@pulumi/aws-native 1.77.0-alpha.1787913348 → 1.77.0

package/types/output.d.ts

@@ -7342,6 +7342,9 @@ export declare namespace arcregionswitch {
     interface PlanExecutionBlockConfiguration16Properties {
         neptuneGlobalDatabaseConfig: outputs.arcregionswitch.PlanNeptuneGlobalDatabaseConfiguration;
     }
+    interface PlanExecutionBlockConfiguration17Properties {
+        rdsSwitchoverReadReplicaConfig: outputs.arcregionswitch.PlanRdsSwitchoverReadReplicaConfiguration;
+    }
     interface PlanExecutionBlockConfiguration1Properties {
         ec2AsgCapacityIncreaseConfig: outputs.arcregionswitch.PlanEc2AsgCapacityIncreaseConfiguration;
     }
@@ -7441,6 +7444,18 @@ export declare namespace arcregionswitch {
         externalId?: string;
         timeoutMinutes?: number;
     }
+    interface PlanRdsSwitchoverReadReplicaConfiguration {
+        crossAccountRole?: string;
+        dbInstanceArnMap: {
+            [key: string]: string;
+        };
+        externalId?: string;
+        timeoutMinutes?: number;
+        ungraceful?: outputs.arcregionswitch.PlanRdsUngraceful;
+    }
+    interface PlanRdsUngraceful {
+        ungraceful?: enums.arcregionswitch.PlanRdsUngracefulBehavior;
+    }
     interface PlanRegionSwitchPlanConfiguration {
         arn: string;
         crossAccountRole?: string;
@@ -7485,7 +7500,7 @@ export declare namespace arcregionswitch {
         /**
          * The configuration for an execution block in a workflow.
          */
-        executionBlockConfiguration: outputs.arcregionswitch.PlanExecutionBlockConfiguration0Properties | outputs.arcregionswitch.PlanExecutionBlockConfiguration1Properties | outputs.arcregionswitch.PlanExecutionBlockConfiguration2Properties | outputs.arcregionswitch.PlanExecutionBlockConfiguration3Properties | outputs.arcregionswitch.PlanExecutionBlockConfiguration4Properties | outputs.arcregionswitch.PlanExecutionBlockConfiguration5Properties | outputs.arcregionswitch.PlanExecutionBlockConfiguration6Properties | outputs.arcregionswitch.PlanExecutionBlockConfiguration7Properties | outputs.arcregionswitch.PlanExecutionBlockConfiguration8Properties | outputs.arcregionswitch.PlanExecutionBlockConfiguration9Properties | outputs.arcregionswitch.PlanExecutionBlockConfiguration10Properties | outputs.arcregionswitch.PlanExecutionBlockConfiguration11Properties | outputs.arcregionswitch.PlanExecutionBlockConfiguration12Properties | outputs.arcregionswitch.PlanExecutionBlockConfiguration13Properties | outputs.arcregionswitch.PlanExecutionBlockConfiguration14Properties | outputs.arcregionswitch.PlanExecutionBlockConfiguration15Properties | outputs.arcregionswitch.PlanExecutionBlockConfiguration16Properties;
+        executionBlockConfiguration: outputs.arcregionswitch.PlanExecutionBlockConfiguration0Properties | outputs.arcregionswitch.PlanExecutionBlockConfiguration1Properties | outputs.arcregionswitch.PlanExecutionBlockConfiguration2Properties | outputs.arcregionswitch.PlanExecutionBlockConfiguration3Properties | outputs.arcregionswitch.PlanExecutionBlockConfiguration4Properties | outputs.arcregionswitch.PlanExecutionBlockConfiguration5Properties | outputs.arcregionswitch.PlanExecutionBlockConfiguration6Properties | outputs.arcregionswitch.PlanExecutionBlockConfiguration7Properties | outputs.arcregionswitch.PlanExecutionBlockConfiguration8Properties | outputs.arcregionswitch.PlanExecutionBlockConfiguration9Properties | outputs.arcregionswitch.PlanExecutionBlockConfiguration10Properties | outputs.arcregionswitch.PlanExecutionBlockConfiguration11Properties | outputs.arcregionswitch.PlanExecutionBlockConfiguration12Properties | outputs.arcregionswitch.PlanExecutionBlockConfiguration13Properties | outputs.arcregionswitch.PlanExecutionBlockConfiguration14Properties | outputs.arcregionswitch.PlanExecutionBlockConfiguration15Properties | outputs.arcregionswitch.PlanExecutionBlockConfiguration16Properties | outputs.arcregionswitch.PlanExecutionBlockConfiguration17Properties;
         /**
          * The type of an execution block in a workflow.
