@pulumi/aws-native 1.70.0-alpha.1782284201 → 1.70.0

package/types/output.d.ts

@@ -11959,6 +11959,12 @@ export declare namespace bedrock {
          */
         generativeField?: outputs.bedrock.DataAutomationProjectVideoStandardGenerativeField;
     }
+    /**
+     * Configuration for audio extraction.
+     */
+    interface DataSourceAudioExtractionConfiguration {
+        audioExtractionStatus: enums.bedrock.DataSourceEnabledOrDisabledState;
+    }
     /**
      * Settings for a Bedrock Data Automation used to parse documents for a data source.
      */
@@ -12034,6 +12040,7 @@ export declare namespace bedrock {
          * > Confluence data source connector is in preview release and is subject to change.
          */
         confluenceConfiguration?: outputs.bedrock.DataSourceConfluenceDataSourceConfiguration;
+        managedKnowledgeBaseConnectorConfiguration?: outputs.bedrock.DataSourceManagedKnowledgeBaseConnectorConfiguration;
         /**
          * The configuration information to connect to Amazon S3 as your data source.
          */
@@ -12143,6 +12150,16 @@ export declare namespace bedrock {
          */
         transformations: outputs.bedrock.DataSourceTransformation[];
     }
+    /**
+     * Configuration for deletion protection.
+     */
+    interface DataSourceDeletionProtectionConfiguration {
+        deletionProtectionStatus: enums.bedrock.DataSourceEnabledOrDisabledState;
+        /**
+         * Threshold for deletion protection.
+         */
+        deletionProtectionThreshold?: number;
+    }
     /**
      * Strategy to be used when using Bedrock Foundation Model for Context Enrichment.
      */
@@ -12187,6 +12204,12 @@ export declare namespace bedrock {
          */
         maxTokens: number;
     }
+    /**
+     * Configuration for image extraction.
+     */
+    interface DataSourceImageExtractionConfiguration {
+        imageExtractionStatus: enums.bedrock.DataSourceEnabledOrDisabledState;
+    }
     /**
      * A location for storing content from data sources temporarily as it is processed by custom components in the ingestion pipeline.
      */
@@ -12196,6 +12219,25 @@ export declare namespace bedrock {
          */
         s3Location: outputs.bedrock.DataSourceS3Location;
     }
+    /**
+     * Configuration for managed knowledge base connector data sources.
+     */
+    interface DataSourceManagedKnowledgeBaseConnectorConfiguration {
+        /**
+         * Connector-specific parameters.
+         */
+        connectorParameters?: any;
+        deletionProtectionConfiguration?: outputs.bedrock.DataSourceDeletionProtectionConfiguration;
+        mediaExtractionConfiguration?: outputs.bedrock.DataSourceMediaExtractionConfiguration;
+    }
+    /**
+     * Configuration for media extraction settings.
+     */
+    interface DataSourceMediaExtractionConfiguration {
+        audioExtractionConfiguration?: outputs.bedrock.DataSourceAudioExtractionConfiguration;
+        imageExtractionConfiguration?: outputs.bedrock.DataSourceImageExtractionConfiguration;
+        videoExtractionConfiguration?: outputs.bedrock.DataSourceVideoExtractionConfiguration;
+    }
     /**
      * Settings for parsing document contents
      */
@@ -12454,6 +12496,12 @@ export declare namespace bedrock {
          */
         parsingConfiguration?: outputs.bedrock.DataSourceParsingConfiguration;
     }
+    /**
+     * Configuration for video extraction.
+     */
+    interface DataSourceVideoExtractionConfiguration {
+        videoExtractionStatus: enums.bedrock.DataSourceEnabledOrDisabledState;
+    }
     /**
      * Configuration for the web crawler.
      */
@@ -14243,6 +14291,7 @@ export declare namespace bedrock {
          * Settings for an Amazon Kendra knowledge base.
          */
         kendraKnowledgeBaseConfiguration?: outputs.bedrock.KnowledgeBaseKendraKnowledgeBaseConfiguration;
+        managedKnowledgeBaseConfiguration?: outputs.bedrock.KnowledgeBaseManagedKnowledgeBaseConfiguration;
         /**
          * Specifies configurations for a knowledge base connected to an SQL database.
          */
@@ -14281,6 +14330,27 @@ export declare namespace bedrock {
          */
         kendraIndexArn: string;
     }
+    /**
+     * Contains details about the model used to create vector embeddings for a managed knowledge base.
+     */
+    interface KnowledgeBaseManagedKnowledgeBaseConfiguration {
+        /**
+         * The ARN of the model used to create vector embeddings for the knowledge base.
+         */
+        embeddingModelArn: string;
+        embeddingModelConfiguration?: outputs.bedrock.KnowledgeBaseEmbeddingModelConfiguration;
+        embeddingModelType?: enums.bedrock.KnowledgeBaseEmbeddingModelType;
+        serverSideEncryptionConfiguration?: outputs.bedrock.KnowledgeBaseManagedKnowledgeBaseServerSideEncryptionConfiguration;
+    }
+    /**
+     * Contains details about the server-side encryption for the managed knowledge base.
+     */
+    interface KnowledgeBaseManagedKnowledgeBaseServerSideEncryptionConfiguration {
+        /**
+         * The ARN of the AWS KMS key used to encrypt the managed knowledge base.
+         */
+        kmsKeyArn?: string;
+    }
     /**
      * Contains the storage configuration of the knowledge base in MongoDb Atlas Cloud.
