@pulumi/aws 4.33.1 → 4.34.0

package/types/input.d.ts

@@ -301,6 +301,7 @@ export interface ProviderEndpoint {
     iotthingsgraph?: pulumi.Input<string>;
     iotwireless?: pulumi.Input<string>;
     kafka?: pulumi.Input<string>;
+    kafkaconnect?: pulumi.Input<string>;
     kendra?: pulumi.Input<string>;
     kinesis?: pulumi.Input<string>;
     kinesisanalytics?: pulumi.Input<string>;
@@ -5250,7 +5251,7 @@ export declare namespace batch {
     }
     interface ComputeEnvironmentComputeResourcesEc2Configuration {
         /**
-         * The AMI ID used for instances launched in the compute environment that match the image type. This setting overrides the `imageId` argument in the `computeResourcess block.
+         * The AMI ID used for instances launched in the compute environment that match the image type. This setting overrides the `imageId` argument in the `computeResources` block.
          */
         imageIdOverride?: pulumi.Input<string>;
         /**
@@ -5306,6 +5307,27 @@ export declare namespace batch {
          */
         attemptDurationSeconds?: pulumi.Input<number>;
     }
+    interface SchedulingPolicyFairSharePolicy {
+        /**
+         * A value used to reserve some of the available maximum vCPU for fair share identifiers that have not yet been used. For more information, see [FairsharePolicy](https://docs.aws.amazon.com/batch/latest/APIReference/API_FairsharePolicy.html).
+         */
+        computeReservation?: pulumi.Input<number>;
+        shareDecaySeconds?: pulumi.Input<number>;
+        /**
+         * One or more share distribution blocks which define the weights for the fair share identifiers for the fair share policy. For more information, see [FairsharePolicy](https://docs.aws.amazon.com/batch/latest/APIReference/API_FairsharePolicy.html). The `shareDistribution` block is documented below.
+         */
+        shareDistributions?: pulumi.Input<pulumi.Input<inputs.batch.SchedulingPolicyFairSharePolicyShareDistribution>[]>;
+    }
+    interface SchedulingPolicyFairSharePolicyShareDistribution {
+        /**
+         * A fair share identifier or fair share identifier prefix. For more information, see [ShareAttributes](https://docs.aws.amazon.com/batch/latest/APIReference/API_ShareAttributes.html).
+         */
+        shareIdentifier: pulumi.Input<string>;
+        /**
+         * The weight factor for the fair share identifier. For more information, see [ShareAttributes](https://docs.aws.amazon.com/batch/latest/APIReference/API_ShareAttributes.html).
+         */
+        weightFactor?: pulumi.Input<number>;
+    }
 }
 export declare namespace budgets {
     interface BudgetActionActionThreshold {
@@ -7212,6 +7234,10 @@ export declare namespace codebuild {
          * Artifact identifier. Must be the same specified inside the AWS CodeBuild build specification.
          */
         artifactIdentifier?: pulumi.Input<string>;
+        /**
+         * Specifies the bucket owner's access for objects that another account uploads to their Amazon S3 bucket. By default, only the account that uploads the objects to the bucket has access to these objects. This property allows you to give the bucket owner access to these objects. Valid values are `NONE`, `READ_ONLY`, and `FULL`. your CodeBuild service role must have the `s3:PutBucketAcl` permission. This permission allows CodeBuild to modify the access control list for the bucket.
+         */
+        bucketOwnerAccess?: pulumi.Input<string>;
         /**
          * Whether to disable encrypting output artifacts. If `type` is set to `NO_ARTIFACTS`, this value is ignored. Defaults to `false`.
          */
@@ -7392,6 +7418,10 @@ export declare namespace codebuild {
         streamName?: pulumi.Input<string>;
     }
     interface ProjectLogsConfigS3Logs {
+        /**
+         * Specifies the bucket owner's access for objects that another account uploads to their Amazon S3 bucket. By default, only the account that uploads the objects to the bucket has access to these objects. This property allows you to give the bucket owner access to these objects. Valid values are `NONE`, `READ_ONLY`, and `FULL`. your CodeBuild service role must have the `s3:PutBucketAcl` permission. This permission allows CodeBuild to modify the access control list for the bucket.
