@pulumi/aws-native 1.70.0-alpha.1782284201 → 1.70.0

package/types/input.d.ts

@@ -11999,6 +11999,12 @@ export declare namespace bedrock {
          */
         generativeField?: pulumi.Input<inputs.bedrock.DataAutomationProjectVideoStandardGenerativeFieldArgs>;
     }
+    /**
+     * Configuration for audio extraction.
+     */
+    interface DataSourceAudioExtractionConfigurationArgs {
+        audioExtractionStatus: pulumi.Input<enums.bedrock.DataSourceEnabledOrDisabledState>;
+    }
     /**
      * Settings for a Bedrock Data Automation used to parse documents for a data source.
      */
@@ -12074,6 +12080,7 @@ export declare namespace bedrock {
          * > Confluence data source connector is in preview release and is subject to change.
          */
         confluenceConfiguration?: pulumi.Input<inputs.bedrock.DataSourceConfluenceDataSourceConfigurationArgs>;
+        managedKnowledgeBaseConnectorConfiguration?: pulumi.Input<inputs.bedrock.DataSourceManagedKnowledgeBaseConnectorConfigurationArgs>;
         /**
          * The configuration information to connect to Amazon S3 as your data source.
          */
@@ -12183,6 +12190,16 @@ export declare namespace bedrock {
          */
         transformations: pulumi.Input<pulumi.Input<inputs.bedrock.DataSourceTransformationArgs>[]>;
     }
+    /**
+     * Configuration for deletion protection.
+     */
+    interface DataSourceDeletionProtectionConfigurationArgs {
+        deletionProtectionStatus: pulumi.Input<enums.bedrock.DataSourceEnabledOrDisabledState>;
+        /**
+         * Threshold for deletion protection.
+         */
+        deletionProtectionThreshold?: pulumi.Input<number>;
+    }
     /**
      * Strategy to be used when using Bedrock Foundation Model for Context Enrichment.
      */
@@ -12227,6 +12244,12 @@ export declare namespace bedrock {
          */
         maxTokens: pulumi.Input<number>;
     }
+    /**
+     * Configuration for image extraction.
+     */
+    interface DataSourceImageExtractionConfigurationArgs {
+        imageExtractionStatus: pulumi.Input<enums.bedrock.DataSourceEnabledOrDisabledState>;
+    }
     /**
      * A location for storing content from data sources temporarily as it is processed by custom components in the ingestion pipeline.
      */
@@ -12236,6 +12259,25 @@ export declare namespace bedrock {
          */
         s3Location: pulumi.Input<inputs.bedrock.DataSourceS3LocationArgs>;
     }
+    /**
+     * Configuration for managed knowledge base connector data sources.
+     */
+    interface DataSourceManagedKnowledgeBaseConnectorConfigurationArgs {
+        /**
+         * Connector-specific parameters.
+         */
+        connectorParameters?: any;
+        deletionProtectionConfiguration?: pulumi.Input<inputs.bedrock.DataSourceDeletionProtectionConfigurationArgs>;
+        mediaExtractionConfiguration?: pulumi.Input<inputs.bedrock.DataSourceMediaExtractionConfigurationArgs>;
+    }
+    /**
+     * Configuration for media extraction settings.
+     */
+    interface DataSourceMediaExtractionConfigurationArgs {
+        audioExtractionConfiguration?: pulumi.Input<inputs.bedrock.DataSourceAudioExtractionConfigurationArgs>;
+        imageExtractionConfiguration?: pulumi.Input<inputs.bedrock.DataSourceImageExtractionConfigurationArgs>;
+        videoExtractionConfiguration?: pulumi.Input<inputs.bedrock.DataSourceVideoExtractionConfigurationArgs>;
+    }
     /**
      * Settings for parsing document contents
      */
@@ -12494,6 +12536,12 @@ export declare namespace bedrock {
          */
         parsingConfiguration?: pulumi.Input<inputs.bedrock.DataSourceParsingConfigurationArgs>;
     }
+    /**
+     * Configuration for video extraction.
+     */
+    interface DataSourceVideoExtractionConfigurationArgs {
+        videoExtractionStatus: pulumi.Input<enums.bedrock.DataSourceEnabledOrDisabledState>;
+    }
     /**
      * Configuration for the web crawler.
      */
@@ -13717,6 +13765,7 @@ export declare namespace bedrock {
          * Settings for an Amazon Kendra knowledge base.
          */
         kendraKnowledgeBaseConfiguration?: pulumi.Input<inputs.bedrock.KnowledgeBaseKendraKnowledgeBaseConfigurationArgs>;
+        managedKnowledgeBaseConfiguration?: pulumi.Input<inputs.bedrock.KnowledgeBaseManagedKnowledgeBaseConfigurationArgs>;
         /**
          * Specifies configurations for a knowledge base connected to an SQL database.
          */
@@ -13755,6 +13804,27 @@ export declare namespace bedrock {
          */
         kendraIndexArn: pulumi.Input<string>;
     }
+    /**
+     * Contains details about the model used to create vector embeddings for a managed knowledge base.
+     */
+    interface KnowledgeBaseManagedKnowledgeBaseConfigurationArgs {
+        /**
+         * The ARN of the model used to create vector embeddings for the knowledge base.
+         */
+        embeddingModelArn: pulumi.Input<string>;
+        embeddingModelConfiguration?: pulumi.Input<inputs.bedrock.KnowledgeBaseEmbeddingModelConfigurationArgs>;
+        embeddingModelType?: pulumi.Input<enums.bedrock.KnowledgeBaseEmbeddingModelType>;
+        serverSideEncryptionConfiguration?: pulumi.Input<inputs.bedrock.KnowledgeBaseManagedKnowledgeBaseServerSideEncryptionConfigurationArgs>;
+    }
+    /**
+     * Contains details about the server-side encryption for the managed knowledge base.
+     */
+    interface KnowledgeBaseManagedKnowledgeBaseServerSideEncryptionConfigurationArgs {
+        /**
+         * The ARN of the AWS KMS key used to encrypt the managed knowledge base.
+         */
+        kmsKeyArn?: pulumi.Input<string>;
+    }
     /**
      * Contains the storage configuration of the knowledge base in MongoDb Atlas Cloud.