      */
@@ -15750,6 +15820,25 @@ export declare namespace bedrockagentcore {
     interface GatewayTargetAuthorizationDataProperties {
         oauth2: outputs.bedrockagentcore.GatewayTargetOAuth2AuthorizationData;
     }
+    interface GatewayTargetConnectorConfiguration {
+        description?: string;
+        name: string;
+        parameterOverrides?: outputs.bedrockagentcore.GatewayTargetConnectorParameterOverride[];
+        parameterValues?: any;
+    }
+    interface GatewayTargetConnectorParameterOverride {
+        description?: string;
+        path: string;
+        visible?: boolean;
+    }
+    interface GatewayTargetConnectorSource {
+        connectorId: string;
+    }
+    interface GatewayTargetConnectorTargetConfiguration {
+        configurations?: outputs.bedrockagentcore.GatewayTargetConnectorConfiguration[];
+        enabled?: string[];
+        source: outputs.bedrockagentcore.GatewayTargetConnectorSource;
+    }
     interface GatewayTargetCredentialProvider0Properties {
         oauthCredentialProvider: outputs.bedrockagentcore.GatewayTargetOAuthCredentialProvider;
     }
@@ -15769,9 +15858,15 @@ export declare namespace bedrockagentcore {
          */
         credentialProviderType: enums.bedrockagentcore.GatewayTargetCredentialProviderType;
     }
-    interface GatewayTargetHttpTargetConfigurationProperties {
+    interface GatewayTargetHttpApiSchemaConfiguration {
+        source: outputs.bedrockagentcore.GatewayTargetApiSchemaConfiguration0Properties | outputs.bedrockagentcore.GatewayTargetApiSchemaConfiguration1Properties;
+    }
+    interface GatewayTargetHttpTargetConfiguration0Properties {
         agentcoreRuntime: outputs.bedrockagentcore.GatewayTargetRuntimeTargetConfiguration;
     }
+    interface GatewayTargetHttpTargetConfiguration1Properties {
+        passthrough: outputs.bedrockagentcore.GatewayTargetPassthroughTargetConfiguration;
+    }
     interface GatewayTargetIamCredentialProvider {
         region?: string;
         service: string;
@@ -15813,6 +15908,9 @@ export declare namespace bedrockagentcore {
     interface GatewayTargetMcpTargetConfiguration4Properties {
         apiGateway: outputs.bedrockagentcore.GatewayTargetApiGatewayTargetConfiguration;
     }
+    interface GatewayTargetMcpTargetConfiguration5Properties {
+        connector: outputs.bedrockagentcore.GatewayTargetConnectorTargetConfiguration;
+    }
     interface GatewayTargetMcpToolSchemaConfiguration0Properties {
         s3: outputs.bedrockagentcore.GatewayTargetS3Configuration;
     }
@@ -15840,6 +15938,12 @@ export declare namespace bedrockagentcore {
         providerArn: string;
         scopes: string[];
     }
+    interface GatewayTargetPassthroughTargetConfiguration {
+        endpoint: string;
+        protocolType: enums.bedrockagentcore.GatewayTargetPassthroughProtocolType;
+        schema?: outputs.bedrockagentcore.GatewayTargetHttpApiSchemaConfiguration;
+        stickinessConfiguration?: outputs.bedrockagentcore.GatewayTargetStickinessConfiguration;
+    }
     interface GatewayTargetPrivateEndpoint0Properties {
         selfManagedLatticeResource: outputs.bedrockagentcore.GatewayTargetSelfManagedLatticeResourceProperties;
     }
@@ -15849,6 +15953,7 @@ export declare namespace bedrockagentcore {
     interface GatewayTargetRuntimeTargetConfiguration {
         arn: string;
         qualifier?: string;
+        schema?: outputs.bedrockagentcore.GatewayTargetHttpApiSchemaConfiguration;
     }
     interface GatewayTargetS3Configuration {
         bucketOwnerAccountId?: string;
@@ -15866,11 +15971,15 @@ export declare namespace bedrockagentcore {
     interface GatewayTargetSelfManagedLatticeResourceProperties {
         resourceConfigurationIdentifier: string;
     }
+    interface GatewayTargetStickinessConfiguration {
+        identifier: string;
+        timeout?: number;
+    }
     interface GatewayTargetTargetConfiguration0Properties {
-        mcp: outputs.bedrockagentcore.GatewayTargetMcpTargetConfiguration0Properties | outputs.bedrockagentcore.GatewayTargetMcpTargetConfiguration1Properties | outputs.bedrockagentcore.GatewayTargetMcpTargetConfiguration2Properties | outputs.bedrockagentcore.GatewayTargetMcpTargetConfiguration3Properties | outputs.bedrockagentcore.GatewayTargetMcpTargetConfiguration4Properties;
+        mcp: outputs.bedrockagentcore.GatewayTargetMcpTargetConfiguration0Properties | outputs.bedrockagentcore.GatewayTargetMcpTargetConfiguration1Properties | outputs.bedrockagentcore.GatewayTargetMcpTargetConfiguration2Properties | outputs.bedrockagentcore.GatewayTargetMcpTargetConfiguration3Properties | outputs.bedrockagentcore.GatewayTargetMcpTargetConfiguration4Properties | outputs.bedrockagentcore.GatewayTargetMcpTargetConfiguration5Properties;
     }
     interface GatewayTargetTargetConfiguration1Properties {
-        http: outputs.bedrockagentcore.GatewayTargetHttpTargetConfigurationProperties;
+        http: outputs.bedrockagentcore.GatewayTargetHttpTargetConfiguration0Properties | outputs.bedrockagentcore.GatewayTargetHttpTargetConfiguration1Properties;
     }
     interface GatewayTargetToolDefinition {
         description: string;
@@ -15906,9 +16015,15 @@ export declare namespace bedrockagentcore {
         };
     }
     interface HarnessAgentCoreMemoryRetrievalConfig {
-        relevanceScore?: number;
+        /**
+         * Minimum relevance score for retrieved memories. Typed as both number and string because CloudFormation marshals scalars nested in dynamic-key (patternProperties) maps as strings, while direct API/CDK callers send a JSON number; both forms must validate.
+         */
+        relevanceScore?: number | string;
         strategyId?: string;
-        topK?: number;
+        /**
+         * Maximum number of memory records to retrieve. Typed as both integer and string because CloudFormation marshals scalars nested in dynamic-key (patternProperties) maps as strings, while direct API/CDK callers send a JSON integer; both forms must validate.
+         */
+        topK?: number | string;
     }
     interface HarnessAgentCoreRuntimeEnvironment {
         /**
@@ -15935,6 +16050,13 @@ export declare namespace bedrockagentcore {
         claimMatchValue: outputs.bedrockagentcore.HarnessClaimMatchValueType;
     }
     interface HarnessBedrockModelConfig {
+        /**
+         * Provider-specific parameters passed through to the model provider unchanged.
+         */
+        additionalParams?: {
+            [key: string]: any;
+        };
+        apiFormat?: enums.bedrockagentcore.HarnessBedrockModelConfigApiFormat;
         maxTokens?: number;
         modelId: string;
         temperature?: number;
@@ -15961,6 +16083,20 @@ export declare namespace bedrockagentcore {
         allowedScopes?: string[];
         customClaims?: outputs.bedrockagentcore.HarnessCustomClaimValidationType[];
         discoveryUrl: string;
+        privateEndpoint?: outputs.bedrockagentcore.HarnessPrivateEndpoint;
+        privateEndpointOverrides?: outputs.bedrockagentcore.HarnessPrivateEndpointOverride[];
+    }
+    /**
+     * Explicitly opt out of memory.
