@pulumi/aws-native 1.41.0-alpha.1765604205 → 1.41.0-alpha.1765978445

package/types/input.d.ts

@@ -11126,6 +11126,9 @@ export declare namespace bedrock {
          * Sets modality processing for audio files. All modalities are enabled by default.
          */
         modalityProcessing?: pulumi.Input<inputs.bedrock.DataAutomationProjectModalityProcessingConfigurationArgs>;
+        /**
+         * Configuration for sensitive data detection and redaction for audio files.
+         */
         sensitiveDataConfiguration?: pulumi.Input<inputs.bedrock.DataAutomationProjectSensitiveDataConfigurationArgs>;
     }
     interface DataAutomationProjectAudioStandardExtractionArgs {
@@ -11222,6 +11225,9 @@ export declare namespace bedrock {
          * Sets modality processing for document files. All modalities are enabled by default.
          */
         modalityProcessing?: pulumi.Input<inputs.bedrock.DataAutomationProjectModalityProcessingConfigurationArgs>;
+        /**
+         * Configuration for sensitive data detection and redaction for document files.
+         */
         sensitiveDataConfiguration?: pulumi.Input<inputs.bedrock.DataAutomationProjectSensitiveDataConfigurationArgs>;
         /**
          * Whether document splitter is enabled for a project.
@@ -11279,6 +11285,9 @@ export declare namespace bedrock {
          * Sets modality processing for image files. All modalities are enabled by default.
          */
         modalityProcessing?: pulumi.Input<inputs.bedrock.DataAutomationProjectModalityProcessingConfigurationArgs>;
+        /**
+         * Configuration for sensitive data detection and redaction for image files.
+         */
         sensitiveDataConfiguration?: pulumi.Input<inputs.bedrock.DataAutomationProjectSensitiveDataConfigurationArgs>;
     }
     interface DataAutomationProjectImageStandardExtractionArgs {
@@ -11364,12 +11373,27 @@ export declare namespace bedrock {
         video?: pulumi.Input<inputs.bedrock.DataAutomationProjectVideoOverrideConfigurationArgs>;
     }
     interface DataAutomationProjectPiiEntitiesConfigurationArgs {
+        /**
+         * List of PII entity types to detect/redact in the output. Choose from specific entity types (such as ADDRESS, NAME, EMAIL, PHONE, US_SOCIAL_SECURITY_NUMBER) or specify ALL to detect all supported PII types. If not specified, defaults to ALL.
+         */
         piiEntityTypes?: pulumi.Input<pulumi.Input<enums.bedrock.DataAutomationProjectPiiEntityTypes>[]>;
+        /**
+         * Defines how detected PII entities are masked in redacted output files. Set to PII to replace all detected entities with a generic [PII] marker regardless of entity type. Set to ENTITY_TYPE to replace each detected entity with its specific type marker (for example, [NAME], [EMAIL], [ADDRESS]). This setting only applies when detectionMode is set to DETECTION_AND_REDACTION. If not specified, defaults to ENTITY_TYPE.
+         */
         redactionMaskMode?: pulumi.Input<enums.bedrock.DataAutomationProjectPiiRedactionMaskMode>;
     }
     interface DataAutomationProjectSensitiveDataConfigurationArgs {
+        /**
+         * Specifies the mode for handling sensitive data detection. Set to DETECTION to only identify sensitive data without modifying content - this produces one output file per detection scope containing detection information with original unredacted content. Set to DETECTION_AND_REDACTION to both identify and mask sensitive data - this produces two output files per detection scope: one unredacted file with detection information and one redacted file with masking applied to sensitive content. For example, if detectionScope includes both STANDARD and CUSTOM with DETECTION_AND_REDACTION mode, four output files will be generated (two for standard output and two for custom output).
+         */
         detectionMode?: pulumi.Input<enums.bedrock.DataAutomationProjectSensitiveDataDetectionMode>;
+        /**
+         * Defines which BDA output types to apply sensitive data detection to. Specify STANDARD to detect sensitive data in standard output, CUSTOM to detect in custom output (blueprint-based extraction), or both to apply detection to both output types. If not specified, defaults to both STANDARD and CUSTOM. The number of output files generated depends on both the detection mode and the scopes selected - each scope specified will produce its own set of output files according to the detection mode configured.
+         */
         detectionScope?: pulumi.Input<pulumi.Input<enums.bedrock.DataAutomationProjectSensitiveDataDetectionScope>[]>;
+        /**
+         * Configuration for detecting and redacting Personally Identifiable Information (PII) entities.
+         */
         piiEntitiesConfiguration?: pulumi.Input<inputs.bedrock.DataAutomationProjectPiiEntitiesConfigurationArgs>;
     }
     interface DataAutomationProjectSpeakerLabelingConfigurationArgs {
@@ -11436,6 +11460,9 @@ export declare namespace bedrock {
          * Sets modality processing for video files. All modalities are enabled by default.
          */
         modalityProcessing?: pulumi.Input<inputs.bedrock.DataAutomationProjectModalityProcessingConfigurationArgs>;
+        /**
+         * Configuration for sensitive data detection and redaction for video files.
+         */
         sensitiveDataConfiguration?: pulumi.Input<inputs.bedrock.DataAutomationProjectSensitiveDataConfigurationArgs>;
     }
     interface DataAutomationProjectVideoStandardExtractionArgs {
@@ -13135,6 +13162,9 @@ export declare namespace bedrock {
      * The vector configuration details for the Bedrock embeddings model.
      */
     interface KnowledgeBaseBedrockEmbeddingModelConfigurationArgs {
+        /**
+         * Configuration settings for processing audio content in multimodal knowledge bases.
+         */
         audio?: pulumi.Input<pulumi.Input<inputs.bedrock.KnowledgeBaseAudioConfigurationArgs>[]>;
         /**
          * The dimensions details for the vector configuration used on the Bedrock embeddings model.
@@ -13144,6 +13174,9 @@ export declare namespace bedrock {
          * The data type for the vectors when using a model to convert text into vector embeddings.
          */
         embeddingDataType?: pulumi.Input<enums.bedrock.KnowledgeBaseBedrockEmbeddingModelConfigurationEmbeddingDataType>;
+        /**
+         * Configuration settings for processing video content in multimodal knowledge bases.
+         */
         video?: pulumi.Input<pulumi.Input<inputs.bedrock.KnowledgeBaseVideoConfigurationArgs>[]>;
     }
     /**
@@ -14059,6 +14092,17 @@ export declare namespace bedrockagentcore {
         allowedClients?: pulumi.Input<pulumi.Input<string>[]>;
         discoveryUrl: pulumi.Input<string>;
     }
+    interface GatewayInterceptorConfigurationArgs {
+        inputConfiguration?: pulumi.Input<inputs.bedrockagentcore.GatewayInterceptorInputConfigurationArgs>;
+        interceptionPoints: pulumi.Input<pulumi.Input<enums.bedrockagentcore.GatewayInterceptionPoint>[]>;
+        interceptor: pulumi.Input<inputs.bedrockagentcore.InterceptorConfigurationPropertiesArgs>;
+    }
+    interface GatewayInterceptorInputConfigurationArgs {
+        passRequestHeaders: pulumi.Input<boolean>;
+    }
+    interface GatewayLambdaInterceptorConfigurationArgs {
+        arn: pulumi.Input<string>;
+    }
     interface GatewayMcpGatewayConfigurationArgs {
         instructions?: pulumi.Input<string>;
         searchType?: pulumi.Input<enums.bedrockagentcore.GatewaySearchType>;
@@ -14149,6 +14193,9 @@ export declare namespace bedrockagentcore {
     interface GatewayTargetToolSchema1PropertiesArgs {
         inlinePayload: pulumi.Input<pulumi.Input<inputs.bedrockagentcore.GatewayTargetToolDefinitionArgs>[]>;
     }
+    interface InterceptorConfigurationPropertiesArgs {
+        lambda: pulumi.Input<inputs.bedrockagentcore.GatewayLambdaInterceptorConfigurationArgs>;
+    }
     interface MemoryCustomConfigurationInputArgs {
         selfManagedConfiguration?: pulumi.Input<inputs.bedrockagentcore.MemorySelfManagedConfigurationArgs>;
         semanticOverride?: pulumi.Input<inputs.bedrockagentcore.MemorySemanticOverrideArgs>;
@@ -14972,6 +15019,9 @@ export declare namespace cleanrooms {
          * The payment responsibilities accepted by the member for model training.
          */
         modelTraining?: pulumi.Input<inputs.cleanrooms.CollaborationModelTrainingPaymentConfigArgs>;
+        /**
+         * The payment configuration for machine learning synthetic data generation.
+         */
         syntheticDataGeneration?: pulumi.Input<inputs.cleanrooms.CollaborationSyntheticDataGenerationPaymentConfigArgs>;
     }
     interface CollaborationModelInferencePaymentConfigArgs {
@@ -15019,6 +15069,9 @@ export declare namespace cleanrooms {
         isResponsible: pulumi.Input<boolean>;
     }
     interface CollaborationSyntheticDataGenerationPaymentConfigArgs {
+        /**
+         * Indicates who is responsible for paying for synthetic data generation.
+         */
         isResponsible: pulumi.Input<boolean>;
     }
     interface ConfiguredTableAggregateColumnArgs {
@@ -15211,6 +15264,9 @@ export declare namespace cleanrooms {
          * The payment responsibilities accepted by the member for model training.
          */
         modelTraining?: pulumi.Input<inputs.cleanrooms.MembershipModelTrainingPaymentConfigArgs>;
+        /**
+         * The payment configuration for synthetic data generation for this machine learning membership.
