@pulumi/aws-native 1.39.0-alpha.1764793417 → 1.39.0-alpha.1764849172

package/types/output.d.ts

@@ -690,7 +690,7 @@ export declare namespace aiops {
          */
         chatConfigurationArns?: string[];
         /**
-         * Returns the ARN of an Amazon SNS topic used for third-party chat integrations.
+         * Returns the ARN of an Amazon  topic used for third-party chat integrations.
          */
         snsTopicArn?: string;
     }
@@ -731,7 +731,7 @@ export declare namespace amazonmq {
          */
         kmsKeyId?: string;
         /**
-         * Enables the use of an AWS owned CMK using AWS KMS (KMS). Set to `true` by default, if no value is provided, for example, for RabbitMQ brokers.
+         * Enables the use of an AWS owned CMK using AWS  (KMS). Set to `true` by default, if no value is provided, for example, for RabbitMQ brokers.
          */
         useAwsOwnedKey: boolean;
     }
@@ -938,7 +938,7 @@ export declare namespace amplify {
     }
     interface BranchBackend {
         /**
-         * The Amazon Resource Name (ARN) for the AWS CloudFormation stack.
+         * The Amazon Resource Name (ARN) for the CloudFormation stack.
          */
         stackArn?: string;
     }
@@ -1966,6 +1966,10 @@ export declare namespace apigateway {
          * Specifies the integration's responses.
          */
         integrationResponses?: outputs.apigateway.MethodIntegrationResponse[];
+        /**
+         * The ALB or NLB listener to send the request to. Only supported for private integrations that use VPC links V2.
+         */
+        integrationTarget?: string;
         /**
          * Specifies how the method request body of an unmapped content type will be passed through the integration request to the back end without transformation. A content type is unmapped if no mapping template is defined in the integration or the content type does not match any of the mapped content types, as specified in `requestTemplates` . The valid value is one of the following: `WHEN_NO_MATCH` : passes the method request body through the integration request to the back end without transformation when the method request content type does not match any content type associated with the mapping templates defined in the integration request. `WHEN_NO_TEMPLATES` : passes the method request body through the integration request to the back end without transformation when no mapping template is defined in the integration request. If a template is defined when this option is selected, the method request of an unmapped content-type will be rejected with an HTTP 415 Unsupported Media Type response. `NEVER` : rejects the method request with an HTTP 415 Unsupported Media Type response when either the method request content type does not match any content type associated with the mapping templates defined in the integration request or no mapping template is defined in the integration request.
          */
@@ -1982,6 +1986,9 @@ export declare namespace apigateway {
         requestTemplates?: {
             [key: string]: string;
         };
+        /**
+         * The response transfer mode of the integration. Use `STREAM` to have API Gateway stream response your back to you or use `BUFFERED` to have API Gateway wait to receive the complete response before beginning transmission.
+         */
         responseTransferMode?: enums.apigateway.MethodIntegrationResponseTransferMode;
         /**
          * Custom timeout between 50 and 29,000 milliseconds. The default value is 29,000 milliseconds or 29 seconds. You can increase the default value to longer than 29 seconds for Regional or private APIs only.
@@ -6388,6 +6395,10 @@ export declare namespace aps {
          * Configuration for EKS metrics source
          */
         eksConfiguration?: outputs.aps.ScraperSourceEksConfigurationProperties;
+        /**
+         * Configuration for VPC metrics source
+         */
+        vpcConfiguration?: outputs.aps.ScraperSourceVpcConfigurationProperties;
     }
     /**
      * Configuration for EKS metrics source
@@ -6406,6 +6417,19 @@ export declare namespace aps {
          */
         subnetIds: string[];
     }
+    /**
+     * Configuration for VPC metrics source
+     */
+    interface ScraperSourceVpcConfigurationProperties {
+        /**
+         * List of security group IDs
+         */
+        securityGroupIds: string[];
+        /**
+         * List of subnet IDs
+         */
+        subnetIds: string[];
+    }
     /**
      * Represents a cloudwatch logs destination for query logging
      */
@@ -6803,6 +6827,44 @@ export declare namespace athena {
          */
         s3AclOption: enums.athena.WorkGroupS3AclOption;
     }
+    /**
+     * A classification refers to a set of specific configurations.
+     */
+    interface WorkGroupClassification {
+        /**
+         * The name of the configuration classification.
+         */
+        name?: string;
+        /**
+         * A set of properties specified within a configuration classification.
+         */
+        properties?: {
+            [key: string]: string;
+        };
+    }
+    /**
+     * Configuration settings for delivering logs to Amazon CloudWatch log groups.
+     */
+    interface WorkGroupCloudWatchLoggingConfiguration {
+        /**
+         * Enables CloudWatch logging.
+         */
+        enabled?: boolean;
+        /**
+         * The name of the log group in Amazon CloudWatch Logs where you want to publish your logs.
+         */
+        logGroup?: string;
+        /**
+         * Prefix for the CloudWatch log stream name.
+         */
+        logStreamNamePrefix?: string;
+        /**
+         * The types of logs that you want to publish to CloudWatch.
+         */
+        logTypes?: {
+            [key: string]: string[];
+        };
+    }
     interface WorkGroupConfiguration {
         /**
          * Specifies a user defined JSON string that is passed to the session engine.
@@ -6822,6 +6884,7 @@ export declare namespace athena {
          * If set to "true", the settings for the workgroup override client-side settings. If set to "false", client-side settings are used. For more information, see [Override client-side settings](https://docs.aws.amazon.com/athena/latest/ug/workgroups-settings-override.html) .
          */
         enforceWorkGroupConfiguration?: boolean;
+        engineConfiguration?: outputs.athena.WorkGroupEngineConfiguration;
         /**
          * The engine version that all queries running on the workgroup use.
          */
@@ -6834,6 +6897,10 @@ export declare namespace athena {
          * The configuration for storing results in Athena owned storage, which includes whether this feature is enabled; whether encryption configuration, if any, is used for encrypting query results.
          */
         managedQueryResultsConfiguration?: outputs.athena.WorkGroupManagedQueryResultsConfiguration;
+        /**
+         * Contains the configuration settings for managed log persistence, delivering logs to Amazon S3 buckets, Amazon CloudWatch log groups etc.
+         */
+        monitoringConfiguration?: outputs.athena.WorkGroupMonitoringConfiguration;
         /**
          * Indicates that the Amazon CloudWatch metrics are enabled for the workgroup.
          */
@@ -6855,9 +6922,11 @@ export declare namespace athena {
         bytesScannedCutoffPerQuery?: number;
         customerContentEncryptionConfiguration?: outputs.athena.WorkGroupCustomerContentEncryptionConfiguration;
         enforceWorkGroupConfiguration?: boolean;
+        engineConfiguration?: outputs.athena.WorkGroupEngineConfiguration;
         engineVersion?: outputs.athena.WorkGroupEngineVersion;
         executionRole?: string;
         managedQueryResultsConfiguration?: outputs.athena.WorkGroupManagedQueryResultsConfiguration;
+        monitoringConfiguration?: outputs.athena.WorkGroupMonitoringConfiguration;
         publishCloudWatchMetricsEnabled?: boolean;
         removeBytesScannedCutoffPerQuery?: boolean;
         removeCustomerContentEncryptionConfiguration?: boolean;
@@ -6888,6 +6957,39 @@ export declare namespace athena {
          */
         kmsKey?: string;
     }
+    /**
+     * The engine configuration for running queries.
+     */
+    interface WorkGroupEngineConfiguration {
+        /**
+         * Contains additional notebook engine MAP<string, string> parameter mappings in the form of key-value pairs. To specify an Athena notebook that the Jupyter server will download and serve, specify a value for the StartSessionRequest$NotebookVersion field, and then add a key named NotebookId to AdditionalConfigs that has the value of the Athena notebook ID.
+         */
+        additionalConfigs?: {
+            [key: string]: string;
+        };
+        /**
+         * The configuration classifications that can be specified for the engine.
+         */
+        classifications?: outputs.athena.WorkGroupClassification[];
+        /**
+         * The number of DPUs to use for the coordinator. A coordinator is a special executor that orchestrates processing work and manages other executors in a notebook session. The default is 1.
+         */
+        coordinatorDpuSize?: number;
+        /**
+         * The default number of DPUs to use for executors. An executor is the smallest unit of compute that a notebook session can request from Athena. The default is 1.
+         */
+        defaultExecutorDpuSize?: number;
+        /**
+         * The maximum number of DPUs that can run concurrently.
+         */
+        maxConcurrentDpus?: number;
+        /**
+         * Specifies custom jar files and Spark properties for use cases like cluster encryption, table formats, and general Spark tuning.
+         */
+        sparkProperties?: {
+            [key: string]: string;
+        };
+    }
     /**
      * The Athena engine version for running queries.
      */
@@ -6901,6 +7003,19 @@ export declare namespace athena {
          */
         selectedEngineVersion?: string;
     }
+    /**
+     * Configuration settings for managed log persistence.
+     */
+    interface WorkGroupManagedLoggingConfiguration {
+        /**
+         * Enables managed log persistence.
+         */
+        enabled?: boolean;
+        /**
+         * The KMS key ARN to encrypt the logs stored in managed log persistence.
+         */
+        kmsKey?: string;
+    }
     /**
      * The configuration for the managed query results and encryption option. ResultConfiguration and ManagedQueryResultsConfiguration cannot be set at the same time
      */
@@ -6920,6 +7035,23 @@ export declare namespace athena {
     interface WorkGroupManagedStorageEncryptionConfiguration {
         kmsKey?: string;
     }
+    /**
+     * Contains the configuration settings for managed log persistence, delivering logs to Amazon S3 buckets, Amazon CloudWatch log groups etc.
+     */
+    interface WorkGroupMonitoringConfiguration {
+        /**
+         * Configuration settings for delivering logs to Amazon CloudWatch log groups.
+         */
+        cloudWatchLoggingConfiguration?: outputs.athena.WorkGroupCloudWatchLoggingConfiguration;
+        /**
+         * Configuration settings for managed log persistence.
+         */
+        managedLoggingConfiguration?: outputs.athena.WorkGroupManagedLoggingConfiguration;
+        /**
+         * Configuration settings for delivering logs to Amazon S3 buckets.
+         */
+        s3LoggingConfiguration?: outputs.athena.WorkGroupS3LoggingConfiguration;
+    }
     /**
      * The location in Amazon S3 where query results are stored and the encryption option, if any, used for query results. These are known as "client-side settings". If workgroup settings override client-side settings, then the query uses the workgroup settings.
      */
@@ -6982,6 +7114,23 @@ export declare namespace athena {
          */
         removeOutputLocation?: boolean;
     }
+    /**
+     * Configuration settings for delivering logs to Amazon S3 buckets.
+     */
+    interface WorkGroupS3LoggingConfiguration {
+        /**
+         * Enables S3 log delivery.
+         */
+        enabled?: boolean;
+        /**
+         * The KMS key ARN to encrypt the logs published to the given Amazon S3 destination.
+         */
+        kmsKey?: string;
+        /**
+         * The Amazon S3 destination URI for log publishing.
+         */
+        logLocation?: string;
+    }
 }
 export declare namespace auditmanager {
     /**
@@ -8551,6 +8700,7 @@ export declare namespace backup {
          * The name of a logical container where backups are stored. Backup vaults are identified by names that are unique to the account used to create them and the AWS Region where they are created. They consist of letters, numbers, and hyphens.
          */
         targetBackupVault: string;
+        targetLogicallyAirGappedBackupVaultArn?: string;
     }
     interface BackupPlanCopyActionResourceType {
         /**
@@ -9018,7 +9168,7 @@ export declare namespace batch {
          *
          * When updating compute environment, changing the type of a compute environment requires an infrastructure update of the compute environment. For more information, see [Updating compute environments](https://docs.aws.amazon.com/batch/latest/userguide/updating-compute-environments.html) in the *AWS Batch User Guide* .
          *
-         * When updating the type of a compute environment, changing between `EC2` and `SPOT` or between `FARGATE` and `FARGATE_SPOT` will initiate an infrastructure update, but if you switch between `EC2` and `FARGATE` , AWS CloudFormation will create a new compute environment.
+         * When updating the type of a compute environment, changing between `EC2` and `SPOT` or between `FARGATE` and `FARGATE_SPOT` will initiate an infrastructure update, but if you switch between `EC2` and `FARGATE` , CloudFormation will create a new compute environment.
          */
         type: string;
         /**
@@ -9056,18 +9206,18 @@ export declare namespace batch {
          * - **ECS_AL2023_NVIDIA** - [Amazon Linux 2023 (GPU)](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-optimized_AMI.html#gpuami) : For all GPU instance families and can be used for all non AWS Graviton-based instance types.
          *
          * > ECS_AL2023_NVIDIA doesn't support `p3` and `g3` instance types.
-         * - **EKS** - If the `imageIdOverride` parameter isn't specified, then a recent [Amazon EKS-optimized Amazon Linux AMI](https://docs.aws.amazon.com/eks/latest/userguide/eks-optimized-ami.html) ( `EKS_AL2` ) is used. If a new image type is specified in an update, but neither an `imageId` nor a `imageIdOverride` parameter is specified, then the latest Amazon EKS optimized AMI for that image type that AWS Batch supports is used.
+         * - **EKS** - If the `imageIdOverride` parameter isn't specified, then a recent [Amazon EKS-optimized Amazon Linux 2023 AMI](https://docs.aws.amazon.com/eks/latest/userguide/eks-optimized-ami.html) ( `EKS_AL2023` ) is used. If a new image type is specified in an update, but neither an `imageId` nor a `imageIdOverride` parameter is specified, then the latest Amazon EKS optimized AMI for that image type that AWS Batch supports is used.
          *
-         * > Starting end of October 2025 Amazon EKS optimized Amazon Linux 2023 AMIs will be the default on AWS Batch for EKS versions prior to 1.33. Starting from Kubernetes version 1.33, EKS optimized Amazon Linux 2023 AMIs will be the default when it becomes supported on AWS Batch .
+         * > Amazon Linux 2023 AMIs are the default on AWS Batch for Amazon EKS.
          * >
          * > AWS will end support for Amazon EKS AL2-optimized and AL2-accelerated AMIs, starting 11/26/25. You can continue using AWS Batch -provided Amazon EKS optimized Amazon Linux 2 AMIs on your Amazon EKS compute environments beyond the 11/26/25 end-of-support date, these compute environments will no longer receive any new software updates, security patches, or bug fixes from AWS . For more information on upgrading from AL2 to AL2023, see [How to upgrade from EKS AL2 to EKS AL2023](https://docs.aws.amazon.com/batch/latest/userguide/eks-migration-2023.html) in the *AWS Batch User Guide* .
          *
-         * - **EKS_AL2** - [Amazon Linux 2](https://docs.aws.amazon.com/eks/latest/userguide/eks-optimized-ami.html) : Default for all non-GPU instance families.
-         * - **EKS_AL2_NVIDIA** - [Amazon Linux 2 (accelerated)](https://docs.aws.amazon.com/eks/latest/userguide/eks-optimized-ami.html) : Default for all GPU instance families (for example, `P4` and `G4` ) and can be used for all non AWS Graviton-based instance types.
-         * - **EKS_AL2023** - [Amazon Linux 2023](https://docs.aws.amazon.com/eks/latest/userguide/eks-optimized-ami.html) : AWS Batch supports Amazon Linux 2023.
+         * - **EKS_AL2** - [Amazon Linux 2](https://docs.aws.amazon.com/eks/latest/userguide/eks-optimized-ami.html) : Used for non-GPU instance families.
+         * - **EKS_AL2_NVIDIA** - [Amazon Linux 2 (accelerated)](https://docs.aws.amazon.com/eks/latest/userguide/eks-optimized-ami.html) : Used for GPU instance families (for example, `P4` and `G4` ) and can be used for all non AWS Graviton-based instance types.
+         * - **EKS_AL2023** - [Amazon Linux 2023](https://docs.aws.amazon.com/eks/latest/userguide/eks-optimized-ami.html) : Default for non-GPU instance families.
          *
          * > Amazon Linux 2023 does not support `A1` instances.
-         * - **EKS_AL2023_NVIDIA** - [Amazon Linux 2023 (accelerated)](https://docs.aws.amazon.com/eks/latest/userguide/eks-optimized-ami.html) : GPU instance families and can be used for all non AWS Graviton-based instance types.
+         * - **EKS_AL2023_NVIDIA** - [Amazon Linux 2023 (accelerated)](https://docs.aws.amazon.com/eks/latest/userguide/eks-optimized-ami.html) : Default for GPU instance families and can be used for all non AWS Graviton-based instance types.
          */
         imageType: string;
     }
@@ -10889,11 +11039,30 @@ export declare namespace bedrock {
          */
         transcript?: outputs.bedrock.DataAutomationProjectTranscriptConfiguration;
     }
+    interface DataAutomationProjectAudioLanguageConfiguration {
+        /**
+         * The output language of your processing results. This can either be set to `EN` (English) or `DEFAULT` which will output the results in the dominant language of the audio. The dominant language is determined as the language in the audio, spoken the longest in the input audio.
+         */
+        generativeOutputLanguage?: enums.bedrock.DataAutomationProjectAudioGenerativeOutputLanguage;
+        /**
+         * The toggle determining if you want to detect multiple languages from your audio.
+         */
+        identifyMultipleLanguages?: boolean;
+        /**
+         * The input language of your audio. This can be set to any of the currently supported languages via the language codes.
+         */
+        inputLanguages?: enums.bedrock.DataAutomationProjectLanguage[];
+    }
     interface DataAutomationProjectAudioOverrideConfiguration {
+        /**
+         * The output and input language configuration for your audio.
+         */
+        languageConfiguration?: outputs.bedrock.DataAutomationProjectAudioLanguageConfiguration;
         /**
          * Sets modality processing for audio files. All modalities are enabled by default.
          */
         modalityProcessing?: outputs.bedrock.DataAutomationProjectModalityProcessingConfiguration;
+        sensitiveDataConfiguration?: outputs.bedrock.DataAutomationProjectSensitiveDataConfiguration;
     }
     interface DataAutomationProjectAudioStandardExtraction {
         /**
@@ -10989,6 +11158,7 @@ export declare namespace bedrock {
          * Sets modality processing for document files. All modalities are enabled by default.
          */
         modalityProcessing?: outputs.bedrock.DataAutomationProjectModalityProcessingConfiguration;
+        sensitiveDataConfiguration?: outputs.bedrock.DataAutomationProjectSensitiveDataConfiguration;
         /**
          * Whether document splitter is enabled for a project.
          */
@@ -11045,6 +11215,7 @@ export declare namespace bedrock {
          * Sets modality processing for image files. All modalities are enabled by default.
          */
         modalityProcessing?: outputs.bedrock.DataAutomationProjectModalityProcessingConfiguration;
+        sensitiveDataConfiguration?: outputs.bedrock.DataAutomationProjectSensitiveDataConfiguration;
     }
     interface DataAutomationProjectImageStandardExtraction {
         /**
@@ -11128,6 +11299,15 @@ export declare namespace bedrock {
          */
         video?: outputs.bedrock.DataAutomationProjectVideoOverrideConfiguration;
     }
+    interface DataAutomationProjectPiiEntitiesConfiguration {
+        piiEntityTypes?: enums.bedrock.DataAutomationProjectPiiEntityTypes[];
+        redactionMaskMode?: enums.bedrock.DataAutomationProjectPiiRedactionMaskMode;
+    }
+    interface DataAutomationProjectSensitiveDataConfiguration {
+        detectionMode?: enums.bedrock.DataAutomationProjectSensitiveDataDetectionMode;
+        detectionScope?: enums.bedrock.DataAutomationProjectSensitiveDataDetectionScope[];
+        piiEntitiesConfiguration?: outputs.bedrock.DataAutomationProjectPiiEntitiesConfiguration;
+    }
     interface DataAutomationProjectSpeakerLabelingConfiguration {
         /**
          * State of speaker labeling, either enabled or disabled.
@@ -11192,6 +11372,7 @@ export declare namespace bedrock {
          * Sets modality processing for video files. All modalities are enabled by default.
          */
         modalityProcessing?: outputs.bedrock.DataAutomationProjectModalityProcessingConfiguration;
+        sensitiveDataConfiguration?: outputs.bedrock.DataAutomationProjectSensitiveDataConfiguration;
     }
     interface DataAutomationProjectVideoStandardExtraction {
         /**
@@ -13897,6 +14078,23 @@ export declare namespace bedrock {
          */
         uri: string;
     }
+    /**
+     * Contains the storage configuration of the knowledge base for S3 vectors.
+     */
+    interface KnowledgeBaseS3VectorsConfiguration {
+        /**
+         * The Amazon Resource Name (ARN) of the vector index used for the knowledge base. This ARN identifies the specific vector index resource within Amazon Bedrock.
+         */
+        indexArn?: string;
+        /**
+         * The name of the vector index used for the knowledge base. This name identifies the vector index within the Amazon Bedrock service.
+         */
+        indexName?: string;
+        /**
+         * The Amazon Resource Name (ARN) of the S3 bucket where vector embeddings are stored. This bucket contains the vector data used by the knowledge base.
+         */
+        vectorBucketArn?: string;
+    }
     /**
      * Configurations for a SQL knowledge base
      */
@@ -13938,6 +14136,10 @@ export declare namespace bedrock {
          * Contains details about the storage configuration of the knowledge base in Amazon RDS. For more information, see [Create a vector index in Amazon RDS](https://docs.aws.amazon.com/bedrock/latest/userguide/knowledge-base-setup-rds.html) .
          */
         rdsConfiguration?: outputs.bedrock.KnowledgeBaseRdsConfiguration;
+        /**
+         * The configuration settings for storing knowledge base data using S3 vectors. This includes vector index information and S3 bucket details for vector storage.
+         */
+        s3VectorsConfiguration?: outputs.bedrock.KnowledgeBaseS3VectorsConfiguration;
         /**
          * The vector store service in which the knowledge base is stored.
          */
@@ -14535,6 +14737,12 @@ export declare namespace bedrockagentcore {
         networkMode: enums.bedrockagentcore.BrowserCustomBrowserNetworkMode;
         vpcConfig?: outputs.bedrockagentcore.BrowserCustomVpcConfig;
     }
+    /**
+     * Browser signing configuration
+     */
+    interface BrowserCustomBrowserSigning {
+        enabled?: boolean;
+    }
     /**
      * Recording configuration for browser
      */
@@ -14633,6 +14841,9 @@ export declare namespace bedrockagentcore {
         lambdaArn: string;
         toolSchema: outputs.bedrockagentcore.GatewayTargetToolSchema0Properties | outputs.bedrockagentcore.GatewayTargetToolSchema1Properties;
     }
+    interface GatewayTargetMcpServerTargetConfiguration {
+        endpoint: string;
+    }
     interface GatewayTargetMcpTargetConfiguration0Properties {
         openApiSchema: outputs.bedrockagentcore.GatewayTargetApiSchemaConfiguration0Properties | outputs.bedrockagentcore.GatewayTargetApiSchemaConfiguration1Properties;
     }
@@ -14642,6 +14853,9 @@ export declare namespace bedrockagentcore {
     interface GatewayTargetMcpTargetConfiguration2Properties {
         lambda: outputs.bedrockagentcore.GatewayTargetMcpLambdaTargetConfiguration;
     }
+    interface GatewayTargetMcpTargetConfiguration3Properties {
+        mcpServer: outputs.bedrockagentcore.GatewayTargetMcpServerTargetConfiguration;
+    }
     interface GatewayTargetOAuthCredentialProvider {
         customParameters?: {
             [key: string]: string;
@@ -14663,7 +14877,7 @@ export declare namespace bedrockagentcore {
         type: enums.bedrockagentcore.GatewayTargetSchemaType;
     }
     interface GatewayTargetTargetConfigurationProperties {
-        mcp: outputs.bedrockagentcore.GatewayTargetMcpTargetConfiguration0Properties | outputs.bedrockagentcore.GatewayTargetMcpTargetConfiguration1Properties | outputs.bedrockagentcore.GatewayTargetMcpTargetConfiguration2Properties;
+        mcp: outputs.bedrockagentcore.GatewayTargetMcpTargetConfiguration0Properties | outputs.bedrockagentcore.GatewayTargetMcpTargetConfiguration1Properties | outputs.bedrockagentcore.GatewayTargetMcpTargetConfiguration2Properties | outputs.bedrockagentcore.GatewayTargetMcpTargetConfiguration3Properties;
     }
     interface GatewayTargetToolDefinition {
         description: string;
@@ -14848,6 +15062,7 @@ export declare namespace bedrockagentcore {
         modelId: string;
     }
     interface RuntimeAgentRuntimeArtifact {
+        codeConfiguration?: outputs.bedrockagentcore.RuntimeCodeConfiguration;
         /**
          * Representation of a container configuration.
          */
@@ -14862,6 +15077,20 @@ export declare namespace bedrockagentcore {
          */
         customJwtAuthorizer?: outputs.bedrockagentcore.RuntimeCustomJwtAuthorizerConfiguration;
     }
+    /**
+     * Object represents source code from zip file
+     */
+    interface RuntimeCode {
+        s3?: outputs.bedrockagentcore.RuntimeS3Location;
+    }
+    /**
+     * Representation of a code configuration
+     */
+    interface RuntimeCodeConfiguration {
+        code: outputs.bedrockagentcore.RuntimeCode;
+        entryPoint: string[];
+        runtime: enums.bedrockagentcore.RuntimeAgentManagedRuntimeType;
+    }
     interface RuntimeContainerConfiguration {
         /**
          * The container Uri.