+     */
+    interface HarnessDisabledMemoryConfiguration {
+    }
+    /**
+     * Configuration for an Amazon EFS access point to mount into the AgentCore Runtime.
+     */
+    interface HarnessEfsAccessPointConfiguration {
+        accessPointArn: string;
+        mountPath: string;
     }
     interface HarnessEnvironmentArtifact {
         containerConfiguration?: outputs.bedrockagentcore.HarnessContainerConfiguration;
@@ -15969,7 +16105,9 @@ export declare namespace bedrockagentcore {
         agentCoreRuntimeEnvironment?: outputs.bedrockagentcore.HarnessAgentCoreRuntimeEnvironment;
     }
     interface HarnessFilesystemConfiguration {
-        sessionStorage: outputs.bedrockagentcore.HarnessSessionStorageConfiguration;
+        efsAccessPoint?: outputs.bedrockagentcore.HarnessEfsAccessPointConfiguration;
+        s3FilesAccessPoint?: outputs.bedrockagentcore.HarnessS3FilesAccessPointConfiguration;
+        sessionStorage?: outputs.bedrockagentcore.HarnessSessionStorageConfiguration;
     }
     interface HarnessGatewayOutboundAuth {
         awsIam?: any;
@@ -15995,12 +16133,63 @@ export declare namespace bedrockagentcore {
         idleRuntimeSessionTimeout?: number;
         maxLifetime?: number;
     }
+    interface HarnessLiteLlmModelConfig {
+        /**
+         * Provider-specific parameters passed through to LiteLLM unchanged.
+         */
+        additionalParams?: {
+            [key: string]: any;
+        };
+        apiBase?: string;
+        apiKeyArn?: string;
+        maxTokens?: number;
+        modelId: string;
+        temperature?: number;
+        topP?: number;
+    }
+    /**
+     * Configuration for managed memory. The harness creates and manages a memory resource in the customer's account.
+     */
+    interface HarnessManagedMemoryConfiguration {
+        /**
+         * The ARN of the managed memory resource. Read-only, populated by the service.
+         */
+        arn?: string;
+        /**
+         * Customer-managed KMS key ARN. Defaults to AWS-owned key. Not updatable after creation.
+         */
+        encryptionKeyArn?: string;
+        /**
+         * Event retention in days. Defaults to 30.
+         */
+        eventExpiryDuration?: number;
+        /**
+         * Strategy types to enable. Defaults to [SEMANTIC, SUMMARIZATION].
+         */
+        strategies?: enums.bedrockagentcore.HarnessManagedMemoryConfigurationStrategiesItem[];
+    }
+    /**
+     * Configuration for a service-managed VPC endpoint.
+     */
+    interface HarnessManagedVpcResource {
+        endpointIpAddressType: enums.bedrockagentcore.HarnessManagedVpcResourceEndpointIpAddressType;
+        routingDomain?: string;
+        securityGroupIds?: string[];
+        subnetIds: string[];
+        tags?: {
+            [key: string]: string;
+        };
+        vpcIdentifier: string;
+    }
     interface HarnessMemoryConfiguration {
         agentCoreMemoryConfiguration?: outputs.bedrockagentcore.HarnessAgentCoreMemoryConfiguration;
+        disabled?: outputs.bedrockagentcore.HarnessDisabledMemoryConfiguration;
+        managedMemoryConfiguration?: outputs.bedrockagentcore.HarnessManagedMemoryConfiguration;
     }
     interface HarnessModelConfiguration {
         bedrockModelConfig?: outputs.bedrockagentcore.HarnessBedrockModelConfig;
         geminiModelConfig?: outputs.bedrockagentcore.HarnessGeminiModelConfig;
+        liteLlmModelConfig?: outputs.bedrockagentcore.HarnessLiteLlmModelConfig;
         openAiModelConfig?: outputs.bedrockagentcore.HarnessOpenAiModelConfig;
     }
     interface HarnessNetworkConfiguration {
@@ -16017,26 +16206,108 @@ export declare namespace bedrockagentcore {
         scopes: string[];
     }
     interface HarnessOpenAiModelConfig {
+        /**
+         * Provider-specific parameters passed through to the model provider unchanged.
+         */
+        additionalParams?: {
+            [key: string]: any;
+        };
+        apiFormat?: enums.bedrockagentcore.HarnessOpenAiModelConfigApiFormat;
         apiKeyArn: string;
         maxTokens?: number;
         modelId: string;
         temperature?: number;
         topP?: number;
     }
+    /**
+     * Private endpoint configuration for connecting to the OpenID Connect discovery endpoint over a private network.
+     */
+    interface HarnessPrivateEndpoint {
+        managedVpcResource?: outputs.bedrockagentcore.HarnessManagedVpcResource;
+        selfManagedLatticeResource?: outputs.bedrockagentcore.HarnessSelfManagedLatticeResource;
+    }
+    /**
+     * Maps a domain to a private endpoint for resolving that domain over a private network.
+     */
+    interface HarnessPrivateEndpointOverride {
+        domain: string;
+        privateEndpoint: outputs.bedrockagentcore.HarnessPrivateEndpoint;
+    }
     interface HarnessRemoteMcpConfig {
         headers?: {
             [key: string]: string;
         };
         url: string;
     }
+    /**
+     * Configuration for an Amazon S3 Files access point to mount into the AgentCore Runtime.
+     */
+    interface HarnessS3FilesAccessPointConfiguration {
+        accessPointArn: string;
+        mountPath: string;
+    }
+    /**
+     * Configuration for connecting to a private resource using a self-managed VPC Lattice resource configuration.
+     */
+    interface HarnessSelfManagedLatticeResource {
+        resourceConfigurationIdentifier: string;
+    }
     interface HarnessSessionStorageConfiguration {
         mountPath: string;
     }
     interface HarnessSkill {
+        awsSkills?: outputs.bedrockagentcore.HarnessSkillAwsSkillsSource;
+        git?: outputs.bedrockagentcore.HarnessSkillGitSource;
         /**
          * The filesystem path to the skill definition.
          */
-        path: string;
+        path?: string;
+        s3?: outputs.bedrockagentcore.HarnessSkillS3Source;
+    }
+    /**
+     * AWS Skills baked into the Harness's underlying Runtime.
+     */
+    interface HarnessSkillAwsSkillsSource {
+        /**
+         * Optionally filter allowed skills with glob syntax, e.g., ['core-skills/*'].
+         */
+        paths?: string[];
+    }
+    /**
+     * Authentication configuration for accessing a private git repository.
+     */
+    interface HarnessSkillGitAuth {
+        /**
+         * The ARN of the credential in AgentCore Identity containing the password or personal access token.