+         */
         syntheticDataGeneration?: pulumi.Input<inputs.cleanrooms.MembershipSyntheticDataGenerationPaymentConfigArgs>;
     }
     interface MembershipModelInferencePaymentConfigArgs {
@@ -15327,6 +15383,9 @@ export declare namespace cleanrooms {
         isResponsible: pulumi.Input<boolean>;
     }
     interface MembershipSyntheticDataGenerationPaymentConfigArgs {
+        /**
+         * Indicates if this membership is responsible for paying for synthetic data generation.
+         */
         isResponsible: pulumi.Input<boolean>;
     }
     /**
@@ -20206,6 +20265,9 @@ export declare namespace connect {
      * Information about properties for a question in an evaluation form. The question type properties must be either for a numeric question or a single select question.
      */
     interface EvaluationFormQuestionTypePropertiesArgs {
+        /**
+         * Properties for multi-select question types.
+         */
         multiSelect?: pulumi.Input<inputs.connect.EvaluationFormMultiSelectQuestionPropertiesArgs>;
         /**
          * The properties of the numeric question.
@@ -20391,6 +20453,9 @@ export declare namespace connect {
         automation?: pulumi.Input<inputs.connect.EvaluationFormTextQuestionAutomationArgs>;
     }
     interface FontFamilyArgs {
+        /**
+         * The default font family to use in the workspace theme.
+         */
         default?: pulumi.Input<enums.connect.WorkspaceFontFamily>;
     }
     /**
@@ -21163,18 +21228,54 @@ export declare namespace connect {
          */
         level: pulumi.Input<number>;
     }
+    /**
+     * The validation rules applied to values of this attribute. Based on JSON Schema Draft 2020-12 with additional Connect-specific validations for data integrity.
+     */
     interface ValidationPropertiesArgs {
+        /**
+         * Defines enumeration constraints for attribute values. Can specify a list of allowed values and whether custom values are permitted beyond the enumerated list.
+         */
         enum?: pulumi.Input<inputs.connect.ValidationPropertiesEnumPropertiesArgs>;
+        /**
+         * The largest exclusive numeric value for NUMBER value type. Can be provided alongside Maximum where both operate independently. Must be greater than ExclusiveMinimum and Minimum. Applies to NUMBER and values within NUMBER_LIST.
+         */
         exclusiveMaximum?: pulumi.Input<number>;
+        /**
+         * The smallest exclusive numeric value for NUMBER value type. Can be provided alongside Minimum where both operate independently. Must be less than ExclusiveMaximum and Maximum. Applies to NUMBER and values within NUMBER_LIST.
+         */
         exclusiveMinimum?: pulumi.Input<number>;
+        /**
+         * The maximum number of characters a text value can contain. Applies to TEXT value type and values within a TEXT_LIST. Must be greater than or equal to MinLength.
+         */
         maxLength?: pulumi.Input<number>;
+        /**
+         * The maximum number of values in a list. Must be an integer greater than or equal to 0 and greater than or equal to MinValues. Applies to all list types.
+         */
         maxValues?: pulumi.Input<number>;
+        /**
+         * The largest inclusive numeric value for NUMBER value type. Can be provided alongside ExclusiveMaximum where both operate independently. Must be greater than or equal to Minimum and greater than ExclusiveMinimum. Applies to NUMBER and values within NUMBER_LIST.
+         */
         maximum?: pulumi.Input<number>;
+        /**
+         * The minimum number of characters a text value can contain. Applies to TEXT value type and values within a TEXT_LIST. Must be less than or equal to MaxLength.
+         */
         minLength?: pulumi.Input<number>;
+        /**
+         * The minimum number of values in a list. Must be an integer greater than or equal to 0 and less than or equal to MaxValues. Applies to all list types.
+         */
         minValues?: pulumi.Input<number>;
+        /**
+         * The smallest inclusive numeric value for NUMBER value type. Cannot be provided when ExclusiveMinimum is also provided. Must be less than or equal to Maximum and less than ExclusiveMaximum. Applies to NUMBER and values within NUMBER_LIST.
+         */
         minimum?: pulumi.Input<number>;
+        /**
+         * Specifies that numeric values must be multiples of this number. Must be greater than 0. The result of dividing a value by this multiple must result in an integer. Applies to NUMBER and values within NUMBER_LIST.
+         */
         multipleOf?: pulumi.Input<number>;
     }
+    /**
+     * Defines enumeration constraints for attribute values. Can specify a list of allowed values and whether custom values are permitted beyond the enumerated list.
+     */
     interface ValidationPropertiesEnumPropertiesArgs {
         strict?: pulumi.Input<boolean>;
         values?: pulumi.Input<pulumi.Input<string>[]>;
@@ -21189,7 +21290,13 @@ export declare namespace connect {
         stringList?: pulumi.Input<pulumi.Input<string>[]>;
     }
     interface WorkspaceMediaItemArgs {
+        /**
+         * The source URL or data for the media asset.
+         */
         source?: pulumi.Input<string>;
+        /**
+         * The type of media. Valid values are: `IMAGE_LOGO_FAVICON` and `IMAGE_LOGO_HORIZONTAL` .
+         */
         type: pulumi.Input<enums.connect.WorkspaceMediaType>;
     }
     interface WorkspacePageArgs {
@@ -21211,48 +21318,126 @@ export declare namespace connect {
         slug?: pulumi.Input<string>;
     }
     interface WorkspacePaletteCanvasArgs {
+        /**
+         * The background color for active elements.
+         */
         activeBackground?: pulumi.Input<string>;
+        /**
+         * The background color for container elements.
+         */
         containerBackground?: pulumi.Input<string>;
+        /**
+         * The background color for page elements.
+         */
         pageBackground?: pulumi.Input<string>;
     }
     interface WorkspacePaletteHeaderArgs {
+        /**
+         * The background color of the header.
+         */
         background?: pulumi.Input<string>;
+        /**
+         * Whether to invert the colors of action buttons in the header.
+         */
         invertActionsColors?: pulumi.Input<boolean>;
+        /**
+         * The text color in the header.
+         */
         text?: pulumi.Input<string>;
+        /**
+         * The text color when hovering over header elements.
+         */
         textHover?: pulumi.Input<string>;
     }
     interface WorkspacePaletteNavigationArgs {
+        /**
+         * The background color of the navigation area.
+         */
         background?: pulumi.Input<string>;
+        /**
+         * Whether to invert the colors of action buttons in the navigation area.
+         */
         invertActionsColors?: pulumi.Input<boolean>;
+        /**
+         * The text color in the navigation area.
+         */
         text?: pulumi.Input<string>;
+        /**
+         * The text color for active navigation items.
+         */
         textActive?: pulumi.Input<string>;
+        /**
+         * The background color for active navigation items.
+         */
         textBackgroundActive?: pulumi.Input<string>;
+        /**
+         * The background color when hovering over navigation text.
+         */
         textBackgroundHover?: pulumi.Input<string>;
+        /**
+         * The text color when hovering over navigation items.
+         */
         textHover?: pulumi.Input<string>;
     }
     interface WorkspacePalettePrimaryArgs {
+        /**
+         * The primary color used for active states.
+         */
         active?: pulumi.Input<string>;
+        /**
+         * The text color that contrasts with the primary color for readability.
+         */
         contrastText?: pulumi.Input<string>;
+        /**
+         * The default primary color used throughout the workspace.
+         */
         default?: pulumi.Input<string>;
     }
     /**
      * The theme configuration for the Connect workspace
      */
     interface WorkspaceThemeArgs {
+        /**
+         * The theme configuration for dark mode.
+         */
         dark?: pulumi.Input<inputs.connect.WorkspaceThemeConfigArgs>;
+        /**
+         * The theme configuration for light mode.
+         */
         light?: pulumi.Input<inputs.connect.WorkspaceThemeConfigArgs>;
     }
     interface WorkspaceThemeConfigArgs {
+        /**
+         * The color palette configuration for the workspace theme.
+         */
         palette?: pulumi.Input<inputs.connect.WorkspaceThemePaletteArgs>;
+        /**
+         * The typography configuration for the workspace theme.
+         */
         typography?: pulumi.Input<inputs.connect.WorkspaceThemeTypographyArgs>;
     }
     interface WorkspaceThemePaletteArgs {
+        /**
+         * The color configuration for the canvas area.
+         */
         canvas?: pulumi.Input<inputs.connect.WorkspacePaletteCanvasArgs>;
+        /**
+         * The color configuration for the header area.
+         */
         header?: pulumi.Input<inputs.connect.WorkspacePaletteHeaderArgs>;
+        /**
+         * The color configuration for the navigation area.
+         */
         navigation?: pulumi.Input<inputs.connect.WorkspacePaletteNavigationArgs>;
+        /**
+         * The primary color configuration used throughout the workspace.
+         */
         primary?: pulumi.Input<inputs.connect.WorkspacePalettePrimaryArgs>;
     }
     interface WorkspaceThemeTypographyArgs {
+        /**
+         * The font family configuration for text in the workspace.
+         */
         fontFamily?: pulumi.Input<inputs.connect.FontFamilyArgs>;
     }
 }
@@ -21379,6 +21564,9 @@ export declare namespace connectcampaignsv2 {
          * The configuration of the telephony channel subtype.
          */
         telephony?: pulumi.Input<inputs.connectcampaignsv2.CampaignTelephonyChannelSubtypeConfigArgs>;
+        /**
+         * The configuration of the WhatsApp channel subtype.
+         */
         whatsApp?: pulumi.Input<inputs.connectcampaignsv2.CampaignWhatsAppChannelSubtypeConfigArgs>;
     }
     /**
@@ -21431,6 +21619,9 @@ export declare namespace connectcampaignsv2 {
          * The communication time configuration for the telephony channel subtype.
          */
         telephony?: pulumi.Input<inputs.connectcampaignsv2.CampaignTimeWindowArgs>;
+        /**
+         * The communication time configuration for the WhatsApp channel subtype.
