@pulumi/aws 5.12.1 → 5.13.0

package/types/output.d.ts

@@ -5864,11 +5864,11 @@ export declare namespace appstream {
         /**
          * Fully qualified name of the directory (for example, corp.example.com).
          */
-        directoryName?: string;
+        directoryName: string;
         /**
          * Distinguished name of the organizational unit for computer accounts.
          */
-        organizationalUnitDistinguishedName?: string;
+        organizationalUnitDistinguishedName: string;
     }
     interface FleetVpcConfig {
         /**
@@ -16399,296 +16399,400 @@ export declare namespace ec2 {
          */
         values: string[];
     }
-    interface GetNetworkInterfaceAssociation {
+    interface GetNetworkInsightsAnalysisAlternatePathHint {
+        componentArn: string;
+        componentId: string;
+    }
+    interface GetNetworkInsightsAnalysisExplanation {
+        aclRules: outputs.ec2.GetNetworkInsightsAnalysisExplanationAclRule[];
+        acls: outputs.ec2.GetNetworkInsightsAnalysisExplanationAcl[];
+        address: string;
+        addresses: string[];
+        attachedTos: outputs.ec2.GetNetworkInsightsAnalysisExplanationAttachedTo[];
+        availabilityZones: string[];
+        cidrs: string[];
+        classicLoadBalancerListeners: outputs.ec2.GetNetworkInsightsAnalysisExplanationClassicLoadBalancerListener[];
+        components: outputs.ec2.GetNetworkInsightsAnalysisExplanationComponent[];
+        customerGateways: outputs.ec2.GetNetworkInsightsAnalysisExplanationCustomerGateway[];
+        destinationVpcs: outputs.ec2.GetNetworkInsightsAnalysisExplanationDestinationVpc[];
+        destinations: outputs.ec2.GetNetworkInsightsAnalysisExplanationDestination[];
+        direction: string;
+        elasticLoadBalancerListeners: outputs.ec2.GetNetworkInsightsAnalysisExplanationElasticLoadBalancerListener[];
+        explanationCode: string;
+        ingressRouteTables: outputs.ec2.GetNetworkInsightsAnalysisExplanationIngressRouteTable[];
+        internetGateways: outputs.ec2.GetNetworkInsightsAnalysisExplanationInternetGateway[];
+        loadBalancerArn: string;
+        loadBalancerListenerPort: number;
+        loadBalancerTargetGroups: outputs.ec2.GetNetworkInsightsAnalysisExplanationLoadBalancerTargetGroup[];
+        loadBalancerTargetPort: number;
+        missingComponent: string;
+        natGateways: outputs.ec2.GetNetworkInsightsAnalysisExplanationNatGateway[];
+        networkInterfaces: outputs.ec2.GetNetworkInsightsAnalysisExplanationNetworkInterface[];
+        packetField: string;
+        port: number;
+        portRanges: outputs.ec2.GetNetworkInsightsAnalysisExplanationPortRange[];
+        prefixLists: outputs.ec2.GetNetworkInsightsAnalysisExplanationPrefixList[];
+        protocols: string[];
+        routeTableRoutes: outputs.ec2.GetNetworkInsightsAnalysisExplanationRouteTableRoute[];
+        routeTables: outputs.ec2.GetNetworkInsightsAnalysisExplanationRouteTable[];
+        securityGroupRules: outputs.ec2.GetNetworkInsightsAnalysisExplanationSecurityGroupRule[];
+        securityGroups: outputs.ec2.GetNetworkInsightsAnalysisExplanationSecurityGroup[];
+        sourceVpcs: outputs.ec2.GetNetworkInsightsAnalysisExplanationSourceVpc[];
+        state: string;
+        subnetRouteTables: outputs.ec2.GetNetworkInsightsAnalysisExplanationSubnetRouteTable[];
+        subnets: outputs.ec2.GetNetworkInsightsAnalysisExplanationSubnet[];
+        transitGatewayAttachments: outputs.ec2.GetNetworkInsightsAnalysisExplanationTransitGatewayAttachment[];
+        transitGatewayRouteTableRoutes: outputs.ec2.GetNetworkInsightsAnalysisExplanationTransitGatewayRouteTableRoute[];
+        transitGatewayRouteTables: outputs.ec2.GetNetworkInsightsAnalysisExplanationTransitGatewayRouteTable[];
+        transitGateways: outputs.ec2.GetNetworkInsightsAnalysisExplanationTransitGateway[];
+        vpcEndpoints: outputs.ec2.GetNetworkInsightsAnalysisExplanationVpcEndpoint[];
+        vpcPeeringConnections: outputs.ec2.GetNetworkInsightsAnalysisExplanationVpcPeeringConnection[];
+        vpcs: outputs.ec2.GetNetworkInsightsAnalysisExplanationVpc[];
+        vpnConnections: outputs.ec2.GetNetworkInsightsAnalysisExplanationVpnConnection[];
+        vpnGateways: outputs.ec2.GetNetworkInsightsAnalysisExplanationVpnGateway[];
+    }
+    interface GetNetworkInsightsAnalysisExplanationAcl {
+        /**
+         * The ARN of the selected Network Insights Analysis.
+         */
+        arn: string;
+        id: string;
         /**
-         * The allocation ID.
+         * The name of the filter field. Valid values can be found in the EC2 [`DescribeNetworkInsightsAnalyses`](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeNetworkInsightsAnalyses.html) API Reference.
          */
-        allocationId: string;
+        name: string;
+    }
+    interface GetNetworkInsightsAnalysisExplanationAclRule {
+        cidr: string;
+        egress: boolean;
+        portRanges: outputs.ec2.GetNetworkInsightsAnalysisExplanationAclRulePortRange[];
+        protocol: string;
+        ruleAction: string;
+        ruleNumber: number;
+    }
+    interface GetNetworkInsightsAnalysisExplanationAclRulePortRange {
+        from: number;
+        to: number;
+    }
+    interface GetNetworkInsightsAnalysisExplanationAttachedTo {
         /**
-         * The association ID.
+         * The ARN of the selected Network Insights Analysis.
          */
-        associationId: string;
+        arn: string;
+        id: string;
         /**
-         * The carrier IP address associated with the network interface. This attribute is only set when the network interface is in a subnet which is associated with a Wavelength Zone.
+         * The name of the filter field. Valid values can be found in the EC2 [`DescribeNetworkInsightsAnalyses`](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeNetworkInsightsAnalyses.html) API Reference.
          */
-        carrierIp: string;
+        name: string;
+    }
+    interface GetNetworkInsightsAnalysisExplanationClassicLoadBalancerListener {
+        instancePort: number;
+        loadBalancerPort: number;
+    }
+    interface GetNetworkInsightsAnalysisExplanationComponent {
         /**
-         * The customer-owned IP address.
+         * The ARN of the selected Network Insights Analysis.
          */
-        customerOwnedIp: string;
+        arn: string;
+        id: string;
         /**
-         * The ID of the Elastic IP address owner.
+         * The name of the filter field. Valid values can be found in the EC2 [`DescribeNetworkInsightsAnalyses`](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeNetworkInsightsAnalyses.html) API Reference.
          */
-        ipOwnerId: string;
+        name: string;
+    }
+    interface GetNetworkInsightsAnalysisExplanationCustomerGateway {
         /**
-         * The public DNS name.
+         * The ARN of the selected Network Insights Analysis.
          */
-        publicDnsName: string;
+        arn: string;
+        id: string;
         /**
-         * The address of the Elastic IP address bound to the network interface.
+         * The name of the filter field. Valid values can be found in the EC2 [`DescribeNetworkInsightsAnalyses`](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeNetworkInsightsAnalyses.html) API Reference.
          */
-        publicIp: string;
-    }
-    interface GetNetworkInterfaceAttachment {
-        attachmentId: string;
-        deviceIndex: number;
-        instanceId: string;
-        instanceOwnerId: string;
-    }
-    interface GetNetworkInterfaceFilter {
         name: string;
-        values: string[];
     }
-    interface GetNetworkInterfacesFilter {
+    interface GetNetworkInsightsAnalysisExplanationDestination {
         /**
-         * The name of the field to filter by, as defined by
-         * [the underlying AWS API](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeNetworkInterfaces.html).
+         * The ARN of the selected Network Insights Analysis.
          */
-        name: string;
+        arn: string;
+        id: string;
         /**
-         * Set of values that are accepted for the given field.
+         * The name of the filter field. Valid values can be found in the EC2 [`DescribeNetworkInsightsAnalyses`](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeNetworkInsightsAnalyses.html) API Reference.
          */
-        values: string[];
+        name: string;
     }
-    interface GetPrefixListFilter {
+    interface GetNetworkInsightsAnalysisExplanationDestinationVpc {
         /**
-         * The name of the filter field. Valid values can be found in the [EC2 DescribePrefixLists API Reference](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribePrefixLists.html).
+         * The ARN of the selected Network Insights Analysis.
          */
-        name: string;
+        arn: string;
+        id: string;
         /**
-         * Set of values that are accepted for the given filter field. Results will be selected if any given value matches.
+         * The name of the filter field. Valid values can be found in the EC2 [`DescribeNetworkInsightsAnalyses`](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeNetworkInsightsAnalyses.html) API Reference.
          */
-        values: string[];
+        name: string;
     }
-    interface GetRouteTableAssociation {
-        /**
-         * ID of an Internet Gateway or Virtual Private Gateway which is connected to the Route Table (not exported if not passed as a parameter).
-         */
-        gatewayId: string;
+    interface GetNetworkInsightsAnalysisExplanationElasticLoadBalancerListener {
         /**
-         * Whether the association is due to the main route table.
+         * The ARN of the selected Network Insights Analysis.
          */
-        main: boolean;
+        arn: string;
+        id: string;
         /**
-         * Association ID.
+         * The name of the filter field. Valid values can be found in the EC2 [`DescribeNetworkInsightsAnalyses`](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeNetworkInsightsAnalyses.html) API Reference.
          */
-        routeTableAssociationId: string;
+        name: string;
+    }
+    interface GetNetworkInsightsAnalysisExplanationIngressRouteTable {
         /**
-         * ID of the specific Route Table to retrieve.
+         * The ARN of the selected Network Insights Analysis.
          */
-        routeTableId: string;
+        arn: string;
+        id: string;
         /**
-         * ID of a Subnet which is connected to the Route Table (not exported if not passed as a parameter).
+         * The name of the filter field. Valid values can be found in the EC2 [`DescribeNetworkInsightsAnalyses`](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeNetworkInsightsAnalyses.html) API Reference.
          */
-        subnetId: string;
+        name: string;
     }
-    interface GetRouteTableFilter {
+    interface GetNetworkInsightsAnalysisExplanationInternetGateway {
         /**
-         * Name of the field to filter by, as defined by [the underlying AWS API](http://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeRouteTables.html).
+         * The ARN of the selected Network Insights Analysis.
          */
-        name: string;
+        arn: string;
+        id: string;
         /**
-         * Set of values that are accepted for the given field. A Route Table will be selected if any one of the given values matches.
+         * The name of the filter field. Valid values can be found in the EC2 [`DescribeNetworkInsightsAnalyses`](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeNetworkInsightsAnalyses.html) API Reference.
          */
-        values: string[];
+        name: string;
     }
-    interface GetRouteTableRoute {
+    interface GetNetworkInsightsAnalysisExplanationLoadBalancerTargetGroup {
         /**
-         * ID of the Carrier Gateway.
+         * The ARN of the selected Network Insights Analysis.
          */
-        carrierGatewayId: string;
+        arn: string;
+        id: string;
         /**
-         * CIDR block of the route.
+         * The name of the filter field. Valid values can be found in the EC2 [`DescribeNetworkInsightsAnalyses`](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeNetworkInsightsAnalyses.html) API Reference.
          */
-        cidrBlock: string;
+        name: string;
+    }
+    interface GetNetworkInsightsAnalysisExplanationNatGateway {
         /**
-         * ARN of the core network.
+         * The ARN of the selected Network Insights Analysis.
          */
-        coreNetworkArn: string;
+        arn: string;
+        id: string;
         /**
-         * The ID of a managed prefix list destination of the route.
+         * The name of the filter field. Valid values can be found in the EC2 [`DescribeNetworkInsightsAnalyses`](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeNetworkInsightsAnalyses.html) API Reference.
          */
-        destinationPrefixListId: string;
+        name: string;
+    }
+    interface GetNetworkInsightsAnalysisExplanationNetworkInterface {
         /**
-         * ID of the Egress Only Internet Gateway.
+         * The ARN of the selected Network Insights Analysis.
          */
-        egressOnlyGatewayId: string;
+        arn: string;
+        id: string;
         /**
-         * ID of an Internet Gateway or Virtual Private Gateway which is connected to the Route Table (not exported if not passed as a parameter).
+         * The name of the filter field. Valid values can be found in the EC2 [`DescribeNetworkInsightsAnalyses`](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeNetworkInsightsAnalyses.html) API Reference.
          */
-        gatewayId: string;
+        name: string;
+    }
+    interface GetNetworkInsightsAnalysisExplanationPortRange {
+        from: number;
+        to: number;
+    }
+    interface GetNetworkInsightsAnalysisExplanationPrefixList {
         /**
-         * EC2 instance ID.
+         * The ARN of the selected Network Insights Analysis.
          */
-        instanceId: string;
+        arn: string;
+        id: string;
         /**
-         * IPv6 CIDR block of the route.
+         * The name of the filter field. Valid values can be found in the EC2 [`DescribeNetworkInsightsAnalyses`](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeNetworkInsightsAnalyses.html) API Reference.
          */
-        ipv6CidrBlock: string;
+        name: string;
+    }
+    interface GetNetworkInsightsAnalysisExplanationRouteTable {
         /**
-         * Local Gateway ID.
+         * The ARN of the selected Network Insights Analysis.
          */
-        localGatewayId: string;
+        arn: string;
+        id: string;
         /**
-         * NAT Gateway ID.
+         * The name of the filter field. Valid values can be found in the EC2 [`DescribeNetworkInsightsAnalyses`](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeNetworkInsightsAnalyses.html) API Reference.
          */
+        name: string;
+    }
+    interface GetNetworkInsightsAnalysisExplanationRouteTableRoute {
+        destinationCidr: string;
+        destinationPrefixListId: string;
+        egressOnlyInternetGatewayId: string;
+        gatewayId: string;
+        instanceId: string;
         natGatewayId: string;
+        networkInterfaceId: string;
+        origin: string;
+        transitGatewayId: string;
+        vpcPeeringConnectionId: string;
+    }
+    interface GetNetworkInsightsAnalysisExplanationSecurityGroup {
         /**
-         * ID of the elastic network interface (eni) to use.
+         * The ARN of the selected Network Insights Analysis.
          */
-        networkInterfaceId: string;
+        arn: string;
+        id: string;
         /**
-         * EC2 Transit Gateway ID.
+         * The name of the filter field. Valid values can be found in the EC2 [`DescribeNetworkInsightsAnalyses`](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeNetworkInsightsAnalyses.html) API Reference.
          */
-        transitGatewayId: string;
+        name: string;
+    }
+    interface GetNetworkInsightsAnalysisExplanationSecurityGroupRule {
+        cidr: string;
+        direction: string;
+        portRanges: outputs.ec2.GetNetworkInsightsAnalysisExplanationSecurityGroupRulePortRange[];
+        prefixListId: string;
+        protocol: string;
+        securityGroupId: string;
+    }
+    interface GetNetworkInsightsAnalysisExplanationSecurityGroupRulePortRange {
+        from: number;
+        to: number;
+    }
+    interface GetNetworkInsightsAnalysisExplanationSourceVpc {
         /**
-         * VPC Endpoint ID.
+         * The ARN of the selected Network Insights Analysis.
          */
-        vpcEndpointId: string;
+        arn: string;
+        id: string;
         /**
-         * VPC Peering ID.
+         * The name of the filter field. Valid values can be found in the EC2 [`DescribeNetworkInsightsAnalyses`](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeNetworkInsightsAnalyses.html) API Reference.
          */
-        vpcPeeringConnectionId: string;
+        name: string;
     }
-    interface GetRouteTablesFilter {
+    interface GetNetworkInsightsAnalysisExplanationSubnet {
         /**
-         * The name of the field to filter by, as defined by
-         * [the underlying AWS API](http://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeRouteTables.html).
+         * The ARN of the selected Network Insights Analysis.
          */
-        name: string;
+        arn: string;
+        id: string;
         /**
-         * Set of values that are accepted for the given field.
-         * A Route Table will be selected if any one of the given values matches.
+         * The name of the filter field. Valid values can be found in the EC2 [`DescribeNetworkInsightsAnalyses`](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeNetworkInsightsAnalyses.html) API Reference.
          */
-        values: string[];
+        name: string;
     }
-    interface GetSecurityGroupFilter {
+    interface GetNetworkInsightsAnalysisExplanationSubnetRouteTable {
         /**
-         * The name of the field to filter by, as defined by
-         * [the underlying AWS API](http://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeSecurityGroups.html).
+         * The ARN of the selected Network Insights Analysis.
          */
-        name: string;
+        arn: string;
+        id: string;
         /**
-         * Set of values that are accepted for the given field.
-         * A Security Group will be selected if any one of the given values matches.
+         * The name of the filter field. Valid values can be found in the EC2 [`DescribeNetworkInsightsAnalyses`](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeNetworkInsightsAnalyses.html) API Reference.
          */
-        values: string[];
-    }
-    interface GetSecurityGroupsFilter {
         name: string;
-        values: string[];
     }
-    interface GetSpotPriceFilter {
+    interface GetNetworkInsightsAnalysisExplanationTransitGateway {
         /**
-         * Name of the filter.
+         * The ARN of the selected Network Insights Analysis.
          */
-        name: string;
+        arn: string;
+        id: string;
         /**
-         * List of one or more values for the filter.
+         * The name of the filter field. Valid values can be found in the EC2 [`DescribeNetworkInsightsAnalyses`](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeNetworkInsightsAnalyses.html) API Reference.
          */
-        values: string[];
+        name: string;
     }
-    interface GetSubnetFilter {
+    interface GetNetworkInsightsAnalysisExplanationTransitGatewayAttachment {
         /**
-         * The name of the field to filter by, as defined by [the underlying AWS API](http://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeSubnets.html).
+         * The ARN of the selected Network Insights Analysis.