+         */
+        credentialArn: string;
+        /**
+         * Username for authentication. Defaults to 'oauth2' if not specified.
+         */
+        username?: string;
+    }
+    /**
+     * A git repository containing the skill, cloned over HTTPS.
+     */
+    interface HarnessSkillGitSource {
+        auth?: outputs.bedrockagentcore.HarnessSkillGitAuth;
+        /**
+         * Subdirectory within the repository containing the skill.
+         */
+        path?: string;
+        /**
+         * The HTTPS URL of the git repository.
+         */
+        url: string;
+    }
+    /**
+     * An S3 source containing the skill.
+     */
+    interface HarnessSkillS3Source {
+        /**
+         * The S3 URI pointing to the skill directory (e.g., s3://bucket/skills/my-skill/).
+         */
+        uri: string;
     }
     interface HarnessSlidingWindowConfiguration {
         messagesCount?: number;
@@ -16877,7 +17148,17 @@ export declare namespace bedrockagentcore {
      * The definition structure for policies. Encapsulates different policy formats.
      */
     interface PolicyDefinition {
-        cedar: outputs.bedrockagentcore.PolicyCedarPolicy;
+        cedar?: outputs.bedrockagentcore.PolicyCedarPolicy;
+        policy?: outputs.bedrockagentcore.PolicyStatement;
+    }
+    /**
+     * A policy statement within the AgentCore Policy system.
+     */
+    interface PolicyStatement {
+        /**
+         * The policy statement.
+         */
+        statement: string;
     }
     interface RuntimeAgentRuntimeArtifact {
         codeConfiguration?: outputs.bedrockagentcore.RuntimeCodeConfiguration;
@@ -22515,6 +22796,13 @@ export declare namespace cognito {
          */
         certificateArn?: string;
     }
+    interface UserPoolDomainFailoverType {
+        primaryRoute53HealthCheckId: string;
+        secondaryRegion: string;
+    }
+    interface UserPoolDomainRoutingType {
+        failover?: outputs.cognito.UserPoolDomainFailoverType;
+    }
     interface UserPoolEmailConfiguration {
         /**
          * The set of configuration rules that can be applied to emails sent using Amazon Simple Email Service. A configuration set is applied to an email by including a reference to the configuration set in the headers of the email. Once applied, all of the rules in that configuration set are applied to the email. Configuration sets can be used to apply the following types of rules to emails:
@@ -32119,7 +32407,7 @@ export declare namespace ec2 {
      */
     interface LaunchTemplateConnectionTrackingSpecification {
         /**
-         * Timeout (in seconds) for idle TCP connections in an established state. Min: 60 seconds. Max: 432000 seconds (5 days). Default: 432000 seconds. Recommended: Less than 432000 seconds.
+         * Timeout (in seconds) for idle TCP connections in an established state. Min: 60 seconds. Max: 432000 seconds (5 days). Default: 350 seconds for Nitro v6 instance types (excluding P6e-GB200); 432000 seconds for all other instance types (including P6e-GB200). Recommended: Less than 432000 seconds.
          */
         tcpEstablishedTimeout?: number;
         /**
@@ -37732,6 +38020,13 @@ export declare namespace ecs {
          */
         volumeType?: string;
     }
+    interface ServiceMetricConfiguration {
+        metricNames: enums.ecs.ServiceMetricConfigurationMetricNamesItem[];
+        resolutionSeconds: number;
+    }
+    interface ServiceMonitoringConfiguration {
+        metricConfigurations: outputs.ecs.ServiceMetricConfiguration[];
+    }
     /**
      * The network configuration for a task or service.
      */
@@ -38091,7 +38386,7 @@ export declare namespace ecs {
          */
         repositoryCredentials?: outputs.ecs.TaskDefinitionRepositoryCredentials;
         /**
-         * The type and amount of a resource to assign to a container. The only supported resource is a GPU.
+         * The type and amount of a resource to assign to a container. The supported resources are GPUs and Neuron devices.
          */
         resourceRequirements?: outputs.ecs.TaskDefinitionResourceRequirement[];
         /**
@@ -38475,7 +38770,6 @@ export declare namespace ecs {
         swappiness?: number;
         /**
          * The container path, mount options, and size (in MiB) of the tmpfs mount. This parameter maps to the ``--tmpfs`` option to docker run.
-         *   If you're using tasks that use the Fargate launch type, the ``tmpfs`` parameter isn't supported.
          */
         tmpfs?: outputs.ecs.TaskDefinitionTmpfs[];
     }
@@ -38644,7 +38938,7 @@ export declare namespace ecs {
         credentialsParameter?: string;
     }
     /**
-     * The type and amount of a resource to assign to a container. The supported resource types are GPUs and Elastic Inference accelerators. For more information, see [Working with GPUs on Amazon ECS](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-gpu.html) or [Working with Amazon Elastic Inference on Amazon ECS](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-inference.html) in the *Amazon Elastic Container Service Developer Guide*
+     * The type and amount of a resource to assign to a container. The supported resource types are GPUs, Neuron devices, and Elastic Inference accelerators. For more information, see [Working with GPUs on Amazon ECS](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-gpu.html) or [Working with Amazon Elastic Inference on Amazon ECS](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/ecs-inference.html) in the *Amazon Elastic Container Service Developer Guide*
      */
     interface TaskDefinitionResourceRequirement {
         /**
@@ -38653,7 +38947,8 @@ export declare namespace ecs {
         type: string;
         /**
          * The value for the specified resource type.
-         *  When the type is ``GPU``, the value is the number of physical ``GPUs`` the Amazon ECS container agent reserves for the container. The number of GPUs that's reserved for all containers in a task can't exceed the number of available GPUs on the container instance that the task is launched on.
+         *  When the type is ``GPU``, the value is the number of physical ``GPUs`` the Amazon ECS container agent reserves for the container. The number of GPUs that's reserved for all containers in a task can't exceed the number of available GPUs on the container instance that the task is launched on. You can also specify ``ALL`` to allocate all available GPUs on the instance to the container.
+         *  When the type is ``NeuronDevice``, the value must be ``ALL``. This allocates all available Neuron devices on the instance to the container. Only one container in a task can specify ``NeuronDevice`` resources. This resource type is only supported on Managed Instances.
          *  When the type is ``InferenceAccelerator``, the ``value`` matches the ``deviceName`` for an [InferenceAccelerator](https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_InferenceAccelerator.html) specified in a task definition.