          */
@@ -8164,6 +8179,9 @@ export declare namespace autoscaling {
          */
         references?: outputs.autoscaling.AutoScalingGroupPerformanceFactorReferenceRequest[];
     }
+    interface AutoScalingGroupDistributionSegment {
+        targetCapacityTypes: enums.autoscaling.AutoScalingGroupDistributionSegmentTargetCapacityTypesItem[];
+    }
     /**
      * The instance lifecycle policy for the Auto Scaling group. This policy controls instance behavior when an instance transitions through its lifecycle states. Configure retention triggers to specify when instances should move to a ``Retained`` state instead of automatic termination.
      *  For more information, see [Control instance retention with instance lifecycle policies](https://docs.aws.amazon.com/autoscaling/ec2/userguide/instance-lifecycle-policy.html) in the *Amazon EC2 Auto Scaling User Guide*.
@@ -8373,6 +8391,7 @@ export declare namespace autoscaling {
      *  ``InstancesDistribution`` is a property of the [AWS::AutoScaling::AutoScalingGroup MixedInstancesPolicy](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-autoscaling-autoscalinggroup-mixedinstancespolicy.html) property type.
      */
     interface AutoScalingGroupInstancesDistribution {
+        distributionSegments?: outputs.autoscaling.AutoScalingGroupDistributionSegment[];
         /**
          * The allocation strategy to apply to your On-Demand Instances when they are launched. Possible instance types are determined by the launch template overrides that you specify.
          *  The following lists the valid values:
@@ -17111,6 +17130,9 @@ export declare namespace bedrockagentcore {
     interface GatewayTargetToolSchema1Properties {
         inlinePayload: outputs.bedrockagentcore.GatewayTargetToolDefinition[];
     }
+    interface GatewayWafConfiguration {
+        failureMode?: enums.bedrockagentcore.GatewayWafFailureMode;
+    }
     interface GatewayWorkloadIdentityDetails {
         workloadIdentityArn: string;
     }
@@ -23136,6 +23158,48 @@ export declare namespace codebuild {
          */
         vpcId?: string;
     }
+    interface ReportGroupReportExportConfig {
+        /**
+         * The export configuration type. Valid values are:
+         *
+         * - `S3` : The report results are exported to an S3 bucket.
+         * - `NO_EXPORT` : The report results are not exported.
+         */
+        exportConfigType: enums.codebuild.ReportGroupReportExportConfigExportConfigType;
+        /**
+         * A `S3ReportExportConfig` object that contains information about the S3 bucket where the run of a report is exported.
+         */
+        s3Destination?: outputs.codebuild.ReportGroupS3ReportExportConfig;
+    }
+    interface ReportGroupS3ReportExportConfig {
+        /**
+         * The name of the S3 bucket where the raw data of a report are exported.
+         */
+        bucket: string;
+        /**
+         * The AWS account identifier of the owner of the Amazon S3 bucket. This allows report data to be exported to an Amazon S3 bucket that is owned by an account other than the account running the build.
+         */
+        bucketOwner?: string;
+        /**
+         * A boolean value that specifies if the results of a report are encrypted.
+         */
+        encryptionDisabled?: boolean;
+        /**
+         * The encryption key for the report's encrypted raw data.
+         */
+        encryptionKey?: string;
+        /**
+         * The type of build output artifact to create. Valid values include:
+         *
+         * - `NONE` : CodeBuild creates the raw data in the output bucket. This is the default if packaging is not specified.
+         * - `ZIP` : CodeBuild creates a ZIP file with the raw data in the output bucket.
+         */
+        packaging?: enums.codebuild.ReportGroupS3ReportExportConfigPackaging;
+        /**
+         * The path to the exported report's raw data results.
+         */
+        path?: string;
+    }
 }
 export declare namespace codecommit {
     /**
@@ -25492,7 +25556,7 @@ export declare namespace configuration {
         /**
          * The frequency with which AWS Config delivers configuration snapshots.
          */
-        deliveryFrequency?: enums.configuration.DeliveryChannelConfigSnapshotDeliveryPropertiesDeliveryFrequency;
+        deliveryFrequency?: string;
     }
     /**
      * Input parameters in the form of key-value pairs for the conformance pack.
@@ -35939,6 +36003,19 @@ export declare namespace ec2 {
         resourceType: string;
         tagKeys: string[];
     }
+    /**
+     * Describes a storage location in Amazon S3.
+     */
+    interface FpgaImageStorageLocation {
+        /**
+         * The name of the S3 bucket.
+         */
+        bucket?: string;
+        /**
+         * The key.
+         */
+        key?: string;
+    }
     /**
      * Indicates whether an instance is enabled for hibernation.
