@pulumi/aws-native 1.36.0-alpha.1759210675 → 1.36.0-alpha.1759233750

package/types/output.d.ts

@@ -712,6 +712,124 @@ export declare namespace aiops {
     }
 }
 export declare namespace amazonmq {
+    interface BrokerConfigurationId {
+        /**
+         * The unique ID that Amazon MQ generates for the configuration.
+         */
+        id: string;
+        /**
+         * The revision number of the configuration.
+         */
+        revision: number;
+    }
+    interface BrokerEncryptionOptions {
+        /**
+         * The customer master key (CMK) to use for the A KMS (KMS).
+         * This key is used to encrypt your data at rest. If not provided, Amazon MQ will use a default CMK to encrypt your data.
+         * The Key ARN is recommended so that drift can be detected,
+         * but a key ID or key alias will also be accepted for API compatibility reasons.
+         */
+        kmsKeyId?: string;
+        /**
+         * Enables the use of an AWS owned CMK using AWS KMS (KMS). Set to `true` by default, if no value is provided, for example, for RabbitMQ brokers.
+         */
+        useAwsOwnedKey: boolean;
+    }
+    interface BrokerLdapServerMetadata {
+        /**
+         * Specifies the location of the LDAP server such as AWS Directory Service for Microsoft Active Directory . Optional failover server.
+         */
+        hosts: string[];
+        /**
+         * The distinguished name of the node in the directory information tree (DIT) to search for roles or groups. For example, `ou=group` , `ou=corp` , `dc=corp` , `dc=example` , `dc=com` .
+         */
+        roleBase: string;
+        /**
+         * The group name attribute in a role entry whose value is the name of that role. For example, you can specify `cn` for a group entry's common name. If authentication succeeds, then the user is assigned the the value of the `cn` attribute for each role entry that they are a member of.
+         */
+        roleName?: string;
+        /**
+         * The LDAP search filter used to find roles within the roleBase. The distinguished name of the user matched by userSearchMatching is substituted into the `{0}` placeholder in the search filter. The client's username is substituted into the `{1}` placeholder. For example, if you set this option to `(member=uid={1})` for the user janedoe, the search filter becomes `(member=uid=janedoe)` after string substitution. It matches all role entries that have a member attribute equal to `uid=janedoe` under the subtree selected by the `RoleBases` .
+         */
+        roleSearchMatching: string;
+        /**
+         * The directory search scope for the role. If set to true, scope is to search the entire subtree.
+         */
+        roleSearchSubtree?: boolean;
+        /**
+         * Service account password. A service account is an account in your LDAP server that has access to initiate a connection. For example, `cn=admin` , `dc=corp` , `dc=example` , `dc=com` .
+         */
+        serviceAccountPassword?: string;
+        /**
+         * Service account username. A service account is an account in your LDAP server that has access to initiate a connection. For example, `cn=admin` , `ou=corp` , `dc=corp` , `dc=example` , `dc=com` .
+         */
+        serviceAccountUsername: string;
+        /**
+         * Select a particular subtree of the directory information tree (DIT) to search for user entries. The subtree is specified by a DN, which specifies the base node of the subtree. For example, by setting this option to `ou=Users` , `ou=corp` , `dc=corp` , `dc=example` , `dc=com` , the search for user entries is restricted to the subtree beneath `ou=Users` , `ou=corp` , `dc=corp` , `dc=example` , `dc=com` .
+         */
+        userBase: string;
+        /**
+         * The name of the LDAP attribute in the user's directory entry for the user's group membership. In some cases, user roles may be identified by the value of an attribute in the user's directory entry. The `UserRoleName` option allows you to provide the name of this attribute.
+         */
+        userRoleName?: string;
+        /**
+         * The LDAP search filter used to find users within the `userBase` . The client's username is substituted into the `{0}` placeholder in the search filter. For example, if this option is set to `(uid={0})` and the received username is `janedoe` , the search filter becomes `(uid=janedoe)` after string substitution. It will result in matching an entry like `uid=janedoe` , `ou=Users` , `ou=corp` , `dc=corp` , `dc=example` , `dc=com` .
+         */
+        userSearchMatching: string;
+        /**
+         * The directory search scope for the user. If set to true, scope is to search the entire subtree.
+         */
+        userSearchSubtree?: boolean;
+    }
+    interface BrokerLogList {
+        /**
+         * Enables audit logging. Every user management action made using JMX or the ActiveMQ Web Console is logged. Does not apply to RabbitMQ brokers.