          */
         value: string;
@@ -38690,10 +38985,27 @@ export declare namespace ecs {
          */
         operatingSystemFamily?: string;
     }
+    /**
+     * This parameter is specified when you're using an Amazon S3 Files file system for task storage. For more information, see [Amazon S3 Files volumes](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/s3files-volumes.html) in the *Amazon Elastic Container Service Developer Guide*.
+     *   Your task definition must include a Task IAM Role. See [IAM role for attaching your file system to compute resources](https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-files-prereq-policies.html#s3-files-prereq-iam-compute-role) for required permissions.
+     */
     interface TaskDefinitionS3FilesVolumeConfiguration {
+        /**
+         * The full ARN of the S3 Files access point to use. If an access point is specified, the root directory value specified in the ``S3FilesVolumeConfiguration`` must either be omitted or set to ``/`` which will enforce the path set on the S3 Files access point. For more information, see [Creating S3 Files access points](https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-files-access-points-creating.html).
+         */
         accessPointArn?: string;
+        /**
+         * The full ARN of the S3 Files file system to mount.
+         */
         fileSystemArn: string;
+        /**
+         * The directory within the Amazon S3 Files file system to mount as the root directory. If this parameter is omitted, the root of the Amazon S3 Files file system will be used. Specifying ``/`` will have the same effect as omitting this parameter.
+         *   If a S3 Files access point is specified in the ``accessPointArn``, the root directory parameter must either be omitted or set to ``/`` which will enforce the path set on the S3 Files access point.
+         */
         rootDirectory?: string;
+        /**
+         * The port to use for sending encrypted data between the ECS host and the S3 Files file system. If you do not specify a transit encryption port, it will use the port selection strategy that the Amazon S3 Files mount helper uses. For more information, see [S3 Files mount helper](https://docs.aws.amazon.com/AmazonS3/latest/userguide/s3-files-mounting.html).
+         */
         transitEncryptionPort?: number;
     }
     /**
@@ -38779,7 +39091,7 @@ export declare namespace ecs {
         softLimit: number;
     }
     /**
-     * The data volume configuration for tasks launched using this task definition. Specifying a volume configuration in a task definition is optional. The volume configuration may contain multiple volumes but only one volume configured at launch is supported. Each volume defined in the volume configuration may only specify a ``name`` and one of either ``configuredAtLaunch``, ``dockerVolumeConfiguration``, ``efsVolumeConfiguration``, ``fsxWindowsFileServerVolumeConfiguration``, or ``host``. If an empty volume configuration is specified, by default Amazon ECS uses a host volume. For more information, see [Using data volumes in tasks](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/using_data_volumes.html).
+     * The data volume configuration for tasks launched using this task definition. Specifying a volume configuration in a task definition is optional. The volume configuration may contain multiple volumes but only one volume configured at launch is supported. Each volume defined in the volume configuration may only specify a ``name`` and one of either ``configuredAtLaunch``, ``dockerVolumeConfiguration``, ``efsVolumeConfiguration``, ``s3filesVolumeConfiguration``, ``fsxWindowsFileServerVolumeConfiguration``, or ``host``. If an empty volume configuration is specified, by default Amazon ECS uses a host volume. For more information, see [Using data volumes in tasks](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/using_data_volumes.html).
      */
     interface TaskDefinitionVolume {
         /**
@@ -38811,8 +39123,12 @@ export declare namespace ecs {
          *  When using a volume configured at launch, the ``name`` is required and must also be specified as the volume name in the ``ServiceVolumeConfiguration`` or ``TaskVolumeConfiguration`` parameter when creating your service or standalone task.
          *  For all other types of volumes, this name is referenced in the ``sourceVolume`` parameter of the ``mountPoints`` object in the container definition.
          *  When a volume is using the ``efsVolumeConfiguration``, the name is required.
+         *  When a volume is using the ``s3filesVolumeConfiguration``, the name is required.
          */
         name?: string;
+        /**
+         * This parameter is specified when you use an Amazon S3 Files file system for task storage.
+         */
         s3FilesVolumeConfiguration?: outputs.ecs.TaskDefinitionS3FilesVolumeConfiguration;
     }
     /**
@@ -39401,6 +39717,10 @@ export declare namespace eks {
      * An object representing the VPC configuration to use for an Amazon EKS cluster.
      */
     interface ClusterResourcesVpcConfig {
+        /**
+         * Specify the egress mode for the cluster control plane. If you set this to CUSTOMER_ROUTED, the control plane routes traffic through your VPC subnets instead of using AWS managed networking.
+         */
+        controlPlaneEgressMode?: string;
         /**
          * Set this value to true to enable private access for your cluster's Kubernetes API server endpoint. If you enable private access, Kubernetes API requests from within your cluster's VPC use the private VPC endpoint. The default value for this parameter is false, which disables private access for your Kubernetes API server. If you disable private access and you have nodes or AWS Fargate pods in the cluster, then ensure that publicAccessCidrs includes the necessary CIDR blocks for communication with the nodes or Fargate pods.
          */
@@ -41165,6 +41485,10 @@ export declare namespace elasticloadbalancingv2 {
     }
 }
 export declare namespace elementalinference {
+    interface FeedAspectRatio {
+        height: number;
+        width: number;
+    }
     interface FeedClippingConfig {
         callbackMetadata?: string;
     }
@@ -41173,7 +41497,7 @@ export declare namespace elementalinference {
     interface FeedGetOutput {
         description?: string;
         name: string;
-        outputConfig: outputs.elementalinference.FeedOutputConfig0Properties | outputs.elementalinference.FeedOutputConfig1Properties;
+        outputConfig: outputs.elementalinference.FeedOutputConfig0Properties | outputs.elementalinference.FeedOutputConfig1Properties | outputs.elementalinference.FeedOutputConfig2Properties;
         status: enums.elementalinference.FeedOutputStatus;
     }
     interface FeedOutputConfig0Properties {
@@ -41182,6 +41506,15 @@ export declare namespace elementalinference {
     interface FeedOutputConfig1Properties {
         clipping: outputs.elementalinference.FeedClippingConfig;
     }
+    interface FeedOutputConfig2Properties {
+        subtitling: outputs.elementalinference.FeedSubtitlingConfig;
+    }
+    interface FeedSubtitlingConfig {
+        aspectRatio?: outputs.elementalinference.FeedAspectRatio;
+        dictionary?: string;
+        language: enums.elementalinference.FeedTranscriptionLanguage;
+        profanityFilter?: enums.elementalinference.FeedProfanityFilterMode;
+    }
 }
 export declare namespace emr {
     interface StepHadoopJarStepConfig {
@@ -44456,6 +44789,10 @@ export declare namespace gamelift {
          * Specifies the image URI of this container.