          */
-        name: string;
+        arn: string;
+        id: string;
         /**
-         * Set of values that are accepted for the given field. A subnet will be selected if any one of the given values matches.
+         * The name of the filter field. Valid values can be found in the EC2 [`DescribeNetworkInsightsAnalyses`](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeNetworkInsightsAnalyses.html) API Reference.
          */
-        values: string[];
+        name: string;
     }
-    interface GetSubnetIdsFilter {
+    interface GetNetworkInsightsAnalysisExplanationTransitGatewayRouteTable {
         /**
-         * The name of the field to filter by, as defined by
-         * [the underlying AWS API](http://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeSubnets.html).
-         * For example, if matching against tag `Name`, use:
+         * The ARN of the selected Network Insights Analysis.
          */
-        name: string;
+        arn: string;
+        id: string;
         /**
-         * Set of values that are accepted for the given field.
-         * Subnet IDs will be selected if any one of the given values match.
+         * The name of the filter field. Valid values can be found in the EC2 [`DescribeNetworkInsightsAnalyses`](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeNetworkInsightsAnalyses.html) API Reference.
          */
-        values: string[];
+        name: string;
     }
-    interface GetSubnetsFilter {
+    interface GetNetworkInsightsAnalysisExplanationTransitGatewayRouteTableRoute {
+        attachmentId: string;
+        destinationCidr: string;
+        prefixListId: string;
+        resourceId: string;
+        resourceType: string;
+        routeOrigin: string;
+        state: string;
+    }
+    interface GetNetworkInsightsAnalysisExplanationVpc {
         /**
-         * The name of the field to filter by, as defined by
-         * [the underlying AWS API](http://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeSubnets.html).
-         * For example, if matching against tag `Name`, use:
+         * The ARN of the selected Network Insights Analysis.
          */
-        name: string;
+        arn: string;
+        id: string;
         /**
-         * Set of values that are accepted for the given field.
-         * Subnet IDs will be selected if any one of the given values match.
+         * The name of the filter field. Valid values can be found in the EC2 [`DescribeNetworkInsightsAnalyses`](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeNetworkInsightsAnalyses.html) API Reference.
          */
-        values: string[];
+        name: string;
     }
-    interface GetTransitGatewayRouteTablesFilter {
+    interface GetNetworkInsightsAnalysisExplanationVpcEndpoint {
         /**
-         * The name of the field to filter by, as defined by
-         * [the underlying AWS API](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeTransitGatewayRouteTables.html).
+         * The ARN of the selected Network Insights Analysis.
          */
-        name: string;
+        arn: string;
+        id: string;
         /**
-         * Set of values that are accepted for the given field.
-         * A Transit Gateway Route Table will be selected if any one of the given values matches.
+         * The name of the filter field. Valid values can be found in the EC2 [`DescribeNetworkInsightsAnalyses`](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeNetworkInsightsAnalyses.html) API Reference.
          */
-        values: string[];
+        name: string;
     }
-    interface GetVpcCidrBlockAssociation {
+    interface GetNetworkInsightsAnalysisExplanationVpcPeeringConnection {
         /**
-         * The association ID for the the IPv4 CIDR block.
+         * The ARN of the selected Network Insights Analysis.
          */
-        associationId: string;
+        arn: string;
+        id: string;
         /**
-         * The cidr block of the desired VPC.
+         * The name of the filter field. Valid values can be found in the EC2 [`DescribeNetworkInsightsAnalyses`](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeNetworkInsightsAnalyses.html) API Reference.
          */
-        cidrBlock: string;
+        name: string;
+    }
+    interface GetNetworkInsightsAnalysisExplanationVpnConnection {
         /**
-         * The current state of the desired VPC.
-         * Can be either `"pending"` or `"available"`.
+         * The ARN of the selected Network Insights Analysis.
          */
-        state: string;
-    }
-    interface GetVpcDhcpOptionsFilter {
+        arn: string;
+        id: string;
         /**
-         * The name of the field to filter.
+         * The name of the filter field. Valid values can be found in the EC2 [`DescribeNetworkInsightsAnalyses`](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeNetworkInsightsAnalyses.html) API Reference.
          */
         name: string;
-        /**
-         * Set of values for filtering.
-         */
-        values: string[];
     }
-    interface GetVpcEndpointDnsEntry {
-        /**
-         * The DNS name.
-         */
-        dnsName: string;
+    interface GetNetworkInsightsAnalysisExplanationVpnGateway {
         /**
-         * The ID of the private hosted zone.
+         * The ARN of the selected Network Insights Analysis.
          */
-        hostedZoneId: string;
-    }
-    interface GetVpcEndpointDnsOption {
-        dnsRecordIpType: string;
-    }
-    interface GetVpcEndpointFilter {
+        arn: string;
+        id: string;
         /**
-         * The name of the field to filter by, as defined by
-         * [the underlying AWS API](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeVpcEndpoints.html).
+         * The name of the filter field. Valid values can be found in the EC2 [`DescribeNetworkInsightsAnalyses`](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeNetworkInsightsAnalyses.html) API Reference.
          */
         name: string;
-        /**
-         * Set of values that are accepted for the given field.
-         * A VPC Endpoint will be selected if any one of the given values matches.
-         */
-        values: string[];
     }
-    interface GetVpcEndpointServiceFilter {
+    interface GetNetworkInsightsAnalysisFilter {
         /**
-         * The name of the filter field. Valid values can be found in the [EC2 DescribeVpcEndpointServices API Reference](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeVpcEndpointServices.html).
+         * The name of the filter field. Valid values can be found in the EC2 [`DescribeNetworkInsightsAnalyses`](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeNetworkInsightsAnalyses.html) API Reference.
          */
         name: string;
         /**
@@ -16696,923 +16800,2363 @@ export declare namespace ec2 {
          */
         values: string[];
     }
-    interface GetVpcFilter {
+    interface GetNetworkInsightsAnalysisForwardPathComponent {
+        aclRules: outputs.ec2.GetNetworkInsightsAnalysisForwardPathComponentAclRule[];
+        additionalDetails: outputs.ec2.GetNetworkInsightsAnalysisForwardPathComponentAdditionalDetail[];
+        attachedTos: outputs.ec2.GetNetworkInsightsAnalysisForwardPathComponentAttachedTo[];
+        components: outputs.ec2.GetNetworkInsightsAnalysisForwardPathComponentComponent[];
+        destinationVpcs: outputs.ec2.GetNetworkInsightsAnalysisForwardPathComponentDestinationVpc[];
+        inboundHeaders: outputs.ec2.GetNetworkInsightsAnalysisForwardPathComponentInboundHeader[];
+        outboundHeaders: outputs.ec2.GetNetworkInsightsAnalysisForwardPathComponentOutboundHeader[];
+        routeTableRoutes: outputs.ec2.GetNetworkInsightsAnalysisForwardPathComponentRouteTableRoute[];
+        securityGroupRules: outputs.ec2.GetNetworkInsightsAnalysisForwardPathComponentSecurityGroupRule[];
+        sequenceNumber: number;
+        sourceVpcs: outputs.ec2.GetNetworkInsightsAnalysisForwardPathComponentSourceVpc[];
+        subnets: outputs.ec2.GetNetworkInsightsAnalysisForwardPathComponentSubnet[];
+        transitGatewayRouteTableRoutes: outputs.ec2.GetNetworkInsightsAnalysisForwardPathComponentTransitGatewayRouteTableRoute[];
+        transitGateways: outputs.ec2.GetNetworkInsightsAnalysisForwardPathComponentTransitGateway[];
+        vpcs: outputs.ec2.GetNetworkInsightsAnalysisForwardPathComponentVpc[];
+    }
+    interface GetNetworkInsightsAnalysisForwardPathComponentAclRule {
+        cidr: string;
+        egress: boolean;
+        portRanges: outputs.ec2.GetNetworkInsightsAnalysisForwardPathComponentAclRulePortRange[];
+        protocol: string;
+        ruleAction: string;
+        ruleNumber: number;
+    }
+    interface GetNetworkInsightsAnalysisForwardPathComponentAclRulePortRange {
+        from: number;
+        to: number;
+    }
+    interface GetNetworkInsightsAnalysisForwardPathComponentAdditionalDetail {
+        additionalDetailType: string;
+        components: outputs.ec2.GetNetworkInsightsAnalysisForwardPathComponentAdditionalDetailComponent[];
+    }
+    interface GetNetworkInsightsAnalysisForwardPathComponentAdditionalDetailComponent {
         /**
-         * The name of the field to filter by, as defined by
-         * [the underlying AWS API](http://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeVpcs.html).
+         * The ARN of the selected Network Insights Analysis.
          */
-        name: string;
+        arn: string;
+        id: string;
         /**
-         * Set of values that are accepted for the given field.
-         * A VPC will be selected if any one of the given values matches.
+         * The name of the filter field. Valid values can be found in the EC2 [`DescribeNetworkInsightsAnalyses`](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeNetworkInsightsAnalyses.html) API Reference.
          */
-        values: string[];
-    }
-    interface GetVpcIamPoolFilter {
         name: string;
-        values: string[];
     }
-    interface GetVpcPeeringConnectionCidrBlockSet {
+    interface GetNetworkInsightsAnalysisForwardPathComponentAttachedTo {
         /**
-         * The primary CIDR block of the requester VPC of the specific VPC Peering Connection to retrieve.
+         * The ARN of the selected Network Insights Analysis.
          */
-        cidrBlock: string;
-    }
-    interface GetVpcPeeringConnectionFilter {
+        arn: string;
+        id: string;
         /**
-         * The name of the field to filter by, as defined by
-         * [the underlying AWS API](http://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeVpcPeeringConnections.html).
+         * The name of the filter field. Valid values can be found in the EC2 [`DescribeNetworkInsightsAnalyses`](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeNetworkInsightsAnalyses.html) API Reference.
          */
         name: string;
-        /**
-         * Set of values that are accepted for the given field.
-         * A VPC Peering Connection will be selected if any one of the given values matches.
-         */
-        values: string[];
     }
-    interface GetVpcPeeringConnectionPeerCidrBlockSet {
+    interface GetNetworkInsightsAnalysisForwardPathComponentComponent {
         /**
-         * The primary CIDR block of the requester VPC of the specific VPC Peering Connection to retrieve.
+         * The ARN of the selected Network Insights Analysis.
          */
-        cidrBlock: string;
-    }
-    interface GetVpcPeeringConnectionsFilter {
+        arn: string;
+        id: string;
         /**
-         * The name of the field to filter by, as defined by
-         * [the underlying AWS API](http://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeVpcPeeringConnections.html).
+         * The name of the filter field. Valid values can be found in the EC2 [`DescribeNetworkInsightsAnalyses`](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeNetworkInsightsAnalyses.html) API Reference.
          */
         name: string;
-        /**
-         * Set of values that are accepted for the given field.
-         * A VPC Peering Connection will be selected if any one of the given values matches.
-         */
-        values: string[];
     }
-    interface GetVpcsFilter {
+    interface GetNetworkInsightsAnalysisForwardPathComponentDestinationVpc {
         /**
-         * The name of the field to filter by, as defined by
-         * [the underlying AWS API](http://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeVpcs.html).
+         * The ARN of the selected Network Insights Analysis.
          */
-        name: string;
+        arn: string;
+        id: string;
         /**
-         * Set of values that are accepted for the given field.
-         * A VPC will be selected if any one of the given values matches.
+         * The name of the filter field. Valid values can be found in the EC2 [`DescribeNetworkInsightsAnalyses`](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeNetworkInsightsAnalyses.html) API Reference.
          */
-        values: string[];
+        name: string;
     }
-    interface GetVpnGatewayFilter {
+    interface GetNetworkInsightsAnalysisForwardPathComponentInboundHeader {
+        destinationAddresses: string[];
+        destinationPortRanges: outputs.ec2.GetNetworkInsightsAnalysisForwardPathComponentInboundHeaderDestinationPortRange[];
+        protocol: string;
+        sourceAddresses: string[];
+        sourcePortRanges: outputs.ec2.GetNetworkInsightsAnalysisForwardPathComponentInboundHeaderSourcePortRange[];
+    }
+    interface GetNetworkInsightsAnalysisForwardPathComponentInboundHeaderDestinationPortRange {
+        from: number;
+        to: number;
+    }
+    interface GetNetworkInsightsAnalysisForwardPathComponentInboundHeaderSourcePortRange {
+        from: number;
+        to: number;
+    }
+    interface GetNetworkInsightsAnalysisForwardPathComponentOutboundHeader {
+        destinationAddresses: string[];
+        destinationPortRanges: outputs.ec2.GetNetworkInsightsAnalysisForwardPathComponentOutboundHeaderDestinationPortRange[];
+        protocol: string;
+        sourceAddresses: string[];
+        sourcePortRanges: outputs.ec2.GetNetworkInsightsAnalysisForwardPathComponentOutboundHeaderSourcePortRange[];
+    }
+    interface GetNetworkInsightsAnalysisForwardPathComponentOutboundHeaderDestinationPortRange {
+        from: number;
+        to: number;
+    }
+    interface GetNetworkInsightsAnalysisForwardPathComponentOutboundHeaderSourcePortRange {
+        from: number;
+        to: number;
+    }
+    interface GetNetworkInsightsAnalysisForwardPathComponentRouteTableRoute {
+        destinationCidr: string;
+        destinationPrefixListId: string;
+        egressOnlyInternetGatewayId: string;
+        gatewayId: string;
+        instanceId: string;
+        natGatewayId: string;
+        networkInterfaceId: string;
+        origin: string;
+        transitGatewayId: string;
+        vpcPeeringConnectionId: string;
+    }
+    interface GetNetworkInsightsAnalysisForwardPathComponentSecurityGroupRule {
+        cidr: string;
+        direction: string;
+        portRanges: outputs.ec2.GetNetworkInsightsAnalysisForwardPathComponentSecurityGroupRulePortRange[];
+        prefixListId: string;
+        protocol: string;
+        securityGroupId: string;
+    }
+    interface GetNetworkInsightsAnalysisForwardPathComponentSecurityGroupRulePortRange {
+        from: number;
+        to: number;
+    }
+    interface GetNetworkInsightsAnalysisForwardPathComponentSourceVpc {
         /**
-         * The name of the field to filter by, as defined by
-         * [the underlying AWS API](http://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeVpnGateways.html).
+         * The ARN of the selected Network Insights Analysis.
          */
-        name: string;
+        arn: string;
+        id: string;
         /**
-         * Set of values that are accepted for the given field.
-         * A VPN Gateway will be selected if any one of the given values matches.
+         * The name of the filter field. Valid values can be found in the EC2 [`DescribeNetworkInsightsAnalyses`](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeNetworkInsightsAnalyses.html) API Reference.
          */
-        values: string[];
+        name: string;
     }
-    interface InstanceCapacityReservationSpecification {
+    interface GetNetworkInsightsAnalysisForwardPathComponentSubnet {
         /**
-         * Indicates the instance's Capacity Reservation preferences. Can be `"open"` or `"none"`. (Default: `"open"`).
+         * The ARN of the selected Network Insights Analysis.
          */
-        capacityReservationPreference?: string;
+        arn: string;
+        id: string;
         /**
-         * Information about the target Capacity Reservation. See Capacity Reservation Target below for more details.
+         * The name of the filter field. Valid values can be found in the EC2 [`DescribeNetworkInsightsAnalyses`](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeNetworkInsightsAnalyses.html) API Reference.
          */
-        capacityReservationTarget?: outputs.ec2.InstanceCapacityReservationSpecificationCapacityReservationTarget;
+        name: string;
     }
-    interface InstanceCapacityReservationSpecificationCapacityReservationTarget {
+    interface GetNetworkInsightsAnalysisForwardPathComponentTransitGateway {
         /**
-         * The ID of the Capacity Reservation in which to run the instance.
+         * The ARN of the selected Network Insights Analysis.
          */
-        capacityReservationId?: string;
+        arn: string;
+        id: string;
         /**
-         * The ARN of the Capacity Reservation resource group in which to run the instance.
+         * The name of the filter field. Valid values can be found in the EC2 [`DescribeNetworkInsightsAnalyses`](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeNetworkInsightsAnalyses.html) API Reference.
          */
-        capacityReservationResourceGroupArn?: string;
+        name: string;
     }
-    interface InstanceCreditSpecification {
+    interface GetNetworkInsightsAnalysisForwardPathComponentTransitGatewayRouteTableRoute {
+        attachmentId: string;
+        destinationCidr: string;
+        prefixListId: string;
+        resourceId: string;
+        resourceType: string;
+        routeOrigin: string;
+        state: string;
+    }
+    interface GetNetworkInsightsAnalysisForwardPathComponentVpc {
         /**
-         * Credit option for CPU usage. Valid values include `standard` or `unlimited`. T3 instances are launched as unlimited by default. T2 instances are launched as standard by default.
+         * The ARN of the selected Network Insights Analysis.
          */
-        cpuCredits?: string;
-    }
-    interface InstanceEbsBlockDevice {
+        arn: string;
+        id: string;
         /**
-         * Whether the volume should be destroyed on instance termination. Defaults to `true`.
+         * The name of the filter field. Valid values can be found in the EC2 [`DescribeNetworkInsightsAnalyses`](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeNetworkInsightsAnalyses.html) API Reference.
