@pulumi/aws 6.84.0-alpha.1752785069 → 7.0.0-alpha.1752855061

package/types/output.d.ts

@@ -32,33 +32,63 @@ export interface GetRegionsFilter {
 export declare namespace accessanalyzer {
     interface AnalyzerConfiguration {
         /**
-         * A block that specifies the configuration of an unused access analyzer for an AWS organization or account. Documented below
+         * Specifies the configuration of an internal access analyzer for an AWS organization or account. This configuration determines how the analyzer evaluates access within your AWS environment. See `internalAccess` Block for details.
+         */
+        internalAccess?: outputs.accessanalyzer.AnalyzerConfigurationInternalAccess;
+        /**
+         * Specifies the configuration of an unused access analyzer for an AWS organization or account. See `unusedAccess` Block for details.
          */
         unusedAccess?: outputs.accessanalyzer.AnalyzerConfigurationUnusedAccess;
     }
+    interface AnalyzerConfigurationInternalAccess {
+        /**
+         * Information about analysis rules for the internal access analyzer. These rules determine which resources and access patterns will be analyzed. See `analysisRule` Block for Internal Access Analyzer for details.
+         */
+        analysisRule?: outputs.accessanalyzer.AnalyzerConfigurationInternalAccessAnalysisRule;
+    }
+    interface AnalyzerConfigurationInternalAccessAnalysisRule {
+        /**
+         * List of rules for the internal access analyzer containing criteria to include in analysis. Only resources that meet the rule criteria will generate findings. See `inclusion` Block for details.
+         */
+        inclusions?: outputs.accessanalyzer.AnalyzerConfigurationInternalAccessAnalysisRuleInclusion[];
+    }
+    interface AnalyzerConfigurationInternalAccessAnalysisRuleInclusion {
+        /**
+         * List of AWS account IDs to apply to the internal access analysis rule criteria. Account IDs can only be applied to the analysis rule criteria for organization-level analyzers.
+         */
+        accountIds?: string[];
+        /**
+         * List of resource ARNs to apply to the internal access analysis rule criteria. The analyzer will only generate findings for resources that match these ARNs.
+         */
+        resourceArns?: string[];
+        /**
+         * List of resource types to apply to the internal access analysis rule criteria. The analyzer will only generate findings for resources of these types. Refer to [InternalAccessAnalysisRuleCriteria](https://docs.aws.amazon.com/access-analyzer/latest/APIReference/API_InternalAccessAnalysisRuleCriteria.html) in the AWS IAM Access Analyzer API Reference for valid values.
+         */
+        resourceTypes?: string[];
+    }
     interface AnalyzerConfigurationUnusedAccess {
         /**
-         * A block for analysis rules. Documented below
+         * Information about analysis rules for the analyzer. Analysis rules determine which entities will generate findings based on the criteria you define when you create the rule. See `analysisRule` Block for Unused Access Analyzer for details.
          */
         analysisRule?: outputs.accessanalyzer.AnalyzerConfigurationUnusedAccessAnalysisRule;
         /**
-         * The specified access age in days for which to generate findings for unused access.
+         * Specified access age in days for which to generate findings for unused access.
          */
         unusedAccessAge?: number;
     }
     interface AnalyzerConfigurationUnusedAccessAnalysisRule {
         /**
-         * A block for the analyzer rules containing criteria to exclude from analysis. Documented below
+         * List of rules for the analyzer containing criteria to exclude from analysis. Entities that meet the rule criteria will not generate findings. See `exclusion` Block for details.
          */
         exclusions?: outputs.accessanalyzer.AnalyzerConfigurationUnusedAccessAnalysisRuleExclusion[];
     }
     interface AnalyzerConfigurationUnusedAccessAnalysisRuleExclusion {
         /**
-         * A list of account IDs to exclude from the analysis.
+         * List of AWS account IDs to apply to the analysis rule criteria. The accounts cannot include the organization analyzer owner account. Account IDs can only be applied to the analysis rule criteria for organization-level analyzers.
          */
         accountIds?: string[];
         /**
-         * A list of key-value pairs for resource tags to exclude from the analysis.
+         * List of key-value pairs for resource tags to exclude from the analysis.
          */
         resourceTags?: {
             [key: string]: string;
@@ -618,11 +648,12 @@ export declare namespace alb {
          */
         advertiseTrustStoreCaNames: string;
         /**
-         * Whether client certificate expiry is ignored. Default is `false`.
+         * Whether client certificate expiry is ignored.
+         * Default is `false`.
          */
         ignoreClientCertificateExpiry?: boolean;
         /**
-         * Valid values are `off`, `verify` and `passthrough`.
+         * Valid values are `off`, `passthrough`, and `verify`.
          */
         mode: string;
         /**
@@ -1067,6 +1098,42 @@ export declare namespace alb {
     }
 }
 export declare namespace amp {
+    interface QueryLoggingConfigurationDestination {
+        /**
+         * Configuration block for CloudWatch Logs destination. See `cloudwatchLogs`.