+         */
         whatsApp?: pulumi.Input<inputs.connectcampaignsv2.CampaignTimeWindowArgs>;
     }
     /**
@@ -21675,6 +21866,9 @@ export declare namespace connectcampaignsv2 {
          * The Amazon Connect source phone number.
          */
         connectSourcePhoneNumber?: pulumi.Input<string>;
+        /**
+         * The ring timeout configuration for outbound calls. Specifies how long to wait for the call to be answered before timing out.
+         */
         ringTimeout?: pulumi.Input<number>;
     }
     /**
@@ -21731,15 +21925,30 @@ export declare namespace connectcampaignsv2 {
      * WhatsApp Channel Subtype config
      */
     interface CampaignWhatsAppChannelSubtypeConfigArgs {
+        /**
+         * The allocation of WhatsApp capacity between multiple running outbound campaigns.
+         */
         capacity?: pulumi.Input<number>;
+        /**
+         * The default WhatsApp outbound configuration of an outbound campaign.
+         */
         defaultOutboundConfig: pulumi.Input<inputs.connectcampaignsv2.CampaignWhatsAppOutboundConfigArgs>;
+        /**
+         * The outbound mode for WhatsApp of an outbound campaign.
+         */
         outboundMode: pulumi.Input<inputs.connectcampaignsv2.CampaignWhatsAppOutboundModeArgs>;
     }
     /**
      * Default WhatsApp outbound config
      */
     interface CampaignWhatsAppOutboundConfigArgs {
+        /**
+         * The Amazon Resource Name (ARN) of the Amazon Connect source WhatsApp phone number.
+         */
         connectSourcePhoneNumberArn: pulumi.Input<string>;
+        /**
+         * The Amazon Resource Name (ARN) of the Amazon Q in Connect template.
+         */
         wisdomTemplateArn: pulumi.Input<string>;
     }
     /**
@@ -24843,6 +25052,10 @@ export declare namespace devicefarm {
          */
         value?: pulumi.Input<string>;
     }
+    interface ProjectEnvironmentVariableArgs {
+        name: pulumi.Input<string>;
+        value: pulumi.Input<string>;
+    }
     /**
      * The VPC security groups and subnets that are attached to a project
      */
@@ -26524,6 +26737,12 @@ export declare namespace ec2 {
          * Default: `20`
          */
         onDemandMaxPricePercentageOverLowestPrice?: pulumi.Input<number>;
+        /**
+         * Specifies whether instance types must support encrypting in-transit traffic between instances. For more information, including the supported instance types, see [Encryption in transit](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/data-protection.html#encryption-transit) in the *Amazon EC2 User Guide* .
+         *
+         * Default: `false`
+         */
+        requireEncryptionInTransit?: pulumi.Input<boolean>;
         /**
          * Indicates whether instance types must support hibernation for On-Demand Instances.
          *
@@ -29070,6 +29289,12 @@ export declare namespace ec2 {
          * Default: `20`
          */
         onDemandMaxPricePercentageOverLowestPrice?: pulumi.Input<number>;
+        /**
+         * Specifies whether instance types must support encrypting in-transit traffic between instances. For more information, including the supported instance types, see [Encryption in transit](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/data-protection.html#encryption-transit) in the *Amazon EC2 User Guide* .
+         *
+         * Default: `false`
+         */
+        requireEncryptionInTransit?: pulumi.Input<boolean>;
         /**
          * Indicates whether instance types must support hibernation for On-Demand Instances.
          *
@@ -31315,6 +31540,8 @@ export declare namespace ecs {
          * The deployment strategy for the service. Choose from these valid values:
          *   +  ``ROLLING`` - When you create a service which uses the rolling update (``ROLLING``) deployment strategy, the Amazon ECS service scheduler replaces the currently running tasks with new tasks. The number of tasks that Amazon ECS adds or removes from the service during a rolling update is controlled by the service deployment configuration.
          *   +  ``BLUE_GREEN`` - A blue/green deployment strategy (``BLUE_GREEN``) is a release methodology that reduces downtime and risk by running two identical production environments called blue and green. With Amazon ECS blue/green deployments, you can validate new service revisions before directing production traffic to them. This approach provides a safer way to deploy changes with the ability to quickly roll back if needed.
+         *   +  ``LINEAR`` - A *linear* deployment strategy (``LINEAR``) gradually shifts traffic from the current production environment to a new environment in equal percentages over time. With Amazon ECS linear deployments, you can control the pace of traffic shifting and validate new service revisions with increasing amounts of production traffic.
+         *   +  ``CANARY`` - A *canary* deployment strategy (``CANARY``) shifts a small percentage of traffic to the new service revision first, then shifts the remaining traffic all at once after a specified time period. This allows you to test the new version with a subset of users before full deployment.
          */
         strategy?: pulumi.Input<enums.ecs.ServiceDeploymentConfigurationStrategy>;
     }
@@ -33788,7 +34015,7 @@ export declare namespace elasticloadbalancingv2 {
          */
         forwardConfig?: pulumi.Input<inputs.elasticloadbalancingv2.ListenerForwardConfigArgs>;
         /**
-         * [HTTPS listeners] Information for validating JWT access tokens in client requests. Specify only when `Type` is `jwt-validation` .
+         * [HTTPS listeners] Information for validating JWT access tokens in client requests. Specify only when ``Type`` is ``jwt-validation``.
          */
         jwtValidationConfig?: pulumi.Input<inputs.elasticloadbalancingv2.ListenerJwtValidationConfigArgs>;
         /**
@@ -33987,17 +34214,20 @@ export declare namespace elasticloadbalancingv2 {
          */
         targetGroups?: pulumi.Input<pulumi.Input<inputs.elasticloadbalancingv2.ListenerTargetGroupTupleArgs>[]>;
     }
+    /**
+     * Information about an additional claim to validate.
+     */
     interface ListenerJwtValidationActionAdditionalClaimArgs {
         /**
          * The format of the claim value.
          */
         format: pulumi.Input<string>;
         /**
-         * The name of the claim. You can't specify `exp` , `iss` , `nbf` , or `iat` because we validate them by default.
+         * The name of the claim. You can't specify ``exp``, ``iss``, ``nbf``, or ``iat`` because we validate them by default.
          */
         name: pulumi.Input<string>;
         /**
-         * The claim value. The maximum size of the list is 10. Each value can be up to 256 characters in length. If the format is `space-separated-values` , the values can't include spaces.
+         * The claim value. The maximum size of the list is 10. Each value can be up to 256 characters in length. If the format is ``space-separated-values``, the values can't include spaces.
          */
         values: pulumi.Input<pulumi.Input<string>[]>;
     }
@@ -34087,7 +34317,7 @@ export declare namespace elasticloadbalancingv2 {
          */
         forwardConfig?: pulumi.Input<inputs.elasticloadbalancingv2.ListenerRuleForwardConfigArgs>;
         /**
-         * [HTTPS listeners] Information for validating JWT access tokens in client requests. Specify only when `Type` is `jwt-validation` .
+         * [HTTPS listeners] Information for validating JWT access tokens in client requests. Specify only when ``Type`` is ``jwt-validation``.
          */
         jwtValidationConfig?: pulumi.Input<inputs.elasticloadbalancingv2.ListenerRuleJwtValidationConfigArgs>;
         /**
@@ -34280,17 +34510,20 @@ export declare namespace elasticloadbalancingv2 {
          */
         values?: pulumi.Input<pulumi.Input<string>[]>;
     }
+    /**
+     * Information about an additional claim to validate.
+     */
     interface ListenerRuleJwtValidationActionAdditionalClaimArgs {
         /**
          * The format of the claim value.
          */
         format: pulumi.Input<string>;
         /**
-         * The name of the claim. You can't specify `exp` , `iss` , `nbf` , or `iat` because we validate them by default.
+         * The name of the claim. You can't specify ``exp``, ``iss``, ``nbf``, or ``iat`` because we validate them by default.
          */
         name: pulumi.Input<string>;
         /**
-         * The claim value. The maximum size of the list is 10. Each value can be up to 256 characters in length. If the format is `space-separated-values` , the values can't include spaces.
+         * The claim value. The maximum size of the list is 10. Each value can be up to 256 characters in length. If the format is ``space-separated-values``, the values can't include spaces.
          */
         values: pulumi.Input<pulumi.Input<string>[]>;
     }
@@ -34538,6 +34771,9 @@ export declare namespace elasticloadbalancingv2 {
          *   +  ``connection_logs.s3.enabled`` - Indicates whether connection logs are enabled. The value is ``true`` or ``false``. The default is ``false``.
          *   +  ``connection_logs.s3.bucket`` - The name of the S3 bucket for the connection logs. This attribute is required if connection logs are enabled. The bucket must exist in the same region as the load balancer and have a bucket policy that grants Elastic Load Balancing permissions to write to the bucket.
          *   +  ``connection_logs.s3.prefix`` - The prefix for the location in the S3 bucket for the connection logs.
+         *   +  ``health_check_logs.s3.enabled`` - Indicates whether health check logs are enabled. The value is ``true`` or ``false``. The default is ``false``.
+         *   +  ``health_check_logs.s3.bucket`` - The name of the S3 bucket for the health check logs. This attribute is required if health check logs are enabled. The bucket must exist in the same region as the load balancer and have a bucket policy that grants Elastic Load Balancing permissions to write to the bucket.
+         *   +  ``health_check_logs.s3.prefix`` - The prefix for the location in the S3 bucket for the health check logs.
          *   +  ``routing.http.desync_mitigation_mode`` - Determines how the load balancer handles requests that might pose a security risk to your application. The possible values are ``monitor``, ``defensive``, and ``strictest``. The default is ``defensive``.
          *   +  ``routing.http.drop_invalid_header_fields.enabled`` - Indicates whether HTTP headers with invalid header fields are removed by the load balancer (``true``) or routed to targets (``false``). The default is ``false``.