@@ -14885,6 +15114,19 @@ export declare namespace bedrockagentcore {
          */
         discoveryUrl: string;
     }
+    /**
+     * Configuration for managing the lifecycle of runtime sessions and resources
+     */
+    interface RuntimeLifecycleConfiguration {
+        /**
+         * Timeout in seconds for idle runtime sessions
+         */
+        idleRuntimeSessionTimeout?: number;
+        /**
+         * Maximum lifetime in seconds for runtime sessions
+         */
+        maxLifetime?: number;
+    }
     interface RuntimeNetworkConfiguration {
         /**
          * The network mode.
@@ -14892,6 +15134,29 @@ export declare namespace bedrockagentcore {
         networkMode: enums.bedrockagentcore.RuntimeNetworkMode;
         networkModeConfig?: outputs.bedrockagentcore.RuntimeVpcConfig;
     }
+    /**
+     * Configuration for HTTP request headers
+     */
+    interface RuntimeRequestHeaderConfiguration {
+        requestHeaderAllowlist?: string[];
+    }
+    /**
+     * S3 Location Configuration
+     */
+    interface RuntimeS3Location {
+        /**
+         * S3 bucket name
+         */
+        bucket: string;
+        /**
+         * S3 object key prefix
+         */
+        prefix: string;
+        /**
+         * S3 object version ID
+         */
+        versionId?: string;
+    }
     /**
      * Network mode configuration for VPC
      */
@@ -15235,6 +15500,13 @@ export declare namespace cassandra {
          */
         targetValue: number;
     }
+    /**
+     * Warm throughput configuration for the table
+     */
+    interface TableWarmThroughput {
+        readUnitsPerSecond?: number;
+        writeUnitsPerSecond?: number;
+    }
     interface TypeField {
         /**
          * The name of the field.
@@ -16025,6 +16297,10 @@ export declare namespace cloudformation {
         outputValue?: string;
     }
     interface StackSetAutoDeployment {
+        /**
+         * A list of StackSet ARNs that this StackSet depends on for auto-deployment operations. When auto-deployment is triggered, operations will be sequenced to ensure all dependencies complete successfully before this StackSet's operation begins.
+         */
+        dependsOn?: string[];
         /**
          * If set to true, StackSets automatically deploys additional stack instances to AWS Organizations accounts that are added to a target organization or organizational unit (OU) in the specified Regions. If an account is removed from a target organization or OU, StackSets deletes stack instances from the account in the specified Regions.
          */
@@ -16311,6 +16587,26 @@ export declare namespace cloudfront {
          */
         comment: string;
     }
+    interface ConnectionFunctionConfig {
+        /**
+         * A comment to describe the function.
+         */
+        comment: string;
+        /**
+         * The configuration for the key value store associations.
+         */
+        keyValueStoreAssociations?: outputs.cloudfront.ConnectionFunctionKeyValueStoreAssociation[];
+        /**
+         * The function's runtime environment version.
+         */
+        runtime: enums.cloudfront.ConnectionFunctionConfigRuntime;
+    }
+    interface ConnectionFunctionKeyValueStoreAssociation {
+        /**
+         * The Amazon Resource Name (ARN) of the key value store association.
+         */
+        keyValueStoreArn: string;
+    }
     /**
      * Contains the configuration for a continuous deployment policy.
      */
@@ -16568,6 +16864,10 @@ export declare namespace cloudfront {
          * A comment to describe the distribution. The comment cannot be longer than 128 characters.
          */
         comment?: string;
+        /**
+         * The distribution's connection function association.
+         */
+        connectionFunctionAssociation?: outputs.cloudfront.DistributionConnectionFunctionAssociation;
         /**
          * This field specifies whether the connection mode is through a standard distribution (direct) or a multi-tenant distribution with distribution tenants (tenant-only).
          */
@@ -16670,6 +16970,10 @@ export declare namespace cloudfront {
          * A complex type that determines the distribution's SSL/TLS configuration for communicating with viewers.
          */
         viewerCertificate?: outputs.cloudfront.DistributionViewerCertificate;
+        /**
+         * The distribution's viewer mTLS configuration.
+         */
+        viewerMtlsConfig?: outputs.cloudfront.DistributionViewerMtlsConfig;
         /**
          * Multi-tenant distributions only support WAF V2 web ACLs.
          *   A unique identifier that specifies the WAF web ACL, if any, to associate with this distribution. To specify a web ACL created using the latest version of WAF, use the ACL ARN, for example ``arn:aws:wafv2:us-east-1:123456789012:global/webacl/ExampleWebACL/a1b2c3d4-5678-90ab-cdef-EXAMPLE11111``. To specify a web ACL created using WAF Classic, use the ACL ID, for example ``a1b2c3d4-5678-90ab-cdef-EXAMPLE11111``.
@@ -16684,6 +16988,12 @@ export declare namespace cloudfront {
     interface DistributionConfigTenantConfigProperties {
         parameterDefinitions?: outputs.cloudfront.DistributionParameterDefinition[];
     }
+    interface DistributionConnectionFunctionAssociation {
+        /**
+         * The association's ID.
+         */
+        id: string;
+    }
     /**
      * This field is deprecated. We recommend that you use a cache policy or an origin request policy instead of this field.
      *  If you want to include cookies in the cache key, use a cache policy. For more information, see [Creating cache policies](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/controlling-the-cache-key.html#cache-key-create-cache-policy) in the *Amazon CloudFront Developer Guide*.
@@ -17407,6 +17717,20 @@ export declare namespace cloudfront {
          */
         arn?: string;
     }
+    interface DistributionTrustStoreConfig {
+        /**
+         * The configuration to use to advertise trust store CA names.
+         */
+        advertiseTrustStoreCaNames?: boolean;
+        /**
+         * The configuration to use to ignore certificate expiration.
+         */
+        ignoreCertificateExpiry?: boolean;
+        /**
+         * The trust store ID.
+         */
+        trustStoreId: string;
+    }
     /**
      * A complex type that determines the distribution's SSL/TLS configuration for communicating with viewers.
      *  If the distribution doesn't use ``Aliases`` (also known as alternate domain names or CNAMEs)—that is, if the distribution uses the CloudFront domain name such as ``d111111abcdef8.cloudfront.net``—set ``CloudFrontDefaultCertificate`` to ``true`` and leave all other fields empty.
@@ -17468,6 +17792,16 @@ export declare namespace cloudfront {
          */
         sslSupportMethod?: string;
     }
+    interface DistributionViewerMtlsConfig {
+        /**
+         * The viewer mTLS mode.
+         */
+        mode?: enums.cloudfront.DistributionViewerMtlsMode;
+        /**
+         * The trust store configuration associated with the viewer mTLS configuration.
+         */
+        trustStoreConfig?: outputs.cloudfront.DistributionTrustStoreConfig;
+    }
     /**
      * An Amazon CloudFront VPC origin configuration.
      */
@@ -18059,6 +18393,30 @@ export declare namespace cloudfront {
          */
         reportUri?: string;
     }
+    interface TrustStoreCaCertificatesBundleS3Location {
+        /**
+         * The S3 bucket containing the CA certificates bundle PEM file
+         */
+        bucket: string;
+        /**
+         * The S3 object key of the CA certificates bundle PEM file
+         */
+        key: string;
+        /**
+         * The S3 bucket region
+         */
+        region: string;
+        /**
+         * The S3 object version of the CA certificates bundle PEM file
+         */
+        version?: string;
+    }
+    interface TrustStoreCaCertificatesBundleSource {
+        /**
+         * The CA certificates bundle location in Amazon S3.
+         */
+        caCertificatesBundleS3Location: outputs.cloudfront.TrustStoreCaCertificatesBundleS3Location;
+    }
     /**
      * An Amazon CloudFront VPC origin endpoint configuration.
      */
@@ -18222,7 +18580,7 @@ export declare namespace cloudtrail {
         insightType?: string;
     }
     /**
-     * Advanced event selectors let you create fine-grained selectors for the following AWS CloudTrail event record fields. They help you control costs by logging only those events that are important to you.
+     * Advanced event selectors let you create fine-grained selectors for the following AWS CloudTrail event record fields. They help you control costs by logging only those events that are important to you.
      */
     interface TrailAdvancedEventSelector {
         /**
@@ -18267,6 +18625,19 @@ export declare namespace cloudtrail {
          */
         startsWith?: string[];
     }
+    /**
+     * Configure to add aggregation rules to aggregate CloudTrail Events.
+     */
+    interface TrailAggregationConfiguration {
+        /**
+         * The category of events to be aggregated.
+         */
+        eventCategory: enums.cloudtrail.TrailAggregationConfigurationEventCategory;
+        /**
+         * Contains all templates in an aggregation configuration.
+         */
+        templates: enums.cloudtrail.TrailTemplate[];
+    }
     /**
      * CloudTrail supports data event logging for Amazon S3 objects and AWS Lambda functions. You can specify up to 250 resources for an individual event selector, but the total number of data resources cannot exceed 250 across all event selectors in a trail. This limit does not apply if you configure resource logging for all data events.
      */
@@ -18309,6 +18680,10 @@ export declare namespace cloudtrail {
      * A string that contains insight types that are logged on a trail.
      */
     interface TrailInsightSelector {
+        /**
+         * The categories of events for which to log insights. By default, insights are logged for management events only.
+         */
+        eventCategories?: enums.cloudtrail.TrailSourceEventCategory[];
         /**
          * The type of insight to log on a trail.
          */
@@ -20015,18 +20390,18 @@ export declare namespace comprehend {
     }
     interface FlywheelDataSecurityConfig {
         /**
-         * ID for the AWS KMS key that Amazon Comprehend uses to encrypt the data in the data lake.
+         * ID for the AWS  key that Amazon Comprehend uses to encrypt the data in the data lake.
          */
         dataLakeKmsKeyId?: string;
         /**
-         * ID for the AWS KMS key that Amazon Comprehend uses to encrypt trained custom models. The ModelKmsKeyId can be either of the following formats:
+         * ID for the AWS  key that Amazon Comprehend uses to encrypt trained custom models. The ModelKmsKeyId can be either of the following formats:
          *
          * - KMS Key ID: `"1234abcd-12ab-34cd-56ef-1234567890ab"`
          * - Amazon Resource Name (ARN) of a KMS Key: `"arn:aws:kms:us-west-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab"`
          */
         modelKmsKeyId?: string;
         /**
-         * ID for the AWS KMS key that Amazon Comprehend uses to encrypt the volume.
+         * ID for the AWS  key that Amazon Comprehend uses to encrypt the volume.
          */
         volumeKmsKeyId?: string;
         /**
@@ -20408,12 +20783,18 @@ export declare namespace connect {
          */
         emailAddressArn: string;
     }
+    /**
+     * Configuration information about automated evaluations.
+     */
     interface EvaluationFormAutoEvaluationConfiguration {
         enabled?: boolean;
     }
+    /**
+     * Information about automatic fail configuration for an evaluation form.
+     */
     interface EvaluationFormAutomaticFailConfiguration {
         /**
-         * The target section refId to control failure propagation boundary.
+         * The referenceId of the target section for auto failure.
          */
         targetSection?: string;
     }
@@ -20439,71 +20820,159 @@ export declare namespace connect {
          */
         section?: outputs.connect.EvaluationFormSection;
     }
+    /**
+     * A condition for item enablement.
+     */
     interface EvaluationFormItemEnablementCondition {
         /**
-         * The list of operands that compose the condition. Each operand represents a specific criteria to be evaluated.
+         * Operands of the enablement condition.
          */
         operands: outputs.connect.EvaluationFormItemEnablementConditionOperand[];
         /**
-         * The logical operator used to combine multiple operands, determining how the condition is evaluated as a whole.
+         * The operator to be used to be applied to operands if more than one provided.
          */
         operator?: enums.connect.EvaluationFormItemEnablementConditionOperator;
     }
+    /**
+     * An operand of the enablement condition.
+     */
     interface EvaluationFormItemEnablementConditionOperand {
         /**
-         * A direct comparison expression that evaluates a form item's value against specified criteria.
+         * An expression of the enablement condition.
          */
         expression?: outputs.connect.EvaluationFormItemEnablementExpression;
     }
+    /**
+     * An item enablement configuration.
+     */
     interface EvaluationFormItemEnablementConfiguration {
         /**
-         * Defines the enablement status to be applied when the specified condition is met.
+         * An enablement action that if condition is satisfied.
          */
         action: enums.connect.EvaluationFormItemEnablementConfigurationAction;
         /**
-         * Specifies the logical condition that determines when to apply the enablement rules.
+         * A condition for item enablement configuration.
          */
         condition: outputs.connect.EvaluationFormItemEnablementCondition;
         /**
-         * Specifies the default enablement status to be applied when the condition is not satisfied.
+         * An enablement action that if condition is not satisfied.
          */
         defaultAction?: enums.connect.EvaluationFormItemEnablementConfigurationDefaultAction;
     }
+    /**
+     * An expression that defines a basic building block of conditional enablement.
+     */
     interface EvaluationFormItemEnablementExpression {
         /**
-         * Specifies the comparison method to determine if the source value matches any of the specified values.
+         * A comparator to be used against list of values.
          */
         comparator: enums.connect.EvaluationFormItemEnablementExpressionComparator;
         /**
-         * Identifies the form item whose value will be evaluated in the expression.
+         * A source item of enablement expression.
          */
         source: outputs.connect.EvaluationFormItemEnablementSource;
         /**
-         * The list of possible values to compare against the source form item's value.
+         * A list of values from source item.
          */
         values: outputs.connect.EvaluationFormItemEnablementSourceValue[];
     }
+    /**
+     * An enablement expression source item.
+     */
     interface EvaluationFormItemEnablementSource {
+        /**
+         * A referenceId of the source item.
+         */
         refId?: string;
         /**
-         * The type of the source entity.
+         * A type of source item.
          */
         type: enums.connect.EvaluationFormItemEnablementSourceType;
     }
+    /**
+     * An enablement expression source value.
+     */
     interface EvaluationFormItemEnablementSourceValue {
         /**
-         * The reference id of the source entity value.
+         * A referenceId of the source value.
          */
         refId?: string;
         /**
-         * Type of the source entity value.
+         * A type of source item value.
          */
         type?: enums.connect.EvaluationFormItemEnablementSourceValueType;
     }
+    interface EvaluationFormLanguageConfiguration {
+        /**
+         * The language of the form
+         */
+        formLanguage?: enums.connect.EvaluationFormLanguageConfigurationFormLanguage;
+    }
+    interface EvaluationFormMultiSelectQuestionAutomation {
+        /**
+         * The source of automation answer of the question.
+         */
+        answerSource?: outputs.connect.EvaluationFormQuestionAutomationAnswerSource;
+        /**
+         * The option reference identifiers of the default answers.
+         */
+        defaultOptionRefIds?: string[];
+        /**
+         * The answer options for the automation.
+         */
+        options: outputs.connect.EvaluationFormMultiSelectQuestionAutomationOption[];
+    }
+    interface EvaluationFormMultiSelectQuestionAutomationOption {
+        /**
+         * The automation option based on Rules categories.
+         */
+        ruleCategory: outputs.connect.EvaluationFormMultiSelectQuestionRuleCategoryAutomation;
+    }
+    interface EvaluationFormMultiSelectQuestionOption {
+        /**
+         * The identifier used to reference the option.
+         */
+        refId: string;
+        /**
+         * The title of the option.
+         */
+        text: string;
+    }
+    interface EvaluationFormMultiSelectQuestionProperties {
+        /**
+         * The automation properties for the multi-select question.
+         */
+        automation?: outputs.connect.EvaluationFormMultiSelectQuestionAutomation;
+        /**
+         * The display mode of the multi-select question.
+         */
+        displayAs?: enums.connect.EvaluationFormMultiSelectQuestionPropertiesDisplayAs;
+        /**
+         * The list of options for the question.
+         */
+        options: outputs.connect.EvaluationFormMultiSelectQuestionOption[];
+    }
+    interface EvaluationFormMultiSelectQuestionRuleCategoryAutomation {
+        /**
+         * The category name as defined in Rules.
+         */
+        category: string;
+        /**
+         * The automation condition applied on contact categories.
+         */
+        condition: enums.connect.EvaluationFormMultiSelectQuestionRuleCategoryAutomationCondition;
+        /**
+         * The option identifiers referencing the options to be selected when the automation option is triggered.
+         */
+        optionRefIds: string[];
+    }
     /**
      * Information about the automation configuration in numeric questions.
      */
     interface EvaluationFormNumericQuestionAutomation {
+        /**
+         * A source of automation answer for numeric question.
+         */
         answerSource?: outputs.connect.EvaluationFormQuestionAutomationAnswerSource;
         /**
          * The property value of the automation.
@@ -20518,6 +20987,9 @@ export declare namespace connect {
          * The flag to mark the option as automatic fail. If an automatic fail answer is provided, the overall evaluation gets a score of 0.
          */
         automaticFail?: boolean;
+        /**
+         * A configuration for automatic fail.
+         */
         automaticFailConfiguration?: outputs.connect.EvaluationFormAutomaticFailConfiguration;
         /**
          * The maximum answer value of the range option.
@@ -20568,6 +21040,9 @@ export declare namespace connect {
      * Information about a question from an evaluation form.
      */
     interface EvaluationFormQuestion {
+        /**
+         * A question conditional enablement.
+         */
         enablement?: outputs.connect.EvaluationFormItemEnablementConfiguration;
         /**
          * The instructions of the section.
@@ -20604,9 +21079,12 @@ export declare namespace connect {
          */
         weight?: number;
     }
+    /**
+     * A question automation answer.
+     */
     interface EvaluationFormQuestionAutomationAnswerSource {
         /**
-         * The type of the answer sourcr
+         * The automation answer source type.
          */
         sourceType: enums.connect.EvaluationFormQuestionAutomationAnswerSourceSourceType;
     }
@@ -20614,6 +21092,7 @@ export declare namespace connect {
      * Information about properties for a question in an evaluation form. The question type properties must be either for a numeric question or a single select question.
      */
     interface EvaluationFormQuestionTypeProperties {
+        multiSelect?: outputs.connect.EvaluationFormMultiSelectQuestionProperties;
         /**
          * The properties of the numeric question.
          */
@@ -20622,6 +21101,9 @@ export declare namespace connect {
          * The properties of the numeric question.
          */
         singleSelect?: outputs.connect.EvaluationFormSingleSelectQuestionProperties;
+        /**
+         * The properties of the text question.
+         */
         text?: outputs.connect.EvaluationFormTextQuestionProperties;
     }
     /**
@@ -20673,6 +21155,9 @@ export declare namespace connect {
      * Information about the automation configuration in single select questions. Automation options are evaluated in order, and the first matched option is applied. If no automation option matches, and there is a default option, then the default option is applied.
      */
     interface EvaluationFormSingleSelectQuestionAutomation {
+        /**
+         * Automation answer source.
+         */
         answerSource?: outputs.connect.EvaluationFormQuestionAutomationAnswerSource;
         /**
          * The identifier of the default answer option, when none of the automation options match the criteria.
@@ -20703,6 +21188,9 @@ export declare namespace connect {
          * The flag to mark the option as automatic fail. If an automatic fail answer is provided, the overall evaluation gets a score of 0.
          */
         automaticFail?: boolean;
+        /**
+         * Whether automatic fail is configured on a single select question.
+         */
         automaticFailConfiguration?: outputs.connect.EvaluationFormAutomaticFailConfiguration;
         /**
          * The identifier of the answer option. An identifier must be unique within the question.
@@ -20764,15 +21252,27 @@ export declare namespace connect {
          */
         optionRefId: string;
     }
+    interface EvaluationFormTargetConfiguration {
+        /**
+         * The interaction type of a contact
+         */
+        contactInteractionType: enums.connect.EvaluationFormTargetConfigurationContactInteractionType;
+    }
+    /**
+     * Information about the automation configuration in text questions.
+     */
     interface EvaluationFormTextQuestionAutomation {
         /**
-         * The source of automation answer of the question.
+         * Automation answer source.
          */
         answerSource?: outputs.connect.EvaluationFormQuestionAutomationAnswerSource;
     }
+    /**
+     * Information about properties for a text question in an evaluation form.
+     */
     interface EvaluationFormTextQuestionProperties {
         /**
-         * Specifies how the question can be automatically answered.
+         * The automation properties of the text question.
          */
         automation?: outputs.connect.EvaluationFormTextQuestionAutomation;
     }
@@ -21964,6 +22464,7 @@ export declare namespace connectcampaignsv2 {
          * The Amazon Connect source phone number.
          */
         connectSourcePhoneNumber?: string;
+        ringTimeout?: number;
     }
     /**
      * Telephony Outbound Mode
@@ -21977,6 +22478,9 @@ export declare namespace connectcampaignsv2 {
          * Contains predictive outbound mode configuration.
          */
         predictiveConfig?: outputs.connectcampaignsv2.CampaignPredictiveConfig;
+        /**
+         * Contains preview outbound mode configuration.
+         */
         previewConfig?: outputs.connectcampaignsv2.CampaignPreviewConfig;
         /**
          * Contains progressive telephony outbound mode configuration.
@@ -22207,6 +22711,16 @@ export declare namespace customerprofiles {
          */
         matchingAttributesList: string[][];
     }
+    /**
+     * Configuration and status of the data store for the domain.
+     */
+    interface DomainDataStore {
+        /**
+         * Whether the data store is enabled.
+         */
+        enabled?: boolean;
+        readiness?: outputs.customerprofiles.DomainReadiness;
+    }
     /**
      * Configuration information for exporting Identity Resolution results, for example, to an S3 bucket.
      */
@@ -22256,6 +22770,19 @@ export declare namespace customerprofiles {
          */
         rule: string[];
     }
+    /**
+     * Progress information for data store setup.
+     */
+    interface DomainReadiness {
+        /**
+         * A message describing the current progress.
+         */
+        message?: string;
+        /**
+         * The percentage of progress completed.
+         */
+        progressPercentage?: number;
+    }
     /**
      * The process of matching duplicate profiles using the Rule-Based matching. If RuleBasedMatching = true, Amazon Connect Customer Profiles will start to match and merge your profiles according to your configuration in the RuleBasedMatchingRequest. You can use the ListRuleBasedMatches and GetSimilarProfiles API to return and review the results. Also, if you have configured ExportingConfig in the RuleBasedMatchingRequest, you can download the results from S3.
      */
@@ -25404,11 +25931,11 @@ export declare namespace dms {
          */
         dnsNameServers?: string;
         /**
-         * An AWS Key Management Service ( AWS KMS ) key Amazon Resource Name (ARN) that is used to encrypt the data during AWS DMS Serverless replication.
+         * An AWS Key Management Service ( AWS  ) key Amazon Resource Name (ARN) that is used to encrypt the data during AWS DMS Serverless replication.
          *
          * If you don't specify a value for the `KmsKeyId` parameter, AWS DMS uses your default encryption key.
          *
-         * AWS KMS creates the default encryption key for your Amazon Web Services account. Your AWS account has a different default encryption key for each AWS Region .
+         * AWS  creates the default encryption key for your Amazon Web Services account. Your AWS account has a different default encryption key for each AWS Region .
          */
         kmsKeyId?: string;
         /**
@@ -25881,7 +26408,7 @@ export declare namespace dynamodb {
     }
     interface GlobalTableReplicaSseSpecification {
         /**
-         * The AWS KMS key that should be used for the AWS KMS encryption. To specify a key, use its key ID, Amazon Resource Name (ARN), alias name, or alias ARN. Note that you should only provide this parameter if the key is different from the default DynamoDB key `alias/aws/dynamodb` .
+         * The AWS  key that should be used for the AWS  encryption. To specify a key, use its key ID, Amazon Resource Name (ARN), alias name, or alias ARN. Note that you should only provide this parameter if the key is different from the default DynamoDB key `alias/aws/dynamodb` .
          */
         kmsMasterKeyId: string;
     }
@@ -25893,7 +26420,7 @@ export declare namespace dynamodb {
          *
          * You can update the `ResourcePolicy` property if you've specified more than one table using the [AWS ::DynamoDB::GlobalTable](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-dynamodb-globaltable.html) resource.
          */
-        resourcePolicy?: outputs.dynamodb.GlobalTableResourcePolicy;
+        resourcePolicy: outputs.dynamodb.GlobalTableResourcePolicy;
     }
     interface GlobalTableResourcePolicy {
         /**
@@ -25903,13 +26430,13 @@ export declare namespace dynamodb {
     }
     interface GlobalTableSseSpecification {
         /**
-         * Indicates whether server-side encryption is performed using an AWS managed key or an AWS owned key. If enabled (true), server-side encryption type is set to KMS and an AWS managed key is used ( AWS KMS charges apply). If disabled (false) or not specified,server-side encryption is set to an AWS owned key. If you choose to use KMS encryption, you can also use customer managed KMS keys by specifying them in the `ReplicaSpecification.SSESpecification` object. You cannot mix AWS managed and customer managed KMS keys.
+         * Indicates whether server-side encryption is performed using an AWS managed key or an AWS owned key. If enabled (true), server-side encryption type is set to KMS and an AWS managed key is used ( AWS  charges apply). If disabled (false) or not specified,server-side encryption is set to an AWS owned key. If you choose to use KMS encryption, you can also use customer managed KMS keys by specifying them in the `ReplicaSpecification.SSESpecification` object. You cannot mix AWS managed and customer managed KMS keys.