+         */
+        audit?: boolean;
+        /**
+         * Enables general logging.
+         */
+        general?: boolean;
+    }
+    interface BrokerMaintenanceWindow {
+        /**
+         * _Allowed Values_: <code>MONDAY</code> | <code>TUESDAY</code> | <code>WEDNESDAY</code> | <code>THURSDAY</code> | <code>FRIDAY</code> | <code>SATURDAY</code> | <code>SUNDAY</code>
+         */
+        dayOfWeek: enums.amazonmq.BrokerMaintenanceWindowDayOfWeek | string;
+        /**
+         * The time, in 24-hour format, and use only numbers separated by a colon, HH:MM or HH:MM:SS. Example: 13:05.
+         * When writing YAML this may need to be quoted to prevent a timestamp being read and converted to a number of minutes or seconds.
+         */
+        timeOfDay: string;
+        /**
+         * The time zone, UTC by default, in either the Country/City format, or the UTC offset format.
+         */
+        timeZone: string;
+    }
+    interface BrokerUser {
+        /**
+         * Enables access to the ActiveMQ web console for the ActiveMQ user. Does not apply to RabbitMQ brokers.
+         */
+        consoleAccess?: boolean;
+        /**
+         * The list of groups (20 maximum) to which the ActiveMQ user belongs. This value can contain only alphanumeric characters, dashes, periods, underscores, and tildes (- . _ ~). This value must be 2-100 characters long. Does not apply to RabbitMQ brokers.
+         */
+        groups?: string[];
+        /**
+         * The password of the user. This value must be at least 12 characters long, must contain at least 4 unique characters, and must not contain commas, colons, or equal signs (,:=).
+         */
+        password: string;
+        /**
+         * Defines if this user is intended for CRDR replication purposes.
+         */
+        replicationUser?: boolean;
+        /**
+         * The username of the broker user. For Amazon MQ for ActiveMQ brokers, this value can contain only alphanumeric characters, dashes, periods, underscores, and tildes (- . _ ~). For Amazon MQ for RabbitMQ brokers, this value can contain only alphanumeric characters, dashes, periods, underscores (- . _). This value must not contain a tilde (~) character. Amazon MQ prohibts using guest as a valid usename. This value must be 2-100 characters long.
+         *
+         * > Do not add personally identifiable information (PII) or other confidential or sensitive information in broker usernames. Broker usernames are accessible to other AWS services, including CloudWatch Logs . Broker usernames are not intended to be used for private or sensitive data.
+         */
+        username: string;
+    }
 }
 export declare namespace amplify {
     interface AppAutoBranchCreationConfig {
@@ -1894,6 +2012,7 @@ export declare namespace apigateway {
         requestTemplates?: {
             [key: string]: string;
         };
+        responseTransferMode?: enums.apigateway.MethodIntegrationResponseTransferMode;
         /**
          * Custom timeout between 50 and 29,000 milliseconds. The default value is 29,000 milliseconds or 29 seconds. You can increase the default value to longer than 29 seconds for Regional or private APIs only.
          */
@@ -10721,11 +10840,15 @@ export declare namespace bedrock {
          * Whether generating categorical data from audio is enabled.
          */
         state: enums.bedrock.DataAutomationProjectState;
+        typeConfiguration?: outputs.bedrock.DataAutomationProjectAudioExtractionCategoryTypeConfiguration;
         /**
          * The types of data to generate.
          */
         types?: enums.bedrock.DataAutomationProjectAudioExtractionCategoryType[];
     }
+    interface DataAutomationProjectAudioExtractionCategoryTypeConfiguration {
+        transcript?: outputs.bedrock.DataAutomationProjectTranscriptConfiguration;
+    }
     interface DataAutomationProjectAudioOverrideConfiguration {
         /**
          * Sets modality processing for audio files. All modalities are enabled by default.
@@ -10772,6 +10895,9 @@ export declare namespace bedrock {
          */
         blueprintVersion?: string;
     }
+    interface DataAutomationProjectChannelLabelingConfiguration {
+        state: enums.bedrock.DataAutomationProjectState;
+    }
     /**
      * Custom output configuration
      */
@@ -10959,6 +11085,9 @@ export declare namespace bedrock {
          */
         video?: outputs.bedrock.DataAutomationProjectVideoOverrideConfiguration;
     }
+    interface DataAutomationProjectSpeakerLabelingConfiguration {
+        state: enums.bedrock.DataAutomationProjectState;
+    }
     interface DataAutomationProjectSplitterConfiguration {
         /**
          * Whether document splitter is enabled for a project.
