@pulumi/aws-native 1.4.0 → 1.5.0-alpha.1730206131

package/types/output.d.ts

@@ -5276,6 +5276,116 @@ export declare namespace appsync {
          */
         lambdaConflictHandlerConfig?: outputs.appsync.FunctionConfigurationLambdaConflictHandlerConfig;
     }
+    interface GraphQlApiAdditionalAuthenticationProvider {
+        /**
+         * The authentication type for API key, AWS Identity and Access Management, OIDC, Amazon Cognito user pools, or AWS Lambda.
+         */
+        authenticationType: string;
+        /**
+         * Configuration for AWS Lambda function authorization.
+         */
+        lambdaAuthorizerConfig?: outputs.appsync.GraphQlApiLambdaAuthorizerConfig;
+        /**
+         * The OIDC configuration.
+         */
+        openIdConnectConfig?: outputs.appsync.GraphQlApiOpenIdConnectConfig;
+        /**
+         * The Amazon Cognito user pool configuration.
+         */
+        userPoolConfig?: outputs.appsync.GraphQlApiCognitoUserPoolConfig;
+    }
+    interface GraphQlApiCognitoUserPoolConfig {
+        /**
+         * A regular expression for validating the incoming Amazon Cognito user pool app client ID.
+         */
+        appIdClientRegex?: string;
+        /**
+         * The AWS Region in which the user pool was created.
+         */
+        awsRegion?: string;
+        /**
+         * The user pool ID
+         */
+        userPoolId?: string;
+    }
+    interface GraphQlApiEnhancedMetricsConfig {
+        /**
+         * Controls how data source metrics will be emitted to CloudWatch. Data source metrics include:
+         */
+        dataSourceLevelMetricsBehavior: string;
+        /**
+         * Controls how operation metrics will be emitted to CloudWatch. Operation metrics include:
+         */
+        operationLevelMetricsConfig: string;
+        /**
+         * Controls how resolver metrics will be emitted to CloudWatch. Resolver metrics include:
+         */
+        resolverLevelMetricsBehavior: string;
+    }
+    interface GraphQlApiLambdaAuthorizerConfig {
+        /**
+         * The number of seconds a response should be cached for.
+         */
+        authorizerResultTtlInSeconds?: number;
+        /**
+         * The ARN of the Lambda function to be called for authorization.
+         */
+        authorizerUri?: string;
+        /**
+         * A regular expression for validation of tokens before the Lambda function is called.
+         */
+        identityValidationExpression?: string;
+    }
+    interface GraphQlApiLogConfig {
+        /**
+         * The service role that AWS AppSync will assume to publish to Amazon CloudWatch Logs in your account.
+         */
+        cloudWatchLogsRoleArn?: string;
+        /**
+         * Set to TRUE to exclude sections that contain information such as headers, context, and evaluated mapping templates, regardless of logging level.
+         */
+        excludeVerboseContent?: boolean;
+        /**
+         * The field logging level. Values can be NONE, ERROR, INFO, DEBUG, or ALL.
+         */
+        fieldLogLevel?: string;
+    }
+    interface GraphQlApiOpenIdConnectConfig {
+        /**
+         * The number of milliseconds that a token is valid after being authenticated.
+         */
+        authTtl?: number;
+        /**
+         * The client identifier of the Relying party at the OpenID identity provider.
+         */
+        clientId?: string;
+        /**
+         * The number of milliseconds that a token is valid after it's issued to a user.
+         */
+        iatTtl?: number;
+        /**
+         * The issuer for the OIDC configuration.
+         */
+        issuer?: string;
+    }
+    interface GraphQlApiUserPoolConfig {
+        /**
+         * A regular expression for validating the incoming Amazon Cognito user pool app client ID.
+         */
+        appIdClientRegex?: string;
+        /**
+         * The AWS Region in which the user pool was created.
+         */
+        awsRegion?: string;
+        /**
+         * The action that you want your GraphQL API to take when a request that uses Amazon Cognito user pool authentication doesn't match the Amazon Cognito user pool configuration.
+         */
+        defaultAction?: string;
+        /**
+         * The user pool ID.
+         */
+        userPoolId?: string;
+    }
     /**
      * Describes a runtime used by an APSYlong resolver or APSYlong function. Specifies the name and version of the runtime to use. Note that if a runtime is specified, code must also be specified.
      */
@@ -5790,6 +5900,9 @@ export declare namespace autoscaling {
          */
         min?: number;
     }
+    interface AutoScalingGroupAvailabilityZoneDistribution {
+        capacityDistributionStrategy?: enums.autoscaling.AutoScalingGroupAvailabilityZoneDistributionCapacityDistributionStrategy;
+    }
     /**
      * ``BaselineEbsBandwidthMbpsRequest`` is a property of the ``InstanceRequirements`` property of the [AWS::AutoScaling::AutoScalingGroup LaunchTemplateOverrides](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-autoscaling-autoscalinggroup-launchtemplateoverrides.html) property type that describes the minimum and maximum baseline bandwidth performance for an instance type, in Mbps.