          */
         sseEnabled: boolean;
         /**
          * Server-side encryption type. The only supported value is:
          *
-         * - `KMS` - Server-side encryption that uses AWS Key Management Service . The key is stored in your account and is managed by AWS KMS ( AWS KMS charges apply).
+         * - `KMS` - Server-side encryption that uses AWS Key Management Service . The key is stored in your account and is managed by AWS  ( AWS  charges apply).
          */
         sseType?: string;
     }
@@ -26746,12 +27273,19 @@ export declare namespace ec2 {
          * - For instance types with NVIDIA A100 GPUs, specify `a100` .
          * - For instance types with NVIDIA H100 GPUs, specify `h100` .
          * - For instance types with AWS Inferentia chips, specify `inferentia` .
+         * - For instance types with AWS Inferentia2 chips, specify `inferentia2` .
+         * - For instance types with Habana Gaudi HL-205 GPUs, specify `gaudi-hl-205` .
          * - For instance types with NVIDIA GRID K520 GPUs, specify `k520` .
          * - For instance types with NVIDIA K80 GPUs, specify `k80` .
+         * - For instance types with NVIDIA L4 GPUs, specify `l4` .
+         * - For instance types with NVIDIA L40S GPUs, specify `l40s` .
          * - For instance types with NVIDIA M60 GPUs, specify `m60` .
          * - For instance types with AMD Radeon Pro V520 GPUs, specify `radeon-pro-v520` .
+         * - For instance types with AWS Trainium chips, specify `trainium` .
+         * - For instance types with AWS Trainium2 chips, specify `trainium2` .
          * - For instance types with NVIDIA T4 GPUs, specify `t4` .
          * - For instance types with NVIDIA T4G GPUs, specify `t4g` .
+         * - For instance types with Xilinx U30 cards, specify `u30` .
          * - For instance types with Xilinx VU9P FPGAs, specify `vu9p` .
          * - For instance types with NVIDIA V100 GPUs, specify `v100` .
          *
@@ -26770,6 +27304,7 @@ export declare namespace ec2 {
          * - For instance types with FPGA accelerators, specify `fpga` .
          * - For instance types with GPU accelerators, specify `gpu` .
          * - For instance types with Inference accelerators, specify `inference` .
+         * - For instance types with Media accelerators, specify `media` .
          *
          * Default: Any accelerator type
          */
@@ -27598,6 +28133,19 @@ export declare namespace ec2 {
          */
         organizationsEntityPath: string;
     }
+    /**
+     * External service configuration to connect your AWS IPAM scope.
+     */
+    interface IpamScopeExternalAuthorityConfiguration {
+        /**
+         * Resource identifier of the scope in the external service connecting to your AWS IPAM scope.
+         */
+        externalResourceIdentifier: string;
+        /**
+         * An external service connecting to your AWS IPAM scope.
+         */
+        ipamScopeExternalAuthorityType: enums.ec2.IpamScopeExternalAuthorityConfigurationIpamScopeExternalAuthorityType;
+    }
     /**
      * The minimum and maximum number of accelerators (GPUs, FPGAs, or AWS Inferentia chips) on an instance.
      */
@@ -29780,12 +30328,19 @@ export declare namespace ec2 {
          * - For instance types with NVIDIA A100 GPUs, specify `a100` .
          * - For instance types with NVIDIA H100 GPUs, specify `h100` .
          * - For instance types with AWS Inferentia chips, specify `inferentia` .
+         * - For instance types with AWS Inferentia2 chips, specify `inferentia2` .
+         * - For instance types with Habana Gaudi HL-205 GPUs, specify `gaudi-hl-205` .
          * - For instance types with NVIDIA GRID K520 GPUs, specify `k520` .
          * - For instance types with NVIDIA K80 GPUs, specify `k80` .
+         * - For instance types with NVIDIA L4 GPUs, specify `l4` .
+         * - For instance types with NVIDIA L40S GPUs, specify `l40s` .
          * - For instance types with NVIDIA M60 GPUs, specify `m60` .
          * - For instance types with AMD Radeon Pro V520 GPUs, specify `radeon-pro-v520` .
+         * - For instance types with AWS Trainium chips, specify `trainium` .
+         * - For instance types with AWS Trainium2 chips, specify `trainium2` .
          * - For instance types with NVIDIA T4 GPUs, specify `t4` .
          * - For instance types with NVIDIA T4G GPUs, specify `t4g` .
+         * - For instance types with Xilinx U30 cards, specify `u30` .
          * - For instance types with Xilinx VU9P FPGAs, specify `vu9p` .
          * - For instance types with NVIDIA V100 GPUs, specify `v100` .
          *
@@ -29804,6 +30359,7 @@ export declare namespace ec2 {
          * - For instance types with FPGA accelerators, specify `fpga` .
          * - For instance types with GPU accelerators, specify `gpu` .
          * - For instance types with Inference accelerators, specify `inference` .
+         * - For instance types with Media accelerators, specify `media` .
          *
          * Default: Any accelerator type
          */
@@ -30844,6 +31400,50 @@ export declare namespace ec2 {
          */
         userInfoEndpoint?: string;
     }
+    interface VpcEncryptionControlExclusion {
+        /**
+         * The current state of the exclusion configuration.
+         */
+        state?: string;
+        /**
+         * A message providing additional information about the exclusion state.
+         */
+        stateMessage?: string;
+    }
+    interface VpcEncryptionControlResourceExclusions {
+        /**
+         * Specifies whether to exclude egress-only internet gateway traffic from encryption enforcement.
+         */
+        egressOnlyInternetGateway?: outputs.ec2.VpcEncryptionControlExclusion;
+        /**
+         * Specifies whether to exclude Elastic File System traffic from encryption enforcement.
+         */
+        elasticFileSystem?: outputs.ec2.VpcEncryptionControlExclusion;
+        /**
+         * Specifies whether to exclude internet gateway traffic from encryption enforcement.
+         */
+        internetGateway?: outputs.ec2.VpcEncryptionControlExclusion;
+        /**
+         * Specifies whether to exclude Lambda function traffic from encryption enforcement.
+         */
+        lambda?: outputs.ec2.VpcEncryptionControlExclusion;
+        /**
+         * Specifies whether to exclude NAT gateway traffic from encryption enforcement.
+         */
+        natGateway?: outputs.ec2.VpcEncryptionControlExclusion;
+        /**
+         * Specifies whether to exclude virtual private gateway traffic from encryption enforcement.
+         */
+        virtualPrivateGateway?: outputs.ec2.VpcEncryptionControlExclusion;
+        /**
+         * Specifies whether to exclude VPC Lattice traffic from encryption enforcement.
+         */
+        vpcLattice?: outputs.ec2.VpcEncryptionControlExclusion;
+        /**
+         * Specifies whether to exclude VPC peering connection traffic from encryption enforcement.
+         */
+        vpcPeering?: outputs.ec2.VpcEncryptionControlExclusion;
+    }
     /**
      * Describes the DNS options for an endpoint.
      */
@@ -30856,11 +31456,35 @@ export declare namespace ec2 {
          * Indicates whether to enable private DNS only for inbound endpoints. This option is available only for services that support both gateway and interface endpoints. It routes traffic that originates from the VPC to the gateway endpoint and traffic that originates from on-premises to the interface endpoint.
          */
         privateDnsOnlyForInboundResolverEndpoint?: enums.ec2.VpcEndpointDnsOptionsSpecificationPrivateDnsOnlyForInboundResolverEndpoint;
+        /**
+         * The preference for which private domains have a private hosted zone created for and associated with the specified VPC. Only supported when private DNS is enabled and when the VPC endpoint type is ServiceNetwork or Resource.
+         */
+        privateDnsPreference?: enums.ec2.VpcEndpointDnsOptionsSpecificationPrivateDnsPreference;
+        /**
+         * Indicates which of the private domains to create private hosted zones for and associate with the specified VPC. Only supported when private DNS is enabled and the private DNS preference is `VERIFIED_DOMAINS_AND_SPECIFIED_DOMAINS` or `SPECIFIED_DOMAINS_ONLY` .
+         */
+        privateDnsSpecifiedDomains?: string[];
     }
     /**
      * Options for sending VPN tunnel logs to CloudWatch.
      */
     interface VpnConnectionCloudwatchLogOptionsSpecification {
+        /**
+         * Specifies whether to enable BGP logging for the VPN connection. Default value is `False` .
+         *
+         * Valid values: `True` | `False`
+         */
+        bgpLogEnabled?: boolean;
+        /**
+         * The Amazon Resource Name (ARN) of the CloudWatch log group where BGP logs will be sent.
+         */
+        bgpLogGroupArn?: string;
+        /**
+         * The desired output format for BGP logs to be sent to CloudWatch. Default format is `json` .
+         *
+         * Valid values: `json` | `text`
+         */
+        bgpLogOutputFormat?: enums.ec2.VpnConnectionCloudwatchLogOptionsSpecificationBgpLogOutputFormat;
         /**
          * Enable or disable VPN tunnel logging feature. Default value is ``False``.
          *  Valid values: ``True`` | ``False``
@@ -31190,9 +31814,9 @@ export declare namespace ecr {
         /**
          * The encryption type to use.
          *
-         * If you use the `KMS` encryption type, the contents of the repository will be encrypted using server-side encryption with AWS Key Management Service key stored in AWS KMS . When you use AWS KMS to encrypt your data, you can either use the default AWS managed AWS KMS key for Amazon ECR, or specify your own AWS KMS key, which you already created.
+         * If you use the `KMS` encryption type, the contents of the repository will be encrypted using server-side encryption with AWS Key Management Service key stored in AWS  . When you use AWS  to encrypt your data, you can either use the default AWS managed AWS  key for Amazon ECR, or specify your own AWS  key, which you already created.
          *
-         * If you use the `KMS_DSSE` encryption type, the contents of the repository will be encrypted with two layers of encryption using server-side encryption with the AWS KMS Management Service key stored in AWS KMS . Similar to the `KMS` encryption type, you can either use the default AWS managed AWS KMS key for Amazon ECR, or specify your own AWS KMS key, which you've already created.
+         * If you use the `KMS_DSSE` encryption type, the contents of the repository will be encrypted with two layers of encryption using server-side encryption with the AWS  Management Service key stored in AWS  . Similar to the `KMS` encryption type, you can either use the default AWS managed AWS  key for Amazon ECR, or specify your own AWS  key, which you've already created.
          *
          * If you use the `AES256` encryption type, Amazon ECR uses server-side encryption with Amazon S3-managed encryption keys which encrypts the images in the repository using an AES256 encryption algorithm.
          *
@@ -31234,6 +31858,35 @@ export declare namespace ecr {
          */
         registryId?: string;
     }
+    /**
+     * An array of objects representing the details of a repository filter.
+     */
+    interface SigningConfigurationRepositoryFilter {
+        /**
+         * The filter value used to match repository names. When using `WILDCARD_MATCH` , the `*` character matches any sequence of characters.
+         *
+         * Examples:
+         *
+         * - `myapp/*` - Matches all repositories starting with `myapp/`
+         * - `*&#47;production` - Matches all repositories ending with `/production`
+         * - `*prod*` - Matches all repositories containing `prod`
+         */
+        filter: string;
+        /**
+         * The type of filter to apply. Currently, only `WILDCARD_MATCH` is supported, which uses wildcard patterns to match repository names.
+         */
+        filterType: enums.ecr.SigningConfigurationFilterType;
+    }
+    interface SigningConfigurationRule {
+        /**
+         * Optional array of repository filters. If omitted, the rule matches all repositories. If provided, must contain at least one filter. Empty arrays are not allowed.
+         */
+        repositoryFilters?: outputs.ecr.SigningConfigurationRepositoryFilter[];
+        /**
+         * AWS Signer signing profile ARN to use for matched repositories.
+         */
+        signingProfileArn: string;
+    }
 }
 export declare namespace ecs {
     interface CapacityProviderAcceleratorCountRequest {
@@ -31428,6 +32081,10 @@ export declare namespace ecs {
         subnets: string[];
     }
     interface CapacityProviderManagedInstancesProvider {
+        /**
+         * Defines how Amazon ECS Managed Instances optimizes the infrastructure in your capacity provider. Configure it to turn on or off the infrastructure optimization in your capacity provider, and to control the idle EC2 instances optimization delay.
+         */
+        infrastructureOptimization?: outputs.ecs.CapacityProviderManagedInstancesProviderInfrastructureOptimizationProperties;
         /**
          * The Amazon Resource Name (ARN) of the infrastructure role that Amazon ECS assumes to manage instances. This role must include permissions for Amazon EC2 instance lifecycle management, networking, and any additional AWS services required for your workloads.
          *
@@ -31445,6 +32102,15 @@ export declare namespace ecs {
          */
         propagateTags?: enums.ecs.CapacityProviderManagedInstancesProviderPropagateTags;
     }
+    /**
+     * Defines how Amazon ECS Managed Instances optimizes the infrastructure in your capacity provider. Configure it to turn on or off the infrastructure optimization in your capacity provider, and to control the idle EC2 instances optimization delay.
+     */
+    interface CapacityProviderManagedInstancesProviderInfrastructureOptimizationProperties {
+        /**
+         * This parameter defines the number of seconds Amazon ECS Managed Instances waits before optimizing EC2 instances that have become idle or underutilized. A longer delay increases the likelihood of placing new tasks on idle instances, reducing startup time. A shorter delay helps reduce infrastructure costs by optimizing idle instances more quickly. Valid values are: Not set (null) - Uses the default optimization behavior, `-1` - Disables automatic infrastructure optimization, `0` to `3600` (inclusive) - Specifies the number of seconds to wait before optimizing instances.
+         */
+        scaleInAfter?: number;
+    }
     interface CapacityProviderManagedInstancesStorageConfiguration {
         /**
          * The size of the tasks volume.
@@ -31551,13 +32217,13 @@ export declare namespace ecs {
          * The *base* value designates how many tasks, at a minimum, to run on the specified capacity provider for each service. Only one capacity provider in a capacity provider strategy can have a *base* defined. If no value is specified, the default value of ``0`` is used.
          *  Base value characteristics:
          *   +  Only one capacity provider in a strategy can have a base defined
-         *   +  Default value is ``0`` if not specified
-         *   +  Valid range: 0 to 100,000
+         *   +  The default value is ``0`` if not specified
+         *   +  The valid range is 0 to 100,000
          *   +  Base requirements are satisfied first before weight distribution
          */
         base?: number;
         /**
-         * The short name of the capacity provider.
+         * The short name of the capacity provider. This can be either an AWS managed capacity provider (``FARGATE`` or ``FARGATE_SPOT``) or the name of a custom capacity provider that you created.
          */
         capacityProvider?: string;
         /**
@@ -31565,8 +32231,8 @@ export declare namespace ecs {
          *  If no ``weight`` value is specified, the default value of ``0`` is used. When multiple capacity providers are specified within a capacity provider strategy, at least one of the capacity providers must have a weight value greater than zero and any capacity providers with a weight of ``0`` can't be used to place tasks. If you specify multiple capacity providers in a strategy that all have a weight of ``0``, any ``RunTask`` or ``CreateService`` actions using the capacity provider strategy will fail.
          *  Weight value characteristics:
          *   +  Weight is considered after the base value is satisfied
-         *   +  Default value is ``0`` if not specified
-         *   +  Valid range: 0 to 1,000
+         *   +  The default value is ``0`` if not specified
+         *   +  The valid range is 0 to 1,000
          *   +  At least one capacity provider must have a weight greater than zero
          *   +  Capacity providers with weight of ``0`` cannot place tasks
          *
@@ -31689,6 +32355,168 @@ export declare namespace ecs {
          */
         value?: string;
     }
+    interface ExpressGatewayServiceAwsLogsConfiguration {
+        /**
+         * The name of the CloudWatch Logs log group to send container logs to.
+         */
+        logGroup: string;
+        /**
+         * The prefix for the CloudWatch Logs log stream names. The default for an Express service is `ecs` .
+         */
+        logStreamPrefix: string;
+    }
+    interface ExpressGatewayServiceConfiguration {
+        /**
+         * The CPU allocation for tasks in this service revision.
+         */
+        cpu?: string;
+        /**
+         * The Unix timestamp for when this service revision was created.
+         */
+        createdAt?: string;
+        /**
+         * The ARN of the task execution role for the service revision.
+         */
+        executionRoleArn?: string;
+        /**
+         * The health check path for this service revision.
+         */
+        healthCheckPath?: string;
+        /**
+         * The entry point into this service revision.
+         */
+        ingressPaths?: outputs.ecs.ExpressGatewayServiceIngressPathSummary[];
+        /**
+         * The memory allocation for tasks in this service revision.
+         */
+        memory?: string;
+        /**
+         * The network configuration for tasks in this service revision.
+         */
+        networkConfiguration?: outputs.ecs.ExpressGatewayServiceNetworkConfiguration;
+        /**
+         * The primary container configuration for this service revision.
+         */
+        primaryContainer?: outputs.ecs.ExpressGatewayServiceExpressGatewayContainer;
+        /**
+         * The auto-scaling configuration for this service revision.
+         */
+        scalingTarget?: outputs.ecs.ExpressGatewayServiceExpressGatewayScalingTarget;
+        /**
+         * The ARN of the service revision.
+         */
+        serviceRevisionArn?: string;
+        /**
+         * The ARN of the task role for the service revision.
+         */
+        taskRoleArn?: string;
+    }
+    interface ExpressGatewayServiceExpressGatewayContainer {
+        /**
+         * The log configuration for the container.
+         */
+        awsLogsConfiguration?: outputs.ecs.ExpressGatewayServiceAwsLogsConfiguration;
+        /**
+         * The command that is passed to the container.
+         */
+        command?: string[];
+        /**
+         * The port number on the container that receives traffic from the load balancer. Default is 80.
+         */
+        containerPort?: number;
+        /**
+         * The environment variables to pass to the container.
+         */
+        environment?: outputs.ecs.ExpressGatewayServiceKeyValuePair[];
+        /**
+         * The image used to start a container. This string is passed directly to the Docker daemon. Images in the Docker Hub registry are available by default. Other repositories are specified with either `repository-url/image:tag` or `repository-url/image@digest` .
+         *
+         * For Express services, the image typically contains a web application that listens on the specified container port. The image can be stored in Amazon ECR, Docker Hub, or any other container registry accessible to your execution role.
+         */
+        image: string;
+        /**
+         * The configuration for repository credentials for private registry authentication.
+         */
+        repositoryCredentials?: outputs.ecs.ExpressGatewayServiceExpressGatewayRepositoryCredentials;
+        /**
+         * The secrets to pass to the container.
+         */
+        secrets?: outputs.ecs.ExpressGatewayServiceSecret[];
+    }
+    interface ExpressGatewayServiceExpressGatewayRepositoryCredentials {
+        /**
+         * The Amazon Resource Name (ARN) of the secret containing the private repository credentials.
+         */
+        credentialsParameter: string;
+    }
+    interface ExpressGatewayServiceExpressGatewayScalingTarget {
+        /**
+         * The metric used for auto-scaling decisions. The default metric used for an Express service is `CPUUtilization` .
+         */
+        autoScalingMetric?: enums.ecs.ExpressGatewayServiceScalingMetric;
+        /**
+         * The target value for the auto-scaling metric. The default value for an Express service is 60.
+         */
+        autoScalingTargetValue?: number;
+        /**
+         * The maximum number of tasks to run in the Express service.
+         */
+        maxTaskCount?: number;
+        /**
+         * The minimum number of tasks to run in the Express service.
+         */
+        minTaskCount?: number;
+    }
+    interface ExpressGatewayServiceIngressPathSummary {
+        /**
+         * The type of access to the endpoint for the Express service.
+         */
+        accessType?: enums.ecs.ExpressGatewayServiceAccessType;
+        /**
+         * The endpoint for access to the service.
+         */
+        endpoint?: string;
+    }
+    interface ExpressGatewayServiceKeyValuePair {
+        /**
+         * The name of the key-value pair. For environment variables, this is the name of the environment variable.
+         */
+        name: string;
+        /**
+         * The value of the key-value pair. For environment variables, this is the value of the environment variable.
+         */
+        value: string;
+    }
+    interface ExpressGatewayServiceNetworkConfiguration {
+        /**
+         * The IDs of the security groups associated with the Express service.
+         */
+        securityGroups?: string[];
+        /**
+         * The IDs of the subnets associated with the Express service.
+         */
+        subnets?: string[];
+    }
+    interface ExpressGatewayServiceSecret {
+        /**
+         * The name of the secret.
+         */
+        name: string;
+        /**
+         * The secret to expose to the container. The supported values are either the full ARN of the AWS Secrets Manager secret or the full ARN of the parameter in the SSM Parameter Store.
+         *
+         * For information about the require AWS Identity and Access Management permissions, see [Required IAM permissions for Amazon ECS secrets](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/specifying-sensitive-data-secrets.html#secrets-iam) (for Secrets Manager) or [Required IAM permissions for Amazon ECS secrets](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/specifying-sensitive-data-parameters.html) (for Systems Manager Parameter store) in the *Amazon Elastic Container Service Developer Guide* .
+         *
+         * > If the SSM Parameter Store parameter exists in the same Region as the task you're launching, then you can use either the full ARN or name of the parameter. If the parameter exists in a different Region, then the full ARN must be specified.
+         */
+        valueFrom: string;
+    }
+    interface ExpressGatewayServiceStatus {
+        /**
+         * The status of the Express service.
+         */
+        statusCode?: enums.ecs.ExpressGatewayServiceStatusCode;
+    }
     /**
      * The advanced settings for a load balancer used in blue/green deployments. Specify the alternate target group, listener rules, and IAM role required for traffic shifting during blue/green deployments. For more information, see [Required resources for Amazon ECS blue/green deployments](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/blue-green-deployment-implementation.html) in the *Amazon Elastic Container Service Developer Guide*.
      */
@@ -31732,6 +32560,12 @@ export declare namespace ecs {
          */
         subnets?: string[];
     }
+    /**
+     * Configuration for a canary deployment strategy that shifts a fixed percentage of traffic to the new service revision, waits for a specified bake time, then shifts the remaining traffic.
+     *  The following validation applies only to Canary deployments created through CFN. CFN operations time out after 36 hours. Canary deployments can approach this limit because of their extended duration. This can cause CFN to roll back the deployment. To prevent timeout-related rollbacks, CFN rejects deployments when the calculated deployment time exceeds 33 hours based on your template configuration:
+     *   ``BakeTimeInMinutes + CanaryBakeTimeInMinutes``
+     *  Additional backend processes (such as task scaling and running lifecycle hooks) can extend deployment time beyond these calculations. Even deployments under the 33-hour threshold might still time out if these processes cause the total duration to exceed 36 hours.
+     */
     interface ServiceCanaryConfiguration {
         /**
          * The amount of time in minutes to wait during the canary phase before shifting the remaining production traffic to the new service revision. Valid values are 0 to 1440 minutes (24 hours). The default value is 10.
@@ -31753,13 +32587,13 @@ export declare namespace ecs {
          * The *base* value designates how many tasks, at a minimum, to run on the specified capacity provider for each service. Only one capacity provider in a capacity provider strategy can have a *base* defined. If no value is specified, the default value of ``0`` is used.
          *  Base value characteristics:
          *   +  Only one capacity provider in a strategy can have a base defined
-         *   +  Default value is ``0`` if not specified
-         *   +  Valid range: 0 to 100,000
+         *   +  The default value is ``0`` if not specified
+         *   +  The valid range is 0 to 100,000
          *   +  Base requirements are satisfied first before weight distribution
          */
         base?: number;
         /**
-         * The short name of the capacity provider.
+         * The short name of the capacity provider. This can be either an AWS managed capacity provider (``FARGATE`` or ``FARGATE_SPOT``) or the name of a custom capacity provider that you created.
          */
         capacityProvider?: string;
         /**
@@ -31767,8 +32601,8 @@ export declare namespace ecs {
          *  If no ``weight`` value is specified, the default value of ``0`` is used. When multiple capacity providers are specified within a capacity provider strategy, at least one of the capacity providers must have a weight value greater than zero and any capacity providers with a weight of ``0`` can't be used to place tasks. If you specify multiple capacity providers in a strategy that all have a weight of ``0``, any ``RunTask`` or ``CreateService`` actions using the capacity provider strategy will fail.
          *  Weight value characteristics:
          *   +  Weight is considered after the base value is satisfied
-         *   +  Default value is ``0`` if not specified
-         *   +  Valid range: 0 to 1,000
+         *   +  The default value is ``0`` if not specified
+         *   +  The valid range is 0 to 1,000
          *   +  At least one capacity provider must have a weight greater than zero
          *   +  Capacity providers with weight of ``0`` cannot place tasks
          *
@@ -31782,6 +32616,10 @@ export declare namespace ecs {
          */
         weight?: number;
     }
+    /**
+     * Configuration for Service Connect access logging. Access logs provide detailed information about requests made to your service, including request patterns, response codes, and timing data for debugging and monitoring purposes.
+     *   To enable access logs, you must also specify a ``logConfiguration`` in the ``serviceConnectConfiguration``.
