@pulumi/aws 5.26.0 → 5.27.0

package/types/output.d.ts

@@ -854,16 +854,16 @@ export declare namespace alb {
     }
     interface LoadBalancerSubnetMapping {
         /**
-         * The allocation ID of the Elastic IP address.
+         * The allocation ID of the Elastic IP address for an internet-facing load balancer.
          */
         allocationId?: string;
         /**
-         * An ipv6 address within the subnet to assign to the internet-facing load balancer.
+         * The IPv6 address. You associate IPv6 CIDR blocks with your VPC and choose the subnets where you launch both internet-facing and internal Application Load Balancers or Network Load Balancers.
          */
         ipv6Address?: string;
         outpostId: string;
         /**
-         * A private ipv4 address within the subnet to assign to the internal-facing load balancer.
+         * The private IPv4 address for an internal load balancer.
          */
         privateIpv4Address?: string;
         /**
@@ -1377,31 +1377,31 @@ export declare namespace apigatewayv2 {
          */
         destinationArn: string;
         /**
-         * Single line [format](https://docs.aws.amazon.com/apigateway/latest/developerguide/set-up-logging.html#apigateway-cloudwatch-log-formats) of the access logs of data, as specified by [selected $context variables](https://docs.aws.amazon.com/apigateway/latest/developerguide/apigateway-websocket-api-logging.html).
+         * Single line [format](https://docs.aws.amazon.com/apigateway/latest/developerguide/set-up-logging.html#apigateway-cloudwatch-log-formats) of the access logs of data. Refer to log settings for [HTTP](https://docs.aws.amazon.com/apigateway/latest/developerguide/http-api-logging-variables.html) or [Websocket](https://docs.aws.amazon.com/apigateway/latest/developerguide/websocket-api-logging.html).
          */
         format: string;
     }
     interface StageDefaultRouteSettings {
         /**
-         * Whether data trace logging is enabled for the default route. Affects the log entries pushed to Amazon CloudWatch Logs.
+         * Whether data trace logging is enabled for the route. Affects the log entries pushed to Amazon CloudWatch Logs.
          * Defaults to `false`. Supported only for WebSocket APIs.
          */
         dataTraceEnabled?: boolean;
         /**
-         * Whether detailed metrics are enabled for the default route. Defaults to `false`.
+         * Whether detailed metrics are enabled for the route. Defaults to `false`.
          */
         detailedMetricsEnabled?: boolean;
         /**
-         * Logging level for the default route. Affects the log entries pushed to Amazon CloudWatch Logs.
+         * Logging level for the route. Affects the log entries pushed to Amazon CloudWatch Logs.
          * Valid values: `ERROR`, `INFO`, `OFF`. Defaults to `OFF`. Supported only for WebSocket APIs. This provider will only perform drift detection of its value when present in a configuration.
          */
         loggingLevel: string;
         /**
-         * Throttling burst limit for the default route.
+         * Throttling burst limit for the route.
          */
         throttlingBurstLimit?: number;
         /**
-         * Throttling rate limit for the default route.
+         * Throttling rate limit for the route.
          */
         throttlingRateLimit?: number;
     }
@@ -2268,6 +2268,18 @@ export declare namespace appflow {
          * The bucket path that refers to the Amazon S3 bucket associated with Snowflake.
          */
         bucketPrefix?: string;
+        /**
+         * The unique ID that's assigned to an Amazon Redshift cluster.
+         */
+        clusterIdentifier?: string;
+        /**
+         * ARN of the IAM role that permits AppFlow to access the database through Data API.
+         */
+        dataApiRoleArn?: string;
+        /**
+         * The name of an Amazon Redshift database.
+         */
+        databaseName?: string;
         /**
          * The JDBC URL of the Amazon Redshift cluster.
          */
@@ -3767,16 +3779,16 @@ export declare namespace applicationloadbalancing {
     }
     interface LoadBalancerSubnetMapping {
         /**
-         * The allocation ID of the Elastic IP address.
+         * The allocation ID of the Elastic IP address for an internet-facing load balancer.
          */
         allocationId?: string;
         /**
-         * An ipv6 address within the subnet to assign to the internet-facing load balancer.
+         * The IPv6 address. You associate IPv6 CIDR blocks with your VPC and choose the subnets where you launch both internet-facing and internal Application Load Balancers or Network Load Balancers.
          */
         ipv6Address?: string;
         outpostId: string;
         /**
-         * A private ipv4 address within the subnet to assign to the internal-facing load balancer.
+         * The private IPv4 address for an internal load balancer.
          */
         privateIpv4Address?: string;
         /**
@@ -6342,20 +6354,30 @@ export declare namespace appsync {
     }
     interface ResolverCachingConfig {
         /**
-         * List of caching key.
+         * The caching keys for a resolver that has caching activated. Valid values are entries from the $context.arguments, $context.source, and $context.identity maps.
          */
         cachingKeys?: string[];
         /**
-         * TTL in seconds.
+         * The TTL in seconds for a resolver that has caching activated. Valid values are between `1` and `3600` seconds.
          */
         ttl?: number;
     }
     interface ResolverPipelineConfig {
         /**
-         * List of Function ID.