          *   +  ``routing.http.preserve_host_header.enabled`` - Indicates whether the Application Load Balancer should preserve the ``Host`` header in the HTTP request and send it to the target without any change. The possible values are ``true`` and ``false``. The default is ``false``.
@@ -35106,6 +35342,10 @@ export declare namespace entityresolution {
          */
         ruleName: pulumi.Input<string>;
     }
+    interface MatchingWorkflowCustomerProfilesIntegrationConfigArgs {
+        domainArn: pulumi.Input<string>;
+        objectTypeArn: pulumi.Input<string>;
+    }
     interface MatchingWorkflowIncrementalRunConfigArgs {
         /**
          * The type of incremental run. The only valid value is `IMMEDIATE` . This appears as "Automatic" in the console.
@@ -35149,6 +35389,7 @@ export declare namespace entityresolution {
          * Normalizes the attributes defined in the schema in the input data. For example, if an attribute has an `AttributeType` of `PHONE_NUMBER` , and the data in the input table is in a format of 1234567890, AWS Entity Resolution will normalize this field in the output to (123)-456-7890.
          */
         applyNormalization?: pulumi.Input<boolean>;
+        customerProfilesIntegrationConfig?: pulumi.Input<inputs.entityresolution.MatchingWorkflowCustomerProfilesIntegrationConfigArgs>;
         /**
          * Customer KMS ARN for encryption at rest. If not provided, system will use an AWS Entity Resolution managed KMS key.
          */
@@ -35160,7 +35401,7 @@ export declare namespace entityresolution {
         /**
          * The S3 path to which Entity Resolution will write the output table
          */
-        outputS3Path: pulumi.Input<string>;
+        outputS3Path?: pulumi.Input<string>;
     }
     interface MatchingWorkflowProviderPropertiesArgs {
         /**
@@ -38065,10 +38306,12 @@ export declare namespace gameliftstreams {
          * A location's name. For example, `us-east-1` . For a complete list of locations that Amazon GameLift Streams supports, refer to [Regions, quotas, and limitations](https://docs.aws.amazon.com/gameliftstreams/latest/developerguide/regions-quotas.html) in the *Amazon GameLift Streams Developer Guide* .
          */
         locationName: pulumi.Input<string>;
+        maximumCapacity?: pulumi.Input<number>;
         /**
-         * The streaming capacity that Amazon GameLift Streams can allocate in response to stream requests, and then de-allocate when the session has terminated. This offers a cost control measure at the expense of a greater startup time (typically under 5 minutes). Default is 0 when creating a stream group or adding a location.
+         * This shape is deprecated.
          */
         onDemandCapacity?: pulumi.Input<number>;
+        targetIdleCapacity?: pulumi.Input<number>;
     }
 }
 export declare namespace globalaccelerator {
@@ -39463,6 +39706,106 @@ export declare namespace groundstation {
          */
         port?: pulumi.Input<number>;
     }
+    /**
+     * Socket address of an uplink or downlink agent endpoint with an optional mtu.
+     */
+    interface DataflowEndpointGroupV2ConnectionDetailsArgs {
+        /**
+         * Maximum transmission unit (MTU) size in bytes of a dataflow endpoint.
+         */
+        mtu?: pulumi.Input<number>;
+        socketAddress: pulumi.Input<inputs.groundstation.DataflowEndpointGroupV2SocketAddressArgs>;
+    }
+    interface DataflowEndpointGroupV2CreateEndpointDetailsArgs {
+        downlinkAwsGroundStationAgentEndpoint?: pulumi.Input<inputs.groundstation.DataflowEndpointGroupV2DownlinkAwsGroundStationAgentEndpointArgs>;
+        uplinkAwsGroundStationAgentEndpoint?: pulumi.Input<inputs.groundstation.DataflowEndpointGroupV2UplinkAwsGroundStationAgentEndpointArgs>;
+    }
+    /**
+     * Information about DownlinkAwsGroundStationAgentEndpoint used for create
+     */
+    interface DataflowEndpointGroupV2DownlinkAwsGroundStationAgentEndpointArgs {
+        dataflowDetails: pulumi.Input<inputs.groundstation.DataflowEndpointGroupV2DownlinkDataflowDetailsArgs>;
+        name: pulumi.Input<string>;
+    }
+    /**
+     * Connection details for downlink, from ground station to agent, and customer to agent
+     */
+    interface DataflowEndpointGroupV2DownlinkConnectionDetailsArgs {
+        agentIpAndPortAddress: pulumi.Input<inputs.groundstation.DataflowEndpointGroupV2RangedConnectionDetailsArgs>;
+        egressAddressAndPort: pulumi.Input<inputs.groundstation.DataflowEndpointGroupV2ConnectionDetailsArgs>;
+    }
+    /**
+     * Dataflow details for downlink
+     */
+    interface DataflowEndpointGroupV2DownlinkDataflowDetailsArgs {
+        agentConnectionDetails?: pulumi.Input<inputs.groundstation.DataflowEndpointGroupV2DownlinkConnectionDetailsArgs>;
+    }
+    /**
+     * An integer range that has a minimum and maximum value.
+     */
+    interface DataflowEndpointGroupV2IntegerRangeArgs {
+        /**
+         * A maximum value.
+         */
+        maximum: pulumi.Input<number>;
+        /**
+         * A minimum value.
+         */
+        minimum: pulumi.Input<number>;
+    }
+    /**
+     * Socket address of an uplink or downlink agent endpoint with a port range and an optional mtu.
+     */
+    interface DataflowEndpointGroupV2RangedConnectionDetailsArgs {
+        /**
+         * Maximum transmission unit (MTU) size in bytes of a dataflow endpoint.
+         */
+        mtu?: pulumi.Input<number>;
+        socketAddress: pulumi.Input<inputs.groundstation.DataflowEndpointGroupV2RangedSocketAddressArgs>;
+    }
+    /**
+     * A socket address with a port range.
+     */
+    interface DataflowEndpointGroupV2RangedSocketAddressArgs {
+        /**
+         * IPv4 socket address.
+         */
+        name: pulumi.Input<string>;
+        /**
+         * Port range of a socket address.
+         */
+        portRange: pulumi.Input<inputs.groundstation.DataflowEndpointGroupV2IntegerRangeArgs>;
+    }
+    interface DataflowEndpointGroupV2SocketAddressArgs {
+        /**
+         * IPv4 socket address.
+         */
+        name: pulumi.Input<string>;
+        /**
+         * Port of a socket address.
+         */
+        port: pulumi.Input<number>;
+    }
+    /**
+     * Information about UplinkAwsGroundStationAgentEndpoint used for create
+     */
+    interface DataflowEndpointGroupV2UplinkAwsGroundStationAgentEndpointArgs {
+        dataflowDetails: pulumi.Input<inputs.groundstation.DataflowEndpointGroupV2UplinkDataflowDetailsArgs>;
+        name: pulumi.Input<string>;
+    }
+    /**
+     * Connection details for uplink, from ground station to agent, and customer to agent
+     */
+    interface DataflowEndpointGroupV2UplinkConnectionDetailsArgs {
+        agentIpAndPortAddress: pulumi.Input<inputs.groundstation.DataflowEndpointGroupV2RangedConnectionDetailsArgs>;
+        ingressAddressAndPort: pulumi.Input<inputs.groundstation.DataflowEndpointGroupV2ConnectionDetailsArgs>;
+    }
+    /**
+     * Dataflow details for uplink
+     */
+    interface DataflowEndpointGroupV2UplinkDataflowDetailsArgs {
+        agentConnectionDetails?: pulumi.Input<inputs.groundstation.DataflowEndpointGroupV2UplinkConnectionDetailsArgs>;
+    }
     interface MissionProfileDataflowEdgeArgs {
         /**
          * The ARN of the destination for this dataflow edge. For example, specify the ARN of a dataflow endpoint config for a downlink edge or an antenna uplink config for an uplink edge.
@@ -49200,6 +49543,9 @@ export declare namespace lambda {
          * The maximum number of EC2 instances that the capacity provider can scale up to.
          */
         maxVCpuCount?: pulumi.Input<number>;
+        /**
+         * The scaling mode that determines how the capacity provider responds to changes in demand.
+         */
         scalingMode?: pulumi.Input<enums.lambda.CapacityProviderScalingMode>;
         /**
          * A list of target tracking scaling policies for the capacity provider.
@@ -49210,6 +49556,9 @@ export declare namespace lambda {
      * A target tracking scaling policy for the capacity provider.
      */
     interface CapacityProviderTargetTrackingScalingPolicyArgs {
+        /**
+         * The predefined metric type to track for scaling decisions.
+         */
         predefinedMetricType: pulumi.Input<enums.lambda.CapacityProviderPredefinedMetricType>;
         /**
          * The target value for the metric as a percentage (for example, 70.0 for 70%).
@@ -49498,6 +49847,9 @@ export declare namespace lambda {
         uri?: pulumi.Input<string>;
     }
     interface FunctionCapacityProviderConfigArgs {
+        /**
+         * Configuration for Lambda-managed instances used by the capacity provider.
+         */
         lambdaManagedInstancesCapacityProviderConfig: pulumi.Input<inputs.lambda.FunctionLambdaManagedInstancesCapacityProviderConfigArgs>;
     }
     /**
@@ -51846,6 +52198,10 @@ export declare namespace logs {
          * Specify the service or process that produces the log events that will be converted with this processor.
          */
         eventSource: pulumi.Input<enums.logs.TransformerEventSource>;
+        /**
+         * The version of the OCSF mapping to use for parsing log data.
+         */
+        mappingVersion?: pulumi.Input<string>;
         /**
          * Specify which version of the OCSF schema to use for the transformed log events.