      */
@@ -14928,6 +14998,25 @@ export declare namespace bedrockagentcore {
     interface GatewayTargetApiSchemaConfiguration1PropertiesArgs {
         inlinePayload: pulumi.Input<string>;
     }
+    interface GatewayTargetConnectorConfigurationArgs {
+        description?: pulumi.Input<string>;
+        name: pulumi.Input<string>;
+        parameterOverrides?: pulumi.Input<pulumi.Input<inputs.bedrockagentcore.GatewayTargetConnectorParameterOverrideArgs>[]>;
+        parameterValues?: any;
+    }
+    interface GatewayTargetConnectorParameterOverrideArgs {
+        description?: pulumi.Input<string>;
+        path: pulumi.Input<string>;
+        visible?: pulumi.Input<boolean>;
+    }
+    interface GatewayTargetConnectorSourceArgs {
+        connectorId: pulumi.Input<string>;
+    }
+    interface GatewayTargetConnectorTargetConfigurationArgs {
+        configurations?: pulumi.Input<pulumi.Input<inputs.bedrockagentcore.GatewayTargetConnectorConfigurationArgs>[]>;
+        enabled?: pulumi.Input<pulumi.Input<string>[]>;
+        source: pulumi.Input<inputs.bedrockagentcore.GatewayTargetConnectorSourceArgs>;
+    }
     interface GatewayTargetCredentialProvider0PropertiesArgs {
         oauthCredentialProvider: pulumi.Input<inputs.bedrockagentcore.GatewayTargetOAuthCredentialProviderArgs>;
     }
@@ -14947,9 +15036,15 @@ export declare namespace bedrockagentcore {
          */
         credentialProviderType: pulumi.Input<enums.bedrockagentcore.GatewayTargetCredentialProviderType>;
     }
-    interface GatewayTargetHttpTargetConfigurationPropertiesArgs {
+    interface GatewayTargetHttpApiSchemaConfigurationArgs {
+        source: pulumi.Input<inputs.bedrockagentcore.GatewayTargetApiSchemaConfiguration0PropertiesArgs | inputs.bedrockagentcore.GatewayTargetApiSchemaConfiguration1PropertiesArgs>;
+    }
+    interface GatewayTargetHttpTargetConfiguration0PropertiesArgs {
         agentcoreRuntime: pulumi.Input<inputs.bedrockagentcore.GatewayTargetRuntimeTargetConfigurationArgs>;
     }
+    interface GatewayTargetHttpTargetConfiguration1PropertiesArgs {
+        passthrough: pulumi.Input<inputs.bedrockagentcore.GatewayTargetPassthroughTargetConfigurationArgs>;
+    }
     interface GatewayTargetIamCredentialProviderArgs {
         region?: pulumi.Input<string>;
         service: pulumi.Input<string>;
@@ -14986,6 +15081,9 @@ export declare namespace bedrockagentcore {
     interface GatewayTargetMcpTargetConfiguration4PropertiesArgs {
         apiGateway: pulumi.Input<inputs.bedrockagentcore.GatewayTargetApiGatewayTargetConfigurationArgs>;
     }
+    interface GatewayTargetMcpTargetConfiguration5PropertiesArgs {
+        connector: pulumi.Input<inputs.bedrockagentcore.GatewayTargetConnectorTargetConfigurationArgs>;
+    }
     interface GatewayTargetMcpToolSchemaConfiguration0PropertiesArgs {
         s3: pulumi.Input<inputs.bedrockagentcore.GatewayTargetS3ConfigurationArgs>;
     }
@@ -15009,6 +15107,12 @@ export declare namespace bedrockagentcore {
         providerArn: pulumi.Input<string>;
         scopes: pulumi.Input<pulumi.Input<string>[]>;
     }
+    interface GatewayTargetPassthroughTargetConfigurationArgs {
+        endpoint: pulumi.Input<string>;
+        protocolType: pulumi.Input<enums.bedrockagentcore.GatewayTargetPassthroughProtocolType>;
+        schema?: pulumi.Input<inputs.bedrockagentcore.GatewayTargetHttpApiSchemaConfigurationArgs>;
+        stickinessConfiguration?: pulumi.Input<inputs.bedrockagentcore.GatewayTargetStickinessConfigurationArgs>;
+    }
     interface GatewayTargetPrivateEndpoint0PropertiesArgs {
         selfManagedLatticeResource: pulumi.Input<inputs.bedrockagentcore.GatewayTargetSelfManagedLatticeResourcePropertiesArgs>;
     }
@@ -15018,6 +15122,7 @@ export declare namespace bedrockagentcore {
     interface GatewayTargetRuntimeTargetConfigurationArgs {
         arn: pulumi.Input<string>;
         qualifier?: pulumi.Input<string>;
+        schema?: pulumi.Input<inputs.bedrockagentcore.GatewayTargetHttpApiSchemaConfigurationArgs>;
     }
     interface GatewayTargetS3ConfigurationArgs {
         bucketOwnerAccountId?: pulumi.Input<string>;
@@ -15035,11 +15140,15 @@ export declare namespace bedrockagentcore {
     interface GatewayTargetSelfManagedLatticeResourcePropertiesArgs {
         resourceConfigurationIdentifier: pulumi.Input<string>;
     }
+    interface GatewayTargetStickinessConfigurationArgs {
+        identifier: pulumi.Input<string>;
+        timeout?: pulumi.Input<number>;
+    }
     interface GatewayTargetTargetConfiguration0PropertiesArgs {
-        mcp: pulumi.Input<inputs.bedrockagentcore.GatewayTargetMcpTargetConfiguration0PropertiesArgs | inputs.bedrockagentcore.GatewayTargetMcpTargetConfiguration1PropertiesArgs | inputs.bedrockagentcore.GatewayTargetMcpTargetConfiguration2PropertiesArgs | inputs.bedrockagentcore.GatewayTargetMcpTargetConfiguration3PropertiesArgs | inputs.bedrockagentcore.GatewayTargetMcpTargetConfiguration4PropertiesArgs>;
+        mcp: pulumi.Input<inputs.bedrockagentcore.GatewayTargetMcpTargetConfiguration0PropertiesArgs | inputs.bedrockagentcore.GatewayTargetMcpTargetConfiguration1PropertiesArgs | inputs.bedrockagentcore.GatewayTargetMcpTargetConfiguration2PropertiesArgs | inputs.bedrockagentcore.GatewayTargetMcpTargetConfiguration3PropertiesArgs | inputs.bedrockagentcore.GatewayTargetMcpTargetConfiguration4PropertiesArgs | inputs.bedrockagentcore.GatewayTargetMcpTargetConfiguration5PropertiesArgs>;
     }
     interface GatewayTargetTargetConfiguration1PropertiesArgs {
-        http: pulumi.Input<inputs.bedrockagentcore.GatewayTargetHttpTargetConfigurationPropertiesArgs>;
+        http: pulumi.Input<inputs.bedrockagentcore.GatewayTargetHttpTargetConfiguration0PropertiesArgs | inputs.bedrockagentcore.GatewayTargetHttpTargetConfiguration1PropertiesArgs>;
     }
     interface GatewayTargetToolDefinitionArgs {
         description: pulumi.Input<string>;
@@ -15072,9 +15181,15 @@ export declare namespace bedrockagentcore {
         }>;
     }
     interface HarnessAgentCoreMemoryRetrievalConfigArgs {
-        relevanceScore?: pulumi.Input<number>;
+        /**
+         * Minimum relevance score for retrieved memories. Typed as both number and string because CloudFormation marshals scalars nested in dynamic-key (patternProperties) maps as strings, while direct API/CDK callers send a JSON number; both forms must validate.
+         */
+        relevanceScore?: pulumi.Input<number | string>;
         strategyId?: pulumi.Input<string>;
-        topK?: pulumi.Input<number>;
+        /**
+         * Maximum number of memory records to retrieve. Typed as both integer and string because CloudFormation marshals scalars nested in dynamic-key (patternProperties) maps as strings, while direct API/CDK callers send a JSON integer; both forms must validate.
+         */
+        topK?: pulumi.Input<number | string>;
     }
     interface HarnessAgentCoreRuntimeEnvironmentArgs {
         /**
@@ -15101,6 +15216,13 @@ export declare namespace bedrockagentcore {
         claimMatchValue: pulumi.Input<inputs.bedrockagentcore.HarnessClaimMatchValueTypeArgs>;
     }
     interface HarnessBedrockModelConfigArgs {
+        /**
+         * Provider-specific parameters passed through to the model provider unchanged.
+         */
+        additionalParams?: pulumi.Input<{
+            [key: string]: any;
+        }>;
+        apiFormat?: pulumi.Input<enums.bedrockagentcore.HarnessBedrockModelConfigApiFormat>;
         maxTokens?: pulumi.Input<number>;
         modelId: pulumi.Input<string>;
         temperature?: pulumi.Input<number>;
@@ -15127,6 +15249,20 @@ export declare namespace bedrockagentcore {
         allowedScopes?: pulumi.Input<pulumi.Input<string>[]>;
         customClaims?: pulumi.Input<pulumi.Input<inputs.bedrockagentcore.HarnessCustomClaimValidationTypeArgs>[]>;
         discoveryUrl: pulumi.Input<string>;
+        privateEndpoint?: pulumi.Input<inputs.bedrockagentcore.HarnessPrivateEndpointArgs>;
+        privateEndpointOverrides?: pulumi.Input<pulumi.Input<inputs.bedrockagentcore.HarnessPrivateEndpointOverrideArgs>[]>;
+    }
+    /**
+     * Explicitly opt out of memory.