      */
@@ -6315,8 +6428,31 @@ export declare namespace autoscaling {
          */
         min?: number;
     }
+    /**
+     * Identifying information for a traffic source.
+     */
     interface AutoScalingGroupTrafficSourceIdentifier {
+        /**
+         * Identifies the traffic source.
+         *  For Application Load Balancers, Gateway Load Balancers, Network Load Balancers, and VPC Lattice, this will be the Amazon Resource Name (ARN) for a target group in this account and Region. For Classic Load Balancers, this will be the name of the Classic Load Balancer in this account and Region.
+         *  For example:
+         *   +  Application Load Balancer ARN: ``arn:aws:elasticloadbalancing:us-west-2:123456789012:targetgroup/my-targets/1234567890123456``
+         *   +  Classic Load Balancer name: ``my-classic-load-balancer``
+         *   +  VPC Lattice ARN: ``arn:aws:vpc-lattice:us-west-2:123456789012:targetgroup/tg-1234567890123456``
+         *
+         *  To get the ARN of a target group for a Application Load Balancer, Gateway Load Balancer, or Network Load Balancer, or the name of a Classic Load Balancer, use the Elastic Load Balancing [DescribeTargetGroups](https://docs.aws.amazon.com/elasticloadbalancing/latest/APIReference/API_DescribeTargetGroups.html) and [DescribeLoadBalancers](https://docs.aws.amazon.com/elasticloadbalancing/latest/APIReference/API_DescribeLoadBalancers.html) API operations.
+         *  To get the ARN of a target group for VPC Lattice, use the VPC Lattice [GetTargetGroup](https://docs.aws.amazon.com/vpc-lattice/latest/APIReference/API_GetTargetGroup.html) API operation.
+         */
         identifier: string;
+        /**
+         * Provides additional context for the value of ``Identifier``.
+         *  The following lists the valid values:
+         *   +   ``elb`` if ``Identifier`` is the name of a Classic Load Balancer.
+         *   +   ``elbv2`` if ``Identifier`` is the ARN of an Application Load Balancer, Gateway Load Balancer, or Network Load Balancer target group.
+         *   +   ``vpc-lattice`` if ``Identifier`` is the ARN of a VPC Lattice target group.
+         *
+         *  Required if the identifier is the name of a Classic Load Balancer.
+         */
         type: string;
     }
     /**
@@ -7134,7 +7270,13 @@ export declare namespace backup {
         value?: string;
     }
     interface LogicallyAirGappedBackupVaultNotificationObjectType {
+        /**
+         * An array of events that indicate the status of jobs to back up resources to the backup vault.
+         */
         backupVaultEvents: string[];
+        /**
+         * The Amazon Resource Name (ARN) that specifies the topic for a backup vault’s events; for example, `arn:aws:sns:us-west-2:111122223333:MyVaultTopic` .
+         */
         snsTopicArn: string;
     }
     /**
@@ -9289,6 +9431,19 @@ export declare namespace bedrock {
          */
         nodes?: outputs.bedrock.FlowNode[];
     }
+    /**
+     * Configuration for a guardrail
+     */
+    interface FlowGuardrailConfiguration {
+        /**
+         * Identifier for the guardrail, could be the id or the arn
+         */
+        guardrailIdentifier?: string;
+        /**
+         * Version of the guardrail
+         */
+        guardrailVersion?: string;
+    }
     /**
      * Input flow node configuration
      */
@@ -9303,12 +9458,13 @@ export declare namespace bedrock {
      * Knowledge base flow node configuration
      */
     interface FlowKnowledgeBaseFlowNodeConfiguration {
+        guardrailConfiguration?: outputs.bedrock.FlowGuardrailConfiguration;
         /**
          * Identifier of the KnowledgeBase
          */
         knowledgeBaseId: string;
         /**
-         * ARN or name of a Bedrock model.
+         * ARN or Id of a Bedrock Foundational Model or Inference Profile, or the ARN of a imported model, or a provisioned throughput ARN for custom models.
          */
         modelId?: string;
     }
@@ -9470,6 +9626,7 @@ export declare namespace bedrock {
      * Prompt flow node configuration
      */
     interface FlowPromptFlowNodeConfiguration {
+        guardrailConfiguration?: outputs.bedrock.FlowGuardrailConfiguration;
         sourceConfiguration: outputs.bedrock.FlowPromptFlowNodeSourceConfiguration0Properties | outputs.bedrock.FlowPromptFlowNodeSourceConfiguration1Properties;
     }
     /**
@@ -9478,7 +9635,7 @@ export declare namespace bedrock {
     interface FlowPromptFlowNodeInlineConfiguration {
         inferenceConfiguration?: outputs.bedrock.FlowPromptInferenceConfigurationProperties;
         /**
-         * ARN or name of a Bedrock model.
+         * ARN or Id of a Bedrock Foundational Model or Inference Profile, or the ARN of a imported model, or a provisioned throughput ARN for custom models.