          */
@@ -55585,6 +55941,7 @@ export declare namespace msk {
         revision: pulumi.Input<number>;
     }
     interface ClusterConnectivityInfoArgs {
+        networkType?: pulumi.Input<enums.msk.ClusterNetworkType>;
         /**
          * Access control settings for the cluster's brokers.
          */
@@ -57333,6 +57690,9 @@ export declare namespace observabilityadmin {
          * A delimiter to delineate log fields
          */
         fieldDelimiter?: pulumi.Input<string>;
+        /**
+         * The format for ELB access log entries (plain text or JSON format).
+         */
         outputFormat?: pulumi.Input<enums.observabilityadmin.OrganizationTelemetryRuleElbLoadBalancerLoggingParametersOutputFormat>;
     }
     /**
@@ -57374,7 +57734,13 @@ export declare namespace observabilityadmin {
      * Default handling for logs that don't match any of the specified filtering conditions.
      */
     interface OrganizationTelemetryRuleLoggingFilterArgs {
+        /**
+         * The default action (KEEP or DROP) for log records that don't match any filter conditions.
+         */
         defaultBehavior?: pulumi.Input<enums.observabilityadmin.OrganizationTelemetryRuleFilterBehavior>;
+        /**
+         * A list of filter conditions that determine log record handling behavior.
+         */
         filters?: pulumi.Input<pulumi.Input<inputs.observabilityadmin.OrganizationTelemetryRuleFilterArgs>[]>;
     }
     /**
@@ -57390,6 +57756,9 @@ export declare namespace observabilityadmin {
      * The destination configuration for telemetry data
      */
     interface OrganizationTelemetryRuleTelemetryDestinationConfigurationArgs {
+        /**
+         * Configuration parameters specific to AWS CloudTrail when CloudTrail is the source type.
+         */
         cloudtrailParameters?: pulumi.Input<inputs.observabilityadmin.OrganizationTelemetryRuleCloudtrailParametersArgs>;
         /**
          * The pattern used to generate the destination path or name, supporting macros like <resourceId> and <accountId>.
@@ -57399,6 +57768,9 @@ export declare namespace observabilityadmin {
          * The type of destination for the telemetry data (e.g., "Amazon CloudWatch Logs", "S3").
          */
         destinationType?: pulumi.Input<enums.observabilityadmin.OrganizationTelemetryRuleDestinationType>;
+        /**
+         * Configuration parameters specific to ELB load balancer logging when ELB is the resource type.
+         */
         elbLoadBalancerLoggingParameters?: pulumi.Input<inputs.observabilityadmin.OrganizationTelemetryRuleElbLoadBalancerLoggingParametersArgs>;
         /**
          * The number of days to retain the telemetry data in the destination.
@@ -57408,6 +57780,9 @@ export declare namespace observabilityadmin {
          * Configuration parameters specific to VPC Flow Logs when VPC is the resource type.
          */
         vpcFlowLogParameters?: pulumi.Input<inputs.observabilityadmin.OrganizationTelemetryRuleVpcFlowLogParametersArgs>;
+        /**
+         * Configuration parameters specific to WAF logging when WAF is the resource type.
+         */
         wafLoggingParameters?: pulumi.Input<inputs.observabilityadmin.OrganizationTelemetryRuleWafLoggingParametersArgs>;
     }
     /**
@@ -57430,6 +57805,9 @@ export declare namespace observabilityadmin {
          * Criteria for selecting which resources the rule applies to, such as resource tags.
          */
         selectionCriteria?: pulumi.Input<string>;
+        /**
+         * The specific telemetry source types to configure for the resource, such as VPC_FLOW_LOGS or EKS_AUDIT_LOGS. TelemetrySourceTypes must be correlated with the specific resource type.
+         */
         telemetrySourceTypes?: pulumi.Input<pulumi.Input<enums.observabilityadmin.OrganizationTelemetryRuleTelemetrySourceType>[]>;
         /**
          * The type of telemetry to collect (Logs, Metrics, or Traces).
@@ -57457,7 +57835,13 @@ export declare namespace observabilityadmin {
      * Telemetry parameters for WAF v2 Web ACL
      */
     interface OrganizationTelemetryRuleWafLoggingParametersArgs {
+        /**
+         * The type of WAF logs to collect (currently supports WAF_LOGS).
+         */
         logType?: pulumi.Input<enums.observabilityadmin.OrganizationTelemetryRuleWafLogType>;
+        /**
+         * A filter configuration that determines which WAF log records to include or exclude.
+         */
         loggingFilter?: pulumi.Input<inputs.observabilityadmin.OrganizationTelemetryRuleLoggingFilterArgs>;
         /**
          * Fields not to be included in the logs.
@@ -57465,6 +57849,9 @@ export declare namespace observabilityadmin {
         redactedFields?: pulumi.Input<pulumi.Input<inputs.observabilityadmin.OrganizationTelemetryRuleFieldToMatchArgs>[]>;
     }
     interface TelemetryPipelinesTelemetryPipelineConfigurationArgs {
+        /**
+         * The pipeline configuration body that defines the data processing rules and transformations.
+         */
         body: pulumi.Input<string>;
     }
     /**
@@ -57483,6 +57870,9 @@ export declare namespace observabilityadmin {
          * Criteria for selecting which resources the rule applies to, such as resource tags.
          */
         selectionCriteria?: pulumi.Input<string>;
+        /**
+         * The specific telemetry source types to configure for the resource, such as VPC_FLOW_LOGS or EKS_AUDIT_LOGS. TelemetrySourceTypes must be correlated with the specific resource type.
+         */
         telemetrySourceTypes?: pulumi.Input<pulumi.Input<enums.observabilityadmin.TelemetryRuleTelemetrySourceType>[]>;
         /**
          * The type of telemetry to collect (Logs, Metrics, or Traces).
@@ -57565,6 +57955,9 @@ export declare namespace observabilityadmin {
          * A delimiter to delineate log fields
          */
         fieldDelimiter?: pulumi.Input<string>;
+        /**
+         * The format for ELB access log entries (plain text or JSON format).
+         */
         outputFormat?: pulumi.Input<enums.observabilityadmin.TelemetryRuleElbLoadBalancerLoggingParametersOutputFormat>;
     }
     /**
@@ -57606,7 +57999,13 @@ export declare namespace observabilityadmin {
      * Default handling for logs that don't match any of the specified filtering conditions.
      */
     interface TelemetryRuleLoggingFilterArgs {
+        /**
+         * The default action (KEEP or DROP) for log records that don't match any filter conditions.
+         */
         defaultBehavior?: pulumi.Input<enums.observabilityadmin.TelemetryRuleFilterBehavior>;
+        /**
+         * A list of filter conditions that determine log record handling behavior.
+         */
         filters?: pulumi.Input<pulumi.Input<inputs.observabilityadmin.TelemetryRuleFilterArgs>[]>;
     }
     /**
@@ -57622,6 +58021,9 @@ export declare namespace observabilityadmin {
      * The destination configuration for telemetry data
      */
     interface TelemetryRuleTelemetryDestinationConfigurationArgs {
+        /**
+         * Configuration parameters specific to AWS CloudTrail when CloudTrail is the source type.
+         */
         cloudtrailParameters?: pulumi.Input<inputs.observabilityadmin.TelemetryRuleCloudtrailParametersArgs>;
         /**
          * The pattern used to generate the destination path or name, supporting macros like <resourceId> and <accountId>.
@@ -57631,6 +58033,9 @@ export declare namespace observabilityadmin {
          * The type of destination for the telemetry data (e.g., "Amazon CloudWatch Logs", "S3").
          */
         destinationType?: pulumi.Input<enums.observabilityadmin.TelemetryRuleDestinationType>;
+        /**
+         * Configuration parameters specific to ELB load balancer logging when ELB is the resource type.
+         */
         elbLoadBalancerLoggingParameters?: pulumi.Input<inputs.observabilityadmin.TelemetryRuleElbLoadBalancerLoggingParametersArgs>;
         /**
          * Parameters for BedrockAgentCore log delivery
@@ -57644,6 +58049,9 @@ export declare namespace observabilityadmin {
          * Configuration parameters specific to VPC Flow Logs when VPC is the resource type.
          */
         vpcFlowLogParameters?: pulumi.Input<inputs.observabilityadmin.TelemetryRuleVpcFlowLogParametersArgs>;
+        /**
+         * Configuration parameters specific to WAF logging when WAF is the resource type.
+         */
         wafLoggingParameters?: pulumi.Input<inputs.observabilityadmin.TelemetryRuleWafLoggingParametersArgs>;
     }
     /**
@@ -57676,7 +58084,13 @@ export declare namespace observabilityadmin {
      * Telemetry parameters for WAF v2 Web ACL
      */
     interface TelemetryRuleWafLoggingParametersArgs {
+        /**
+         * The type of WAF logs to collect (currently supports WAF_LOGS).
+         */
         logType?: pulumi.Input<enums.observabilityadmin.TelemetryRuleWafLogType>;
+        /**
+         * A filter configuration that determines which WAF log records to include or exclude.
+         */
         loggingFilter?: pulumi.Input<inputs.observabilityadmin.TelemetryRuleLoggingFilterArgs>;
         /**
          * Fields not to be included in the logs.
