@pulumi/aws 5.37.0-alpha.1682017504 → 5.37.0

package/types/output.d.ts

@@ -9587,6 +9587,270 @@ export declare namespace chime {
         username: string;
     }
 }
+export declare namespace chimesdkmediapipelines {
+    interface MediaInsightsPipelineConfigurationElement {
+        /**
+         * Configuration for Amazon Transcribe Call Analytics processor.
+         */
+        amazonTranscribeCallAnalyticsProcessorConfiguration?: outputs.chimesdkmediapipelines.MediaInsightsPipelineConfigurationElementAmazonTranscribeCallAnalyticsProcessorConfiguration;
+        /**
+         * Configuration for Amazon Transcribe processor.
+         */
+        amazonTranscribeProcessorConfiguration?: outputs.chimesdkmediapipelines.MediaInsightsPipelineConfigurationElementAmazonTranscribeProcessorConfiguration;
+        /**
+         * Configuration for Kinesis Data Stream sink.
+         */
+        kinesisDataStreamSinkConfiguration?: outputs.chimesdkmediapipelines.MediaInsightsPipelineConfigurationElementKinesisDataStreamSinkConfiguration;
+        /**
+         * Configuration for Lambda Function sink.
+         */
+        lambdaFunctionSinkConfiguration?: outputs.chimesdkmediapipelines.MediaInsightsPipelineConfigurationElementLambdaFunctionSinkConfiguration;
+        /**
+         * Configuration for S3 recording sink.
+         */
+        s3RecordingSinkConfiguration?: outputs.chimesdkmediapipelines.MediaInsightsPipelineConfigurationElementS3RecordingSinkConfiguration;
+        /**
+         * Configuration for SNS Topic sink.
+         */
+        snsTopicSinkConfiguration?: outputs.chimesdkmediapipelines.MediaInsightsPipelineConfigurationElementSnsTopicSinkConfiguration;
+        /**
+         * Configuration for SQS Queue sink.
+         */
+        sqsQueueSinkConfiguration?: outputs.chimesdkmediapipelines.MediaInsightsPipelineConfigurationElementSqsQueueSinkConfiguration;
+        /**
+         * Element type.
+         */
+        type: string;
+        /**
+         * Configuration for Voice analytics processor.
+         */
+        voiceAnalyticsProcessorConfiguration?: outputs.chimesdkmediapipelines.MediaInsightsPipelineConfigurationElementVoiceAnalyticsProcessorConfiguration;
+    }
+    interface MediaInsightsPipelineConfigurationElementAmazonTranscribeCallAnalyticsProcessorConfiguration {
+        /**
+         * Filter for category events to be delivered to insights target.
+         */
+        callAnalyticsStreamCategories?: string[];
+        /**
+         * Labels all personally identifiable information (PII) identified in Utterance events.
+         */
+        contentIdentificationType?: string;
+        /**
+         * Redacts all personally identifiable information (PII) identified in Utterance events.
+         */
+        contentRedactionType?: string;
+        /**
+         * Enables partial result stabilization in Utterance events.
+         */
+        enablePartialResultsStabilization?: boolean;
+        /**
+         * Filters partial Utterance events from delivery to the insights target.
+         */
+        filterPartialResults?: boolean;
+        /**
+         * Language code for the transcription model.
+         */
+        languageCode: string;
+        /**
+         * Name of custom language model for transcription.
+         */
+        languageModelName?: string;
+        /**
+         * Level of stability to use when partial results stabilization is enabled.
+         */
+        partialResultsStability?: string;
+        /**
+         * Types of personally identifiable information (PII) to redact from an Utterance event.
+         */
+        piiEntityTypes?: string;
+        /**
+         * Settings for post call analytics.
+         */
+        postCallAnalyticsSettings?: outputs.chimesdkmediapipelines.MediaInsightsPipelineConfigurationElementAmazonTranscribeCallAnalyticsProcessorConfigurationPostCallAnalyticsSettings;
+        /**
+         * Method for applying a vocabulary filter to Utterance events.
+         */
+        vocabularyFilterMethod?: string;
+        /**
+         * Name of the custom vocabulary filter to use when processing Utterance events.