+         * A list of Function objects.
          */
         functions?: string[];
     }
+    interface ResolverRuntime {
+        /**
+         * The name of the runtime to use. Currently, the only allowed value is `APPSYNC_JS`.
+         */
+        name: string;
+        /**
+         * The version of the runtime to use. Currently, the only allowed version is `1.0.0`.
+         */
+        runtimeVersion: string;
+    }
     interface ResolverSyncConfig {
         /**
          * Conflict Detection strategy to use. Valid values are `NONE` and `VERSION`.
@@ -6407,6 +6429,10 @@ export declare namespace athena {
          * Configuration block for the Athena Engine Versioning. For more information, see [Athena Engine Versioning](https://docs.aws.amazon.com/athena/latest/ug/engine-versions.html). See Engine Version below.
          */
         engineVersion?: outputs.athena.WorkgroupConfigurationEngineVersion;
+        /**
+         * Role used in a notebook session for accessing the user's resources.
+         */
+        executionRole?: string;
         /**
          * Boolean whether Amazon CloudWatch metrics are enabled for the workgroup. Defaults to `true`.
          */
@@ -10041,7 +10067,7 @@ export declare namespace cloudwatch {
          */
         launchType?: string;
         /**
-         * Use this if the ECS task uses the awsvpc network mode. This specifies the VPC subnets and security groups associated with the task, and whether a public IP address is to be used. Required if launchType is FARGATE because the awsvpc mode is required for Fargate tasks.
+         * Use this if the ECS task uses the awsvpc network mode. This specifies the VPC subnets and security groups associated with the task, and whether a public IP address is to be used. Required if `launchType` is `FARGATE` because the awsvpc mode is required for Fargate tasks.
          */
         networkConfiguration?: outputs.cloudwatch.EventTargetEcsTargetNetworkConfiguration;
         /**
@@ -10049,7 +10075,7 @@ export declare namespace cloudwatch {
          */
         placementConstraints?: outputs.cloudwatch.EventTargetEcsTargetPlacementConstraint[];
         /**
-         * Specifies the platform version for the task. Specify only the numeric portion of the platform version, such as 1.1.0. This is used only if LaunchType is FARGATE. For more information about valid platform versions, see [AWS Fargate Platform Versions](http://docs.aws.amazon.com/AmazonECS/latest/developerguide/platform_versions.html).
+         * Specifies the platform version for the task. Specify only the numeric portion of the platform version, such as `1.1.0`. This is used only if LaunchType is FARGATE. For more information about valid platform versions, see [AWS Fargate Platform Versions](http://docs.aws.amazon.com/AmazonECS/latest/developerguide/platform_versions.html).
          */
         platformVersion?: string;
         /**
@@ -10063,7 +10089,7 @@ export declare namespace cloudwatch {
             [key: string]: string;
         };
         /**
-         * The number of tasks to create based on the TaskDefinition. The default is 1.
+         * The number of tasks to create based on the TaskDefinition. Defaults to `1`.
          */
         taskCount?: number;
         /**
@@ -10073,7 +10099,7 @@ export declare namespace cloudwatch {
     }
     interface EventTargetEcsTargetCapacityProviderStrategy {
         /**
-         * The base value designates how many tasks, at a minimum, to run on the specified capacity provider. Only one capacity provider in a capacity provider strategy can have a base defined. If no value is specified, the default value of 0 is used.
+         * The base value designates how many tasks, at a minimum, to run on the specified capacity provider. Only one capacity provider in a capacity provider strategy can have a base defined. Defaults to `0`.
          */
         base?: number;
         /**
@@ -10087,7 +10113,7 @@ export declare namespace cloudwatch {
     }
     interface EventTargetEcsTargetNetworkConfiguration {
         /**
-         * Assign a public IP address to the ENI (Fargate launch type only). Valid values are `true` or `false`. Default `false`.
+         * Assign a public IP address to the ENI (Fargate launch type only). Valid values are `true` or `false`. Defaults to `false`.
          */
         assignPublicIp?: boolean;
         /**
@@ -10200,6 +10226,76 @@ export declare namespace cloudwatch {
          */
         messageGroupId?: string;
     }
+    interface GetLogDataProtectionPolicyDocumentStatement {
+        /**
+         * Set of at least 1 sensitive data identifiers that you want to mask. Read more in [Types of data that you can protect](https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/protect-sensitive-log-data-types.html).
+         */
+        dataIdentifiers: string[];
+        /**
+         * Configures the data protection operation applied by this statement.
+         */
+        operation: outputs.cloudwatch.GetLogDataProtectionPolicyDocumentStatementOperation;
+        /**
+         * Name of this statement.
+         */
+        sid?: string;
+    }
+    interface GetLogDataProtectionPolicyDocumentStatementOperation {
+        /**
+         * Configures the detection of sensitive data.
+         */
+        audit?: outputs.cloudwatch.GetLogDataProtectionPolicyDocumentStatementOperationAudit;
+        /**
+         * Configures the masking of sensitive data.