+         */
+        cloudwatchLogs?: outputs.amp.QueryLoggingConfigurationDestinationCloudwatchLogs;
+        /**
+         * A list of filter configurations that specify which logs should be sent to the destination. See `filters`.
+         */
+        filters?: outputs.amp.QueryLoggingConfigurationDestinationFilters;
+    }
+    interface QueryLoggingConfigurationDestinationCloudwatchLogs {
+        /**
+         * The ARN of the CloudWatch log group to which query logs will be sent.
+         */
+        logGroupArn: string;
+    }
+    interface QueryLoggingConfigurationDestinationFilters {
+        /**
+         * The Query Samples Processed (QSP) threshold above which queries will be logged. Queries processing more samples than this threshold will be captured in logs.
+         */
+        qspThreshold: number;
+    }
+    interface QueryLoggingConfigurationTimeouts {
+        /**
+         * A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
+         */
+        create?: string;
+        /**
+         * A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
+         */
+        delete?: string;
+        /**
+         * A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
+         */
+        update?: string;
+    }
     interface ScraperDestination {
         /**
          * Configuration block for an Amazon Managed Prometheus workspace destination. See `amp`.
@@ -1224,6 +1291,12 @@ export declare namespace amplify {
          */
         target: string;
     }
+    interface AppJobConfig {
+        /**
+         * Size of the build instance. Valid values: `STANDARD_8GB`, `LARGE_16GB`, and `XLARGE_72GB`. Default: `STANDARD_8GB`.
+         */
+        buildComputeType: string;
+    }
     interface AppProductionBranch {
         /**
          * Branch name for the production branch.
@@ -1288,22 +1361,6 @@ export declare namespace apigateway {
          */
         rateLimit: number;
     }
-    interface DeploymentCanarySettings {
-        /**
-         * Percentage (0.0-100.0) of traffic routed to the canary deployment.
-         */
-        percentTraffic?: number;
-        /**
-         * Stage variable overrides used for the canary release deployment. They can override existing stage variables or add new stage variables for the canary release deployment. These stage variables are represented as a string-to-string map between stage variable names and their values.
-         */
-        stageVariableOverrides?: {
-            [key: string]: string;
-        };
-        /**
-         * Boolean flag to indicate whether the canary release deployment uses the stage cache or not.
-         */
-        useStageCache?: boolean;
-    }
     interface DocumentationPartLocation {
         /**
          * HTTP verb of a method. The default value is `*` for any method.
@@ -2727,7 +2784,8 @@ export declare namespace appflow {
         bucketPrefix?: string;
         privateLinkServiceName?: string;
         /**
-         * AWS Region of the Snowflake account.
+         * Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
+         * * `name ` (Required) - Name of the connector profile. The name is unique for each `ConnectorProfile` in your AWS account.
          */
         region?: string;
         /**
@@ -7603,7 +7661,7 @@ export declare namespace auditmanager {
         /**
          * The keyword to search for in CloudTrail logs, Config rules, Security Hub checks, and Amazon Web Services API names. See `sourceKeyword` below.
          */
-        sourceKeyword?: outputs.auditmanager.ControlControlMappingSourceSourceKeyword;
+        sourceKeyword: outputs.auditmanager.ControlControlMappingSourceSourceKeyword;
         /**
          * Name of the source.
          */
@@ -7657,7 +7715,7 @@ export declare namespace auditmanager {
         sourceDescription: string;
         sourceFrequency: string;
         sourceId: string;
-        sourceKeyword?: outputs.auditmanager.GetControlControlMappingSourceSourceKeyword;
+        sourceKeywords: outputs.auditmanager.GetControlControlMappingSourceSourceKeyword[];
         sourceName: string;
         sourceSetUpOption: string;
         sourceType: string;
@@ -7668,7 +7726,7 @@ export declare namespace auditmanager {
         keywordValue: string;
     }
     interface GetFrameworkControlSet {
-        controls?: outputs.auditmanager.GetFrameworkControlSetControl[];
+        controls: outputs.auditmanager.GetFrameworkControlSetControl[];
         id: string;
         /**
          * Name of the framework.
@@ -10374,7 +10432,7 @@ export declare namespace batch {
         /**
          * Properties of the container that's used on the Amazon EKS pod. See containers below.
          */
-        containers: outputs.batch.JobDefinitionEksPropertiesPodPropertiesContainers;
+        containers: outputs.batch.JobDefinitionEksPropertiesPodPropertiesContainer[];
         /**
          * DNS policy for the pod. The default value is `ClusterFirst`. If the `hostNetwork` argument is not specified, the default is `ClusterFirstWithHostNet`. `ClusterFirst` indicates that any DNS query that does not match the configured cluster domain suffix is forwarded to the upstream nameserver inherited from the node. For more information, see Pod's DNS policy in the Kubernetes documentation.
          */
@@ -10408,7 +10466,7 @@ export declare namespace batch {
          */
         volumes?: outputs.batch.JobDefinitionEksPropertiesPodPropertiesVolume[];
     }
-    interface JobDefinitionEksPropertiesPodPropertiesContainers {
+    interface JobDefinitionEksPropertiesPodPropertiesContainer {
         /**
          * Array of arguments to the entrypoint. If this isn't specified, the CMD of the container image is used. This corresponds to the args member in the Entrypoint portion of the Pod in Kubernetes. Environment variable references are expanded using the container's environment.