+         */
+        bucketOwnerAccess?: pulumi.Input<string>;
         /**
          * Whether to disable encrypting output artifacts. If `type` is set to `NO_ARTIFACTS`, this value is ignored. Defaults to `false`.
          */
@@ -7410,6 +7440,10 @@ export declare namespace codebuild {
          * Artifact identifier. Must be the same specified inside the AWS CodeBuild build specification.
          */
         artifactIdentifier: pulumi.Input<string>;
+        /**
+         * Specifies the bucket owner's access for objects that another account uploads to their Amazon S3 bucket. By default, only the account that uploads the objects to the bucket has access to these objects. This property allows you to give the bucket owner access to these objects. Valid values are `NONE`, `READ_ONLY`, and `FULL`. your CodeBuild service role must have the `s3:PutBucketAcl` permission. This permission allows CodeBuild to modify the access control list for the bucket.
+         */
+        bucketOwnerAccess?: pulumi.Input<string>;
         /**
          * Whether to disable encrypting output artifacts. If `type` is set to `NO_ARTIFACTS`, this value is ignored. Defaults to `false`.
          */
@@ -7479,7 +7513,7 @@ export declare namespace codebuild {
          */
         reportBuildStatus?: pulumi.Input<boolean>;
         /**
-         * Source identifier. Source data will be put inside a folder named as this parameter inside AWS CodeBuild source directory
+         * An identifier for a source in the build project.
          */
         sourceIdentifier: pulumi.Input<string>;
         /**
@@ -7517,6 +7551,16 @@ export declare namespace codebuild {
          */
         fetchSubmodules: pulumi.Input<boolean>;
     }
+    interface ProjectSecondarySourceVersion {
+        /**
+         * An identifier for a source in the build project.
+         */
+        sourceIdentifier: pulumi.Input<string>;
+        /**
+         * The source version for the corresponding source identifier. See [AWS docs](https://docs.aws.amazon.com/codebuild/latest/APIReference/API_ProjectSourceVersion.html#CodeBuild-Type-ProjectSourceVersion-sourceVersion) for more details.
+         */
+        sourceVersion: pulumi.Input<string>;
+    }
     interface ProjectSource {
         /**
          * Configuration block with the authorization settings for AWS CodeBuild to access the source code to be built. This information is for the AWS CodeBuild console's use only. Use the `aws.codebuild.SourceCredential` resource instead. Auth blocks are documented below.
@@ -8541,6 +8585,26 @@ export declare namespace datasync {
          */
         subnetArn: pulumi.Input<string>;
     }
+    interface LocationHdfsNameNode {
+        /**
+         * The hostname of the NameNode in the HDFS cluster. This value is the IP address or Domain Name Service (DNS) name of the NameNode. An agent that's installed on-premises uses this hostname to communicate with the NameNode in the network.
+         */
+        hostname: pulumi.Input<string>;
+        /**
+         * The port that the NameNode uses to listen to client requests.
+         */
+        port: pulumi.Input<number>;
+    }
+    interface LocationHdfsQopConfiguration {
+        /**
+         * The data transfer protection setting configured on the HDFS cluster. This setting corresponds to your dfs.data.transfer.protection setting in the hdfs-site.xml file on your Hadoop cluster. Valid values are `DISABLED`, `AUTHENTICATION`, `INTEGRITY` and `PRIVACY`.
+         */
+        dataTransferProtection?: pulumi.Input<string>;
+        /**
+         * The RPC protection setting configured on the HDFS cluster. This setting corresponds to your hadoop.rpc.protection setting in your core-site.xml file on your Hadoop cluster. Valid values are `DISABLED`, `AUTHENTICATION`, `INTEGRITY` and `PRIVACY`.
+         */
+        rpcProtection?: pulumi.Input<string>;
+    }
     interface LocationSmbMountOptions {
         /**
          * The specific SMB version that you want DataSync to use for mounting your SMB share. Valid values: `AUTOMATIC`, `SMB2`, and `SMB3`. Default: `AUTOMATIC`
@@ -8663,6 +8727,22 @@ export declare namespace dax {
         value: pulumi.Input<string>;
     }
 }
+export declare namespace devicefarm {
+    interface DevicePoolRule {
+        /**
+         * The rule's stringified attribute. Valid values are: `APPIUM_VERSION`, `ARN`, `AVAILABILITY`, `FLEET_TYPE`, `FORM_FACTOR`, `INSTANCE_ARN`, `INSTANCE_LABELS`, `MANUFACTURER`, `MODEL`, `OS_VERSION`, `PLATFORM`, `REMOTE_ACCESS_ENABLED`, `REMOTE_DEBUG_ENABLED`.