+         */
+        deidentify?: outputs.cloudwatch.GetLogDataProtectionPolicyDocumentStatementOperationDeidentify;
+    }
+    interface GetLogDataProtectionPolicyDocumentStatementOperationAudit {
+        /**
+         * Configures destinations to send audit findings to.
+         */
+        findingsDestination: outputs.cloudwatch.GetLogDataProtectionPolicyDocumentStatementOperationAuditFindingsDestination;
+    }
+    interface GetLogDataProtectionPolicyDocumentStatementOperationAuditFindingsDestination {
+        /**
+         * Configures CloudWatch Logs as a findings destination.
+         */
+        cloudwatchLogs?: outputs.cloudwatch.GetLogDataProtectionPolicyDocumentStatementOperationAuditFindingsDestinationCloudwatchLogs;
+        /**
+         * Configures Kinesis Firehose as a findings destination.
+         */
+        firehose?: outputs.cloudwatch.GetLogDataProtectionPolicyDocumentStatementOperationAuditFindingsDestinationFirehose;
+        /**
+         * Configures S3 as a findings destination.
+         */
+        s3?: outputs.cloudwatch.GetLogDataProtectionPolicyDocumentStatementOperationAuditFindingsDestinationS3;
+    }
+    interface GetLogDataProtectionPolicyDocumentStatementOperationAuditFindingsDestinationCloudwatchLogs {
+        /**
+         * Name of the CloudWatch Log Group to send findings to.
+         */
+        logGroup: string;
+    }
+    interface GetLogDataProtectionPolicyDocumentStatementOperationAuditFindingsDestinationFirehose {
+        /**
+         * Name of the Kinesis Firehose Delivery Stream to send findings to.
+         */
+        deliveryStream: string;
+    }
+    interface GetLogDataProtectionPolicyDocumentStatementOperationAuditFindingsDestinationS3 {
+        /**
+         * Name of the S3 Bucket to send findings to.
+         */
+        bucket: string;
+    }
+    interface GetLogDataProtectionPolicyDocumentStatementOperationDeidentify {
+        /**
+         * An empty object that configures masking.
+         */
+        maskConfig: outputs.cloudwatch.GetLogDataProtectionPolicyDocumentStatementOperationDeidentifyMaskConfig;
+    }
+    interface GetLogDataProtectionPolicyDocumentStatementOperationDeidentifyMaskConfig {
+    }
     interface LogMetricFilterMetricTransformation {
         /**
          * The value to emit when a filter pattern does not match a log event. Conflicts with `dimensions`.
@@ -15203,7 +15299,7 @@ export declare namespace dms {
          */
         cdcMaxBatchInterval?: number;
         /**
-         * Minimum file size, defined in megabytes, to reach for a file output. Default is `32`.
+         * Minimum file size condition as defined in kilobytes to output a file to Amazon S3. Default is `32000`. **NOTE:** Previously, this setting was measured in megabytes but now represents kilobytes. Update configurations accordingly.
          */
         cdcMinFileSize?: number;
         /**
@@ -15273,6 +15369,10 @@ export declare namespace dms {
         /**
          * When this value is set to `1`, DMS ignores the first row header in a .csv file. Default is `0`.
          */
+        ignoreHeaderRows?: number;
+        /**
+         * Deprecated. This setting has no effect. Will be removed in a future version.
+         */
         ignoreHeadersRow?: number;
         /**
          * Whether to enable a full load to write INSERT operations to the .csv output files only to indicate how the rows were added to the source database. Default is `false`.
@@ -18083,11 +18183,23 @@ export declare namespace ec2 {
         state: string;
     }
     interface GetVpcIamPoolFilter {
+        /**
+         * The name of the filter. Filter names are case-sensitive.
+         */
         name: string;
+        /**
+         * The filter values. Filter values are case-sensitive.
+         */
         values: string[];
     }
     interface GetVpcIamPoolsFilter {
+        /**
+         * The name of the filter. Filter names are case-sensitive.
+         */
         name: string;
+        /**
+         * The filter values. Filter values are case-sensitive.
+         */
         values: string[];
     }
     interface GetVpcIamPoolsIpamPool {
@@ -18096,7 +18208,7 @@ export declare namespace ec2 {
          */
         addressFamily: string;
         /**
-         * A default netmask length for allocations added to this pool. If, for example, the CIDR assigned to this pool is 10.0.0.0/8 and you enter 16 here, new allocations will default to 10.0.0.0/16.
+         * A default netmask length for allocations added to this pool. If, for example, the CIDR assigned to this pool is `10.0.0.0/8` and you enter 16 here, new allocations will default to `10.0.0.0/16`.
          */
         allocationDefaultNetmaskLength: number;
         /**
@@ -18122,7 +18234,7 @@ export declare namespace ec2 {
          */
         autoImport: boolean;
         /**
-         * Limits which service in AWS that the pool can be used in. "ec2", for example, allows users to use space for Elastic IP addresses and VPCs.
+         * Limits which service in AWS that the pool can be used in. `ec2` for example, allows users to use space for Elastic IP addresses and VPCs.