@@ -10986,6 +11115,10 @@ export declare namespace bedrock {
          */
         video?: outputs.bedrock.DataAutomationProjectVideoStandardOutputConfiguration;
     }
+    interface DataAutomationProjectTranscriptConfiguration {
+        channelLabeling?: outputs.bedrock.DataAutomationProjectChannelLabelingConfiguration;
+        speakerLabeling?: outputs.bedrock.DataAutomationProjectSpeakerLabelingConfiguration;
+    }
     interface DataAutomationProjectVideoBoundingBox {
         /**
          * Whether bounding boxes are enabled for video.
@@ -14344,55 +14477,97 @@ export declare namespace bedrockagentcore {
      * Network configuration for browser
      */
     interface BrowserCustomBrowserNetworkConfiguration {
+        /**
+         * The network mode.
+         */
         networkMode: enums.bedrockagentcore.BrowserCustomBrowserNetworkMode;
     }
     /**
      * Recording configuration for browser
      */
     interface BrowserCustomRecordingConfig {
+        /**
+         * The recording configuration for a browser. This structure defines how browser sessions are recorded.
+         */
         enabled?: boolean;
+        /**
+         * The S3 location.
+         */
         s3Location?: outputs.bedrockagentcore.BrowserCustomS3Location;
     }
     /**
      * S3 Location Configuration
      */
     interface BrowserCustomS3Location {
+        /**
+         * The S3 location bucket name.
+         */
         bucket: string;
+        /**
+         * The S3 location object prefix.
+         */
         prefix: string;
     }
     /**
      * Network configuration for code interpreter
      */
     interface CodeInterpreterCustomCodeInterpreterNetworkConfiguration {
+        /**
+         * The network mode.
+         */
         networkMode: enums.bedrockagentcore.CodeInterpreterCustomCodeInterpreterNetworkMode;
     }
     interface RuntimeAgentRuntimeArtifact {
+        /**
+         * Representation of a container configuration.
+         */
         containerConfiguration?: outputs.bedrockagentcore.RuntimeContainerConfiguration;
     }
     /**
      * Configuration for the authorizer
      */
     interface RuntimeAuthorizerConfiguration {
+        /**
+         * Represents inbound authorization configuration options used to authenticate incoming requests.
+         */
         customJwtAuthorizer?: outputs.bedrockagentcore.RuntimeCustomJwtAuthorizerConfiguration;
     }
     interface RuntimeContainerConfiguration {
+        /**
+         * The container Uri.
+         */
         containerUri: string;
     }
     /**
      * Configuration for custom JWT authorizer
      */
     interface RuntimeCustomJwtAuthorizerConfiguration {
+        /**
+         * Represents inbound authorization configuration options used to authenticate incoming requests.
+         */
         allowedAudience?: string[];
+        /**
+         * Represents individual client IDs that are validated in the incoming JWT token validation process.
+         */
         allowedClients?: string[];
+        /**
+         * The configuration authorization.
+         */
         discoveryUrl: string;
     }
     interface RuntimeNetworkConfiguration {
+        /**
+         * The network mode.
+         */
         networkMode: enums.bedrockagentcore.RuntimeNetworkMode;
     }
     /**
      * Configuration for workload identity
      */
     interface RuntimeWorkloadIdentityDetails {
+        /**
+         * The Amazon Resource Name (ARN) for the workload identity.
+         */
         workloadIdentityArn: string;
     }
 }
@@ -14841,6 +15016,14 @@ export declare namespace cleanrooms {
         entryPoint: outputs.cleanrooms.AnalysisTemplateArtifact;
         roleArn: string;
     }
+    interface AnalysisTemplateErrorMessageConfiguration {
+        /**
+         * The level of detail for error messages returned by the PySpark job. When set to DETAILED, error messages include more information to help troubleshoot issues with your PySpark job.
+         *
+         * Because this setting may expose sensitive data, it is recommended for development and testing environments.
+         */
+        type: enums.cleanrooms.AnalysisTemplateErrorMessageConfigurationType;
+    }
     interface AnalysisTemplateHash {
         sha256?: string;
     }
@@ -19884,7 +20067,6 @@ export declare namespace connect {
      * Information about the automation configuration in numeric questions.
      */
     interface EvaluationFormNumericQuestionAutomation {
-        answerSource?: any;
         /**
          * The property value of the automation.
