the limit is fixed at 8 KB (8,192 bytes).
          * - For CloudFront, API Gateway, Amazon Cognito, App Runner, and Verified Access, the default limit is 16 KB (16,384 bytes), and you can increase the limit for each resource type in the web ACL `AssociationConfig` , for additional processing fees.
+         * - For AWS Amplify , use the CloudFront limit.
          *
          * For information about how to handle oversized request bodies, see the `Body` object configuration.
          */
@@ -94089,6 +94846,7 @@ export declare namespace wafv2 {
          *
          * - For Application Load Balancer and AWS AppSync , the limit is fixed at 8 KB (8,192 bytes).
          * - For CloudFront, API Gateway, Amazon Cognito, App Runner, and Verified Access, the default limit is 16 KB (16,384 bytes), and you can increase the limit for each resource type in the web ACL `AssociationConfig` , for additional processing fees.
+         * - For AWS Amplify , use the CloudFront limit.
          *
          * For information about how to handle oversized request bodies, see the `JsonBody` object configuration.
          */
@@ -94113,6 +94871,12 @@ export declare namespace wafv2 {
          * One query argument in a web request, identified by name, for example UserName or SalesRegion. The name can be up to 30 characters long and isn't case sensitive.
          */
         singleQueryArgument?: pulumi.Input<inputs.wafv2.RuleGroupFieldToMatchSingleQueryArgumentPropertiesArgs>;
+        /**
+         * Inspect fragments of the request URI. You must configure scope and pattern matching filters in the `UriFragment` object, to define the fragment of a URI that AWS WAF inspects.
+         *
+         * Only the first 8 KB (8192 bytes) of a request's URI fragments and only the first 200 URI fragments are forwarded to AWS WAF for inspection by the underlying host service. You must configure how to handle any oversize URI fragment content in the `UriFragment` object. AWS WAF applies the pattern matching filters to the cookies that it receives from the underlying host service.
+         */
+        uriFragment?: pulumi.Input<inputs.wafv2.RuleGroupUriFragmentArgs>;
         /**
          * The path component of the URI of a web request. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
          */
@@ -94323,6 +95087,7 @@ export declare namespace wafv2 {
          *
          * - For Application Load Balancer and AWS AppSync , the limit is fixed at 8 KB (8,192 bytes).
          * - For CloudFront, API Gateway, Amazon Cognito, App Runner, and Verified Access, the default limit is 16 KB (16,384 bytes), and you can increase the limit for each resource type in the web ACL `AssociationConfig` , for additional processing fees.
+         * - For AWS Amplify , use the CloudFront limit.
          *
          * The options for oversize handling are the following:
          *
@@ -94903,6 +95668,25 @@ export declare namespace wafv2 {
          */
         type: pulumi.Input<enums.wafv2.RuleGroupTextTransformationType>;
     }
+    /**
+     * The path component of the URI Fragment. This is the part of a web request that identifies a fragment uri, for example, /abcd#introduction
+     */
+    interface RuleGroupUriFragmentArgs {
+        /**
+         * What AWS WAF should do if it fails to completely parse the JSON body. The options are the following:
+         *
+         * - `EVALUATE_AS_STRING` - Inspect the body as plain text. AWS WAF applies the text transformations and inspection criteria that you defined for the JSON inspection to the body text string.
+         * - `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request.
+         * - `NO_MATCH` - Treat the web request as not matching the rule statement.
+         *
+         * If you don't provide this setting, AWS WAF parses and evaluates the content only up to the first parsing failure that it encounters.
+         *
+         * Example JSON: `{ "UriFragment": { "FallbackBehavior": "MATCH"} }`
+         *
+         * > AWS WAF parsing doesn't fully validate the input JSON string, so parsing can succeed even for invalid JSON. When parsing succeeds, AWS WAF doesn't apply the fallback behavior. For more information, see [JSON body](https://docs.aws.amazon.com/waf/latest/developerguide/waf-rule-statement-fields-list.html#waf-rule-statement-request-component-json-body) in the *AWS WAF Developer Guide* .
+         */
+        fallbackBehavior?: pulumi.Input<enums.wafv2.RuleGroupUriFragmentFallbackBehavior>;
+    }
     /**
      * Visibility Metric of the RuleGroup.
      */
@@ -95078,6 +95862,7 @@ export declare namespace wafv2 {
          *
          * - For Application Load Balancer and AWS AppSync , the limit is fixed at 8 KB (8,192 bytes).
          * - For CloudFront, API Gateway, Amazon Cognito, App Runner, and Verified Access, the default limit is 16 KB (16,384 bytes), and you can increase the limit for each resource type in the web ACL `AssociationConfig` , for additional processing fees.
+         * - For AWS Amplify , use the CloudFront limit.
          *
          * The options for oversize handling are the following:
          *
@@ -95298,6 +96083,18 @@ export declare namespace wafv2 {
          */
         contentType: pulumi.Input<enums.wafv2.WebAclResponseContentType>;
     }
+    interface WebAclDataProtectArgs {
+        action: pulumi.Input<enums.wafv2.WebAclDataProtectionAction>;
+        excludeRateBasedDetails?: pulumi.Input<boolean>;
+        excludeRuleMatchDetails?: pulumi.Input<boolean>;
+        field: pulumi.Input<inputs.wafv2.WebAclFieldToProtectArgs>;
+    }
+    interface WebAclDataProtectionConfigArgs {
+        /**
+         * An array of data protection configurations for specific web request field types. This is defined for each web ACL. AWS WAF applies the specified protection to all web requests that the web ACL inspects.