          */
-        deleteOnTermination?: boolean;
+        name: string;
+    }
+    interface GetNetworkInsightsAnalysisReturnPathComponent {
+        aclRules: outputs.ec2.GetNetworkInsightsAnalysisReturnPathComponentAclRule[];
+        additionalDetails: outputs.ec2.GetNetworkInsightsAnalysisReturnPathComponentAdditionalDetail[];
+        attachedTos: outputs.ec2.GetNetworkInsightsAnalysisReturnPathComponentAttachedTo[];
+        components: outputs.ec2.GetNetworkInsightsAnalysisReturnPathComponentComponent[];
+        destinationVpcs: outputs.ec2.GetNetworkInsightsAnalysisReturnPathComponentDestinationVpc[];
+        inboundHeaders: outputs.ec2.GetNetworkInsightsAnalysisReturnPathComponentInboundHeader[];
+        outboundHeaders: outputs.ec2.GetNetworkInsightsAnalysisReturnPathComponentOutboundHeader[];
+        routeTableRoutes: outputs.ec2.GetNetworkInsightsAnalysisReturnPathComponentRouteTableRoute[];
+        securityGroupRules: outputs.ec2.GetNetworkInsightsAnalysisReturnPathComponentSecurityGroupRule[];
+        sequenceNumber: number;
+        sourceVpcs: outputs.ec2.GetNetworkInsightsAnalysisReturnPathComponentSourceVpc[];
+        subnets: outputs.ec2.GetNetworkInsightsAnalysisReturnPathComponentSubnet[];
+        transitGatewayRouteTableRoutes: outputs.ec2.GetNetworkInsightsAnalysisReturnPathComponentTransitGatewayRouteTableRoute[];
+        transitGateways: outputs.ec2.GetNetworkInsightsAnalysisReturnPathComponentTransitGateway[];
+        vpcs: outputs.ec2.GetNetworkInsightsAnalysisReturnPathComponentVpc[];
+    }
+    interface GetNetworkInsightsAnalysisReturnPathComponentAclRule {
+        cidr: string;
+        egress: boolean;
+        portRanges: outputs.ec2.GetNetworkInsightsAnalysisReturnPathComponentAclRulePortRange[];
+        protocol: string;
+        ruleAction: string;
+        ruleNumber: number;
+    }
+    interface GetNetworkInsightsAnalysisReturnPathComponentAclRulePortRange {
+        from: number;
+        to: number;
+    }
+    interface GetNetworkInsightsAnalysisReturnPathComponentAdditionalDetail {
+        additionalDetailType: string;
+        components: outputs.ec2.GetNetworkInsightsAnalysisReturnPathComponentAdditionalDetailComponent[];
+    }
+    interface GetNetworkInsightsAnalysisReturnPathComponentAdditionalDetailComponent {
         /**
-         * Name of the device to mount.
+         * The ARN of the selected Network Insights Analysis.
          */
-        deviceName: string;
+        arn: string;
+        id: string;
         /**
-         * Enables [EBS encryption](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSEncryption.html) on the volume. Defaults to `false`. Cannot be used with `snapshotId`. Must be configured to perform drift detection.
+         * The name of the filter field. Valid values can be found in the EC2 [`DescribeNetworkInsightsAnalyses`](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeNetworkInsightsAnalyses.html) API Reference.
          */
-        encrypted: boolean;
+        name: string;
+    }
+    interface GetNetworkInsightsAnalysisReturnPathComponentAttachedTo {
         /**
-         * Amount of provisioned [IOPS](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-io-characteristics.html). Only valid for volumeType of `io1`, `io2` or `gp3`.
+         * The ARN of the selected Network Insights Analysis.
          */
-        iops: number;
+        arn: string;
+        id: string;
         /**
-         * Amazon Resource Name (ARN) of the KMS Key to use when encrypting the volume. Must be configured to perform drift detection.
+         * The name of the filter field. Valid values can be found in the EC2 [`DescribeNetworkInsightsAnalyses`](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeNetworkInsightsAnalyses.html) API Reference.
          */
-        kmsKeyId: string;
+        name: string;
+    }
+    interface GetNetworkInsightsAnalysisReturnPathComponentComponent {
         /**
-         * Snapshot ID to mount.
+         * The ARN of the selected Network Insights Analysis.
          */
-        snapshotId: string;
+        arn: string;
+        id: string;
         /**
-         * A map of tags to assign to the device.
+         * The name of the filter field. Valid values can be found in the EC2 [`DescribeNetworkInsightsAnalyses`](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeNetworkInsightsAnalyses.html) API Reference.
          */
-        tags?: {
-            [key: string]: string;
-        };
+        name: string;
+    }
+    interface GetNetworkInsightsAnalysisReturnPathComponentDestinationVpc {
         /**
-         * Throughput to provision for a volume in mebibytes per second (MiB/s). This is only valid for `volumeType` of `gp3`.
+         * The ARN of the selected Network Insights Analysis.
          */
-        throughput: number;
+        arn: string;
+        id: string;
         /**
-         * ID of the volume. For example, the ID can be accessed like this, `aws_instance.web.root_block_device.0.volume_id`.
+         * The name of the filter field. Valid values can be found in the EC2 [`DescribeNetworkInsightsAnalyses`](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeNetworkInsightsAnalyses.html) API Reference.
          */
-        volumeId: string;
+        name: string;
+    }
+    interface GetNetworkInsightsAnalysisReturnPathComponentInboundHeader {
+        destinationAddresses: string[];
+        destinationPortRanges: outputs.ec2.GetNetworkInsightsAnalysisReturnPathComponentInboundHeaderDestinationPortRange[];
+        protocol: string;
+        sourceAddresses: string[];
+        sourcePortRanges: outputs.ec2.GetNetworkInsightsAnalysisReturnPathComponentInboundHeaderSourcePortRange[];
+    }
+    interface GetNetworkInsightsAnalysisReturnPathComponentInboundHeaderDestinationPortRange {
+        from: number;
+        to: number;
+    }
+    interface GetNetworkInsightsAnalysisReturnPathComponentInboundHeaderSourcePortRange {
+        from: number;
+        to: number;
+    }
+    interface GetNetworkInsightsAnalysisReturnPathComponentOutboundHeader {
+        destinationAddresses: string[];
+        destinationPortRanges: outputs.ec2.GetNetworkInsightsAnalysisReturnPathComponentOutboundHeaderDestinationPortRange[];
+        protocol: string;
+        sourceAddresses: string[];
+        sourcePortRanges: outputs.ec2.GetNetworkInsightsAnalysisReturnPathComponentOutboundHeaderSourcePortRange[];
+    }
+    interface GetNetworkInsightsAnalysisReturnPathComponentOutboundHeaderDestinationPortRange {
+        from: number;
+        to: number;
+    }
+    interface GetNetworkInsightsAnalysisReturnPathComponentOutboundHeaderSourcePortRange {
+        from: number;
+        to: number;
+    }
+    interface GetNetworkInsightsAnalysisReturnPathComponentRouteTableRoute {
+        destinationCidr: string;
+        destinationPrefixListId: string;
+        egressOnlyInternetGatewayId: string;
+        gatewayId: string;
+        instanceId: string;
+        natGatewayId: string;
+        networkInterfaceId: string;
+        origin: string;
+        transitGatewayId: string;
+        vpcPeeringConnectionId: string;
+    }
+    interface GetNetworkInsightsAnalysisReturnPathComponentSecurityGroupRule {
+        cidr: string;
+        direction: string;
+        portRanges: outputs.ec2.GetNetworkInsightsAnalysisReturnPathComponentSecurityGroupRulePortRange[];
+        prefixListId: string;
+        protocol: string;
+        securityGroupId: string;
+    }
+    interface GetNetworkInsightsAnalysisReturnPathComponentSecurityGroupRulePortRange {
+        from: number;
+        to: number;
+    }
+    interface GetNetworkInsightsAnalysisReturnPathComponentSourceVpc {
         /**
-         * Size of the volume in gibibytes (GiB).
+         * The ARN of the selected Network Insights Analysis.
          */
-        volumeSize: number;
+        arn: string;
+        id: string;
         /**
-         * Type of volume. Valid values include `standard`, `gp2`, `gp3`, `io1`, `io2`, `sc1`, or `st1`. Defaults to `gp2`.
+         * The name of the filter field. Valid values can be found in the EC2 [`DescribeNetworkInsightsAnalyses`](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeNetworkInsightsAnalyses.html) API Reference.
          */
-        volumeType: string;
+        name: string;
     }
-    interface InstanceEnclaveOptions {
+    interface GetNetworkInsightsAnalysisReturnPathComponentSubnet {
         /**
-         * Whether Nitro Enclaves will be enabled on the instance. Defaults to `false`.
+         * The ARN of the selected Network Insights Analysis.
          */
-        enabled: boolean;
-    }
-    interface InstanceEphemeralBlockDevice {
+        arn: string;
+        id: string;
         /**
-         * The name of the block device to mount on the instance.
+         * The name of the filter field. Valid values can be found in the EC2 [`DescribeNetworkInsightsAnalyses`](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeNetworkInsightsAnalyses.html) API Reference.
          */
-        deviceName: string;
+        name: string;
+    }
+    interface GetNetworkInsightsAnalysisReturnPathComponentTransitGateway {
         /**
-         * Suppresses the specified device included in the AMI's block device mapping.
+         * The ARN of the selected Network Insights Analysis.
          */
-        noDevice?: boolean;
+        arn: string;
+        id: string;
         /**
-         * [Instance Store Device Name](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/InstanceStorage.html#InstanceStoreDeviceNames) (e.g., `ephemeral0`).
+         * The name of the filter field. Valid values can be found in the EC2 [`DescribeNetworkInsightsAnalyses`](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeNetworkInsightsAnalyses.html) API Reference.
          */
-        virtualName?: string;
+        name: string;
     }
-    interface InstanceLaunchTemplate {
+    interface GetNetworkInsightsAnalysisReturnPathComponentTransitGatewayRouteTableRoute {
+        attachmentId: string;
+        destinationCidr: string;
+        prefixListId: string;
+        resourceId: string;
+        resourceType: string;
+        routeOrigin: string;
+        state: string;
+    }
+    interface GetNetworkInsightsAnalysisReturnPathComponentVpc {
         /**
-         * The ID of the launch template. Conflicts with `name`.
+         * The ARN of the selected Network Insights Analysis.
          */
+        arn: string;
         id: string;
         /**
-         * The name of the launch template. Conflicts with `id`.
+         * The name of the filter field. Valid values can be found in the EC2 [`DescribeNetworkInsightsAnalyses`](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeNetworkInsightsAnalyses.html) API Reference.
          */
         name: string;
-        /**
-         * Template version. Can be a specific version number, `$Latest` or `$Default`. The default value is `$Default`.
-         */
-        version?: string;
     }
-    interface InstanceMaintenanceOptions {
+    interface GetNetworkInsightsPathFilter {
         /**
-         * The automatic recovery behavior of the Instance. Can be `"default"` or `"disabled"`. See [Recover your instance](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-recover.html) for more details.
+         * The name of the filter field. Valid values can be found in the EC2 [`DescribeNetworkInsightsPaths`](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeNetworkInsightsPaths.html) API Reference.
          */
-        autoRecovery: string;
+        name: string;
+        /**
+         * Set of values that are accepted for the given filter field. Results will be selected if any given value matches.
+         */
+        values: string[];
     }
-    interface InstanceMetadataOptions {
+    interface GetNetworkInterfaceAssociation {
         /**
-         * Whether the metadata service is available. Valid values include `enabled` or `disabled`. Defaults to `enabled`.
+         * The allocation ID.
          */
-        httpEndpoint: string;
+        allocationId: string;
         /**
-         * Desired HTTP PUT response hop limit for instance metadata requests. The larger the number, the further instance metadata requests can travel. Valid values are integer from `1` to `64`. Defaults to `1`.
+         * The association ID.
          */
-        httpPutResponseHopLimit: number;
+        associationId: string;
         /**
-         * Whether or not the metadata service requires session tokens, also referred to as _Instance Metadata Service Version 2 (IMDSv2)_. Valid values include `optional` or `required`. Defaults to `optional`.
+         * The carrier IP address associated with the network interface. This attribute is only set when the network interface is in a subnet which is associated with a Wavelength Zone.
          */
-        httpTokens: string;
+        carrierIp: string;
         /**
-         * Enables or disables access to instance tags from the instance metadata service. Valid values include `enabled` or `disabled`. Defaults to `disabled`.
+         * The customer-owned IP address.
          */
-        instanceMetadataTags?: string;
-    }
-    interface InstanceNetworkInterface {
+        customerOwnedIp: string;
         /**
-         * Whether or not to delete the network interface on instance termination. Defaults to `false`. Currently, the only valid value is `false`, as this is only supported when creating new network interfaces when launching an instance.
+         * The ID of the Elastic IP address owner.
          */
-        deleteOnTermination?: boolean;
+        ipOwnerId: string;
         /**
-         * Integer index of the network interface attachment. Limited by instance type.
+         * The public DNS name.
+         */
+        publicDnsName: string;
+        /**
+         * The address of the Elastic IP address bound to the network interface.
          */
+        publicIp: string;
+    }
+    interface GetNetworkInterfaceAttachment {
+        attachmentId: string;
         deviceIndex: number;
+        instanceId: string;
+        instanceOwnerId: string;
+    }
+    interface GetNetworkInterfaceFilter {
+        name: string;
+        values: string[];
+    }
+    interface GetNetworkInterfacesFilter {
         /**
-         * Integer index of the network card. Limited by instance type. The default index is `0`.
+         * The name of the field to filter by, as defined by
+         * [the underlying AWS API](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeNetworkInterfaces.html).
          */
-        networkCardIndex?: number;
+        name: string;
         /**
-         * ID of the network interface to attach.
+         * Set of values that are accepted for the given field.
+         */
+        values: string[];
+    }
+    interface GetPrefixListFilter {
+        /**
+         * The name of the filter field. Valid values can be found in the [EC2 DescribePrefixLists API Reference](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribePrefixLists.html).
+         */
+        name: string;
+        /**
+         * Set of values that are accepted for the given filter field. Results will be selected if any given value matches.
+         */
+        values: string[];
+    }
+    interface GetRouteTableAssociation {
+        /**
+         * ID of an Internet Gateway or Virtual Private Gateway which is connected to the Route Table (not exported if not passed as a parameter).
+         */
+        gatewayId: string;
+        /**
+         * Whether the association is due to the main route table.
+         */
+        main: boolean;
+        /**
+         * Association ID.
+         */
+        routeTableAssociationId: string;
+        /**
+         * ID of the specific Route Table to retrieve.
+         */
+        routeTableId: string;
+        /**
+         * ID of a Subnet which is connected to the Route Table (not exported if not passed as a parameter).
+         */
+        subnetId: string;
+    }
+    interface GetRouteTableFilter {
+        /**
+         * Name of the field to filter by, as defined by [the underlying AWS API](http://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeRouteTables.html).
+         */
+        name: string;
+        /**
+         * Set of values that are accepted for the given field. A Route Table will be selected if any one of the given values matches.
+         */
+        values: string[];
+    }
+    interface GetRouteTableRoute {
+        /**
+         * ID of the Carrier Gateway.
+         */
+        carrierGatewayId: string;
+        /**
+         * CIDR block of the route.
+         */
+        cidrBlock: string;
+        /**
+         * ARN of the core network.
+         */
+        coreNetworkArn: string;
+        /**
+         * The ID of a managed prefix list destination of the route.
+         */
+        destinationPrefixListId: string;
+        /**
+         * ID of the Egress Only Internet Gateway.
+         */
+        egressOnlyGatewayId: string;
+        /**
+         * ID of an Internet Gateway or Virtual Private Gateway which is connected to the Route Table (not exported if not passed as a parameter).
+         */
+        gatewayId: string;
+        /**
+         * EC2 instance ID.
+         */
+        instanceId: string;
+        /**
+         * IPv6 CIDR block of the route.
+         */
+        ipv6CidrBlock: string;
+        /**
+         * Local Gateway ID.
+         */
+        localGatewayId: string;
+        /**
+         * NAT Gateway ID.
+         */
+        natGatewayId: string;
+        /**
+         * ID of the elastic network interface (eni) to use.
          */
         networkInterfaceId: string;
+        /**
+         * EC2 Transit Gateway ID.
+         */
+        transitGatewayId: string;
+        /**
+         * VPC Endpoint ID.
+         */
+        vpcEndpointId: string;
+        /**
+         * VPC Peering ID.
+         */
+        vpcPeeringConnectionId: string;
     }
-    interface InstancePrivateDnsNameOptions {
+    interface GetRouteTablesFilter {
         /**
-         * Indicates whether to respond to DNS queries for instance hostnames with DNS A records.
+         * The name of the field to filter by, as defined by
+         * [the underlying AWS API](http://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeRouteTables.html).
          */
-        enableResourceNameDnsARecord: boolean;
+        name: string;
         /**
-         * Indicates whether to respond to DNS queries for instance hostnames with DNS AAAA records.
+         * Set of values that are accepted for the given field.
+         * A Route Table will be selected if any one of the given values matches.
          */
-        enableResourceNameDnsAaaaRecord: boolean;
+        values: string[];
+    }
+    interface GetSecurityGroupFilter {
         /**
-         * The type of hostname for Amazon EC2 instances. For IPv4 only subnets, an instance DNS name must be based on the instance IPv4 address. For IPv6 native subnets, an instance DNS name must be based on the instance ID. For dual-stack subnets, you can specify whether DNS names use the instance IPv4 address or the instance ID. Valid values: `ip-name` and `resource-name`.
+         * The name of the field to filter by, as defined by
+         * [the underlying AWS API](http://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeSecurityGroups.html).
          */
-        hostnameType: string;
+        name: string;
+        /**
+         * Set of values that are accepted for the given field.
+         * A Security Group will be selected if any one of the given values matches.
+         */
+        values: string[];
     }
-    interface InstanceRootBlockDevice {
+    interface GetSecurityGroupsFilter {
+        name: string;
+        values: string[];
+    }
+    interface GetSpotPriceFilter {
         /**
-         * Whether the volume should be destroyed on instance termination. Defaults to `true`.
+         * Name of the filter.
          */
-        deleteOnTermination?: boolean;
+        name: string;
         /**
-         * Name of the device to mount.
+         * List of one or more values for the filter.
          */
-        deviceName: string;
+        values: string[];
+    }
+    interface GetSubnetFilter {
         /**
-         * Whether to enable volume encryption. Defaults to `false`. Must be configured to perform drift detection.
+         * The name of the field to filter by, as defined by [the underlying AWS API](http://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeSubnets.html).
          */
-        encrypted: boolean;
+        name: string;
         /**
-         * Amount of provisioned [IOPS](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-io-characteristics.html). Only valid for volumeType of `io1`, `io2` or `gp3`.
+         * Set of values that are accepted for the given field. A subnet will be selected if any one of the given values matches.
          */
-        iops: number;
+        values: string[];
+    }
+    interface GetSubnetIdsFilter {
         /**
-         * Amazon Resource Name (ARN) of the KMS Key to use when encrypting the volume. Must be configured to perform drift detection.
+         * The name of the field to filter by, as defined by
+         * [the underlying AWS API](http://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeSubnets.html).
+         * For example, if matching against tag `Name`, use:
          */
-        kmsKeyId: string;
+        name: string;
         /**
-         * A map of tags to assign to the device.