          */
         modelId: string;
         templateConfiguration: outputs.bedrock.FlowPromptTemplateConfigurationProperties;
@@ -9536,10 +9693,6 @@ export declare namespace bedrock {
          * Controls randomness, higher values increase diversity
          */
         temperature?: number;
-        /**
-         * Sample from the k most likely next tokens
-         */
-        topK?: number;
         /**
          * Cumulative probability cutoff for token selection
          */
@@ -9867,6 +10020,19 @@ export declare namespace bedrock {
          */
         type: enums.bedrock.FlowVersionFlowNodeIoDataType;
     }
+    /**
+     * Configuration for a guardrail
+     */
+    interface FlowVersionGuardrailConfiguration {
+        /**
+         * Identifier for the guardrail, could be the id or the arn
+         */
+        guardrailIdentifier?: string;
+        /**
+         * Version of the guardrail
+         */
+        guardrailVersion?: string;
+    }
     /**
      * Input flow node configuration
      */
@@ -9881,12 +10047,13 @@ export declare namespace bedrock {
      * Knowledge base flow node configuration
      */
     interface FlowVersionKnowledgeBaseFlowNodeConfiguration {
+        guardrailConfiguration?: outputs.bedrock.FlowVersionGuardrailConfiguration;
         /**
          * Identifier of the KnowledgeBase
          */
         knowledgeBaseId: string;
         /**
-         * ARN or name of a Bedrock model.
+         * ARN or Id of a Bedrock Foundational Model or Inference Profile, or the ARN of a imported model, or a provisioned throughput ARN for custom models.
          */
         modelId?: string;
     }
@@ -9921,6 +10088,7 @@ export declare namespace bedrock {
      * Prompt flow node configuration
      */
     interface FlowVersionPromptFlowNodeConfiguration {
+        guardrailConfiguration?: outputs.bedrock.FlowVersionGuardrailConfiguration;
         sourceConfiguration: outputs.bedrock.FlowVersionPromptFlowNodeSourceConfiguration0Properties | outputs.bedrock.FlowVersionPromptFlowNodeSourceConfiguration1Properties;
     }
     /**
@@ -9929,7 +10097,7 @@ export declare namespace bedrock {
     interface FlowVersionPromptFlowNodeInlineConfiguration {
         inferenceConfiguration?: outputs.bedrock.FlowVersionPromptInferenceConfigurationProperties;
         /**
-         * ARN or name of a Bedrock model.
+         * ARN or Id of a Bedrock Foundational Model or Inference Profile, or the ARN of a imported model, or a provisioned throughput ARN for custom models.
          */
         modelId: string;
         templateConfiguration: outputs.bedrock.FlowVersionPromptTemplateConfigurationProperties;
@@ -9987,10 +10155,6 @@ export declare namespace bedrock {
          * Controls randomness, higher values increase diversity
          */
         temperature?: number;
-        /**
-         * Sample from the k most likely next tokens
-         */
-        topK?: number;
         /**
          * Cumulative probability cutoff for token selection
          */
@@ -10594,10 +10758,6 @@ export declare namespace bedrock {
          * Controls randomness, higher values increase diversity
          */
         temperature?: number;
-        /**
-         * Sample from the k most likely next tokens
-         */
-        topK?: number;
         /**
          * Cumulative probability cutoff for token selection
          */
@@ -10649,7 +10809,7 @@ export declare namespace bedrock {
          */
         inferenceConfiguration?: outputs.bedrock.PromptInferenceConfigurationProperties;
         /**
-         * ARN or name of a Bedrock model.
+         * ARN or Id of a Bedrock Foundational Model or Inference Profile, or the ARN of a imported model, or a provisioned throughput ARN for custom models.
          */
         modelId?: string;
         /**
@@ -10659,7 +10819,7 @@ export declare namespace bedrock {
         /**
          * Contains configurations for the prompt template.
          */
-        templateConfiguration?: outputs.bedrock.PromptTemplateConfigurationProperties;
+        templateConfiguration: outputs.bedrock.PromptTemplateConfigurationProperties;
         /**
          * The type of prompt template to use.
          */
@@ -10696,10 +10856,6 @@ export declare namespace bedrock {
          * Controls randomness, higher values increase diversity
          */
         temperature?: number;
-        /**
-         * Sample from the k most likely next tokens
-         */
-        topK?: number;
         /**
          * Cumulative probability cutoff for token selection
          */
@@ -10720,7 +10876,7 @@ export declare namespace bedrock {
          */
         inferenceConfiguration?: outputs.bedrock.PromptVersionPromptInferenceConfigurationProperties;
         /**
-         * ARN or name of a Bedrock model.
+         * ARN or Id of a Bedrock Foundational Model or Inference Profile, or the ARN of a imported model, or a provisioned throughput ARN for custom models.
          */
         modelId?: string;
         /**
@@ -10730,7 +10886,7 @@ export declare namespace bedrock {
         /**
          * Contains configurations for the prompt template.