+         */
+        attribute?: pulumi.Input<string>;
+        /**
+         * Specifies how Device Farm compares the rule's attribute to the value. For the operators that are supported by each attribute. Valid values are: `EQUALS`, `NOT_IN`, `IN`, `GREATER_THAN`, `GREATER_THAN_OR_EQUALS`, `LESS_THAN`, `LESS_THAN_OR_EQUALS`, `CONTAINS`.
+         */
+        operator?: pulumi.Input<string>;
+        /**
+         * The rule's value.
+         */
+        value?: pulumi.Input<string>;
+    }
+}
 export declare namespace directoryservice {
     interface DirectoryConnectSettings {
         availabilityZones?: pulumi.Input<pulumi.Input<string>[]>;
@@ -9172,11 +9252,6 @@ export declare namespace dynamodb {
          * Indicates whether ttl is enabled (true) or disabled (false).
          */
         enabled?: pulumi.Input<boolean>;
-        /**
-         * The ARN of the CMK that should be used for the AWS KMS encryption.
-         * This attribute should only be specified if the key is different from the default DynamoDB CMK, `alias/aws/dynamodb`.
-         */
-        kmsKeyArn?: pulumi.Input<string>;
     }
 }
 export declare namespace ebs {
@@ -12113,15 +12188,19 @@ export declare namespace ecr {
     }
     interface ReplicationConfigurationReplicationConfiguration {
         /**
-         * The replication rules for a replication configuration. See Rule.
+         * The replication rules for a replication configuration. A maximum of 10 are allowed per `replicationConfiguration`. See Rule
          */
         rule: pulumi.Input<inputs.ecr.ReplicationConfigurationReplicationConfigurationRule>;
     }
     interface ReplicationConfigurationReplicationConfigurationRule {
         /**
-         * the details of a replication destination. See Destination.
+         * the details of a replication destination. A maximum of 25 are allowed per `rule`. See Destination.
          */
         destinations: pulumi.Input<pulumi.Input<inputs.ecr.ReplicationConfigurationReplicationConfigurationRuleDestination>[]>;
+        /**
+         * filters for a replication rule. See Repository Filter.
+         */
+        repositoryFilters?: pulumi.Input<pulumi.Input<inputs.ecr.ReplicationConfigurationReplicationConfigurationRuleRepositoryFilter>[]>;
     }
     interface ReplicationConfigurationReplicationConfigurationRuleDestination {
         /**
@@ -12133,6 +12212,16 @@ export declare namespace ecr {
          */
         registryId: pulumi.Input<string>;
     }
+    interface ReplicationConfigurationReplicationConfigurationRuleRepositoryFilter {
+        /**
+         * The repository filter details.
+         */
+        filter: pulumi.Input<string>;
+        /**
+         * The repository filter type. The only supported value is `PREFIX_MATCH`, which is a repository name prefix specified with the filter parameter.
+         */
+        filterType: pulumi.Input<string>;
+    }
     interface RepositoryEncryptionConfiguration {
         /**
          * The encryption type to use for the repository. Valid values are `AES256` or `KMS`. Defaults to `AES256`.
@@ -14935,6 +15024,96 @@ export declare namespace fsx {
          */
         name?: pulumi.Input<string>;
     }
+    interface OpenZfsFileSystemDiskIopsConfiguration {
+        /**
+         * - The total number of SSD IOPS provisioned for the file system.
+         */
+        iops?: pulumi.Input<number>;
+        /**
+         * - Specifies whether the number of IOPS for the file system is using the system. Valid values are `AUTOMATIC` and `USER_PROVISIONED`. Default value is `AUTOMATIC`.
+         */
+        mode?: pulumi.Input<string>;
+    }
+    interface OpenZfsFileSystemRootVolumeConfiguration {
+        /**
+         * - A boolean flag indicating whether tags for the file system should be copied to snapshots. The default value is false.