          */
         awsService: string;
         /**
@@ -18145,7 +18257,7 @@ export declare namespace ec2 {
         locale: string;
         poolDepth: number;
         /**
-         * Defines whether or not IPv6 pool space is publicly ∂advertisable over the internet.
+         * Defines whether or not IPv6 pool space is publicly advertisable over the internet.
          */
         publiclyAdvertisable: boolean;
         /**
@@ -21233,6 +21345,17 @@ export declare namespace ecs {
         name: string;
         value: string;
     }
+    interface ServiceAlarms {
+        alarmNames: string[];
+        /**
+         * Determines whether to use the CloudWatch alarm option in the service deployment process.
+         */
+        enable: boolean;
+        /**
+         * Determines whether to configure Amazon ECS to roll back the service if a service deployment fails. If rollback is used, when a service deployment fails, the service is rolled back to the last deployment that completed successfully.
+         */
+        rollback: boolean;
+    }
     interface ServiceCapacityProviderStrategy {
         /**
          * Number of tasks, at a minimum, to run on the specified capacity provider. Only one capacity provider in a capacity provider strategy can have a base defined.
@@ -22056,7 +22179,7 @@ export declare namespace eks {
     }
     interface NodeGroupRemoteAccess {
         /**
-         * EC2 Key Pair name that provides access for SSH communication with the worker nodes in the EKS Node Group. If you specify this configuration, but do not specify `sourceSecurityGroupIds` when you create an EKS Node Group, port 22 on the worker nodes is opened to the Internet (0.0.0.0/0).
+         * EC2 Key Pair name that provides access for remote communication with the worker nodes in the EKS Node Group. If you specify this configuration, but do not specify `sourceSecurityGroupIds` when you create an EKS Node Group, either port 3389 for Windows, or port 22 for all other operating systems is opened on the worker nodes to the Internet (0.0.0.0/0). For Windows nodes, this will allow you to use RDP, for all others this allows you to SSH into the worker nodes.
          */
         ec2SshKey?: string;
         /**
@@ -22958,16 +23081,16 @@ export declare namespace elasticloadbalancingv2 {
     }
     interface LoadBalancerSubnetMapping {
         /**
-         * The allocation ID of the Elastic IP address.
+         * The allocation ID of the Elastic IP address for an internet-facing load balancer.
          */
         allocationId?: string;
         /**
-         * An ipv6 address within the subnet to assign to the internet-facing load balancer.
+         * The IPv6 address. You associate IPv6 CIDR blocks with your VPC and choose the subnets where you launch both internet-facing and internal Application Load Balancers or Network Load Balancers.
          */
         ipv6Address?: string;
         outpostId: string;
         /**
-         * A private ipv4 address within the subnet to assign to the internal-facing load balancer.
+         * The private IPv4 address for an internal load balancer.
          */
         privateIpv4Address?: string;
         /**
@@ -25892,6 +26015,191 @@ export declare namespace glue {
          */
         sseAwsKmsKeyId?: string;
     }
+    interface GetCatalogTablePartitionIndex {
+        /**
+         * Name of the partition index.
+         */
+        indexName: string;
+        indexStatus: string;
+        /**
+         * Keys for the partition index.
+         */
+        keys: string[];
+    }
+    interface GetCatalogTablePartitionKey {
+        /**
+         * Free-form text comment.
+         */
+        comment: string;
+        /**
+         * Name of the table.
+         */
+        name: string;
+        /**
+         * Datatype of data in the Column.
+         */
+        type: string;
+    }
+    interface GetCatalogTableStorageDescriptor {
+        /**
+         * List of reducer grouping columns, clustering columns, and bucketing columns in the table.
+         */
+        bucketColumns: string[];
+        /**
+         * Configuration block for columns in the table. See `columns` below.
+         */
+        columns: outputs.glue.GetCatalogTableStorageDescriptorColumn[];
+        /**
+         * Whether the data in the table is compressed.
+         */
+        compressed: boolean;
+        /**
+         * Input format: SequenceFileInputFormat (binary), or TextInputFormat, or a custom format.
+         */
+        inputFormat: string;
+        /**
+         * Physical location of the table. By default, this takes the form of the warehouse location, followed by the database location in the warehouse, followed by the table name.
+         */
+        location: string;
+        /**
+         * Is if the table contains any dimension columns.
+         */
+        numberOfBuckets: number;
+        /**
+         * Output format: SequenceFileOutputFormat (binary), or IgnoreKeyTextOutputFormat, or a custom format.
+         */
+        outputFormat: string;
+        /**
+         * Map of initialization parameters for the SerDe, in key-value form.
+         */
+        parameters: {
+            [key: string]: string;
+        };
+        /**
+         * Object that references a schema stored in the AWS Glue Schema Registry. See `schemaReference` below.
+         */
+        schemaReferences: outputs.glue.GetCatalogTableStorageDescriptorSchemaReference[];
+        /**
+         * Configuration block for serialization and deserialization ("SerDe") information. See `serDeInfo` below.
+         */
+        serDeInfos: outputs.glue.GetCatalogTableStorageDescriptorSerDeInfo[];
+        /**
+         * Configuration block with information about values that appear very frequently in a column (skewed values). See `skewedInfo` below.