+     */
+    interface HarnessDisabledMemoryConfigurationArgs {
+    }
+    /**
+     * Configuration for an Amazon EFS access point to mount into the AgentCore Runtime.
+     */
+    interface HarnessEfsAccessPointConfigurationArgs {
+        accessPointArn: pulumi.Input<string>;
+        mountPath: pulumi.Input<string>;
     }
     interface HarnessEnvironmentArtifactArgs {
         containerConfiguration?: pulumi.Input<inputs.bedrockagentcore.HarnessContainerConfigurationArgs>;
@@ -15135,7 +15271,9 @@ export declare namespace bedrockagentcore {
         agentCoreRuntimeEnvironment?: pulumi.Input<inputs.bedrockagentcore.HarnessAgentCoreRuntimeEnvironmentArgs>;
     }
     interface HarnessFilesystemConfigurationArgs {
-        sessionStorage: pulumi.Input<inputs.bedrockagentcore.HarnessSessionStorageConfigurationArgs>;
+        efsAccessPoint?: pulumi.Input<inputs.bedrockagentcore.HarnessEfsAccessPointConfigurationArgs>;
+        s3FilesAccessPoint?: pulumi.Input<inputs.bedrockagentcore.HarnessS3FilesAccessPointConfigurationArgs>;
+        sessionStorage?: pulumi.Input<inputs.bedrockagentcore.HarnessSessionStorageConfigurationArgs>;
     }
     interface HarnessGatewayOutboundAuthArgs {
         awsIam?: any;
@@ -15161,12 +15299,63 @@ export declare namespace bedrockagentcore {
         idleRuntimeSessionTimeout?: pulumi.Input<number>;
         maxLifetime?: pulumi.Input<number>;
     }
+    interface HarnessLiteLlmModelConfigArgs {
+        /**
+         * Provider-specific parameters passed through to LiteLLM unchanged.
+         */
+        additionalParams?: pulumi.Input<{
+            [key: string]: any;
+        }>;
+        apiBase?: pulumi.Input<string>;
+        apiKeyArn?: pulumi.Input<string>;
+        maxTokens?: pulumi.Input<number>;
+        modelId: pulumi.Input<string>;
+        temperature?: pulumi.Input<number>;
+        topP?: pulumi.Input<number>;
+    }
+    /**
+     * Configuration for managed memory. The harness creates and manages a memory resource in the customer's account.
+     */
+    interface HarnessManagedMemoryConfigurationArgs {
+        /**
+         * The ARN of the managed memory resource. Read-only, populated by the service.
+         */
+        arn?: pulumi.Input<string>;
+        /**
+         * Customer-managed KMS key ARN. Defaults to AWS-owned key. Not updatable after creation.
+         */
+        encryptionKeyArn?: pulumi.Input<string>;
+        /**
+         * Event retention in days. Defaults to 30.
+         */
+        eventExpiryDuration?: pulumi.Input<number>;
+        /**
+         * Strategy types to enable. Defaults to [SEMANTIC, SUMMARIZATION].
+         */
+        strategies?: pulumi.Input<pulumi.Input<enums.bedrockagentcore.HarnessManagedMemoryConfigurationStrategiesItem>[]>;
+    }
+    /**
+     * Configuration for a service-managed VPC endpoint.
+     */
+    interface HarnessManagedVpcResourceArgs {
+        endpointIpAddressType: pulumi.Input<enums.bedrockagentcore.HarnessManagedVpcResourceEndpointIpAddressType>;
+        routingDomain?: pulumi.Input<string>;
+        securityGroupIds?: pulumi.Input<pulumi.Input<string>[]>;
+        subnetIds: pulumi.Input<pulumi.Input<string>[]>;
+        tags?: pulumi.Input<{
+            [key: string]: pulumi.Input<string>;
+        }>;
+        vpcIdentifier: pulumi.Input<string>;
+    }
     interface HarnessMemoryConfigurationArgs {
         agentCoreMemoryConfiguration?: pulumi.Input<inputs.bedrockagentcore.HarnessAgentCoreMemoryConfigurationArgs>;
+        disabled?: pulumi.Input<inputs.bedrockagentcore.HarnessDisabledMemoryConfigurationArgs>;
+        managedMemoryConfiguration?: pulumi.Input<inputs.bedrockagentcore.HarnessManagedMemoryConfigurationArgs>;
     }
     interface HarnessModelConfigurationArgs {
         bedrockModelConfig?: pulumi.Input<inputs.bedrockagentcore.HarnessBedrockModelConfigArgs>;
         geminiModelConfig?: pulumi.Input<inputs.bedrockagentcore.HarnessGeminiModelConfigArgs>;
+        liteLlmModelConfig?: pulumi.Input<inputs.bedrockagentcore.HarnessLiteLlmModelConfigArgs>;
         openAiModelConfig?: pulumi.Input<inputs.bedrockagentcore.HarnessOpenAiModelConfigArgs>;
     }
     interface HarnessNetworkConfigurationArgs {
@@ -15183,26 +15372,108 @@ export declare namespace bedrockagentcore {
         scopes: pulumi.Input<pulumi.Input<string>[]>;
     }
     interface HarnessOpenAiModelConfigArgs {
+        /**
+         * Provider-specific parameters passed through to the model provider unchanged.
+         */
+        additionalParams?: pulumi.Input<{
+            [key: string]: any;
+        }>;
+        apiFormat?: pulumi.Input<enums.bedrockagentcore.HarnessOpenAiModelConfigApiFormat>;
         apiKeyArn: pulumi.Input<string>;
         maxTokens?: pulumi.Input<number>;
         modelId: pulumi.Input<string>;
         temperature?: pulumi.Input<number>;
         topP?: pulumi.Input<number>;
     }
+    /**
+     * Private endpoint configuration for connecting to the OpenID Connect discovery endpoint over a private network.
+     */
+    interface HarnessPrivateEndpointArgs {
+        managedVpcResource?: pulumi.Input<inputs.bedrockagentcore.HarnessManagedVpcResourceArgs>;
+        selfManagedLatticeResource?: pulumi.Input<inputs.bedrockagentcore.HarnessSelfManagedLatticeResourceArgs>;
+    }
+    /**
+     * Maps a domain to a private endpoint for resolving that domain over a private network.
+     */
+    interface HarnessPrivateEndpointOverrideArgs {
+        domain: pulumi.Input<string>;
+        privateEndpoint: pulumi.Input<inputs.bedrockagentcore.HarnessPrivateEndpointArgs>;
+    }
     interface HarnessRemoteMcpConfigArgs {
         headers?: pulumi.Input<{
             [key: string]: pulumi.Input<string>;
         }>;
         url: pulumi.Input<string>;
     }
+    /**
+     * Configuration for an Amazon S3 Files access point to mount into the AgentCore Runtime.
+     */
+    interface HarnessS3FilesAccessPointConfigurationArgs {
+        accessPointArn: pulumi.Input<string>;
+        mountPath: pulumi.Input<string>;
+    }
+    /**
+     * Configuration for connecting to a private resource using a self-managed VPC Lattice resource configuration.
+     */
+    interface HarnessSelfManagedLatticeResourceArgs {
+        resourceConfigurationIdentifier: pulumi.Input<string>;
+    }
     interface HarnessSessionStorageConfigurationArgs {
         mountPath: pulumi.Input<string>;
     }
     interface HarnessSkillArgs {
+        awsSkills?: pulumi.Input<inputs.bedrockagentcore.HarnessSkillAwsSkillsSourceArgs>;
+        git?: pulumi.Input<inputs.bedrockagentcore.HarnessSkillGitSourceArgs>;
         /**
          * The filesystem path to the skill definition.