          */
@@ -20830,6 +21012,9 @@ export declare namespace connect {
          * The phone number for the user's desk phone.
          */
         deskPhoneNumber?: string;
+        /**
+         * The persistent connection setting for the user.
+         */
         persistentConnection?: boolean;
         /**
          * The phone type.
@@ -23185,6 +23370,41 @@ export declare namespace datasync {
          */
         bucketAccessRoleArn: string;
     }
+    /**
+     * Specifies configuration information for a DataSync-managed secret, such as a password or set of credentials that DataSync uses to access a specific transfer location, and a customer-managed AWS KMS key.
+     */
+    interface LocationSmbCmkSecretConfig {
+        /**
+         * Specifies the ARN for the customer-managed AWS KMS key used to encrypt the secret specified for SecretArn. DataSync provides this key to AWS Secrets Manager.
+         */
+        kmsKeyArn?: string;
+        /**
+         * Specifies the ARN for an AWS Secrets Manager secret, managed by DataSync.
+         */
+        secretArn?: string;
+    }
+    /**
+     * Specifies configuration information for a customer-managed secret, such as a password or set of credentials that DataSync uses to access a specific transfer location, and an IAM role that DataSync can assume and access the customer-managed secret.
+     */
+    interface LocationSmbCustomSecretConfig {
+        /**
+         * Specifies the ARN for the AWS Identity and Access Management role that DataSync uses to access the secret specified for SecretArn.
+         */
+        secretAccessRoleArn: string;
+        /**
+         * Specifies the ARN for a customer created AWS Secrets Manager secret.
+         */
+        secretArn: string;
+    }
+    /**
+     * Specifies configuration information for a DataSync-managed secret, such as a password or set of credentials that DataSync uses to access a specific transfer location. DataSync uses the default AWS-managed KMS key to encrypt this secret in AWS Secrets Manager.
+     */
+    interface LocationSmbManagedSecretConfig {
+        /**
+         * Specifies the ARN for an AWS Secrets Manager secret.
+         */
+        secretArn: string;
+    }
     /**
      * The mount options used by DataSync to access the SMB server.
      */
@@ -23934,6 +24154,12 @@ export declare namespace datazone {
          */
         value?: string;
     }
+    /**
+     * Indicates the smithy model of the API.
+     */
+    interface FormTypeModel {
+        smithy?: string;
+    }
     /**
      * The properties of a domain unit's owner.
      */
@@ -25803,7 +26029,7 @@ export declare namespace ec2 {
          *
          * The following are the supported values for each volume type:
          *
-         * - `gp3` : 3,000 - 16,000 IOPS
+         * - `gp3` : 3,000 - 80,000 IOPS
          * - `io1` : 100 - 64,000 IOPS
          * - `io2` : 100 - 256,000 IOPS
          *
@@ -25827,7 +26053,8 @@ export declare namespace ec2 {
          *
          * The following are the supported sizes for each volume type:
          *
-         * - `gp2` and `gp3` : 1 - 16,384 GiB
+         * - `gp2` : 1 - 16,384 GiB
+         * - `gp3` : 1 - 65,536 GiB
          * - `io1` : 4 - 16,384 GiB
          * - `io2` : 4 - 65,536 GiB
          * - `st1` and `sc1` : 125 - 16,384 GiB
@@ -27730,6 +27957,7 @@ export declare namespace ec2 {
         affinity?: string;
         /**
          * The Availability Zone for the instance.
+         *  Either ``AvailabilityZone`` or ``AvailabilityZoneId`` can be specified, but not both
          */
         availabilityZone?: string;
         /**
@@ -28846,7 +29074,7 @@ export declare namespace ec2 {
          *
          * The following are the supported values for each volume type:
          *
-         * - `gp3` : 3,000 - 16,000 IOPS
+         * - `gp3` : 3,000 - 80,000 IOPS
          * - `io1` : 100 - 64,000 IOPS
          * - `io2` : 100 - 256,000 IOPS
          *
@@ -28864,7 +29092,8 @@ export declare namespace ec2 {
          *
          * The following are the supported sizes for each volume type:
          *
-         * - `gp2` and `gp3` : 1 - 16,384 GiB
+         * - `gp2` : 1 - 16,384 GiB
+         * - `gp3` : 1 - 65,536 GiB
          * - `io1` : 4 - 16,384 GiB
          * - `io2` : 4 - 65,536 GiB
          * - `st1` and `sc1` : 125 - 16,384 GiB
@@ -30450,6 +30679,14 @@ export declare namespace ecr {
     }
 }
 export declare namespace ecs {
+    interface CapacityProviderAcceleratorCountRequest {
+        max?: number;
+        min?: number;
+    }
+    interface CapacityProviderAcceleratorTotalMemoryMiBRequest {
+        max?: number;
+        min?: number;
+    }
     interface CapacityProviderAutoScalingGroupProvider {
         /**
          * The Amazon Resource Name (ARN) that identifies the Auto Scaling group, or the Auto Scaling group name.