+         */
+        dataProtections: pulumi.Input<pulumi.Input<inputs.wafv2.WebAclDataProtectArgs>[]>;
+    }
     /**
      * Default Action WebACL will take against ingress traffic when there is no matching Rule.
      */
@@ -95347,6 +96144,7 @@ export declare namespace wafv2 {
          *
          * - For Application Load Balancer and AWS AppSync , the limit is fixed at 8 KB (8,192 bytes).
          * - For CloudFront, API Gateway, Amazon Cognito, App Runner, and Verified Access, the default limit is 16 KB (16,384 bytes), and you can increase the limit for each resource type in the web ACL `AssociationConfig` , for additional processing fees.
+         * - For AWS Amplify , use the CloudFront limit.
          *
          * For information about how to handle oversized request bodies, see the `Body` object configuration.
          */
@@ -95390,6 +96188,7 @@ export declare namespace wafv2 {
          *
          * - For Application Load Balancer and AWS AppSync , the limit is fixed at 8 KB (8,192 bytes).
          * - For CloudFront, API Gateway, Amazon Cognito, App Runner, and Verified Access, the default limit is 16 KB (16,384 bytes), and you can increase the limit for each resource type in the web ACL `AssociationConfig` , for additional processing fees.
+         * - For AWS Amplify , use the CloudFront limit.
          *
          * For information about how to handle oversized request bodies, see the `JsonBody` object configuration.
          */
@@ -95414,6 +96213,12 @@ export declare namespace wafv2 {
          * One query argument in a web request, identified by name, for example UserName or SalesRegion. The name can be up to 30 characters long and isn't case sensitive.
          */
         singleQueryArgument?: pulumi.Input<inputs.wafv2.WebAclFieldToMatchSingleQueryArgumentPropertiesArgs>;
+        /**
+         * Inspect fragments of the request URI. You must configure scope and pattern matching filters in the `UriFragment` object, to define the fragment of a URI that AWS WAF inspects.
+         *
+         * Only the first 8 KB (8192 bytes) of a request's URI fragments and only the first 200 URI fragments are forwarded to AWS WAF for inspection by the underlying host service. You must configure how to handle any oversize URI fragment content in the `UriFragment` object. AWS WAF applies the pattern matching filters to the cookies that it receives from the underlying host service.
+         */
+        uriFragment?: pulumi.Input<inputs.wafv2.WebAclUriFragmentArgs>;
         /**
          * The path component of the URI of a web request. This is the part of a web request that identifies a resource, for example, /images/daily-ad.jpg.
          */
@@ -95435,6 +96240,19 @@ export declare namespace wafv2 {
     interface WebAclFieldToMatchSingleQueryArgumentPropertiesArgs {
         name: pulumi.Input<string>;
     }
+    /**
+     * Field in log to protect.
+     */
+    interface WebAclFieldToProtectArgs {
+        /**
+         * List of field keys to protect
+         */
+        fieldKeys?: pulumi.Input<pulumi.Input<string>[]>;
+        /**
+         * Field type to protect
+         */
+        fieldType: pulumi.Input<enums.wafv2.WebAclFieldToProtectFieldType>;
+    }
     interface WebAclForwardedIpConfigurationArgs {
         /**
          * The match status to assign to the web request if the request doesn't have a valid IP address in the specified position.
@@ -95624,6 +96442,7 @@ export declare namespace wafv2 {
          *
          * - For Application Load Balancer and AWS AppSync , the limit is fixed at 8 KB (8,192 bytes).
          * - For CloudFront, API Gateway, Amazon Cognito, App Runner, and Verified Access, the default limit is 16 KB (16,384 bytes), and you can increase the limit for each resource type in the web ACL `AssociationConfig` , for additional processing fees.
+         * - For AWS Amplify , use the CloudFront limit.
          *
          * The options for oversize handling are the following:
          *
@@ -96568,6 +97387,25 @@ export declare namespace wafv2 {
          */
         type: pulumi.Input<enums.wafv2.WebAclTextTransformationType>;
     }
+    /**
+     * The path component of the URI Fragment. This is the part of a web request that identifies a fragment uri, for example, /abcd#introduction
+     */
+    interface WebAclUriFragmentArgs {
+        /**
+         * What AWS WAF should do if it fails to completely parse the JSON body. The options are the following:
+         *
+         * - `EVALUATE_AS_STRING` - Inspect the body as plain text. AWS WAF applies the text transformations and inspection criteria that you defined for the JSON inspection to the body text string.
+         * - `MATCH` - Treat the web request as matching the rule statement. AWS WAF applies the rule action to the request.
+         * - `NO_MATCH` - Treat the web request as not matching the rule statement.
+         *
+         * If you don't provide this setting, AWS WAF parses and evaluates the content only up to the first parsing failure that it encounters.
+         *
+         * Example JSON: `{ "UriFragment": { "FallbackBehavior": "MATCH"} }`
+         *
+         * > AWS WAF parsing doesn't fully validate the input JSON string, so parsing can succeed even for invalid JSON. When parsing succeeds, AWS WAF doesn't apply the fallback behavior. For more information, see [JSON body](https://docs.aws.amazon.com/waf/latest/developerguide/waf-rule-statement-fields-list.html#waf-rule-statement-request-component-json-body) in the *AWS WAF Developer Guide* .
+         */
+        fallbackBehavior?: pulumi.Input<enums.wafv2.WebAclUriFragmentFallbackBehavior>;
+    }
     /**
      * Visibility Metric of the WebACL.
      */