      */
@@ -45889,6 +45966,7 @@ export declare namespace elementalinference {
         dataSourceConfiguration?: outputs.elementalinference.FeedDataSourceConfiguration;
     }
     interface FeedCroppingConfig {
+        templateGroups?: outputs.elementalinference.FeedTemplateGroup[];
     }
     interface FeedDataSourceConfiguration {
         fixtureId: string;
@@ -45914,6 +45992,10 @@ export declare namespace elementalinference {
         language: enums.elementalinference.FeedTranscriptionLanguage;
         profanityFilter?: enums.elementalinference.FeedProfanityFilterMode;
     }
+    interface FeedTemplateGroup {
+        name: string;
+        templateUris: string[];
+    }
 }
 export declare namespace emr {
     interface StepHadoopJarStepConfig {
@@ -49050,9 +49132,9 @@ export declare namespace gamelift {
          */
         evaluationPeriods?: number;
         /**
-         * Name of the Amazon GameLift-defined metric that is used to trigger a scaling adjustment.
+         * Name of the Amazon GameLift-defined metric that is used to trigger a scaling adjustment. This is required for RuleBased and TargetBased policies.
          */
-        metricName: enums.gamelift.ContainerFleetScalingPolicyMetricName;
+        metricName?: enums.gamelift.ContainerFleetScalingPolicyMetricName;
         /**
          * A descriptive label that is associated with a fleet's scaling policy. Policy names do not need to be unique.
          */
@@ -49443,9 +49525,9 @@ export declare namespace gamelift {
          */
         location?: string;
         /**
-         * Name of the Amazon GameLift-defined metric that is used to trigger a scaling adjustment.
+         * Name of the Amazon GameLift-defined metric that is used to trigger a scaling adjustment. This is required for RuleBased and TargetBased policies.
          */
-        metricName: enums.gamelift.FleetScalingPolicyMetricName;
+        metricName?: enums.gamelift.FleetScalingPolicyMetricName;
         /**
          * A descriptive label that is associated with a fleet's scaling policy. Policy names do not need to be unique.
          */
@@ -49914,6 +49996,185 @@ export declare namespace glue {
          */
         rowTag: string;
     }
+    interface ConnectionAuthenticationConfiguration {
+        /**
+         * A structure containing the authentication configuration in the CreateConnection request.
+         */
+        authenticationType: string;
+        /**
+         * For supplying basic auth credentials when not providing a SecretArn value
+         */
+        basicAuthenticationCredentials?: outputs.glue.ConnectionBasicAuthenticationCredentials;
+        /**
+         * A structure containing the authentication credentials in the CreateConnection request.
+         */
+        customAuthenticationCredentials?: any;
+        /**
+         * The Amazon Resource Name (ARN) of the KMS key used in the authentication configuration.
+         */
+        kmsKeyArn?: string;
+        /**
+         * A structure containing properties for OAuth2 in the CreateConnection request.
+         */
+        oAuth2Properties?: outputs.glue.ConnectionOAuth2Properties;
+        /**
+         * The secret manager ARN to store credentials in the CreateConnection request.
+         */
+        secretArn?: string;
+    }
+    /**
+     * A structure containing the authorization code used in the authentication configuration.
+     */
+    interface ConnectionAuthorizationCodeProperties {
+        /**
+         * The authorization code used in the authentication configuration.
+         */
+        authorizationCode?: string;
+        /**
+         * The redirect URI where the user gets redirected to by authorization server when issuing an authorization code.
+         */
+        redirectUri?: string;
+    }
+    /**
+     * A structure containing the authentication credentials in the CreateConnection request.
+     */
+    interface ConnectionBasicAuthenticationCredentials {
+        /**
+         * The password used in the authentication configuration.
+         */
+        password?: string;
+        /**
+         * The username used in the authentication configuration.
+         */
+        username?: string;
+    }
+    interface ConnectionInput {
+        /**
+         * Connection properties specific to the Athena compute environment.
+         */
+        athenaProperties?: any;
+        /**
+         * The authentication configuration used to connect to the connection.
+         */
+        authenticationConfiguration?: outputs.glue.ConnectionAuthenticationConfiguration;
+        /**
+         * A map of key-value pairs used as parameters for this connection.
+         */
+        connectionProperties?: any;
+        /**
+         * The type of the connection that needs to be created.
+         */
+        connectionType: string;
+        /**
+         * A description of the connection.
+         */
+        description?: string;
+        /**
+         * A list of criteria that can be used in selecting this connection.
+         */
+        matchCriteria?: string[];
+        /**
+         * The name of the connection.
+         */
+        name?: string;
+        /**
+         * The physical connection requirements.
+         */
+        physicalConnectionRequirements?: outputs.glue.ConnectionPhysicalConnectionRequirements;
+        /**
+         * Connection properties specific to the Python compute environment.