@@ -58086,6 +58500,19 @@ export declare namespace omics {
     }
 }
 export declare namespace opensearchserverless {
+    /**
+     * The configuration to encrypt the collection
+     */
+    interface CollectionEncryptionConfigArgs {
+        /**
+         * The configuration to encrypt the collection with AWS owned key
+         */
+        awsOwnedKey?: pulumi.Input<boolean>;
+        /**
+         * The ARN of the KMS key to encrypt the collection with
+         */
+        kmsKeyArn?: pulumi.Input<string>;
+    }
     interface IndexPropertyMappingArgs {
         /**
          * Dimension size for vector fields, defines the number of dimensions in the vector
@@ -91848,11 +92275,19 @@ export declare namespace s3 {
          */
         tagFilters?: pulumi.Input<pulumi.Input<inputs.s3.BucketTagFilterArgs>[]>;
     }
+    /**
+     * A bucket-level setting for Amazon S3 general purpose buckets used to prevent the upload of new objects encrypted with the specified server-side encryption type. For example, blocking an encryption type will block ``PutObject``, ``CopyObject``, ``PostObject``, multipart upload, and replication requests to the bucket for objects with the specified encryption type. However, you can continue to read and list any pre-existing objects already encrypted with the specified encryption type. For more information, see [Blocking or unblocking SSE-C for a general purpose bucket](https://docs.aws.amazon.com/AmazonS3/latest/userguide/blocking-unblocking-s3-c-encryption-gpb.html).
+     *  This data type is used with the following actions:
+     *   +   [PutBucketEncryption](https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketEncryption.html)
+     *   +   [GetBucketEncryption](https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketEncryption.html)
+     *   +   [DeleteBucketEncryption](https://docs.aws.amazon.com/AmazonS3/latest/API/API_DeleteBucketEncryption.html)
+     *
+     *   + Permissions You must have the s3:PutEncryptionConfiguration permission to block or unblock an encryption type for a bucket. You must have the s3:GetEncryptionConfiguration permission to view a bucket's encryption type.
+     */
     interface BucketBlockedEncryptionTypesArgs {
         /**
          * The object encryption type that you want to block or unblock for an Amazon S3 general purpose bucket.
-         *
-         * > Currently, this parameter only supports blocking or unblocking server side encryption with customer-provided keys (SSE-C). For more information about SSE-C, see [Using server-side encryption with customer-provided keys (SSE-C)](https://docs.aws.amazon.com/AmazonS3/latest/userguide/ServerSideEncryptionCustomerKeys.html) .
+         *   Currently, this parameter only supports blocking or unblocking server side encryption with customer-provided keys (SSE-C). For more information about SSE-C, see [Using server-side encryption with customer-provided keys (SSE-C)](https://docs.aws.amazon.com/AmazonS3/latest/userguide/ServerSideEncryptionCustomerKeys.html).
          */
         encryptionType?: pulumi.Input<pulumi.Input<enums.s3.BucketBlockedEncryptionTypeListItem>[]>;
     }
@@ -92357,7 +92792,7 @@ export declare namespace s3 {
         objectOwnership?: pulumi.Input<enums.s3.BucketOwnershipControlsRuleObjectOwnership>;
     }
     /**
-     * The PublicAccessBlock configuration that you want to apply to this Amazon S3 bucket. You can enable the configuration options in any combination. For more information about when Amazon S3 considers a bucket or object public, see [The Meaning of "Public"](https://docs.aws.amazon.com/AmazonS3/latest/dev/access-control-block-public-access.html#access-control-block-public-access-policy-status) in the *Amazon S3 User Guide*.
+     * The PublicAccessBlock configuration that you want to apply to this Amazon S3 bucket. You can enable the configuration options in any combination. Bucket-level settings work alongside account-level settings (which may inherit from organization-level policies). For more information about when Amazon S3 considers a bucket or object public, see [The Meaning of "Public"](https://docs.aws.amazon.com/AmazonS3/latest/dev/access-control-block-public-access.html#access-control-block-public-access-policy-status) in the *Amazon S3 User Guide*.
      */
     interface BucketPublicAccessBlockConfigurationArgs {
         /**
@@ -92783,9 +93218,8 @@ export declare namespace s3 {
      */
     interface BucketServerSideEncryptionRuleArgs {
         /**
-         * A bucket-level setting for Amazon S3 general purpose buckets used to prevent the upload of new objects encrypted with the specified server-side encryption type. For example, blocking an encryption type will block `PutObject` , `CopyObject` , `PostObject` , multipart upload, and replication requests to the bucket for objects with the specified encryption type. However, you can continue to read and list any pre-existing objects already encrypted with the specified encryption type. For more information, see [Blocking or unblocking SSE-C for a general purpose bucket](https://docs.aws.amazon.com/AmazonS3/latest/userguide/blocking-unblocking-s3-c-encryption-gpb.html) .
-         *
-         * > Currently, this parameter only supports blocking or unblocking server-side encryption with customer-provided keys (SSE-C). For more information about SSE-C, see [Using server-side encryption with customer-provided keys (SSE-C)](https://docs.aws.amazon.com/AmazonS3/latest/userguide/ServerSideEncryptionCustomerKeys.html) .
+         * A bucket-level setting for Amazon S3 general purpose buckets used to prevent the upload of new objects encrypted with the specified server-side encryption type. For example, blocking an encryption type will block ``PutObject``, ``CopyObject``, ``PostObject``, multipart upload, and replication requests to the bucket for objects with the specified encryption type. However, you can continue to read and list any pre-existing objects already encrypted with the specified encryption type. For more information, see [Blocking or unblocking SSE-C for a general purpose bucket](https://docs.aws.amazon.com/AmazonS3/latest/userguide/blocking-unblocking-s3-c-encryption-gpb.html).
+         *   Currently, this parameter only supports blocking or unblocking server-side encryption with customer-provided keys (SSE-C). For more information about SSE-C, see [Using server-side encryption with customer-provided keys (SSE-C)](https://docs.aws.amazon.com/AmazonS3/latest/userguide/ServerSideEncryptionCustomerKeys.html).
          */
         blockedEncryptionTypes?: pulumi.Input<inputs.s3.BucketBlockedEncryptionTypesArgs>;
         /**
@@ -93139,6 +93573,7 @@ export declare namespace s3 {
          * This property contains the details of the bucket where the S3 Storage Lens metrics export will be placed.
          */
         s3BucketDestination?: pulumi.Input<inputs.s3.StorageLensS3BucketDestinationArgs>;
+        storageLensTableDestination?: pulumi.Input<inputs.s3.StorageLensTableDestinationArgs>;
     }
     /**
      * Enables detailed status codes metrics.
@@ -93159,6 +93594,7 @@ export declare namespace s3 {
      */
     interface StorageLensExpandedPrefixesDataExportArgs {
         s3BucketDestination?: pulumi.Input<inputs.s3.StorageLensS3BucketDestinationArgs>;
+        storageLensTableDestination?: pulumi.Input<inputs.s3.StorageLensTableDestinationArgs>;
     }
     /**
      * The Storage Lens group will include objects that match all of the specified filter values.
@@ -93360,6 +93796,16 @@ export declare namespace s3 {
          */
         minStorageBytesPercentage?: pulumi.Input<number>;
     }
+    /**
+     * S3 Tables destination settings for the Amazon S3 Storage Lens metrics export.
+     */
+    interface StorageLensTableDestinationArgs {
+        encryption?: pulumi.Input<inputs.s3.StorageLensEncryptionArgs>;
+        /**
+         * Specifies whether the export to S3 Tables is enabled or disabled.
+         */
+        isEnabled: pulumi.Input<boolean>;
+    }
 }
 export declare namespace s3express {
     interface AccessPointPublicAccessBlockConfigurationArgs {
@@ -93769,6 +94215,19 @@ export declare namespace s3tables {
     }
 }
 export declare namespace s3vectors {
+    /**
+     * The encryption configuration for the index.
+     */
+    interface IndexEncryptionConfigurationArgs {
+        /**
+         * AWS Key Management Service (KMS) customer managed key ID to use for the encryption configuration. This parameter is allowed if and only if sseType is set to aws:kms
+         */
+        kmsKeyArn?: pulumi.Input<string>;
+        /**
+         * Defines the server-side encryption type for index encryption configuration. Defaults to the parent vector bucket's encryption settings when unspecified.
+         */
+        sseType?: pulumi.Input<enums.s3vectors.IndexEncryptionConfigurationSseType>;
+    }
     /**
      * The metadata configuration for the vector index.
      */
@@ -93993,6 +94452,10 @@ export declare namespace sagemaker {
         instanceType: pulumi.Input<string>;
         kubernetesConfig?: pulumi.Input<inputs.sagemaker.ClusterKubernetesConfigArgs>;
         lifeCycleConfig: pulumi.Input<inputs.sagemaker.ClusterLifeCycleConfigArgs>;
+        /**
+         * The minimum number of instances required for the instance group to be InService. MinInstanceCount must be less than or equal to InstanceCount.
+         */
+        minInstanceCount?: pulumi.Input<number>;
         onStartDeepHealthChecks?: pulumi.Input<pulumi.Input<enums.sagemaker.ClusterDeepHealthCheckType>[]>;
         overrideVpcConfig?: pulumi.Input<inputs.sagemaker.ClusterVpcConfigArgs>;
         scheduledUpdateConfig?: pulumi.Input<inputs.sagemaker.ClusterScheduledUpdateConfigArgs>;
@@ -99367,13 +99830,13 @@ export declare namespace securityhub {
         /**
          * A timestamp that provides the end date for the date filter.
          *
-         * For more information about the validation and formatting of timestamp fields in Security Hub , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) .
+         * For more information about the validation and formatting of timestamp fields in AWS Security Hub CSPM , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) .
          */
         end?: pulumi.Input<string>;
         /**
          * A timestamp that provides the start date for the date filter.
          *
-         * For more information about the validation and formatting of timestamp fields in Security Hub , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) .
+         * For more information about the validation and formatting of timestamp fields in AWS Security Hub CSPM , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) .
          */
         start?: pulumi.Input<string>;
     }
@@ -100336,13 +100799,13 @@ export declare namespace securityhub {
         /**
          * A timestamp that provides the end date for the date filter.
          *
-         * For more information about the validation and formatting of timestamp fields in Security Hub , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) .