          */
@@ -10420,7 +10478,7 @@ export declare namespace batch {
         /**
          * Environment variables to pass to a container. See EKS Environment below.
          */
-        envs?: outputs.batch.JobDefinitionEksPropertiesPodPropertiesContainersEnv[];
+        envs?: outputs.batch.JobDefinitionEksPropertiesPodPropertiesContainerEnv[];
         /**
          * Docker image used to start the container.
          */
@@ -10436,17 +10494,17 @@ export declare namespace batch {
         /**
          * Type and amount of resources to assign to a container. The supported resources include `memory`, `cpu`, and `nvidia.com/gpu`.
          */
-        resources?: outputs.batch.JobDefinitionEksPropertiesPodPropertiesContainersResources;
+        resources?: outputs.batch.JobDefinitionEksPropertiesPodPropertiesContainerResources;
         /**
          * Security context for a job.
          */
-        securityContext?: outputs.batch.JobDefinitionEksPropertiesPodPropertiesContainersSecurityContext;
+        securityContext?: outputs.batch.JobDefinitionEksPropertiesPodPropertiesContainerSecurityContext;
         /**
          * Volume mounts for the container.
          */
-        volumeMounts?: outputs.batch.JobDefinitionEksPropertiesPodPropertiesContainersVolumeMount[];
+        volumeMounts?: outputs.batch.JobDefinitionEksPropertiesPodPropertiesContainerVolumeMount[];
     }
-    interface JobDefinitionEksPropertiesPodPropertiesContainersEnv {
+    interface JobDefinitionEksPropertiesPodPropertiesContainerEnv {
         /**
          * Name of the job definition.
          */
@@ -10456,7 +10514,7 @@ export declare namespace batch {
          */
         value: string;
     }
-    interface JobDefinitionEksPropertiesPodPropertiesContainersResources {
+    interface JobDefinitionEksPropertiesPodPropertiesContainerResources {
         limits?: {
             [key: string]: string;
         };
@@ -10464,14 +10522,14 @@ export declare namespace batch {
             [key: string]: string;
         };
     }
-    interface JobDefinitionEksPropertiesPodPropertiesContainersSecurityContext {
+    interface JobDefinitionEksPropertiesPodPropertiesContainerSecurityContext {
         privileged?: boolean;
         readOnlyRootFileSystem?: boolean;
         runAsGroup?: number;
         runAsNonRoot?: boolean;
         runAsUser?: number;
     }
-    interface JobDefinitionEksPropertiesPodPropertiesContainersVolumeMount {
+    interface JobDefinitionEksPropertiesPodPropertiesContainerVolumeMount {
         mountPath: string;
         /**
          * Name of the job definition.
@@ -10711,9 +10769,6 @@ export declare namespace bcmdata {
          * Destination configuration for this specific data export. See the `destinationConfigurations` argument reference below.
          */
         destinationConfigurations?: outputs.bcmdata.ExportExportDestinationConfiguration[];
-        /**
-         * Amazon Resource Name (ARN) for this export.
-         */
         exportArn: string;
         /**
          * Name of this specific data export.
@@ -13028,28 +13083,6 @@ export declare namespace chime {
          */
         voiceConnectorId: string;
     }
-    interface VoiceConnectorOrganizationRoute {
-        /**
-         * The FQDN or IP address to contact for origination traffic.
-         */
-        host: string;
-        /**
-         * The designated origination route port. Defaults to `5060`.
-         */
-        port?: number;
-        /**
-         * The priority associated with the host, with 1 being the highest priority. Higher priority hosts are attempted first.
-         */
-        priority: number;
-        /**
-         * The protocol to use for the origination route. Encryption-enabled Amazon Chime Voice Connectors use TCP protocol by default.
-         */
-        protocol: string;
-        /**
-         * The weight associated with the host. If hosts are equal in priority, calls are redistributed among them based on their relative weight.
-         */
-        weight: number;
-    }
     interface VoiceConnectorOriginationRoute {
         /**
          * The FQDN or IP address to contact for origination traffic.
@@ -13489,7 +13522,7 @@ export declare namespace cloudformation {
          */
         organizationalUnitId: string;
         /**
-         * Region that the stack instance is associated with.
+         * Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
          */
         region: string;
         /**
@@ -13731,11 +13764,11 @@ export declare namespace cloudfront {
     }
     interface ContinuousDeploymentPolicyTrafficConfigSingleWeightConfigSessionStickinessConfig {
         /**
-         * The amount of time in seconds after which sessions will cease if no requests are received. Valid values are `300` – `3600` (5–60 minutes). The value must be less than or equal to `maximumTtl`.
+         * The amount of time in seconds after which sessions will cease if no requests are received. Valid values are `300` - `3600` (5–60 minutes). The value must be less than or equal to `maximumTtl`.
          */
         idleTtl: number;
         /**
-         * The maximum amount of time in seconds to consider requests from the viewer as being part of the same session. Valid values are `300` – `3600` (5–60 minutes). The value must be greater than or equal to `idleTtl`.