+         */
+        pythonProperties?: any;
+        /**
+         * Connection properties specific to the Spark compute environment.
+         */
+        sparkProperties?: any;
+        /**
+         * A flag to validate the credentials during create connection. Default is true.
+         */
+        validateCredentials?: boolean;
+        /**
+         * The compute environments that the specified connection properties are validated against.
+         */
+        validateForComputeEnvironments?: string[];
+    }
+    /**
+     * The OAuth2 client app used for the connection.
+     */
+    interface ConnectionOAuth2ClientApplication {
+        /**
+         * The reference to the SaaS-side client app that is AWS managed.
+         */
+        awsManagedClientApplicationReference?: string;
+        /**
+         * The client application clientID if the ClientAppType is USER_MANAGED.
+         */
+        userManagedClientApplicationClientId?: string;
+    }
+    /**
+     * A structure containing the OAuth2 credentials used in the authentication configuration.
+     */
+    interface ConnectionOAuth2Credentials {
+        /**
+         * The access token used in the authentication configuration.
+         */
+        accessToken?: string;
+        /**
+         * The JSON Web Token (JWT) used when the authentication type is OAuth2.
+         */
+        jwtToken?: string;
+        /**
+         * The refresh token used when the authentication type is OAuth2.
+         */
+        refreshToken?: string;
+        /**
+         * The client application client secret if the client application is user managed.
+         */
+        userManagedClientApplicationClientSecret?: string;
+    }
+    /**
+     * A structure containing the authentication credentials in the CreateConnection request.
+     */
+    interface ConnectionOAuth2Properties {
+        /**
+         * The set of properties required for the the OAuth2 AUTHORIZATION_CODE grant type workflow.
+         */
+        authorizationCodeProperties?: outputs.glue.ConnectionAuthorizationCodeProperties;
+        /**
+         * The OAuth2 client app used for the connection.
+         */
+        oAuth2ClientApplication?: outputs.glue.ConnectionOAuth2ClientApplication;
+        /**
+         * A structure containing the OAuth2 credentials used in the authentication configuration.
+         */
+        oAuth2Credentials?: outputs.glue.ConnectionOAuth2Credentials;
+        /**
+         * The grant type used in the authentication configuration.
+         */
+        oAuth2GrantType?: string;
+        /**
+         * The URL used in the authentication configuration.
+         */
+        tokenUrl?: string;
+        /**
+         * A map of key-value pairs used in the authentication configuration.
+         */
+        tokenUrlParametersMap?: any;
+    }
+    interface ConnectionPhysicalConnectionRequirements {
+        /**
+         * The availability zone where the connection is located.
+         */
+        availabilityZone?: string;
+        /**
+         * The security group ID list used by the connection.
+         */
+        securityGroupIdList?: string[];
+        /**
+         * The subnet ID used by the connection.
+         */
+        subnetId?: string;
+    }
     /**
      * Specifies an AWS Glue Data Catalog target.
      */
@@ -51864,8 +52125,10 @@ export declare namespace guardduty {
         lessThanOrEqual?: number;
         lt?: number;
         lte?: number;
+        matches?: string[];
         neq?: string[];
         notEquals?: string[];
+        notMatches?: string[];
     }
     interface FilterFindingCriteria {
         /**
@@ -53628,6 +53891,99 @@ export declare namespace invoicing {
          */
         linkedAccounts: string[];
     }
+    /**
+     * Contact information for a person or role associated with the procurement portal preference.
+     */
+    interface ProcurementPortalPreferenceContact {
+        /**
+         * The email address of the contact person or role.
+         */
+        email?: string;
+        /**
+         * The name of the contact person or role.
+         */
+        name?: string;
+    }
+    /**
+     * Specifies the preferences for e-invoice delivery.
+     */
+    interface ProcurementPortalPreferenceEinvoiceDeliveryPreference {
+        /**
+         * The method to use for testing the connection to the procurement portal.
+         */
+        connectionTestingMethod?: enums.invoicing.ProcurementPortalPreferenceEinvoiceDeliveryPreferenceConnectionTestingMethod;
+        /**
+         * The ISO 8601 date-time when e-invoice delivery should be activated.
+         */
+        einvoiceDeliveryActivationDate?: string;
+        /**
+         * The types of attachments to include with the e-invoice delivery.
+         */
+        einvoiceDeliveryAttachmentTypes?: enums.invoicing.ProcurementPortalPreferenceEinvoiceDeliveryPreferenceEinvoiceDeliveryAttachmentTypesItem[];
+        /**
+         * The types of e-invoice documents to be delivered.
+         */
+        einvoiceDeliveryDocumentTypes?: enums.invoicing.ProcurementPortalPreferenceEinvoiceDeliveryPreferenceEinvoiceDeliveryDocumentTypesItem[];
+        /**
+         * The communication protocol to use for e-invoice delivery.