+         */
+        vocabularyFilterName?: string;
+        /**
+         * Name of the custom vocabulary to use when processing Utterance events.
+         */
+        vocabularyName?: string;
+    }
+    interface MediaInsightsPipelineConfigurationElementAmazonTranscribeCallAnalyticsProcessorConfigurationPostCallAnalyticsSettings {
+        /**
+         * Should output be redacted.
+         */
+        contentRedactionOutput?: string;
+        /**
+         * ARN of the role used by AWS Transcribe to upload your post call analysis.
+         */
+        dataAccessRoleArn: string;
+        /**
+         * ID of the KMS key used to encrypt the output.
+         */
+        outputEncryptionKmsKeyId?: string;
+        /**
+         * The Amazon S3 location where you want your Call Analytics post-call transcription output stored.
+         */
+        outputLocation: string;
+    }
+    interface MediaInsightsPipelineConfigurationElementAmazonTranscribeProcessorConfiguration {
+        /**
+         * Labels all personally identifiable information (PII) identified in Utterance events.
+         */
+        contentIdentificationType?: string;
+        /**
+         * Redacts all personally identifiable information (PII) identified in Utterance events.
+         */
+        contentRedactionType?: string;
+        /**
+         * Enables partial result stabilization in Utterance events.
+         */
+        enablePartialResultsStabilization?: boolean;
+        /**
+         * Filters partial Utterance events from delivery to the insights target.
+         */
+        filterPartialResults?: boolean;
+        /**
+         * Language code for the transcription model.
+         */
+        languageCode: string;
+        /**
+         * Name of custom language model for transcription.
+         */
+        languageModelName?: string;
+        /**
+         * Level of stability to use when partial results stabilization is enabled.
+         */
+        partialResultsStability?: string;
+        /**
+         * Types of personally identifiable information (PII) to redact from an Utterance event.
+         */
+        piiEntityTypes?: string;
+        /**
+         * Enables speaker partitioning (diarization) in your Transcript events.
+         */
+        showSpeakerLabel?: boolean;
+        /**
+         * Method for applying a vocabulary filter to Utterance events.
+         */
+        vocabularyFilterMethod?: string;
+        /**
+         * Name of the custom vocabulary filter to use when processing Utterance events.
+         */
+        vocabularyFilterName?: string;
+        /**
+         * Name of the custom vocabulary to use when processing Utterance events.
+         */
+        vocabularyName?: string;
+    }
+    interface MediaInsightsPipelineConfigurationElementKinesisDataStreamSinkConfiguration {
+        /**
+         * Kinesis Data Stream to deliver results.
+         */
+        insightsTarget: string;
+    }
+    interface MediaInsightsPipelineConfigurationElementLambdaFunctionSinkConfiguration {
+        /**
+         * Kinesis Data Stream to deliver results.
+         */
+        insightsTarget: string;
+    }
+    interface MediaInsightsPipelineConfigurationElementS3RecordingSinkConfiguration {
+        /**
+         * S3 URI to deliver recordings.
+         */
+        destination?: string;
+    }
+    interface MediaInsightsPipelineConfigurationElementSnsTopicSinkConfiguration {
+        /**
+         * Kinesis Data Stream to deliver results.
+         */
+        insightsTarget: string;
+    }
+    interface MediaInsightsPipelineConfigurationElementSqsQueueSinkConfiguration {
+        /**
+         * Kinesis Data Stream to deliver results.
+         */
+        insightsTarget: string;
+    }
+    interface MediaInsightsPipelineConfigurationElementVoiceAnalyticsProcessorConfiguration {
+        /**
+         * Enable speaker search.
+         */
+        speakerSearchStatus: string;
+        /**
+         * Enable voice tone analysis.
+         */
+        voiceToneAnalysisStatus: string;
+    }
+    interface MediaInsightsPipelineConfigurationRealTimeAlertConfiguration {
+        /**
+         * Disables real time alert rules.
+         */
+        disabled: boolean;
+        /**
+         * Collection of real time alert rules
+         */
+        rules: outputs.chimesdkmediapipelines.MediaInsightsPipelineConfigurationRealTimeAlertConfigurationRule[];
+    }
+    interface MediaInsightsPipelineConfigurationRealTimeAlertConfigurationRule {
+        /**
+         * Configuration for an issue detection rule.