+         */
+        copyTagsToSnapshots?: pulumi.Input<boolean>;
+        /**
+         * - Method used to compress the data on the volume. Valid values are `NONE` or `ZSTD`. Child volumes that don't specify compression option will inherit from parent volume. This option on file system applies to the root volume.
+         */
+        dataCompressionType?: pulumi.Input<string>;
+        /**
+         * - NFS export configuration for the root volume. Exactly 1 item. See NFS Exports Below.
+         */
+        nfsExports?: pulumi.Input<inputs.fsx.OpenZfsFileSystemRootVolumeConfigurationNfsExports>;
+        /**
+         * - specifies whether the volume is read-only. Default is false.
+         */
+        readOnly?: pulumi.Input<boolean>;
+        /**
+         * - Specify how much storage users or groups can use on the volume. Maximum of 100 items. See User and Group Quotas Below.
+         */
+        userAndGroupQuotas?: pulumi.Input<pulumi.Input<inputs.fsx.OpenZfsFileSystemRootVolumeConfigurationUserAndGroupQuota>[]>;
+    }
+    interface OpenZfsFileSystemRootVolumeConfigurationNfsExports {
+        /**
+         * - A list of configuration objects that contain the client and options for mounting the OpenZFS file system. Maximum of 25 items. See Client Configurations Below.
+         */
+        clientConfigurations: pulumi.Input<pulumi.Input<inputs.fsx.OpenZfsFileSystemRootVolumeConfigurationNfsExportsClientConfiguration>[]>;
+    }
+    interface OpenZfsFileSystemRootVolumeConfigurationNfsExportsClientConfiguration {
+        /**
+         * - A value that specifies who can mount the file system. You can provide a wildcard character (*), an IP address (0.0.0.0), or a CIDR address (192.0.2.0/24. By default, Amazon FSx uses the wildcard character when specifying the client.
+         */
+        clients: pulumi.Input<string>;
+        /**
+         * -  The options to use when mounting the file system. Maximum of 20 items. See the [Linix NFS exports man page](https://linux.die.net/man/5/exports) for more information. `crossmount` and `sync` are used by default.
+         */
+        options: pulumi.Input<pulumi.Input<string>[]>;
+    }
+    interface OpenZfsFileSystemRootVolumeConfigurationUserAndGroupQuota {
+        /**
+         * - The ID of the user or group. Valid values between `0` and `2147483647`
+         */
+        id: pulumi.Input<number>;
+        /**
+         * - The amount of storage that the user or group can use in gibibytes (GiB). Valid values between `0` and `2147483647`
+         */
+        storageCapacityQuotaGib: pulumi.Input<number>;
+        type: pulumi.Input<string>;
+    }
+    interface OpenZfsVolumeNfsExports {
+        /**
+         * - A list of configuration objects that contain the client and options for mounting the OpenZFS file system. Maximum of 25 items. See Client Configurations Below.
+         */
+        clientConfigurations: pulumi.Input<pulumi.Input<inputs.fsx.OpenZfsVolumeNfsExportsClientConfiguration>[]>;
+    }
+    interface OpenZfsVolumeNfsExportsClientConfiguration {
+        /**
+         * - A value that specifies who can mount the file system. You can provide a wildcard character (*), an IP address (0.0.0.0), or a CIDR address (192.0.2.0/24. By default, Amazon FSx uses the wildcard character when specifying the client.
+         */
+        clients: pulumi.Input<string>;
+        /**
+         * -  The options to use when mounting the file system. Maximum of 20 items. See the [Linix NFS exports man page](https://linux.die.net/man/5/exports) for more information. `crossmount` and `sync` are used by default.