          */
-        templateConfiguration?: outputs.bedrock.PromptVersionPromptTemplateConfigurationProperties;
+        templateConfiguration: outputs.bedrock.PromptVersionPromptTemplateConfigurationProperties;
         /**
          * The type of prompt template to use.
          */
@@ -18637,6 +18793,38 @@ export declare namespace directoryservice {
     }
 }
 export declare namespace dms {
+    interface DataMigrationSettings {
+        /**
+         * The property specifies whether to enable the Cloudwatch log.
+         */
+        cloudwatchLogsEnabled?: boolean;
+        /**
+         * The number of parallel jobs that trigger parallel threads to unload the tables from the source, and then load them to the target.
+         */
+        numberOfJobs?: number;
+        /**
+         * The property specifies the rules of selecting objects for data migration.
+         */
+        selectionRules?: string;
+    }
+    interface DataMigrationSourceDataSettings {
+        /**
+         * The property is a point in the database engine's log that defines a time where you can begin CDC.
+         */
+        cdcStartPosition?: string;
+        /**
+         * The property indicates the start time for a change data capture (CDC) operation. The value is server time in UTC format.
+         */
+        cdcStartTime?: string;
+        /**
+         * The property indicates the stop time for a change data capture (CDC) operation. The value is server time in UTC format.
+         */
+        cdcStopTime?: string;
+        /**
+         * The property sets the name of a previously created logical replication slot for a change data capture (CDC) load of the source instance.
+         */
+        slotName?: string;
+    }
     /**
      * It is an object that describes Source and Target DataProviders and credentials for connecting to databases that are used in MigrationProject
      */
@@ -23452,11 +23640,13 @@ export declare namespace ec2 {
          */
         userInfoEndpoint?: string;
     }
+    /**
+     * Options for sending VPN tunnel logs to CloudWatch.
+     */
     interface VpnConnectionCloudwatchLogOptionsSpecification {
         /**
-         * Enable or disable VPN tunnel logging feature. Default value is `False` .
-         *
-         * Valid values: `True` | `False`
+         * Enable or disable VPN tunnel logging feature. Default value is ``False``.
+         *  Valid values: ``True`` | ``False``
          */
         logEnabled?: boolean;
         /**
@@ -23464,54 +23654,77 @@ export declare namespace ec2 {
          */
         logGroupArn?: string;
         /**
-         * Set log format. Default format is `json` .
-         *
-         * Valid values: `json` | `text`
+         * Set log format. Default format is ``json``.
+         *  Valid values: ``json`` | ``text``
          */
         logOutputFormat?: enums.ec2.VpnConnectionCloudwatchLogOptionsSpecificationLogOutputFormat;
     }
+    /**
+     * The IKE version that is permitted for the VPN tunnel.
+     */
     interface VpnConnectionIkeVersionsRequestListValue {
         /**
          * The IKE version.
          */
         value?: enums.ec2.VpnConnectionIkeVersionsRequestListValueValue;
     }
+    /**
+     * Specifies the encryption algorithm for the VPN tunnel for phase 1 IKE negotiations.
+     */
     interface VpnConnectionPhase1EncryptionAlgorithmsRequestListValue {
         /**
          * The value for the encryption algorithm.
          */
         value?: enums.ec2.VpnConnectionPhase1EncryptionAlgorithmsRequestListValueValue;
     }
+    /**
+     * Specifies the integrity algorithm for the VPN tunnel for phase 1 IKE negotiations.
+     */
     interface VpnConnectionPhase1IntegrityAlgorithmsRequestListValue {
         /**
          * The value for the integrity algorithm.
          */
         value?: enums.ec2.VpnConnectionPhase1IntegrityAlgorithmsRequestListValueValue;
     }
+    /**
+     * Specifies a Diffie-Hellman group number for the VPN tunnel for phase 1 IKE negotiations.
+     */
     interface VpnConnectionPhase1dhGroupNumbersRequestListValue {
         /**
          * The Diffie-Hellmann group number.
          */
         value?: number;
     }
+    /**
+     * Specifies the encryption algorithm for the VPN tunnel for phase 2 IKE negotiations.
+     */
     interface VpnConnectionPhase2EncryptionAlgorithmsRequestListValue {
         /**
          * The encryption algorithm.
          */
         value?: enums.ec2.VpnConnectionPhase2EncryptionAlgorithmsRequestListValueValue;
     }
+    /**
+     * Specifies the integrity algorithm for the VPN tunnel for phase 2 IKE negotiations.
+     */
     interface VpnConnectionPhase2IntegrityAlgorithmsRequestListValue {
         /**
          * The integrity algorithm.
          */
         value?: enums.ec2.VpnConnectionPhase2IntegrityAlgorithmsRequestListValueValue;
     }
+    /**
+     * Specifies a Diffie-Hellman group number for the VPN tunnel for phase 2 IKE negotiations.
+     */
     interface VpnConnectionPhase2dhGroupNumbersRequestListValue {
         /**
          * The Diffie-Hellmann group number.