+         */
+        issueDetectionConfiguration?: outputs.chimesdkmediapipelines.MediaInsightsPipelineConfigurationRealTimeAlertConfigurationRuleIssueDetectionConfiguration;
+        /**
+         * Configuration for a keyword match rule.
+         */
+        keywordMatchConfiguration?: outputs.chimesdkmediapipelines.MediaInsightsPipelineConfigurationRealTimeAlertConfigurationRuleKeywordMatchConfiguration;
+        /**
+         * Configuration for a sentiment rule.
+         */
+        sentimentConfiguration?: outputs.chimesdkmediapipelines.MediaInsightsPipelineConfigurationRealTimeAlertConfigurationRuleSentimentConfiguration;
+        /**
+         * Element type.
+         */
+        type: string;
+    }
+    interface MediaInsightsPipelineConfigurationRealTimeAlertConfigurationRuleIssueDetectionConfiguration {
+        /**
+         * Rule name.
+         */
+        ruleName: string;
+    }
+    interface MediaInsightsPipelineConfigurationRealTimeAlertConfigurationRuleKeywordMatchConfiguration {
+        /**
+         * Collection of keywords to match.
+         */
+        keywords: string[];
+        /**
+         * Negate the rule.
+         */
+        negate: boolean;
+        /**
+         * Rule name.
+         */
+        ruleName: string;
+    }
+    interface MediaInsightsPipelineConfigurationRealTimeAlertConfigurationRuleSentimentConfiguration {
+        /**
+         * Rule name.
+         */
+        ruleName: string;
+        /**
+         * Sentiment type to match.
+         */
+        sentimentType: string;
+        /**
+         * Analysis interval.
+         */
+        timePeriod: number;
+    }
+}
 export declare namespace cloudformation {
     interface CloudFormationTypeLoggingConfig {
         /**
@@ -13470,6 +13734,8 @@ export declare namespace config {
         chimesdkmediapipelines?: string;
         chimesdkmeetings?: string;
         chimesdkmessaging?: string;
+        chimesdkvoice?: string;
+        cleanrooms?: string;
         cloud9?: string;
         cloudcontrol?: string;
         cloudcontrolapi?: string;
@@ -13533,6 +13799,7 @@ export declare namespace config {
         dlm?: string;
         dms?: string;
         docdb?: string;
+        docdbelastic?: string;
         drs?: string;
         ds?: string;
         dynamodb?: string;
@@ -20239,14 +20506,18 @@ export declare namespace ec2 {
          */
         coreCount?: number;
         /**
-         * The number of threads per CPU core. To disable Intel Hyper-Threading Technology for the instance, specify a value of 1.
+         * The number of threads per CPU core.
+         * To disable Intel Hyper-Threading Technology for the instance, specify a value of 1.
          * Otherwise, specify the default value of 2.
          */
         threadsPerCore?: number;
     }
     interface LaunchTemplateCreditSpecification {
         /**
-         * The credit option for CPU usage. Can be `"standard"` or `"unlimited"`. T3 instances are launched as unlimited by default. T2 instances are launched as standard by default.
+         * The credit option for CPU usage.
+         * Can be `standard` or `unlimited`.
+         * T3 instances are launched as `unlimited` by default.
+         * T2 instances are launched as `standard` by default.
          */
         cpuCredits?: string;
     }
@@ -20515,7 +20786,7 @@ export declare namespace ec2 {
     }
     interface LaunchTemplateMetadataOptions {
         /**
-         * Whether the metadata service is available. Can be `"enabled"` or `"disabled"`. (Default: `"enabled"`).
+         * Whether the metadata service is available. Can be `enabled` or `disabled`.
          */
         httpEndpoint: string;
         /**
@@ -20523,11 +20794,11 @@ export declare namespace ec2 {
          */
         httpProtocolIpv6?: string;
         /**
-         * The desired HTTP PUT response hop limit for instance metadata requests. The larger the number, the further instance metadata requests can travel. Can be an integer from `1` to `64`. (Default: `1`).
+         * The desired HTTP PUT response hop limit for instance metadata requests. The larger the number, the further instance metadata requests can travel. Can be an integer from `1` to `64`.