+     */
     interface ServiceConnectAccessLogConfiguration {
         /**
          * The format for Service Connect access log output. Choose TEXT for human-readable logs or JSON for structured data that integrates well with log analysis tools.
@@ -31789,8 +32627,7 @@ export declare namespace ecs {
         format: enums.ecs.ServiceConnectAccessLogConfigurationFormat;
         /**
          * Specifies whether to include query parameters in Service Connect access logs.
-         *
-         * When enabled, query parameters from HTTP requests are included in the access logs. Consider security and privacy implications when enabling this feature, as query parameters may contain sensitive information such as request IDs and tokens. By default, this parameter is `DISABLED` .
+         *  When enabled, query parameters from HTTP requests are included in the access logs. Consider security and privacy implications when enabling this feature, as query parameters may contain sensitive information such as request IDs and tokens. By default, this parameter is ``DISABLED``.
          */
         includeQueryParameters?: enums.ecs.ServiceConnectAccessLogConfigurationIncludeQueryParameters;
     }
@@ -31823,8 +32660,7 @@ export declare namespace ecs {
     interface ServiceConnectConfiguration {
         /**
          * The configuration for Service Connect access logging. Access logs capture detailed information about requests made to your service, including request patterns, response codes, and timing data. They can be useful for debugging connectivity issues, monitoring service performance, and auditing service-to-service communication for security and compliance purposes.
-         *
-         * > To enable access logs, you must also specify a `logConfiguration` in the `serviceConnectConfiguration` .
+         *   To enable access logs, you must also specify a ``logConfiguration`` in the ``serviceConnectConfiguration``.
          */
         accessLogConfiguration?: outputs.ecs.ServiceConnectAccessLogConfiguration;
         /**
@@ -31984,7 +32820,7 @@ export declare namespace ecs {
          */
         bakeTimeInMinutes?: number;
         /**
-         * Configuration for canary deployment strategy. Only valid when the deployment strategy is `CANARY` . This configuration enables shifting a fixed percentage of traffic for testing, followed by shifting the remaining traffic after a bake period.
+         * Configuration for canary deployment strategy. Only valid when the deployment strategy is ``CANARY``. This configuration enables shifting a fixed percentage of traffic for testing, followed by shifting the remaining traffic after a bake period.
          */
         canaryConfiguration?: outputs.ecs.ServiceCanaryConfiguration;
         /**
@@ -31997,7 +32833,7 @@ export declare namespace ecs {
          */
         lifecycleHooks?: outputs.ecs.ServiceDeploymentLifecycleHook[];
         /**
-         * Configuration for linear deployment strategy. Only valid when the deployment strategy is `LINEAR` . This configuration enables progressive traffic shifting in equal percentage increments with configurable bake times between each step.
+         * Configuration for linear deployment strategy. Only valid when the deployment strategy is ``LINEAR``. This configuration enables progressive traffic shifting in equal percentage increments with configurable bake times between each step.
          */
         linearConfiguration?: outputs.ecs.ServiceLinearConfiguration;
         /**
@@ -32157,6 +32993,17 @@ export declare namespace ecs {
          */
         forceNewDeploymentNonce?: string;
     }
+    /**
+     * Configuration for a linear deployment strategy that shifts production traffic in equal percentage increments with configurable wait times between each step until 100 percent of traffic is shifted to the new service revision.
+     *  The following validation applies only to Linear deployments created through CFN. CFN operations time out after 36 hours. Linear deployments can approach this limit because of their extended duration. This can cause CFN to roll back the deployment. To prevent timeout-related rollbacks, CFN rejects deployments when the calculated deployment time exceeds 33 hours based on your template configuration:
+     *   ``BakeTimeInMinutes + (StepBakeTimeInMinutes × Number of deployment steps)``
+     *  Where the number of deployment steps is calculated as follows:
+     *   +  *If StepPercent evenly divides by 100*: The number of deployment steps equals ``(100 ÷ StepPercent) - 1``
+     *   +  *Otherwise*: The number of deployment steps equals the floor of ``100 ÷ StepPercent``. For example, if ``StepPercent`` is 11, the number of deployment steps is 9 (not 9.1).
+     *
+     *  This calculation reflects that CFN doesn't apply the step bake time after the final traffic shift reaches 100%. For example, with a ``StepPercent`` of 50%, there are actually two traffic shifts, but only one deployment step is counted for validation purposes because the bake time is applied only after the first 50% shift, not after reaching 100%.
+     *  Additional backend processes (such as task scaling and running lifecycle hooks) can extend deployment time beyond these calculations. Even deployments under the 33-hour threshold might still time out if these processes cause the total duration to exceed 36 hours.
+     */
     interface ServiceLinearConfiguration {
         /**
          * The amount of time in minutes to wait between each traffic shifting step during a linear deployment. Valid values are 0 to 1440 minutes (24 hours). The default value is 6. This bake time is not applied after reaching 100 percent traffic.
@@ -33704,6 +34551,83 @@ export declare namespace eks {
          */
         serviceAccount: string;
     }
+    /**
+     * Configuration settings for an Argo CD capability. This includes the Kubernetes namespace, IAM Identity Center integration, RBAC role mappings, and network access configuration.
+     */
+    interface CapabilityArgoCd {
+        awsIdc: outputs.eks.CapabilityAwsIdc;
+        /**
+         * The Kubernetes namespace where Argo CD resources will be created. If not specified, the default namespace is used.
+         */
+        namespace?: string;
+        networkAccess?: outputs.eks.CapabilityNetworkAccess;
+        /**
+         * A list of role mappings that define which IAM Identity Center users or groups have which Argo CD roles. Each mapping associates an Argo CD role (ADMIN, EDITOR, or VIEWER) with one or more IAM Identity Center identities.
+         */
+        rbacRoleMappings?: outputs.eks.CapabilityArgoCdRoleMapping[];
+        /**
+         * The URL of the Argo CD server. Use this URL to access the Argo CD web interface and API.
+         */
+        serverUrl?: string;
+    }
+    /**
+     * A mapping between an Argo CD role and IAM Identity Center identities. This defines which users or groups have specific permissions in Argo CD.
+     */
+    interface CapabilityArgoCdRoleMapping {
+        /**
+         * A list of IAM Identity Center identities (users or groups) that should be assigned this Argo CD role.
+         */
+        identities: outputs.eks.CapabilitySsoIdentity[];
+        /**
+         * The Argo CD role to assign. Valid values are: ADMIN (full administrative access to Argo CD), EDITOR (edit access to Argo CD resources), or VIEWER (read-only access to Argo CD resources).
+         */
+        role: enums.eks.CapabilityArgoCdRoleMappingRole;
+    }
+    /**
+     * Configuration for integrating Argo CD with IAM Identity Center. This allows you to use your organization's identity provider for authentication to Argo CD.
+     */
+    interface CapabilityAwsIdc {
+        /**
+         * The ARN of the IAM Identity Center instance to use for authentication.
+         */
+        idcInstanceArn: string;
+        /**
+         * The ARN of the managed application created in IAM Identity Center for this Argo CD capability. This application is automatically created and managed by EKS.
+         */
+        idcManagedApplicationArn?: string;
+        /**
+         * The Region where your IAM Identity Center instance is located.
+         */
+        idcRegion?: string;
+    }
+    /**
+     * Configuration settings for a capability. The structure of this object varies depending on the capability type.
+     */
+    interface CapabilityConfiguration {
+        argoCd?: outputs.eks.CapabilityArgoCd;
+    }
+    /**
+     * Configuration for network access to the Argo CD capability's managed API server endpoint. By default, the Argo CD server is accessible via a public endpoint. You can optionally specify one or more VPC endpoint IDs to enable private connectivity from your VPCs.
+     */
+    interface CapabilityNetworkAccess {
+        /**
+         * A list of VPC endpoint IDs to associate with the managed Argo CD API server endpoint. Each VPC endpoint provides private connectivity from a specific VPC to the Argo CD server. You can specify multiple VPC endpoint IDs to enable access from multiple VPCs.
+         */
+        vpceIds?: string[];
+    }
+    /**
+     * An IAM Identity Center identity (user or group) that can be assigned permissions in a capability.
+     */
+    interface CapabilitySsoIdentity {
+        /**
+         * The unique identifier of the IAM Identity Center user or group.
+         */
+        id: string;
+        /**
+         * The type of identity. Valid values are SSO_USER or SSO_GROUP.
+         */
+        type: enums.eks.CapabilitySsoIdentityType;
+    }
     /**
      * An object representing the Access Config to use for the cluster.
      */
@@ -33752,6 +34676,15 @@ export declare namespace eks {
          */
         groupName?: string;
     }
+    /**
+     * Configuration for provisioned control plane scaling.
+     */
+    interface ClusterControlPlaneScalingConfig {
+        /**
+         * The scaling tier for the provisioned control plane.
+         */
+        tier?: enums.eks.ClusterControlPlaneScalingConfigTier;
+    }
     /**
      * Todo: add description
      */
@@ -34406,6 +35339,10 @@ export declare namespace elasticloadbalancingv2 {
          *  If you specify both ``ForwardConfig`` and ``TargetGroupArn``, you can specify only one target group using ``ForwardConfig`` and it must be the same target group specified in ``TargetGroupArn``.
          */
         forwardConfig?: outputs.elasticloadbalancingv2.ListenerForwardConfig;
+        /**
+         * [HTTPS listeners] Information for validating JWT access tokens in client requests. Specify only when `Type` is `jwt-validation` .
+         */
+        jwtValidationConfig?: outputs.elasticloadbalancingv2.ListenerJwtValidationConfig;
         /**
          * The order for the action. This value is required for rules with multiple actions. The action with the lowest value for order is performed first.
          */
@@ -34602,6 +35539,25 @@ export declare namespace elasticloadbalancingv2 {
          */
         targetGroups?: outputs.elasticloadbalancingv2.ListenerTargetGroupTuple[];
     }
+    interface ListenerJwtValidationActionAdditionalClaim {
+        /**
+         * The format of the claim value.
+         */
+        format: string;
+        /**
+         * The name of the claim. You can't specify `exp` , `iss` , `nbf` , or `iat` because we validate them by default.
+         */
+        name: string;
+        /**
+         * The claim value. The maximum size of the list is 10. Each value can be up to 256 characters in length. If the format is `space-separated-values` , the values can't include spaces.
+         */
+        values: string[];
+    }
+    interface ListenerJwtValidationConfig {
+        additionalClaims?: outputs.elasticloadbalancingv2.ListenerJwtValidationActionAdditionalClaim[];
+        issuer: string;
+        jwksEndpoint: string;
+    }
     /**
      * The mutual authentication configuration information.
      */
@@ -34682,6 +35638,10 @@ export declare namespace elasticloadbalancingv2 {
          *  If you specify both ``ForwardConfig`` and ``TargetGroupArn``, you can specify only one target group using ``ForwardConfig`` and it must be the same target group specified in ``TargetGroupArn``.
          */
         forwardConfig?: outputs.elasticloadbalancingv2.ListenerRuleForwardConfig;
+        /**
+         * [HTTPS listeners] Information for validating JWT access tokens in client requests. Specify only when `Type` is `jwt-validation` .
+         */
+        jwtValidationConfig?: outputs.elasticloadbalancingv2.ListenerRuleJwtValidationConfig;
         /**
          * The order for the action. This value is required for rules with multiple actions. The action with the lowest value for order is performed first.
          */
@@ -34872,6 +35832,25 @@ export declare namespace elasticloadbalancingv2 {
          */
         values?: string[];
     }
+    interface ListenerRuleJwtValidationActionAdditionalClaim {
+        /**
+         * The format of the claim value.
+         */
+        format: string;
+        /**
+         * The name of the claim. You can't specify `exp` , `iss` , `nbf` , or `iat` because we validate them by default.
+         */
+        name: string;
+        /**
+         * The claim value. The maximum size of the list is 10. Each value can be up to 256 characters in length. If the format is `space-separated-values` , the values can't include spaces.
+         */
+        values: string[];
+    }
+    interface ListenerRuleJwtValidationConfig {
+        additionalClaims?: outputs.elasticloadbalancingv2.ListenerRuleJwtValidationActionAdditionalClaim[];
+        issuer: string;
+        jwksEndpoint: string;
+    }
     /**
      * Information about a path pattern condition.
      */
@@ -35201,6 +36180,10 @@ export declare namespace elasticloadbalancingv2 {
          * The port on which the target is listening. If the target group protocol is GENEVE, the supported port is 6081. If the target type is alb, the targeted Application Load Balancer must have at least one listener whose port matches the target group port. Not used if the target is a Lambda function.
          */
         port?: number;
+        /**
+         * The Server ID used by targets when using QUIC or TCP_QUIC protocols.
+         */
+        quicServerId?: string;
     }
     interface TrustStoreRevocation {
         /**
@@ -35587,7 +36570,7 @@ export declare namespace entityresolution {
     }
     interface IdMappingWorkflowOutputSource {
         /**
-         * Customer AWS KMS ARN for encryption at rest. If not provided, system will use an AWS Entity Resolution managed KMS key.
+         * Customer AWS  ARN for encryption at rest. If not provided, system will use an AWS Entity Resolution managed KMS key.
          */
         kmsArn?: string;
         /**
@@ -37399,7 +38382,7 @@ export declare namespace forecast {
          */
         kmsKeyArn?: string;
         /**
-         * The ARN of the IAM role that Amazon Forecast can assume to access the AWS KMS key.
+         * The ARN of the IAM role that Amazon Forecast can assume to access the AWS  key.
          *
          * Passing a role across AWS accounts is not allowed. If you pass a role that isn't in your account, you get an `InvalidInputException` error.
          */
@@ -37808,32 +38791,32 @@ export declare namespace frauddetector {
 }
 export declare namespace fsx {
     /**
-     * Describes a data repository association's automatic export policy. The ``AutoExportPolicy`` defines the types of updated objects on the file system that will be automatically exported to the data repository. As you create, modify, or delete files, Amazon FSx for Lustre automatically exports the defined changes asynchronously once your application finishes modifying the file.
-     *  The ``AutoExportPolicy`` is only supported on Amazon FSx for Lustre file systems with a data repository association.
+     * Specifies the type of updated objects (new, changed, deleted) that will be automatically exported from your file system to the linked S3 bucket.
      */
     interface DataRepositoryAssociationAutoExportPolicy {
         /**
-         * The ``AutoExportPolicy`` can have the following event values:
-         *   +   ``NEW`` - New files and directories are automatically exported to the data repository as they are added to the file system.
-         *   +   ``CHANGED`` - Changes to files and directories on the file system are automatically exported to the data repository.
-         *   +   ``DELETED`` - Files and directories are automatically deleted on the data repository when they are deleted on the file system.
+         * The `AutoExportPolicy` can have the following event values:
+         *
+         * - `NEW` - New files and directories are automatically exported to the data repository as they are added to the file system.
+         * - `CHANGED` - Changes to files and directories on the file system are automatically exported to the data repository.
+         * - `DELETED` - Files and directories are automatically deleted on the data repository when they are deleted on the file system.
          *
-         *  You can define any combination of event types for your ``AutoExportPolicy``.
+         * You can define any combination of event types for your `AutoExportPolicy` .
          */
         events: enums.fsx.DataRepositoryAssociationEventType[];
     }
     /**
-     * Describes the data repository association's automatic import policy. The AutoImportPolicy defines how Amazon FSx keeps your file metadata and directory listings up to date by importing changes to your Amazon FSx for Lustre file system as you modify objects in a linked S3 bucket.
-     *  The ``AutoImportPolicy`` is only supported on Amazon FSx for Lustre file systems with a data repository association.
+     * Specifies the type of updated objects (new, changed, deleted) that will be automatically imported from the linked S3 bucket to your file system.
      */
     interface DataRepositoryAssociationAutoImportPolicy {
         /**
-         * The ``AutoImportPolicy`` can have the following event values:
-         *   +   ``NEW`` - Amazon FSx automatically imports metadata of files added to the linked S3 bucket that do not currently exist in the FSx file system.
-         *   +   ``CHANGED`` - Amazon FSx automatically updates file metadata and invalidates existing file content on the file system as files change in the data repository.
-         *   +   ``DELETED`` - Amazon FSx automatically deletes files on the file system as corresponding files are deleted in the data repository.
+         * The `AutoImportPolicy` can have the following event values:
          *
-         *  You can define any combination of event types for your ``AutoImportPolicy``.
+         * - `NEW` - Amazon FSx automatically imports metadata of files added to the linked S3 bucket that do not currently exist in the FSx file system.
+         * - `CHANGED` - Amazon FSx automatically updates file metadata and invalidates existing file content on the file system as files change in the data repository.
+         * - `DELETED` - Amazon FSx automatically deletes files on the file system as corresponding files are deleted in the data repository.
+         *
+         * You can define any combination of event types for your `AutoImportPolicy` .
          */
         events: enums.fsx.DataRepositoryAssociationEventType[];
     }
@@ -37842,13 +38825,15 @@ export declare namespace fsx {
      */
     interface DataRepositoryAssociationS3 {
         /**
-         * Describes a data repository association's automatic export policy. The ``AutoExportPolicy`` defines the types of updated objects on the file system that will be automatically exported to the data repository. As you create, modify, or delete files, Amazon FSx for Lustre automatically exports the defined changes asynchronously once your application finishes modifying the file.
-         *  The ``AutoExportPolicy`` is only supported on Amazon FSx for Lustre file systems with a data repository association.
+         * Describes a data repository association's automatic export policy. The `AutoExportPolicy` defines the types of updated objects on the file system that will be automatically exported to the data repository. As you create, modify, or delete files, Amazon FSx for Lustre automatically exports the defined changes asynchronously once your application finishes modifying the file.
+         *
+         * The `AutoExportPolicy` is only supported on Amazon FSx for Lustre file systems with a data repository association.
          */
         autoExportPolicy?: outputs.fsx.DataRepositoryAssociationAutoExportPolicy;
         /**
          * Describes the data repository association's automatic import policy. The AutoImportPolicy defines how Amazon FSx keeps your file metadata and directory listings up to date by importing changes to your Amazon FSx for Lustre file system as you modify objects in a linked S3 bucket.
-         *  The ``AutoImportPolicy`` is only supported on Amazon FSx for Lustre file systems with a data repository association.
+         *
+         * The `AutoImportPolicy` is only supported on Amazon FSx for Lustre file systems with a data repository association.
          */
         autoImportPolicy?: outputs.fsx.DataRepositoryAssociationAutoImportPolicy;
     }
@@ -37858,13 +38843,39 @@ export declare namespace fsx {
          */
         gid: number;
     }
+    interface S3AccessPointAttachmentOntapFileSystemIdentity {
+        /**
+         * Specifies the FSx for ONTAP user identity type, accepts either UNIX or WINDOWS.
+         */
+        type: enums.fsx.S3AccessPointAttachmentOntapFileSystemIdentityType;
+        /**
+         * Specifies the properties of the file system UNIX user.
+         */
+        unixUser?: outputs.fsx.S3AccessPointAttachmentOntapUnixFileSystemUser;
+        /**
+         * Specifies the properties of the file system Windows user.
+         */
+        windowsUser?: outputs.fsx.S3AccessPointAttachmentOntapWindowsFileSystemUser;
+    }
+    interface S3AccessPointAttachmentOntapUnixFileSystemUser {
+        /**
+         * The name of the UNIX user.
+         */
+        name: string;
+    }
+    interface S3AccessPointAttachmentOntapWindowsFileSystemUser {
+        /**
+         * The name of the Windows user.
+         */
+        name: string;
+    }
     interface S3AccessPointAttachmentOpenZfsFileSystemIdentity {
         /**
          * Specifies the UID and GIDs of the file system POSIX user.
          */
         posixUser: outputs.fsx.S3AccessPointAttachmentOpenZfsPosixFileSystemUser;
         /**
-         * Specifies the FSx for OpenZFS user identity type, accepts only `POSIX` .
+         * Specifies the FSx for OpenZFS user identity type, accepts only POSIX.
          */
         type: enums.fsx.S3AccessPointAttachmentOpenZfsFileSystemIdentityType;
     }
@@ -37900,6 +38911,16 @@ export declare namespace fsx {
          */
         vpcConfiguration?: outputs.fsx.S3AccessPointAttachmentS3AccessPointVpcConfiguration;
     }
+    interface S3AccessPointAttachmentS3AccessPointOntapConfiguration {
+        /**
+         * The file system identity used to authorize file access requests made using the S3 access point.
+         */
+        fileSystemIdentity: outputs.fsx.S3AccessPointAttachmentOntapFileSystemIdentity;
+        /**
+         * The ID of the FSx for ONTAP volume that the S3 access point is attached to.
+         */
+        volumeId: string;
+    }
     interface S3AccessPointAttachmentS3AccessPointOpenZfsConfiguration {
         /**
          * The file system identity used to authorize file access requests made using the S3 access point.
@@ -39065,6 +40086,25 @@ export declare namespace glue {
          */
         principal?: outputs.glue.DatabaseDataLakePrincipal;
     }
+    /**
+     * The configuration settings for the integration.
+     */
+    interface IntegrationConfig {
+        /**
+         * Enables continuous synchronization for on-demand data extractions.
+         */
+        continuousSync?: boolean;
+        /**
+         * Specifies the frequency at which CDC (Change Data Capture) pulls or incremental loads should occur.
+         */
+        refreshInterval?: string;
+        /**
+         * A collection of key-value pairs that specify additional properties for the integration source. These properties provide configuration options that can be used to customize the behavior of the ODB source during data integration operations.
+         */
+        sourceProperties?: {
+            [key: string]: string;
+        };
+    }
     interface JobCommand {
         /**
          * The name of the job command
@@ -40576,6 +41616,27 @@ export declare namespace imagebuilder {
          */
         image?: string;
     }
+    /**
+     * The latest version references of the container recipe.
+     */
+    interface ContainerRecipeLatestVersion {
+        /**
+         * The latest version ARN of the created container recipe.
+         */
+        arn?: string;
+        /**
+         * The latest version ARN of the created container recipe, with the same major version.
+         */
+        major?: string;
+        /**
+         * The latest version ARN of the created container recipe, with the same minor version.
+         */
+        minor?: string;
+        /**
+         * The latest version ARN of the created container recipe, with the same patch version.
+         */
+        patch?: string;
+    }
     /**
      * The container repository where the output container image is stored.
      */
@@ -41063,6 +42124,27 @@ export declare namespace imagebuilder {
          */
         virtualName?: string;
     }
+    /**
+     * The latest version references of the image recipe.
+     */
+    interface ImageRecipeLatestVersion {
+        /**
+         * The latest version ARN of the created image recipe.
+         */
+        arn?: string;
+        /**
+         * The latest version ARN of the created image recipe, with the same major version.
+         */
+        major?: string;
+        /**
+         * The latest version ARN of the created image recipe, with the same minor version.
+         */
+        minor?: string;
+        /**
+         * The latest version ARN of the created image recipe, with the same patch version.
+         */
+        patch?: string;
+    }
     /**
      * Contains settings for the SSM agent on your build instance.
      */
@@ -41932,11 +43014,11 @@ export declare namespace iot {
     }
     interface ConfigurationDetailsProperties {
         /**
-         * The health status of KMS key and AWS KMS access role. If either KMS key or AWS KMS access role is `UNHEALTHY` , the return value will be `UNHEALTHY` . To use a customer managed KMS key, the value of `configurationStatus` must be `HEALTHY` .
+         * The health status of KMS key and AWS  access role. If either KMS key or AWS  access role is `UNHEALTHY` , the return value will be `UNHEALTHY` . To use a customer managed KMS key, the value of `configurationStatus` must be `HEALTHY` .
          */
         configurationStatus?: enums.iot.EncryptionConfigurationConfigurationDetailsPropertiesConfigurationStatus;
         /**
-         * The error code that indicates either the KMS key or the AWS KMS access role is `UNHEALTHY` . Valid values: `KMS_KEY_VALIDATION_ERROR` and `ROLE_VALIDATION_ERROR` .
+         * The error code that indicates either the KMS key or the AWS  access role is `UNHEALTHY` . Valid values: `KMS_KEY_VALIDATION_ERROR` and `ROLE_VALIDATION_ERROR` .
          */
         errorCode?: string;
         /**
@@ -47688,7 +48770,7 @@ export declare namespace kendra {
         /**
          * The identifier of the directory corresponding to your WorkDocs site repository.
          *
-         * You can find the organization ID in the [AWS Directory Service](https://docs.aws.amazon.com/directoryservicev2/) by going to *Active Directory* , then *Directories* . Your WorkDocs site directory has an ID, which is the organization ID. You can also set up a new WorkDocs directory in the AWS Directory Service console and enable a WorkDocs site for the directory in the WorkDocs console.
+         * You can find the organization ID in the [Directory Service](https://docs.aws.amazon.com/directoryservicev2/) by going to *Active Directory* , then *Directories* . Your WorkDocs site directory has an ID, which is the organization ID. You can also set up a new WorkDocs directory in the Directory Service console and enable a WorkDocs site for the directory in the WorkDocs console.
          */
         organizationId: string;
         /**
@@ -47800,6 +48882,19 @@ export declare namespace kinesis {
          */
         streamMode: enums.kinesis.StreamModeDetailsStreamMode;
     }
+    /**
+     * Warm throughput configuration details for the stream. Only present for ON_DEMAND streams.