@@ -30474,6 +30711,55 @@ export declare namespace ecs {
          */
         managedTerminationProtection?: enums.ecs.CapacityProviderAutoScalingGroupProviderManagedTerminationProtection;
     }
+    interface CapacityProviderBaselineEbsBandwidthMbpsRequest {
+        max?: number;
+        min?: number;
+    }
+    interface CapacityProviderInstanceLaunchTemplate {
+        ec2InstanceProfileArn: string;
+        instanceRequirements?: outputs.ecs.CapacityProviderInstanceRequirementsRequest;
+        monitoring?: enums.ecs.CapacityProviderManagedInstancesMonitoringOptions;
+        networkConfiguration: outputs.ecs.CapacityProviderManagedInstancesNetworkConfiguration;
+        storageConfiguration?: outputs.ecs.CapacityProviderManagedInstancesStorageConfiguration;
+    }
+    interface CapacityProviderInstanceRequirementsRequest {
+        acceleratorCount?: outputs.ecs.CapacityProviderAcceleratorCountRequest;
+        acceleratorManufacturers?: enums.ecs.CapacityProviderInstanceRequirementsRequestAcceleratorManufacturersItem[];
+        acceleratorNames?: enums.ecs.CapacityProviderInstanceRequirementsRequestAcceleratorNamesItem[];
+        acceleratorTotalMemoryMiB?: outputs.ecs.CapacityProviderAcceleratorTotalMemoryMiBRequest;
+        acceleratorTypes?: enums.ecs.CapacityProviderInstanceRequirementsRequestAcceleratorTypesItem[];
+        allowedInstanceTypes?: string[];
+        bareMetal?: enums.ecs.CapacityProviderInstanceRequirementsRequestBareMetal;
+        baselineEbsBandwidthMbps?: outputs.ecs.CapacityProviderBaselineEbsBandwidthMbpsRequest;
+        burstablePerformance?: enums.ecs.CapacityProviderInstanceRequirementsRequestBurstablePerformance;
+        cpuManufacturers?: enums.ecs.CapacityProviderInstanceRequirementsRequestCpuManufacturersItem[];
+        excludedInstanceTypes?: string[];
+        instanceGenerations?: enums.ecs.CapacityProviderInstanceRequirementsRequestInstanceGenerationsItem[];
+        localStorage?: enums.ecs.CapacityProviderInstanceRequirementsRequestLocalStorage;
+        localStorageTypes?: enums.ecs.CapacityProviderInstanceRequirementsRequestLocalStorageTypesItem[];
+        maxSpotPriceAsPercentageOfOptimalOnDemandPrice?: number;
+        memoryGiBPerVCpu?: outputs.ecs.CapacityProviderMemoryGiBPerVCpuRequest;
+        memoryMiB: outputs.ecs.CapacityProviderMemoryMiBRequest;
+        networkBandwidthGbps?: outputs.ecs.CapacityProviderNetworkBandwidthGbpsRequest;
+        networkInterfaceCount?: outputs.ecs.CapacityProviderNetworkInterfaceCountRequest;
+        onDemandMaxPricePercentageOverLowestPrice?: number;
+        requireHibernateSupport?: boolean;
+        spotMaxPricePercentageOverLowestPrice?: number;
+        totalLocalStorageGb?: outputs.ecs.CapacityProviderTotalLocalStorageGbRequest;
+        vCpuCount: outputs.ecs.CapacityProviderVCpuCountRangeRequest;
+    }
+    interface CapacityProviderManagedInstancesNetworkConfiguration {
+        securityGroups?: string[];
+        subnets: string[];
+    }
+    interface CapacityProviderManagedInstancesProvider {
+        infrastructureRoleArn: string;
+        instanceLaunchTemplate: outputs.ecs.CapacityProviderInstanceLaunchTemplate;
+        propagateTags?: enums.ecs.CapacityProviderManagedInstancesProviderPropagateTags;
+    }
+    interface CapacityProviderManagedInstancesStorageConfiguration {
+        storageSizeGiB: number;
+    }
     /**
      * The managed scaling settings for the Auto Scaling group capacity provider.