          */
         httpPutResponseHopLimit: number;
         /**
-         * Whether or not the metadata service requires session tokens, also referred to as _Instance Metadata Service Version 2 (IMDSv2)_. Can be `"optional"` or `"required"`. (Default: `"optional"`).
+         * Whether or not the metadata service requires session tokens, also referred to as _Instance Metadata Service Version 2 (IMDSv2)_. Can be `optional` or `required`.
          */
         httpTokens: string;
         /**
@@ -23138,6 +23409,9 @@ export declare namespace ecs {
         type: string;
     }
     interface ServiceAlarms {
+        /**
+         * One or more CloudWatch alarm names.
+         */
         alarmNames: string[];
         /**
          * Determines whether to use the CloudWatch alarm option in the service deployment process.
@@ -38341,7 +38615,7 @@ export declare namespace msk {
         /**
          * Specifies up to five security groups that control inbound and outbound traffic for the serverless cluster.
          */
-        securityGroupIds?: string[];
+        securityGroupIds: string[];
         /**
          * A list of subnets in at least two different Availability Zones that host your client applications.
          */
@@ -41354,6 +41628,32 @@ export declare namespace pinpoint {
         start?: string;
     }
 }
+export declare namespace pipes {
+    interface PipeSourceParameters {
+        /**
+         * The collection of event patterns used to filter events. Detailed below.
+         */
+        filterCriteria?: outputs.pipes.PipeSourceParametersFilterCriteria;
+    }
+    interface PipeSourceParametersFilterCriteria {
+        /**
+         * An array of up to 5 event patterns. Detailed below.
+         */
+        filters?: outputs.pipes.PipeSourceParametersFilterCriteriaFilter[];
+    }
+    interface PipeSourceParametersFilterCriteriaFilter {
+        /**
+         * The event pattern. At most 4096 characters.
+         */
+        pattern: string;
+    }
+    interface PipeTargetParameters {
+        /**
+         * Valid JSON text passed to the target. In this case, nothing from the event itself is passed to the target.
+         */
+        inputTemplate?: string;
+    }
+}
 export declare namespace pricing {
     interface GetProductFilter {
         /**
@@ -45759,6 +46059,204 @@ export declare namespace sagemaker {
          */
         secretArn?: string;
     }
+    interface DataQualityJobDefinitionDataQualityAppSpecification {
+        /**
+         * Sets the environment variables in the container that the monitoring job runs. A list of key value pairs.
+         */
+        environment?: {
+            [key: string]: string;
+        };
+        /**
+         * The container image that the data quality monitoring job runs.
+         */
+        imageUri: string;
+        /**
+         * An Amazon S3 URI to a script that is called after analysis has been performed. Applicable only for the built-in (first party) containers.
+         */
+        postAnalyticsProcessorSourceUri?: string;
+        /**
+         * An Amazon S3 URI to a script that is called per row prior to running analysis. It can base64 decode the payload and convert it into a flatted json so that the built-in container can use the converted data. Applicable only for the built-in (first party) containers.
+         */
+        recordPreprocessorSourceUri?: string;
+    }
+    interface DataQualityJobDefinitionDataQualityBaselineConfig {
+        /**
+         * The constraints resource for a monitoring job. Fields are documented below.
+         */
+        constraintsResource?: outputs.sagemaker.DataQualityJobDefinitionDataQualityBaselineConfigConstraintsResource;
+        /**
+         * The statistics resource for a monitoring job. Fields are documented below.
+         */
+        statisticsResource?: outputs.sagemaker.DataQualityJobDefinitionDataQualityBaselineConfigStatisticsResource;
+    }
+    interface DataQualityJobDefinitionDataQualityBaselineConfigConstraintsResource {
+        /**
+         * The Amazon S3 URI for the constraints resource.
+         */
+        s3Uri?: string;
+    }
+    interface DataQualityJobDefinitionDataQualityBaselineConfigStatisticsResource {
+        /**
+         * The Amazon S3 URI for the statistics resource.
+         */
+        s3Uri?: string;
+    }
+    interface DataQualityJobDefinitionDataQualityJobInput {
+        /**
+         * Input object for the batch transform job. Fields are documented below.