+     */
+    interface StreamWarmThroughputObject {
+        /**
+         * Current warm throughput in MiB/s
+         */
+        currentMiBps?: number;
+        /**
+         * Target warm throughput in MiB/s that a customer can write to a stream at any given time
+         */
+        targetMiBps?: number;
+    }
 }
 export declare namespace kinesisanalyticsv2 {
     /**
@@ -49529,6 +50624,15 @@ export declare namespace kinesisfirehose {
     }
 }
 export declare namespace kinesisvideo {
+    /**
+     * Configuration for the storage tier of the Kinesis Video Stream.
+     */
+    interface StreamStorageConfiguration {
+        /**
+         * The storage tier for the Kinesis Video Stream. Determines the storage class used for stream data.
+         */
+        defaultStorageTier?: enums.kinesisvideo.StreamStorageConfigurationDefaultStorageTier;
+    }
 }
 export declare namespace kms {
 }
@@ -49867,6 +50971,69 @@ export declare namespace lambda {
          */
         functionWeight: number;
     }
+    /**
+     * Specifications for the types of EC2 instances that the capacity provider can use.
+     */
+    interface CapacityProviderInstanceRequirements {
+        /**
+         * A list of instance types that the capacity provider can use. Supports wildcards (for example, m5.*).
+         */
+        allowedInstanceTypes?: string[];
+        /**
+         * The instruction set architecture for EC2 instances. Specify either x86_64 or arm64.
+         */
+        architectures?: enums.lambda.CapacityProviderArchitecture[];
+        /**
+         * A list of instance types that the capacity provider should not use. Takes precedence over AllowedInstanceTypes.
+         */
+        excludedInstanceTypes?: string[];
+    }
+    /**
+     * IAM permissions configuration for the capacity provider.
+     */
+    interface CapacityProviderPermissionsConfig {
+        /**
+         * The ARN of the IAM role that Lambda assumes to manage the capacity provider.
+         */
+        capacityProviderOperatorRoleArn: string;
+    }
+    /**
+     * The scaling configuration for the capacity provider.
+     */
+    interface CapacityProviderScalingConfig {
+        /**
+         * The maximum number of EC2 instances that the capacity provider can scale up to.
+         */
+        maxVCpuCount?: number;
+        scalingMode?: enums.lambda.CapacityProviderScalingMode;
+        /**
+         * A list of target tracking scaling policies for the capacity provider.
+         */
+        scalingPolicies?: outputs.lambda.CapacityProviderTargetTrackingScalingPolicy[];
+    }
+    /**
+     * A target tracking scaling policy for the capacity provider.
+     */
+    interface CapacityProviderTargetTrackingScalingPolicy {
+        predefinedMetricType: enums.lambda.CapacityProviderPredefinedMetricType;
+        /**
+         * The target value for the metric as a percentage (for example, 70.0 for 70%).
+         */
+        targetValue: number;
+    }
+    /**
+     * VPC configuration for the capacity provider.
+     */
+    interface CapacityProviderVpcConfig {
+        /**
+         * A list of security group IDs to associate with EC2 instances.
+         */
+        securityGroupIds: string[];
+        /**
+         * A list of subnet IDs where the capacity provider can launch EC2 instances.
+         */
+        subnetIds: string[];
+    }
     /**
      * When the CodeSigningConfig is later on attached to a function, the function code will be expected to be signed by profiles from this list
      */
@@ -49986,6 +51153,15 @@ export declare namespace lambda {
          */
         filters?: outputs.lambda.EventSourceMappingFilter[];
     }
+    /**
+     * The function's Amazon CloudWatch Logs configuration settings.
+     */
+    interface EventSourceMappingLoggingConfig {
+        /**
+         * Set this property to filter the system logs for your function that Lambda sends to CloudWatch. Lambda only sends system logs at the selected level of detail and lower, where ``DEBUG`` is the highest level and ``WARN`` is the lowest.
+         */
+        systemLogLevel?: enums.lambda.EventSourceMappingLoggingConfigSystemLogLevel;
+    }
     /**
      * The metrics configuration for your event source. Use this configuration object to define which metrics you want your event source mapping to produce.
      */
@@ -50002,22 +51178,27 @@ export declare namespace lambda {
         /**
          * The Amazon Resource Name (ARN) of the destination resource.
          *  To retain records of unsuccessful [asynchronous invocations](https://docs.aws.amazon.com/lambda/latest/dg/invocation-async.html#invocation-async-destinations), you can configure an Amazon SNS topic, Amazon SQS queue, Amazon S3 bucket, Lambda function, or Amazon EventBridge event bus as the destination.
-         *  To retain records of failed invocations from [Kinesis](https://docs.aws.amazon.com/lambda/latest/dg/with-kinesis.html), [DynamoDB](https://docs.aws.amazon.com/lambda/latest/dg/with-ddb.html), [self-managed Kafka](https://docs.aws.amazon.com/lambda/latest/dg/with-kafka.html#services-smaa-onfailure-destination) or [Amazon MSK](https://docs.aws.amazon.com/lambda/latest/dg/with-msk.html#services-msk-onfailure-destination), you can configure an Amazon SNS topic, Amazon SQS queue, or Amazon S3 bucket as the destination.
+         *   Amazon SNS destinations have a message size limit of 256 KB. If the combined size of the function request and response payload exceeds the limit, Lambda will drop the payload when sending ``OnFailure`` event to the destination. For details on this behavior, refer to [Retaining records of asynchronous invocations](https://docs.aws.amazon.com/lambda/latest/dg/invocation-async-retain-records.html).
+         *   To retain records of failed invocations from [Kinesis](https://docs.aws.amazon.com/lambda/latest/dg/with-kinesis.html), [DynamoDB](https://docs.aws.amazon.com/lambda/latest/dg/with-ddb.html), [self-managed Kafka](https://docs.aws.amazon.com/lambda/latest/dg/with-kafka.html#services-smaa-onfailure-destination) or [Amazon MSK](https://docs.aws.amazon.com/lambda/latest/dg/with-msk.html#services-msk-onfailure-destination), you can configure an Amazon SNS topic, Amazon SQS queue, or Amazon S3 bucket as the destination.
          */
         destination?: string;
     }
     /**
-     * The [provisioned mode](https://docs.aws.amazon.com/lambda/latest/dg/invocation-eventsourcemapping.html#invocation-eventsourcemapping-provisioned-mode) configuration for the event source. Use provisioned mode to customize the minimum and maximum number of event pollers for your event source.
+     * The [provisioned mode](https://docs.aws.amazon.com/lambda/latest/dg/invocation-eventsourcemapping.html#invocation-eventsourcemapping-provisioned-mode) configuration for the event source. Use Provisioned Mode to customize the minimum and maximum number of event pollers for your event source.
      */
     interface EventSourceMappingProvisionedPollerConfig {
         /**
-         * The maximum number of event pollers this event source can scale up to.
+         * The maximum number of event pollers this event source can scale up to. For Amazon SQS events source mappings, default is 200, and minimum value allowed is 2. For Amazon MSK and self-managed Apache Kafka event source mappings, default is 200, and minimum value allowed is 1.
          */
         maximumPollers?: number;
         /**
-         * The minimum number of event pollers this event source can scale down to.
+         * The minimum number of event pollers this event source can scale down to. For Amazon SQS events source mappings, default is 2, and minimum 2 required. For Amazon MSK and self-managed Apache Kafka event source mappings, default is 1.
          */
         minimumPollers?: number;
+        /**
+         * (Amazon MSK and self-managed Apache Kafka) The name of the provisioned poller group. Use this option to group multiple ESMs within the event source's VPC to share Event Poller Unit (EPU) capacity. You can use this option to optimize Provisioned mode costs for your ESMs. You can group up to 100 ESMs per poller group and aggregate maximum pollers across all ESMs in a group cannot exceed 2000.
+         */
+        pollerGroupName?: string;
     }
     /**
      * (Amazon SQS only) The scaling configuration for the event source. To remove the configuration, pass an empty value.
@@ -50121,6 +51302,9 @@ export declare namespace lambda {
          */
         uri?: string;
     }
+    interface FunctionCapacityProviderConfig {
+        lambdaManagedInstancesCapacityProviderConfig: outputs.lambda.FunctionLambdaManagedInstancesCapacityProviderConfig;
+    }
     /**
      * The [deployment package](https://docs.aws.amazon.com/lambda/latest/dg/gettingstarted-package.html) for a Lambda function. To deploy a function defined as a container image, you specify the location of a container image in the Amazon ECR registry. For a .zip file deployment package, you can specify the location of an object in Amazon S3. For Node.js and Python functions, you can specify the function code inline in the template.
      *   When you specify source code inline for a Node.js function, the ``index`` file that CFN creates uses the extension ``.js``. This means that LAM treats the file as a CommonJS module. ES modules aren't supported for inline functions.
@@ -50215,6 +51399,20 @@ export declare namespace lambda {
          */
         workingDirectory?: string;
     }
+    interface FunctionLambdaManagedInstancesCapacityProviderConfig {
+        /**
+         * The Amazon Resource Name (ARN) of the capacity provider.
+         */
+        capacityProviderArn: string;
+        /**
+         * The amount of memory in GiB allocated per vCPU for execution environments.
+         */
+        executionEnvironmentMemoryGiBPerVCpu?: number;
+        /**
+         * The maximum number of concurrent execution environments that can run on each compute instance.
+         */
+        perExecutionEnvironmentMaxConcurrency?: number;
+    }
     /**
      * The function's Amazon CloudWatch Logs configuration settings.
      */
@@ -50255,6 +51453,16 @@ export declare namespace lambda {
          */
         updateRuntimeOn: enums.lambda.FunctionRuntimeManagementConfigUpdateRuntimeOn;
     }
+    interface FunctionScalingConfig {
+        /**
+         * The maximum number of execution environments that can be provisioned for the function.
+         */
+        maxExecutionEnvironments?: number;
+        /**
+         * The minimum number of execution environments to maintain for the function.
+         */
+        minExecutionEnvironments?: number;
+    }
     /**
      * The function's [SnapStart](https://docs.aws.amazon.com/lambda/latest/dg/snapstart.html) setting.
      */
@@ -50277,6 +51485,12 @@ export declare namespace lambda {
          */
         optimizationStatus?: enums.lambda.FunctionSnapStartResponseOptimizationStatus;
     }
+    interface FunctionTenancyConfig {
+        /**
+         * Determines how your Lambda function isolates execution environments between tenants.
+         */
+        tenantIsolationMode: enums.lambda.FunctionTenancyConfigTenantIsolationMode;
+    }
     /**
      * The function's [](https://docs.aws.amazon.com/lambda/latest/dg/services-xray.html) tracing configuration. To sample and record incoming requests, set ``Mode`` to ``Active``.
      */
@@ -50345,6 +51559,19 @@ export declare namespace lambda {
          */
         maxAge?: number;
     }
+    /**
+     * Configuration that defines the scaling behavior for a Lambda Managed Instances function, including the minimum and maximum number of execution environments that can be provisioned.
+     */
+    interface VersionFunctionScalingConfig {
+        /**
+         * The maximum number of execution environments that can be provisioned for the function.
+         */
+        maxExecutionEnvironments?: number;
+        /**
+         * The minimum number of execution environments to maintain for the function.
+         */
+        minExecutionEnvironments?: number;
+    }
     /**
      * A provisioned concurrency configuration for a function's version.
      */
@@ -50786,7 +52013,7 @@ export declare namespace lex {
     }
     interface BotGrammarSlotTypeSource {
         /**
-         * The AWS KMS key required to decrypt the contents of the grammar, if any.
+         * The AWS  key required to decrypt the contents of the grammar, if any.
          */
         kmsKeyArn?: string;
         /**
@@ -52338,7 +53565,7 @@ export declare namespace logs {
          */
         dataSourceRoleArn: string;
         /**
-         * To have the vended dashboard data encrypted with AWS KMS instead of the CloudWatch Logs default encryption method, specify the ARN of the AWS KMS key that you want to use.
+         * To have the vended dashboard data encrypted with AWS  instead of the CloudWatch Logs default encryption method, specify the ARN of the AWS  key that you want to use.
          */
         kmsKeyArn?: string;
         /**
@@ -53321,6 +54548,11 @@ export declare namespace mediaconnect {
          */
         silentAudio?: outputs.mediaconnect.FlowSilentAudio;
     }
+    /**
+     * Configuration settings for automatic encryption key management, where MediaConnect handles key creation and rotation.
+     */
+    interface FlowAutomaticEncryptionKeyConfiguration {
+    }
     /**
      * Configures settings for the BlackFrames metric.
      */
@@ -53641,6 +54873,11 @@ export declare namespace mediaconnect {
          */
         vpcInterfaceAdapter: string;
     }
+    /**
+     * Configuration settings for automatic encryption key management, where MediaConnect handles key creation and rotation.
+     */
+    interface FlowOutputAutomaticEncryptionKeyConfiguration {
+    }
     /**
      * The definition of a media stream that is associated with the output.
      */
@@ -53692,6 +54929,25 @@ export declare namespace mediaconnect {
          */
         secretArn: string;
     }
+    /**
+     * The configuration that defines how content is encrypted during transit between the MediaConnect router and a MediaConnect flow.
+     */
+    interface FlowOutputFlowTransitEncryption {
+        encryptionKeyConfiguration: outputs.mediaconnect.FlowOutputFlowTransitEncryptionKeyConfiguration0Properties | outputs.mediaconnect.FlowOutputFlowTransitEncryptionKeyConfiguration1Properties;
+        encryptionKeyType?: enums.mediaconnect.FlowOutputFlowTransitEncryptionKeyType;
+    }
+    /**
+     * Configuration settings for flow transit encryption keys.
+     */
+    interface FlowOutputFlowTransitEncryptionKeyConfiguration0Properties {
+        secretsManager: outputs.mediaconnect.FlowOutputSecretsManagerEncryptionKeyConfiguration;
+    }
+    /**
+     * Configuration settings for flow transit encryption keys.
+     */
+    interface FlowOutputFlowTransitEncryptionKeyConfiguration1Properties {
+        automatic: outputs.mediaconnect.FlowOutputAutomaticEncryptionKeyConfiguration;
+    }
     /**
      * The VPC interface that you want to use for the media stream associated with the output.
      */
@@ -53722,6 +54978,19 @@ export declare namespace mediaconnect {
          */
         mediaStreamName: string;
     }
+    /**
+     * The configuration settings for transit encryption of a flow output using AWS Secrets Manager, including the secret ARN and role ARN.
+     */
+    interface FlowOutputSecretsManagerEncryptionKeyConfiguration {
+        /**
+         * The ARN of the IAM role used for transit encryption to the router input using AWS Secrets Manager.
+         */
+        roleArn: string;
+        /**
+         * The ARN of the AWS Secrets Manager secret used for transit encryption to the router input.
+         */
+        secretArn: string;
+    }
     /**
      * The settings for attaching a VPC interface to an output.
      */
@@ -53731,6 +55000,19 @@ export declare namespace mediaconnect {
          */
         vpcInterfaceName?: string;
     }
+    /**
+     * The configuration settings for transit encryption of a flow source using AWS Secrets Manager, including the secret ARN and role ARN.
+     */
+    interface FlowSecretsManagerEncryptionKeyConfiguration {
+        /**
+         * The ARN of the IAM role used for transit encryption from the router output using AWS Secrets Manager.
+         */
+        roleArn: string;
+        /**
+         * The ARN of the AWS Secrets Manager secret used for transit encryption from the router output.
+         */
+        secretArn: string;
+    }
     /**
      * Configures settings for the SilentAudio metric.
      */
@@ -53800,6 +55082,14 @@ export declare namespace mediaconnect {
          * The protocol that is used by the source.
          */
         protocol?: enums.mediaconnect.FlowSourceProtocol;
+        /**
+         * Indicates if router integration is enabled or disabled on the flow source.
+         */
+        routerIntegrationState?: enums.mediaconnect.FlowSourceRouterIntegrationState;
+        /**
+         * The decryption configuration for the flow source when router integration is enabled.
+         */
+        routerIntegrationTransitDecryption?: outputs.mediaconnect.FlowTransitEncryption;
         /**
          * The port that the flow uses to send outbound requests to initiate connection with the sender for fujitsu-qos protocol.
          */
@@ -53921,6 +55211,25 @@ export declare namespace mediaconnect {
          */
         vpcInterfaceName?: string;
     }
+    /**
+     * The configuration that defines how content is encrypted during transit between the MediaConnect router and a MediaConnect flow.
+     */
+    interface FlowTransitEncryption {
+        encryptionKeyConfiguration: outputs.mediaconnect.FlowTransitEncryptionKeyConfiguration0Properties | outputs.mediaconnect.FlowTransitEncryptionKeyConfiguration1Properties;
+        encryptionKeyType?: enums.mediaconnect.FlowTransitEncryptionKeyType;
+    }
+    /**
+     * Configuration settings for flow transit encryption keys.
+     */
+    interface FlowTransitEncryptionKeyConfiguration0Properties {
+        secretsManager: outputs.mediaconnect.FlowSecretsManagerEncryptionKeyConfiguration;
+    }
+    /**
+     * Configuration settings for flow transit encryption keys.
+     */
+    interface FlowTransitEncryptionKeyConfiguration1Properties {
+        automatic: outputs.mediaconnect.FlowAutomaticEncryptionKeyConfiguration;
+    }
     /**
      * Specifies the configuration for video stream metrics monitoring.
      */
@@ -53985,6 +55294,571 @@ export declare namespace mediaconnect {
          */
         name: string;
     }
+    /**
+     * Configuration settings for automatic encryption key management, where MediaConnect handles key creation and rotation.
+     */
+    interface RouterInputAutomaticEncryptionKeyConfiguration {
+    }
+    /**
+     * The configuration settings for a router input.
+     */
+    interface RouterInputConfiguration0Properties {
+        standard: outputs.mediaconnect.RouterInputStandardRouterInputConfiguration;
+    }
+    /**
+     * The configuration settings for a router input.
+     */
+    interface RouterInputConfiguration1Properties {
+        failover: outputs.mediaconnect.RouterInputFailoverRouterInputConfiguration;
+    }
+    /**
+     * The configuration settings for a router input.
+     */
+    interface RouterInputConfiguration2Properties {
+        merge: outputs.mediaconnect.RouterInputMergeRouterInputConfiguration;
+    }
+    /**
+     * The configuration settings for a router input.
+     */
+    interface RouterInputConfiguration3Properties {
+        mediaConnectFlow: outputs.mediaconnect.RouterInputMediaConnectFlowRouterInputConfiguration;
+    }
+    /**
+     * Configuration settings for default maintenance scheduling.
+     */
+    interface RouterInputDefaultMaintenanceConfiguration {
+    }
+    /**
+     * Configuration settings for a failover router input that allows switching between two input sources.
+     */
+    interface RouterInputFailoverRouterInputConfiguration {
+        /**
+         * The ARN of the network interface to use for this failover router input.
+         */
+        networkInterfaceArn: string;
+        /**
+         * The index (0 or 1) that specifies which source in the protocol configurations list is currently active. Used to control which of the two failover sources is currently selected. This field is ignored when sourcePriorityMode is set to NO_PRIORITY
+         */
+        primarySourceIndex?: number;
+        /**
+         * A list of exactly two protocol configurations for the failover input sources. Both must use the same protocol type.
+         */
+        protocolConfigurations: (outputs.mediaconnect.RouterInputFailoverRouterInputProtocolConfiguration0Properties | outputs.mediaconnect.RouterInputFailoverRouterInputProtocolConfiguration1Properties | outputs.mediaconnect.RouterInputFailoverRouterInputProtocolConfiguration2Properties | outputs.mediaconnect.RouterInputFailoverRouterInputProtocolConfiguration3Properties)[];
+        sourcePriorityMode: enums.mediaconnect.RouterInputFailoverInputSourcePriorityMode;
+    }
+    /**
+     * Protocol configuration settings for failover router inputs.
+     */
+    interface RouterInputFailoverRouterInputProtocolConfiguration0Properties {
+        rtp: outputs.mediaconnect.RouterInputRtpRouterInputConfiguration;
+    }
+    /**
+     * Protocol configuration settings for failover router inputs.
+     */
+    interface RouterInputFailoverRouterInputProtocolConfiguration1Properties {
+        rist: outputs.mediaconnect.RouterInputRistRouterInputConfiguration;
+    }
+    /**
+     * Protocol configuration settings for failover router inputs.
+     */
+    interface RouterInputFailoverRouterInputProtocolConfiguration2Properties {
+        srtListener: outputs.mediaconnect.RouterInputSrtListenerRouterInputConfiguration;
+    }
+    /**
+     * Protocol configuration settings for failover router inputs.
+     */
+    interface RouterInputFailoverRouterInputProtocolConfiguration3Properties {
+        srtCaller: outputs.mediaconnect.RouterInputSrtCallerRouterInputConfiguration;
+    }
+    /**
+     * The configuration that defines how content is encrypted during transit between the MediaConnect router and a MediaConnect flow.
+     */
+    interface RouterInputFlowTransitEncryption {
+        encryptionKeyConfiguration: outputs.mediaconnect.RouterInputFlowTransitEncryptionKeyConfiguration0Properties | outputs.mediaconnect.RouterInputFlowTransitEncryptionKeyConfiguration1Properties;
+        encryptionKeyType?: enums.mediaconnect.RouterInputFlowTransitEncryptionKeyType;
+    }
+    /**
+     * Configuration settings for flow transit encryption keys.
+     */
+    interface RouterInputFlowTransitEncryptionKeyConfiguration0Properties {
+        secretsManager: outputs.mediaconnect.RouterInputSecretsManagerEncryptionKeyConfiguration;
+    }
+    /**
+     * Configuration settings for flow transit encryption keys.
+     */
+    interface RouterInputFlowTransitEncryptionKeyConfiguration1Properties {
+        automatic: outputs.mediaconnect.RouterInputAutomaticEncryptionKeyConfiguration;
+    }
+    /**
+     * The configuration settings for maintenance operations, including preferred maintenance windows and schedules.
+     */
+    interface RouterInputMaintenanceConfiguration0Properties {
+        preferredDayTime: outputs.mediaconnect.RouterInputPreferredDayTimeMaintenanceConfiguration;
+    }
+    /**
+     * The configuration settings for maintenance operations, including preferred maintenance windows and schedules.
+     */
+    interface RouterInputMaintenanceConfiguration1Properties {
+        default: outputs.mediaconnect.RouterInputDefaultMaintenanceConfiguration;
+    }
+    /**
+     * Configuration settings for connecting a router input to a flow output.
+     */
+    interface RouterInputMediaConnectFlowRouterInputConfiguration {
+        /**
+         * The ARN of the flow to connect to.
+         */
+        flowArn?: string;
+        /**
+         * The ARN of the flow output to connect to this router input.
+         */
+        flowOutputArn?: string;
+        sourceTransitDecryption: outputs.mediaconnect.RouterInputFlowTransitEncryption;
+    }
+    /**
+     * Configuration settings for a merge router input that combines two input sources.
+     */
+    interface RouterInputMergeRouterInputConfiguration {
+        /**
+         * The time window in milliseconds for merging the two input sources.
+         */
+        mergeRecoveryWindowMilliseconds: number;
+        /**
+         * The ARN of the network interface to use for this merge router input.
+         */
+        networkInterfaceArn: string;
+        /**
+         * A list of exactly two protocol configurations for the merge input sources. Both must use the same protocol type.
+         */
+        protocolConfigurations: (outputs.mediaconnect.RouterInputMergeRouterInputProtocolConfiguration0Properties | outputs.mediaconnect.RouterInputMergeRouterInputProtocolConfiguration1Properties)[];
+    }
+    /**
+     * Protocol configuration settings for merge router inputs.
+     */
+    interface RouterInputMergeRouterInputProtocolConfiguration0Properties {
+        rtp: outputs.mediaconnect.RouterInputRtpRouterInputConfiguration;
+    }
+    /**
+     * Protocol configuration settings for merge router inputs.
+     */
+    interface RouterInputMergeRouterInputProtocolConfiguration1Properties {
+        rist: outputs.mediaconnect.RouterInputRistRouterInputConfiguration;
+    }
+    /**
+     * Configuration for preferred day and time maintenance settings.
+     */
+    interface RouterInputPreferredDayTimeMaintenanceConfiguration {
+        day: enums.mediaconnect.RouterInputDay;
+        /**
+         * The preferred time for maintenance operations.
+         */
+        time: string;
+    }
+    /**
+     * The protocol configuration settings for a router input.
+     */
+    interface RouterInputProtocolConfiguration0Properties {
+        rtp: outputs.mediaconnect.RouterInputRtpRouterInputConfiguration;
+    }
+    /**
+     * The protocol configuration settings for a router input.
+     */
+    interface RouterInputProtocolConfiguration1Properties {
+        rist: outputs.mediaconnect.RouterInputRistRouterInputConfiguration;
+    }
+    /**
+     * The protocol configuration settings for a router input.
+     */
+    interface RouterInputProtocolConfiguration2Properties {
+        srtListener: outputs.mediaconnect.RouterInputSrtListenerRouterInputConfiguration;
+    }
+    /**
+     * The protocol configuration settings for a router input.
+     */
+    interface RouterInputProtocolConfiguration3Properties {
+        srtCaller: outputs.mediaconnect.RouterInputSrtCallerRouterInputConfiguration;
+    }
+    /**
+     * The configuration settings for a router input using the RIST (Reliable Internet Stream Transport) protocol, including the port and recovery latency.