          */
-        path: pulumi.Input<string>;
+        path?: pulumi.Input<string>;
+        s3?: pulumi.Input<inputs.bedrockagentcore.HarnessSkillS3SourceArgs>;
+    }
+    /**
+     * AWS Skills baked into the Harness's underlying Runtime.
+     */
+    interface HarnessSkillAwsSkillsSourceArgs {
+        /**
+         * Optionally filter allowed skills with glob syntax, e.g., ['core-skills/*'].
+         */
+        paths?: pulumi.Input<pulumi.Input<string>[]>;
+    }
+    /**
+     * Authentication configuration for accessing a private git repository.
+     */
+    interface HarnessSkillGitAuthArgs {
+        /**
+         * The ARN of the credential in AgentCore Identity containing the password or personal access token.
+         */
+        credentialArn: pulumi.Input<string>;
+        /**
+         * Username for authentication. Defaults to 'oauth2' if not specified.
+         */
+        username?: pulumi.Input<string>;
+    }
+    /**
+     * A git repository containing the skill, cloned over HTTPS.
+     */
+    interface HarnessSkillGitSourceArgs {
+        auth?: pulumi.Input<inputs.bedrockagentcore.HarnessSkillGitAuthArgs>;
+        /**
+         * Subdirectory within the repository containing the skill.
+         */
+        path?: pulumi.Input<string>;
+        /**
+         * The HTTPS URL of the git repository.
+         */
+        url: pulumi.Input<string>;
+    }
+    /**
+     * An S3 source containing the skill.
+     */
+    interface HarnessSkillS3SourceArgs {
+        /**
+         * The S3 URI pointing to the skill directory (e.g., s3://bucket/skills/my-skill/).
+         */
+        uri: pulumi.Input<string>;
     }
     interface HarnessSlidingWindowConfigurationArgs {
         messagesCount?: pulumi.Input<number>;
@@ -15942,7 +16213,17 @@ export declare namespace bedrockagentcore {
      * The definition structure for policies. Encapsulates different policy formats.
      */
     interface PolicyDefinitionArgs {
-        cedar: pulumi.Input<inputs.bedrockagentcore.PolicyCedarPolicyArgs>;
+        cedar?: pulumi.Input<inputs.bedrockagentcore.PolicyCedarPolicyArgs>;
+        policy?: pulumi.Input<inputs.bedrockagentcore.PolicyStatementArgs>;
+    }
+    /**
+     * A policy statement within the AgentCore Policy system.
+     */
+    interface PolicyStatementArgs {
+        /**
+         * The policy statement.
+         */
+        statement: pulumi.Input<string>;
     }
     interface RuntimeAgentRuntimeArtifactArgs {
         codeConfiguration?: pulumi.Input<inputs.bedrockagentcore.RuntimeCodeConfigurationArgs>;
@@ -21512,6 +21793,13 @@ export declare namespace cognito {
          */
         certificateArn?: pulumi.Input<string>;
     }
+    interface UserPoolDomainFailoverTypeArgs {
+        primaryRoute53HealthCheckId: pulumi.Input<string>;
+        secondaryRegion: pulumi.Input<string>;
+    }
+    interface UserPoolDomainRoutingTypeArgs {
+        failover?: pulumi.Input<inputs.cognito.UserPoolDomainFailoverTypeArgs>;
+    }
     interface UserPoolEmailConfigurationArgs {
         /**
          * The set of configuration rules that can be applied to emails sent using Amazon Simple Email Service. A configuration set is applied to an email by including a reference to the configuration set in the headers of the email. Once applied, all of the rules in that configuration set are applied to the email. Configuration sets can be used to apply the following types of rules to emails:
@@ -30738,7 +31026,7 @@ export declare namespace ec2 {
      */
     interface LaunchTemplateConnectionTrackingSpecificationArgs {
         /**
-         * Timeout (in seconds) for idle TCP connections in an established state. Min: 60 seconds. Max: 432000 seconds (5 days). Default: 432000 seconds. Recommended: Less than 432000 seconds.
+         * Timeout (in seconds) for idle TCP connections in an established state. Min: 60 seconds. Max: 432000 seconds (5 days). Default: 350 seconds for Nitro v6 instance types (excluding P6e-GB200); 432000 seconds for all other instance types (including P6e-GB200). Recommended: Less than 432000 seconds.
          */
         tcpEstablishedTimeout?: pulumi.Input<number>;
         /**
@@ -35677,6 +35965,13 @@ export declare namespace ecs {
          */
         volumeType?: pulumi.Input<string>;
     }
+    interface ServiceMetricConfigurationArgs {
+        metricNames: pulumi.Input<pulumi.Input<enums.ecs.ServiceMetricConfigurationMetricNamesItem>[]>;
+        resolutionSeconds: pulumi.Input<number>;
+    }
+    interface ServiceMonitoringConfigurationArgs {
+        metricConfigurations: pulumi.Input<pulumi.Input<inputs.ecs.ServiceMetricConfigurationArgs>[]>;
+    }
     /**
      * The network configuration for a task or service.
      */
@@ -36036,7 +36331,7 @@ export declare namespace ecs {
          */
         repositoryCredentials?: pulumi.Input<inputs.ecs.TaskDefinitionRepositoryCredentialsArgs>;
         /**
-         * The type and amount of a resource to assign to a container. The only supported resource is a GPU.
+         * The type and amount of a resource to assign to a container. The supported resources are GPUs and Neuron devices.
          */
         resourceRequirements?: pulumi.Input<pulumi.Input<inputs.ecs.TaskDefinitionResourceRequirementArgs>[]>;
         /**
@@ -36420,7 +36715,6 @@ export declare namespace ecs {
         swappiness?: pulumi.Input<number>;
         /**
          * The container path, mount options, and size (in MiB) of the tmpfs mount. This parameter maps to the ``--tmpfs`` option to docker run.
-         *   If you're using tasks that use the Fargate launch type, the ``tmpfs`` parameter isn't supported.
          */
         tmpfs?: pulumi.Input<pulumi.Input<inputs.ecs.TaskDefinitionTmpfsArgs>[]>;
     }
@@ -36589,7 +36883,7 @@ export declare namespace ecs {
         credentialsParameter?: pulumi.Input<string>;
     }
     /**
-     * The type and amount of a resource to assign to a container. The supported resource types are GPUs and Elastic Inference accelerators. For more information, see [Working with GPUs on Amazon ECS](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-gpu.html) or [Working with Amazon Elastic Inference on Amazon ECS](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-inference.html) in the *Amazon Elastic Container Service Developer Guide*
+     * The type and amount of a resource to assign to a container. The supported resource types are GPUs, Neuron devices, and Elastic Inference accelerators. For more information, see [Working with GPUs on Amazon ECS](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-gpu.html) or [Working with Amazon Elastic Inference on Amazon ECS](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-inference.html) in the *Amazon Elastic Container Service Developer Guide*
      */
     interface TaskDefinitionResourceRequirementArgs {
         /**
@@ -36598,7 +36892,8 @@ export declare namespace ecs {
         type: pulumi.Input<string>;
         /**
          * The value for the specified resource type.
-         *  When the type is ``GPU``, the value is the number of physical ``GPUs`` the Amazon ECS container agent reserves for the container. The number of GPUs that's reserved for all containers in a task can't exceed the number of available GPUs on the container instance that the task is launched on.
+         *  When the type is ``GPU``, the value is the number of physical ``GPUs`` the Amazon ECS container agent reserves for the container. The number of GPUs that's reserved for all containers in a task can't exceed the number of available GPUs on the container instance that the task is launched on. You can also specify ``ALL`` to allocate all available GPUs on the instance to the container.