+         * Set of values that are accepted for the given field.
+         * Subnet IDs will be selected if any one of the given values match.
          */
-        tags?: {
-            [key: string]: string;
-        };
+        values: string[];
+    }
+    interface GetSubnetsFilter {
         /**
-         * Throughput to provision for a volume in mebibytes per second (MiB/s). This is only valid for `volumeType` of `gp3`.
+         * The name of the field to filter by, as defined by
+         * [the underlying AWS API](http://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeSubnets.html).
+         * For example, if matching against tag `Name`, use:
+         */
+        name: string;
+        /**
+         * Set of values that are accepted for the given field.
+         * Subnet IDs will be selected if any one of the given values match.
+         */
+        values: string[];
+    }
+    interface GetTransitGatewayRouteTablesFilter {
+        /**
+         * The name of the field to filter by, as defined by
+         * [the underlying AWS API](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeTransitGatewayRouteTables.html).
+         */
+        name: string;
+        /**
+         * Set of values that are accepted for the given field.
+         * A Transit Gateway Route Table will be selected if any one of the given values matches.
+         */
+        values: string[];
+    }
+    interface GetVpcCidrBlockAssociation {
+        /**
+         * The association ID for the the IPv4 CIDR block.
+         */
+        associationId: string;
+        /**
+         * The cidr block of the desired VPC.
+         */
+        cidrBlock: string;
+        /**
+         * The current state of the desired VPC.
+         * Can be either `"pending"` or `"available"`.
+         */
+        state: string;
+    }
+    interface GetVpcDhcpOptionsFilter {
+        /**
+         * The name of the field to filter.
+         */
+        name: string;
+        /**
+         * Set of values for filtering.
+         */
+        values: string[];
+    }
+    interface GetVpcEndpointDnsEntry {
+        /**
+         * The DNS name.
+         */
+        dnsName: string;
+        /**
+         * The ID of the private hosted zone.
+         */
+        hostedZoneId: string;
+    }
+    interface GetVpcEndpointDnsOption {
+        dnsRecordIpType: string;
+    }
+    interface GetVpcEndpointFilter {
+        /**
+         * The name of the field to filter by, as defined by
+         * [the underlying AWS API](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeVpcEndpoints.html).
+         */
+        name: string;
+        /**
+         * Set of values that are accepted for the given field.
+         * A VPC Endpoint will be selected if any one of the given values matches.
+         */
+        values: string[];
+    }
+    interface GetVpcEndpointServiceFilter {
+        /**
+         * The name of the filter field. Valid values can be found in the [EC2 DescribeVpcEndpointServices API Reference](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeVpcEndpointServices.html).
+         */
+        name: string;
+        /**
+         * Set of values that are accepted for the given filter field. Results will be selected if any given value matches.
+         */
+        values: string[];
+    }
+    interface GetVpcFilter {
+        /**
+         * The name of the field to filter by, as defined by
+         * [the underlying AWS API](http://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeVpcs.html).
+         */
+        name: string;
+        /**
+         * Set of values that are accepted for the given field.
+         * A VPC will be selected if any one of the given values matches.
+         */
+        values: string[];
+    }
+    interface GetVpcIamPoolFilter {
+        name: string;
+        values: string[];
+    }
+    interface GetVpcPeeringConnectionCidrBlockSet {
+        /**
+         * The primary CIDR block of the requester VPC of the specific VPC Peering Connection to retrieve.
+         */
+        cidrBlock: string;
+    }
+    interface GetVpcPeeringConnectionFilter {
+        /**
+         * The name of the field to filter by, as defined by
+         * [the underlying AWS API](http://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeVpcPeeringConnections.html).
+         */
+        name: string;
+        /**
+         * Set of values that are accepted for the given field.
+         * A VPC Peering Connection will be selected if any one of the given values matches.
+         */
+        values: string[];
+    }
+    interface GetVpcPeeringConnectionPeerCidrBlockSet {
+        /**
+         * The primary CIDR block of the requester VPC of the specific VPC Peering Connection to retrieve.
+         */
+        cidrBlock: string;
+    }
+    interface GetVpcPeeringConnectionsFilter {
+        /**
+         * The name of the field to filter by, as defined by
+         * [the underlying AWS API](http://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeVpcPeeringConnections.html).
+         */
+        name: string;
+        /**
+         * Set of values that are accepted for the given field.
+         * A VPC Peering Connection will be selected if any one of the given values matches.
+         */
+        values: string[];
+    }
+    interface GetVpcsFilter {
+        /**
+         * The name of the field to filter by, as defined by
+         * [the underlying AWS API](http://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeVpcs.html).
+         */
+        name: string;
+        /**
+         * Set of values that are accepted for the given field.
+         * A VPC will be selected if any one of the given values matches.
+         */
+        values: string[];
+    }
+    interface GetVpnGatewayFilter {
+        /**
+         * The name of the field to filter by, as defined by
+         * [the underlying AWS API](http://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeVpnGateways.html).
+         */
+        name: string;
+        /**
+         * Set of values that are accepted for the given field.
+         * A VPN Gateway will be selected if any one of the given values matches.
+         */
+        values: string[];
+    }
+    interface InstanceCapacityReservationSpecification {
+        /**
+         * Indicates the instance's Capacity Reservation preferences. Can be `"open"` or `"none"`. (Default: `"open"`).
+         */
+        capacityReservationPreference?: string;
+        /**
+         * Information about the target Capacity Reservation. See Capacity Reservation Target below for more details.
+         */
+        capacityReservationTarget?: outputs.ec2.InstanceCapacityReservationSpecificationCapacityReservationTarget;
+    }
+    interface InstanceCapacityReservationSpecificationCapacityReservationTarget {
+        /**
+         * The ID of the Capacity Reservation in which to run the instance.
+         */
+        capacityReservationId?: string;
+        /**
+         * The ARN of the Capacity Reservation resource group in which to run the instance.
+         */
+        capacityReservationResourceGroupArn?: string;
+    }
+    interface InstanceCreditSpecification {
+        /**
+         * Credit option for CPU usage. Valid values include `standard` or `unlimited`. T3 instances are launched as unlimited by default. T2 instances are launched as standard by default.
+         */
+        cpuCredits?: string;
+    }
+    interface InstanceEbsBlockDevice {
+        /**
+         * Whether the volume should be destroyed on instance termination. Defaults to `true`.
+         */
+        deleteOnTermination?: boolean;
+        /**
+         * Name of the device to mount.
+         */
+        deviceName: string;
+        /**
+         * Enables [EBS encryption](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSEncryption.html) on the volume. Defaults to `false`. Cannot be used with `snapshotId`. Must be configured to perform drift detection.
+         */
+        encrypted: boolean;
+        /**
+         * Amount of provisioned [IOPS](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-io-characteristics.html). Only valid for volumeType of `io1`, `io2` or `gp3`.
+         */
+        iops: number;
+        /**
+         * Amazon Resource Name (ARN) of the KMS Key to use when encrypting the volume. Must be configured to perform drift detection.
+         */
+        kmsKeyId: string;
+        /**
+         * Snapshot ID to mount.
+         */
+        snapshotId: string;
+        /**
+         * A map of tags to assign to the device.
+         */
+        tags?: {
+            [key: string]: string;
+        };
+        /**
+         * Throughput to provision for a volume in mebibytes per second (MiB/s). This is only valid for `volumeType` of `gp3`.
+         */
+        throughput: number;
+        /**
+         * ID of the volume. For example, the ID can be accessed like this, `aws_instance.web.root_block_device.0.volume_id`.
+         */
+        volumeId: string;
+        /**
+         * Size of the volume in gibibytes (GiB).
+         */
+        volumeSize: number;
+        /**
+         * Type of volume. Valid values include `standard`, `gp2`, `gp3`, `io1`, `io2`, `sc1`, or `st1`. Defaults to `gp2`.
+         */
+        volumeType: string;
+    }
+    interface InstanceEnclaveOptions {
+        /**
+         * Whether Nitro Enclaves will be enabled on the instance. Defaults to `false`.
+         */
+        enabled: boolean;
+    }
+    interface InstanceEphemeralBlockDevice {
+        /**
+         * The name of the block device to mount on the instance.
+         */
+        deviceName: string;
+        /**
+         * Suppresses the specified device included in the AMI's block device mapping.
+         */
+        noDevice?: boolean;
+        /**
+         * [Instance Store Device Name](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/InstanceStorage.html#InstanceStoreDeviceNames) (e.g., `ephemeral0`).
+         */
+        virtualName?: string;
+    }
+    interface InstanceLaunchTemplate {
+        /**
+         * The ID of the launch template. Conflicts with `name`.
+         */
+        id: string;
+        /**
+         * The name of the launch template. Conflicts with `id`.
+         */
+        name: string;
+        /**
+         * Template version. Can be a specific version number, `$Latest` or `$Default`. The default value is `$Default`.
+         */
+        version?: string;
+    }
+    interface InstanceMaintenanceOptions {
+        /**
+         * The automatic recovery behavior of the Instance. Can be `"default"` or `"disabled"`. See [Recover your instance](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-recover.html) for more details.
+         */
+        autoRecovery: string;
+    }
+    interface InstanceMetadataOptions {
+        /**
+         * Whether the metadata service is available. Valid values include `enabled` or `disabled`. Defaults to `enabled`.
+         */
+        httpEndpoint: string;
+        /**
+         * Desired HTTP PUT response hop limit for instance metadata requests. The larger the number, the further instance metadata requests can travel. Valid values are integer from `1` to `64`. Defaults to `1`.
+         */
+        httpPutResponseHopLimit: number;
+        /**
+         * Whether or not the metadata service requires session tokens, also referred to as _Instance Metadata Service Version 2 (IMDSv2)_. Valid values include `optional` or `required`. Defaults to `optional`.
+         */
+        httpTokens: string;
+        /**
+         * Enables or disables access to instance tags from the instance metadata service. Valid values include `enabled` or `disabled`. Defaults to `disabled`.
+         */
+        instanceMetadataTags?: string;
+    }
+    interface InstanceNetworkInterface {
+        /**
+         * Whether or not to delete the network interface on instance termination. Defaults to `false`. Currently, the only valid value is `false`, as this is only supported when creating new network interfaces when launching an instance.
+         */
+        deleteOnTermination?: boolean;
+        /**
+         * Integer index of the network interface attachment. Limited by instance type.
+         */
+        deviceIndex: number;
+        /**
+         * Integer index of the network card. Limited by instance type. The default index is `0`.
+         */
+        networkCardIndex?: number;
+        /**
+         * ID of the network interface to attach.
+         */
+        networkInterfaceId: string;
+    }
+    interface InstancePrivateDnsNameOptions {
+        /**
+         * Indicates whether to respond to DNS queries for instance hostnames with DNS A records.
+         */
+        enableResourceNameDnsARecord: boolean;
+        /**
+         * Indicates whether to respond to DNS queries for instance hostnames with DNS AAAA records.
+         */
+        enableResourceNameDnsAaaaRecord: boolean;
+        /**
+         * The type of hostname for Amazon EC2 instances. For IPv4 only subnets, an instance DNS name must be based on the instance IPv4 address. For IPv6 native subnets, an instance DNS name must be based on the instance ID. For dual-stack subnets, you can specify whether DNS names use the instance IPv4 address or the instance ID. Valid values: `ip-name` and `resource-name`.
+         */
+        hostnameType: string;
+    }
+    interface InstanceRootBlockDevice {
+        /**
+         * Whether the volume should be destroyed on instance termination. Defaults to `true`.
+         */
+        deleteOnTermination?: boolean;
+        /**
+         * Name of the device to mount.
+         */
+        deviceName: string;
+        /**
+         * Whether to enable volume encryption. Defaults to `false`. Must be configured to perform drift detection.
+         */
+        encrypted: boolean;
+        /**
+         * Amount of provisioned [IOPS](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-io-characteristics.html). Only valid for volumeType of `io1`, `io2` or `gp3`.
+         */
+        iops: number;
+        /**
+         * Amazon Resource Name (ARN) of the KMS Key to use when encrypting the volume. Must be configured to perform drift detection.
+         */
+        kmsKeyId: string;
+        /**
+         * A map of tags to assign to the device.
+         */
+        tags?: {
+            [key: string]: string;
+        };
+        /**
+         * Throughput to provision for a volume in mebibytes per second (MiB/s). This is only valid for `volumeType` of `gp3`.
+         */
+        throughput: number;
+        /**
+         * ID of the volume. For example, the ID can be accessed like this, `aws_instance.web.root_block_device.0.volume_id`.
+         */
+        volumeId: string;
+        /**
+         * Size of the volume in gibibytes (GiB).
+         */
+        volumeSize: number;
+        /**
+         * Type of volume. Valid values include `standard`, `gp2`, `gp3`, `io1`, `io2`, `sc1`, or `st1`. Defaults to `gp2`.
+         */
+        volumeType: string;
+    }
+    interface LaunchConfigurationEbsBlockDevice {
+        deleteOnTermination?: boolean;
+        deviceName: string;
+        encrypted: boolean;
+        iops: number;
+        noDevice?: boolean;
+        snapshotId: string;
+        throughput: number;
+        volumeSize: number;
+        volumeType: string;
+    }
+    interface LaunchConfigurationEphemeralBlockDevice {
+        deviceName: string;
+        noDevice?: boolean;
+        virtualName?: string;
+    }
+    interface LaunchConfigurationMetadataOptions {
+        /**
+         * The state of the metadata service: `enabled`, `disabled`.
+         */
+        httpEndpoint: string;
+        /**
+         * The desired HTTP PUT response hop limit for instance metadata requests.
+         */
+        httpPutResponseHopLimit: number;
+        /**
+         * If session tokens are required: `optional`, `required`.
+         */
+        httpTokens: string;
+    }
+    interface LaunchConfigurationRootBlockDevice {
+        deleteOnTermination?: boolean;
+        encrypted: boolean;
+        iops: number;
+        throughput: number;
+        volumeSize: number;
+        volumeType: string;
+    }
+    interface LaunchTemplateBlockDeviceMapping {
+        /**
+         * The name of the device to mount.
+         */
+        deviceName?: string;
+        /**
+         * Configure EBS volume properties.
+         */
+        ebs?: outputs.ec2.LaunchTemplateBlockDeviceMappingEbs;
+        /**
+         * Suppresses the specified device included in the AMI's block device mapping.
+         */
+        noDevice?: string;
+        /**
+         * The [Instance Store Device
+         * Name](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/InstanceStorage.html#InstanceStoreDeviceNames)
+         * (e.g., `"ephemeral0"`).
+         */
+        virtualName?: string;
+    }
+    interface LaunchTemplateBlockDeviceMappingEbs {
+        /**
+         * Whether the volume should be destroyed on instance termination. Defaults to `false` if not set. See [Preserving Amazon EBS Volumes on Instance Termination](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/terminating-instances.html#preserving-volumes-on-termination) for more information.
+         */
+        deleteOnTermination?: string;
+        /**
+         * Enables [EBS encryption](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSEncryption.html)
+         * on the volume (Default: `false`). Cannot be used with `snapshotId`.
+         */
+        encrypted?: string;
+        /**
+         * The amount of provisioned
+         * [IOPS](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-io-characteristics.html).
+         * This must be set with a `volumeType` of `"io1/io2"`.
+         */
+        iops: number;
+        /**
+         * The ARN of the AWS Key Management Service (AWS KMS) customer master key (CMK) to use when creating the encrypted volume.
+         * `encrypted` must be set to `true` when this is set.
+         */
+        kmsKeyId?: string;
+        /**
+         * The Snapshot ID to mount.
+         */
+        snapshotId?: string;
+        /**
+         * The throughput to provision for a `gp3` volume in MiB/s (specified as an integer, e.g., 500), with a maximum of 1,000 MiB/s.
+         */
+        throughput: number;
+        /**
+         * The size of the volume in gigabytes.
+         */
+        volumeSize: number;
+        /**
+         * The volume type. Can be `standard`, `gp2`, `gp3`, `io1`, `io2`, `sc1` or `st1` (Default: `gp2`).
+         */
+        volumeType: string;
+    }
+    interface LaunchTemplateCapacityReservationSpecification {
+        /**
+         * Indicates the instance's Capacity Reservation preferences. Can be `open` or `none`. (Default `none`).
+         */
+        capacityReservationPreference?: string;
+        /**
+         * Used to target a specific Capacity Reservation:
+         */
+        capacityReservationTarget?: outputs.ec2.LaunchTemplateCapacityReservationSpecificationCapacityReservationTarget;
+    }
+    interface LaunchTemplateCapacityReservationSpecificationCapacityReservationTarget {
+        /**
+         * The ID of the Capacity Reservation in which to run the instance.
+         */
+        capacityReservationId?: string;
+        /**
+         * The ARN of the Capacity Reservation resource group in which to run the instance.
+         */
+        capacityReservationResourceGroupArn?: string;
+    }
+    interface LaunchTemplateCpuOptions {
+        /**
+         * The number of CPU cores for the instance.
+         */
+        coreCount?: number;
+        /**
+         * The number of threads per CPU core. To disable Intel Hyper-Threading Technology for the instance, specify a value of 1.
+         * Otherwise, specify the default value of 2.
+         */
+        threadsPerCore?: number;
+    }
+    interface LaunchTemplateCreditSpecification {
+        /**
+         * The credit option for CPU usage. Can be `"standard"` or `"unlimited"`. T3 instances are launched as unlimited by default. T2 instances are launched as standard by default.
+         */
+        cpuCredits?: string;
+    }
+    interface LaunchTemplateElasticGpuSpecification {
+        /**
+         * The [Elastic GPU Type](https://docs.aws.amazon.com/AWSEC2/latest/WindowsGuide/elastic-gpus.html#elastic-gpus-basics)
+         */
+        type: string;
+    }
+    interface LaunchTemplateElasticInferenceAccelerator {
+        /**
+         * Accelerator type.
+         */
+        type: string;
+    }
+    interface LaunchTemplateEnclaveOptions {
+        /**
+         * If set to `true`, Nitro Enclaves will be enabled on the instance.
+         */
+        enabled?: boolean;
+    }
+    interface LaunchTemplateHibernationOptions {
+        /**
+         * If set to `true`, the launched EC2 instance will hibernation enabled.