+     */
+    interface RouterInputRistRouterInputConfiguration {
+        /**
+         * The port number used for the RIST protocol in the router input configuration.
+         */
+        port: number;
+        /**
+         * The recovery latency in milliseconds for the RIST protocol in the router input configuration.
+         */
+        recoveryLatencyMilliseconds: number;
+    }
+    /**
+     * The configuration settings for a Router Input using the RTP (Real-Time Transport Protocol) protocol, including the port and forward error correction state.
+     */
+    interface RouterInputRtpRouterInputConfiguration {
+        forwardErrorCorrection?: enums.mediaconnect.RouterInputForwardErrorCorrectionState;
+        /**
+         * The port number used for the RTP protocol in the router input configuration.
+         */
+        port: number;
+    }
+    /**
+     * The configuration settings for transit encryption using AWS Secrets Manager, including the secret ARN and role ARN.
+     */
+    interface RouterInputSecretsManagerEncryptionKeyConfiguration {
+        /**
+         * The ARN of the IAM role assumed by MediaConnect to access the AWS Secrets Manager secret.
+         */
+        roleArn: string;
+        /**
+         * The ARN of the AWS Secrets Manager secret used for transit encryption.
+         */
+        secretArn: string;
+    }
+    /**
+     * The configuration settings for a router input using the SRT (Secure Reliable Transport) protocol in caller mode, including the source address and port, minimum latency, stream ID, and decryption key configuration.
+     */
+    interface RouterInputSrtCallerRouterInputConfiguration {
+        decryptionConfiguration?: outputs.mediaconnect.RouterInputSrtDecryptionConfiguration;
+        /**
+         * The minimum latency in milliseconds for the SRT protocol in caller mode.
+         */
+        minimumLatencyMilliseconds: number;
+        /**
+         * The source IP address for the SRT protocol in caller mode.
+         */
+        sourceAddress: string;
+        /**
+         * The source port number for the SRT protocol in caller mode.
+         */
+        sourcePort: number;
+        /**
+         * The stream ID for the SRT protocol in caller mode.
+         */
+        streamId?: string;
+    }
+    /**
+     * Contains the configuration settings for decrypting SRT streams, including the encryption key details and decryption parameters.
+     */
+    interface RouterInputSrtDecryptionConfiguration {
+        encryptionKey: outputs.mediaconnect.RouterInputSecretsManagerEncryptionKeyConfiguration;
+    }
+    /**
+     * The configuration settings for a router input using the SRT (Secure Reliable Transport) protocol in listener mode, including the port, minimum latency, and decryption key configuration.
+     */
+    interface RouterInputSrtListenerRouterInputConfiguration {
+        decryptionConfiguration?: outputs.mediaconnect.RouterInputSrtDecryptionConfiguration;
+        /**
+         * The minimum latency in milliseconds for the SRT protocol in listener mode.
+         */
+        minimumLatencyMilliseconds: number;
+        /**
+         * The port number for the SRT protocol in listener mode.
+         */
+        port: number;
+    }
+    /**
+     * The configuration settings for a standard router input, including the protocol, protocol-specific configuration, network interface, and availability zone.
+     */
+    interface RouterInputStandardRouterInputConfiguration {
+        /**
+         * The Amazon Resource Name (ARN) of the network interface associated with the standard router input.
+         */
+        networkInterfaceArn: string;
+        protocol?: enums.mediaconnect.RouterInputProtocol;
+        protocolConfiguration: outputs.mediaconnect.RouterInputProtocolConfiguration0Properties | outputs.mediaconnect.RouterInputProtocolConfiguration1Properties | outputs.mediaconnect.RouterInputProtocolConfiguration2Properties | outputs.mediaconnect.RouterInputProtocolConfiguration3Properties;
+    }
+    /**
+     * The transit encryption settings for a router input.
+     */
+    interface RouterInputTransitEncryption {
+        encryptionKeyConfiguration: outputs.mediaconnect.RouterInputTransitEncryptionKeyConfiguration0Properties | outputs.mediaconnect.RouterInputTransitEncryptionKeyConfiguration1Properties;
+        encryptionKeyType?: enums.mediaconnect.RouterInputTransitEncryptionKeyType;
+    }
+    /**
+     * Defines the configuration settings for transit encryption keys.
+     */
+    interface RouterInputTransitEncryptionKeyConfiguration0Properties {
+        secretsManager: outputs.mediaconnect.RouterInputSecretsManagerEncryptionKeyConfiguration;
+    }
+    /**
+     * Defines the configuration settings for transit encryption keys.
+     */
+    interface RouterInputTransitEncryptionKeyConfiguration1Properties {
+        automatic: outputs.mediaconnect.RouterInputAutomaticEncryptionKeyConfiguration;
+    }
+    /**
+     * The configuration settings for a router network interface.
+     */
+    interface RouterNetworkInterfaceConfiguration0Properties {
+        public: outputs.mediaconnect.RouterNetworkInterfacePublicRouterNetworkInterfaceConfiguration;
+    }
+    /**
+     * The configuration settings for a router network interface.
+     */
+    interface RouterNetworkInterfaceConfiguration1Properties {
+        vpc: outputs.mediaconnect.RouterNetworkInterfaceVpcRouterNetworkInterfaceConfiguration;
+    }
+    /**
+     * The configuration settings for a public router network interface, including the list of allowed CIDR blocks.
+     */
+    interface RouterNetworkInterfacePublicRouterNetworkInterfaceConfiguration {
+        /**
+         * The list of allowed CIDR blocks for the public router network interface.
+         */
+        allowRules: outputs.mediaconnect.RouterNetworkInterfacePublicRouterNetworkInterfaceRule[];
+    }
+    /**
+     * A rule that allows a specific CIDR block to access the public router network interface.
+     */
+    interface RouterNetworkInterfacePublicRouterNetworkInterfaceRule {
+        /**
+         * The CIDR block that is allowed to access the public router network interface.
+         */
+        cidr: string;
+    }
+    /**
+     * The configuration settings for a router network interface within a VPC, including the security group IDs and subnet ID.
+     */
+    interface RouterNetworkInterfaceVpcRouterNetworkInterfaceConfiguration {
+        /**
+         * The IDs of the security groups to associate with the router network interface within the VPC.
+         */
+        securityGroupIds: string[];
+        /**
+         * The ID of the subnet within the VPC to associate the router network interface with.
+         */
+        subnetId: string;
+    }
+    /**
+     * Configuration settings for automatic encryption key management, where MediaConnect handles key creation and rotation.
+     */
+    interface RouterOutputResourceAutomaticEncryptionKeyConfiguration {
+    }
+    /**
+     * Configuration settings for default maintenance scheduling.
+     */
+    interface RouterOutputResourceDefaultMaintenanceConfiguration {
+    }
+    /**
+     * The configuration that defines how content is encrypted during transit between the MediaConnect router and a MediaConnect flow.
+     */
+    interface RouterOutputResourceFlowTransitEncryption {
+        encryptionKeyConfiguration: outputs.mediaconnect.RouterOutputResourceFlowTransitEncryptionKeyConfiguration0Properties | outputs.mediaconnect.RouterOutputResourceFlowTransitEncryptionKeyConfiguration1Properties;
+        encryptionKeyType?: enums.mediaconnect.RouterOutputResourceFlowTransitEncryptionKeyType;
+    }
+    /**
+     * Configuration settings for flow transit encryption keys.
+     */
+    interface RouterOutputResourceFlowTransitEncryptionKeyConfiguration0Properties {
+        secretsManager: outputs.mediaconnect.RouterOutputResourceSecretsManagerEncryptionKeyConfiguration;
+    }
+    /**
+     * Configuration settings for flow transit encryption keys.
+     */
+    interface RouterOutputResourceFlowTransitEncryptionKeyConfiguration1Properties {
+        automatic: outputs.mediaconnect.RouterOutputResourceAutomaticEncryptionKeyConfiguration;
+    }
+    /**
+     * The configuration settings for maintenance operations, including preferred maintenance windows and schedules.
+     */
+    interface RouterOutputResourceMaintenanceConfiguration0Properties {
+        preferredDayTime: outputs.mediaconnect.RouterOutputResourcePreferredDayTimeMaintenanceConfiguration;
+    }
+    /**
+     * The configuration settings for maintenance operations, including preferred maintenance windows and schedules.
+     */
+    interface RouterOutputResourceMaintenanceConfiguration1Properties {
+        default: outputs.mediaconnect.RouterOutputResourceDefaultMaintenanceConfiguration;
+    }
+    /**
+     * Configuration settings for connecting a router output to a MediaConnect flow source.
+     */
+    interface RouterOutputResourceMediaConnectFlowRouterOutputConfiguration {
+        destinationTransitEncryption: outputs.mediaconnect.RouterOutputResourceFlowTransitEncryption;
+        /**
+         * The ARN of the flow to connect to this router output.
+         */
+        flowArn?: string;
+        /**
+         * The ARN of the flow source to connect to this router output.
+         */
+        flowSourceArn?: string;
+    }
+    /**
+     * Configuration settings for connecting a router output to a MediaLive input.
+     */
+    interface RouterOutputResourceMediaLiveInputRouterOutputConfiguration {
+        destinationTransitEncryption: outputs.mediaconnect.RouterOutputResourceMediaLiveTransitEncryption;
+        /**
+         * The ARN of the MediaLive input to connect to this router output.
+         */
+        mediaLiveInputArn?: string;
+        mediaLivePipelineId?: enums.mediaconnect.RouterOutputResourceMediaLiveInputPipelineId;
+    }
+    /**
+     * The encryption configuration that defines how content is encrypted during transit between MediaConnect Router and MediaLive. This configuration determines whether encryption keys are automatically managed by the service or manually managed through AWS Secrets Manager.
+     */
+    interface RouterOutputResourceMediaLiveTransitEncryption {
+        encryptionKeyConfiguration: outputs.mediaconnect.RouterOutputResourceMediaLiveTransitEncryptionKeyConfiguration0Properties | outputs.mediaconnect.RouterOutputResourceMediaLiveTransitEncryptionKeyConfiguration1Properties;
+        encryptionKeyType?: enums.mediaconnect.RouterOutputResourceMediaLiveTransitEncryptionKeyType;
+    }
+    /**
+     * Configuration settings for the MediaLive transit encryption key.
+     */
+    interface RouterOutputResourceMediaLiveTransitEncryptionKeyConfiguration0Properties {
+        secretsManager: outputs.mediaconnect.RouterOutputResourceSecretsManagerEncryptionKeyConfiguration;
+    }
+    /**
+     * Configuration settings for the MediaLive transit encryption key.
+     */
+    interface RouterOutputResourceMediaLiveTransitEncryptionKeyConfiguration1Properties {
+        automatic: outputs.mediaconnect.RouterOutputResourceAutomaticEncryptionKeyConfiguration;
+    }
+    /**
+     * Configuration for preferred day and time maintenance settings.
+     */
+    interface RouterOutputResourcePreferredDayTimeMaintenanceConfiguration {
+        day: enums.mediaconnect.RouterOutputResourceDay;
+        /**
+         * The preferred time for maintenance operations.
+         */
+        time: string;
+    }
+    /**
+     * The configuration settings for a router output using the RIST (Reliable Internet Stream Transport) protocol, including the destination address and port.
+     */
+    interface RouterOutputResourceRistRouterOutputConfiguration {
+        /**
+         * The destination IP address for the RIST protocol in the router output configuration.
+         */
+        destinationAddress: string;
+        /**
+         * The destination port number for the RIST protocol in the router output configuration.
+         */
+        destinationPort: number;
+    }
+    /**
+     * The configuration settings for a router output.
+     */
+    interface RouterOutputResourceRouterOutputConfiguration0Properties {
+        standard: outputs.mediaconnect.RouterOutputResourceStandardRouterOutputConfiguration;
+    }
+    /**
+     * The configuration settings for a router output.
+     */
+    interface RouterOutputResourceRouterOutputConfiguration1Properties {
+        mediaConnectFlow: outputs.mediaconnect.RouterOutputResourceMediaConnectFlowRouterOutputConfiguration;
+    }
+    /**
+     * The configuration settings for a router output.
+     */
+    interface RouterOutputResourceRouterOutputConfiguration2Properties {
+        mediaLiveInput: outputs.mediaconnect.RouterOutputResourceMediaLiveInputRouterOutputConfiguration;
+    }
+    /**
+     * The protocol configuration settings for a router output.
+     */
+    interface RouterOutputResourceRouterOutputProtocolConfiguration0Properties {
+        rtp: outputs.mediaconnect.RouterOutputResourceRtpRouterOutputConfiguration;
+    }
+    /**
+     * The protocol configuration settings for a router output.
+     */
+    interface RouterOutputResourceRouterOutputProtocolConfiguration1Properties {
+        rist: outputs.mediaconnect.RouterOutputResourceRistRouterOutputConfiguration;
+    }
+    /**
+     * The protocol configuration settings for a router output.
+     */
+    interface RouterOutputResourceRouterOutputProtocolConfiguration2Properties {
+        srtListener: outputs.mediaconnect.RouterOutputResourceSrtListenerRouterOutputConfiguration;
+    }
+    /**
+     * The protocol configuration settings for a router output.
+     */
+    interface RouterOutputResourceRouterOutputProtocolConfiguration3Properties {
+        srtCaller: outputs.mediaconnect.RouterOutputResourceSrtCallerRouterOutputConfiguration;
+    }
+    /**
+     * The configuration settings for a router output using the RTP (Real-Time Transport Protocol) protocol, including the destination address and port, and forward error correction state.
+     */
+    interface RouterOutputResourceRtpRouterOutputConfiguration {
+        /**
+         * The destination IP address for the RTP protocol in the router output configuration.
+         */
+        destinationAddress: string;
+        /**
+         * The destination port number for the RTP protocol in the router output configuration.
+         */
+        destinationPort: number;
+        forwardErrorCorrection?: enums.mediaconnect.RouterOutputResourceForwardErrorCorrectionState;
+    }
+    /**
+     * The configuration settings for transit encryption using AWS Secrets Manager, including the secret ARN and role ARN.
+     */
+    interface RouterOutputResourceSecretsManagerEncryptionKeyConfiguration {
+        /**
+         * The ARN of the IAM role assumed by MediaConnect to access the AWS Secrets Manager secret.
+         */
+        roleArn: string;
+        /**
+         * The ARN of the AWS Secrets Manager secret used for transit encryption.
+         */
+        secretArn: string;
+    }
+    /**
+     * The configuration settings for a router output using the SRT (Secure Reliable Transport) protocol in caller mode, including the destination address and port, minimum latency, stream ID, and encryption key configuration.
+     */
+    interface RouterOutputResourceSrtCallerRouterOutputConfiguration {
+        /**
+         * The destination IP address for the SRT protocol in caller mode.
+         */
+        destinationAddress: string;
+        /**
+         * The destination port number for the SRT protocol in caller mode.
+         */
+        destinationPort: number;
+        encryptionConfiguration?: outputs.mediaconnect.RouterOutputResourceSrtEncryptionConfiguration;
+        /**
+         * The minimum latency in milliseconds for the SRT protocol in caller mode.
+         */
+        minimumLatencyMilliseconds: number;
+        /**
+         * The stream ID for the SRT protocol in caller mode.
+         */
+        streamId?: string;
+    }
+    /**
+     * Contains the configuration settings for encrypting SRT streams, including the encryption key details and encryption parameters.
+     */
+    interface RouterOutputResourceSrtEncryptionConfiguration {
+        encryptionKey: outputs.mediaconnect.RouterOutputResourceSecretsManagerEncryptionKeyConfiguration;
+    }
+    /**
+     * The configuration settings for a router output using the SRT (Secure Reliable Transport) protocol in listener mode, including the port, minimum latency, and encryption key configuration.
+     */
+    interface RouterOutputResourceSrtListenerRouterOutputConfiguration {
+        encryptionConfiguration?: outputs.mediaconnect.RouterOutputResourceSrtEncryptionConfiguration;
+        /**
+         * The minimum latency in milliseconds for the SRT protocol in listener mode.
+         */
+        minimumLatencyMilliseconds: number;
+        /**
+         * The port number for the SRT protocol in listener mode.
+         */
+        port: number;
+    }
+    /**
+     * The configuration settings for a standard router output, including the protocol, protocol-specific configuration, network interface, and availability zone.
+     */
+    interface RouterOutputResourceStandardRouterOutputConfiguration {
+        /**
+         * The Amazon Resource Name (ARN) of the network interface associated with the standard router output.
+         */
+        networkInterfaceArn: string;
+        protocol?: enums.mediaconnect.RouterOutputResourceRouterOutputProtocol;
+        protocolConfiguration: outputs.mediaconnect.RouterOutputResourceRouterOutputProtocolConfiguration0Properties | outputs.mediaconnect.RouterOutputResourceRouterOutputProtocolConfiguration1Properties | outputs.mediaconnect.RouterOutputResourceRouterOutputProtocolConfiguration2Properties | outputs.mediaconnect.RouterOutputResourceRouterOutputProtocolConfiguration3Properties;
+    }
 }
 export declare namespace medialive {
     /**
@@ -55343,7 +57217,7 @@ export declare namespace mediapackagev2 {
          */
         cdnIdentifierSecretArns: string[];
         /**
-         * The ARN for the IAM role that gives MediaPackage read access to Secrets Manager and AWS KMS for CDN authorization.
+         * The ARN for the IAM role that gives MediaPackage read access to Secrets Manager and AWS  for CDN authorization.
          */
         secretsRoleArn: string;
     }
@@ -56023,6 +57897,9 @@ export declare namespace msk {
          */
         type?: string;
     }
+    interface ClusterRebalancing {
+        status: enums.msk.ClusterRebalancingStatus;
+    }
     interface ClusterS3 {
         /**
          * The name of the S3 bucket that is the destination for broker logs.
@@ -56965,7 +58842,7 @@ export declare namespace networkfirewall {
          * The following limitations apply:
          *
          * - You can use CA certificates that you imported into ACM, but you can't generate CA certificates with ACM.
-         * - You can't use certificates issued by AWS Private Certificate Authority .
+         * - You can't use certificates issued by Private Certificate Authority .
          *
          * For more information about configuring certificates for outbound inspection, see [Using SSL/TLS certificates with TLS inspection configurations](https://docs.aws.amazon.com/network-firewall/latest/developerguide/tls-inspection-certificate-requirements.html) in the *AWS Network Firewall Developer Guide* .
          *
@@ -57575,7 +59452,7 @@ export declare namespace oam {
          * Examples:
          *
          * - `Namespace NOT LIKE 'AWS/%'` includes only namespaces that don't start with `AWS/` , such as custom namespaces.
-         * - `Namespace IN ('AWS/EC2', 'AWS/ELB', 'AWS/S3')` includes only the metrics in the EC2, Elastic Load Balancing , and Amazon S3 namespaces.
+         * - `Namespace IN ('AWS/EC2', 'AWS/ELB', 'AWS/S3')` includes only the metrics in the EC2, ELB , and Amazon S3 namespaces.
          * - `Namespace = 'AWS/EC2' OR Namespace NOT LIKE 'AWS/%'` includes only the EC2 namespace and your custom namespaces.
          * - `LogGroupName IN ('This-Log-Group', 'Other-Log-Group')` includes only the log groups with names `This-Log-Group` and `Other-Log-Group` .
          * - `LogGroupName NOT IN ('Private-Log-Group', 'Private-Log-Group-2')` includes all log groups except the log groups with names `Private-Log-Group` and `Private-Log-Group-2` .
@@ -58512,6 +60389,9 @@ export declare namespace opensearchservice {
          */
         samlOptions?: outputs.opensearchservice.DomainSamlOptions;
     }
+    interface DomainAimlOptions {
+        s3VectorsEngine?: outputs.opensearchservice.DomainS3VectorsEngine;
+    }
     interface DomainClusterConfig {
         /**
          * Container for cold storage configuration options.
@@ -58778,6 +60658,12 @@ export declare namespace opensearchservice {
          */
         offPeakWindow?: outputs.opensearchservice.DomainOffPeakWindow;
     }
+    interface DomainS3VectorsEngine {
+        /**
+         * Whether to enable S3 vectors engine.
+         */
+        enabled: boolean;
+    }
     interface DomainSamlOptions {
         /**
          * True to enable SAML authentication for a domain.
@@ -60952,7 +62838,7 @@ export declare namespace qbusiness {
     }
     interface ApplicationEncryptionConfiguration {
         /**
-         * The identifier of the AWS KMS key. Amazon Q Business doesn't support asymmetric keys.
+         * The identifier of the AWS  key. Amazon Q Business doesn't support asymmetric keys.
          */
         kmsKeyId?: string;
     }
@@ -79249,24 +81135,63 @@ export declare namespace quicksight {
         yAxis: enums.quicksight.DashboardSingleYAxisOption;
     }
     interface DataSetAggregateOperation {
+        /**
+         * The list of aggregation functions to apply to the grouped data, such as `SUM` , `COUNT` , or `AVERAGE` .
+         */
         aggregations: outputs.quicksight.DataSetAggregation[];
+        /**
+         * Alias for this operation.
+         */
         alias: string;
+        /**
+         * The list of column names to group by when performing the aggregation. Rows with the same values in these columns will be grouped together.
+         */
         groupByColumnNames?: string[];
+        /**
+         * The source transform operation that provides input data for the aggregation.
+         */
         source: outputs.quicksight.DataSetTransformOperationSource;
     }
     interface DataSetAggregation {
+        /**
+         * The aggregation function to apply, such as `SUM` , `COUNT` , `AVERAGE` , `MIN` , `MAX`
+         */
         aggregationFunction: outputs.quicksight.DataSetDataPrepAggregationFunction;
+        /**
+         * A unique identifier for the new column that will contain the aggregated values.
+         */
         newColumnId: string;
+        /**
+         * The name for the new column that will contain the aggregated values.
+         */
         newColumnName: string;
     }
     interface DataSetAppendOperation {
+        /**
+         * Alias for this operation.
+         */
         alias: string;
+        /**
+         * The list of columns to include in the appended result, mapping columns from both sources.
+         */
         appendedColumns: outputs.quicksight.DataSetAppendedColumn[];
+        /**
+         * The first data source to be included in the append operation.
+         */
         firstSource?: outputs.quicksight.DataSetTransformOperationSource;
+        /**
+         * The second data source to be appended to the first source.
+         */
         secondSource?: outputs.quicksight.DataSetTransformOperationSource;
     }
     interface DataSetAppendedColumn {
+        /**
+         * The name of the column to include in the appended result.
+         */
         columnName: string;
+        /**
+         * A unique identifier for the column in the appended result.
+         */
         newColumnId: string;
     }
     /**
@@ -79311,8 +81236,17 @@ export declare namespace quicksight {
         subType?: enums.quicksight.DataSetColumnDataSubType;
     }
     interface DataSetCastColumnTypesOperation {
+        /**
+         * Alias for this operation.
+         */
         alias: string;
+        /**
+         * The list of column type casting operations to perform.
+         */
         castColumnTypeOperations: outputs.quicksight.DataSetCastColumnTypeOperation[];
+        /**
+         * The source transform operation that provides input data for the type casting.
+         */
         source: outputs.quicksight.DataSetTransformOperationSource;
     }
     /**
@@ -79377,7 +81311,13 @@ export declare namespace quicksight {
         columnGeographicRole?: enums.quicksight.DataSetGeoSpatialDataRole;
     }
     interface DataSetColumnToUnpivot {
+        /**
+         * The name of the column to unpivot from the source data.
+         */
         columnName?: string;
+        /**
+         * The value to assign to this column in the unpivoted result, typically the column name or a descriptive label.
+         */
         newValue?: string;
     }
     /**
@@ -79385,11 +81325,17 @@ export declare namespace quicksight {
      *             operation form a lexical closure.</p>
      */
     interface DataSetCreateColumnsOperation {
+        /**
+         * Alias for this operation.
+         */
         alias?: string;
         /**
          * <p>Calculated columns to create.</p>
          */
         columns: outputs.quicksight.DataSetCalculatedColumn[];
+        /**
+         * The source transform operation that provides input data for creating new calculated columns.
+         */
         source?: outputs.quicksight.DataSetTransformOperationSource;
     }
     /**
@@ -79414,24 +81360,48 @@ export declare namespace quicksight {
         sqlQuery: string;
     }
     interface DataSetDataPrepAggregationFunction {
+        /**
+         * A list aggregation function that concatenates values from multiple rows into a single delimited string.
+         */
         listAggregation?: outputs.quicksight.DataSetDataPrepListAggregationFunction;
         percentileAggregation?: outputs.quicksight.DataSetDataPrepPercentileAggregationFunction;
+        /**
+         * A simple aggregation function such as `SUM` , `COUNT` , `AVERAGE` , `MIN` , `MAX` , `MEDIAN` , `VARIANCE` , or `STANDARD_DEVIATION` .
+         */
         simpleAggregation?: outputs.quicksight.DataSetDataPrepSimpleAggregationFunction;
     }
     interface DataSetDataPrepConfiguration {
+        /**
+         * A map of destination tables that receive the final prepared data.
+         */
         destinationTableMap: {
             [key: string]: outputs.quicksight.DataSetDestinationTable;
         };
+        /**
+         * A map of source tables that provide information about underlying sources.
+         */
         sourceTableMap: {
             [key: string]: outputs.quicksight.DataSetSourceTable;
         };
+        /**
+         * A map of transformation steps that process the data.