+         */
+        skewedInfos: outputs.glue.GetCatalogTableStorageDescriptorSkewedInfo[];
+        /**
+         * Configuration block for the sort order of each bucket in the table. See `sortColumns` below.
+         */
+        sortColumns: outputs.glue.GetCatalogTableStorageDescriptorSortColumn[];
+        /**
+         * Whether the table data is stored in subdirectories.
+         */
+        storedAsSubDirectories: boolean;
+    }
+    interface GetCatalogTableStorageDescriptorColumn {
+        /**
+         * Free-form text comment.
+         */
+        comment: string;
+        /**
+         * Name of the table.
+         */
+        name: string;
+        /**
+         * Map of initialization parameters for the SerDe, in key-value form.
+         */
+        parameters: {
+            [key: string]: string;
+        };
+        /**
+         * Datatype of data in the Column.
+         */
+        type: string;
+    }
+    interface GetCatalogTableStorageDescriptorSchemaReference {
+        /**
+         * Configuration block that contains schema identity fields. See `schemaId` below.
+         */
+        schemaIds: outputs.glue.GetCatalogTableStorageDescriptorSchemaReferenceSchemaId[];
+        /**
+         * Unique ID assigned to a version of the schema.
+         */
+        schemaVersionId: string;
+        /**
+         * Version number of the schema.
+         */
+        schemaVersionNumber: number;
+    }
+    interface GetCatalogTableStorageDescriptorSchemaReferenceSchemaId {
+        /**
+         * Name of the schema registry that contains the schema.
+         */
+        registryName: string;
+        /**
+         * ARN of the schema.
+         */
+        schemaArn: string;
+        /**
+         * Name of the schema.
+         */
+        schemaName: string;
+    }
+    interface GetCatalogTableStorageDescriptorSerDeInfo {
+        /**
+         * Name of the table.
+         */
+        name: string;
+        /**
+         * Map of initialization parameters for the SerDe, in key-value form.
+         */
+        parameters: {
+            [key: string]: string;
+        };
+        /**
+         * Usually the class that implements the SerDe. An example is `org.apache.hadoop.hive.serde2.columnar.ColumnarSerDe`.
+         */
+        serializationLibrary: string;
+    }
+    interface GetCatalogTableStorageDescriptorSkewedInfo {
+        /**
+         * List of names of columns that contain skewed values.
+         */
+        skewedColumnNames: string[];
+        /**
+         * List of values that appear so frequently as to be considered skewed.
+         */
+        skewedColumnValueLocationMaps: {
+            [key: string]: string;
+        };
+        /**
+         * Map of skewed values to the columns that contain them.
+         */
+        skewedColumnValues: string[];
+    }
+    interface GetCatalogTableStorageDescriptorSortColumn {
+        /**
+         * Name of the column.
+         */
+        column: string;
+        /**
+         * Whether the column is sorted in ascending (`1`) or descending order (`0`).
+         */
+        sortOrder: number;
+    }
+    interface GetCatalogTableTargetTable {
+        /**
+         * ID of the Glue Catalog and database where the table metadata resides. If omitted, this defaults to the current AWS Account ID.
+         */
+        catalogId: string;
+        /**
+         * Name of the metadata database where the table metadata resides.
+         */
+        databaseName: string;
+        /**
+         * Name of the table.
+         */
+        name: string;
+    }
     interface GetConnectionPhysicalConnectionRequirement {
         availabilityZone: string;
         securityGroupIdLists: string[];
@@ -27842,6 +28150,9 @@ export declare namespace iot {
          * The version of the payload that was sent to the target function. The only valid (and the default) payload version is `"2020-04-01"`.
          */
         payloadVersion?: string;
+        /**
+         * The ARN of the target function.
+         */
         targetArn: string;
     }
     interface ThingGroupMetadata {
@@ -31306,10 +31617,18 @@ export declare namespace kms {
         context?: {
             [key: string]: string;
         };
+        /**
+         * The encryption algorithm that will be used to decrypt the ciphertext. This parameter is required only when the ciphertext was encrypted under an asymmetric KMS key. Valid Values: SYMMETRIC_DEFAULT | RSAES_OAEP_SHA_1 | RSAES_OAEP_SHA_256 | SM2PKE
+         */
+        encryptionAlgorithm?: string;
         /**
          * An optional list of Grant Tokens for the secret.
          */
         grantTokens?: string[];
+        /**
+         * Specifies the KMS key that AWS KMS uses to decrypt the ciphertext. This parameter is required only when the ciphertext was encrypted under an asymmetric KMS key.
+         */
+        keyId?: string;
         /**
          * Name to export this secret under in the attributes.
          */
@@ -32443,16 +32762,16 @@ export declare namespace lb {
     }
     interface LoadBalancerSubnetMapping {
         /**
-         * The allocation ID of the Elastic IP address.
+         * The allocation ID of the Elastic IP address for an internet-facing load balancer.
          */
         allocationId?: string;
         /**
-         * An ipv6 address within the subnet to assign to the internet-facing load balancer.