+         */
+        protocol?: enums.invoicing.ProcurementPortalPreferenceEinvoiceDeliveryPreferenceProtocol;
+        /**
+         * The sources of purchase order data.
+         */
+        purchaseOrderDataSources?: outputs.invoicing.ProcurementPortalPreferencePurchaseOrderDataSource[];
+    }
+    /**
+     * Specifies the source configuration for retrieving purchase order data.
+     */
+    interface ProcurementPortalPreferencePurchaseOrderDataSource {
+        /**
+         * The type of e-invoice document that requires purchase order data.
+         */
+        einvoiceDeliveryDocumentType?: enums.invoicing.ProcurementPortalPreferencePurchaseOrderDataSourceEinvoiceDeliveryDocumentType;
+        /**
+         * The type of source for purchase order data.
+         */
+        purchaseOrderDataSourceType?: enums.invoicing.ProcurementPortalPreferencePurchaseOrderDataSourcePurchaseOrderDataSourceType;
+    }
+    /**
+     * Specifies criteria for selecting which invoices should be processed.
+     */
+    interface ProcurementPortalPreferenceSelector {
+        /**
+         * The Amazon Resource Name (ARN) of invoice unit identifiers to which this preference applies.
+         */
+        invoiceUnitArns?: string[];
+    }
+    /**
+     * Configuration settings for the test environment of the procurement portal.
+     */
+    interface ProcurementPortalPreferenceTestEnvPreference {
+        /**
+         * The domain identifier for the buyer in the test environment.
+         */
+        buyerDomain?: enums.invoicing.ProcurementPortalPreferenceTestEnvPreferenceBuyerDomain;
+        /**
+         * The unique identifier for the buyer in the test environment.
+         */
+        buyerIdentifier?: string;
+        /**
+         * The endpoint URL for e-invoice delivery in the test environment.
+         */
+        procurementPortalInstanceEndpoint?: string;
+        /**
+         * The shared secret for secure communication in the test environment.
+         */
+        procurementPortalSharedSecret?: string;
+        /**
+         * The domain identifier for the supplier in the test environment.
+         */
+        supplierDomain?: enums.invoicing.ProcurementPortalPreferenceTestEnvPreferenceSupplierDomain;
+        /**
+         * The unique identifier for the supplier in the test environment.
+         */
+        supplierIdentifier?: string;
+    }
 }
 export declare namespace iot {
     /**
@@ -62560,6 +62916,7 @@ export declare namespace lambda {
          * The path where the function can access the file system, starting with ``/mnt/``.
          */
         localMountPath: string;
+        s3FilesConfig?: outputs.lambda.FunctionS3FilesConfig;
     }
     /**
      * Configuration values that override the container image Dockerfile settings. For more information, see [Container image settings](https://docs.aws.amazon.com/lambda/latest/dg/images-create.html#images-parms).
@@ -62635,6 +62992,12 @@ export declare namespace lambda {
          */
         updateRuntimeOn: enums.lambda.FunctionRuntimeManagementConfigUpdateRuntimeOn;
     }
+    interface FunctionS3FilesConfig {
+        /**
+         * Specifies if a function reads from the file system for the lowest latency, or through Amazon S3 Files feature "direct Amazon S3 bucket reads" for the highest throughput
+         */
+        directS3Read?: enums.lambda.FunctionS3FilesConfigDirectS3Read;
+    }
     /**
      * Configuration that defines the scaling behavior for a Lambda Managed Instances function, including the minimum and maximum number of execution environments that can be provisioned.
      */
@@ -68923,6 +69286,7 @@ export declare namespace mediatailor {
      */
     interface PlaybackConfigurationAdDecisionServerConfiguration {
         httpRequest: outputs.mediatailor.PlaybackConfigurationHttpRequest;
+        vastResponse?: outputs.mediatailor.PlaybackConfigurationVastResponse;
     }
     /**
      * For HLS, when set to true, MediaTailor passes through EXT-X-CUE-IN, EXT-X-CUE-OUT, and EXT-X-SPLICEPOINT-SCTE35 ad markers from the origin manifest to the MediaTailor personalized manifest. No logic is applied to these ad markers. For example, if EXT-X-CUE-OUT has a value of 60, but no ads are filled for that ad break, MediaTailor will not set the value to 0.
@@ -69071,6 +69435,7 @@ export declare namespace mediatailor {
      * The configuration for pre-roll ad insertion.