+         */
+        configured: boolean;
+    }
+    interface LaunchTemplateIamInstanceProfile {
+        /**
+         * The Amazon Resource Name (ARN) of the instance profile.
+         */
+        arn?: string;
+        /**
+         * The name of the instance profile.
+         */
+        name?: string;
+    }
+    interface LaunchTemplateInstanceMarketOptions {
+        /**
+         * The market type. Can be `spot`.
+         */
+        marketType?: string;
+        /**
+         * The options for [Spot Instance](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-spot-instances.html)
+         */
+        spotOptions?: outputs.ec2.LaunchTemplateInstanceMarketOptionsSpotOptions;
+    }
+    interface LaunchTemplateInstanceMarketOptionsSpotOptions {
+        /**
+         * The required duration in minutes. This value must be a multiple of 60.
+         */
+        blockDurationMinutes?: number;
+        /**
+         * The behavior when a Spot Instance is interrupted. Can be `hibernate`,
+         * `stop`, or `terminate`. (Default: `terminate`).
+         */
+        instanceInterruptionBehavior?: string;
+        /**
+         * The maximum hourly price you're willing to pay for the Spot Instances.
+         */
+        maxPrice?: string;
+        /**
+         * The Spot Instance request type. Can be `one-time`, or `persistent`.
+         */
+        spotInstanceType?: string;
+        /**
+         * The end date of the request.
+         */
+        validUntil: string;
+    }
+    interface LaunchTemplateInstanceRequirements {
+        /**
+         * Block describing the minimum and maximum number of accelerators (GPUs, FPGAs, or AWS Inferentia chips). Default is no minimum or maximum.
+         */
+        acceleratorCount?: outputs.ec2.LaunchTemplateInstanceRequirementsAcceleratorCount;
+        /**
+         * List of accelerator manufacturer names. Default is any manufacturer.
+         */
+        acceleratorManufacturers?: string[];
+        /**
+         * List of accelerator names. Default is any acclerator.
+         */
+        acceleratorNames?: string[];
+        /**
+         * Block describing the minimum and maximum total memory of the accelerators. Default is no minimum or maximum.
+         */
+        acceleratorTotalMemoryMib?: outputs.ec2.LaunchTemplateInstanceRequirementsAcceleratorTotalMemoryMib;
+        /**
+         * List of accelerator types. Default is any accelerator type.
+         */
+        acceleratorTypes?: string[];
+        /**
+         * Indicate whether bare metal instace types should be `included`, `excluded`, or `required`. Default is `excluded`.
+         */
+        bareMetal?: string;
+        /**
+         * Block describing the minimum and maximum baseline EBS bandwidth, in Mbps. Default is no minimum or maximum.
+         */
+        baselineEbsBandwidthMbps?: outputs.ec2.LaunchTemplateInstanceRequirementsBaselineEbsBandwidthMbps;
+        /**
+         * Indicate whether burstable performance instance types should be `included`, `excluded`, or `required`. Default is `excluded`.
+         */
+        burstablePerformance?: string;
+        /**
+         * List of CPU manufacturer names. Default is any manufacturer.
+         */
+        cpuManufacturers?: string[];
+        /**
+         * List of instance types to exclude. You can use strings with one or more wild cards, represented by an asterisk (\*). The following are examples: `c5*`, `m5a.*`, `r*`, `*3*`. For example, if you specify `c5*`, you are excluding the entire C5 instance family, which includes all C5a and C5n instance types. If you specify `m5a.*`, you are excluding all the M5a instance types, but not the M5n instance types. Maximum of 400 entries in the list; each entry is limited to 30 characters. Default is no excluded instance types.
+         */
+        excludedInstanceTypes?: string[];
+        /**
+         * List of instance generation names. Default is any generation.
+         */
+        instanceGenerations?: string[];
+        /**
+         * Indicate whether instance types with local storage volumes are `included`, `excluded`, or `required`. Default is `included`.
+         */
+        localStorage?: string;
+        /**
+         * List of local storage type names. Default any storage type.
+         */
+        localStorageTypes?: string[];
+        /**
+         * Block describing the minimum and maximum amount of memory (GiB) per vCPU. Default is no minimum or maximum.
+         */
+        memoryGibPerVcpu?: outputs.ec2.LaunchTemplateInstanceRequirementsMemoryGibPerVcpu;
+        /**
+         * Block describing the minimum and maximum amount of memory (MiB). Default is no maximum.
+         */
+        memoryMib: outputs.ec2.LaunchTemplateInstanceRequirementsMemoryMib;
+        /**
+         * Block describing the minimum and maximum number of network interfaces. Default is no minimum or maximum.
+         */
+        networkInterfaceCount?: outputs.ec2.LaunchTemplateInstanceRequirementsNetworkInterfaceCount;
+        /**
+         * The price protection threshold for On-Demand Instances. This is the maximum you’ll pay for an On-Demand Instance, expressed as a percentage higher than the cheapest M, C, or R instance type with your specified attributes. When Amazon EC2 Auto Scaling selects instance types with your attributes, we will exclude instance types whose price is higher than your threshold. The parameter accepts an integer, which Amazon EC2 Auto Scaling interprets as a percentage. To turn off price protection, specify a high value, such as 999999. Default is 20.
+         */
+        onDemandMaxPricePercentageOverLowestPrice?: number;
+        /**
+         * Indicate whether instance types must support On-Demand Instance Hibernation, either `true` or `false`. Default is `false`.
+         */
+        requireHibernateSupport?: boolean;
+        /**
+         * The price protection threshold for Spot Instances. This is the maximum you’ll pay for a Spot Instance, expressed as a percentage higher than the cheapest M, C, or R instance type with your specified attributes. When Amazon EC2 Auto Scaling selects instance types with your attributes, we will exclude instance types whose price is higher than your threshold. The parameter accepts an integer, which Amazon EC2 Auto Scaling interprets as a percentage. To turn off price protection, specify a high value, such as 999999. Default is 100.
+         */
+        spotMaxPricePercentageOverLowestPrice?: number;
+        /**
+         * Block describing the minimum and maximum total local storage (GB). Default is no minimum or maximum.
+         */
+        totalLocalStorageGb?: outputs.ec2.LaunchTemplateInstanceRequirementsTotalLocalStorageGb;
+        /**
+         * Block describing the minimum and maximum number of vCPUs. Default is no maximum.
+         */
+        vcpuCount: outputs.ec2.LaunchTemplateInstanceRequirementsVcpuCount;
+    }
+    interface LaunchTemplateInstanceRequirementsAcceleratorCount {
+        /**
+         * Maximum.
+         */
+        max?: number;
+        /**
+         * Minimum.
+         */
+        min?: number;
+    }
+    interface LaunchTemplateInstanceRequirementsAcceleratorTotalMemoryMib {
+        /**
+         * Maximum.
+         */
+        max?: number;
+        /**
+         * Minimum.
+         */
+        min?: number;
+    }
+    interface LaunchTemplateInstanceRequirementsBaselineEbsBandwidthMbps {
+        /**
+         * Maximum.
+         */
+        max?: number;
+        /**
+         * Minimum.
+         */
+        min?: number;
+    }
+    interface LaunchTemplateInstanceRequirementsMemoryGibPerVcpu {
+        /**
+         * Maximum.
+         */
+        max?: number;
+        /**
+         * Minimum.
+         */
+        min?: number;
+    }
+    interface LaunchTemplateInstanceRequirementsMemoryMib {
+        /**
+         * Maximum.
+         */
+        max?: number;
+        /**
+         * Minimum.
+         */
+        min: number;
+    }
+    interface LaunchTemplateInstanceRequirementsNetworkInterfaceCount {
+        /**
+         * Maximum.
+         */
+        max?: number;
+        /**
+         * Minimum.
+         */
+        min?: number;
+    }
+    interface LaunchTemplateInstanceRequirementsTotalLocalStorageGb {
+        /**
+         * Maximum.
+         */
+        max?: number;
+        /**
+         * Minimum.
+         */
+        min?: number;
+    }
+    interface LaunchTemplateInstanceRequirementsVcpuCount {
+        /**
+         * Maximum.
+         */
+        max?: number;
+        /**
+         * Minimum.
+         */
+        min: number;
+    }
+    interface LaunchTemplateLicenseSpecification {
+        /**
+         * ARN of the license configuration.
+         */
+        licenseConfigurationArn: string;
+    }
+    interface LaunchTemplateMaintenanceOptions {
+        /**
+         * Disables the automatic recovery behavior of your instance or sets it to default. Can be `"default"` or `"disabled"`. See [Recover your instance](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-recover.html) for more details.
+         */
+        autoRecovery?: string;
+    }
+    interface LaunchTemplateMetadataOptions {
+        /**
+         * Whether the metadata service is available. Can be `"enabled"` or `"disabled"`. (Default: `"enabled"`).
+         */
+        httpEndpoint: string;
+        /**
+         * Enables or disables the IPv6 endpoint for the instance metadata service. (Default: `disabled`).
+         */
+        httpProtocolIpv6?: string;
+        /**
+         * The desired HTTP PUT response hop limit for instance metadata requests. The larger the number, the further instance metadata requests can travel. Can be an integer from `1` to `64`. (Default: `1`).
+         */
+        httpPutResponseHopLimit: number;
+        /**
+         * Whether or not the metadata service requires session tokens, also referred to as _Instance Metadata Service Version 2 (IMDSv2)_. Can be `"optional"` or `"required"`. (Default: `"optional"`).
+         */
+        httpTokens: string;
+        /**
+         * Enables or disables access to instance tags from the instance metadata service. (Default: `disabled`).
+         */
+        instanceMetadataTags?: string;
+    }
+    interface LaunchTemplateMonitoring {
+        /**
+         * If `true`, the launched EC2 instance will have detailed monitoring enabled.
+         */
+        enabled?: boolean;
+    }
+    interface LaunchTemplateNetworkInterface {
+        /**
+         * Associate a Carrier IP address with `eth0` for a new network interface. Use this option when you launch an instance in a Wavelength Zone and want to associate a Carrier IP address with the network interface. Boolean value.
          */
-        throughput: number;
+        associateCarrierIpAddress?: string;
         /**
-         * ID of the volume. For example, the ID can be accessed like this, `aws_instance.web.root_block_device.0.volume_id`.
+         * Associate a public ip address with the network interface.  Boolean value.
          */
-        volumeId: string;
+        associatePublicIpAddress?: string;
         /**
-         * Size of the volume in gibibytes (GiB).
+         * Whether the network interface should be destroyed on instance termination. Defaults to `false` if not set.
          */
-        volumeSize: number;
+        deleteOnTermination?: string;
         /**
-         * Type of volume. Valid values include `standard`, `gp2`, `gp3`, `io1`, `io2`, `sc1`, or `st1`. Defaults to `gp2`.
+         * Description of the network interface.
          */
-        volumeType: string;
-    }
-    interface LaunchConfigurationEbsBlockDevice {
-        deleteOnTermination?: boolean;
-        deviceName: string;
-        encrypted: boolean;
-        iops: number;
-        noDevice?: boolean;
-        snapshotId: string;
-        throughput: number;
-        volumeSize: number;
-        volumeType: string;
-    }
-    interface LaunchConfigurationEphemeralBlockDevice {
-        deviceName: string;
-        noDevice?: boolean;
-        virtualName?: string;
-    }
-    interface LaunchConfigurationMetadataOptions {
+        description?: string;
         /**
-         * The state of the metadata service: `enabled`, `disabled`.
+         * The integer index of the network interface attachment.
          */
-        httpEndpoint: string;
+        deviceIndex?: number;
         /**
-         * The desired HTTP PUT response hop limit for instance metadata requests.
+         * The type of network interface. To create an Elastic Fabric Adapter (EFA), specify `efa`.
          */
-        httpPutResponseHopLimit: number;
+        interfaceType?: string;
         /**
-         * If session tokens are required: `optional`, `required`.
+         * The number of secondary private IPv4 addresses to assign to a network interface. Conflicts with `ipv4Addresses`
          */
-        httpTokens: string;
-    }
-    interface LaunchConfigurationRootBlockDevice {
-        deleteOnTermination?: boolean;
-        encrypted: boolean;
-        iops: number;
-        throughput: number;
-        volumeSize: number;
-        volumeType: string;
-    }
-    interface LaunchTemplateBlockDeviceMapping {
+        ipv4AddressCount?: number;
         /**
-         * The name of the device to mount.
+         * One or more private IPv4 addresses to associate. Conflicts with `ipv4AddressCount`
          */
-        deviceName?: string;
+        ipv4Addresses?: string[];
         /**
-         * Configure EBS volume properties.
+         * The number of IPv4 prefixes to be automatically assigned to the network interface. Conflicts with `ipv4Prefixes`
          */
-        ebs?: outputs.ec2.LaunchTemplateBlockDeviceMappingEbs;
+        ipv4PrefixCount?: number;
         /**
-         * Suppresses the specified device included in the AMI's block device mapping.
+         * One or more IPv4 prefixes to be assigned to the network interface. Conflicts with `ipv4PrefixCount`
          */
-        noDevice?: string;
+        ipv4Prefixes?: string[];
         /**
-         * The [Instance Store Device
-         * Name](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/InstanceStorage.html#InstanceStoreDeviceNames)
-         * (e.g., `"ephemeral0"`).
+         * The number of IPv6 addresses to assign to a network interface. Conflicts with `ipv6Addresses`
          */
-        virtualName?: string;
-    }
-    interface LaunchTemplateBlockDeviceMappingEbs {
+        ipv6AddressCount?: number;
         /**
-         * Whether the volume should be destroyed on instance termination. Defaults to `false` if not set. See [Preserving Amazon EBS Volumes on Instance Termination](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/terminating-instances.html#preserving-volumes-on-termination) for more information.
+         * One or more specific IPv6 addresses from the IPv6 CIDR block range of your subnet. Conflicts with `ipv6AddressCount`
          */
-        deleteOnTermination?: string;
+        ipv6Addresses?: string[];
         /**
-         * Enables [EBS encryption](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/EBSEncryption.html)
-         * on the volume (Default: `false`). Cannot be used with `snapshotId`.
+         * The number of IPv6 prefixes to be automatically assigned to the network interface. Conflicts with `ipv6Prefixes`
          */
-        encrypted?: string;
+        ipv6PrefixCount?: number;
         /**
-         * The amount of provisioned
-         * [IOPS](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ebs-io-characteristics.html).
-         * This must be set with a `volumeType` of `"io1/io2"`.
+         * One or more IPv6 prefixes to be assigned to the network interface. Conflicts with `ipv6PrefixCount`
          */
-        iops: number;
+        ipv6Prefixes?: string[];
         /**
-         * The ARN of the AWS Key Management Service (AWS KMS) customer master key (CMK) to use when creating the encrypted volume.
-         * `encrypted` must be set to `true` when this is set.
+         * The index of the network card. Some instance types support multiple network cards. The primary network interface must be assigned to network card index 0. The default is network card index 0.
          */
-        kmsKeyId?: string;
+        networkCardIndex?: number;
         /**
-         * The Snapshot ID to mount.
+         * The ID of the network interface to attach.
          */
-        snapshotId?: string;
+        networkInterfaceId?: string;
         /**
-         * The throughput to provision for a `gp3` volume in MiB/s (specified as an integer, e.g., 500), with a maximum of 1,000 MiB/s.
+         * The primary private IPv4 address.
          */
-        throughput: number;
+        privateIpAddress?: string;
         /**
-         * The size of the volume in gigabytes.
+         * A list of security group IDs to associate.
          */
-        volumeSize: number;
+        securityGroups?: string[];
         /**
-         * The volume type. Can be `standard`, `gp2`, `gp3`, `io1`, `io2`, `sc1` or `st1` (Default: `gp2`).
+         * The VPC Subnet ID to associate.
          */
-        volumeType: string;
+        subnetId?: string;
     }
-    interface LaunchTemplateCapacityReservationSpecification {
+    interface LaunchTemplatePlacement {
         /**
-         * Indicates the instance's Capacity Reservation preferences. Can be `open` or `none`. (Default `none`).
+         * The affinity setting for an instance on a Dedicated Host.
          */
-        capacityReservationPreference?: string;
+        affinity?: string;
         /**
-         * Used to target a specific Capacity Reservation:
+         * The Availability Zone for the instance.
          */
-        capacityReservationTarget?: outputs.ec2.LaunchTemplateCapacityReservationSpecificationCapacityReservationTarget;
-    }
-    interface LaunchTemplateCapacityReservationSpecificationCapacityReservationTarget {
+        availabilityZone?: string;
         /**
-         * The ID of the Capacity Reservation in which to run the instance.
+         * The name of the placement group for the instance.
          */
-        capacityReservationId?: string;
+        groupName?: string;
         /**
-         * The ARN of the Capacity Reservation resource group in which to run the instance.
+         * The ID of the Dedicated Host for the instance.
          */
-        capacityReservationResourceGroupArn?: string;
-    }
-    interface LaunchTemplateCpuOptions {
+        hostId?: string;
         /**
-         * The number of CPU cores for the instance.
+         * The ARN of the Host Resource Group in which to launch instances.
          */
-        coreCount?: number;
+        hostResourceGroupArn?: string;
         /**
-         * The number of threads per CPU core. To disable Intel Hyper-Threading Technology for the instance, specify a value of 1.
-         * Otherwise, specify the default value of 2.
+         * The number of the partition the instance should launch in. Valid only if the placement group strategy is set to partition.
          */
-        threadsPerCore?: number;
-    }
-    interface LaunchTemplateCreditSpecification {
+        partitionNumber?: number;
         /**
-         * The credit option for CPU usage. Can be `"standard"` or `"unlimited"`. T3 instances are launched as unlimited by default. T2 instances are launched as standard by default.
+         * Reserved for future use.
          */
-        cpuCredits?: string;
-    }
-    interface LaunchTemplateElasticGpuSpecification {
+        spreadDomain?: string;
         /**
-         * The [Elastic GPU Type](https://docs.aws.amazon.com/AWSEC2/latest/WindowsGuide/elastic-gpus.html#elastic-gpus-basics)
+         * The tenancy of the instance (if the instance is running in a VPC). Can be `default`, `dedicated`, or `host`.
          */
-        type: string;
+        tenancy?: string;
     }
-    interface LaunchTemplateElasticInferenceAccelerator {
+    interface LaunchTemplatePrivateDnsNameOptions {
         /**
-         * Accelerator type.