+         */
         transformStepMap: {
             [key: string]: outputs.quicksight.DataSetTransformStep;
         };
     }
     interface DataSetDataPrepListAggregationFunction {
+        /**
+         * Whether to include only distinct values in the concatenated result, removing duplicates.
+         */
         distinct: boolean;
+        /**
+         * The name of the column containing values to be concatenated.
+         */
         inputColumnName?: string;
+        /**
+         * The string used to separate values in the concatenated result.
+         */
         separator: string;
     }
     interface DataSetDataPrepPercentileAggregationFunction {
@@ -79439,7 +81409,13 @@ export declare namespace quicksight {
         percentileValue: number;
     }
     interface DataSetDataPrepSimpleAggregationFunction {
+        /**
+         * The type of aggregation function to perform, such as `COUNT` , `SUM` , `AVERAGE` , `MIN` , `MAX` , `MEDIAN` , `VARIANCE` , or `STANDARD_DEVIATION` .
+         */
         functionType: enums.quicksight.DataSetDataPrepSimpleAggregationFunctionType;
+        /**
+         * The name of the column on which to perform the aggregation function.
+         */
         inputColumnName?: string;
     }
     /**
@@ -79464,21 +81440,51 @@ export declare namespace quicksight {
         stringDatasetParameter?: outputs.quicksight.DataSetStringDatasetParameter;
     }
     interface DataSetDateComparisonFilterCondition {
+        /**
+         * The comparison operator to use, such as `BEFORE` , `BEFORE_OR_EQUALS_TO` , `AFTER` , or `AFTER_OR_EQUALS_TO` .
+         */
         operator: enums.quicksight.DataSetDateComparisonFilterOperator;
+        /**
+         * The date value to compare against.
+         */
         value?: outputs.quicksight.DataSetDateFilterValue;
     }
     interface DataSetDateFilterCondition {
+        /**
+         * The name of the date column to filter.
+         */
         columnName?: string;
+        /**
+         * A comparison-based filter condition for the date column.
+         */
         comparisonFilterCondition?: outputs.quicksight.DataSetDateComparisonFilterCondition;
+        /**
+         * A range-based filter condition for the date column, filtering values between minimum and maximum dates.
+         */
         rangeFilterCondition?: outputs.quicksight.DataSetDateRangeFilterCondition;
     }
     interface DataSetDateFilterValue {
+        /**
+         * A static date value used for filtering.
+         */
         staticValue?: string;
     }
     interface DataSetDateRangeFilterCondition {
+        /**
+         * Whether to include the maximum value in the filter range.
+         */
         includeMaximum?: boolean;
+        /**
+         * Whether to include the minimum value in the filter range.
+         */
         includeMinimum?: boolean;
+        /**
+         * The maximum date value for the range filter.
+         */
         rangeMaximum?: outputs.quicksight.DataSetDateFilterValue;
+        /**
+         * The minimum date value for the range filter.
+         */
         rangeMinimum?: outputs.quicksight.DataSetDateFilterValue;
     }
     /**
@@ -79546,10 +81552,19 @@ export declare namespace quicksight {
         staticValues?: number[];
     }
     interface DataSetDestinationTable {
+        /**
+         * Alias for the destination table.
+         */
         alias: string;
+        /**
+         * The source configuration that specifies which transform operation provides data to this destination table.
+         */
         source: outputs.quicksight.DataSetDestinationTableSource;
     }
     interface DataSetDestinationTableSource {
+        /**
+         * The identifier of the transform operation that provides data to the destination table.
+         */
         transformOperationId: string;
     }
     /**
@@ -79574,13 +81589,31 @@ export declare namespace quicksight {
          *             evaluates to true are kept in the dataset.</p>
          */
         conditionExpression?: string;
+        /**
+         * A date-based filter condition within a filter operation.
+         */
         dateFilterCondition?: outputs.quicksight.DataSetDateFilterCondition;
+        /**
+         * A numeric-based filter condition within a filter operation.
+         */
         numericFilterCondition?: outputs.quicksight.DataSetNumericFilterCondition;
+        /**
+         * A string-based filter condition within a filter operation.
+         */
         stringFilterCondition?: outputs.quicksight.DataSetStringFilterCondition;
     }
     interface DataSetFiltersOperation {
+        /**
+         * Alias for this operation.
+         */
         alias: string;
+        /**
+         * The list of filter operations to apply.
+         */
         filterOperations: outputs.quicksight.DataSetFilterOperation[];
+        /**
+         * The source transform operation that provides input data for filtering.
+         */
         source: outputs.quicksight.DataSetTransformOperationSource;
     }
     /**
@@ -79601,11 +81634,23 @@ export declare namespace quicksight {
         name: string;
     }
     interface DataSetImportTableOperation {
+        /**
+         * Alias for this operation.
+         */
         alias: string;
+        /**
+         * The source configuration that specifies which source table to import and any column mappings.
+         */
         source: outputs.quicksight.DataSetImportTableOperationSource;
     }
     interface DataSetImportTableOperationSource {
+        /**
+         * The mappings between source column identifiers and target column identifiers during the import.
+         */
         columnIdMappings?: outputs.quicksight.DataSetColumnIdMapping[];
+        /**
+         * The identifier of the source table to import data from.
+         */
         sourceTableId: string;
     }
     /**
@@ -79636,6 +81681,9 @@ export declare namespace quicksight {
      * <p>Metadata for a column that is used as the input of a transform operation.</p>
      */
     interface DataSetInputColumn {
+        /**
+         * A unique identifier for the input column.
+         */
         id?: string;
         /**
          * <p>The name of this column in the underlying data source.</p>
@@ -79720,15 +81768,39 @@ export declare namespace quicksight {
         uniqueKey?: boolean;
     }
     interface DataSetJoinOperandProperties {
+        /**
+         * A list of column name overrides to apply to the join operand's output columns.
+         */
         outputColumnNameOverrides: outputs.quicksight.DataSetOutputColumnNameOverride[];
     }
     interface DataSetJoinOperation {
+        /**
+         * Alias for this operation.
+         */
         alias: string;
+        /**
+         * The left operand for the join operation.
+         */
         leftOperand: outputs.quicksight.DataSetTransformOperationSource;
+        /**
+         * Properties that control how the left operand's columns are handled in the join result.
+         */
         leftOperandProperties?: outputs.quicksight.DataSetJoinOperandProperties;
+        /**
+         * The join condition that specifies how to match rows between the left and right operands.
+         */
         onClause: string;
+        /**
+         * The right operand for the join operation.
+         */
         rightOperand: outputs.quicksight.DataSetTransformOperationSource;
+        /**
+         * Properties that control how the right operand's columns are handled in the join result.
+         */
         rightOperandProperties?: outputs.quicksight.DataSetJoinOperandProperties;
+        /**
+         * The type of join to perform, such as `INNER` , `LEFT` , `RIGHT` , or `OUTER` .
+         */
         type: enums.quicksight.DataSetJoinOperationType;
     }
     /**
@@ -79805,21 +81877,51 @@ export declare namespace quicksight {
         stringStaticValues?: string[];
     }
     interface DataSetNumericComparisonFilterCondition {
+        /**
+         * The comparison operator to use, such as `EQUALS` , `GREATER_THAN` , `LESS_THAN` , or their variants.
+         */
         operator: enums.quicksight.DataSetNumericComparisonFilterOperator;
+        /**
+         * The numeric value to compare against.
+         */
         value?: outputs.quicksight.DataSetNumericFilterValue;
     }
     interface DataSetNumericFilterCondition {
+        /**
+         * The name of the numeric column to filter.
+         */
         columnName?: string;
+        /**
+         * A comparison-based filter condition for the numeric column.
+         */
         comparisonFilterCondition?: outputs.quicksight.DataSetNumericComparisonFilterCondition;
+        /**
+         * A range-based filter condition for the numeric column, filtering values between minimum and maximum numbers.
+         */
         rangeFilterCondition?: outputs.quicksight.DataSetNumericRangeFilterCondition;
     }
     interface DataSetNumericFilterValue {
+        /**
+         * A static numeric value used for filtering.
+         */
         staticValue?: number;
     }
     interface DataSetNumericRangeFilterCondition {
+        /**
+         * Whether to include the maximum value in the filter range.
+         */
         includeMaximum?: boolean;
+        /**
+         * Whether to include the minimum value in the filter range.
+         */
         includeMinimum?: boolean;
+        /**
+         * The maximum numeric value for the range filter.
+         */
         rangeMaximum?: outputs.quicksight.DataSetNumericFilterValue;
+        /**
+         * The minimum numeric value for the range filter.
+         */
         rangeMinimum?: outputs.quicksight.DataSetNumericFilterValue;
     }
     /**
@@ -79830,6 +81932,9 @@ export declare namespace quicksight {
          * <p>A description for a column.</p>
          */
         description?: string;
+        /**
+         * A unique identifier for the output column.
+         */
         id?: string;
         /**
          * <p>The display name of the column..</p>
@@ -79845,7 +81950,13 @@ export declare namespace quicksight {
         type?: enums.quicksight.DataSetColumnDataType;
     }
     interface DataSetOutputColumnNameOverride {
+        /**
+         * The new name to assign to the column in the output.
+         */
         outputColumnName: string;
+        /**
+         * The original name of the column from the source transform operation.
+         */
         sourceColumnName?: string;
     }
     /**
@@ -79866,7 +81977,13 @@ export declare namespace quicksight {
         parameterName: string;
     }
     interface DataSetParentDataSet {
+        /**
+         * The Amazon Resource Name (ARN) of the parent dataset.
+         */
         dataSetArn: string;
+        /**
+         * The list of input columns available from the parent dataset.
+         */
         inputColumns: outputs.quicksight.DataSetInputColumn[];
     }
     interface DataSetPerformanceConfiguration {
@@ -79890,22 +82007,55 @@ export declare namespace quicksight {
          * A physical table type for as S3 data source.
          */
         s3Source?: outputs.quicksight.DataSetS3Source;
+        /**
+         * A physical table type for Software-as-a-Service (SaaS) sources.
+         */
         saaSTable?: outputs.quicksight.DataSetSaaSTable;
     }
     interface DataSetPivotConfiguration {
+        /**
+         * The name of the column that contains the labels to be pivoted into separate columns.
+         */
         labelColumnName?: string;
+        /**
+         * The list of specific label values to pivot into separate columns.
+         */
         pivotedLabels: outputs.quicksight.DataSetPivotedLabel[];
     }
     interface DataSetPivotOperation {
+        /**
+         * Alias for this operation.
+         */
         alias: string;
+        /**
+         * The list of column names to group by when performing the pivot operation.
+         */
         groupByColumnNames?: string[];
+        /**
+         * Configuration that specifies which labels to pivot and how to structure the resulting columns.
+         */
         pivotConfiguration: outputs.quicksight.DataSetPivotConfiguration;
+        /**
+         * The source transform operation that provides input data for pivoting.
+         */
         source: outputs.quicksight.DataSetTransformOperationSource;
+        /**
+         * Configuration for how to aggregate values when multiple rows map to the same pivoted column.
+         */
         valueColumnConfiguration: outputs.quicksight.DataSetValueColumnConfiguration;
     }
     interface DataSetPivotedLabel {
+        /**
+         * The label value from the source data to be pivoted.
+         */
         labelName: string;
+        /**
+         * A unique identifier for the new column created from this pivoted label.
+         */
         newColumnId: string;
+        /**
+         * The name for the new column created from this pivoted label.
+         */
         newColumnName: string;
     }
     /**
@@ -79913,11 +82063,17 @@ export declare namespace quicksight {
      *             can only refer to projected columns.</p>
      */
     interface DataSetProjectOperation {
+        /**
+         * Alias for this operation.
+         */
         alias?: string;
         /**
          * <p>Projected columns.</p>
          */
         projectedColumns?: string[];
+        /**
+         * The source transform operation that provides input data for column projection.
+         */
         source?: outputs.quicksight.DataSetTransformOperationSource;
     }
     /**
@@ -79993,8 +82149,17 @@ export declare namespace quicksight {
         newColumnName: string;
     }
     interface DataSetRenameColumnsOperation {
+        /**
+         * Alias for this operation.
+         */
         alias: string;
+        /**
+         * The list of column rename operations to perform, specifying old and new column names.
+         */
         renameColumnOperations: outputs.quicksight.DataSetRenameColumnOperation[];
+        /**
+         * The source transform operation that provides input data for column renaming.
+         */
         source: outputs.quicksight.DataSetTransformOperationSource;
     }
     /**
@@ -80119,26 +82284,59 @@ export declare namespace quicksight {
         uploadSettings?: outputs.quicksight.DataSetUploadSettings;
     }
     interface DataSetSaaSTable {
+        /**
+         * The Amazon Resource Name (ARN) of the SaaS data source.
+         */
         dataSourceArn: string;
+        /**
+         * The list of input columns available from the SaaS table.
+         */
         inputColumns: outputs.quicksight.DataSetInputColumn[];
+        /**
+         * The hierarchical path to the table within the SaaS data source.
+         */
         tablePath: outputs.quicksight.DataSetTablePathElement[];
     }
     interface DataSetSemanticModelConfiguration {
+        /**
+         * A map of semantic tables that define the analytical structure.
+         */
         tableMap?: {
             [key: string]: outputs.quicksight.DataSetSemanticTable;
         };
     }
     interface DataSetSemanticTable {
+        /**
+         * Alias for the semantic table.
+         */
         alias: string;
+        /**
+         * The identifier of the destination table from data preparation that provides data to this semantic table.
+         */
         destinationTableId: string;
+        /**
+         * Configuration for row level security that control data access for this semantic table.
+         */
         rowLevelPermissionConfiguration?: outputs.quicksight.DataSetRowLevelPermissionConfiguration;
     }
     interface DataSetSourceTable {
+        /**
+         * A parent dataset that serves as the data source instead of a physical table.
+         */
         dataSet?: outputs.quicksight.DataSetParentDataSet;
+        /**
+         * The identifier of the physical table that serves as the data source.
+         */
         physicalTableId?: string;
     }
     interface DataSetStringComparisonFilterCondition {
+        /**
+         * The comparison operator to use, such as `EQUALS` , `CONTAINS` , `STARTS_WITH` , `ENDS_WITH` , or their negations.
+         */
         operator: enums.quicksight.DataSetStringComparisonFilterOperator;
+        /**
+         * The string value to compare against.
+         */
         value?: outputs.quicksight.DataSetStringFilterValue;
     }
     /**
@@ -80172,22 +82370,49 @@ export declare namespace quicksight {
         staticValues?: string[];
     }
     interface DataSetStringFilterCondition {
+        /**
+         * The name of the string column to filter.
+         */
         columnName?: string;
+        /**
+         * A comparison-based filter condition for the string column.
+         */
         comparisonFilterCondition?: outputs.quicksight.DataSetStringComparisonFilterCondition;
+        /**
+         * A list-based filter condition that includes or excludes values from a specified list.
+         */
         listFilterCondition?: outputs.quicksight.DataSetStringListFilterCondition;
     }
     interface DataSetStringFilterValue {
+        /**
+         * A static string value used for filtering.
+         */
         staticValue?: string;
     }
     interface DataSetStringListFilterCondition {
+        /**
+         * The list operator to use, either `INCLUDE` to match values in the list or `EXCLUDE` to filter out values in the list.
+         */
         operator: enums.quicksight.DataSetStringListFilterOperator;
+        /**
+         * The list of string values to include or exclude in the filter.
+         */
         values?: outputs.quicksight.DataSetStringListFilterValue;
     }
     interface DataSetStringListFilterValue {
+        /**
+         * A list of static string values used for filtering.
+         */
         staticValues?: string[];
     }
     interface DataSetTablePathElement {
+        /**
+         * The unique identifier of the path element.
+         */
         id?: string;
+        /**
+         * The name of the path element.
+         */
         name?: string;
     }
     /**
@@ -80242,32 +82467,86 @@ export declare namespace quicksight {
         untagColumnOperation?: outputs.quicksight.DataSetUntagColumnOperation;
     }
     interface DataSetTransformOperationSource {
+        /**
+         * The mappings between source column identifiers and target column identifiers for this transformation.
+         */
         columnIdMappings?: outputs.quicksight.DataSetColumnIdMapping[];
+        /**
+         * The identifier of the transform operation that provides input data.
+         */
         transformOperationId: string;
     }
     interface DataSetTransformStep {
+        /**
+         * A transform step that groups data and applies aggregation functions to calculate summary values.
+         */
         aggregateStep?: outputs.quicksight.DataSetAggregateOperation;
+        /**
+         * A transform step that combines rows from multiple sources by stacking them vertically.
+         */
         appendStep?: outputs.quicksight.DataSetAppendOperation;
+        /**
+         * A transform step that changes the data types of one or more columns.
+         */
         castColumnTypesStep?: outputs.quicksight.DataSetCastColumnTypesOperation;
         createColumnsStep?: outputs.quicksight.DataSetCreateColumnsOperation;
+        /**
+         * A transform step that applies filter conditions.
+         */
         filtersStep?: outputs.quicksight.DataSetFiltersOperation;
+        /**
+         * A transform step that brings data from a source table.
+         */
         importTableStep?: outputs.quicksight.DataSetImportTableOperation;
+        /**
+         * A transform step that combines data from two sources based on specified join conditions.
+         */
         joinStep?: outputs.quicksight.DataSetJoinOperation;
+        /**
+         * A transform step that converts row values into columns to reshape the data structure.
+         */
         pivotStep?: outputs.quicksight.DataSetPivotOperation;
         projectStep?: outputs.quicksight.DataSetProjectOperation;
+        /**
+         * A transform step that changes the names of one or more columns.
+         */
         renameColumnsStep?: outputs.quicksight.DataSetRenameColumnsOperation;
+        /**
+         * A transform step that converts columns into rows to normalize the data structure.
+         */
         unpivotStep?: outputs.quicksight.DataSetUnpivotOperation;
     }
     interface DataSetUniqueKey {
         columnNames: string[];
     }
     interface DataSetUnpivotOperation {
+        /**
+         * Alias for this operation.
+         */
         alias: string;
+        /**
+         * The list of columns to unpivot from the source data.
+         */
         columnsToUnpivot: outputs.quicksight.DataSetColumnToUnpivot[];
+        /**
+         * The source transform operation that provides input data for unpivoting.
+         */
         source: outputs.quicksight.DataSetTransformOperationSource;
+        /**
+         * A unique identifier for the new column that will contain the unpivoted column names.
+         */
         unpivotedLabelColumnId: string;
+        /**
+         * The name for the new column that will contain the unpivoted column names.
+         */
         unpivotedLabelColumnName: string;
+        /**
+         * A unique identifier for the new column that will contain the unpivoted values.
+         */
         unpivotedValueColumnId: string;
+        /**
+         * The name for the new column that will contain the unpivoted values.
+         */
         unpivotedValueColumnName: string;
     }
     /**
@@ -80322,6 +82601,9 @@ export declare namespace quicksight {
         disableUseAsImportedSource?: boolean;
     }
     interface DataSetValueColumnConfiguration {
+        /**
+         * The aggregation function to apply when multiple values map to the same pivoted cell.
+         */
         aggregationFunction?: outputs.quicksight.DataSetDataPrepAggregationFunction;
     }
     /**
@@ -91209,7 +93491,7 @@ export declare namespace resiliencehub {
          */
         eksSourceName?: string;
         /**
-         * Name of the AWS CloudFormation stack this resource is mapped to when the `mappingType` is `CfnStack` .
+         * Name of the CloudFormation stack this resource is mapped to when the `mappingType` is `CfnStack` .
          */
         logicalStackName?: string;
         /**
@@ -91945,6 +94227,26 @@ export declare namespace route53resolver {
     }
 }
 export declare namespace rtbfabric {
+    interface InboundExternalLinkLinkAttributes {
+        customerProvidedId?: string;
+        responderErrorMasking?: outputs.rtbfabric.InboundExternalLinkResponderErrorMaskingForHttpCode[];
+    }
+    interface InboundExternalLinkLinkLogSettings {
+        applicationLogs: outputs.rtbfabric.InboundExternalLinkLinkLogSettingsApplicationLogsProperties;
+    }
+    interface InboundExternalLinkLinkLogSettingsApplicationLogsProperties {
+        linkApplicationLogSampling: outputs.rtbfabric.InboundExternalLinkLinkLogSettingsApplicationLogsPropertiesLinkApplicationLogSamplingProperties;
+    }
+    interface InboundExternalLinkLinkLogSettingsApplicationLogsPropertiesLinkApplicationLogSamplingProperties {
+        errorLog: number;
+        filterLog: number;
+    }
+    interface InboundExternalLinkResponderErrorMaskingForHttpCode {
+        action: enums.rtbfabric.InboundExternalLinkResponderErrorMaskingForHttpCodeAction;
+        httpCode: string;
+        loggingTypes: enums.rtbfabric.InboundExternalLinkResponderErrorMaskingLoggingType[];
+        responseLoggingPercentage?: number;
+    }
     interface LinkAttributes {
         /**
          * The customer-provided unique identifier of the link.
@@ -91997,6 +94299,26 @@ export declare namespace rtbfabric {
          */
         responseLoggingPercentage?: number;
     }
+    interface OutboundExternalLinkLinkAttributes {
+        customerProvidedId?: string;
+        responderErrorMasking?: outputs.rtbfabric.OutboundExternalLinkResponderErrorMaskingForHttpCode[];
+    }
+    interface OutboundExternalLinkLinkLogSettings {
+        applicationLogs: outputs.rtbfabric.OutboundExternalLinkLinkLogSettingsApplicationLogsProperties;
+    }
+    interface OutboundExternalLinkLinkLogSettingsApplicationLogsProperties {
+        linkApplicationLogSampling: outputs.rtbfabric.OutboundExternalLinkLinkLogSettingsApplicationLogsPropertiesLinkApplicationLogSamplingProperties;
+    }
+    interface OutboundExternalLinkLinkLogSettingsApplicationLogsPropertiesLinkApplicationLogSamplingProperties {
+        errorLog: number;
+        filterLog: number;
+    }
+    interface OutboundExternalLinkResponderErrorMaskingForHttpCode {
+        action: enums.rtbfabric.OutboundExternalLinkResponderErrorMaskingForHttpCodeAction;
+        httpCode: string;
+        loggingTypes: enums.rtbfabric.OutboundExternalLinkResponderErrorMaskingLoggingType[];
+        responseLoggingPercentage?: number;
+    }
     interface ResponderGatewayManagedEndpointConfiguration {
     }
     interface ResponderGatewayTrustStoreConfiguration {
@@ -92144,11 +94466,57 @@ export declare namespace rum {
          *
          * WebVitalsLargestContentfulPaint
          *
+         * WebVitalsInteractionToNextPaint
+         *
          * JsErrorCount
          *
          * HttpErrorCount
          *
          * SessionCount
+         *
+         * PageViewCount
+         *
+         * Http4xxCount
+         *
+         * Http5xxCount
+         *
+         * SessionDuration
+         *
+         * PageViewCountPerSession
+         *
+         * JsErrorCountPerSession
+         *
+         * Http4xxCountPerSession
+         *
+         * Http5xxCountPerSession
+         *
+         * JsErrorCountPerPageView
+         *
+         * Http4xxCountPerPageView
+         *
+         * Http5xxCountPerPageView
+         *
+         * TimeOnPage
+         *
+         * ColdLaunchTime
+         *
+         * WarmLaunchTime
+         *
+         * CrashCount
+         *
+         * ANRCount
+         *
+         * AppHangCount
+         *
+         * ScreenLoadCount
+         *
+         * ScreenLoadTime
+         *
+         * NetworkLatency
+         *
+         * SpanPayloadSize
+         *
+         * LogEventPayloadSize
          */
         name: string;
         /**
@@ -92305,6 +94673,14 @@ export declare namespace s3 {
          */
         tagFilters?: outputs.s3.BucketTagFilter[];
     }
+    interface BucketBlockedEncryptionTypes {
+        /**
+         * The object encryption type that you want to block or unblock for an Amazon S3 general purpose bucket.
+         *
+         * > Currently, this parameter only supports blocking or unblocking server side encryption with customer-provided keys (SSE-C). For more information about SSE-C, see [Using server-side encryption with customer-provided keys (SSE-C)](https://docs.aws.amazon.com/AmazonS3/latest/userguide/ServerSideEncryptionCustomerKeys.html) .
+         */
+        encryptionType?: enums.s3.BucketBlockedEncryptionTypeListItem[];
+    }
     /**
      * Describes the cross-origin access configuration for objects in an Amazon S3 bucket. For more information, see [Enabling Cross-Origin Resource Sharing](https://docs.aws.amazon.com/AmazonS3/latest/dev/cors.html) in the *Amazon S3 User Guide*.
      */
@@ -93231,6 +95607,12 @@ export declare namespace s3 {
      *   +  *Directory buckets* - When you specify an [customer managed key](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#customer-cmk) for encryption in your directory bucket, only use the key ID or key ARN. The key alias format of the KMS key isn't supported.
      */
     interface BucketServerSideEncryptionRule {
+        /**
+         * A bucket-level setting for Amazon S3 general purpose buckets used to prevent the upload of new objects encrypted with the specified server-side encryption type. For example, blocking an encryption type will block `PutObject` , `CopyObject` , `PostObject` , multipart upload, and replication requests to the bucket for objects with the specified encryption type. However, you can continue to read and list any pre-existing objects already encrypted with the specified encryption type. For more information, see [Blocking or unblocking SSE-C for a general purpose bucket](https://docs.aws.amazon.com/AmazonS3/latest/userguide/blocking-unblocking-s3-c-encryption-gpb.html) .