+         * The IPv6 address. You associate IPv6 CIDR blocks with your VPC and choose the subnets where you launch both internet-facing and internal Application Load Balancers or Network Load Balancers.
          */
         ipv6Address?: string;
         outpostId: string;
         /**
-         * A private ipv4 address within the subnet to assign to the internal-facing load balancer.
+         * The private IPv4 address for an internal load balancer.
          */
         privateIpv4Address?: string;
         /**
@@ -33024,7 +33343,25 @@ export declare namespace lightsail {
         certificateName: string;
         domainNames: string[];
     }
+    interface InstanceAddOn {
+        /**
+         * The daily time when an automatic snapshot will be created. Must be in HH:00 format, and in an hourly increment and specified in Coordinated Universal Time (UTC). The snapshot will be automatically created between the time specified and up to 45 minutes after.
+         */
+        snapshotTime: string;
+        /**
+         * The status of the add on. Valid Values: `Enabled`, `Disabled`.
+         */
+        status: string;
+        /**
+         * The add-on type. There is currently only one valid type `AutoSnapshot`.
+         */
+        type: string;
+    }
     interface InstancePublicPortsPortInfo {
+        /**
+         * Set of CIDR aliases that define access for a preconfigured range of IP addresses.
+         */
+        cidrListAliases: string[];
         /**
          * Set of CIDR blocks.
          */
@@ -39234,6 +39571,16 @@ export declare namespace rds {
         name: string;
         values: string[];
     }
+    interface GetInstancesFilter {
+        /**
+         * Name of the filter field. Valid values can be found in the [RDS DescribeDBClusters API Reference](https://docs.aws.amazon.com/AmazonRDS/latest/APIReference/API_DescribeDBClusters.html).
+         */
+        name: string;
+        /**
+         * Set of values that are accepted for the given filter field. Results will be selected if any given value matches.
+         */
+        values: string[];
+    }
     interface GetProxyAuth {
         authScheme: string;
         description: string;
@@ -41109,7 +41456,7 @@ export declare namespace s3 {
          */
         account?: string;
         /**
-         * The name of the S3 bucket where you want Amazon S3 to store replicas of the objects identified by the rule.
+         * The Amazon Resource Name (ARN) of the bucket where you want Amazon S3 to store the results.
          */
         bucket: string;
         /**
@@ -41998,6 +42345,40 @@ export declare namespace s3control {
             [key: string]: string;
         };
     }
+    interface GetMultiRegionAccessPointPublicAccessBlock {
+        /**
+         * Specifies whether Amazon S3 should block public access control lists (ACLs). When set to `true` causes the following behavior:
+         * * PUT Bucket acl and PUT Object acl calls fail if the specified ACL is public.
+         * * PUT Object calls fail if the request includes a public ACL.
+         * * PUT Bucket calls fail if the request includes a public ACL.
+         */
+        blockPublicAcls: boolean;
+        /**
+         * Specifies whether Amazon S3 should block public bucket policies for buckets in this account. When set to `true` causes Amazon S3 to:
+         * * Reject calls to PUT Bucket policy if the specified bucket policy allows public access.
+         */
+        blockPublicPolicy: boolean;
+        /**
+         * Specifies whether Amazon S3 should ignore public ACLs for buckets in this account. When set to `true` causes Amazon S3 to:
+         * * Ignore all public ACLs on buckets in this account and any objects that they contain.
+         */
+        ignorePublicAcls: boolean;
+        /**
+         * Specifies whether Amazon S3 should restrict public bucket policies for buckets in this account. When set to `true`:
+         * * Only the bucket owner and AWS Services can access buckets with public policies.
+         */
+        restrictPublicBuckets: boolean;
+    }
+    interface GetMultiRegionAccessPointRegion {
+        /**
+         * The name of the bucket.
+         */
+        bucket: string;
+        /**
+         * The name of the region.
+         */
+        region: string;
+    }
     interface MultiRegionAccessPointDetails {
         name: string;
         publicAccessBlock?: outputs.s3control.MultiRegionAccessPointDetailsPublicAccessBlock;
@@ -42097,10 +42478,22 @@ export declare namespace s3control {
          * S3 Storage Lens activity metrics. See Activity Metrics below for more details.
          */
         activityMetrics?: outputs.s3control.StorageLensConfigurationStorageLensConfigurationAccountLevelActivityMetrics;
+        /**
+         * Advanced cost-optimization metrics for S3 Storage Lens. See Advanced Cost-Optimization Metrics below for more details.
+         */
+        advancedCostOptimizationMetrics?: outputs.s3control.StorageLensConfigurationStorageLensConfigurationAccountLevelAdvancedCostOptimizationMetrics;
+        /**
+         * Advanced data-protection metrics for S3 Storage Lens. See Advanced Data-Protection Metrics below for more details.
+         */
+        advancedDataProtectionMetrics?: outputs.s3control.StorageLensConfigurationStorageLensConfigurationAccountLevelAdvancedDataProtectionMetrics;
         /**
          * S3 Storage Lens bucket-level configuration. See Bucket Level below for more details.