+         *  When the type is ``NeuronDevice``, the value must be ``ALL``. This allocates all available Neuron devices on the instance to the container. Only one container in a task can specify ``NeuronDevice`` resources. This resource type is only supported on Managed Instances.
          *  When the type is ``InferenceAccelerator``, the ``value`` matches the ``deviceName`` for an [InferenceAccelerator](https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_InferenceAccelerator.html) specified in a task definition.
          */
         value: pulumi.Input<string>;
@@ -36635,10 +36930,27 @@ export declare namespace ecs {
          */
         operatingSystemFamily?: pulumi.Input<string>;
     }
+    /**
+     * This parameter is specified when you're using an Amazon S3 Files file system for task storage. For more information, see [Amazon S3 Files volumes](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/s3files-volumes.html) in the *Amazon Elastic Container Service Developer Guide*.
+     *   Your task definition must include a Task IAM Role. See [IAM role for attaching your file system to compute resources](https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-files-prereq-policies.html#s3-files-prereq-iam-compute-role) for required permissions.
+     */
     interface TaskDefinitionS3FilesVolumeConfigurationArgs {
+        /**
+         * The full ARN of the S3 Files access point to use. If an access point is specified, the root directory value specified in the ``S3FilesVolumeConfiguration`` must either be omitted or set to ``/`` which will enforce the path set on the S3 Files access point. For more information, see [Creating S3 Files access points](https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-files-access-points-creating.html).
+         */
         accessPointArn?: pulumi.Input<string>;
+        /**
+         * The full ARN of the S3 Files file system to mount.
+         */
         fileSystemArn: pulumi.Input<string>;
+        /**
+         * The directory within the Amazon S3 Files file system to mount as the root directory. If this parameter is omitted, the root of the Amazon S3 Files file system will be used. Specifying ``/`` will have the same effect as omitting this parameter.
+         *   If a S3 Files access point is specified in the ``accessPointArn``, the root directory parameter must either be omitted or set to ``/`` which will enforce the path set on the S3 Files access point.
+         */
         rootDirectory?: pulumi.Input<string>;
+        /**
+         * The port to use for sending encrypted data between the ECS host and the S3 Files file system. If you do not specify a transit encryption port, it will use the port selection strategy that the Amazon S3 Files mount helper uses. For more information, see [S3 Files mount helper](https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-files-mounting.html).
+         */
         transitEncryptionPort?: pulumi.Input<number>;
     }
     /**
@@ -36724,7 +37036,7 @@ export declare namespace ecs {
         softLimit: pulumi.Input<number>;
     }
     /**
-     * The data volume configuration for tasks launched using this task definition. Specifying a volume configuration in a task definition is optional. The volume configuration may contain multiple volumes but only one volume configured at launch is supported. Each volume defined in the volume configuration may only specify a ``name`` and one of either ``configuredAtLaunch``, ``dockerVolumeConfiguration``, ``efsVolumeConfiguration``, ``fsxWindowsFileServerVolumeConfiguration``, or ``host``. If an empty volume configuration is specified, by default Amazon ECS uses a host volume. For more information, see [Using data volumes in tasks](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/using_data_volumes.html).
+     * The data volume configuration for tasks launched using this task definition. Specifying a volume configuration in a task definition is optional. The volume configuration may contain multiple volumes but only one volume configured at launch is supported. Each volume defined in the volume configuration may only specify a ``name`` and one of either ``configuredAtLaunch``, ``dockerVolumeConfiguration``, ``efsVolumeConfiguration``, ``s3filesVolumeConfiguration``, ``fsxWindowsFileServerVolumeConfiguration``, or ``host``. If an empty volume configuration is specified, by default Amazon ECS uses a host volume. For more information, see [Using data volumes in tasks](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/using_data_volumes.html).
      */
     interface TaskDefinitionVolumeArgs {
         /**
@@ -36756,8 +37068,12 @@ export declare namespace ecs {
          *  When using a volume configured at launch, the ``name`` is required and must also be specified as the volume name in the ``ServiceVolumeConfiguration`` or ``TaskVolumeConfiguration`` parameter when creating your service or standalone task.
          *  For all other types of volumes, this name is referenced in the ``sourceVolume`` parameter of the ``mountPoints`` object in the container definition.
          *  When a volume is using the ``efsVolumeConfiguration``, the name is required.
+         *  When a volume is using the ``s3filesVolumeConfiguration``, the name is required.
          */
         name?: pulumi.Input<string>;
+        /**
+         * This parameter is specified when you use an Amazon S3 Files file system for task storage.
+         */
         s3FilesVolumeConfiguration?: pulumi.Input<inputs.ecs.TaskDefinitionS3FilesVolumeConfigurationArgs>;
     }
     /**
@@ -37346,6 +37662,10 @@ export declare namespace eks {
      * An object representing the VPC configuration to use for an Amazon EKS cluster.
      */
     interface ClusterResourcesVpcConfigArgs {
+        /**
+         * Specify the egress mode for the cluster control plane. If you set this to CUSTOMER_ROUTED, the control plane routes traffic through your VPC subnets instead of using AWS managed networking.
+         */
+        controlPlaneEgressMode?: pulumi.Input<string>;
         /**
          * Set this value to true to enable private access for your cluster's Kubernetes API server endpoint. If you enable private access, Kubernetes API requests from within your cluster's VPC use the private VPC endpoint. The default value for this parameter is false, which disables private access for your Kubernetes API server. If you disable private access and you have nodes or AWS Fargate pods in the cluster, then ensure that publicAccessCidrs includes the necessary CIDR blocks for communication with the nodes or Fargate pods.
          */
@@ -39050,6 +39370,10 @@ export declare namespace elasticloadbalancingv2 {
     }
 }
 export declare namespace elementalinference {
+    interface FeedAspectRatioArgs {
+        height: pulumi.Input<number>;
+        width: pulumi.Input<number>;
+    }
     interface FeedClippingConfigArgs {
         callbackMetadata?: pulumi.Input<string>;
     }
@@ -39058,7 +39382,7 @@ export declare namespace elementalinference {
     interface FeedGetOutputArgs {
         description?: pulumi.Input<string>;
         name: pulumi.Input<string>;
-        outputConfig: pulumi.Input<inputs.elementalinference.FeedOutputConfig0PropertiesArgs | inputs.elementalinference.FeedOutputConfig1PropertiesArgs>;
+        outputConfig: pulumi.Input<inputs.elementalinference.FeedOutputConfig0PropertiesArgs | inputs.elementalinference.FeedOutputConfig1PropertiesArgs | inputs.elementalinference.FeedOutputConfig2PropertiesArgs>;
         status: pulumi.Input<enums.elementalinference.FeedOutputStatus>;
     }
     interface FeedOutputConfig0PropertiesArgs {
@@ -39067,6 +39391,15 @@ export declare namespace elementalinference {
     interface FeedOutputConfig1PropertiesArgs {
         clipping: pulumi.Input<inputs.elementalinference.FeedClippingConfigArgs>;
     }
+    interface FeedOutputConfig2PropertiesArgs {
+        subtitling: pulumi.Input<inputs.elementalinference.FeedSubtitlingConfigArgs>;
+    }
+    interface FeedSubtitlingConfigArgs {
+        aspectRatio?: pulumi.Input<inputs.elementalinference.FeedAspectRatioArgs>;
+        dictionary?: pulumi.Input<string>;
+        language: pulumi.Input<enums.elementalinference.FeedTranscriptionLanguage>;
+        profanityFilter?: pulumi.Input<enums.elementalinference.FeedProfanityFilterMode>;
+    }
 }
 export declare namespace emr {
     interface StepHadoopJarStepConfigArgs {
@@ -42301,6 +42634,10 @@ export declare namespace gamelift {
          * Specifies the image URI of this container.