+         */
+        batchTransformInput?: outputs.sagemaker.DataQualityJobDefinitionDataQualityJobInputBatchTransformInput;
+        /**
+         * Input object for the endpoint. Fields are documented below.
+         */
+        endpointInput?: outputs.sagemaker.DataQualityJobDefinitionDataQualityJobInputEndpointInput;
+    }
+    interface DataQualityJobDefinitionDataQualityJobInputBatchTransformInput {
+        /**
+         * The Amazon S3 location being used to capture the data.
+         */
+        dataCapturedDestinationS3Uri: string;
+        /**
+         * The dataset format for your batch transform job. Fields are documented below.
+         */
+        datasetFormat: outputs.sagemaker.DataQualityJobDefinitionDataQualityJobInputBatchTransformInputDatasetFormat;
+        /**
+         * Path to the filesystem where the batch transform data is available to the container. Defaults to `/opt/ml/processing/input`.
+         */
+        localPath?: string;
+        /**
+         * Whether input data distributed in Amazon S3 is fully replicated or sharded by an S3 key. Defaults to `FullyReplicated`. Valid values are `FullyReplicated` or `ShardedByS3Key`
+         */
+        s3DataDistributionType: string;
+        /**
+         * Whether the `Pipe` or `File` is used as the input mode for transferring data for the monitoring job. `Pipe` mode is recommended for large datasets. `File` mode is useful for small files that fit in memory. Defaults to `File`.  Valid values are `Pipe` or `File`
+         */
+        s3InputMode: string;
+    }
+    interface DataQualityJobDefinitionDataQualityJobInputBatchTransformInputDatasetFormat {
+        /**
+         * The CSV dataset used in the monitoring job. Fields are documented below.
+         */
+        csv?: outputs.sagemaker.DataQualityJobDefinitionDataQualityJobInputBatchTransformInputDatasetFormatCsv;
+        /**
+         * The JSON dataset used in the monitoring job. Fields are documented below.
+         */
+        json?: outputs.sagemaker.DataQualityJobDefinitionDataQualityJobInputBatchTransformInputDatasetFormatJson;
+    }
+    interface DataQualityJobDefinitionDataQualityJobInputBatchTransformInputDatasetFormatCsv {
+        /**
+         * Indicates if the CSV data has a header.
+         */
+        header?: boolean;
+    }
+    interface DataQualityJobDefinitionDataQualityJobInputBatchTransformInputDatasetFormatJson {
+        /**
+         * Indicates if the file should be read as a json object per line.
+         */
+        line?: boolean;
+    }
+    interface DataQualityJobDefinitionDataQualityJobInputEndpointInput {
+        /**
+         * An endpoint in customer's account which has `dataCaptureConfig` enabled.
+         */
+        endpointName: string;
+        /**
+         * Path to the filesystem where the endpoint data is available to the container. Defaults to `/opt/ml/processing/input`.
+         */
+        localPath?: string;
+        /**
+         * Whether input data distributed in Amazon S3 is fully replicated or sharded by an S3 key. Defaults to `FullyReplicated`. Valid values are `FullyReplicated` or `ShardedByS3Key`
+         */
+        s3DataDistributionType: string;
+        /**
+         * Whether the `Pipe` or `File` is used as the input mode for transferring data for the monitoring job. `Pipe` mode is recommended for large datasets. `File` mode is useful for small files that fit in memory. Defaults to `File`.  Valid values are `Pipe` or `File`
+         */
+        s3InputMode: string;
+    }
+    interface DataQualityJobDefinitionDataQualityJobOutputConfig {
+        /**
+         * The AWS Key Management Service (AWS KMS) key that Amazon SageMaker uses to encrypt the model artifacts at rest using Amazon S3 server-side encryption.
+         */
+        kmsKeyId?: string;
+        /**
+         * Monitoring outputs for monitoring jobs. This is where the output of the periodic monitoring jobs is uploaded. Fields are documented below.
+         */
+        monitoringOutputs: outputs.sagemaker.DataQualityJobDefinitionDataQualityJobOutputConfigMonitoringOutputs;
+    }
+    interface DataQualityJobDefinitionDataQualityJobOutputConfigMonitoringOutputs {
+        /**
+         * The Amazon S3 storage location where the results of a monitoring job are saved. Fields are documented below.