+         */
+        options: pulumi.Input<pulumi.Input<string>[]>;
+    }
+    interface OpenZfsVolumeOriginSnapshot {
+        copyStrategy: pulumi.Input<string>;
+        snapshotArn: pulumi.Input<string>;
+    }
+    interface OpenZfsVolumeUserAndGroupQuota {
+        /**
+         * - The ID of the user or group. Valid values between `0` and `2147483647`
+         */
+        id: pulumi.Input<number>;
+        /**
+         * - The amount of storage that the user or group can use in gibibytes (GiB). Valid values between `0` and `2147483647`
+         */
+        storageCapacityQuotaGib: pulumi.Input<number>;
+        type: pulumi.Input<string>;
+    }
     interface WindowsFileSystemAuditLogConfiguration {
         /**
          * The Amazon Resource Name (ARN) for the destination of the audit logs. The destination can be any Amazon CloudWatch Logs log group ARN or Amazon Kinesis Data Firehose delivery stream ARN. Can be specified when `fileAccessAuditLogLevel` and `fileShareAccessAuditLogLevel` are not set to `DISABLED`. The name of the Amazon CloudWatch Logs log group must begin with the `/aws/fsx` prefix. The name of the Amazon Kinesis Data Firehouse delivery stream must begin with the `aws-fsx` prefix. If you do not provide a destination in `auditLogDestionation`, Amazon FSx will create and use a log stream in the CloudWatch Logs /aws/fsx/windows log group.
@@ -17449,7 +17628,7 @@ export declare namespace kinesis {
         dataFormatConversionConfiguration?: pulumi.Input<inputs.kinesis.FirehoseDeliveryStreamExtendedS3ConfigurationDataFormatConversionConfiguration>;
         dynamicPartitioningConfiguration?: pulumi.Input<inputs.kinesis.FirehoseDeliveryStreamExtendedS3ConfigurationDynamicPartitioningConfiguration>;
         /**
-         * Prefix added to failed records before writing them to S3. This prefix appears immediately following the bucket name.
+         * Prefix added to failed records before writing them to S3. Not currently supported for `redshift` destination. This prefix appears immediately following the bucket name. For information about how to specify this prefix, see [Custom Prefixes for Amazon S3 Objects](https://docs.aws.amazon.com/firehose/latest/dev/s3-prefixes.html).
          */
         errorOutputPrefix?: pulumi.Input<string>;
         /**
@@ -17720,6 +17899,10 @@ export declare namespace kinesis {
          * The compression format. If no value is specified, the default is `UNCOMPRESSED`. Other supported values are `GZIP`, `ZIP`, `Snappy`, & `HADOOP_SNAPPY`.
          */
         compressionFormat?: pulumi.Input<string>;
+        /**
+         * Prefix added to failed records before writing them to S3. Not currently supported for `redshift` destination. This prefix appears immediately following the bucket name. For information about how to specify this prefix, see [Custom Prefixes for Amazon S3 Objects](https://docs.aws.amazon.com/firehose/latest/dev/s3-prefixes.html).
+         */
+        errorOutputPrefix?: pulumi.Input<string>;
         /**
          * Specifies the KMS key ARN the stream will use to encrypt data. If not set, no encryption will
          * be used.
@@ -17984,6 +18167,10 @@ export declare namespace kinesis {
          * The compression format. If no value is specified, the default is `UNCOMPRESSED`. Other supported values are `GZIP`, `ZIP`, `Snappy`, & `HADOOP_SNAPPY`.
          */
         compressionFormat?: pulumi.Input<string>;
+        /**
+         * Prefix added to failed records before writing them to S3. Not currently supported for `redshift` destination. This prefix appears immediately following the bucket name. For information about how to specify this prefix, see [Custom Prefixes for Amazon S3 Objects](https://docs.aws.amazon.com/firehose/latest/dev/s3-prefixes.html).
+         */
+        errorOutputPrefix?: pulumi.Input<string>;
         /**
          * Specifies the KMS key ARN the stream will use to encrypt data. If not set, no encryption will
          * be used.
@@ -18034,6 +18221,10 @@ export declare namespace kinesis {
          * The compression format. If no value is specified, the default is `UNCOMPRESSED`. Other supported values are `GZIP`, `ZIP`, `Snappy`, & `HADOOP_SNAPPY`.
          */
         compressionFormat?: pulumi.Input<string>;
+        /**
+         * Prefix added to failed records before writing them to S3. Not currently supported for `redshift` destination. This prefix appears immediately following the bucket name. For information about how to specify this prefix, see [Custom Prefixes for Amazon S3 Objects](https://docs.aws.amazon.com/firehose/latest/dev/s3-prefixes.html).
+         */
+        errorOutputPrefix?: pulumi.Input<string>;
         /**
          * Specifies the KMS key ARN the stream will use to encrypt data. If not set, no encryption will
          * be used.