+         * The maximum amount of time in seconds to consider requests from the viewer as being part of the same session. Valid values are `300` - `3600` (5–60 minutes). The value must be greater than or equal to `idleTtl`.
          */
         maximumTtl: number;
     }
@@ -16198,6 +16231,10 @@ export declare namespace codebuild {
          * the [CodeBuild User Guide](https://docs.aws.amazon.com/codebuild/latest/userguide/build-env-ref-compute-types.html).
          */
         computeType: string;
+        /**
+         * Configuration block. Detailed below.
+         */
+        dockerServer?: outputs.codebuild.ProjectEnvironmentDockerServer;
         /**
          * Configuration block. Detailed below.
          */
@@ -16237,6 +16274,16 @@ export declare namespace codebuild {
          */
         type: string;
     }
+    interface ProjectEnvironmentDockerServer {
+        /**
+         * Compute type for the Docker server. Valid values: `BUILD_GENERAL1_SMALL`, `BUILD_GENERAL1_MEDIUM`, `BUILD_GENERAL1_LARGE`, `BUILD_GENERAL1_XLARGE`, and `BUILD_GENERAL1_2XLARGE`.
+         */
+        computeType: string;
+        /**
+         * List of security group IDs to assign to the Docker server.
+         */
+        securityGroupIds?: string[];
+    }
     interface ProjectEnvironmentEnvironmentVariable {
         /**
          * Environment variable's name or key.
@@ -18956,15 +19003,11 @@ export declare namespace computeoptimizer {
     }
 }
 export declare namespace config {
-    interface AssumeRole {
+    interface AssumeRoleWithWebIdentity {
         /**
          * The duration, between 15 minutes and 12 hours, of the role session. Valid time units are ns, us (or µs), ms, s, h, or m.
          */
         duration?: string;
-        /**
-         * A unique identifier that might be required when you assume a role in another account.
-         */
-        externalId?: string;
         /**
          * IAM Policy JSON describing further restricting permissions for the IAM Role being assumed.
          */
@@ -18981,26 +19024,18 @@ export declare namespace config {
          * An identifier for the assumed role session.
          */
         sessionName?: string;
-        /**
-         * Source identity specified by the principal assuming the role.
-         */
-        sourceIdentity?: string;
-        /**
-         * Assume role session tags.
-         */
-        tags?: {
-            [key: string]: string;
-        };
-        /**
-         * Assume role session tag keys to pass to any subsequent sessions.
-         */
-        transitiveTagKeys?: string[];
+        webIdentityToken?: string;
+        webIdentityTokenFile?: string;
     }
-    interface AssumeRoleWithWebIdentity {
+    interface AssumeRoles {
         /**
          * The duration, between 15 minutes and 12 hours, of the role session. Valid time units are ns, us (or µs), ms, s, h, or m.
          */
         duration?: string;
+        /**
+         * A unique identifier that might be required when you assume a role in another account.
+         */
+        externalId?: string;
         /**
          * IAM Policy JSON describing further restricting permissions for the IAM Role being assumed.
          */
@@ -19017,8 +19052,20 @@ export declare namespace config {
          * An identifier for the assumed role session.
          */
         sessionName?: string;
-        webIdentityToken?: string;
-        webIdentityTokenFile?: string;
+        /**
+         * Source identity specified by the principal assuming the role.
+         */
+        sourceIdentity?: string;
+        /**
+         * Assume role session tags.
+         */
+        tags?: {
+            [key: string]: string;
+        };
+        /**
+         * Assume role session tag keys to pass to any subsequent sessions.
+         */
+        transitiveTagKeys?: string[];
     }
     interface DefaultTags {
         /**
@@ -19641,14 +19688,6 @@ export declare namespace config {
          * Use this to override the default service endpoint URL
          */
         iot?: string;
-        /**
-         * Use this to override the default service endpoint URL
-         */
-        iotanalytics?: string;
-        /**
-         * Use this to override the default service endpoint URL
-         */
-        iotevents?: string;
         /**
          * Use this to override the default service endpoint URL
          */
@@ -19861,10 +19900,6 @@ export declare namespace config {
          * Use this to override the default service endpoint URL
          */
         opensearchservice?: string;
-        /**
-         * Use this to override the default service endpoint URL
-         */
-        opsworks?: string;
         /**
          * Use this to override the default service endpoint URL
          */
@@ -20049,10 +20084,6 @@ export declare namespace config {
          * Use this to override the default service endpoint URL
          */
         schemas?: string;
-        /**
-         * Use this to override the default service endpoint URL
-         */
-        sdb?: string;
         /**
          * Use this to override the default service endpoint URL
          */
@@ -20113,10 +20144,6 @@ export declare namespace config {
          * Use this to override the default service endpoint URL
          */
         signer?: string;
-        /**
-         * Use this to override the default service endpoint URL
-         */
-        simpledb?: string;
         /**
          * Use this to override the default service endpoint URL
          */
@@ -20225,10 +20252,6 @@ export declare namespace config {
          * Use this to override the default service endpoint URL
          */
         wellarchitected?: string;
-        /**
-         * Use this to override the default service endpoint URL
-         */
-        worklink?: string;
         /**
          * Use this to override the default service endpoint URL
          */
@@ -25111,160 +25134,6 @@ export declare namespace dms {
          */
         serviceAccessRoleArn?: string;
     }
-    interface EndpointS3Settings {
-        /**
-         * Whether to add column name information to the .csv output file. Default is `false`.