+         */
+        s3Output: outputs.sagemaker.DataQualityJobDefinitionDataQualityJobOutputConfigMonitoringOutputsS3Output;
+    }
+    interface DataQualityJobDefinitionDataQualityJobOutputConfigMonitoringOutputsS3Output {
+        /**
+         * Path to the filesystem where the batch transform data is available to the container. Defaults to `/opt/ml/processing/input`.
+         */
+        localPath?: string;
+        /**
+         * Whether to upload the results of the monitoring job continuously or after the job completes. Valid values are `Continuous` or `EndOfJob`
+         */
+        s3UploadMode: string;
+        /**
+         * The Amazon S3 URI for the constraints resource.
+         */
+        s3Uri: string;
+    }
+    interface DataQualityJobDefinitionJobResources {
+        /**
+         * The configuration for the cluster resources used to run the processing job. Fields are documented below.
+         */
+        clusterConfig: outputs.sagemaker.DataQualityJobDefinitionJobResourcesClusterConfig;
+    }
+    interface DataQualityJobDefinitionJobResourcesClusterConfig {
+        /**
+         * The number of ML compute instances to use in the model monitoring job. For distributed processing jobs, specify a value greater than 1.
+         */
+        instanceCount: number;
+        /**
+         * The ML compute instance type for the processing job.
+         */
+        instanceType: string;
+        /**
+         * The AWS Key Management Service (AWS KMS) key that Amazon SageMaker uses to encrypt data on the storage volume attached to the ML compute instance(s) that run the model monitoring job.
+         */
+        volumeKmsKeyId?: string;
+        /**
+         * The size of the ML storage volume, in gigabytes, that you want to provision. You must specify sufficient ML storage for your scenario.
+         */
+        volumeSizeInGb: number;
+    }
+    interface DataQualityJobDefinitionNetworkConfig {
+        /**
+         * Whether to encrypt all communications between the instances used for the monitoring jobs. Choose `true` to encrypt communications. Encryption provides greater security for distributed jobs, but the processing might take longer.
+         */
+        enableInterContainerTrafficEncryption?: boolean;
+        /**
+         * Whether to allow inbound and outbound network calls to and from the containers used for the monitoring job.
+         */
+        enableNetworkIsolation?: boolean;
+        /**
+         * Specifies a VPC that your training jobs and hosted models have access to. Control access to and from your training and model containers by configuring the VPC. Fields are documented below.
+         */
+        vpcConfig?: outputs.sagemaker.DataQualityJobDefinitionNetworkConfigVpcConfig;
+    }
+    interface DataQualityJobDefinitionNetworkConfigVpcConfig {
+        /**
+         * The VPC security group IDs, in the form sg-xxxxxxxx. Specify the security groups for the VPC that is specified in the `subnets` field.
+         */
+        securityGroupIds: string[];
+        /**
+         * The ID of the subnets in the VPC to which you want to connect your training job or model.
+         */
+        subnets: string[];
+    }
+    interface DataQualityJobDefinitionStoppingCondition {
+        /**
+         * The maximum runtime allowed in seconds.
+         */
+        maxRuntimeInSeconds: number;
+    }
     interface DeviceDevice {
         /**
          * A description for the device.
@@ -46679,6 +47177,26 @@ export declare namespace sagemaker {
         securityGroupIds: string[];
         subnets: string[];
     }
+    interface MonitoringScheduleMonitoringScheduleConfig {
+        /**
+         * The name of the monitoring job definition to schedule.
+         */
+        monitoringJobDefinitionName: string;
+        /**
+         * The type of the monitoring job definition to schedule. Valid values are `DataQuality`, `ModelQuality`, `ModelBias` or `ModelExplainability`
+         */
+        monitoringType: string;
+        /**
+         * Configures the monitoring schedule. Fields are documented below.
+         */
+        scheduleConfig: outputs.sagemaker.MonitoringScheduleMonitoringScheduleConfigScheduleConfig;
+    }
+    interface MonitoringScheduleMonitoringScheduleConfigScheduleConfig {
+        /**
+         * A cron expression that describes details about the monitoring schedule. For example, and hourly schedule would be `cron(0 * ? * * *)`.