      */
     interface PlaybackConfigurationLivePreRollConfiguration {
+        adDecisionServerConfiguration?: outputs.mediatailor.PlaybackConfigurationPreRollAdDecisionServerConfiguration;
         /**
          * The URL for the ad decision server (ADS) for pre-roll ads. This includes the specification of static parameters and placeholders for dynamic parameters. AWS Elemental MediaTailor substitutes player-specific and session-specific parameters as needed when calling the ADS. Alternately, for testing, you can provide a static VAST URL. The maximum length is 25,000 characters.
          */
@@ -69113,6 +69478,30 @@ export declare namespace mediatailor {
          */
         excludeEventTypes?: string[];
     }
+    /**
+     * The configuration for the request to the pre-roll Ad Decision Server.
+     */
+    interface PlaybackConfigurationPreRollAdDecisionServerConfiguration {
+        vastResponse?: outputs.mediatailor.PlaybackConfigurationPreRollVastResponse;
+    }
+    /**
+     * The configuration for how MediaTailor processes the VAST response returned by the pre-roll Ad Decision Server.
+     */
+    interface PlaybackConfigurationPreRollVastResponse {
+        /**
+         * Determines how MediaTailor sequences ads returned in the pre-roll VAST response.
+         */
+        adSequencingMode?: enums.mediatailor.PlaybackConfigurationPreRollVastResponseAdSequencingMode;
+    }
+    /**
+     * The configuration for how MediaTailor processes the VAST response returned by the Ad Decision Server.
+     */
+    interface PlaybackConfigurationVastResponse {
+        /**
+         * Determines how MediaTailor sequences ads returned in the VAST response from the Ad Decision Server.
+         */
+        adSequencingMode?: enums.mediatailor.PlaybackConfigurationVastResponseAdSequencingMode;
+    }
     interface PrefetchScheduleAvailMatchingCriteria {
         /**
          * The dynamic variable(s) that MediaTailor should use as avail matching criteria.
@@ -71754,6 +72143,7 @@ export declare namespace observabilityadmin {
          * The encryption configuration for centralization destination log groups.
          */
         logsEncryptionConfiguration?: outputs.observabilityadmin.OrganizationCentralizationRuleLogsEncryptionConfiguration;
+        tagPropagationConfiguration?: outputs.observabilityadmin.OrganizationCentralizationRuleTagPropagationConfiguration;
     }
     interface OrganizationCentralizationRuleDestinationMetricsConfiguration {
         backupConfiguration?: outputs.observabilityadmin.OrganizationCentralizationRuleMetricsBackupConfiguration;
@@ -71803,6 +72193,16 @@ export declare namespace observabilityadmin {
     interface OrganizationCentralizationRuleSourceMetricsConfiguration {
         metricsSelectionCriteria?: string;
     }
+    interface OrganizationCentralizationRuleTagPropagationConfiguration {
+        /**
+         * The ARN of the destination account IAM role used for tag propagation.
+         */
+        destinationRoleArn: string;
+        /**
+         * The strategy to resolve tag conflicts during propagation.
+         */
+        tagConflictResolutionStrategy?: enums.observabilityadmin.OrganizationCentralizationRuleTagPropagationConfigurationTagConflictResolutionStrategy;
+    }
     /**
      * The condition of the action desired in the filter.
      */
@@ -112976,6 +113376,16 @@ export declare namespace sagemaker {
     interface InferenceComponentAutoRollbackConfiguration {
         alarms: outputs.sagemaker.InferenceComponentAlarm[];
     }
+    /**
+     * Configuration for balancing inference component copies across Availability Zones
+     */
+    interface InferenceComponentAvailabilityZoneBalance {
+        enforcementMode: enums.sagemaker.InferenceComponentAvailabilityZoneBalanceEnforcementMode;
+        /**
+         * The maximum allowed difference in the number of inference component copies between any two Availability Zones
+         */
+        maxImbalance?: number;
+    }
     /**
      * Capacity size configuration for the inference component
      */
@@ -113010,11 +113420,18 @@ export declare namespace sagemaker {
          */
         numberOfCpuCoresRequired?: number;
     }
+    /**
+     * The configuration for container metrics scraping
+     */
+    interface InferenceComponentContainerMetricsConfig {
+        metricsEndpoints: outputs.sagemaker.InferenceComponentMetricsEndpoint[];
+    }
     interface InferenceComponentContainerSpecification {
         /**
          * The Amazon S3 path where the model artifacts, which result from model training, are stored. This path must point to a single gzip compressed tar archive (.tar.gz suffix).
          */
         artifactUrl?: string;
+        containerMetricsConfig?: outputs.sagemaker.InferenceComponentContainerMetricsConfig;
         deployedImage?: outputs.sagemaker.InferenceComponentDeployedImage;
         /**
          * The environment variables to set in the Docker container. Each key and value in the Environment string-to-string map can have length of up to 1024. We support up to 16 entries in the map.