@@ -20268,6 +20459,87 @@ export declare namespace mediapackage {
         username?: pulumi.Input<string>;
     }
 }
+export declare namespace memorydb {
+    interface ClusterClusterEndpoint {
+        /**
+         * DNS hostname of the node.
+         */
+        address?: pulumi.Input<string>;
+        /**
+         * The port number on which each of the nodes accepts connections. Defaults to `6379`.
+         */
+        port?: pulumi.Input<number>;
+    }
+    interface ClusterShard {
+        /**
+         * Name of this node.
+         * * `endpoint`
+         */
+        name?: pulumi.Input<string>;
+        /**
+         * Set of nodes in this shard.
+         */
+        nodes?: pulumi.Input<pulumi.Input<inputs.memorydb.ClusterShardNode>[]>;
+        /**
+         * Number of individual nodes in this shard.
+         */
+        numNodes?: pulumi.Input<number>;
+        /**
+         * Keyspace for this shard. Example: `0-16383`.
+         */
+        slots?: pulumi.Input<string>;
+    }
+    interface ClusterShardNode {
+        /**
+         * The Availability Zone in which the node resides.
+         */
+        availabilityZone?: pulumi.Input<string>;
+        /**
+         * The date and time when the node was created. Example: `2022-01-01T21:00:00Z`.
+         */
+        createTime?: pulumi.Input<string>;
+        endpoints?: pulumi.Input<pulumi.Input<inputs.memorydb.ClusterShardNodeEndpoint>[]>;
+        /**
+         * Name of this node.
+         * * `endpoint`
+         */
+        name?: pulumi.Input<string>;
+    }
+    interface ClusterShardNodeEndpoint {
+        /**
+         * DNS hostname of the node.
+         */
+        address?: pulumi.Input<string>;
+        /**
+         * The port number on which each of the nodes accepts connections. Defaults to `6379`.
+         */
+        port?: pulumi.Input<number>;
+    }
+    interface ParameterGroupParameter {
+        /**
+         * The name of the parameter.
+         */
+        name: pulumi.Input<string>;
+        /**
+         * The value of the parameter.
+         */
+        value: pulumi.Input<string>;
+    }
+    interface UserAuthenticationMode {
+        /**
+         * The number of passwords belonging to the user.
+         */
+        passwordCount?: pulumi.Input<number>;
+        /**
+         * The set of passwords used for authentication. You can create up to two passwords for each user.
+         */
+        passwords: pulumi.Input<pulumi.Input<string>[]>;
+        /**
+         * Indicates whether the user requires a password to authenticate. Must be set to `password`.
+         */
+        type: pulumi.Input<string>;
+    }
+}
 export declare namespace mq {
     interface BrokerConfiguration {
         /**
@@ -20536,6 +20808,28 @@ export declare namespace msk {
         enabledInBroker: pulumi.Input<boolean>;
     }
 }
+export declare namespace mskconnect {
+    interface CustomPluginLocation {
+        /**
+         * Information of the plugin file stored in Amazon S3. See below.
+         */
+        s3: pulumi.Input<inputs.mskconnect.CustomPluginLocationS3>;
+    }
+    interface CustomPluginLocationS3 {
+        /**
+         * The Amazon Resource Name (ARN) of an S3 bucket.
+         */
+        bucketArn: pulumi.Input<string>;
+        /**
+         * The file key for an object in an S3 bucket.
+         */
+        fileKey: pulumi.Input<string>;
+        /**
+         * The version of an object in an S3 bucket.
+         */
+        objectVersion?: pulumi.Input<string>;
+    }
+}
 export declare namespace mwaa {
     interface EnvironmentLastUpdated {
         /**
@@ -23572,10 +23866,18 @@ export declare namespace sagemaker {
          * The instance type that the image version runs on. For valid values see [Sagemaker Instance Types](https://docs.aws.amazon.com/sagemaker/latest/dg/notebooks-available-instance-types.html).
          */
         instanceType?: pulumi.Input<string>;
+        /**
+         * The Amazon Resource Name (ARN) of the Lifecycle Configuration attached to the Resource.
+         */
+        lifecycleConfigArn?: pulumi.Input<string>;
         /**
          * The ARN of the SageMaker image that the image version belongs to.