+         *
+         * > Currently, this parameter only supports blocking or unblocking server-side encryption with customer-provided keys (SSE-C). For more information about SSE-C, see [Using server-side encryption with customer-provided keys (SSE-C)](https://docs.aws.amazon.com/AmazonS3/latest/userguide/ServerSideEncryptionCustomerKeys.html) .
+         */
+        blockedEncryptionTypes?: outputs.s3.BucketBlockedEncryptionTypes;
         /**
          * Specifies whether Amazon S3 should use an S3 Bucket Key with server-side encryption using KMS (SSE-KMS) for new objects in the bucket. Existing objects are not affected. Setting the ``BucketKeyEnabled`` element to ``true`` causes Amazon S3 to use an S3 Bucket Key. By default, S3 Bucket Key is not enabled.
          *  For more information, see [Amazon S3 Bucket Keys](https://docs.aws.amazon.com/AmazonS3/latest/dev/bucket-key.html) in the *Amazon S3 User Guide*.
@@ -93430,6 +95812,7 @@ export declare namespace s3 {
          * This property contains the details of account-level advanced data protection metrics for S3 Storage Lens.
          */
         advancedDataProtectionMetrics?: outputs.s3.StorageLensAdvancedDataProtectionMetrics;
+        advancedPerformanceMetrics?: outputs.s3.StorageLensAdvancedPerformanceMetrics;
         /**
          * This property contains the details of the account-level bucket-level configurations for Amazon S3 Storage Lens. To enable bucket-level configurations, make sure to also set the same metrics at the account level.
          */
@@ -93470,6 +95853,15 @@ export declare namespace s3 {
          */
         isEnabled?: boolean;
     }
+    /**
+     * Advanced Performance Metrics.
+     */
+    interface StorageLensAdvancedPerformanceMetrics {
+        /**
+         * Specifies whether the Advanced Performance Metrics is enabled or disabled.
+         */
+        isEnabled?: boolean;
+    }
     /**
      * The AWS Organizations ARN to use in the Amazon S3 Storage Lens configuration.
      */
@@ -93495,6 +95887,7 @@ export declare namespace s3 {
          * A property for bucket-level advanced data protection metrics for S3 Storage Lens.
          */
         advancedDataProtectionMetrics?: outputs.s3.StorageLensAdvancedDataProtectionMetrics;
+        advancedPerformanceMetrics?: outputs.s3.StorageLensAdvancedPerformanceMetrics;
         /**
          * A property for bucket-level detailed status code metrics for S3 Storage Lens.
          */
@@ -93546,6 +95939,7 @@ export declare namespace s3 {
          * This property contains the details of the bucket and or Regions excluded for Amazon S3 Storage Lens configuration.
          */
         exclude?: outputs.s3.StorageLensBucketsAndRegions;
+        expandedPrefixesDataExport?: outputs.s3.StorageLensExpandedPrefixesDataExport;
         /**
          * This property contains the details of the ID of the S3 Storage Lens configuration.
          */
@@ -93558,6 +95952,10 @@ export declare namespace s3 {
          * Specifies whether the Amazon S3 Storage Lens configuration is enabled or disabled.
          */
         isEnabled: boolean;
+        /**
+         * The delimiter to divide S3 key into hierarchy of prefixes.
+         */
+        prefixDelimiter?: string;
         /**
          * The ARN for the Amazon S3 Storage Lens configuration.
          */
@@ -93590,6 +95988,12 @@ export declare namespace s3 {
      */
     interface StorageLensEncryption {
     }
+    /**
+     * Expanded Prefixes Data Export.
+     */
+    interface StorageLensExpandedPrefixesDataExport {
+        s3BucketDestination?: outputs.s3.StorageLensS3BucketDestination;
+    }
     /**
      * The Storage Lens group will include objects that match all of the specified filter values.
      */
@@ -94129,6 +96533,15 @@ export declare namespace s3tables {
          */
         sseAlgorithm?: enums.s3tables.TableBucketEncryptionConfigurationSseAlgorithm;
     }
+    /**
+     * Settings governing the Metric configuration for the table bucket.
+     */
+    interface TableBucketMetricsConfiguration {
+        /**
+         * Indicates whether Metrics are enabled.
+         */
+        status?: enums.s3tables.TableBucketMetricsConfigurationStatus;
+    }
     /**
      * A policy document containing permissions to add to the specified table bucket. In IAM, you must provide policy documents in JSON format. However, in CloudFormation you can provide the policy in JSON or YAML format because CloudFormation converts YAML to JSON before submitting it to IAM.
      */
@@ -94377,6 +96790,13 @@ export declare namespace sagemaker {
          */
         mode: enums.sagemaker.ClusterAutoScalingConfigMode;
     }
+    /**
+     * Specifies the capacity requirements configuration for an instance group
+     */
+    interface ClusterCapacityRequirements {
+        onDemand?: outputs.sagemaker.ClusterOnDemandOptions;
+        spot?: outputs.sagemaker.ClusterSpotOptions;
+    }
     /**
      * The configuration of the size measurements of the AMI update. Using this configuration, you can specify whether SageMaker should update your instance group by an amount or percentage of instances.
      */
@@ -94424,6 +96844,7 @@ export declare namespace sagemaker {
      * Details of an instance group in a SageMaker HyperPod cluster.
      */
     interface ClusterInstanceGroup {
+        capacityRequirements?: outputs.sagemaker.ClusterCapacityRequirements;
         /**
          * The number of instances that are currently in the instance group of a SageMaker HyperPod cluster.
          */
@@ -94437,6 +96858,7 @@ export declare namespace sagemaker {
         instanceGroupName: string;
         instanceStorageConfigs?: outputs.sagemaker.ClusterInstanceStorageConfig[];
         instanceType: string;
+        kubernetesConfig?: outputs.sagemaker.ClusterKubernetesConfig;
         lifeCycleConfig: outputs.sagemaker.ClusterLifeCycleConfig;
         onStartDeepHealthChecks?: enums.sagemaker.ClusterDeepHealthCheckType[];
         overrideVpcConfig?: outputs.sagemaker.ClusterVpcConfig;
@@ -94455,6 +96877,32 @@ export declare namespace sagemaker {
      */
     interface ClusterInstanceStorageConfig {
     }
+    /**
+     * Kubernetes configuration for cluster nodes including labels and taints.
+     */
+    interface ClusterKubernetesConfig {
+        labels?: {
+            [key: string]: string;
+        };
+        taints?: outputs.sagemaker.ClusterKubernetesTaint[];
+    }
+    /**
+     * A Kubernetes taint to apply to cluster nodes.
+     */
+    interface ClusterKubernetesTaint {
+        /**
+         * The effect of the taint.
+         */
+        effect: enums.sagemaker.ClusterKubernetesTaintEffect;
+        /**
+         * The key of the taint.
+         */
+        key: string;
+        /**
+         * The value of the taint.
+         */
+        value?: string;
+    }
     /**
      * The lifecycle configuration for a SageMaker HyperPod cluster.
      */
@@ -94468,6 +96916,11 @@ export declare namespace sagemaker {
          */
         sourceS3Uri: string;
     }
+    /**
+     * Options for OnDemand capacity
+     */
+    interface ClusterOnDemandOptions {
+    }
     /**
      * Specifies parameter(s) specific to the orchestrator, e.g. specify the EKS cluster.
      */
@@ -94531,6 +96984,11 @@ export declare namespace sagemaker {
          */
         scheduleExpression: string;
     }
+    /**
+     * Options for Spot capacity
+     */
+    interface ClusterSpotOptions {
+    }
     /**
      * Configuration for tiered storage in the SageMaker HyperPod cluster.
      */
@@ -99399,6 +101857,19 @@ export declare namespace scheduler {
     }
 }
 export declare namespace secretsmanager {
+    /**
+     * The metadata needed to successfully rotate a managed external secret. Each metadata item is a key and value pair of strings in a JSON text string.
+     */
+    interface RotationScheduleExternalSecretRotationMetadataItem {
+        /**
+         * The key name of the metadata item. You can specify a value that's 1 to 256 characters in length.
+         */
+        key: string;
+        /**
+         * The value for the metadata item. You can specify a value that's 1 to 2048 characters in length.
+         */
+        value: string;
+    }
     interface RotationScheduleHostedRotationLambda {
         /**
          * A string of the characters that you don't want in the password.
@@ -99780,13 +102251,13 @@ export declare namespace securityhub {
         /**
          * A timestamp that provides the end date for the date filter.
          *
-         * For more information about the validation and formatting of timestamp fields in AWS Security Hub , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) .
+         * For more information about the validation and formatting of timestamp fields in Security Hub , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) .
          */
         end?: string;
         /**
          * A timestamp that provides the start date for the date filter.
          *
-         * For more information about the validation and formatting of timestamp fields in AWS Security Hub , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) .
+         * For more information about the validation and formatting of timestamp fields in Security Hub , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) .
          */
         start?: string;
     }
@@ -100744,13 +103215,13 @@ export declare namespace securityhub {
         /**
          * A timestamp that provides the end date for the date filter.
          *
-         * For more information about the validation and formatting of timestamp fields in AWS Security Hub , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) .
+         * For more information about the validation and formatting of timestamp fields in Security Hub , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) .
          */
         end?: string;
         /**
          * A timestamp that provides the start date for the date filter.
          *
-         * For more information about the validation and formatting of timestamp fields in AWS Security Hub , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) .
+         * For more information about the validation and formatting of timestamp fields in Security Hub , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) .
          */
         start?: string;
     }
@@ -100853,7 +103324,7 @@ export declare namespace securityhub {
          * - `ResourceType NOT_EQUALS AwsIamPolicy`
          * - `ResourceType NOT_EQUALS AwsEc2NetworkInterface`
          *
-         * `CONTAINS` and `NOT_CONTAINS` operators can be used only with automation rules V1. `CONTAINS_WORD` operator is only supported in `GetFindingsV2` , `GetFindingStatisticsV2` , `GetResourcesV2` , and `GetResourceStatisticsV2` APIs. For more information, see [Automation rules](https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules.html) in the *AWS Security Hub User Guide* .
+         * `CONTAINS` and `NOT_CONTAINS` operators can be used only with automation rules V1. `CONTAINS_WORD` operator is only supported in `GetFindingsV2` , `GetFindingStatisticsV2` , `GetResourcesV2` , and `GetResourceStatisticsV2` APIs. For more information, see [Automation rules](https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules.html) in the *Security Hub User Guide* .
          */
         comparison: enums.securityhub.InsightStringFilterComparison;
         /**
@@ -100867,7 +103338,7 @@ export declare namespace securityhub {
          */
         value?: outputs.securityhub.SecurityControlParameterValue;
         /**
-         * Identifies whether a control parameter uses a custom user-defined value or subscribes to the default AWS Security Hub behavior.
+         * Identifies whether a control parameter uses a custom user-defined value or subscribes to the default Security Hub behavior.
          *
          * When `ValueType` is set equal to `DEFAULT` , the default behavior can be a specific Security Hub default value, or the default behavior can be to ignore a specific parameter. When `ValueType` is set equal to `DEFAULT` , Security Hub ignores user-provided input for the `Value` field.
          *
@@ -101064,7 +103535,7 @@ export declare namespace securitylake {
 export declare namespace servicecatalog {
     interface CloudFormationProductCodeStarParameters {
         /**
-         * The absolute path where the artifact resides within the repo and branch, formatted as "folder/file.json".
+         * The absolute path wehre the artifact resides within the repo and branch, formatted as "folder/file.json."
          */
         artifactPath: string;
         /**
@@ -101076,10 +103547,16 @@ export declare namespace servicecatalog {
          */
         connectionArn: string;
         /**
-         * The specific repository where the product's artifact-to-be-synced resides, formatted as "Account/Repo."
+         * The specific repository where the product’s artifact-to-be-synced resides, formatted as "Account/Repo."
          */
         repository: string;
     }
+    interface CloudFormationProductConnectionParameters {
+        /**
+         * Provides `ConnectionType` details.
+         */
+        codeStar?: outputs.servicecatalog.CloudFormationProductCodeStarParameters;
+    }
     interface CloudFormationProductProvisioningArtifactProperties {
         /**
          * The description of the provisioning artifact, including how it differs from the previous provisioning artifact.
@@ -101090,55 +103567,39 @@ export declare namespace servicecatalog {
          */
         disableTemplateValidation?: boolean;
         /**
-         * Specify the template source with one of the following options, but not both. Keys accepted: [ LoadTemplateFromURL, ImportFromPhysicalId ] The URL of the AWS CloudFormation template in Amazon S3 in JSON format. Specify the URL in JSON format as follows:
+         * Specify the template source with one of the following options, but not both. Keys accepted: [ `LoadTemplateFromURL` , `ImportFromPhysicalId` ]
          *
-         * "LoadTemplateFromURL": "https://s3.amazonaws.com/cf-templates-ozkq9d3hgiq2-us-east-1/..."
+         * The URL of the AWS CloudFormation template in Amazon S3 in JSON format. Specify the URL in JSON format as follows:
          *
-         * ImportFromPhysicalId: The physical id of the resource that contains the template. Currently only supports AWS CloudFormation stack arn. Specify the physical id in JSON format as follows: ImportFromPhysicalId: "arn:aws:cloudformation:[us-east-1]:[accountId]:stack/[StackName]/[resourceId]
+         * `"LoadTemplateFromURL": "https://s3.amazonaws.com/cf-templates-ozkq9d3hgiq2-us-east-1/..."`
+         *
+         * `ImportFromPhysicalId` : The physical id of the resource that contains the template. Currently only supports AWS CloudFormation stack arn. Specify the physical id in JSON format as follows: `ImportFromPhysicalId: "arn:aws:cloudformation:[us-east-1]:[accountId]:stack/[StackName]/[resourceId]`
          */
-        info: outputs.servicecatalog.CloudFormationProductProvisioningArtifactPropertiesInfoProperties;
+        info: any;
         /**
          * The name of the provisioning artifact (for example, v1 v2beta). No spaces are allowed.
          */
         name?: string;
         /**
-         * The type of provisioning artifact. Valid values are CLOUD_FORMATION_TEMPLATE, TERRAFORM_OPEN_SOURCE, TERRAFORM_CLOUD, EXTERNAL
-         */
-        type?: enums.servicecatalog.CloudFormationProductProvisioningArtifactPropertiesType;
-    }
-    /**
-     * Specify the template source with one of the following options, but not both. Keys accepted: [ LoadTemplateFromURL, ImportFromPhysicalId ] The URL of the AWS CloudFormation template in Amazon S3 in JSON format. Specify the URL in JSON format as follows:
-     *
-     * "LoadTemplateFromURL": "https://s3.amazonaws.com/cf-templates-ozkq9d3hgiq2-us-east-1/..."
-     *
-     * ImportFromPhysicalId: The physical id of the resource that contains the template. Currently only supports AWS CloudFormation stack arn. Specify the physical id in JSON format as follows: ImportFromPhysicalId: "arn:aws:cloudformation:[us-east-1]:[accountId]:stack/[StackName]/[resourceId]
-     */
-    interface CloudFormationProductProvisioningArtifactPropertiesInfoProperties {
-        /**
-         * The physical id of the resource that contains the template. Currently only supports AWS CloudFormation stack arn
-         */
-        importFromPhysicalId?: string;
-        /**
-         * The URL of the AWS CloudFormation template in Amazon S3 in JSON format.
+         * The type of provisioning artifact.
+         *
+         * - `CLOUD_FORMATION_TEMPLATE` - AWS CloudFormation template
+         * - `TERRAFORM_OPEN_SOURCE` - Terraform Open Source configuration file
+         * - `TERRAFORM_CLOUD` - Terraform Cloud configuration file
+         * - `EXTERNAL` - External configuration file
          */
-        loadTemplateFromUrl?: string;
+        type?: string;
     }
     interface CloudFormationProductSourceConnection {
         /**
-         * The connection details based on the connection Type.
+         * The connection details based on the connection `Type` .
          */
-        connectionParameters: outputs.servicecatalog.CloudFormationProductSourceConnectionConnectionParametersProperties;
+        connectionParameters: outputs.servicecatalog.CloudFormationProductConnectionParameters;
         /**
-         * The only supported SourceConnection type is Codestar.
+         * The only supported `SourceConnection` type is Codestar.
          */
         type: string;
     }
-    /**
-     * The connection details based on the connection Type.
-     */
-    interface CloudFormationProductSourceConnectionConnectionParametersProperties {
-        codeStar?: outputs.servicecatalog.CloudFormationProductCodeStarParameters;
-    }
     interface CloudFormationProvisionedProductProvisioningParameter {
         /**
          * The parameter key.
@@ -102512,7 +104973,7 @@ export declare namespace ssmguiconnect {
      */
     interface ConnectionRecordingPreferencesProperties {
         /**
-         * The ARN of a AWS KMS key that is used to encrypt data while it is being processed by the service. This key must exist in the same AWS Region as the node you start an RDP connection to.
+         * The ARN of a AWS  key that is used to encrypt data while it is being processed by the service. This key must exist in the same AWS Region as the node you start an RDP connection to.
          */
         kmsKeyArn: string;
         /**
@@ -102568,7 +105029,7 @@ export declare namespace ssmincidents {
      */
     interface ResponsePlanChatChannel {
         /**
-         * The Amazon SNS targets that  uses to notify the chat channel of updates to an incident. You can also make updates to the incident through the chat channel by using the Amazon SNS topics
+         * The Amazon  targets that  uses to notify the chat channel of updates to an incident. You can also make updates to the incident through the chat channel by using the Amazon  topics
          */
         chatbotSns?: string[];
     }
@@ -102634,7 +105095,7 @@ export declare namespace ssmincidents {
      */
     interface ResponsePlanNotificationTargetItem {
         /**
-         * The Amazon Resource Name (ARN) of the Amazon SNS topic.
+         * The Amazon Resource Name (ARN) of the Amazon  topic.
          */
         snsTopicArn?: string;
     }
@@ -102830,7 +105291,7 @@ export declare namespace ssmquicksetup {
          * - Description: (Required) A comma separated list of AWS Regions you want to deploy the configuration to.
          * - **DevOps Guru (Type: AWS QuickSetupType-DevOpsGuru)** - - `AnalyseAllResources`
          *
-         * - Description: (Optional) A boolean value that determines whether DevOps Guru analyzes all AWS CloudFormation stacks in the account. The default value is " `false` ".
+         * - Description: (Optional) A boolean value that determines whether DevOps Guru analyzes all CloudFormation stacks in the account. The default value is " `false` ".
          * - `EnableSnsNotifications`
          *
          * - Description: (Optional) A boolean value that determines whether DevOps Guru sends notifications when an insight is created. The default value is " `true` ".
@@ -103148,7 +105609,7 @@ export declare namespace stepfunctions {
          */
         kmsDataKeyReusePeriodSeconds?: number;
         /**
-         * An alias, alias ARN, key ID, or key ARN of a symmetric encryption AWS KMS key to encrypt data. To specify a AWS KMS key in a different AWS account, you must use the key ARN or alias ARN.
+         * An alias, alias ARN, key ID, or key ARN of a symmetric encryption AWS  key to encrypt data. To specify a AWS  key in a different AWS account, you must use the key ARN or alias ARN.
          */
         kmsKeyId?: string;
         /**
@@ -103207,7 +105668,7 @@ export declare namespace stepfunctions {
          */
         kmsDataKeyReusePeriodSeconds?: number;
         /**
-         * An alias, alias ARN, key ID, or key ARN of a symmetric encryption AWS KMS key to encrypt data. To specify a AWS KMS key in a different AWS account, you must use the key ARN or alias ARN.
+         * An alias, alias ARN, key ID, or key ARN of a symmetric encryption AWS  key to encrypt data. To specify a AWS  key in a different AWS account, you must use the key ARN or alias ARN.
          */
         kmsKeyId?: string;
         /**
@@ -103217,7 +105678,7 @@ export declare namespace stepfunctions {
     }
     interface StateMachineLogDestination {
         /**
-         * An object describing a CloudWatch log group. For more information, see [AWS::Logs::LogGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-logs-loggroup.html) in the AWS CloudFormation User Guide.
+         * An object describing a CloudWatch log group. For more information, see [AWS::Logs::LogGroup](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-logs-loggroup.html) in the CloudFormation User Guide.
          */
         cloudWatchLogsLogGroup?: outputs.stepfunctions.StateMachineCloudWatchLogsLogGroup;
     }
@@ -104487,6 +106948,16 @@ export declare namespace vpclattice {
          */
         enabled: boolean;
     }
+    interface ServiceNetworkVpcAssociationDnsOptions {
+        /**
+         * The preference for which private domains have a private hosted zone created for and associated with the specified VPC. Only supported when private DNS is enabled and when the VPC endpoint type is ServiceNetwork or Resource.
+         */
+        privateDnsPreference?: enums.vpclattice.ServiceNetworkVpcAssociationDnsOptionsPrivateDnsPreference;
+        /**
+         * Indicates which of the private domains to create private hosted zones for and associate with the specified VPC. Only supported when private DNS is enabled and the private DNS preference is `VERIFIED_DOMAINS_AND_SPECIFIED_DOMAINS` or `SPECIFIED_DOMAINS_ONLY` .
+         */
+        privateDnsSpecifiedDomains?: string[];
+    }
     interface TargetGroupConfig {
         /**
          * The health check configuration. Not supported if the target group type is `LAMBDA` or `ALB` .
@@ -104575,6 +107046,16 @@ export declare namespace vpclattice {
          */
         port?: number;
     }
+    interface TxtMethodConfigProperties {
+        /**
+         * The name of the TXT record that must be created for domain verification.
+         */
+        name?: string;
+        /**
+         * The value that must be added to the TXT record for domain verification.
+         */
+        value?: string;
+    }
 }
 export declare namespace wafv2 {
     interface LoggingConfigurationCondition {
@@ -107759,6 +110240,15 @@ export declare namespace wisdom {
     interface AiAgentAiAgentConfiguration2Properties {
         selfServiceAiAgentConfiguration: outputs.wisdom.AiAgentSelfServiceAiAgentConfiguration;
     }
+    interface AiAgentAiAgentConfiguration3Properties {
+        emailResponseAiAgentConfiguration: outputs.wisdom.AiAgentEmailResponseAiAgentConfiguration;
+    }
+    interface AiAgentAiAgentConfiguration4Properties {
+        emailOverviewAiAgentConfiguration: outputs.wisdom.AiAgentEmailOverviewAiAgentConfiguration;
+    }
+    interface AiAgentAiAgentConfiguration5Properties {
+        emailGenerativeAnswerAiAgentConfiguration: outputs.wisdom.AiAgentEmailGenerativeAnswerAiAgentConfiguration;
+    }
     interface AiAgentAnswerRecommendationAiAgentConfiguration {
         answerGenerationAiGuardrailId?: string;
         answerGenerationAiPromptId?: string;
@@ -107775,6 +110265,22 @@ export declare namespace wisdom {
     interface AiAgentAssociationConfigurationDataProperties {
         knowledgeBaseAssociationConfigurationData: outputs.wisdom.AiAgentKnowledgeBaseAssociationConfigurationData;
     }
+    interface AiAgentEmailGenerativeAnswerAiAgentConfiguration {
+        associationConfigurations?: outputs.wisdom.AiAgentAssociationConfiguration[];
+        emailGenerativeAnswerAiPromptId?: string;
+        emailQueryReformulationAiPromptId?: string;
+        locale?: string;
+    }
+    interface AiAgentEmailOverviewAiAgentConfiguration {
+        emailOverviewAiPromptId?: string;
+        locale?: string;
+    }
+    interface AiAgentEmailResponseAiAgentConfiguration {
+        associationConfigurations?: outputs.wisdom.AiAgentAssociationConfiguration[];
+        emailQueryReformulationAiPromptId?: string;
+        emailResponseAiPromptId?: string;
+        locale?: string;
+    }
     interface AiAgentKnowledgeBaseAssociationConfigurationData {
         contentTagFilter?: outputs.wisdom.AiAgentTagFilter0Properties | outputs.wisdom.AiAgentTagFilter1Properties | outputs.wisdom.AiAgentTagFilter2Properties;
         maxResults?: number;
@@ -108798,6 +111304,20 @@ export declare namespace workspacesthinclient {
     }
 }
 export declare namespace workspacesweb {
+    interface BrowserSettingsWebContentFilteringPolicy {
+        /**
+         * URLs and domains that are always accessible to end users.
+         */
+        allowedUrls?: string[];
+        /**
+         * Categories of websites that are blocked on the end user's browsers.
+         */
+        blockedCategories?: enums.workspacesweb.BrowserSettingsCategory[];
+        /**
+         * URLs and domains that end users cannot access.
+         */
+        blockedUrls?: string[];
+    }
     interface DataProtectionSettingsCustomPattern {
         /**
          * The keyword regex for the customer pattern. After there is a match to the pattern regex, the keyword regex is used to search within the proximity of the match. If there is a keyword match, then the match is confirmed. If no keyword regex is provided, the pattern regex match will automatically be confirmed. The format must follow JavaScript regex format. The pattern must be enclosed between slashes, and can have flags behind the second slash. For example, "/ab+c/gi"