      */
@@ -30501,6 +30787,30 @@ export declare namespace ecs {
          */
         targetCapacity?: number;
     }
+    interface CapacityProviderMemoryGiBPerVCpuRequest {
+        max?: number;
+        min?: number;
+    }
+    interface CapacityProviderMemoryMiBRequest {
+        max?: number;
+        min: number;
+    }
+    interface CapacityProviderNetworkBandwidthGbpsRequest {
+        max?: number;
+        min?: number;
+    }
+    interface CapacityProviderNetworkInterfaceCountRequest {
+        max?: number;
+        min?: number;
+    }
+    interface CapacityProviderTotalLocalStorageGbRequest {
+        max?: number;
+        min?: number;
+    }
+    interface CapacityProviderVCpuCountRangeRequest {
+        max?: number;
+        min: number;
+    }
     interface ClusterCapacityProviderAssociationsCapacityProviderStrategy {
         base?: number;
         capacityProvider: enums.ecs.ClusterCapacityProviderAssociationsCapacityProvider | string;
@@ -30937,7 +31247,7 @@ export declare namespace ecs {
         maximumPercent?: number;
         /**
          * If a service is using the rolling update (``ECS``) deployment type, the ``minimumHealthyPercent`` represents a lower limit on the number of your service's tasks that must remain in the ``RUNNING`` state during a deployment, as a percentage of the ``desiredCount`` (rounded up to the nearest integer). This parameter enables you to deploy without using additional cluster capacity. For example, if your service has a ``desiredCount`` of four tasks and a ``minimumHealthyPercent`` of 50%, the service scheduler may stop two existing tasks to free up cluster capacity before starting two new tasks.
-         *   If any tasks are unhealthy and if ``maximumPercent`` doesn't allow the Amazon ECS scheduler to start replacement tasks, the scheduler stops the unhealthy tasks one-by-one — using the ``minimumHealthyPercent`` as a constraint — to clear up capacity to launch replacement tasks. For more information about how the scheduler replaces unhealthy tasks, see [Amazon ECS services](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs_services.html) .
+         *   If any tasks are unhealthy and if ``maximumPercent`` doesn't allow the Amazon ECS scheduler to start replacement tasks, the scheduler stops the unhealthy tasks one-by-one — using the ``minimumHealthyPercent`` as a constraint — to clear up capacity to launch replacement tasks. For more information about how the scheduler replaces unhealthy tasks, see [Amazon ECS services](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs_services.html).
          *  For services that *do not* use a load balancer, the following should be noted:
          *   +  A service is considered healthy if all essential containers within the tasks in the service pass their health checks.
          *   +  If a task has no essential containers with a health check defined, the service scheduler will wait for 40 seconds after a task reaches a ``RUNNING`` state before the task is counted towards the minimum healthy percent total.
@@ -31009,9 +31319,8 @@ export declare namespace ecs {
      */
     interface ServiceDeploymentLifecycleHook {
         /**
-         * Use this field to specify custom parameters that Amazon ECS passes to your hook target invocations (such as a Lambda function).
-         *
-         * This field must be a JSON object as a string.
+         * Use this field to specify custom parameters that ECS passes to your hook target invocations (such as a Lambda function).
+         *  This field must be a JSON object as a string.
          */
         hookDetails?: any;
         /**
@@ -34396,6 +34705,7 @@ export declare namespace entityresolution {
          * The type of ID mapping.
          */
         idMappingType?: enums.entityresolution.IdMappingWorkflowIdMappingTechniquesIdMappingType;
+        normalizationVersion?: string;
         /**
          * An object which defines any additional configurations required by the provider service.
          */
@@ -36857,9 +37167,9 @@ export declare namespace gamelift {
      */
     interface ContainerFleetLocationCapacity {
         /**
-         * The number of EC2 instances you want to maintain in the specified fleet location. This value must fall between the minimum and maximum size limits. If any auto-scaling policy is defined for the container fleet, the desired instance will only be applied once during fleet creation and will be ignored in updates to avoid conflicts with auto-scaling. During updates with any auto-scaling policy defined, if current desired instance is lower than the new MinSize, it will be increased to the new MinSize; if current desired instance is larger than the new MaxSize, it will be decreased to the new MaxSize.