-         */
-        addColumnName?: boolean;
-        /**
-         * S3 object prefix.
-         */
-        bucketFolder?: string;
-        /**
-         * S3 bucket name.
-         */
-        bucketName?: string;
-        /**
-         * Predefined (canned) access control list for objects created in an S3 bucket. Valid values include `none`, `private`, `public-read`, `public-read-write`, `authenticated-read`, `aws-exec-read`, `bucket-owner-read`, and `bucket-owner-full-control`. Default is `none`.
-         */
-        cannedAclForObjects?: string;
-        /**
-         * Whether to write insert and update operations to .csv or .parquet output files. Default is `false`.
-         */
-        cdcInsertsAndUpdates?: boolean;
-        /**
-         * Whether to write insert operations to .csv or .parquet output files. Default is `false`.
-         */
-        cdcInsertsOnly?: boolean;
-        /**
-         * Maximum length of the interval, defined in seconds, after which to output a file to Amazon S3. Default is `60`.
-         */
-        cdcMaxBatchInterval?: number;
-        /**
-         * Minimum file size condition as defined in kilobytes to output a file to Amazon S3. Default is `32000`. **NOTE:** Previously, this setting was measured in megabytes but now represents kilobytes. Update configurations accordingly.
-         */
-        cdcMinFileSize?: number;
-        /**
-         * Folder path of CDC files. For an S3 source, this setting is required if a task captures change data; otherwise, it's optional. If `cdcPath` is set, AWS DMS reads CDC files from this path and replicates the data changes to the target endpoint. Supported in AWS DMS versions 3.4.2 and later.
-         */
-        cdcPath?: string;
-        /**
-         * Set to compress target files. Default is `NONE`. Valid values are `GZIP` and `NONE`.
-         */
-        compressionType?: string;
-        /**
-         * Delimiter used to separate columns in the source files. Default is `,`.
-         */
-        csvDelimiter?: string;
-        /**
-         * String to use for all columns not included in the supplemental log.
-         */
-        csvNoSupValue?: string;
-        /**
-         * String to as null when writing to the target.
-         */
-        csvNullValue?: string;
-        /**
-         * Delimiter used to separate rows in the source files. Default is `\n`.
-         */
-        csvRowDelimiter?: string;
-        /**
-         * Output format for the files that AWS DMS uses to create S3 objects. Valid values are `csv` and `parquet`. Default is `csv`.
-         */
-        dataFormat?: string;
-        /**
-         * Size of one data page in bytes. Default is `1048576` (1 MiB).
-         */
-        dataPageSize?: number;
-        /**
-         * Date separating delimiter to use during folder partitioning. Valid values are `SLASH`, `UNDERSCORE`, `DASH`, and `NONE`. Default is `SLASH`.
-         */
-        datePartitionDelimiter?: string;
-        /**
-         * Partition S3 bucket folders based on transaction commit dates. Default is `false`.
-         */
-        datePartitionEnabled?: boolean;
-        /**
-         * Date format to use during folder partitioning. Use this parameter when `datePartitionEnabled` is set to true. Valid values are `YYYYMMDD`, `YYYYMMDDHH`, `YYYYMM`, `MMYYYYDD`, and `DDMMYYYY`. Default is `YYYYMMDD`.
-         */
-        datePartitionSequence?: string;
-        /**
-         * Maximum size in bytes of an encoded dictionary page of a column. Default is `1048576` (1 MiB).
-         */
-        dictPageSizeLimit?: number;
-        /**
-         * Whether to enable statistics for Parquet pages and row groups. Default is `true`.
-         */
-        enableStatistics?: boolean;
-        /**
-         * Type of encoding to use. Value values are `rleDictionary`, `plain`, and `plainDictionary`. Default is `rleDictionary`.
-         */
-        encodingType?: string;
-        /**
-         * Server-side encryption mode that you want to encrypt your .csv or .parquet object files copied to S3. Valid values are `SSE_S3` and `SSE_KMS`. Default is `SSE_S3`.
-         */
-        encryptionMode?: string;
-        /**
-         * JSON document that describes how AWS DMS should interpret the data.
-         */
-        externalTableDefinition?: string;
-        /**
-         * Whether to integrate AWS Glue Data Catalog with an Amazon S3 target. See [Using AWS Glue Data Catalog with an Amazon S3 target for AWS DMS](https://docs.aws.amazon.com/dms/latest/userguide/CHAP_Target.S3.html#CHAP_Target.S3.GlueCatalog) for more information. Default is `false`.
-         */
-        glueCatalogGeneration?: boolean;
-        /**
-         * When this value is set to `1`, DMS ignores the first row header in a .csv file. Default is `0`.