          */
         bucketLevel: outputs.s3control.StorageLensConfigurationStorageLensConfigurationAccountLevelBucketLevel;
+        /**
+         * Detailed status code metrics for S3 Storage Lens. See Detailed Status Code Metrics below for more details.
+         */
+        detailedStatusCodeMetrics?: outputs.s3control.StorageLensConfigurationStorageLensConfigurationAccountLevelDetailedStatusCodeMetrics;
     }
     interface StorageLensConfigurationStorageLensConfigurationAccountLevelActivityMetrics {
         /**
@@ -42108,11 +42501,35 @@ export declare namespace s3control {
          */
         enabled?: boolean;
     }
+    interface StorageLensConfigurationStorageLensConfigurationAccountLevelAdvancedCostOptimizationMetrics {
+        /**
+         * Whether advanced cost-optimization metrics are enabled.
+         */
+        enabled?: boolean;
+    }
+    interface StorageLensConfigurationStorageLensConfigurationAccountLevelAdvancedDataProtectionMetrics {
+        /**
+         * Whether advanced data-protection metrics are enabled.
+         */
+        enabled?: boolean;
+    }
     interface StorageLensConfigurationStorageLensConfigurationAccountLevelBucketLevel {
         /**
          * S3 Storage Lens activity metrics. See Activity Metrics above for more details.
          */
         activityMetrics?: outputs.s3control.StorageLensConfigurationStorageLensConfigurationAccountLevelBucketLevelActivityMetrics;
+        /**
+         * Advanced cost-optimization metrics for S3 Storage Lens. See Advanced Cost-Optimization Metrics above for more details.
+         */
+        advancedCostOptimizationMetrics?: outputs.s3control.StorageLensConfigurationStorageLensConfigurationAccountLevelBucketLevelAdvancedCostOptimizationMetrics;
+        /**
+         * Advanced data-protection metrics for S3 Storage Lens. See Advanced Data-Protection Metrics above for more details.
+         */
+        advancedDataProtectionMetrics?: outputs.s3control.StorageLensConfigurationStorageLensConfigurationAccountLevelBucketLevelAdvancedDataProtectionMetrics;
+        /**
+         * Detailed status code metrics for S3 Storage Lens. See Detailed Status Code Metrics above for more details.
+         */
+        detailedStatusCodeMetrics?: outputs.s3control.StorageLensConfigurationStorageLensConfigurationAccountLevelBucketLevelDetailedStatusCodeMetrics;
         /**
          * Prefix-level metrics for S3 Storage Lens. See Prefix Level below for more details.
          */
@@ -42124,6 +42541,24 @@ export declare namespace s3control {
          */
         enabled?: boolean;
     }
+    interface StorageLensConfigurationStorageLensConfigurationAccountLevelBucketLevelAdvancedCostOptimizationMetrics {
+        /**
+         * Whether advanced cost-optimization metrics are enabled.
+         */
+        enabled?: boolean;
+    }
+    interface StorageLensConfigurationStorageLensConfigurationAccountLevelBucketLevelAdvancedDataProtectionMetrics {
+        /**
+         * Whether advanced data-protection metrics are enabled.
+         */
+        enabled?: boolean;
+    }
+    interface StorageLensConfigurationStorageLensConfigurationAccountLevelBucketLevelDetailedStatusCodeMetrics {
+        /**
+         * Whether detailed status code metrics are enabled.
+         */
+        enabled?: boolean;
+    }
     interface StorageLensConfigurationStorageLensConfigurationAccountLevelBucketLevelPrefixLevel {
         /**
          * Prefix-level storage metrics for S3 Storage Lens. See Prefix Level Storage Metrics below for more details.
@@ -42154,6 +42589,12 @@ export declare namespace s3control {
          */
         minStorageBytesPercentage?: number;
     }
+    interface StorageLensConfigurationStorageLensConfigurationAccountLevelDetailedStatusCodeMetrics {
+        /**
+         * Whether detailed status code metrics are enabled.
+         */
+        enabled?: boolean;
+    }
     interface StorageLensConfigurationStorageLensConfigurationAwsOrg {
         /**
          * The Amazon Resource Name (ARN) of the Amazon Web Services organization.
@@ -46350,6 +46791,22 @@ export declare namespace ssoadmin {
          */
         path?: string;
     }
+    interface InstanceAccessControlAttributesAttribute {
+        /**
+         * The name of the attribute associated with your identities in your identity source. This is used to map a specified attribute in your identity source with an attribute in AWS SSO.
+         */
+        key: string;
+        /**
+         * The value used for mapping a specified attribute to an identity source. See AccessControlAttributeValue
+         */
+        values: outputs.ssoadmin.InstanceAccessControlAttributesAttributeValue[];
+    }
+    interface InstanceAccessControlAttributesAttributeValue {
+        /**
+         * The identity source to use when mapping a specified attribute to AWS SSO.
+         */
+        sources: string[];
+    }
     interface PermissionsBoundaryAttachmentPermissionsBoundary {
         /**
          * Specifies the name and path of a customer managed policy. See below.
@@ -47606,6 +48063,10 @@ export declare namespace wafv2 {
          * Instructs AWS WAF to block the web request. See Block below for details.