+         * For more information about the validation and formatting of timestamp fields in AWS Security Hub CSPM , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) .
          */
         end?: pulumi.Input<string>;
         /**
          * A timestamp that provides the start date for the date filter.
          *
-         * For more information about the validation and formatting of timestamp fields in Security Hub , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) .
+         * For more information about the validation and formatting of timestamp fields in AWS Security Hub CSPM , see [Timestamps](https://docs.aws.amazon.com/securityhub/1.0/APIReference/Welcome.html#timestamps) .
          */
         start?: pulumi.Input<string>;
     }
@@ -100416,7 +100879,7 @@ export declare namespace securityhub {
      */
     interface InsightStringFilterArgs {
         /**
-         * The condition to apply to a string value when filtering Security Hub findings.
+         * The condition to apply to a string value when filtering Security Hub CSPM findings.
          *
          * To search for values that have the filter value, use one of the following comparison operators:
          *
@@ -100436,20 +100899,20 @@ export declare namespace securityhub {
          *
          * You can’t have both a `CONTAINS` filter and a `NOT_CONTAINS` filter on the same field. Similarly, you can't provide both an `EQUALS` filter and a `NOT_EQUALS` or `PREFIX_NOT_EQUALS` filter on the same field. Combining filters in this way returns an error. `CONTAINS` filters can only be used with other `CONTAINS` filters. `NOT_CONTAINS` filters can only be used with other `NOT_CONTAINS` filters.
          *
-         * You can combine `PREFIX` filters with `NOT_EQUALS` or `PREFIX_NOT_EQUALS` filters for the same field. Security Hub first processes the `PREFIX` filters, and then the `NOT_EQUALS` or `PREFIX_NOT_EQUALS` filters.
+         * You can combine `PREFIX` filters with `NOT_EQUALS` or `PREFIX_NOT_EQUALS` filters for the same field. Security Hub CSPM first processes the `PREFIX` filters, and then the `NOT_EQUALS` or `PREFIX_NOT_EQUALS` filters.
          *
-         * For example, for the following filters, Security Hub first identifies findings that have resource types that start with either `AwsIam` or `AwsEc2` . It then excludes findings that have a resource type of `AwsIamPolicy` and findings that have a resource type of `AwsEc2NetworkInterface` .
+         * For example, for the following filters, Security Hub CSPM first identifies findings that have resource types that start with either `AwsIam` or `AwsEc2` . It then excludes findings that have a resource type of `AwsIamPolicy` and findings that have a resource type of `AwsEc2NetworkInterface` .
          *
          * - `ResourceType PREFIX AwsIam`
          * - `ResourceType PREFIX AwsEc2`
          * - `ResourceType NOT_EQUALS AwsIamPolicy`
          * - `ResourceType NOT_EQUALS AwsEc2NetworkInterface`
          *
-         * `CONTAINS` and `NOT_CONTAINS` operators can be used only with automation rules V1. `CONTAINS_WORD` operator is only supported in `GetFindingsV2` , `GetFindingStatisticsV2` , `GetResourcesV2` , and `GetResourceStatisticsV2` APIs. For more information, see [Automation rules](https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules.html) in the *Security Hub User Guide* .
+         * `CONTAINS` and `NOT_CONTAINS` operators can be used only with automation rules V1. `CONTAINS_WORD` operator is only supported in `GetFindingsV2` , `GetFindingStatisticsV2` , `GetResourcesV2` , and `GetResourceStatisticsV2` APIs. For more information, see [Automation rules](https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules.html) in the *AWS Security Hub CSPM User Guide* .
          */
         comparison: pulumi.Input<enums.securityhub.InsightStringFilterComparison>;
         /**
-         * The string filter value. Filter values are case sensitive. For example, the product name for control-based findings is `Security Hub` . If you provide `security hub` as the filter value, there's no match.
+         * The string filter value. Filter values are case sensitive. For example, the product name for control-based findings is `Security Hub CSPM` . If you provide `security hub` as the filter value, there's no match.
          */
         value: pulumi.Input<string>;
     }
@@ -100459,9 +100922,9 @@ export declare namespace securityhub {
          */
         value?: pulumi.Input<inputs.securityhub.SecurityControlParameterValueArgs>;
         /**
-         * Identifies whether a control parameter uses a custom user-defined value or subscribes to the default Security Hub behavior.
+         * Identifies whether a control parameter uses a custom user-defined value or subscribes to the default AWS Security Hub CSPM behavior.
          *
-         * When `ValueType` is set equal to `DEFAULT` , the default behavior can be a specific Security Hub default value, or the default behavior can be to ignore a specific parameter. When `ValueType` is set equal to `DEFAULT` , Security Hub ignores user-provided input for the `Value` field.
+         * When `ValueType` is set equal to `DEFAULT` , the default behavior can be a specific Security Hub CSPM default value, or the default behavior can be to ignore a specific parameter. When `ValueType` is set equal to `DEFAULT` , Security Hub CSPM ignores user-provided input for the `Value` field.
          *
          * When `ValueType` is set equal to `CUSTOM` , the `Value` field can't be empty.
          */
@@ -101385,6 +101848,15 @@ export declare namespace ses {
          */
         textPart?: pulumi.Input<string>;
     }
+    /**
+     * The resource to associate with the tenant
+     */
+    interface TenantResourceAssociationArgs {
+        /**
+         * The ARN of the resource to associate with the tenant
+         */
+        resourceArn: pulumi.Input<string>;
+    }
     /**
      * Preferences regarding the Dashboard feature.
      */
@@ -101731,6 +102203,179 @@ export declare namespace ssm {
          */
         version?: pulumi.Input<string>;
     }
+    interface MaintenanceWindowTargetTargetsArgs {
+        /**
+         * User-defined criteria for sending commands that target managed nodes that meet the criteria.
+         */
+        key: pulumi.Input<string>;
+        /**
+         * User-defined criteria that maps to Key.
+         */
+        values: pulumi.Input<pulumi.Input<string>[]>;
+    }
+    interface MaintenanceWindowTaskCloudWatchOutputConfigArgs {
+        /**
+         * The name of the CloudWatch log group where you want to send command output.
+         */
+        cloudWatchLogGroupName?: pulumi.Input<string>;
+        /**
+         * Enables Systems Manager to send command output to CloudWatch Logs.
+         */
+        cloudWatchOutputEnabled?: pulumi.Input<boolean>;
+    }
+    interface MaintenanceWindowTaskLoggingInfoArgs {
+        /**
+         * The AWS Region where the S3 bucket is located.
+         */
+        region: pulumi.Input<string>;
+        /**
+         * The name of an S3 bucket where execution logs are stored.
+         */
+        s3Bucket: pulumi.Input<string>;
+        /**
+         * The Amazon S3 bucket subfolder.
+         */
+        s3Prefix?: pulumi.Input<string>;
+    }
+    interface MaintenanceWindowTaskMaintenanceWindowAutomationParametersArgs {
+        /**
+         * The version of an Automation runbook to use during task execution.
+         */
+        documentVersion?: pulumi.Input<string>;
+        /**
+         * The parameters for the `AUTOMATION` type task.
+         */
+        parameters?: any;
+    }
+    interface MaintenanceWindowTaskMaintenanceWindowLambdaParametersArgs {
+        /**
+         * Client-specific information to pass to the AWS Lambda function that you're invoking. You can then use the `context` variable to process the client information in your AWS Lambda function.
+         */
+        clientContext?: pulumi.Input<string>;
+        /**
+         * JSON to provide to your AWS Lambda function as input.
+         *
+         * > Although `Type` is listed as "String" for this property, the payload content must be formatted as a Base64-encoded binary data object.
+         *
+         * *Length Constraint:* 4096
+         */
+        payload?: pulumi.Input<string>;
+        /**
+         * An AWS Lambda function version or alias name. If you specify a function version, the action uses the qualified function Amazon Resource Name (ARN) to invoke a specific Lambda function. If you specify an alias name, the action uses the alias ARN to invoke the Lambda function version that the alias points to.
+         */
+        qualifier?: pulumi.Input<string>;
+    }
+    interface MaintenanceWindowTaskMaintenanceWindowRunCommandParametersArgs {
+        /**
+         * Configuration options for sending command output to Amazon CloudWatch Logs.
+         */
+        cloudWatchOutputConfig?: pulumi.Input<inputs.ssm.MaintenanceWindowTaskCloudWatchOutputConfigArgs>;
+        /**
+         * Information about the command or commands to run.
+         */
+        comment?: pulumi.Input<string>;
+        /**
+         * The SHA-256 or SHA-1 hash created by the system when the document was created. SHA-1 hashes have been deprecated.
+         */
+        documentHash?: pulumi.Input<string>;
+        /**
+         * The SHA-256 or SHA-1 hash type. SHA-1 hashes are deprecated.
+         */
+        documentHashType?: pulumi.Input<string>;
+        /**
+         * The AWS Systems Manager document (SSM document) version to use in the request. You can specify `$DEFAULT` , `$LATEST` , or a specific version number. If you run commands by using the AWS CLI, then you must escape the first two options by using a backslash. If you specify a version number, then you don't need to use the backslash. For example:
+         *
+         * `--document-version "\$DEFAULT"`
+         *
+         * `--document-version "\$LATEST"`
+         *
+         * `--document-version "3"`
+         */
+        documentVersion?: pulumi.Input<string>;
+        /**
+         * Configurations for sending notifications about command status changes on a per-managed node basis.
+         */
+        notificationConfig?: pulumi.Input<inputs.ssm.MaintenanceWindowTaskNotificationConfigArgs>;
+        /**
+         * The name of the Amazon Simple Storage Service (Amazon S3) bucket.
+         */
+        outputS3BucketName?: pulumi.Input<string>;
+        /**
+         * The S3 bucket subfolder.