          */
         value?: number;
     }
+    /**
+     * Options for logging VPN tunnel activity.
+     */
     interface VpnConnectionVpnTunnelLogOptionsSpecification {
         /**
          * Options for sending VPN tunnel logs to CloudWatch.
@@ -23523,19 +23736,15 @@ export declare namespace ec2 {
      */
     interface VpnConnectionVpnTunnelOptionsSpecification {
         /**
-         * The action to take after DPD timeout occurs. Specify `restart` to restart the IKE initiation. Specify `clear` to end the IKE session.
-         *
-         * Valid Values: `clear` | `none` | `restart`
-         *
-         * Default: `clear`
+         * The action to take after DPD timeout occurs. Specify ``restart`` to restart the IKE initiation. Specify ``clear`` to end the IKE session.
+         *  Valid Values: ``clear`` | ``none`` | ``restart``
+         *  Default: ``clear``
          */
         dpdTimeoutAction?: enums.ec2.VpnConnectionVpnTunnelOptionsSpecificationDpdTimeoutAction;
         /**
          * The number of seconds after which a DPD timeout occurs.
-         *
-         * Constraints: A value greater than or equal to 30.
-         *
-         * Default: `30`
+         *  Constraints: A value greater than or equal to 30.
+         *  Default: ``30``
          */
         dpdTimeoutSeconds?: number;
         /**
@@ -23544,8 +23753,7 @@ export declare namespace ec2 {
         enableTunnelLifecycleControl?: boolean;
         /**
          * The IKE versions that are permitted for the VPN tunnel.
-         *
-         * Valid values: `ikev1` | `ikev2`
+         *  Valid values: ``ikev1`` | ``ikev2``
          */
         ikeVersions?: outputs.ec2.VpnConnectionIkeVersionsRequestListValue[];
         /**
@@ -23554,54 +23762,44 @@ export declare namespace ec2 {
         logOptions?: outputs.ec2.VpnConnectionVpnTunnelLogOptionsSpecification;
         /**
          * One or more encryption algorithms that are permitted for the VPN tunnel for phase 1 IKE negotiations.
-         *
-         * Valid values: `AES128` | `AES256` | `AES128-GCM-16` | `AES256-GCM-16`
+         *  Valid values: ``AES128`` | ``AES256`` | ``AES128-GCM-16`` | ``AES256-GCM-16``
          */
         phase1EncryptionAlgorithms?: outputs.ec2.VpnConnectionPhase1EncryptionAlgorithmsRequestListValue[];
         /**
          * One or more integrity algorithms that are permitted for the VPN tunnel for phase 1 IKE negotiations.
-         *
-         * Valid values: `SHA1` | `SHA2-256` | `SHA2-384` | `SHA2-512`
+         *  Valid values: ``SHA1`` | ``SHA2-256`` | ``SHA2-384`` | ``SHA2-512``
          */
         phase1IntegrityAlgorithms?: outputs.ec2.VpnConnectionPhase1IntegrityAlgorithmsRequestListValue[];
         /**
          * The lifetime for phase 1 of the IKE negotiation, in seconds.
-         *
-         * Constraints: A value between 900 and 28,800.
-         *
-         * Default: `28800`
+         *  Constraints: A value between 900 and 28,800.
+         *  Default: ``28800``
          */
         phase1LifetimeSeconds?: number;
         /**
          * One or more Diffie-Hellman group numbers that are permitted for the VPN tunnel for phase 1 IKE negotiations.
-         *
-         * Valid values: `2` | `14` | `15` | `16` | `17` | `18` | `19` | `20` | `21` | `22` | `23` | `24`
+         *  Valid values: ``2`` | ``14`` | ``15`` | ``16`` | ``17`` | ``18`` | ``19`` | ``20`` | ``21`` | ``22`` | ``23`` | ``24``
          */
         phase1dhGroupNumbers?: outputs.ec2.VpnConnectionPhase1dhGroupNumbersRequestListValue[];
         /**
          * One or more encryption algorithms that are permitted for the VPN tunnel for phase 2 IKE negotiations.
-         *
-         * Valid values: `AES128` | `AES256` | `AES128-GCM-16` | `AES256-GCM-16`
+         *  Valid values: ``AES128`` | ``AES256`` | ``AES128-GCM-16`` | ``AES256-GCM-16``
          */
         phase2EncryptionAlgorithms?: outputs.ec2.VpnConnectionPhase2EncryptionAlgorithmsRequestListValue[];
         /**
          * One or more integrity algorithms that are permitted for the VPN tunnel for phase 2 IKE negotiations.
-         *
-         * Valid values: `SHA1` | `SHA2-256` | `SHA2-384` | `SHA2-512`
+         *  Valid values: ``SHA1`` | ``SHA2-256`` | ``SHA2-384`` | ``SHA2-512``
          */
         phase2IntegrityAlgorithms?: outputs.ec2.VpnConnectionPhase2IntegrityAlgorithmsRequestListValue[];
         /**
          * The lifetime for phase 2 of the IKE negotiation, in seconds.