          */
         imageUri: string;
+        /**
+         * Linux-specific modifications applied to the default Docker container configuration, such as Linux capabilities.
+         */
+        linuxCapabilities?: outputs.gamelift.ContainerGroupDefinitionLinuxCapabilities;
         /**
          * A list of mount point configurations to be used in a container.
          */
@@ -44473,6 +44810,15 @@ export declare namespace gamelift {
          */
         serverSdkVersion: string;
     }
+    /**
+     * A set of Linux capabilities that are added to a container's default Docker configuration. For more detailed information, see the capabilities(7) Linux manual page.
+     */
+    interface ContainerGroupDefinitionLinuxCapabilities {
+        /**
+         * The list of Linux capabilities to add to the container's default configuration.
+         */
+        include?: enums.gamelift.ContainerGroupDefinitionLinuxCapabilitiesIncludeItem[];
+    }
     /**
      * Defines the ports on a container.
      */
@@ -44510,6 +44856,10 @@ export declare namespace gamelift {
          * Specifies the image URI of this container.
          */
         imageUri: string;
+        /**
+         * Linux-specific modifications applied to the default Docker container configuration, such as Linux capabilities.
+         */
+        linuxCapabilities?: outputs.gamelift.ContainerGroupDefinitionLinuxCapabilities;
         /**
          * The total memory limit of container groups following this definition in MiB
          */
@@ -56616,6 +56966,16 @@ export declare namespace lambda {
          */
         excludedInstanceTypes?: string[];
     }
+    interface CapacityProviderLoggingConfig {
+        /**
+         * The log group name.
+         */
+        logGroup?: string;
+        /**
+         * System log granularity level
+         */
+        systemLogLevel?: enums.lambda.CapacityProviderLoggingConfigSystemLogLevel;
+    }
     /**
      * Configuration that specifies the permissions required for the capacity provider to manage compute resources.
      */
@@ -56626,9 +56986,6 @@ export declare namespace lambda {
         capacityProviderOperatorRoleArn: string;
     }
     interface CapacityProviderPropagateTagsConfig {
-        /**
-         * A list of tags to explicitly propagate to managed resources.
-         */
         explicitTags?: outputs.lambda.CapacityProviderTag[];
         mode?: enums.lambda.CapacityProviderPropagateTagsMode;
     }
@@ -56675,6 +57032,12 @@ export declare namespace lambda {
          */
         targetValue: number;
     }
+    interface CapacityProviderTelemetryConfig {
+        /**
+         * The logging configuration for the capacity provider.
+         */
+        loggingConfig?: outputs.lambda.CapacityProviderLoggingConfig;
+    }
     /**
      * VPC configuration that specifies the network settings for compute instances managed by the capacity provider.
      */
@@ -57202,6 +57565,11 @@ export declare namespace lambda {
          */
         subnetIds?: string[];
     }
+    interface Hooks {
+        microvmHooks?: outputs.lambda.MicrovmImageMicrovmHooks;
+        microvmImageHooks?: outputs.lambda.MicrovmImageHooks;
+        port?: number;
+    }
     interface LayerVersionContent {
         /**
          * The Amazon S3 bucket of the layer archive.
@@ -57211,11 +57579,79 @@ export declare namespace lambda {
          * The Amazon S3 key of the layer archive.
          */
         s3Key: string;
+        /**
+         * Specifies whether Lambda should copy the deployment package to its internal storage (COPY) or reference it directly from your S3 bucket (REFERENCE).
+         */
+        s3ObjectStorageMode?: enums.lambda.LayerVersionContentS3ObjectStorageMode;
         /**
          * For versioned objects, the version of the layer archive object to use.
          */
         s3ObjectVersion?: string;
     }
+    interface MicrovmImageCloudWatchLogging {
+        logGroup?: string;
+        logStream?: string;
+    }
+    interface MicrovmImageCodeArtifact {
+        uri: string;
+    }
+    interface MicrovmImageCpuConfiguration {
+        architecture: enums.lambda.MicrovmImageCpuConfigurationArchitecture;
+    }
+    interface MicrovmImageEnvironmentVariable {
+        key: string;
+        value: string;
+    }
+    interface MicrovmImageHooks {
+        ready?: enums.lambda.MicrovmImageHookState;
+        readyTimeoutInSeconds?: number;
+        validate?: enums.lambda.MicrovmImageHookState;
+        validateTimeoutInSeconds?: number;
+    }
+    interface MicrovmImageLogging {
+        cloudWatch?: outputs.lambda.MicrovmImageCloudWatchLogging;
+        disabled?: boolean;
+    }
+    interface MicrovmImageMicrovmHooks {
+        resume?: enums.lambda.MicrovmImageHookState;
+        resumeTimeoutInSeconds?: number;
+        run?: enums.lambda.MicrovmImageHookState;
+        runTimeoutInSeconds?: number;
+        suspend?: enums.lambda.MicrovmImageHookState;
+        suspendTimeoutInSeconds?: number;
+        terminate?: enums.lambda.MicrovmImageHookState;
+        terminateTimeoutInSeconds?: number;
+    }
+    interface MicrovmImageResources {
+        minimumMemoryInMiB: number;
+    }
+    /**
+     * The network configuration for the connector. Specify a VpcEgressConfiguration to enable outbound traffic routing through your VPC.
+     */
+    interface NetworkConnectorConfig {
+        vpcEgressConfiguration: outputs.lambda.NetworkConnectorVpcEgressConfiguration;
+    }
+    /**
+     * The VPC egress configuration for the network connector. Specifies the subnets, security groups, and network protocol for routing outbound traffic through your VPC.
+     */
+    interface NetworkConnectorVpcEgressConfiguration {
+        /**
+         * The types of Lambda compute resources that can use this connector. Currently, only MicroVm is supported.
+         */
+        associatedComputeResourceTypes: enums.lambda.NetworkConnectorVpcEgressConfigurationAssociatedComputeResourceTypesItem[];
+        /**
+         * The network protocol for the connector. Specify IPv4 for IPv4-only networking, or DualStack for both IPv4 and IPv6.
+         */
+        networkProtocol?: enums.lambda.NetworkConnectorVpcEgressConfigurationNetworkProtocol;
+        /**
+         * The IDs of the VPC security groups to attach to the ENIs. Specify 0 to 5 security groups. All security groups must be in the same VPC as the subnets.
+         */
+        securityGroupIds?: string[];
+        /**
+         * The IDs of the VPC subnets where Lambda provisions elastic network interfaces (ENIs). Specify 1 to 16 subnets. All subnets must be in the same VPC.