+         */
+        outputS3KeyPrefix?: pulumi.Input<string>;
+        /**
+         * The parameters for the `RUN_COMMAND` task execution.
+         *
+         * The supported parameters are the same as those for the `SendCommand` API call. For more information, see [SendCommand](https://docs.aws.amazon.com/systems-manager/latest/APIReference/API_SendCommand.html) in the *AWS Systems Manager API Reference* .
+         */
+        parameters?: any;
+        /**
+         * The Amazon Resource Name (ARN) of the IAM service role for AWS Systems Manager to assume when running a maintenance window task. If you do not specify a service role ARN, Systems Manager uses a service-linked role in your account. If no appropriate service-linked role for Systems Manager exists in your account, it is created when you run `RegisterTaskWithMaintenanceWindow` .
+         *
+         * However, for an improved security posture, we strongly recommend creating a custom policy and custom service role for running your maintenance window tasks. The policy can be crafted to provide only the permissions needed for your particular maintenance window tasks. For more information, see [Setting up Maintenance Windows](https://docs.aws.amazon.com/systems-manager/latest/userguide/sysman-maintenance-permissions.html) in the in the *AWS Systems Manager User Guide* .
+         */
+        serviceRoleArn?: pulumi.Input<string>;
+        /**
+         * If this time is reached and the command hasn't already started running, it doesn't run.
+         */
+        timeoutSeconds?: pulumi.Input<number>;
+    }
+    interface MaintenanceWindowTaskMaintenanceWindowStepFunctionsParametersArgs {
+        /**
+         * The inputs for the `STEP_FUNCTIONS` task.
+         */
+        input?: pulumi.Input<string>;
+        /**
+         * The name of the `STEP_FUNCTIONS` task.
+         */
+        name?: pulumi.Input<string>;
+    }
+    interface MaintenanceWindowTaskNotificationConfigArgs {
+        /**
+         * An Amazon Resource Name (ARN) for an Amazon Simple Notification Service (Amazon SNS) topic. Run Command pushes notifications about command status changes to this topic.
+         */
+        notificationArn: pulumi.Input<string>;
+        /**
+         * The different events that you can receive notifications for. These events include the following: `All` (events), `InProgress` , `Success` , `TimedOut` , `Cancelled` , `Failed` . To learn more about these events, see [Configuring Amazon SNS Notifications for AWS Systems Manager](https://docs.aws.amazon.com/systems-manager/latest/userguide/monitoring-sns-notifications.html) in the *AWS Systems Manager User Guide* .
+         */
+        notificationEvents?: pulumi.Input<pulumi.Input<string>[]>;
+        /**
+         * The notification type.
+         *
+         * - `Command` : Receive notification when the status of a command changes.
+         * - `Invocation` : For commands sent to multiple instances, receive notification on a per-instance basis when the status of a command changes.
+         */
+        notificationType?: pulumi.Input<string>;
+    }
+    interface MaintenanceWindowTaskTargetArgs {
+        /**
+         * User-defined criteria for sending commands that target instances that meet the criteria. `Key` can be `InstanceIds` or `WindowTargetIds` . For more information about how to target instances within a maintenance window task, see [About 'register-task-with-maintenance-window' Options and Values](https://docs.aws.amazon.com/systems-manager/latest/userguide/register-tasks-options.html) in the *AWS Systems Manager User Guide* .
+         */
+        key: pulumi.Input<string>;
+        /**
+         * User-defined criteria that maps to `Key` . For example, if you specify `InstanceIds` , you can specify `i-1234567890abcdef0,i-9876543210abcdef0` to run a command on two EC2 instances. For more information about how to target instances within a maintenance window task, see [About 'register-task-with-maintenance-window' Options and Values](https://docs.aws.amazon.com/systems-manager/latest/userguide/register-tasks-options.html) in the *AWS Systems Manager User Guide* .
+         */
+        values: pulumi.Input<pulumi.Input<string>[]>;
+    }
+    interface MaintenanceWindowTaskTaskInvocationParametersArgs {
+        /**
+         * The parameters for an `AUTOMATION` task type.
+         */
+        maintenanceWindowAutomationParameters?: pulumi.Input<inputs.ssm.MaintenanceWindowTaskMaintenanceWindowAutomationParametersArgs>;
+        /**
+         * The parameters for a `LAMBDA` task type.
+         */
+        maintenanceWindowLambdaParameters?: pulumi.Input<inputs.ssm.MaintenanceWindowTaskMaintenanceWindowLambdaParametersArgs>;
+        /**
+         * The parameters for a `RUN_COMMAND` task type.
+         */
+        maintenanceWindowRunCommandParameters?: pulumi.Input<inputs.ssm.MaintenanceWindowTaskMaintenanceWindowRunCommandParametersArgs>;
+        /**
+         * The parameters for a `STEP_FUNCTIONS` task type.
+         */
+        maintenanceWindowStepFunctionsParameters?: pulumi.Input<inputs.ssm.MaintenanceWindowTaskMaintenanceWindowStepFunctionsParametersArgs>;
+    }
     /**
      * Defines which patches should be included in a patch baseline.
      */
@@ -108603,6 +109248,46 @@ export declare namespace workspacesweb {
     }
     interface SessionLoggerUnitArgs {
     }
+    interface UserSettingsBrandingConfigurationArgs {
+        /**
+         * The color theme for components on the web portal. Choose `Light` if you upload a dark wallpaper, or `Dark` for a light wallpaper.
+         */
+        colorTheme?: pulumi.Input<enums.workspacesweb.UserSettingsColorTheme>;
+        /**
+         * The favicon image for the portal. Provide either a binary image file or an S3 URI pointing to the image file. Maximum 100 KB in JPEG, PNG, or ICO format.
+         */
+        favicon?: pulumi.Input<string>;
+        /**
+         * Read-only. Metadata for the favicon image file, including the MIME type, file extension, and upload timestamp. This property is automatically populated by the service and cannot be specified in your template. It can be retrieved using the `Fn::GetAtt` intrinsic function.
+         */
+        faviconMetadata?: pulumi.Input<inputs.workspacesweb.UserSettingsImageMetadataArgs>;
+        /**
+         * A map of localized text strings for different languages, allowing the portal to display content in the user's preferred language.
+         */
+        localizedStrings?: pulumi.Input<{
+            [key: string]: pulumi.Input<inputs.workspacesweb.UserSettingsLocalizedBrandingStringsArgs>;
+        }>;
+        /**
+         * The logo image for the portal. Provide either a binary image file or an S3 URI pointing to the image file. Maximum 100 KB in JPEG, PNG, or ICO format.
+         */
+        logo?: pulumi.Input<string>;
+        /**
+         * Read-only. Metadata for the logo image file, including the MIME type, file extension, and upload timestamp. This property is automatically populated by the service and cannot be specified in your template. It can be retrieved using the `Fn::GetAtt` intrinsic function.
+         */
+        logoMetadata?: pulumi.Input<inputs.workspacesweb.UserSettingsImageMetadataArgs>;
+        /**
+         * The terms of service text in Markdown format that users must accept before accessing the portal.
+         */
+        termsOfService?: pulumi.Input<string>;
+        /**
+         * The wallpaper image for the portal. Provide either a binary image file or an S3 URI pointing to the image file. Maximum 5 MB in JPEG or PNG format.
+         */
+        wallpaper?: pulumi.Input<string>;
+        /**
+         * Read-only. Metadata for the wallpaper image file, including the MIME type, file extension, and upload timestamp. This property is automatically populated by the service and cannot be specified in your template. It can be retrieved using the `Fn::GetAtt` intrinsic function.
+         */
+        wallpaperMetadata?: pulumi.Input<inputs.workspacesweb.UserSettingsImageMetadataArgs>;
+    }
     interface UserSettingsCookieSpecificationArgs {
         /**
          * The domain of the cookie.
@@ -108627,6 +109312,54 @@ export declare namespace workspacesweb {
          */
         blocklist?: pulumi.Input<pulumi.Input<inputs.workspacesweb.UserSettingsCookieSpecificationArgs>[]>;
     }
+    interface UserSettingsImageMetadataArgs {
+        /**
+         * The file extension of the image.
+         */
+        fileExtension: pulumi.Input<string>;
+        /**
+         * The timestamp when the image was last uploaded.
+         */
+        lastUploadTimestamp: pulumi.Input<string>;
+        /**
+         * The MIME type of the image.
+         */
+        mimeType: pulumi.Input<enums.workspacesweb.UserSettingsMimeType>;
+    }
+    interface UserSettingsLocalizedBrandingStringsArgs {
+        /**
+         * The text displayed in the browser tab title.
+         */
+        browserTabTitle: pulumi.Input<string>;
+        /**
+         * The text displayed on the contact button. This field is optional and defaults to "Contact us".
+         */
+        contactButtonText?: pulumi.Input<string>;
+        /**
+         * A contact link URL. The URL must start with `https://` or `mailto:` . If not provided, the contact button will be hidden from the web portal screen.
+         */
+        contactLink?: pulumi.Input<string>;
+        /**
+         * The text displayed during session loading. This field is optional and defaults to "Loading your session".
+         */
+        loadingText?: pulumi.Input<string>;
+        /**
+         * The text displayed on the login button. This field is optional and defaults to "Sign In".
+         */
+        loginButtonText?: pulumi.Input<string>;
+        /**
+         * The description text for the login section. This field is optional and defaults to "Sign in to your session".
+         */
+        loginDescription?: pulumi.Input<string>;
+        /**
+         * The title text for the login section. This field is optional and defaults to "Sign In".
+         */
+        loginTitle?: pulumi.Input<string>;
+        /**
+         * The welcome text displayed on the sign-in page.
+         */
+        welcomeText: pulumi.Input<string>;
+    }
     interface UserSettingsToolbarConfigurationArgs {
         /**
          * The list of toolbar items to be hidden.