-         *
-         * Constraints: A value between 900 and 3,600. The value must be less than the value for `Phase1LifetimeSeconds` .
-         *
-         * Default: `3600`
+         *  Constraints: A value between 900 and 3,600. The value must be less than the value for ``Phase1LifetimeSeconds``.
+         *  Default: ``3600``
          */
         phase2LifetimeSeconds?: number;
         /**
          * One or more Diffie-Hellman group numbers that are permitted for the VPN tunnel for phase 2 IKE negotiations.
-         *
-         * Valid values: `2` | `5` | `14` | `15` | `16` | `17` | `18` | `19` | `20` | `21` | `22` | `23` | `24`
+         *  Valid values: ``2`` | ``5`` | ``14`` | ``15`` | ``16`` | ``17`` | ``18`` | ``19`` | ``20`` | ``21`` | ``22`` | ``23`` | ``24``
          */
         phase2dhGroupNumbers?: outputs.ec2.VpnConnectionPhase2dhGroupNumbersRequestListValue[];
         /**
@@ -23610,35 +23808,27 @@ export declare namespace ec2 {
          */
         preSharedKey?: string;
         /**
-         * The percentage of the rekey window (determined by `RekeyMarginTimeSeconds` ) during which the rekey time is randomly selected.
-         *
-         * Constraints: A value between 0 and 100.
-         *
-         * Default: `100`
+         * The percentage of the rekey window (determined by ``RekeyMarginTimeSeconds``) during which the rekey time is randomly selected.
+         *  Constraints: A value between 0 and 100.
+         *  Default: ``100``
          */
         rekeyFuzzPercentage?: number;
         /**
-         * The margin time, in seconds, before the phase 2 lifetime expires, during which the AWS side of the VPN connection performs an IKE rekey. The exact time of the rekey is randomly selected based on the value for `RekeyFuzzPercentage` .
-         *
-         * Constraints: A value between 60 and half of `Phase2LifetimeSeconds` .
-         *
-         * Default: `270`
+         * The margin time, in seconds, before the phase 2 lifetime expires, during which the AWS side of the VPN connection performs an IKE rekey. The exact time of the rekey is randomly selected based on the value for ``RekeyFuzzPercentage``.
+         *  Constraints: A value between 60 and half of ``Phase2LifetimeSeconds``.
+         *  Default: ``270``
          */
         rekeyMarginTimeSeconds?: number;
         /**
          * The number of packets in an IKE replay window.
-         *
-         * Constraints: A value between 64 and 2048.
-         *
-         * Default: `1024`
+         *  Constraints: A value between 64 and 2048.
+         *  Default: ``1024``
          */
         replayWindowSize?: number;
         /**
-         * The action to take when the establishing the tunnel for the VPN connection. By default, your customer gateway device must initiate the IKE negotiation and bring up the tunnel. Specify `start` for AWS to initiate the IKE negotiation.
-         *
-         * Valid Values: `add` | `start`
-         *
-         * Default: `add`
+         * The action to take when the establishing the tunnel for the VPN connection. By default, your customer gateway device must initiate the IKE negotiation and bring up the tunnel. Specify ``start`` for AWS to initiate the IKE negotiation.
+         *  Valid Values: ``add`` | ``start``
+         *  Default: ``add``
          */
         startupAction?: enums.ec2.VpnConnectionVpnTunnelOptionsSpecificationStartupAction;
         /**
@@ -23655,8 +23845,7 @@ export declare namespace ec2 {
         tunnelInsideCidr?: string;
         /**
          * The range of inside IPv6 addresses for the tunnel. Any specified CIDR blocks must be unique across all VPN connections that use the same transit gateway.
-         *
-         * Constraints: A size /126 CIDR block from the local `fd00::/8` range.
+         *  Constraints: A size /126 CIDR block from the local ``fd00::/8`` range.
          */
         tunnelInsideIpv6Cidr?: string;
     }
@@ -32654,8 +32843,6 @@ export declare namespace iot {
     interface DomainConfigurationClientCertificateConfig {
         /**
          * The ARN of the Lambda function that IoT invokes after mutual TLS authentication during the connection.
-         *
-         * > This property isn't available in China.
          */
         clientCertificateCallbackArn?: string;
     }
@@ -44877,6 +45064,10 @@ export declare namespace mediapackagev2 {
      * <p>Filter configuration includes settings for manifest filtering, start and end times, and time delay that apply to all of your egress requests for this manifest. </p>
      */
     interface OriginEndpointFilterConfiguration {
+        /**
+         * <p>Optionally specify the clip start time for all of your manifest egress requests. When you include clip start time, note that you cannot use clip start time query parameters for this manifest's endpoint URL.</p>
+         */
+        clipStartTime?: string;
         /**
          * <p>Optionally specify the end time for all of your manifest egress requests. When you include end time, note that you cannot use end time query parameters for this manifest's endpoint URL.</p>
          */
@@ -44946,6 +45137,7 @@ export declare namespace mediapackagev2 {
          * THE SCTE-35 HLS configuration associated with the HLS manifest configuration.