-         */
-        ignoreHeaderRows?: number;
-        /**
-         * Whether to enable a full load to write INSERT operations to the .csv output files only to indicate how the rows were added to the source database. Default is `false`.
-         */
-        includeOpForFullLoad?: boolean;
-        /**
-         * Maximum size (in KB) of any .csv file to be created while migrating to an S3 target during full load. Valid values are from `1` to `1048576`. Default is `1048576` (1 GB).
-         */
-        maxFileSize?: number;
-        /**
-         * Specifies the precision of any TIMESTAMP column values written to an S3 object file in .parquet format. Default is `false`.
-         */
-        parquetTimestampInMillisecond?: boolean;
-        /**
-         * Version of the .parquet file format. Default is `parquet-1-0`. Valid values are `parquet-1-0` and `parquet-2-0`.
-         */
-        parquetVersion?: string;
-        /**
-         * Whether DMS saves the transaction order for a CDC load on the S3 target specified by `cdcPath`. Default is `false`.
-         */
-        preserveTransactions?: boolean;
-        /**
-         * For an S3 source, whether each leading double quotation mark has to be followed by an ending double quotation mark. Default is `true`.
-         */
-        rfc4180?: boolean;
-        /**
-         * Number of rows in a row group. Default is `10000`.
-         */
-        rowGroupLength?: number;
-        /**
-         * ARN or Id of KMS Key to use when `encryptionMode` is `SSE_KMS`.
-         */
-        serverSideEncryptionKmsKeyId?: string;
-        /**
-         * ARN of the IAM Role with permissions to read from or write to the S3 Bucket.
-         */
-        serviceAccessRoleArn?: string;
-        /**
-         * Column to add with timestamp information to the endpoint data for an Amazon S3 target.
-         */
-        timestampColumnName?: string;
-        /**
-         * Whether to use `csvNoSupValue` for columns not included in the supplemental log.
-         */
-        useCsvNoSupValue?: boolean;
-        /**
-         * When set to true, uses the task start time as the timestamp column value instead of the time data is written to target. For full load, when set to true, each row of the timestamp column contains the task start time. For CDC loads, each row of the timestamp column contains the transaction commit time. When set to false, the full load timestamp in the timestamp column increments with the time data arrives at the target. Default is `false`.
-         */
-        useTaskStartTimeForFullLoadTimestamp?: boolean;
-    }
     interface GetEndpointElasticsearchSetting {
         endpointUri: string;
         errorRetryDuration: number;
@@ -25792,6 +25661,10 @@ export declare namespace dynamodb {
          * ARN of the table
          */
         arn: string;
+        /**
+         * Whether this global table will be using `STRONG` consistency mode or `EVENTUAL` consistency mode. Default value is `EVENTUAL`.
+         */
+        consistencyMode?: string;
         /**
          * ARN of the CMK that should be used for the AWS KMS encryption.
          * This argument should only be used if the key is different from the default KMS-managed DynamoDB key, `alias/aws/dynamodb`.
@@ -26736,7 +26609,7 @@ export declare namespace ec2 {
     }
     interface FlowLogDestinationOptions {
         /**
-         * The format for the flow log. Default value: `plain-text`. Valid values: `plain-text`, `parquet`.
+         * File format for the flow log. Default value: `plain-text`. Valid values: `plain-text`, `parquet`.
          */
         fileFormat?: string;
         /**
@@ -27230,12 +27103,6 @@ export declare namespace ec2 {
     interface GetLaunchTemplateCreditSpecification {
         cpuCredits: string;
     }
-    interface GetLaunchTemplateElasticGpuSpecification {
-        type: string;
-    }
-    interface GetLaunchTemplateElasticInferenceAccelerator {
-        type: string;
-    }
     interface GetLaunchTemplateEnclaveOption {
         enabled: boolean;
     }
@@ -28682,116 +28549,6 @@ export declare namespace ec2 {
          */
         values: string[];
     }
-    interface GetVpcIamPoolCidrsFilter {
-        /**
-         * Name of the field to filter by, as defined by
-         * [the underlying AWS API](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_GetIpamPoolCidrs.html).
-         */
-        name: string;
-        /**
-         * Set of values that are accepted for the given field.
-         */
-        values: string[];
-    }
-    interface GetVpcIamPoolCidrsIpamPoolCidr {
-        /**
-         * A network CIDR.
-         */
-        cidr: string;
-        /**
-         * The provisioning state of that CIDR.
-         */
-        state: string;
-    }
-    interface GetVpcIamPoolFilter {
-        /**
-         * The name of the filter. Filter names are case-sensitive.
-         */
-        name: string;
-        /**
-         * The filter values. Filter values are case-sensitive.
-         */
-        values: string[];
-    }
-    interface GetVpcIamPoolsFilter {
-        /**
-         * The name of the filter. Filter names are case-sensitive.
-         */
-        name: string;
-        /**
-         * The filter values. Filter values are case-sensitive.
-         */
-        values: string[];
-    }
-    interface GetVpcIamPoolsIpamPool {
-        /**
-         * IP protocol assigned to this pool.