+         * Indicates whether to respond to DNS queries for instance hostnames with DNS A records.
          */
-        type: string;
-    }
-    interface LaunchTemplateEnclaveOptions {
+        enableResourceNameDnsARecord?: boolean;
         /**
-         * If set to `true`, Nitro Enclaves will be enabled on the instance.
+         * Indicates whether to respond to DNS queries for instance hostnames with DNS AAAA records.
          */
-        enabled?: boolean;
-    }
-    interface LaunchTemplateHibernationOptions {
+        enableResourceNameDnsAaaaRecord?: boolean;
         /**
-         * If set to `true`, the launched EC2 instance will hibernation enabled.
+         * The type of hostname for Amazon EC2 instances. For IPv4 only subnets, an instance DNS name must be based on the instance IPv4 address. For IPv6 native subnets, an instance DNS name must be based on the instance ID. For dual-stack subnets, you can specify whether DNS names use the instance IPv4 address or the instance ID. Valid values: `ip-name` and `resource-name`.
          */
-        configured: boolean;
+        hostnameType?: string;
     }
-    interface LaunchTemplateIamInstanceProfile {
+    interface LaunchTemplateTagSpecification {
         /**
-         * The Amazon Resource Name (ARN) of the instance profile.
+         * The type of resource to tag.
          */
-        arn?: string;
+        resourceType?: string;
         /**
-         * The name of the instance profile.
+         * A map of tags to assign to the resource.
          */
-        name?: string;
+        tags?: {
+            [key: string]: string;
+        };
     }
-    interface LaunchTemplateInstanceMarketOptions {
+    interface ManagedPrefixListEntry {
         /**
-         * The market type. Can be `spot`.
+         * CIDR block of this entry.
          */
-        marketType?: string;
+        cidr: string;
         /**
-         * The options for [Spot Instance](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/using-spot-instances.html)
+         * Description of this entry. Due to API limitations, updating only the description of an existing entry requires temporarily removing and re-adding the entry.
          */
-        spotOptions?: outputs.ec2.LaunchTemplateInstanceMarketOptionsSpotOptions;
+        description?: string;
     }
-    interface LaunchTemplateInstanceMarketOptionsSpotOptions {
-        /**
-         * The required duration in minutes. This value must be a multiple of 60.
-         */
-        blockDurationMinutes?: number;
+    interface NetworkAclEgress {
         /**
-         * The behavior when a Spot Instance is interrupted. Can be `hibernate`,
-         * `stop`, or `terminate`. (Default: `terminate`).
+         * The action to take.
          */
-        instanceInterruptionBehavior?: string;
+        action: string;
         /**
-         * The maximum hourly price you're willing to pay for the Spot Instances.
+         * The CIDR block to match. This must be a
+         * valid network mask.
          */
-        maxPrice?: string;
+        cidrBlock?: string;
         /**
-         * The Spot Instance request type. Can be `one-time`, or `persistent`.
+         * The from port to match.
          */
-        spotInstanceType?: string;
+        fromPort: number;
         /**
-         * The end date of the request.
+         * The ICMP type code to be used. Default 0.
          */
-        validUntil: string;
-    }
-    interface LaunchTemplateInstanceRequirements {
+        icmpCode?: number;
         /**
-         * Block describing the minimum and maximum number of accelerators (GPUs, FPGAs, or AWS Inferentia chips). Default is no minimum or maximum.
+         * The ICMP type to be used. Default 0.
          */
-        acceleratorCount?: outputs.ec2.LaunchTemplateInstanceRequirementsAcceleratorCount;
+        icmpType?: number;
         /**
-         * List of accelerator manufacturer names. Default is any manufacturer.
+         * The IPv6 CIDR block.
          */
-        acceleratorManufacturers?: string[];
+        ipv6CidrBlock?: string;
         /**
-         * List of accelerator names. Default is any acclerator.
+         * The protocol to match. If using the -1 'all'
+         * protocol, you must specify a from and to port of 0.
          */
-        acceleratorNames?: string[];
+        protocol: string;
         /**
-         * Block describing the minimum and maximum total memory of the accelerators. Default is no minimum or maximum.
+         * The rule number. Used for ordering.
          */
-        acceleratorTotalMemoryMib?: outputs.ec2.LaunchTemplateInstanceRequirementsAcceleratorTotalMemoryMib;
+        ruleNo: number;
         /**
-         * List of accelerator types. Default is any accelerator type.
+         * The to port to match.
          */
-        acceleratorTypes?: string[];
+        toPort: number;
+    }
+    interface NetworkAclIngress {
         /**
-         * Indicate whether bare metal instace types should be `included`, `excluded`, or `required`. Default is `excluded`.
+         * The action to take.
          */
-        bareMetal?: string;
+        action: string;
         /**
-         * Block describing the minimum and maximum baseline EBS bandwidth, in Mbps. Default is no minimum or maximum.
+         * The CIDR block to match. This must be a
+         * valid network mask.
          */
-        baselineEbsBandwidthMbps?: outputs.ec2.LaunchTemplateInstanceRequirementsBaselineEbsBandwidthMbps;
+        cidrBlock?: string;
         /**
-         * Indicate whether burstable performance instance types should be `included`, `excluded`, or `required`. Default is `excluded`.
+         * The from port to match.
          */
-        burstablePerformance?: string;
+        fromPort: number;
         /**
-         * List of CPU manufacturer names. Default is any manufacturer.
+         * The ICMP type code to be used. Default 0.
          */
-        cpuManufacturers?: string[];
+        icmpCode?: number;
         /**
-         * List of instance types to exclude. You can use strings with one or more wild cards, represented by an asterisk (\*). The following are examples: `c5*`, `m5a.*`, `r*`, `*3*`. For example, if you specify `c5*`, you are excluding the entire C5 instance family, which includes all C5a and C5n instance types. If you specify `m5a.*`, you are excluding all the M5a instance types, but not the M5n instance types. Maximum of 400 entries in the list; each entry is limited to 30 characters. Default is no excluded instance types.
+         * The ICMP type to be used. Default 0.
          */
-        excludedInstanceTypes?: string[];
+        icmpType?: number;
         /**
-         * List of instance generation names. Default is any generation.
+         * The IPv6 CIDR block.
          */
-        instanceGenerations?: string[];
+        ipv6CidrBlock?: string;
         /**
-         * Indicate whether instance types with local storage volumes are `included`, `excluded`, or `required`. Default is `included`.
+         * The protocol to match. If using the -1 'all'
+         * protocol, you must specify a from and to port of 0.
          */
-        localStorage?: string;
+        protocol: string;
         /**
-         * List of local storage type names. Default any storage type.
+         * The rule number. Used for ordering.
          */
-        localStorageTypes?: string[];
+        ruleNo: number;
         /**
-         * Block describing the minimum and maximum amount of memory (GiB) per vCPU. Default is no minimum or maximum.
+         * The to port to match.
          */
-        memoryGibPerVcpu?: outputs.ec2.LaunchTemplateInstanceRequirementsMemoryGibPerVcpu;
+        toPort: number;
+    }
+    interface NetworkInsightsAnalysisAlternatePathHint {
         /**
-         * Block describing the minimum and maximum amount of memory (MiB). Default is no maximum.
+         * The Amazon Resource Name (ARN) of the component.
          */
-        memoryMib: outputs.ec2.LaunchTemplateInstanceRequirementsMemoryMib;
+        componentArn: string;
         /**
-         * Block describing the minimum and maximum number of network interfaces. Default is no minimum or maximum.
+         * The ID of the component.
          */
-        networkInterfaceCount?: outputs.ec2.LaunchTemplateInstanceRequirementsNetworkInterfaceCount;
+        componentId: string;
+    }
+    interface NetworkInsightsAnalysisExplanation {
+        aclRules: outputs.ec2.NetworkInsightsAnalysisExplanationAclRule[];
+        acls: outputs.ec2.NetworkInsightsAnalysisExplanationAcl[];
+        address: string;
+        addresses: string[];
+        attachedTos: outputs.ec2.NetworkInsightsAnalysisExplanationAttachedTo[];
+        availabilityZones: string[];
+        cidrs: string[];
+        classicLoadBalancerListeners: outputs.ec2.NetworkInsightsAnalysisExplanationClassicLoadBalancerListener[];
+        components: outputs.ec2.NetworkInsightsAnalysisExplanationComponent[];
+        customerGateways: outputs.ec2.NetworkInsightsAnalysisExplanationCustomerGateway[];
+        destinationVpcs: outputs.ec2.NetworkInsightsAnalysisExplanationDestinationVpc[];
+        destinations: outputs.ec2.NetworkInsightsAnalysisExplanationDestination[];
+        direction: string;
+        elasticLoadBalancerListeners: outputs.ec2.NetworkInsightsAnalysisExplanationElasticLoadBalancerListener[];
+        explanationCode: string;
+        ingressRouteTables: outputs.ec2.NetworkInsightsAnalysisExplanationIngressRouteTable[];
+        internetGateways: outputs.ec2.NetworkInsightsAnalysisExplanationInternetGateway[];
+        loadBalancerArn: string;
+        loadBalancerListenerPort: number;
+        loadBalancerTargetGroups: outputs.ec2.NetworkInsightsAnalysisExplanationLoadBalancerTargetGroup[];
+        loadBalancerTargetPort: number;
+        missingComponent: string;
+        natGateways: outputs.ec2.NetworkInsightsAnalysisExplanationNatGateway[];
+        networkInterfaces: outputs.ec2.NetworkInsightsAnalysisExplanationNetworkInterface[];
+        packetField: string;
+        port: number;
+        portRanges: outputs.ec2.NetworkInsightsAnalysisExplanationPortRange[];
+        prefixLists: outputs.ec2.NetworkInsightsAnalysisExplanationPrefixList[];
+        protocols: string[];
+        routeTableRoutes: outputs.ec2.NetworkInsightsAnalysisExplanationRouteTableRoute[];
+        routeTables: outputs.ec2.NetworkInsightsAnalysisExplanationRouteTable[];
+        securityGroupRules: outputs.ec2.NetworkInsightsAnalysisExplanationSecurityGroupRule[];
+        securityGroups: outputs.ec2.NetworkInsightsAnalysisExplanationSecurityGroup[];
+        sourceVpcs: outputs.ec2.NetworkInsightsAnalysisExplanationSourceVpc[];
+        state: string;
+        subnetRouteTables: outputs.ec2.NetworkInsightsAnalysisExplanationSubnetRouteTable[];
+        subnets: outputs.ec2.NetworkInsightsAnalysisExplanationSubnet[];
+        transitGatewayAttachments: outputs.ec2.NetworkInsightsAnalysisExplanationTransitGatewayAttachment[];
+        transitGatewayRouteTableRoutes: outputs.ec2.NetworkInsightsAnalysisExplanationTransitGatewayRouteTableRoute[];
+        transitGatewayRouteTables: outputs.ec2.NetworkInsightsAnalysisExplanationTransitGatewayRouteTable[];
+        transitGateways: outputs.ec2.NetworkInsightsAnalysisExplanationTransitGateway[];
+        vpcEndpoints: outputs.ec2.NetworkInsightsAnalysisExplanationVpcEndpoint[];
+        vpcPeeringConnections: outputs.ec2.NetworkInsightsAnalysisExplanationVpcPeeringConnection[];
+        vpcs: outputs.ec2.NetworkInsightsAnalysisExplanationVpc[];
+        vpnConnections: outputs.ec2.NetworkInsightsAnalysisExplanationVpnConnection[];
+        vpnGateways: outputs.ec2.NetworkInsightsAnalysisExplanationVpnGateway[];
+    }
+    interface NetworkInsightsAnalysisExplanationAcl {
+        /**
+         * ARN of the Network Insights Analysis.
+         */
+        arn: string;
         /**
-         * The price protection threshold for On-Demand Instances. This is the maximum you’ll pay for an On-Demand Instance, expressed as a percentage higher than the cheapest M, C, or R instance type with your specified attributes. When Amazon EC2 Auto Scaling selects instance types with your attributes, we will exclude instance types whose price is higher than your threshold. The parameter accepts an integer, which Amazon EC2 Auto Scaling interprets as a percentage. To turn off price protection, specify a high value, such as 999999. Default is 20.
+         * ID of the Network Insights Analysis.
          */
-        onDemandMaxPricePercentageOverLowestPrice?: number;
+        id: string;
+        name: string;
+    }
+    interface NetworkInsightsAnalysisExplanationAclRule {
+        cidr: string;
+        egress: boolean;
+        portRanges: outputs.ec2.NetworkInsightsAnalysisExplanationAclRulePortRange[];
+        protocol: string;
+        ruleAction: string;
+        ruleNumber: number;
+    }
+    interface NetworkInsightsAnalysisExplanationAclRulePortRange {
+        from: number;
+        to: number;
+    }
+    interface NetworkInsightsAnalysisExplanationAttachedTo {
         /**
-         * Indicate whether instance types must support On-Demand Instance Hibernation, either `true` or `false`. Default is `false`.
+         * ARN of the Network Insights Analysis.
          */
-        requireHibernateSupport?: boolean;
+        arn: string;
         /**
-         * The price protection threshold for Spot Instances. This is the maximum you’ll pay for a Spot Instance, expressed as a percentage higher than the cheapest M, C, or R instance type with your specified attributes. When Amazon EC2 Auto Scaling selects instance types with your attributes, we will exclude instance types whose price is higher than your threshold. The parameter accepts an integer, which Amazon EC2 Auto Scaling interprets as a percentage. To turn off price protection, specify a high value, such as 999999. Default is 100.
+         * ID of the Network Insights Analysis.
          */
-        spotMaxPricePercentageOverLowestPrice?: number;
+        id: string;
+        name: string;
+    }
+    interface NetworkInsightsAnalysisExplanationClassicLoadBalancerListener {
+        instancePort: number;
+        loadBalancerPort: number;
+    }
+    interface NetworkInsightsAnalysisExplanationComponent {
         /**
-         * Block describing the minimum and maximum total local storage (GB). Default is no minimum or maximum.
+         * ARN of the Network Insights Analysis.
          */
-        totalLocalStorageGb?: outputs.ec2.LaunchTemplateInstanceRequirementsTotalLocalStorageGb;
+        arn: string;
         /**
-         * Block describing the minimum and maximum number of vCPUs. Default is no maximum.
+         * ID of the Network Insights Analysis.
          */
-        vcpuCount: outputs.ec2.LaunchTemplateInstanceRequirementsVcpuCount;
+        id: string;
+        name: string;
     }
-    interface LaunchTemplateInstanceRequirementsAcceleratorCount {
+    interface NetworkInsightsAnalysisExplanationCustomerGateway {
         /**
-         * Maximum.
+         * ARN of the Network Insights Analysis.
          */
-        max?: number;
+        arn: string;
         /**
-         * Minimum.
+         * ID of the Network Insights Analysis.
          */
-        min?: number;
+        id: string;
+        name: string;
     }
-    interface LaunchTemplateInstanceRequirementsAcceleratorTotalMemoryMib {
+    interface NetworkInsightsAnalysisExplanationDestination {
         /**
-         * Maximum.
+         * ARN of the Network Insights Analysis.
          */
-        max?: number;
+        arn: string;
         /**
-         * Minimum.
+         * ID of the Network Insights Analysis.
          */
-        min?: number;
+        id: string;
+        name: string;
     }
-    interface LaunchTemplateInstanceRequirementsBaselineEbsBandwidthMbps {
+    interface NetworkInsightsAnalysisExplanationDestinationVpc {
         /**
-         * Maximum.
+         * ARN of the Network Insights Analysis.
          */
-        max?: number;
+        arn: string;
         /**
-         * Minimum.
+         * ID of the Network Insights Analysis.
          */
-        min?: number;
+        id: string;
+        name: string;
     }
-    interface LaunchTemplateInstanceRequirementsMemoryGibPerVcpu {
+    interface NetworkInsightsAnalysisExplanationElasticLoadBalancerListener {
         /**
-         * Maximum.
+         * ARN of the Network Insights Analysis.
          */
-        max?: number;
+        arn: string;
         /**
-         * Minimum.
+         * ID of the Network Insights Analysis.
          */
-        min?: number;
+        id: string;
+        name: string;
     }
-    interface LaunchTemplateInstanceRequirementsMemoryMib {
+    interface NetworkInsightsAnalysisExplanationIngressRouteTable {
         /**
-         * Maximum.
+         * ARN of the Network Insights Analysis.
          */
-        max?: number;
+        arn: string;
         /**
-         * Minimum.
+         * ID of the Network Insights Analysis.
          */
-        min: number;
+        id: string;
+        name: string;
     }
-    interface LaunchTemplateInstanceRequirementsNetworkInterfaceCount {
+    interface NetworkInsightsAnalysisExplanationInternetGateway {
         /**
-         * Maximum.
+         * ARN of the Network Insights Analysis.
          */
-        max?: number;
+        arn: string;
         /**
-         * Minimum.
+         * ID of the Network Insights Analysis.
          */
-        min?: number;
+        id: string;
+        name: string;
     }
-    interface LaunchTemplateInstanceRequirementsTotalLocalStorageGb {
+    interface NetworkInsightsAnalysisExplanationLoadBalancerTargetGroup {
         /**
-         * Maximum.
+         * ARN of the Network Insights Analysis.
          */
-        max?: number;
+        arn: string;
         /**
-         * Minimum.
+         * ID of the Network Insights Analysis.
          */
-        min?: number;
+        id: string;
+        name: string;
     }
-    interface LaunchTemplateInstanceRequirementsVcpuCount {
+    interface NetworkInsightsAnalysisExplanationNatGateway {
         /**
-         * Maximum.
+         * ARN of the Network Insights Analysis.
          */
-        max?: number;
+        arn: string;
         /**
-         * Minimum.
+         * ID of the Network Insights Analysis.
          */
-        min: number;
+        id: string;
+        name: string;
     }
-    interface LaunchTemplateLicenseSpecification {
+    interface NetworkInsightsAnalysisExplanationNetworkInterface {
         /**
-         * ARN of the license configuration.
+         * ARN of the Network Insights Analysis.
          */
-        licenseConfigurationArn: string;
-    }
-    interface LaunchTemplateMaintenanceOptions {
+        arn: string;
         /**
-         * Disables the automatic recovery behavior of your instance or sets it to default. Can be `"default"` or `"disabled"`. See [Recover your instance](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/ec2-instance-recover.html) for more details.