          */
         sagemakerImageArn?: pulumi.Input<string>;
+        /**
+         * The ARN of the image version created on the instance.
+         */
+        sagemakerImageVersionArn?: pulumi.Input<string>;
     }
     interface CodeRepositoryGitConfig {
         /**
@@ -23591,6 +23893,20 @@ export declare namespace sagemaker {
          */
         secretArn?: pulumi.Input<string>;
     }
+    interface DeviceDevice {
+        /**
+         * A description for the device.
+         */
+        description?: pulumi.Input<string>;
+        /**
+         * The name of the device.
+         */
+        deviceName: pulumi.Input<string>;
+        /**
+         * Amazon Web Services Internet of Things (IoT) object name.
+         */
+        iotThingName?: pulumi.Input<string>;
+    }
     interface DeviceFleetOutputConfig {
         /**
          * The AWS Key Management Service (AWS KMS) key that Amazon SageMaker uses to encrypt data on the storage volume after compilation job. If you don't provide a KMS key ID, Amazon SageMaker uses the default KMS key for Amazon S3 for your role's account.
@@ -23642,10 +23958,18 @@ export declare namespace sagemaker {
          * The instance type that the image version runs on.. For valid values see [Sagemaker Instance Types](https://docs.aws.amazon.com/sagemaker/latest/dg/notebooks-available-instance-types.html).
          */
         instanceType?: pulumi.Input<string>;
+        /**
+         * The Amazon Resource Name (ARN) of the Lifecycle Configuration attached to the Resource.
+         */
+        lifecycleConfigArn?: pulumi.Input<string>;
         /**
          * The ARN of the SageMaker image that the image version belongs to.
          */
         sagemakerImageArn?: pulumi.Input<string>;
+        /**
+         * The ARN of the image version created on the instance.
+         */
+        sagemakerImageVersionArn?: pulumi.Input<string>;
     }
     interface DomainDefaultUserSettingsKernelGatewayAppSettings {
         /**
@@ -23680,10 +24004,18 @@ export declare namespace sagemaker {
          * The instance type that the image version runs on.. For valid values see [Sagemaker Instance Types](https://docs.aws.amazon.com/sagemaker/latest/dg/notebooks-available-instance-types.html).
          */
         instanceType?: pulumi.Input<string>;
+        /**
+         * The Amazon Resource Name (ARN) of the Lifecycle Configuration attached to the Resource.
+         */
+        lifecycleConfigArn?: pulumi.Input<string>;
         /**
          * The ARN of the SageMaker image that the image version belongs to.
          */
         sagemakerImageArn?: pulumi.Input<string>;
+        /**
+         * The ARN of the image version created on the instance.
+         */
+        sagemakerImageVersionArn?: pulumi.Input<string>;
     }
     interface DomainDefaultUserSettingsSharingSettings {
         /**
@@ -23710,10 +24042,18 @@ export declare namespace sagemaker {
          * The instance type that the image version runs on.. For valid values see [Sagemaker Instance Types](https://docs.aws.amazon.com/sagemaker/latest/dg/notebooks-available-instance-types.html).
          */
         instanceType?: pulumi.Input<string>;
+        /**
+         * The Amazon Resource Name (ARN) of the Lifecycle Configuration attached to the Resource.
+         */
+        lifecycleConfigArn?: pulumi.Input<string>;
         /**
          * The ARN of the SageMaker image that the image version belongs to.
          */
         sagemakerImageArn?: pulumi.Input<string>;
+        /**
+         * The ARN of the image version created on the instance.
+         */
+        sagemakerImageVersionArn?: pulumi.Input<string>;
     }
     interface DomainRetentionPolicy {
         /**
@@ -24188,10 +24528,18 @@ export declare namespace sagemaker {
          * The instance type.
          */
         instanceType?: pulumi.Input<string>;
+        /**
+         * The Amazon Resource Name (ARN) of the Lifecycle Configuration attached to the Resource.
+         */
+        lifecycleConfigArn?: pulumi.Input<string>;
         /**
          * The Amazon Resource Name (ARN) of the SageMaker image created on the instance.
          */
         sagemakerImageArn?: pulumi.Input<string>;
+        /**
+         * The ARN of the image version created on the instance.