-         */
-        addressFamily: string;
-        /**
-         * A default netmask length for allocations added to this pool. If, for example, the CIDR assigned to this pool is `10.0.0.0/8` and you enter 16 here, new allocations will default to `10.0.0.0/16`.
-         */
-        allocationDefaultNetmaskLength: number;
-        /**
-         * The maximum netmask length that will be required for CIDR allocations in this pool.
-         */
-        allocationMaxNetmaskLength: number;
-        /**
-         * The minimum netmask length that will be required for CIDR allocations in this pool.
-         */
-        allocationMinNetmaskLength: number;
-        /**
-         * Tags that are required to create resources in using this pool.
-         */
-        allocationResourceTags: {
-            [key: string]: string;
-        };
-        /**
-         * ARN of the pool
-         */
-        arn: string;
-        /**
-         * If enabled, IPAM will continuously look for resources within the CIDR range of this pool and automatically import them as allocations into your IPAM.
-         */
-        autoImport: boolean;
-        /**
-         * Limits which service in AWS that the pool can be used in. `ec2` for example, allows users to use space for Elastic IP addresses and VPCs.
-         */
-        awsService: string;
-        /**
-         * Description for the IPAM pool.
-         */
-        description: string;
-        /**
-         * ID of the IPAM pool.
-         */
-        id: string;
-        /**
-         * ID of the scope the pool belongs to.
-         */
-        ipamScopeId: string;
-        ipamScopeType: string;
-        /**
-         * Locale is the Region where your pool is available for allocations. You can only create pools with locales that match the operating Regions of the IPAM. You can only create VPCs from a pool whose locale matches the VPC's Region.
-         */
-        locale: string;
-        poolDepth: number;
-        /**
-         * Defines whether or not IPv6 pool space is publicly advertisable over the internet.
-         */
-        publiclyAdvertisable: boolean;
-        /**
-         * ID of the source IPAM pool.
-         */
-        sourceIpamPoolId: string;
-        state: string;
-        /**
-         * Map of tags to assigned to the resource.
-         */
-        tags: {
-            [key: string]: string;
-        };
-    }
     interface GetVpcIpamOperatingRegion {
         regionName: string;
     }
@@ -29480,18 +29237,6 @@ export declare namespace ec2 {
          */
         cpuCredits?: string;
     }
-    interface LaunchTemplateElasticGpuSpecification {
-        /**
-         * The [Elastic GPU Type](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/elastic-graphics.html#elastic-graphics-basics)
-         */
-        type: string;
-    }
-    interface LaunchTemplateElasticInferenceAccelerator {
-        /**
-         * Accelerator type.
-         */
-        type: string;
-    }
     interface LaunchTemplateEnclaveOptions {
         /**
          * If set to `true`, Nitro Enclaves will be enabled on the instance.
@@ -32660,16 +32405,6 @@ export declare namespace ecs {
          */
         sizeInGib: number;
     }
-    interface GetTaskDefinitionInferenceAccelerator {
-        /**
-         * Elastic Inference accelerator device name. The deviceName must also be referenced in a container definition as a ResourceRequirement.
-         */
-        deviceName: string;
-        /**
-         * Elastic Inference accelerator type to use.
-         */
-        deviceType: string;
-    }
     interface GetTaskDefinitionPlacementConstraint {
         /**
          * Cluster Query Language expression to apply to the constraint. For more information, see [Cluster Query Language in the Amazon EC2 Container Service Developer Guide](http://docs.aws.amazon.com/AmazonECS/latest/developerguide/cluster-query-language.html).
@@ -32858,12 +32593,6 @@ export declare namespace ecs {
          * Amazon Resource Name (ARN) of the task execution role override for the task.
          */
         executionRoleArn?: string;
-        /**
-         * **DEPRECATED** Elastic Inference accelerator override for the task. See below.
-         *
-         * @deprecated inference_accelerator_overrides is deprecated. AWS no longer supports the Elastic Inference service.
-         */
-        inferenceAcceleratorOverrides?: outputs.ecs.GetTaskExecutionOverridesInferenceAcceleratorOverride[];
         /**
          * The memory override for the task.
          */
@@ -32915,24 +32644,14 @@ export declare namespace ecs {
     }
     interface GetTaskExecutionOverridesContainerOverrideResourceRequirement {
         /**
-         * The type of resource to assign to a container. Valid values are `GPU` or `InferenceAccelerator`.
+         * The type of resource to assign to a container. Valid values are `GPU`.
          */
         type: string;
         /**
-         * The value for the specified resource type. If the `GPU` type is used, the value is the number of physical GPUs the Amazon ECS container agent reserves for the container. The number of GPUs that's reserved for all containers in a task can't exceed the number of available GPUs on the container instance that the task is launched on. If the `InferenceAccelerator` type is used, the value matches the `deviceName` for an InferenceAccelerator specified in a task definition.
+         * The value for the specified resource type. If the `GPU` type is used, the value is the number of physical GPUs the Amazon ECS container agent reserves for the container. The number of GPUs that's reserved for all containers in a task can't exceed the number of available GPUs on the container instance that the task is launched on.