+         */
+        subnetIds: string[];
+    }
     interface UrlCors {
         /**
          * Specifies whether credentials are included in the CORS request.
@@ -62410,6 +62846,7 @@ export declare namespace mediapackagev2 {
      * <p>Retrieve the DASH manifest configuration.</p>
      */
     interface OriginEndpointDashManifestConfiguration {
+        audioTimelinePattern?: enums.mediapackagev2.OriginEndpointDashAudioTimelinePattern;
         availabilityStartTimeConfiguration?: outputs.mediapackagev2.OriginEndpointDashAvailabilityStartTimeConfigurationProperties;
         /**
          * <p>The base URL to use for retrieving segments.</p>
@@ -63720,10 +64157,14 @@ export declare namespace msk {
      * Details of the client authentication used by the Apache Kafka cluster.
      */
     interface ReplicatorKafkaClusterClientAuthentication {
+        /**
+         * Details for mTLS client authentication.
+         */
+        mtls?: outputs.msk.ReplicatorKafkaClusterMtlsAuthentication;
         /**
          * Details for SASL/SCRAM client authentication.
          */
-        saslScram: outputs.msk.ReplicatorKafkaClusterSaslScramAuthentication;
+        saslScram?: outputs.msk.ReplicatorKafkaClusterSaslScramAuthentication;
     }
     /**
      * Details of an Amazon VPC which has network connectivity to the Kafka cluster.
@@ -63751,6 +64192,15 @@ export declare namespace msk {
          */
         rootCaCertificate?: string;
     }
+    /**
+     * Details for mTLS client authentication.
+     */
+    interface ReplicatorKafkaClusterMtlsAuthentication {
+        /**
+         * The Amazon Resource Name (ARN) of the Secrets Manager secret.
+         */
+        secretArn: string;
+    }
     /**
      * Details for SASL/SCRAM client authentication.
      */
@@ -65244,6 +65694,7 @@ export declare namespace observabilityadmin {
          * Log specific configuration for centralization destination log groups.
          */
         destinationLogsConfiguration?: outputs.observabilityadmin.OrganizationCentralizationRuleDestinationLogsConfiguration;
+        destinationMetricsConfiguration?: outputs.observabilityadmin.OrganizationCentralizationRuleDestinationMetricsConfiguration;
         /**
          * The primary destination region to which telemetry data should be centralized.
          */
@@ -65262,6 +65713,7 @@ export declare namespace observabilityadmin {
          * Log specific configuration for centralization source log groups.
          */
         sourceLogsConfiguration?: outputs.observabilityadmin.OrganizationCentralizationRuleSourceLogsConfiguration;
+        sourceMetricsConfiguration?: outputs.observabilityadmin.OrganizationCentralizationRuleSourceMetricsConfiguration;
     }
     interface OrganizationCentralizationRuleDestinationLogsConfiguration {
         /**
@@ -65274,6 +65726,9 @@ export declare namespace observabilityadmin {
          */
         logsEncryptionConfiguration?: outputs.observabilityadmin.OrganizationCentralizationRuleLogsEncryptionConfiguration;
     }
+    interface OrganizationCentralizationRuleDestinationMetricsConfiguration {
+        backupConfiguration?: outputs.observabilityadmin.OrganizationCentralizationRuleMetricsBackupConfiguration;
+    }
     interface OrganizationCentralizationRuleLogGroupNameConfiguration {
         logGroupNamePattern: string;
     }
@@ -65301,6 +65756,9 @@ export declare namespace observabilityadmin {
          */
         kmsKeyArn?: string;
     }
+    interface OrganizationCentralizationRuleMetricsBackupConfiguration {
+        region: string;
+    }
     interface OrganizationCentralizationRuleSourceLogsConfiguration {
         dataSourceSelectionCriteria?: string;
         /**
@@ -65312,6 +65770,9 @@ export declare namespace observabilityadmin {
          */
         logGroupSelectionCriteria?: string;
     }
+    interface OrganizationCentralizationRuleSourceMetricsConfiguration {
+        metricsSelectionCriteria?: string;
+    }
     /**
      * The condition of the action desired in the filter.
      */
@@ -101837,6 +102298,28 @@ export declare namespace s3 {
          */
         tagFilters?: outputs.s3.BucketTagFilter[];
     }
+    interface BucketAnnotationTableConfiguration {
+        /**
+         * Specifies whether annotation table configuration is enabled or disabled.
+         */
+        configurationState: enums.s3.BucketAnnotationTableConfigurationConfigurationState;
+        /**
+         * The encryption configuration for the annotation table.
+         */
+        encryptionConfiguration?: outputs.s3.BucketMetadataTableEncryptionConfiguration;
+        /**
+         * The ARN of the IAM role that grants Amazon S3 Metadata permission to read annotations from your bucket.
+         */
+        role?: string;
+        /**
+         * The ARN of the annotation table.
+         */
+        tableArn?: string;
+        /**
+         * The name of the annotation table.
+         */
+        tableName?: string;
+    }
     /**
      * A bucket-level setting for Amazon S3 general purpose buckets used to prevent the upload of new objects encrypted with the specified server-side encryption type. For example, blocking an encryption type will block ``PutObject``, ``CopyObject``, ``PostObject``, multipart upload, and replication requests to the bucket for objects with the specified encryption type. However, you can continue to read and list any pre-existing objects already encrypted with the specified encryption type. For more information, see [Blocking or unblocking SSE-C for a general purpose bucket](https://docs.aws.amazon.com/AmazonS3/latest/userguide/blocking-unblocking-s3-c-encryption-gpb.html).
      *  This data type is used with the following actions:
@@ -102159,6 +102642,7 @@ export declare namespace s3 {
      * Creates a V2 S3 Metadata configuration of a general purpose bucket. For more information, see [Accelerating data discovery with S3 Metadata](https://docs.aws.amazon.com/AmazonS3/latest/userguide/metadata-tables-overview.html) in the *Amazon S3 User Guide*.
      */
     interface BucketMetadataConfiguration {
+        annotationTableConfiguration?: outputs.s3.BucketAnnotationTableConfiguration;
         /**
          * The destination information for the S3 Metadata configuration.
          */
@@ -104477,7 +104961,7 @@ export declare namespace sagemaker {
          * The number of instances that are currently in the restricted instance group of a SageMaker HyperPod cluster.
          */
         currentCount?: number;
-        environmentConfig: outputs.sagemaker.ClusterEnvironmentConfig;
+        environmentConfig?: outputs.sagemaker.ClusterEnvironmentConfig;
         executionRole: string;
         /**
          * The number of instances you specified to add to the restricted instance group of a SageMaker HyperPod cluster.