+         */
+        scheduleExpression: string;
+    }
     interface NotebookInstanceInstanceMetadataServiceConfiguration {
         /**
          * Indicates the minimum IMDS version that the notebook instance supports. When passed "1" is passed. This means that both IMDSv1 and IMDSv2 are supported. Valid values are `1` and `2`.
@@ -50753,6 +51271,88 @@ export declare namespace vpclattice {
         domainName: string;
         hostedZoneId: string;
     }
+    interface ServiceNetworkServiceAssociationDnsEntry {
+        /**
+         * The domain name of the service.
+         */
+        domainName: string;
+        /**
+         * The ID of the hosted zone.
+         */
+        hostedZoneId: string;
+    }
+    interface TargetGroupConfig {
+        /**
+         * The health check configuration.
+         */
+        healthCheck?: outputs.vpclattice.TargetGroupConfigHealthCheck;
+        /**
+         * The type of IP address used for the target group. Valid values: `IPV4` | `IPV6`
+         */
+        ipAddressType: string;
+        /**
+         * The port on which the targets are listening.
+         */
+        port: number;
+        /**
+         * The protocol to use for routing traffic to the targets. Valid Values are `HTTP` | `HTTPS`
+         */
+        protocol: string;
+        /**
+         * The protocol version. Valid Values are `HTTP1` | `HTTP2` | `GRPC`. Default value is `HTTP1`.
+         */
+        protocolVersion?: string;
+        /**
+         * The ID of the VPC.
+         */
+        vpcIdentifier: string;
+    }
+    interface TargetGroupConfigHealthCheck {
+        /**
+         * Indicates whether health checking is enabled. Defaults to `true`.
+         */
+        enabled?: boolean;
+        /**
+         * The approximate amount of time, in seconds, between health checks of an individual target. The range is 5–300 seconds. The default is 30 seconds.
+         */
+        healthCheckIntervalSeconds?: number;
+        /**
+         * The amount of time, in seconds, to wait before reporting a target as unhealthy. The range is 1–120 seconds. The default is 5 seconds.
+         * * `healthyThresholdCount ` - (Optional) The number of consecutive successful health checks required before considering an unhealthy target healthy. The range is 2–10. The default is 5.
+         */
+        healthCheckTimeoutSeconds?: number;
+        healthyThresholdCount?: number;
+        /**
+         * The codes to use when checking for a successful response from a target. These are called _Success codes_ in the console.
+         */
+        matcher?: outputs.vpclattice.TargetGroupConfigHealthCheckMatcher;
+        /**
+         * The destination for health checks on the targets. If the protocol version is HTTP/1.1 or HTTP/2, specify a valid URI (for example, /path?query). The default path is `/`. Health checks are not supported if the protocol version is gRPC, however, you can choose HTTP/1.1 or HTTP/2 and specify a valid URI.
+         */
+        path?: string;
+        /**
+         * The port used when performing health checks on targets. The default setting is the port that a target receives traffic on.
+         */
+        port: number;
+        /**
+         * The protocol used when performing health checks on targets. The possible protocols are `HTTP` and `HTTPS`.
+         */
+        protocol: string;
+        /**
+         * The protocol version used when performing health checks on targets. The possible protocol versions are `HTTP1` and `HTTP2`. The default is `HTTP1`.
+         */
+        protocolVersion?: string;
+        /**
+         * The number of consecutive failed health checks required before considering a target unhealthy. The range is 2–10. The default is 2.
+         */
+        unhealthyThresholdCount?: number;
+    }
+    interface TargetGroupConfigHealthCheckMatcher {
+        /**
+         * The HTTP codes to use when checking for a successful response from a target.
+         */
+        value?: string;
+    }
 }
 export declare namespace waf {
     interface ByteMatchSetByteMatchTuple {
@@ -86834,6 +87434,10 @@ export declare namespace wafv2 {
         name: string;
     }
     interface WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfig {
+        /**
+         * Additional configuration for using the Account Takeover Protection managed rule group. Use this to specify information such as the sign-in page of your application and the type of content to accept or reject from the client.