@@ -113027,6 +113444,26 @@ export declare namespace sagemaker {
          */
         image?: string;
     }
+    /**
+     * Container specification for one Specifications entry. Distinct from InferenceComponentContainerSpecification: DescribeInferenceComponent returns no per-entry DeployedImage (VERIFIED in us-west-2), so DeployedImage is intentionally omitted here and this definition can never be aggregated into a plural READ response. The singular InferenceComponentContainerSpecification keeps DeployedImage - the service DOES return it there.
+     */
+    interface InferenceComponentContainerSpecificationForInstanceType {
+        artifactUrl?: string;
+        containerMetricsConfig?: outputs.sagemaker.InferenceComponentContainerMetricsConfig;
+        environment?: {
+            [key: string]: string;
+        };
+        image?: string;
+    }
+    /**
+     * Settings that affect how the inference component caches data
+     */
+    interface InferenceComponentDataCacheConfig {
+        /**
+         * Whether the endpoint caches the model artifacts and container image on each instance it provisions for the inference component
+         */
+        enableCaching: boolean;
+    }
     interface InferenceComponentDeployedImage {
         /**
          * The date and time when the image path for the model resolved to the `ResolvedImage`
@@ -113051,6 +113488,26 @@ export declare namespace sagemaker {
          */
         rollingUpdatePolicy?: outputs.sagemaker.InferenceComponentRollingUpdatePolicy;
     }
+    /**
+     * A metrics endpoint exposed by the container
+     */
+    interface InferenceComponentMetricsEndpoint {
+        /**
+         * The interval, in seconds, at which container metrics scraped from the endpoint are published to Amazon CloudWatch. Valid values per the SageMaker API Reference are 10, 30, 60, 120, 180, 240 and 300; the service validates the value.
+         */
+        metricPublishFrequencyInSeconds?: number;
+        /**
+         * The path to the Prometheus formatted metrics endpoint exposed by the container
+         */
+        metricsEndpointPath: string;
+    }
+    /**
+     * The number of inference component copies currently placed on instances of a given type
+     */
+    interface InferenceComponentPlacementStatus {
+        currentCopyCount: number;
+        instanceType: string;
+    }
     /**
      * The rolling update policy for the inference component
      */
@@ -113082,9 +113539,20 @@ export declare namespace sagemaker {
         copyCount?: number;
         currentCopyCount?: number;
         desiredCopyCount?: number;
+        /**
+         * The placement status of the inference component across instance types
+         */
+        placementStatus?: outputs.sagemaker.InferenceComponentPlacementStatus[];
+    }
+    /**
+     * The scheduling configuration that determines how inference component copies are placed across available instances
+     */
+    interface InferenceComponentSchedulingConfig {
+        availabilityZoneBalance: outputs.sagemaker.InferenceComponentAvailabilityZoneBalance;
+        placementStrategy: enums.sagemaker.InferenceComponentPlacementStrategy;
     }
     /**
-     * The specification for the inference component
+     * The specification for the inference component, for an endpoint with a single instance type. Specify exactly one of Specification or Specifications. InstanceType is not accepted here; use Specifications for per instance type configuration.
      */
     interface InferenceComponentSpecification {
         /**
@@ -113107,15 +113575,37 @@ export declare namespace sagemaker {
          * Defines a container that provides the runtime environment for a model that you deploy with an inference component.
          */
         container?: outputs.sagemaker.InferenceComponentContainerSpecification;
+        /**
+         * The data caching configuration actually in effect, including a value the service chose rather than the template: SageMaker enables caching automatically on instance types with more than 232 GiB of local NVMe storage, whether or not DataCacheConfig was set. Returned by Describe and not settable; set DataCacheConfig instead.
+         */
+        currentDataCacheConfig?: outputs.sagemaker.InferenceComponentDataCacheConfig;
+        dataCacheConfig?: outputs.sagemaker.InferenceComponentDataCacheConfig;
         /**
          * The name of an existing SageMaker AI model object in your account that you want to deploy with the inference component.
          */
         modelName?: string;
+        schedulingConfig?: outputs.sagemaker.InferenceComponentSchedulingConfig;
         /**
          * Settings that take effect while the model container starts up.
          */
         startupParameters?: outputs.sagemaker.InferenceComponentStartupParameters;
     }
+    /**
+     * A specification for one instance type, for use in Specifications. InstanceType is required here, and is not accepted on the singular Specification. BaseInferenceComponentName is not accepted here either: adapter inference components are supported only on the singular Specification.