          */
         imageUri: pulumi.Input<string>;
+        /**
+         * Linux-specific modifications applied to the default Docker container configuration, such as Linux capabilities.
+         */
+        linuxCapabilities?: pulumi.Input<inputs.gamelift.ContainerGroupDefinitionLinuxCapabilitiesArgs>;
         /**
          * A list of mount point configurations to be used in a container.
          */
@@ -42318,6 +42655,15 @@ export declare namespace gamelift {
          */
         serverSdkVersion: pulumi.Input<string>;
     }
+    /**
+     * A set of Linux capabilities that are added to a container's default Docker configuration. For more detailed information, see the capabilities(7) Linux manual page.
+     */
+    interface ContainerGroupDefinitionLinuxCapabilitiesArgs {
+        /**
+         * The list of Linux capabilities to add to the container's default configuration.
+         */
+        include?: pulumi.Input<pulumi.Input<enums.gamelift.ContainerGroupDefinitionLinuxCapabilitiesIncludeItem>[]>;
+    }
     /**
      * Defines the ports on a container.
      */
@@ -42355,6 +42701,10 @@ export declare namespace gamelift {
          * Specifies the image URI of this container.
          */
         imageUri: pulumi.Input<string>;
+        /**
+         * Linux-specific modifications applied to the default Docker container configuration, such as Linux capabilities.
+         */
+        linuxCapabilities?: pulumi.Input<inputs.gamelift.ContainerGroupDefinitionLinuxCapabilitiesArgs>;
         /**
          * The total memory limit of container groups following this definition in MiB
          */
@@ -54197,6 +54547,16 @@ export declare namespace lambda {
          */
         excludedInstanceTypes?: pulumi.Input<pulumi.Input<string>[]>;
     }
+    interface CapacityProviderLoggingConfigArgs {
+        /**
+         * The log group name.
+         */
+        logGroup?: pulumi.Input<string>;
+        /**
+         * System log granularity level
+         */
+        systemLogLevel?: pulumi.Input<enums.lambda.CapacityProviderLoggingConfigSystemLogLevel>;
+    }
     /**
      * Configuration that specifies the permissions required for the capacity provider to manage compute resources.
      */
@@ -54207,9 +54567,6 @@ export declare namespace lambda {
         capacityProviderOperatorRoleArn: pulumi.Input<string>;
     }
     interface CapacityProviderPropagateTagsConfigArgs {
-        /**
-         * A list of tags to explicitly propagate to managed resources.
-         */
         explicitTags?: pulumi.Input<pulumi.Input<inputs.lambda.CapacityProviderTagArgs>[]>;
         mode?: pulumi.Input<enums.lambda.CapacityProviderPropagateTagsMode>;
     }
@@ -54256,6 +54613,12 @@ export declare namespace lambda {
          */
         targetValue: pulumi.Input<number>;
     }
+    interface CapacityProviderTelemetryConfigArgs {
+        /**
+         * The logging configuration for the capacity provider.
+         */
+        loggingConfig?: pulumi.Input<inputs.lambda.CapacityProviderLoggingConfigArgs>;
+    }
     /**
      * VPC configuration that specifies the network settings for compute instances managed by the capacity provider.
      */
@@ -54770,6 +55133,11 @@ export declare namespace lambda {
          */
         subnetIds?: pulumi.Input<pulumi.Input<string>[]>;
     }
+    interface HooksArgs {
+        microvmHooks?: pulumi.Input<inputs.lambda.MicrovmImageMicrovmHooksArgs>;
+        microvmImageHooks?: pulumi.Input<inputs.lambda.MicrovmImageHooksArgs>;
+        port?: pulumi.Input<number>;
+    }
     interface LayerVersionContentArgs {
         /**
          * The Amazon S3 bucket of the layer archive.
@@ -54779,11 +55147,79 @@ export declare namespace lambda {
          * The Amazon S3 key of the layer archive.
          */
         s3Key: pulumi.Input<string>;
+        /**
+         * Specifies whether Lambda should copy the deployment package to its internal storage (COPY) or reference it directly from your S3 bucket (REFERENCE).
+         */
+        s3ObjectStorageMode?: pulumi.Input<enums.lambda.LayerVersionContentS3ObjectStorageMode>;
         /**
          * For versioned objects, the version of the layer archive object to use.
          */
         s3ObjectVersion?: pulumi.Input<string>;
     }
+    interface MicrovmImageCloudWatchLoggingArgs {
+        logGroup?: pulumi.Input<string>;
+        logStream?: pulumi.Input<string>;
+    }
+    interface MicrovmImageCodeArtifactArgs {
+        uri: pulumi.Input<string>;
+    }
+    interface MicrovmImageCpuConfigurationArgs {
+        architecture: pulumi.Input<enums.lambda.MicrovmImageCpuConfigurationArchitecture>;
+    }
+    interface MicrovmImageEnvironmentVariableArgs {
+        key: pulumi.Input<string>;
+        value: pulumi.Input<string>;
+    }
+    interface MicrovmImageHooksArgs {
+        ready?: pulumi.Input<enums.lambda.MicrovmImageHookState>;
+        readyTimeoutInSeconds?: pulumi.Input<number>;
+        validate?: pulumi.Input<enums.lambda.MicrovmImageHookState>;
+        validateTimeoutInSeconds?: pulumi.Input<number>;
+    }
+    interface MicrovmImageLoggingArgs {
+        cloudWatch?: pulumi.Input<inputs.lambda.MicrovmImageCloudWatchLoggingArgs>;
+        disabled?: pulumi.Input<boolean>;
+    }
+    interface MicrovmImageMicrovmHooksArgs {
+        resume?: pulumi.Input<enums.lambda.MicrovmImageHookState>;
+        resumeTimeoutInSeconds?: pulumi.Input<number>;
+        run?: pulumi.Input<enums.lambda.MicrovmImageHookState>;
+        runTimeoutInSeconds?: pulumi.Input<number>;
+        suspend?: pulumi.Input<enums.lambda.MicrovmImageHookState>;
+        suspendTimeoutInSeconds?: pulumi.Input<number>;
+        terminate?: pulumi.Input<enums.lambda.MicrovmImageHookState>;
+        terminateTimeoutInSeconds?: pulumi.Input<number>;
+    }
+    interface MicrovmImageResourcesArgs {
+        minimumMemoryInMiB: pulumi.Input<number>;
+    }
+    /**
+     * The network configuration for the connector. Specify a VpcEgressConfiguration to enable outbound traffic routing through your VPC.
+     */
+    interface NetworkConnectorConfigArgs {
+        vpcEgressConfiguration: pulumi.Input<inputs.lambda.NetworkConnectorVpcEgressConfigurationArgs>;
+    }
+    /**
+     * The VPC egress configuration for the network connector. Specifies the subnets, security groups, and network protocol for routing outbound traffic through your VPC.
+     */
+    interface NetworkConnectorVpcEgressConfigurationArgs {
+        /**
+         * The types of Lambda compute resources that can use this connector. Currently, only MicroVm is supported.
+         */
+        associatedComputeResourceTypes: pulumi.Input<pulumi.Input<enums.lambda.NetworkConnectorVpcEgressConfigurationAssociatedComputeResourceTypesItem>[]>;
+        /**
+         * The network protocol for the connector. Specify IPv4 for IPv4-only networking, or DualStack for both IPv4 and IPv6.
+         */
+        networkProtocol?: pulumi.Input<enums.lambda.NetworkConnectorVpcEgressConfigurationNetworkProtocol>;
+        /**
+         * The IDs of the VPC security groups to attach to the ENIs. Specify 0 to 5 security groups. All security groups must be in the same VPC as the subnets.