          */
         scteHls?: outputs.mediapackagev2.OriginEndpointScteHls;
+        startTag?: outputs.mediapackagev2.OriginEndpointStartTag;
         /**
          * <p>The egress domain URL for stream delivery from MediaPackage.</p>
          */
@@ -44980,6 +45172,7 @@ export declare namespace mediapackagev2 {
          * The SCTE-35 HLS configuration associated with the low-latency HLS (LL-HLS) manifest configuration of the origin endpoint.
          */
         scteHls?: outputs.mediapackagev2.OriginEndpointScteHls;
+        startTag?: outputs.mediapackagev2.OriginEndpointStartTag;
         /**
          * <p>The egress domain URL for stream delivery from MediaPackage.</p>
          */
@@ -45081,6 +45274,19 @@ export declare namespace mediapackagev2 {
          */
         url: string;
     }
+    /**
+     * <p>To insert an EXT-X-START tag in your HLS playlist, specify a StartTag configuration object with a valid TimeOffset. When you do, you can also optionally specify whether to include a PRECISE value in the EXT-X-START tag.</p>
+     */
+    interface OriginEndpointStartTag {
+        /**
+         * <p>Specify the value for PRECISE within your EXT-X-START tag. Leave blank, or choose false, to use the default value NO. Choose yes to use the value YES.</p>
+         */
+        precise?: boolean;
+        /**
+         * <p>Specify the value for TIME-OFFSET within your EXT-X-START tag. Enter a signed floating point value which, if positive, must be less than the configured manifest duration minus three times the configured segment target duration. If negative, the absolute value must be larger than three times the configured segment target duration, and the absolute value must be smaller than the configured manifest duration.</p>
+         */
+        timeOffset: number;
+    }
 }
 export declare namespace mediatailor {
     /**
@@ -79762,6 +79968,10 @@ export declare namespace sagemaker {
          * A collection of settings that configure the domain's Docker interaction.
          */
         dockerSettings?: outputs.sagemaker.DomainDockerSettings;
+        /**
+         * The configuration for attaching a SageMaker user profile name to the execution role as a sts:SourceIdentity key.
+         */
+        executionRoleIdentityConfig?: enums.sagemaker.DomainSettingsExecutionRoleIdentityConfig;
         /**
          * A collection of settings that configure the `RStudioServerPro` Domain-level app.
          */
@@ -79807,14 +80017,20 @@ export declare namespace sagemaker {
     interface DomainUserSettings {
         /**
          * The Code Editor application settings.
+         *
+         * SageMaker applies these settings only to private spaces that the user creates in the domain. SageMaker doesn't apply these settings to shared spaces.
          */
         codeEditorAppSettings?: outputs.sagemaker.DomainCodeEditorAppSettings;
         /**
          * The settings for assigning a custom file system to a user profile. Permitted users can access this file system in Amazon SageMaker Studio.
+         *
+         * SageMaker applies these settings only to private spaces that the user creates in the domain. SageMaker doesn't apply these settings to shared spaces.
          */
         customFileSystemConfigs?: outputs.sagemaker.DomainCustomFileSystemConfig[];
         /**
          * Details about the POSIX identity that is used for file system operations.
+         *
+         * SageMaker applies these settings only to private spaces that the user creates in the domain. SageMaker doesn't apply these settings to shared spaces.
          */
         customPosixUserConfig?: outputs.sagemaker.DomainCustomPosixUserConfig;
         /**
@@ -79827,6 +80043,8 @@ export declare namespace sagemaker {
         executionRole: string;
         /**
          * The settings for the JupyterLab application.
+         *
+         * SageMaker applies these settings only to private spaces that the user creates in the domain. SageMaker doesn't apply these settings to shared spaces.
          */
         jupyterLabAppSettings?: outputs.sagemaker.DomainJupyterLabAppSettings;
         /**
@@ -79855,6 +80073,8 @@ export declare namespace sagemaker {
         sharingSettings?: outputs.sagemaker.DomainSharingSettings;
         /**
          * The storage settings for a space.
+         *
+         * SageMaker applies these settings only to private spaces that the user creates in the domain. SageMaker doesn't apply these settings to shared spaces.
          */
         spaceStorageSettings?: outputs.sagemaker.DomainDefaultSpaceStorageSettings;
         /**
@@ -79866,6 +80086,98 @@ export declare namespace sagemaker {
          */
         studioWebPortalSettings?: outputs.sagemaker.DomainStudioWebPortalSettings;
     }
+    interface EndpointAlarm {
+        /**
+         * The name of the CloudWatch alarm.
+         */
+        alarmName: string;
+    }
+    interface EndpointAutoRollbackConfig {
+        /**
+         * List of CloudWatch alarms to monitor during the deployment. If any alarm goes off, the deployment is rolled back.
+         */
+        alarms: outputs.sagemaker.EndpointAlarm[];
+    }
+    interface EndpointBlueGreenUpdatePolicy {
+        /**
+         * The maximum time allowed for the blue/green update, in seconds.