+         */
+        awsManagedRulesAtpRuleSet?: outputs.wafv2.WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAtpRuleSet;
         /**
          * Additional configuration for using the Bot Control managed rule group. Use this to specify the inspection level that you want to use. See `awsManagedRulesBotControlRuleSet` for more details
          */
@@ -86855,6 +87459,112 @@ export declare namespace wafv2 {
          */
         usernameField?: outputs.wafv2.WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigUsernameField;
     }
+    interface WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAtpRuleSet {
+        /**
+         * The path of the login endpoint for your application.
+         */
+        loginPath: string;
+        /**
+         * The criteria for inspecting login requests, used by the ATP rule group to validate credentials usage. See `requestInspection` for more details.
+         */
+        requestInspection?: outputs.wafv2.WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAtpRuleSetRequestInspection;
+        /**
+         * The criteria for inspecting responses to login requests, used by the ATP rule group to track login failure rates. Note that Response Inspection is available only on web ACLs that protect CloudFront distributions. See `responseInspection` for more details.
+         */
+        responseInspection?: outputs.wafv2.WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAtpRuleSetResponseInspection;
+    }
+    interface WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAtpRuleSetRequestInspection {
+        /**
+         * Details about your login page password field. See `passwordField` for more details.
+         */
+        passwordField: outputs.wafv2.WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAtpRuleSetRequestInspectionPasswordField;
+        /**
+         * The payload type for your login endpoint, either JSON or form encoded.
+         */
+        payloadType: string;
+        /**
+         * Details about your login page username field. See `usernameField` for more details.
+         */
+        usernameField: outputs.wafv2.WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAtpRuleSetRequestInspectionUsernameField;
+    }
+    interface WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAtpRuleSetRequestInspectionPasswordField {
+        /**
+         * The name of the password field.
+         */
+        identifier: string;
+    }
+    interface WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAtpRuleSetRequestInspectionUsernameField {
+        /**
+         * The name of the username field.
+         */
+        identifier: string;
+    }
+    interface WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAtpRuleSetResponseInspection {
+        /**
+         * Configures inspection of the response body. See `bodyContains` for more details.
+         */
+        bodyContains?: outputs.wafv2.WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAtpRuleSetResponseInspectionBodyContains;
+        /**
+         * Configures inspection of the response header.See `header` for more details.
+         */
+        header?: outputs.wafv2.WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAtpRuleSetResponseInspectionHeader;
+        /**
+         * Configures inspection of the response JSON. See `json` for more details.
+         */
+        json?: outputs.wafv2.WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAtpRuleSetResponseInspectionJson;
+        /**
+         * Configures inspection of the response status code.See `statusCode` for more details.
+         */
+        statusCode?: outputs.wafv2.WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAtpRuleSetResponseInspectionStatusCode;
+    }
+    interface WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAtpRuleSetResponseInspectionBodyContains {
+        /**
+         * Strings in the body of the response that indicate a failed login attempt.
+         */
+        failureStrings: string[];
+        /**
+         * Strings in the body of the response that indicate a successful login attempt.
+         */
+        successStrings: string[];
+    }
+    interface WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAtpRuleSetResponseInspectionHeader {
+        /**
+         * Values in the response header with the specified name that indicate a failed login attempt.
+         */
+        failureValues: string[];
+        /**
+         * The name of the header to match against. The name must be an exact match, including case.
+         */
+        name: string;
+        /**
+         * Values in the response header with the specified name that indicate a successful login attempt.
+         */
+        successValues: string[];
+    }
+    interface WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAtpRuleSetResponseInspectionJson {
+        /**
+         * Values in the response header with the specified name that indicate a failed login attempt.
+         */
+        failureValues: string[];
+        /**
+         * The identifier for the value to match against in the JSON.
+         */
+        identifier: string;
+        /**
+         * Values in the response header with the specified name that indicate a successful login attempt.
+         */
+        successValues: string[];
+    }
+    interface WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAtpRuleSetResponseInspectionStatusCode {
+        /**
+         * Status codes in the response that indicate a failed login attempt.
+         */
+        failureCodes: number[];
+        /**
+         * Status codes in the response that indicate a successful login attempt.
+         */
+        successCodes: number[];
+    }
     interface WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesBotControlRuleSet {
         /**
          * The inspection level to use for the Bot Control rule group.