+         */
+        securityGroupIds?: pulumi.Input<pulumi.Input<string>[]>;
+        /**
+         * The IDs of the VPC subnets where Lambda provisions elastic network interfaces (ENIs). Specify 1 to 16 subnets. All subnets must be in the same VPC.
+         */
+        subnetIds: pulumi.Input<pulumi.Input<string>[]>;
+    }
     interface UrlCorsArgs {
         /**
          * Specifies whether credentials are included in the CORS request.
@@ -59879,6 +60315,7 @@ export declare namespace mediapackagev2 {
      * <p>Retrieve the DASH manifest configuration.</p>
      */
     interface OriginEndpointDashManifestConfigurationArgs {
+        audioTimelinePattern?: pulumi.Input<enums.mediapackagev2.OriginEndpointDashAudioTimelinePattern>;
         availabilityStartTimeConfiguration?: pulumi.Input<inputs.mediapackagev2.OriginEndpointDashAvailabilityStartTimeConfigurationPropertiesArgs>;
         /**
          * <p>The base URL to use for retrieving segments.</p>
@@ -61189,10 +61626,14 @@ export declare namespace msk {
      * Details of the client authentication used by the Apache Kafka cluster.
      */
     interface ReplicatorKafkaClusterClientAuthenticationArgs {
+        /**
+         * Details for mTLS client authentication.
+         */
+        mtls?: pulumi.Input<inputs.msk.ReplicatorKafkaClusterMtlsAuthenticationArgs>;
         /**
          * Details for SASL/SCRAM client authentication.
          */
-        saslScram: pulumi.Input<inputs.msk.ReplicatorKafkaClusterSaslScramAuthenticationArgs>;
+        saslScram?: pulumi.Input<inputs.msk.ReplicatorKafkaClusterSaslScramAuthenticationArgs>;
     }
     /**
      * Details of an Amazon VPC which has network connectivity to the Kafka cluster.
@@ -61220,6 +61661,15 @@ export declare namespace msk {
          */
         rootCaCertificate?: pulumi.Input<string>;
     }
+    /**
+     * Details for mTLS client authentication.
+     */
+    interface ReplicatorKafkaClusterMtlsAuthenticationArgs {
+        /**
+         * The Amazon Resource Name (ARN) of the Secrets Manager secret.
+         */
+        secretArn: pulumi.Input<string>;
+    }
     /**
      * Details for SASL/SCRAM client authentication.
      */
@@ -62614,6 +63064,7 @@ export declare namespace observabilityadmin {
          * Log specific configuration for centralization destination log groups.
          */
         destinationLogsConfiguration?: pulumi.Input<inputs.observabilityadmin.OrganizationCentralizationRuleDestinationLogsConfigurationArgs>;
+        destinationMetricsConfiguration?: pulumi.Input<inputs.observabilityadmin.OrganizationCentralizationRuleDestinationMetricsConfigurationArgs>;
         /**
          * The primary destination region to which telemetry data should be centralized.
          */
@@ -62632,6 +63083,7 @@ export declare namespace observabilityadmin {
          * Log specific configuration for centralization source log groups.
          */
         sourceLogsConfiguration?: pulumi.Input<inputs.observabilityadmin.OrganizationCentralizationRuleSourceLogsConfigurationArgs>;
+        sourceMetricsConfiguration?: pulumi.Input<inputs.observabilityadmin.OrganizationCentralizationRuleSourceMetricsConfigurationArgs>;
     }
     interface OrganizationCentralizationRuleDestinationLogsConfigurationArgs {
         /**
@@ -62644,6 +63096,9 @@ export declare namespace observabilityadmin {
          */
         logsEncryptionConfiguration?: pulumi.Input<inputs.observabilityadmin.OrganizationCentralizationRuleLogsEncryptionConfigurationArgs>;
     }
+    interface OrganizationCentralizationRuleDestinationMetricsConfigurationArgs {
+        backupConfiguration?: pulumi.Input<inputs.observabilityadmin.OrganizationCentralizationRuleMetricsBackupConfigurationArgs>;
+    }
     interface OrganizationCentralizationRuleLogGroupNameConfigurationArgs {
         logGroupNamePattern: pulumi.Input<string>;
     }
@@ -62671,6 +63126,9 @@ export declare namespace observabilityadmin {
          */
         kmsKeyArn?: pulumi.Input<string>;
     }
+    interface OrganizationCentralizationRuleMetricsBackupConfigurationArgs {
+        region: pulumi.Input<string>;
+    }
     interface OrganizationCentralizationRuleSourceLogsConfigurationArgs {
         dataSourceSelectionCriteria?: pulumi.Input<string>;
         /**
@@ -62682,6 +63140,9 @@ export declare namespace observabilityadmin {
          */
         logGroupSelectionCriteria?: pulumi.Input<string>;
     }
+    interface OrganizationCentralizationRuleSourceMetricsConfigurationArgs {
+        metricsSelectionCriteria?: pulumi.Input<string>;
+    }
     /**
      * The condition of the action desired in the filter.
      */
@@ -98246,6 +98707,28 @@ export declare namespace s3 {
          */
         tagFilters?: pulumi.Input<pulumi.Input<inputs.s3.BucketTagFilterArgs>[]>;
     }
+    interface BucketAnnotationTableConfigurationArgs {
+        /**
+         * Specifies whether annotation table configuration is enabled or disabled.
+         */
+        configurationState: pulumi.Input<enums.s3.BucketAnnotationTableConfigurationConfigurationState>;
+        /**
+         * The encryption configuration for the annotation table.
+         */
+        encryptionConfiguration?: pulumi.Input<inputs.s3.BucketMetadataTableEncryptionConfigurationArgs>;
+        /**
+         * The ARN of the IAM role that grants Amazon S3 Metadata permission to read annotations from your bucket.
+         */
+        role?: pulumi.Input<string>;
+        /**
+         * The ARN of the annotation table.
+         */
+        tableArn?: pulumi.Input<string>;
+        /**
+         * The name of the annotation table.
+         */
+        tableName?: pulumi.Input<string>;
+    }
     /**
      * A bucket-level setting for Amazon S3 general purpose buckets used to prevent the upload of new objects encrypted with the specified server-side encryption type. For example, blocking an encryption type will block ``PutObject``, ``CopyObject``, ``PostObject``, multipart upload, and replication requests to the bucket for objects with the specified encryption type. However, you can continue to read and list any pre-existing objects already encrypted with the specified encryption type. For more information, see [Blocking or unblocking SSE-C for a general purpose bucket](https://docs.aws.amazon.com/AmazonS3/latest/userguide/blocking-unblocking-s3-c-encryption-gpb.html).
      *  This data type is used with the following actions:
@@ -98568,6 +99051,7 @@ export declare namespace s3 {
      * Creates a V2 S3 Metadata configuration of a general purpose bucket. For more information, see [Accelerating data discovery with S3 Metadata](https://docs.aws.amazon.com/AmazonS3/latest/userguide/metadata-tables-overview.html) in the *Amazon S3 User Guide*.
      */
     interface BucketMetadataConfigurationArgs {
+        annotationTableConfiguration?: pulumi.Input<inputs.s3.BucketAnnotationTableConfigurationArgs>;
         /**
          * The destination information for the S3 Metadata configuration.
          */
@@ -100826,7 +101310,7 @@ export declare namespace sagemaker {
          * The number of instances that are currently in the restricted instance group of a SageMaker HyperPod cluster.
          */
         currentCount?: pulumi.Input<number>;
-        environmentConfig: pulumi.Input<inputs.sagemaker.ClusterEnvironmentConfigArgs>;
+        environmentConfig?: pulumi.Input<inputs.sagemaker.ClusterEnvironmentConfigArgs>;
         executionRole: pulumi.Input<string>;
         /**
          * The number of instances you specified to add to the restricted instance group of a SageMaker HyperPod cluster.