+         */
+        sagemakerImageVersionArn?: pulumi.Input<string>;
     }
     interface UserProfileUserSettingsKernelGatewayAppSettings {
         /**
@@ -24226,10 +24574,18 @@ export declare namespace sagemaker {
          * The instance type.
          */
         instanceType?: pulumi.Input<string>;
+        /**
+         * The Amazon Resource Name (ARN) of the Lifecycle Configuration attached to the Resource.
+         */
+        lifecycleConfigArn?: pulumi.Input<string>;
         /**
          * The Amazon Resource Name (ARN) of the SageMaker image created on the instance.
          */
         sagemakerImageArn?: pulumi.Input<string>;
+        /**
+         * The ARN of the image version created on the instance.
+         */
+        sagemakerImageVersionArn?: pulumi.Input<string>;
     }
     interface UserProfileUserSettingsSharingSettings {
         /**
@@ -24256,10 +24612,18 @@ export declare namespace sagemaker {
          * The instance type.
          */
         instanceType?: pulumi.Input<string>;
+        /**
+         * The Amazon Resource Name (ARN) of the Lifecycle Configuration attached to the Resource.
+         */
+        lifecycleConfigArn?: pulumi.Input<string>;
         /**
          * The Amazon Resource Name (ARN) of the SageMaker image created on the instance.
          */
         sagemakerImageArn?: pulumi.Input<string>;
+        /**
+         * The ARN of the image version created on the instance.
+         */
+        sagemakerImageVersionArn?: pulumi.Input<string>;
     }
     interface WorkforceCognitoConfig {
         /**
@@ -26573,7 +26937,7 @@ export declare namespace synthetics {
          */
         durationInSeconds?: pulumi.Input<number>;
         /**
-         * Rate expression that defines how often the canary is to run. The syntax is rate(number unit). unit can be minute, minutes, or hour.
+         * Rate expression or cron expression that defines how often the canary is to run. For rate expression, the syntax is `rate(number unit)`. _unit_ can be `minute`, `minutes`, or `hour`. For cron expression, the syntax is `cron(expression)`. For more information about the syntax for cron expressions, see [Scheduling canary runs using cron](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch_Synthetics_Canaries_cron.html).
          */
         expression: pulumi.Input<string>;
     }
@@ -26611,6 +26975,40 @@ export declare namespace synthetics {
     }
 }
 export declare namespace timestreamwrite {
+    interface TableMagneticStoreWriteProperties {
+        /**
+         * A flag to enable magnetic store writes.
+         */
+        enableMagneticStoreWrites?: pulumi.Input<boolean>;
+        /**
+         * The location to write error reports for records rejected asynchronously during magnetic store writes. See Magnetic Store Rejected Data Location below for more details.
+         */
+        magneticStoreRejectedDataLocation?: pulumi.Input<inputs.timestreamwrite.TableMagneticStoreWritePropertiesMagneticStoreRejectedDataLocation>;
+    }
+    interface TableMagneticStoreWritePropertiesMagneticStoreRejectedDataLocation {
+        /**
+         * Configuration of an S3 location to write error reports for records rejected, asynchronously, during magnetic store writes. See S3 Configuration below for more details.
+         */
+        s3Configuration?: pulumi.Input<inputs.timestreamwrite.TableMagneticStoreWritePropertiesMagneticStoreRejectedDataLocationS3Configuration>;
+    }
+    interface TableMagneticStoreWritePropertiesMagneticStoreRejectedDataLocationS3Configuration {
+        /**
+         * Bucket name of the customer S3 bucket.
+         */
+        bucketName?: pulumi.Input<string>;
+        /**
+         * Encryption option for the customer s3 location. Options are S3 server side encryption with an S3-managed key or KMS managed key. Valid values are `SSE_KMS` and `SSE_S3`.
+         */
+        encryptionOption?: pulumi.Input<string>;
+        /**
+         * KMS key arn for the customer s3 location when encrypting with a KMS managed key.
+         */
+        kmsKeyId?: pulumi.Input<string>;
+        /**
+         * Object key prefix for the customer S3 location.
+         */
+        objectKeyPrefix?: pulumi.Input<string>;
+    }
     interface TableRetentionProperties {
         /**
          * The duration for which data must be stored in the magnetic store. Minimum value of 1. Maximum value of 73000.