@@ -104497,6 +104981,12 @@ export declare namespace sagemaker {
          */
         trainingPlanArn?: string;
     }
+    /**
+     * The cluster-level configuration for restricted instance groups, including shared environment settings for inter-RIG communication and FSx Lustre sharing.
+     */
+    interface ClusterRestrictedInstanceGroupsConfig {
+        sharedEnvironmentConfig: outputs.sagemaker.ClusterSharedEnvironmentConfig;
+    }
     /**
      * The policy that SageMaker uses when updating the AMI versions of the cluster.
      */
@@ -104514,6 +105004,16 @@ export declare namespace sagemaker {
          */
         scheduleExpression: string;
     }
+    /**
+     * The shared environment configuration for restricted instance groups that use cluster-level shared FSx Lustre storage.
+     */
+    interface ClusterSharedEnvironmentConfig {
+        fSxLustreConfig?: outputs.sagemaker.ClusterFSxLustreConfig;
+        /**
+         * The deletion policy for the shared FSx Lustre file system. Keep retains the FSx when RIGs are deleted. DeleteIfNotUsed deletes the FSx when no RIGs reference it.
+         */
+        fSxLustreDeletionPolicy: enums.sagemaker.ClusterSharedEnvironmentConfigFSxLustreDeletionPolicy;
+    }
     /**
      * Slurm configuration for the instance group.
      */
@@ -105175,6 +105675,10 @@ export declare namespace sagemaker {
          * The Amazon Resource Name (ARN) of the image version created on the instance.
          */
         sageMakerImageVersionArn?: string;
+        /**
+         * The Amazon Resource Name (ARN) of the training plan to use for the ResourceSpec.
+         */
+        trainingPlanArn?: string;
     }
     interface DomainS3FileSystemConfig {
         /**
@@ -108857,6 +109361,10 @@ export declare namespace sagemaker {
          * The ARN of the image version created on the instance.
          */
         sageMakerImageVersionArn?: string;
+        /**
+         * The Amazon Resource Name (ARN) of the training plan to use for the ResourceSpec.
+         */
+        trainingPlanArn?: string;
     }
     interface SpaceS3FileSystem {
         s3Uri?: string;
@@ -115841,6 +116349,12 @@ export declare namespace wafv2 {
          */
         customRequestHandling?: outputs.wafv2.RuleGroupCustomRequestHandling;
     }
+    /**
+     * Configures cryptocurrency payment settings.
+     */
+    interface RuleGroupCryptoConfig {
+        paymentNetworks: outputs.wafv2.RuleGroupPaymentNetwork[];
+    }
     /**
      * HTTP header.
      */
@@ -116268,6 +116782,19 @@ export declare namespace wafv2 {
          */
         name?: string;
     }
+    /**
+     * Configures monetization for the web ACL or rule group.
+     */
+    interface RuleGroupMonetizationConfig {
+        cryptoConfig?: outputs.wafv2.RuleGroupCryptoConfig;
+        currencyMode?: enums.wafv2.RuleGroupCurrencyMode;
+    }
+    /**
+     * Monetize action for rules.
+     */
+    interface RuleGroupMonetizeAction {
+        priceMultiplier?: string;
+    }
     interface RuleGroupNotStatement {
         /**
          * The statement to negate. You can use any statement that can be nested.
@@ -116280,6 +116807,21 @@ export declare namespace wafv2 {
          */
         statements: outputs.wafv2.RuleGroupStatement[];
     }
+    /**
+     * Configuration for a single payment network.
+     */
+    interface RuleGroupPaymentNetwork {
+        chain: enums.wafv2.RuleGroupBlockchainChain;
+        prices: outputs.wafv2.RuleGroupPrice[];
+        walletAddress: string;
+    }
+    /**
+     * A price configuration.
+     */
+    interface RuleGroupPrice {
+        amount: string;
+        currency: enums.wafv2.RuleGroupCryptoCurrency;
+    }
     interface RuleGroupRateBasedStatement {
         /**
          * Setting that indicates how to aggregate the request counts.
@@ -116621,6 +117163,7 @@ export declare namespace wafv2 {
          * Instructs AWS WAF to count the web request and then continue evaluating the request using the remaining rules in the web ACL.
          */
         count?: outputs.wafv2.RuleGroupCountAction;
+        monetize?: outputs.wafv2.RuleGroupMonetizeAction;
     }
     /**
      * Size Constraint statement.
@@ -117268,6 +117811,12 @@ export declare namespace wafv2 {
          */
         customRequestHandling?: outputs.wafv2.WebAclCustomRequestHandling;
     }
+    /**
+     * Configures cryptocurrency payment settings.
+     */
+    interface WebAclCryptoConfig {
+        paymentNetworks: outputs.wafv2.WebAclPaymentNetwork[];
+    }
     /**
      * HTTP header.
      */
@@ -117825,6 +118374,19 @@ export declare namespace wafv2 {
          */
         version?: string;
     }
+    /**
+     * Configures monetization for the web ACL or rule group.
+     */
+    interface WebAclMonetizationConfig {
+        cryptoConfig?: outputs.wafv2.WebAclCryptoConfig;
+        currencyMode?: enums.wafv2.WebAclCurrencyMode;
+    }
+    /**
+     * Monetize action for rules.
+     */
+    interface WebAclMonetizeAction {
+        priceMultiplier?: string;
+    }
     interface WebAclNotStatement {
         /**
          * The statement to negate. You can use any statement that can be nested.
@@ -117859,6 +118421,21 @@ export declare namespace wafv2 {
          */
         none?: any;
     }
+    /**
+     * Configuration for a single payment network.
+     */
+    interface WebAclPaymentNetwork {
+        chain: enums.wafv2.WebAclBlockchainChain;
+        prices: outputs.wafv2.WebAclPrice[];
+        walletAddress: string;
+    }
+    /**
+     * A price configuration.
+     */
+    interface WebAclPrice {
+        amount: string;
+        currency: enums.wafv2.WebAclCryptoCurrency;
+    }
     interface WebAclRateBasedStatement {
         /**
          * Setting that indicates how to aggregate the request counts.
@@ -118449,6 +119026,7 @@ export declare namespace wafv2 {
          * Instructs AWS WAF to count the web request and then continue evaluating the request using the remaining rules in the web ACL.
          */
         count?: outputs.wafv2.WebAclCountAction;
+        monetize?: outputs.wafv2.WebAclMonetizeAction;
     }
     /**
      * Action override for rules in the rule group.