+         * ID of the Network Insights Analysis.
          */
-        autoRecovery?: string;
+        id: string;
+        name: string;
     }
-    interface LaunchTemplateMetadataOptions {
+    interface NetworkInsightsAnalysisExplanationPortRange {
+        from: number;
+        to: number;
+    }
+    interface NetworkInsightsAnalysisExplanationPrefixList {
         /**
-         * Whether the metadata service is available. Can be `"enabled"` or `"disabled"`. (Default: `"enabled"`).
+         * ARN of the Network Insights Analysis.
          */
-        httpEndpoint: string;
+        arn: string;
         /**
-         * Enables or disables the IPv6 endpoint for the instance metadata service. (Default: `disabled`).
+         * ID of the Network Insights Analysis.
          */
-        httpProtocolIpv6?: string;
+        id: string;
+        name: string;
+    }
+    interface NetworkInsightsAnalysisExplanationRouteTable {
         /**
-         * The desired HTTP PUT response hop limit for instance metadata requests. The larger the number, the further instance metadata requests can travel. Can be an integer from `1` to `64`. (Default: `1`).
+         * ARN of the Network Insights Analysis.
          */
-        httpPutResponseHopLimit: number;
+        arn: string;
         /**
-         * Whether or not the metadata service requires session tokens, also referred to as _Instance Metadata Service Version 2 (IMDSv2)_. Can be `"optional"` or `"required"`. (Default: `"optional"`).
+         * ID of the Network Insights Analysis.
          */
-        httpTokens: string;
+        id: string;
+        name: string;
+    }
+    interface NetworkInsightsAnalysisExplanationRouteTableRoute {
+        destinationCidr: string;
+        destinationPrefixListId: string;
+        egressOnlyInternetGatewayId: string;
+        gatewayId: string;
+        instanceId: string;
+        natGatewayId: string;
+        networkInterfaceId: string;
+        origin: string;
+        transitGatewayId: string;
+        vpcPeeringConnectionId: string;
+    }
+    interface NetworkInsightsAnalysisExplanationSecurityGroup {
         /**
-         * Enables or disables access to instance tags from the instance metadata service. (Default: `disabled`).
+         * ARN of the Network Insights Analysis.
          */
-        instanceMetadataTags?: string;
-    }
-    interface LaunchTemplateMonitoring {
+        arn: string;
         /**
-         * If `true`, the launched EC2 instance will have detailed monitoring enabled.
+         * ID of the Network Insights Analysis.
          */
-        enabled?: boolean;
+        id: string;
+        name: string;
     }
-    interface LaunchTemplateNetworkInterface {
+    interface NetworkInsightsAnalysisExplanationSecurityGroupRule {
+        cidr: string;
+        direction: string;
+        portRanges: outputs.ec2.NetworkInsightsAnalysisExplanationSecurityGroupRulePortRange[];
+        prefixListId: string;
+        protocol: string;
+        securityGroupId: string;
+    }
+    interface NetworkInsightsAnalysisExplanationSecurityGroupRulePortRange {
+        from: number;
+        to: number;
+    }
+    interface NetworkInsightsAnalysisExplanationSourceVpc {
         /**
-         * Associate a Carrier IP address with `eth0` for a new network interface. Use this option when you launch an instance in a Wavelength Zone and want to associate a Carrier IP address with the network interface. Boolean value.
+         * ARN of the Network Insights Analysis.
          */
-        associateCarrierIpAddress?: string;
+        arn: string;
         /**
-         * Associate a public ip address with the network interface.  Boolean value.
+         * ID of the Network Insights Analysis.
          */
-        associatePublicIpAddress?: string;
+        id: string;
+        name: string;
+    }
+    interface NetworkInsightsAnalysisExplanationSubnet {
         /**
-         * Whether the network interface should be destroyed on instance termination. Defaults to `false` if not set.
+         * ARN of the Network Insights Analysis.
          */
-        deleteOnTermination?: string;
+        arn: string;
         /**
-         * Description of the network interface.
+         * ID of the Network Insights Analysis.
          */
-        description?: string;
+        id: string;
+        name: string;
+    }
+    interface NetworkInsightsAnalysisExplanationSubnetRouteTable {
         /**
-         * The integer index of the network interface attachment.
+         * ARN of the Network Insights Analysis.
          */
-        deviceIndex?: number;
+        arn: string;
         /**
-         * The type of network interface. To create an Elastic Fabric Adapter (EFA), specify `efa`.
+         * ID of the Network Insights Analysis.
          */
-        interfaceType?: string;
+        id: string;
+        name: string;
+    }
+    interface NetworkInsightsAnalysisExplanationTransitGateway {
         /**
-         * The number of secondary private IPv4 addresses to assign to a network interface. Conflicts with `ipv4Addresses`
+         * ARN of the Network Insights Analysis.
          */
-        ipv4AddressCount?: number;
+        arn: string;
         /**
-         * One or more private IPv4 addresses to associate. Conflicts with `ipv4AddressCount`
+         * ID of the Network Insights Analysis.
          */
-        ipv4Addresses?: string[];
+        id: string;
+        name: string;
+    }
+    interface NetworkInsightsAnalysisExplanationTransitGatewayAttachment {
         /**
-         * The number of IPv4 prefixes to be automatically assigned to the network interface. Conflicts with `ipv4Prefixes`
+         * ARN of the Network Insights Analysis.
          */
-        ipv4PrefixCount?: number;
+        arn: string;
         /**
-         * One or more IPv4 prefixes to be assigned to the network interface. Conflicts with `ipv4PrefixCount`
+         * ID of the Network Insights Analysis.
          */
-        ipv4Prefixes?: string[];
+        id: string;
+        name: string;
+    }
+    interface NetworkInsightsAnalysisExplanationTransitGatewayRouteTable {
         /**
-         * The number of IPv6 addresses to assign to a network interface. Conflicts with `ipv6Addresses`
+         * ARN of the Network Insights Analysis.
          */
-        ipv6AddressCount?: number;
+        arn: string;
         /**
-         * One or more specific IPv6 addresses from the IPv6 CIDR block range of your subnet. Conflicts with `ipv6AddressCount`
+         * ID of the Network Insights Analysis.
          */
-        ipv6Addresses?: string[];
+        id: string;
+        name: string;
+    }
+    interface NetworkInsightsAnalysisExplanationTransitGatewayRouteTableRoute {
+        attachmentId: string;
+        destinationCidr: string;
+        prefixListId: string;
+        resourceId: string;
+        resourceType: string;
+        routeOrigin: string;
+        state: string;
+    }
+    interface NetworkInsightsAnalysisExplanationVpc {
         /**
-         * The number of IPv6 prefixes to be automatically assigned to the network interface. Conflicts with `ipv6Prefixes`
+         * ARN of the Network Insights Analysis.
          */
-        ipv6PrefixCount?: number;
+        arn: string;
         /**
-         * One or more IPv6 prefixes to be assigned to the network interface. Conflicts with `ipv6PrefixCount`
+         * ID of the Network Insights Analysis.
          */
-        ipv6Prefixes?: string[];
+        id: string;
+        name: string;
+    }
+    interface NetworkInsightsAnalysisExplanationVpcEndpoint {
         /**
-         * The index of the network card. Some instance types support multiple network cards. The primary network interface must be assigned to network card index 0. The default is network card index 0.
+         * ARN of the Network Insights Analysis.
          */
-        networkCardIndex?: number;
+        arn: string;
         /**
-         * The ID of the network interface to attach.
+         * ID of the Network Insights Analysis.
          */
-        networkInterfaceId?: string;
+        id: string;
+        name: string;
+    }
+    interface NetworkInsightsAnalysisExplanationVpcPeeringConnection {
+        /**
+         * ARN of the Network Insights Analysis.
+         */
+        arn: string;
         /**
-         * The primary private IPv4 address.
+         * ID of the Network Insights Analysis.
          */
-        privateIpAddress?: string;
+        id: string;
+        name: string;
+    }
+    interface NetworkInsightsAnalysisExplanationVpnConnection {
         /**
-         * A list of security group IDs to associate.
+         * ARN of the Network Insights Analysis.
          */
-        securityGroups?: string[];
+        arn: string;
         /**
-         * The VPC Subnet ID to associate.
+         * ID of the Network Insights Analysis.
          */
-        subnetId?: string;
+        id: string;
+        name: string;
     }
-    interface LaunchTemplatePlacement {
+    interface NetworkInsightsAnalysisExplanationVpnGateway {
         /**
-         * The affinity setting for an instance on a Dedicated Host.
+         * ARN of the Network Insights Analysis.
          */
-        affinity?: string;
+        arn: string;
         /**
-         * The Availability Zone for the instance.
+         * ID of the Network Insights Analysis.
          */
-        availabilityZone?: string;
+        id: string;
+        name: string;
+    }
+    interface NetworkInsightsAnalysisForwardPathComponent {
+        aclRules: outputs.ec2.NetworkInsightsAnalysisForwardPathComponentAclRule[];
+        additionalDetails: outputs.ec2.NetworkInsightsAnalysisForwardPathComponentAdditionalDetail[];
+        attachedTos: outputs.ec2.NetworkInsightsAnalysisForwardPathComponentAttachedTo[];
+        components: outputs.ec2.NetworkInsightsAnalysisForwardPathComponentComponent[];
+        destinationVpcs: outputs.ec2.NetworkInsightsAnalysisForwardPathComponentDestinationVpc[];
+        inboundHeaders: outputs.ec2.NetworkInsightsAnalysisForwardPathComponentInboundHeader[];
+        outboundHeaders: outputs.ec2.NetworkInsightsAnalysisForwardPathComponentOutboundHeader[];
+        routeTableRoutes: outputs.ec2.NetworkInsightsAnalysisForwardPathComponentRouteTableRoute[];
+        securityGroupRules: outputs.ec2.NetworkInsightsAnalysisForwardPathComponentSecurityGroupRule[];
+        sequenceNumber: number;
+        sourceVpcs: outputs.ec2.NetworkInsightsAnalysisForwardPathComponentSourceVpc[];
+        subnets: outputs.ec2.NetworkInsightsAnalysisForwardPathComponentSubnet[];
+        transitGatewayRouteTableRoutes: outputs.ec2.NetworkInsightsAnalysisForwardPathComponentTransitGatewayRouteTableRoute[];
+        transitGateways: outputs.ec2.NetworkInsightsAnalysisForwardPathComponentTransitGateway[];
+        vpcs: outputs.ec2.NetworkInsightsAnalysisForwardPathComponentVpc[];
+    }
+    interface NetworkInsightsAnalysisForwardPathComponentAclRule {
+        cidr: string;
+        egress: boolean;
+        portRanges: outputs.ec2.NetworkInsightsAnalysisForwardPathComponentAclRulePortRange[];
+        protocol: string;
+        ruleAction: string;
+        ruleNumber: number;
+    }
+    interface NetworkInsightsAnalysisForwardPathComponentAclRulePortRange {
+        from: number;
+        to: number;
+    }
+    interface NetworkInsightsAnalysisForwardPathComponentAdditionalDetail {
+        additionalDetailType: string;
+        components: outputs.ec2.NetworkInsightsAnalysisForwardPathComponentAdditionalDetailComponent[];
+    }
+    interface NetworkInsightsAnalysisForwardPathComponentAdditionalDetailComponent {
         /**
-         * The name of the placement group for the instance.
+         * ARN of the Network Insights Analysis.
          */
-        groupName?: string;
+        arn: string;
         /**
-         * The ID of the Dedicated Host for the instance.
+         * ID of the Network Insights Analysis.
          */
-        hostId?: string;
+        id: string;
+        name: string;
+    }
+    interface NetworkInsightsAnalysisForwardPathComponentAttachedTo {
         /**
-         * The ARN of the Host Resource Group in which to launch instances.
+         * ARN of the Network Insights Analysis.
          */
-        hostResourceGroupArn?: string;
+        arn: string;
         /**
-         * The number of the partition the instance should launch in. Valid only if the placement group strategy is set to partition.
+         * ID of the Network Insights Analysis.
          */
-        partitionNumber?: number;
+        id: string;
+        name: string;
+    }
+    interface NetworkInsightsAnalysisForwardPathComponentComponent {
         /**
-         * Reserved for future use.
+         * ARN of the Network Insights Analysis.
          */
-        spreadDomain?: string;
+        arn: string;
         /**
-         * The tenancy of the instance (if the instance is running in a VPC). Can be `default`, `dedicated`, or `host`.
+         * ID of the Network Insights Analysis.
          */
-        tenancy?: string;
+        id: string;
+        name: string;
     }
-    interface LaunchTemplatePrivateDnsNameOptions {
+    interface NetworkInsightsAnalysisForwardPathComponentDestinationVpc {
         /**
-         * Indicates whether to respond to DNS queries for instance hostnames with DNS A records.
+         * ARN of the Network Insights Analysis.
          */
-        enableResourceNameDnsARecord?: boolean;
+        arn: string;
         /**
-         * Indicates whether to respond to DNS queries for instance hostnames with DNS AAAA records.
+         * ID of the Network Insights Analysis.
          */
-        enableResourceNameDnsAaaaRecord?: boolean;
+        id: string;
+        name: string;
+    }
+    interface NetworkInsightsAnalysisForwardPathComponentInboundHeader {
+        destinationAddresses: string[];
+        destinationPortRanges: outputs.ec2.NetworkInsightsAnalysisForwardPathComponentInboundHeaderDestinationPortRange[];
+        protocol: string;
+        sourceAddresses: string[];
+        sourcePortRanges: outputs.ec2.NetworkInsightsAnalysisForwardPathComponentInboundHeaderSourcePortRange[];
+    }
+    interface NetworkInsightsAnalysisForwardPathComponentInboundHeaderDestinationPortRange {
+        from: number;
+        to: number;
+    }
+    interface NetworkInsightsAnalysisForwardPathComponentInboundHeaderSourcePortRange {
+        from: number;
+        to: number;
+    }
+    interface NetworkInsightsAnalysisForwardPathComponentOutboundHeader {
+        destinationAddresses: string[];
+        destinationPortRanges: outputs.ec2.NetworkInsightsAnalysisForwardPathComponentOutboundHeaderDestinationPortRange[];
+        protocol: string;
+        sourceAddresses: string[];
+        sourcePortRanges: outputs.ec2.NetworkInsightsAnalysisForwardPathComponentOutboundHeaderSourcePortRange[];
+    }
+    interface NetworkInsightsAnalysisForwardPathComponentOutboundHeaderDestinationPortRange {
+        from: number;
+        to: number;
+    }
+    interface NetworkInsightsAnalysisForwardPathComponentOutboundHeaderSourcePortRange {
+        from: number;
+        to: number;
+    }
+    interface NetworkInsightsAnalysisForwardPathComponentRouteTableRoute {
+        destinationCidr: string;
+        destinationPrefixListId: string;
+        egressOnlyInternetGatewayId: string;
+        gatewayId: string;
+        instanceId: string;
+        natGatewayId: string;
+        networkInterfaceId: string;
+        origin: string;
+        transitGatewayId: string;
+        vpcPeeringConnectionId: string;
+    }
+    interface NetworkInsightsAnalysisForwardPathComponentSecurityGroupRule {
+        cidr: string;
+        direction: string;
+        portRanges: outputs.ec2.NetworkInsightsAnalysisForwardPathComponentSecurityGroupRulePortRange[];
+        prefixListId: string;
+        protocol: string;
+        securityGroupId: string;
+    }
+    interface NetworkInsightsAnalysisForwardPathComponentSecurityGroupRulePortRange {
+        from: number;
+        to: number;
+    }
+    interface NetworkInsightsAnalysisForwardPathComponentSourceVpc {
         /**
-         * The type of hostname for Amazon EC2 instances. For IPv4 only subnets, an instance DNS name must be based on the instance IPv4 address. For IPv6 native subnets, an instance DNS name must be based on the instance ID. For dual-stack subnets, you can specify whether DNS names use the instance IPv4 address or the instance ID. Valid values: `ip-name` and `resource-name`.
+         * ARN of the Network Insights Analysis.
          */
-        hostnameType?: string;
+        arn: string;
+        /**
+         * ID of the Network Insights Analysis.
+         */
+        id: string;
+        name: string;
     }
-    interface LaunchTemplateTagSpecification {
+    interface NetworkInsightsAnalysisForwardPathComponentSubnet {
         /**
-         * The type of resource to tag.
+         * ARN of the Network Insights Analysis.
          */
-        resourceType?: string;
+        arn: string;
         /**
-         * A map of tags to assign to the resource.
+         * ID of the Network Insights Analysis.
          */
-        tags?: {
-            [key: string]: string;
-        };
+        id: string;
+        name: string;
     }
-    interface ManagedPrefixListEntry {
+    interface NetworkInsightsAnalysisForwardPathComponentTransitGateway {
         /**
-         * CIDR block of this entry.
+         * ARN of the Network Insights Analysis.
          */
-        cidr: string;
+        arn: string;
         /**
-         * Description of this entry. Due to API limitations, updating only the description of an existing entry requires temporarily removing and re-adding the entry.
+         * ID of the Network Insights Analysis.
          */
-        description?: string;
+        id: string;
+        name: string;
     }
-    interface NetworkAclEgress {
+    interface NetworkInsightsAnalysisForwardPathComponentTransitGatewayRouteTableRoute {
+        attachmentId: string;
+        destinationCidr: string;
+        prefixListId: string;
+        resourceId: string;
+        resourceType: string;
+        routeOrigin: string;
+        state: string;
+    }
+    interface NetworkInsightsAnalysisForwardPathComponentVpc {
         /**
-         * The action to take.
+         * ARN of the Network Insights Analysis.
          */
-        action: string;
+        arn: string;
         /**
-         * The CIDR block to match. This must be a
-         * valid network mask.
+         * ID of the Network Insights Analysis.