          */
         block?: outputs.wafv2.RuleGroupRuleActionBlock;
+        /**
+         * Instructs AWS WAF to run a `CAPTCHA` check against the web request. See Captcha below for details.
+         */
+        captcha?: outputs.wafv2.RuleGroupRuleActionCaptcha;
         /**
          * Instructs AWS WAF to count the web request and allow it. See Count below for details.
          */
@@ -47663,6 +48124,28 @@ export declare namespace wafv2 {
          */
         value: string;
     }
+    interface RuleGroupRuleActionCaptcha {
+        /**
+         * Defines custom handling for the web request. See Custom Request Handling below for details.
+         */
+        customRequestHandling?: outputs.wafv2.RuleGroupRuleActionCaptchaCustomRequestHandling;
+    }
+    interface RuleGroupRuleActionCaptchaCustomRequestHandling {
+        /**
+         * The `insertHeader` blocks used to define HTTP headers added to the request. See Custom HTTP Header below for details.
+         */
+        insertHeaders: outputs.wafv2.RuleGroupRuleActionCaptchaCustomRequestHandlingInsertHeader[];
+    }
+    interface RuleGroupRuleActionCaptchaCustomRequestHandlingInsertHeader {
+        /**
+         * The label string.
+         */
+        name: string;
+        /**
+         * The value of the custom header.
+         */
+        value: string;
+    }
     interface RuleGroupRuleActionCount {
         /**
          * Defines custom handling for the web request. See Custom Request Handling below for details.
@@ -67132,6 +67615,10 @@ export declare namespace wafv2 {
          * Instructs AWS WAF to run a Captcha check against the web request. See Captcha below for details.
          */
         captcha?: outputs.wafv2.WebAclRuleActionCaptcha;
+        /**
+         * Instructs AWS WAF to run a check against the request to verify that the request is coming from a legitimate client session. See Challenge below for details.
+         */
+        challenge?: outputs.wafv2.WebAclRuleActionChallenge;
         /**
          * Instructs AWS WAF to count the web request and allow it. See Count below for details.
          */
@@ -67211,6 +67698,28 @@ export declare namespace wafv2 {
          */
         value: string;
     }
+    interface WebAclRuleActionChallenge {
+        /**
+         * Defines custom handling for the web request. See Custom Request Handling below for details.
+         */
+        customRequestHandling?: outputs.wafv2.WebAclRuleActionChallengeCustomRequestHandling;
+    }
+    interface WebAclRuleActionChallengeCustomRequestHandling {
+        /**
+         * The `insertHeader` blocks used to define HTTP headers added to the request. See Custom HTTP Header below for details.
+         */
+        insertHeaders: outputs.wafv2.WebAclRuleActionChallengeCustomRequestHandlingInsertHeader[];
+    }
+    interface WebAclRuleActionChallengeCustomRequestHandlingInsertHeader {
+        /**
+         * Label string.
+         */
+        name: string;
+        /**
+         * Value of the custom header.
+         */
+        value: string;
+    }
     interface WebAclRuleActionCount {
         /**
          * Defines custom handling for the web request. See Custom Request Handling below for details.
@@ -82211,6 +82720,10 @@ export declare namespace wafv2 {
          * @deprecated Use rule_action_override instead
          */
         excludedRules?: outputs.wafv2.WebAclRuleStatementManagedRuleGroupStatementExcludedRule[];
+        /**
+         * Additional information that's used by a managed rule group. Only one rule attribute is allowed in each config. See Managed Rule Group Configs for more details
+         */
+        managedRuleGroupConfigs?: outputs.wafv2.WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfig[];
         /**
          * Name of the managed rule group.
          */
@@ -82238,6 +82751,46 @@ export declare namespace wafv2 {
          */
         name: string;
     }
+    interface WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfig {
+        /**
+         * Additional configuration for using the Bot Control managed rule group. Use this to specify the inspection level that you want to use. See AWS Managed Rules Bot Control Rule Set for more details
+         */
+        awsManagedRulesBotControlRuleSet?: outputs.wafv2.WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesBotControlRuleSet;
+        /**
+         * The path of the login endpoint for your application.
+         */
+        loginPath?: string;
+        /**
+         * Details about your login page password field. See Password Field for more details.
+         */
+        passwordField?: outputs.wafv2.WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigPasswordField;
+        /**
+         * The payload type for your login endpoint, either JSON or form encoded.
+         */
+        payloadType?: string;
+        /**
+         * Details about your login page username field. See Username Field for more details.
+         */
+        usernameField?: outputs.wafv2.WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigUsernameField;
+    }
+    interface WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesBotControlRuleSet {
+        /**
+         * The inspection level to use for the Bot Control rule group.
+         */
+        inspectionLevel: string;
+    }
+    interface WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigPasswordField {
+        /**
+         * The name of the username field.
+         */
+        identifier: string;
+    }
+    interface WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigUsernameField {
+        /**
+         * The name of the username field.
+         */
+        identifier: string;
+    }
     interface WebAclRuleStatementManagedRuleGroupStatementRuleActionOverride {
         /**
          * Override action to use, in place of the configured action of the rule in the rule group. See Action below for details.