+         * Defaults to MinSize if not defined. The number of EC2 instances you want to maintain in the specified fleet location. This value must fall between the minimum and maximum size limits. If any auto-scaling policy is defined for the container fleet, the desired instance will only be applied once during fleet creation and will be ignored in updates to avoid conflicts with auto-scaling. During updates with any auto-scaling policy defined, if current desired instance is lower than the new MinSize, it will be increased to the new MinSize; if current desired instance is larger than the new MaxSize, it will be decreased to the new MaxSize.
          */
-        desiredEc2Instances: number;
+        desiredEc2Instances?: number;
         /**
          * The maximum value that is allowed for the fleet's instance count for a location.
          */
@@ -37180,9 +37490,9 @@ export declare namespace gamelift {
      */
     interface FleetLocationCapacity {
         /**
-         * The number of EC2 instances you want to maintain in the specified fleet location. This value must fall between the minimum and maximum size limits.
+         * Defaults to MinSize if not defined. The number of EC2 instances you want to maintain in the specified fleet location. This value must fall between the minimum and maximum size limits.
          */
-        desiredEc2Instances: number;
+        desiredEc2Instances?: number;
         /**
          * The maximum value that is allowed for the fleet's instance count for a location. When creating a new fleet, GameLift automatically sets this value to "1". Once the fleet is active, you can change this value.
          */
@@ -39621,6 +39931,10 @@ export declare namespace imagebuilder {
      * The schedule of the image pipeline.
      */
     interface ImagePipelineSchedule {
+        /**
+         * The auto-disable policy for the image pipeline.
+         */
+        autoDisablePolicy?: any;
         /**
          * The condition configures when the pipeline should trigger a new image build.
          */
@@ -55459,7 +55773,9 @@ export declare namespace networkfirewall {
     }
     interface RuleGroupRulesSourceList {
         /**
-         * Whether you want to allow or deny access to the domains in your target list.
+         * Whether you want to apply allow, reject, alert, or drop behavior to the domains in your target list.
+         *
+         * > When logging is enabled and you choose Alert, traffic that matches the domain specifications generates an alert in the firewall's logs. Then, traffic either passes, is rejected, or drops based on other rules in the firewall policy.
          */
         generatedRulesType: enums.networkfirewall.RuleGroupGeneratedRulesType;
         /**
@@ -56630,6 +56946,16 @@ export declare namespace omics {
          */
         type: enums.omics.VariantStoreEncryptionType;
     }
+    interface WorkflowContainerRegistryMap {
+        /**
+         * Image mappings specify path mappings between the ECR private repository and their corresponding external repositories.
+         */
+        imageMappings?: outputs.omics.WorkflowImageMapping[];
+        /**
+         * Mapping that provides the ECR repository path where upstream container images are pulled and synchronized.
+         */
+        registryMappings?: outputs.omics.WorkflowRegistryMapping[];
+    }
     interface WorkflowDefinitionRepository {
         /**
          * The Amazon Resource Name (ARN) of the connection to the source code repository.
@@ -56648,6 +56974,16 @@ export declare namespace omics {
          */
         sourceReference?: outputs.omics.WorkflowSourceReference;
     }
+    interface WorkflowImageMapping {
+        /**
+         * Specifies the URI of the corresponding image in the private ECR registry.
+         */
+        destinationImage?: string;
+        /**
+         * Specifies the URI of the source image in the upstream registry.
+         */
+        sourceImage?: string;
+    }
     interface WorkflowParameter {
         /**
          * The parameter's description.
@@ -56658,6 +56994,24 @@ export declare namespace omics {
          */
         optional?: boolean;
     }
+    interface WorkflowRegistryMapping {
+        /**
+         * Account ID of the account that owns the upstream container image.
+         */
+        ecrAccountId?: string;
+        /**
+         * The repository prefix to use in the ECR private repository.
+         */
+        ecrRepositoryPrefix?: string;
+        /**
+         * The URI of the upstream registry.
+         */
+        upstreamRegistryUrl?: string;
+        /**
+         * The repository prefix of the corresponding repository in the upstream registry.
+         */
+        upstreamRepositoryPrefix?: string;
+    }
     interface WorkflowSourceReference {
         /**
          * The type of source reference, such as branch, tag, or commit.
@@ -56668,6 +57022,16 @@ export declare namespace omics {
          */
         value?: string;
     }
+    interface WorkflowVersionContainerRegistryMap {
+        /**
+         * Image mappings specify path mappings between the ECR private repository and their corresponding external repositories.