+     */
+    interface InferenceComponentSpecificationForInstanceType {
+        computeResourceRequirements?: outputs.sagemaker.InferenceComponentComputeResourceRequirements;
+        container?: outputs.sagemaker.InferenceComponentContainerSpecificationForInstanceType;
+        /**
+         * The data caching configuration actually in effect for this instance type, including a value the service chose rather than the template: SageMaker enables caching automatically on instance types with more than 232 GiB of local NVMe storage, whether or not DataCacheConfig was set. Returned by Describe and not settable; set DataCacheConfig instead.
+         */
+        currentDataCacheConfig?: outputs.sagemaker.InferenceComponentDataCacheConfig;
+        dataCacheConfig?: outputs.sagemaker.InferenceComponentDataCacheConfig;
+        instanceType: string;
+        modelName?: string;
+        schedulingConfig?: outputs.sagemaker.InferenceComponentSchedulingConfig;
+        startupParameters?: outputs.sagemaker.InferenceComponentStartupParameters;
+    }
     interface InferenceComponentStartupParameters {
         /**
          * The timeout value, in seconds, for your inference container to pass health check by Amazon S3 Hosting. For more information about health check, see [How Your Container Should Respond to Health Check (Ping) Requests](https://docs.aws.amazon.com/sagemaker/latest/dg/your-algorithms-inference-code.html#your-algorithms-inference-algo-ping-requests) .
@@ -117554,6 +118044,10 @@ export declare namespace securityagent {
          * List of source code repositories to analyze
          */
         sourceCode?: outputs.securityagent.PentestSourceCodeRepository[];
+        /**
+         * Trust anchors for validating target endpoint TLS certificates, for endpoints served by a private or internal CA, an intermediate CA, or a self-signed certificate
+         */
+        trustedCaCertificates?: outputs.securityagent.PentestTrustedCaCertificate[];
     }
     /**
      * Authentication configuration for a pentest actor
@@ -117568,6 +118062,23 @@ export declare namespace securityagent {
          */
         value?: string;
     }
+    /**
+     * Source of a trusted CA certificate. Exactly one member must be set.
+     */
+    interface PentestCaCertificateSource {
+        /**
+         * Artifact ID of an uploaded certificate file
+         */
+        artifactId?: string;
+        /**
+         * PEM-encoded X.509 certificate supplied inline
+         */
+        inlinePem?: string;
+        /**
+         * Amazon S3 location URI of a customer-staged certificate
+         */
+        s3Location?: string;
+    }
     /**
      * CloudWatch Logs configuration for pentest output
      */
@@ -117672,6 +118183,15 @@ export declare namespace securityagent {
          */
         s3Location?: string;
     }
+    /**
+     * Trust anchor used when validating a target endpoint's TLS certificate
+     */
+    interface PentestTrustedCaCertificate {
+        /**
+         * Where to read the certificate from
+         */
+        source: outputs.securityagent.PentestCaCertificateSource;
+    }
     /**
      * VPC configuration that the pentest agent accesses
      */
@@ -122238,6 +122758,67 @@ export declare namespace stepfunctions {
 }
 export declare namespace storagegateway {
 }
+export declare namespace supportauthz {
+    /**
+     * The set of actions a support permit grants. Exactly one of AllActions or Actions must be provided.
+     */
+    interface SupportPermitActionSet {
+        /**
+         * An explicit list of actions to grant.
+         */
+        actions?: string[];
+        /**
+         * Grants all actions.
+         */
+        allActions?: any;
+    }
+    /**
+     * A time-bound condition controlling when the permit is active. Exactly one of AllowAfter or AllowBefore must be provided.
+     */
+    interface SupportPermitCondition {
+        /**
+         * The permit is active only after this time.
+         */
+        allowAfter?: string;
+        /**
+         * The permit is active only before this time.
+         */
+        allowBefore?: string;
+    }
+    /**
+     * The grant definition: which actions on which resources, optionally constrained by time conditions.
+     */
+    interface SupportPermitPermit {
+        actions: outputs.supportauthz.SupportPermitActionSet;
+        /**
+         * Optional time-bound conditions (at most two).
+         */
+        conditions?: outputs.supportauthz.SupportPermitCondition[];
+        resources: outputs.supportauthz.SupportPermitResourceSet;
+    }
+    /**
+     * The set of resources a support permit applies to. Exactly one of AllResourcesInRegion or Resources must be provided.
+     */
+    interface SupportPermitResourceSet {
+        /**
+         * Applies to all resources in the region.
+         */
+        allResourcesInRegion?: any;
+        /**
+         * An explicit list of resource ARNs.
+         */
+        resources?: string[];
+    }
+    /**
+     * The signing key used by the permit. Exactly one key type must be provided.
+     */
+    interface SupportPermitSigningKeyInfo {
+        /**
+         * The ARN of the KMS key used to sign permit grants.
+         */
+        kmsKey: string;
+    }
+}
 export declare namespace synthetics {
     interface CanaryArtifactConfig {
         /**