+         */
+        maximumExecutionTimeoutInSeconds?: number;
+        /**
+         * The wait time before terminating the old endpoint during a blue/green deployment.
+         */
+        terminationWaitInSeconds?: number;
+        /**
+         * The traffic routing configuration for the blue/green deployment.
+         */
+        trafficRoutingConfiguration: outputs.sagemaker.EndpointTrafficRoutingConfig;
+    }
+    interface EndpointCapacitySize {
+        /**
+         * Specifies whether the `Value` is an instance count or a capacity unit.
+         */
+        type: string;
+        /**
+         * The value representing either the number of instances or the number of capacity units.
+         */
+        value: number;
+    }
+    interface EndpointDeploymentConfig {
+        /**
+         * Configuration for automatic rollback if an error occurs during deployment.
+         */
+        autoRollbackConfiguration?: outputs.sagemaker.EndpointAutoRollbackConfig;
+        /**
+         * Configuration for blue-green update deployment policies.
+         */
+        blueGreenUpdatePolicy?: outputs.sagemaker.EndpointBlueGreenUpdatePolicy;
+        /**
+         * Configuration for rolling update deployment policies.
+         */
+        rollingUpdatePolicy?: outputs.sagemaker.EndpointRollingUpdatePolicy;
+    }
+    interface EndpointRollingUpdatePolicy {
+        /**
+         * Specifies the maximum batch size for each rolling update.
+         */
+        maximumBatchSize: outputs.sagemaker.EndpointCapacitySize;
+        /**
+         * The maximum time allowed for the rolling update, in seconds.
+         */
+        maximumExecutionTimeoutInSeconds?: number;
+        /**
+         * The maximum batch size for rollback during an update failure.
+         */
+        rollbackMaximumBatchSize?: outputs.sagemaker.EndpointCapacitySize;
+        /**
+         * The time to wait between steps during the rolling update, in seconds.
+         */
+        waitIntervalInSeconds: number;
+    }
+    interface EndpointTrafficRoutingConfig {
+        /**
+         * Specifies the size of the canary traffic in a canary deployment.
+         */
+        canarySize?: outputs.sagemaker.EndpointCapacitySize;
+        /**
+         * Specifies the step size for linear traffic routing.
+         */
+        linearStepSize?: outputs.sagemaker.EndpointCapacitySize;
+        /**
+         * Specifies the type of traffic routing (e.g., 'AllAtOnce', 'Canary', 'Linear').
+         */
+        type: string;
+        /**
+         * Specifies the wait interval between traffic shifts, in seconds.
+         */
+        waitIntervalInSeconds?: number;
+    }
+    interface EndpointVariantProperty {
+        /**
+         * The type of variant property (e.g., 'DesiredInstanceCount', 'DesiredWeight', 'DataCaptureConfig').
+         */
+        variantPropertyType?: string;
+    }
     interface FeatureGroupDataCatalogConfig {
         /**
          * The name of the Glue table catalog.
@@ -82931,14 +83243,20 @@ export declare namespace sagemaker {
     interface UserProfileUserSettings {
         /**
          * The Code Editor application settings.
+         *
+         * SageMaker applies these settings only to private spaces that the user creates in the domain. SageMaker doesn't apply these settings to shared spaces.
          */
         codeEditorAppSettings?: outputs.sagemaker.UserProfileCodeEditorAppSettings;
         /**
          * The settings for assigning a custom file system to a user profile. Permitted users can access this file system in Amazon SageMaker Studio.
+         *
+         * SageMaker applies these settings only to private spaces that the user creates in the domain. SageMaker doesn't apply these settings to shared spaces.
          */
         customFileSystemConfigs?: outputs.sagemaker.UserProfileCustomFileSystemConfig[];
         /**
          * Details about the POSIX identity that is used for file system operations.
+         *
+         * SageMaker applies these settings only to private spaces that the user creates in the domain. SageMaker doesn't apply these settings to shared spaces.
          */
         customPosixUserConfig?: outputs.sagemaker.UserProfileCustomPosixUserConfig;
         /**
@@ -82951,6 +83269,8 @@ export declare namespace sagemaker {
         executionRole?: string;
         /**
          * The settings for the JupyterLab application.
+         *
+         * SageMaker applies these settings only to private spaces that the user creates in the domain. SageMaker doesn't apply these settings to shared spaces.
          */
         jupyterLabAppSettings?: outputs.sagemaker.UserProfileJupyterLabAppSettings;
         /**
@@ -82975,6 +83295,8 @@ export declare namespace sagemaker {
         sharingSettings?: outputs.sagemaker.UserProfileSharingSettings;
         /**
          * The storage settings for a space.
+         *
+         * SageMaker applies these settings only to private spaces that the user creates in the domain. SageMaker doesn't apply these settings to shared spaces.
          */
         spaceStorageSettings?: outputs.sagemaker.UserProfileDefaultSpaceStorageSettings;
         /**