@@ -100846,6 +101330,12 @@ export declare namespace sagemaker {
          */
         trainingPlanArn?: pulumi.Input<string>;
     }
+    /**
+     * The cluster-level configuration for restricted instance groups, including shared environment settings for inter-RIG communication and FSx Lustre sharing.
+     */
+    interface ClusterRestrictedInstanceGroupsConfigArgs {
+        sharedEnvironmentConfig: pulumi.Input<inputs.sagemaker.ClusterSharedEnvironmentConfigArgs>;
+    }
     /**
      * The policy that SageMaker uses when updating the AMI versions of the cluster.
      */
@@ -100863,6 +101353,16 @@ export declare namespace sagemaker {
          */
         scheduleExpression: pulumi.Input<string>;
     }
+    /**
+     * The shared environment configuration for restricted instance groups that use cluster-level shared FSx Lustre storage.
+     */
+    interface ClusterSharedEnvironmentConfigArgs {
+        fSxLustreConfig?: pulumi.Input<inputs.sagemaker.ClusterFSxLustreConfigArgs>;
+        /**
+         * The deletion policy for the shared FSx Lustre file system. Keep retains the FSx when RIGs are deleted. DeleteIfNotUsed deletes the FSx when no RIGs reference it.
+         */
+        fSxLustreDeletionPolicy: pulumi.Input<enums.sagemaker.ClusterSharedEnvironmentConfigFSxLustreDeletionPolicy>;
+    }
     /**
      * Slurm configuration for the instance group.
      */
@@ -101524,6 +102024,10 @@ export declare namespace sagemaker {
          * The Amazon Resource Name (ARN) of the image version created on the instance.
          */
         sageMakerImageVersionArn?: pulumi.Input<string>;
+        /**
+         * The Amazon Resource Name (ARN) of the training plan to use for the ResourceSpec.
+         */
+        trainingPlanArn?: pulumi.Input<string>;
     }
     interface DomainS3FileSystemConfigArgs {
         /**
@@ -105189,6 +105693,10 @@ export declare namespace sagemaker {
          * The ARN of the image version created on the instance.
          */
         sageMakerImageVersionArn?: pulumi.Input<string>;
+        /**
+         * The Amazon Resource Name (ARN) of the training plan to use for the ResourceSpec.
+         */
+        trainingPlanArn?: pulumi.Input<string>;
     }
     interface SpaceS3FileSystemArgs {
         s3Uri?: pulumi.Input<string>;
@@ -112078,6 +112586,12 @@ export declare namespace wafv2 {
          */
         customRequestHandling?: pulumi.Input<inputs.wafv2.RuleGroupCustomRequestHandlingArgs>;
     }
+    /**
+     * Configures cryptocurrency payment settings.
+     */
+    interface RuleGroupCryptoConfigArgs {
+        paymentNetworks: pulumi.Input<pulumi.Input<inputs.wafv2.RuleGroupPaymentNetworkArgs>[]>;
+    }
     /**
      * HTTP header.
      */
@@ -112505,6 +113019,19 @@ export declare namespace wafv2 {
          */
         name?: pulumi.Input<string>;
     }
+    /**
+     * Configures monetization for the web ACL or rule group.
+     */
+    interface RuleGroupMonetizationConfigArgs {
+        cryptoConfig?: pulumi.Input<inputs.wafv2.RuleGroupCryptoConfigArgs>;
+        currencyMode?: pulumi.Input<enums.wafv2.RuleGroupCurrencyMode>;
+    }
+    /**
+     * Monetize action for rules.
+     */
+    interface RuleGroupMonetizeActionArgs {
+        priceMultiplier?: pulumi.Input<string>;
+    }
     interface RuleGroupNotStatementArgs {
         /**
          * The statement to negate. You can use any statement that can be nested.
@@ -112517,6 +113044,21 @@ export declare namespace wafv2 {
          */
         statements: pulumi.Input<pulumi.Input<inputs.wafv2.RuleGroupStatementArgs>[]>;
     }
+    /**
+     * Configuration for a single payment network.
+     */
+    interface RuleGroupPaymentNetworkArgs {
+        chain: pulumi.Input<enums.wafv2.RuleGroupBlockchainChain>;
+        prices: pulumi.Input<pulumi.Input<inputs.wafv2.RuleGroupPriceArgs>[]>;
+        walletAddress: pulumi.Input<string>;
+    }
+    /**
+     * A price configuration.
+     */
+    interface RuleGroupPriceArgs {
+        amount: pulumi.Input<string>;
+        currency: pulumi.Input<enums.wafv2.RuleGroupCryptoCurrency>;
+    }
     interface RuleGroupRateBasedStatementArgs {
         /**
          * Setting that indicates how to aggregate the request counts.
@@ -112858,6 +113400,7 @@ export declare namespace wafv2 {
          * Instructs AWS WAF to count the web request and then continue evaluating the request using the remaining rules in the web ACL.
          */
         count?: pulumi.Input<inputs.wafv2.RuleGroupCountActionArgs>;
+        monetize?: pulumi.Input<inputs.wafv2.RuleGroupMonetizeActionArgs>;
     }
     /**
      * Size Constraint statement.
@@ -113505,6 +114048,12 @@ export declare namespace wafv2 {
          */
         customRequestHandling?: pulumi.Input<inputs.wafv2.WebAclCustomRequestHandlingArgs>;
     }
+    /**
+     * Configures cryptocurrency payment settings.
+     */
+    interface WebAclCryptoConfigArgs {
+        paymentNetworks: pulumi.Input<pulumi.Input<inputs.wafv2.WebAclPaymentNetworkArgs>[]>;
+    }
     /**
      * HTTP header.
      */
@@ -114062,6 +114611,19 @@ export declare namespace wafv2 {
          */
         version?: pulumi.Input<string>;
     }
+    /**
+     * Configures monetization for the web ACL or rule group.
+     */
+    interface WebAclMonetizationConfigArgs {
+        cryptoConfig?: pulumi.Input<inputs.wafv2.WebAclCryptoConfigArgs>;
+        currencyMode?: pulumi.Input<enums.wafv2.WebAclCurrencyMode>;
+    }
+    /**
+     * Monetize action for rules.
+     */
+    interface WebAclMonetizeActionArgs {
+        priceMultiplier?: pulumi.Input<string>;
+    }
     interface WebAclNotStatementArgs {
         /**
          * The statement to negate. You can use any statement that can be nested.
@@ -114096,6 +114658,21 @@ export declare namespace wafv2 {
          */
         none?: any;
     }
+    /**
+     * Configuration for a single payment network.
+     */
+    interface WebAclPaymentNetworkArgs {
+        chain: pulumi.Input<enums.wafv2.WebAclBlockchainChain>;
+        prices: pulumi.Input<pulumi.Input<inputs.wafv2.WebAclPriceArgs>[]>;
+        walletAddress: pulumi.Input<string>;
+    }
+    /**
+     * A price configuration.
+     */
+    interface WebAclPriceArgs {
+        amount: pulumi.Input<string>;
+        currency: pulumi.Input<enums.wafv2.WebAclCryptoCurrency>;
+    }
     interface WebAclRateBasedStatementArgs {
         /**
          * Setting that indicates how to aggregate the request counts.
@@ -114686,6 +115263,7 @@ export declare namespace wafv2 {
          * Instructs AWS WAF to count the web request and then continue evaluating the request using the remaining rules in the web ACL.
          */
         count?: pulumi.Input<inputs.wafv2.WebAclCountActionArgs>;
+        monetize?: pulumi.Input<inputs.wafv2.WebAclMonetizeActionArgs>;
     }
     /**
      * Action override for rules in the rule group.