          */
-        cidrBlock?: string;
+        id: string;
+        name: string;
+    }
+    interface NetworkInsightsAnalysisReturnPathComponent {
+        aclRules: outputs.ec2.NetworkInsightsAnalysisReturnPathComponentAclRule[];
+        additionalDetails: outputs.ec2.NetworkInsightsAnalysisReturnPathComponentAdditionalDetail[];
+        attachedTos: outputs.ec2.NetworkInsightsAnalysisReturnPathComponentAttachedTo[];
+        components: outputs.ec2.NetworkInsightsAnalysisReturnPathComponentComponent[];
+        destinationVpcs: outputs.ec2.NetworkInsightsAnalysisReturnPathComponentDestinationVpc[];
+        inboundHeaders: outputs.ec2.NetworkInsightsAnalysisReturnPathComponentInboundHeader[];
+        outboundHeaders: outputs.ec2.NetworkInsightsAnalysisReturnPathComponentOutboundHeader[];
+        routeTableRoutes: outputs.ec2.NetworkInsightsAnalysisReturnPathComponentRouteTableRoute[];
+        securityGroupRules: outputs.ec2.NetworkInsightsAnalysisReturnPathComponentSecurityGroupRule[];
+        sequenceNumber: number;
+        sourceVpcs: outputs.ec2.NetworkInsightsAnalysisReturnPathComponentSourceVpc[];
+        subnets: outputs.ec2.NetworkInsightsAnalysisReturnPathComponentSubnet[];
+        transitGatewayRouteTableRoutes: outputs.ec2.NetworkInsightsAnalysisReturnPathComponentTransitGatewayRouteTableRoute[];
+        transitGateways: outputs.ec2.NetworkInsightsAnalysisReturnPathComponentTransitGateway[];
+        vpcs: outputs.ec2.NetworkInsightsAnalysisReturnPathComponentVpc[];
+    }
+    interface NetworkInsightsAnalysisReturnPathComponentAclRule {
+        cidr: string;
+        egress: boolean;
+        portRanges: outputs.ec2.NetworkInsightsAnalysisReturnPathComponentAclRulePortRange[];
+        protocol: string;
+        ruleAction: string;
+        ruleNumber: number;
+    }
+    interface NetworkInsightsAnalysisReturnPathComponentAclRulePortRange {
+        from: number;
+        to: number;
+    }
+    interface NetworkInsightsAnalysisReturnPathComponentAdditionalDetail {
+        additionalDetailType: string;
+        components: outputs.ec2.NetworkInsightsAnalysisReturnPathComponentAdditionalDetailComponent[];
+    }
+    interface NetworkInsightsAnalysisReturnPathComponentAdditionalDetailComponent {
         /**
-         * The from port to match.
+         * ARN of the Network Insights Analysis.
          */
-        fromPort: number;
+        arn: string;
         /**
-         * The ICMP type code to be used. Default 0.
+         * ID of the Network Insights Analysis.
          */
-        icmpCode?: number;
+        id: string;
+        name: string;
+    }
+    interface NetworkInsightsAnalysisReturnPathComponentAttachedTo {
         /**
-         * The ICMP type to be used. Default 0.
+         * ARN of the Network Insights Analysis.
          */
-        icmpType?: number;
+        arn: string;
         /**
-         * The IPv6 CIDR block.
+         * ID of the Network Insights Analysis.
          */
-        ipv6CidrBlock?: string;
+        id: string;
+        name: string;
+    }
+    interface NetworkInsightsAnalysisReturnPathComponentComponent {
         /**
-         * The protocol to match. If using the -1 'all'
-         * protocol, you must specify a from and to port of 0.
+         * ARN of the Network Insights Analysis.
          */
-        protocol: string;
+        arn: string;
         /**
-         * The rule number. Used for ordering.
+         * ID of the Network Insights Analysis.
          */
-        ruleNo: number;
+        id: string;
+        name: string;
+    }
+    interface NetworkInsightsAnalysisReturnPathComponentDestinationVpc {
         /**
-         * The to port to match.
+         * ARN of the Network Insights Analysis.
          */
-        toPort: number;
-    }
-    interface NetworkAclIngress {
+        arn: string;
         /**
-         * The action to take.
+         * ID of the Network Insights Analysis.
          */
-        action: string;
+        id: string;
+        name: string;
+    }
+    interface NetworkInsightsAnalysisReturnPathComponentInboundHeader {
+        destinationAddresses: string[];
+        destinationPortRanges: outputs.ec2.NetworkInsightsAnalysisReturnPathComponentInboundHeaderDestinationPortRange[];
+        protocol: string;
+        sourceAddresses: string[];
+        sourcePortRanges: outputs.ec2.NetworkInsightsAnalysisReturnPathComponentInboundHeaderSourcePortRange[];
+    }
+    interface NetworkInsightsAnalysisReturnPathComponentInboundHeaderDestinationPortRange {
+        from: number;
+        to: number;
+    }
+    interface NetworkInsightsAnalysisReturnPathComponentInboundHeaderSourcePortRange {
+        from: number;
+        to: number;
+    }
+    interface NetworkInsightsAnalysisReturnPathComponentOutboundHeader {
+        destinationAddresses: string[];
+        destinationPortRanges: outputs.ec2.NetworkInsightsAnalysisReturnPathComponentOutboundHeaderDestinationPortRange[];
+        protocol: string;
+        sourceAddresses: string[];
+        sourcePortRanges: outputs.ec2.NetworkInsightsAnalysisReturnPathComponentOutboundHeaderSourcePortRange[];
+    }
+    interface NetworkInsightsAnalysisReturnPathComponentOutboundHeaderDestinationPortRange {
+        from: number;
+        to: number;
+    }
+    interface NetworkInsightsAnalysisReturnPathComponentOutboundHeaderSourcePortRange {
+        from: number;
+        to: number;
+    }
+    interface NetworkInsightsAnalysisReturnPathComponentRouteTableRoute {
+        destinationCidr: string;
+        destinationPrefixListId: string;
+        egressOnlyInternetGatewayId: string;
+        gatewayId: string;
+        instanceId: string;
+        natGatewayId: string;
+        networkInterfaceId: string;
+        origin: string;
+        transitGatewayId: string;
+        vpcPeeringConnectionId: string;
+    }
+    interface NetworkInsightsAnalysisReturnPathComponentSecurityGroupRule {
+        cidr: string;
+        direction: string;
+        portRanges: outputs.ec2.NetworkInsightsAnalysisReturnPathComponentSecurityGroupRulePortRange[];
+        prefixListId: string;
+        protocol: string;
+        securityGroupId: string;
+    }
+    interface NetworkInsightsAnalysisReturnPathComponentSecurityGroupRulePortRange {
+        from: number;
+        to: number;
+    }
+    interface NetworkInsightsAnalysisReturnPathComponentSourceVpc {
         /**
-         * The CIDR block to match. This must be a
-         * valid network mask.
+         * ARN of the Network Insights Analysis.
          */
-        cidrBlock?: string;
+        arn: string;
         /**
-         * The from port to match.
+         * ID of the Network Insights Analysis.
          */
-        fromPort: number;
+        id: string;
+        name: string;
+    }
+    interface NetworkInsightsAnalysisReturnPathComponentSubnet {
         /**
-         * The ICMP type code to be used. Default 0.
+         * ARN of the Network Insights Analysis.
          */
-        icmpCode?: number;
+        arn: string;
         /**
-         * The ICMP type to be used. Default 0.
+         * ID of the Network Insights Analysis.
          */
-        icmpType?: number;
+        id: string;
+        name: string;
+    }
+    interface NetworkInsightsAnalysisReturnPathComponentTransitGateway {
         /**
-         * The IPv6 CIDR block.
+         * ARN of the Network Insights Analysis.
          */
-        ipv6CidrBlock?: string;
+        arn: string;
         /**
-         * The protocol to match. If using the -1 'all'
-         * protocol, you must specify a from and to port of 0.
+         * ID of the Network Insights Analysis.
          */
-        protocol: string;
+        id: string;
+        name: string;
+    }
+    interface NetworkInsightsAnalysisReturnPathComponentTransitGatewayRouteTableRoute {
+        attachmentId: string;
+        destinationCidr: string;
+        prefixListId: string;
+        resourceId: string;
+        resourceType: string;
+        routeOrigin: string;
+        state: string;
+    }
+    interface NetworkInsightsAnalysisReturnPathComponentVpc {
         /**
-         * The rule number. Used for ordering.
+         * ARN of the Network Insights Analysis.
          */
-        ruleNo: number;
+        arn: string;
         /**
-         * The to port to match.
+         * ID of the Network Insights Analysis.
          */
-        toPort: number;
+        id: string;
+        name: string;
     }
     interface NetworkInterfaceAttachment {
         attachmentId: string;
@@ -17630,6 +19174,8 @@ export declare namespace ec2 {
          * Allow a local linked EC2-Classic instance to communicate
          * with instances in a peer VPC. This enables an outbound communication from the local ClassicLink connection
          * to the remote VPC. This option is not supported for inter-region VPC peering.
+         *
+         * @deprecated With the retirement of EC2-Classic the allow_classic_link_to_remote_vpc attribute has been deprecated and will be removed in a future version.
          */
         allowClassicLinkToRemoteVpc?: boolean;
         /**
@@ -17641,6 +19187,8 @@ export declare namespace ec2 {
          * Allow a local VPC to communicate with a linked EC2-Classic
          * instance in a peer VPC. This enables an outbound communication from the local VPC to the remote ClassicLink
          * connection. This option is not supported for inter-region VPC peering.
+         *
+         * @deprecated With the retirement of EC2-Classic the allow_vpc_to_remote_classic_link attribute has been deprecated and will be removed in a future version.
          */
         allowVpcToRemoteClassicLink?: boolean;
     }
@@ -17649,6 +19197,8 @@ export declare namespace ec2 {
          * Allow a local linked EC2-Classic instance to communicate
          * with instances in a peer VPC. This enables an outbound communication from the local ClassicLink connection
          * to the remote VPC. This option is not supported for inter-region VPC peering.
+         *
+         * @deprecated With the retirement of EC2-Classic the allow_classic_link_to_remote_vpc attribute has been deprecated and will be removed in a future version.
          */
         allowClassicLinkToRemoteVpc?: boolean;
         /**
@@ -17660,6 +19210,8 @@ export declare namespace ec2 {
          * Allow a local VPC to communicate with a linked EC2-Classic
          * instance in a peer VPC. This enables an outbound communication from the local VPC to the remote ClassicLink
          * connection. This option is not supported for inter-region VPC peering.
+         *
+         * @deprecated With the retirement of EC2-Classic the allow_vpc_to_remote_classic_link attribute has been deprecated and will be removed in a future version.
          */
         allowVpcToRemoteClassicLink?: boolean;
     }
@@ -18374,6 +19926,8 @@ export declare namespace ec2 {
          * Allow a local linked EC2-Classic instance to communicate
          * with instances in a peer VPC. This enables an outbound communication from the local ClassicLink connection
          * to the remote VPC.
+         *
+         * @deprecated With the retirement of EC2-Classic the allow_classic_link_to_remote_vpc attribute has been deprecated and will be removed in a future version.
          */
         allowClassicLinkToRemoteVpc?: boolean;
         /**
@@ -18385,6 +19939,8 @@ export declare namespace ec2 {
          * Allow a local VPC to communicate with a linked EC2-Classic
          * instance in a peer VPC. This enables an outbound communication from the local VPC to the remote ClassicLink
          * connection.
+         *
+         * @deprecated With the retirement of EC2-Classic the allow_vpc_to_remote_classic_link attribute has been deprecated and will be removed in a future version.
          */
         allowVpcToRemoteClassicLink?: boolean;
     }
@@ -18392,6 +19948,8 @@ export declare namespace ec2 {
         /**
          * Indicates whether a local ClassicLink connection can communicate
          * with the peer VPC over the VPC Peering Connection.
+         *
+         * @deprecated With the retirement of EC2-Classic the allow_classic_link_to_remote_vpc attribute has been deprecated and will be removed in a future version.
          */
         allowClassicLinkToRemoteVpc?: boolean;
         /**
@@ -18402,6 +19960,8 @@ export declare namespace ec2 {
         /**
          * Indicates whether a local VPC can communicate with a ClassicLink
          * connection in the peer VPC over the VPC Peering Connection.
+         *
+         * @deprecated With the retirement of EC2-Classic the allow_vpc_to_remote_classic_link attribute has been deprecated and will be removed in a future version.
          */
         allowVpcToRemoteClassicLink?: boolean;
     }
@@ -18409,6 +19969,8 @@ export declare namespace ec2 {
         /**
          * Indicates whether a local ClassicLink connection can communicate
          * with the peer VPC over the VPC Peering Connection.
+         *
+         * @deprecated With the retirement of EC2-Classic the allow_classic_link_to_remote_vpc attribute has been deprecated and will be removed in a future version.
          */
         allowClassicLinkToRemoteVpc?: boolean;
         /**
@@ -18419,6 +19981,8 @@ export declare namespace ec2 {
         /**
          * Indicates whether a local VPC can communicate with a ClassicLink
          * connection in the peer VPC over the VPC Peering Connection.
+         *
+         * @deprecated With the retirement of EC2-Classic the allow_vpc_to_remote_classic_link attribute has been deprecated and will be removed in a future version.
          */
         allowVpcToRemoteClassicLink?: boolean;
     }
@@ -18427,6 +19991,8 @@ export declare namespace ec2 {
          * Allow a local linked EC2-Classic instance to communicate
          * with instances in a peer VPC. This enables an outbound communication from the local ClassicLink connection
          * to the remote VPC.
+         *
+         * @deprecated With the retirement of EC2-Classic the allow_classic_link_to_remote_vpc attribute has been deprecated and will be removed in a future version.
          */
         allowClassicLinkToRemoteVpc?: boolean;
         /**
@@ -18438,6 +20004,8 @@ export declare namespace ec2 {
          * Allow a local VPC to communicate with a linked EC2-Classic
          * instance in a peer VPC. This enables an outbound communication from the local VPC to the remote ClassicLink
          * connection.
+         *
+         * @deprecated With the retirement of EC2-Classic the allow_vpc_to_remote_classic_link attribute has been deprecated and will be removed in a future version.
          */
         allowVpcToRemoteClassicLink?: boolean;
     }
@@ -18571,6 +20139,16 @@ export declare namespace ec2clientvpn {
     }
 }
 export declare namespace ec2transitgateway {
+    interface GetAttachmentFilter {
+        /**
+         * The name of the field to filter by, as defined by the [underlying AWS API](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeTransitGatewayAttachments.html).
+         */
+        name: string;
+        /**
+         * List of one or more values for the filter.
+         */
+        values: string[];
+    }
     interface GetConnectFilter {
         /**
          * Name of the filter.
@@ -19913,7 +21491,7 @@ export declare namespace elasticloadbalancing {
          */
         enabled?: boolean;
         /**
-         * The publishing interval in minutes. Default: 60 minutes.
+         * The publishing interval in minutes. Valid values: `5` and `60`. Default: `60`
          */
         interval?: number;
     }
@@ -21356,7 +22934,7 @@ export declare namespace elb {
          */
         enabled?: boolean;
         /**
-         * The publishing interval in minutes. Default: 60 minutes.
+         * The publishing interval in minutes. Valid values: `5` and `60`. Default: `60`
          */
         interval?: number;
     }
@@ -23361,7 +24939,7 @@ export declare namespace glue {
          */
         name?: string;
         /**
-         * The Python version being used to execute a Python shell job. Allowed values are 2 or 3.
+         * The Python version being used to execute a Python shell job. Allowed values are 2, 3 or 3.9. Version 3 refers to Python 3.6.
          */
         pythonVersion: string;
         /**
@@ -26329,17 +27907,17 @@ export declare namespace kendra {
     }
     interface IndexDocumentMetadataConfigurationUpdate {
         /**
-         * Specifies the name of the Index.
+         * The name of the index field. Minimum length of 1. Maximum length of 30.
          */
         name: string;
         /**
-         * A block that provides manual tuning parameters to determine how the field affects the search results. Documented below.
+         * A block that provides manual tuning parameters to determine how the field affects the search results. Detailed below
          */
-        relevances: outputs.kendra.IndexDocumentMetadataConfigurationUpdateRelevance[];
+        relevance: outputs.kendra.IndexDocumentMetadataConfigurationUpdateRelevance;
         /**
-         * A block that provides information about how the field is used during a search. Documented below.
+         * A block that provides information about how the field is used during a search. Documented below. Detailed below
          */
-        searches: outputs.kendra.IndexDocumentMetadataConfigurationUpdateSearch[];
+        search: outputs.kendra.IndexDocumentMetadataConfigurationUpdateSearch;
         /**
          * The data type of the index field. Valid values are `STRING_VALUE`, `STRING_LIST_VALUE`, `LONG_VALUE`, `DATE_VALUE`.
          */
@@ -26389,11 +27967,11 @@ export declare namespace kendra {
     }
     interface IndexIndexStatistic {
         /**
-         * A block that specifies the number of question and answer topics in the index. Documented below.
+         * A block that specifies the number of question and answer topics in the index. Detailed below.
          */
         faqStatistics: outputs.kendra.IndexIndexStatisticFaqStatistic[];
         /**
-         * A block that specifies the number of text documents indexed.
+         * A block that specifies the number of text documents indexed. Detailed below.
          */
         textDocumentStatistics: outputs.kendra.IndexIndexStatisticTextDocumentStatistic[];
     }
@@ -26427,11 +28005,11 @@ export declare namespace kendra {
     }
     interface IndexUserTokenConfigurations {
         /**
-         * A block that specifies the information about the JSON token type configuration.
+         * A block that specifies the information about the JSON token type configuration. Detailed below.
          */
         jsonTokenTypeConfiguration?: outputs.kendra.IndexUserTokenConfigurationsJsonTokenTypeConfiguration;
         /**
-         * A block that specifies the information about the JWT token type configuration.
+         * A block that specifies the information about the JWT token type configuration. Detailed below.
          */
         jwtTokenTypeConfiguration?: outputs.kendra.IndexUserTokenConfigurationsJwtTokenTypeConfiguration;
     }
@@ -34413,6 +35991,18 @@ export declare namespace redshiftdata {
         value: string;
     }
 }
+export declare namespace redshiftserverless {
+    interface WorkgroupConfigParameter {
+        /**
+         * The key of the parameter. The options are `datestyle`, `enableUserActivityLogging`, `queryGroup`, `searchPath`, and `maxQueryExecutionTime`.
+         */
+        parameterKey: string;
+        /**
+         * The value of the parameter to set.
+         */
+        parameterValue: string;
+    }
+}
 export declare namespace resourcegroups {
     interface GroupResourceQuery {
         /**