+         */
+        imageMappings?: outputs.omics.WorkflowVersionImageMapping[];
+        /**
+         * Mapping that provides the ECR repository path where upstream container images are pulled and synchronized.
+         */
+        registryMappings?: outputs.omics.WorkflowVersionRegistryMapping[];
+    }
     interface WorkflowVersionDefinitionRepository {
         /**
          * The Amazon Resource Name (ARN) of the connection to the source code repository.
@@ -56686,6 +57050,34 @@ export declare namespace omics {
          */
         sourceReference?: outputs.omics.WorkflowVersionSourceReference;
     }
+    interface WorkflowVersionImageMapping {
+        /**
+         * Specifies the URI of the corresponding image in the private ECR registry.
+         */
+        destinationImage?: string;
+        /**
+         * Specifies the URI of the source image in the upstream registry.
+         */
+        sourceImage?: string;
+    }
+    interface WorkflowVersionRegistryMapping {
+        /**
+         * Account ID of the account that owns the upstream container image.
+         */
+        ecrAccountId?: string;
+        /**
+         * The repository prefix to use in the ECR private repository.
+         */
+        ecrRepositoryPrefix?: string;
+        /**
+         * The URI of the upstream registry.
+         */
+        upstreamRegistryUrl?: string;
+        /**
+         * The repository prefix of the corresponding repository in the upstream registry.
+         */
+        upstreamRepositoryPrefix?: string;
+    }
     interface WorkflowVersionSourceReference {
         /**
          * The type of source reference, such as branch, tag, or commit.
@@ -56912,6 +57304,9 @@ export declare namespace opensearchservice {
          * True to enable fine-grained access control. You must also enable encryption of data at rest and node-to-node encryption. See [Fine-grained access control in Amazon OpenSearch Service](https://docs.aws.amazon.com/opensearch-service/latest/developerguide/fgac.html) .
          */
         enabled?: boolean;
+        /**
+         * Input configuration for IAM identity federation within advanced security options.
+         */
         iamFederationOptions?: outputs.opensearchservice.DomainIamFederationOptions;
         /**
          * True to enable the internal user database.
@@ -68561,6 +68956,10 @@ export declare namespace quicksight {
          * The ability to add or run anomaly detection.
          */
         addOrRunAnomalyDetectionForAnalyses?: enums.quicksight.CustomPermissionsCapabilityState;
+        /**
+         * The ability to perform analysis-related actions.
+         */
+        analysis?: enums.quicksight.CustomPermissionsCapabilityState;
         /**
          * The ability to create and update email reports.
          */
@@ -68589,6 +68988,10 @@ export declare namespace quicksight {
          * The ability to create a SPICE dataset.
          */
         createSpiceDataset?: enums.quicksight.CustomPermissionsCapabilityState;
+        /**
+         * The ability to perform dashboard-related actions.
+         */
+        dashboard?: enums.quicksight.CustomPermissionsCapabilityState;
         /**
          * The ability to export to CSV files from the UI.
          */
@@ -70286,6 +70689,9 @@ export declare namespace quicksight {
         dataSetPlaceholder: string;
     }
     interface DashboardDataStoriesSharingOption {
+        /**
+         * Availability status.
+         */
         availabilityStatus?: enums.quicksight.DashboardBehavior;
     }
     interface DashboardDateAxisOptions {
@@ -70858,6 +71264,9 @@ export declare namespace quicksight {
         status?: enums.quicksight.DashboardWidgetStatus;
     }
     interface DashboardExecutiveSummaryOption {
+        /**
+         * Availability status.
+         */
         availabilityStatus?: enums.quicksight.DashboardBehavior;
     }
     interface DashboardExplicitHierarchy {
@@ -74841,7 +75250,13 @@ export declare namespace quicksight {
          * Adds Q&A capabilities to an Amazon QuickSight dashboard. If no topic is linked, Dashboard Q&A uses the data values that are rendered on the dashboard. End users can use Dashboard Q&A to ask for different slices of the data that they see on the dashboard. If a topic is linked, Topic Q&A is used.
          */
         dataQaEnabledOption?: outputs.quicksight.DashboardDataQaEnabledOption;
+        /**
+         * Data stories sharing option.
+         */
         dataStoriesSharingOption?: outputs.quicksight.DashboardDataStoriesSharingOption;
+        /**
+         * Executive summary option.
+         */
         executiveSummaryOption?: outputs.quicksight.DashboardExecutiveSummaryOption;
         /**
          * Export to .csv option.