          */
         value: string;
     }
-    interface GetTaskExecutionOverridesInferenceAcceleratorOverride {
-        /**
-         * The Elastic Inference accelerator device name to override for the task. This parameter must match a deviceName specified in the task definition.
-         */
-        deviceName?: string;
-        /**
-         * The Elastic Inference accelerator type to use.
-         */
-        deviceType?: string;
-    }
     interface GetTaskExecutionPlacementConstraint {
         /**
          * A cluster query language expression to apply to the constraint. The expression can have a maximum length of 2000 characters. You can't specify an expression if the constraint type is `distinctInstance`.
@@ -33280,16 +32999,6 @@ export declare namespace ecs {
          */
         sizeInGib: number;
     }
-    interface TaskDefinitionInferenceAccelerator {
-        /**
-         * Elastic Inference accelerator device name. The deviceName must also be referenced in a container definition as a ResourceRequirement.
-         */
-        deviceName: string;
-        /**
-         * Elastic Inference accelerator type to use.
-         */
-        deviceType: string;
-    }
     interface TaskDefinitionPlacementConstraint {
         /**
          * Cluster Query Language expression to apply to the constraint. For more information, see [Cluster Query Language in the Amazon EC2 Container Service Developer Guide](http://docs.aws.amazon.com/AmazonECS/latest/developerguide/cluster-query-language.html).
@@ -36580,7 +36289,7 @@ export declare namespace finspace {
          * * RDB - Realtime Database. This type of database captures all the data from a ticker plant and stores it in memory until the end of day, after which it writes all of its data to a disk and reloads the HDB. This cluster type requires local storage for temporary storage of data during the savedown process. If you specify this field in your request, you must provide the `savedownStorageConfiguration` parameter.
          * * GATEWAY - A gateway cluster allows you to access data across processes in kdb systems. It allows you to create your own routing logic using the initialization scripts and custom code. This type of cluster does not require a  writable local storage.
          * * GP - A general purpose cluster allows you to quickly iterate on code during development by granting greater access to system commands and enabling a fast reload of custom code. This cluster type can optionally mount databases including cache and savedown storage. For this cluster type, the node count is fixed at 1. It does not support autoscaling and supports only `SINGLE` AZ mode.
-         * * Tickerplant – A tickerplant cluster allows you to subscribe to feed handlers based on IAM permissions. It can publish to RDBs, other Tickerplants, and real-time subscribers (RTS). Tickerplants can persist messages to log, which is readable by any RDB environment. It supports only single-node that is only one kdb process.
+         * * Tickerplant - A tickerplant cluster allows you to subscribe to feed handlers based on IAM permissions. It can publish to RDBs, other Tickerplants, and real-time subscribers (RTS). Tickerplants can persist messages to log, which is readable by any RDB environment. It supports only single-node that is only one kdb process.
          */
         type: string;
     }
@@ -36593,13 +36302,13 @@ export declare namespace finspace {
          * Determines the hardware of the host computer used for your cluster instance. Each node type offers different memory and storage capabilities. Choose a node type based on the requirements of the application or software that you plan to run on your instance.
          *
          * You can only specify one of the following values:
-         * * kx.s.large – The node type with a configuration of 12 GiB memory and 2 vCPUs.
-         * * kx.s.xlarge – The node type with a configuration of 27 GiB memory and 4 vCPUs.
-         * * kx.s.2xlarge – The node type with a configuration of 54 GiB memory and 8 vCPUs.
-         * * kx.s.4xlarge – The node type with a configuration of 108 GiB memory and 16 vCPUs.
-         * * kx.s.8xlarge – The node type with a configuration of 216 GiB memory and 32 vCPUs.
-         * * kx.s.16xlarge – The node type with a configuration of 432 GiB memory and 64 vCPUs.
-         * * kx.s.32xlarge – The node type with a configuration of 864 GiB memory and 128 vCPUs.
+         * * kx.s.large - The node type with a configuration of 12 GiB memory and 2 vCPUs.
+         * * kx.s.xlarge - The node type with a configuration of 27 GiB memory and 4 vCPUs.
+         * * kx.s.2xlarge - The node type with a configuration of 54 GiB memory and 8 vCPUs.
+         * * kx.s.4xlarge - The node type with a configuration of 108 GiB memory and 16 vCPUs.
+         * * kx.s.8xlarge - The node type with a configuration of 216 GiB memory and 32 vCPUs.
+         * * kx.s.16xlarge - The node type with a configuration of 432 GiB memory and 64 vCPUs.
+         * * kx.s.32xlarge - The node type with a configuration of 864 GiB memory and 128 vCPUs.
          */
         nodeType: string;
     }
@@ -38043,16 +37752,6 @@ export declare namespace gamelift {
          */
         policyDurationSeconds?: number;
     }
-    interface MatchmakingConfigurationGameProperty {
-        /**
-         * A game property key
-         */
-        key: string;
-        /**
-         * A game property value.
-         */
-        value: string;
-    }
     interface ScriptStorageLocation {
         /**
          * Name of your S3 bucket.
@@ -39042,7 +38741,7 @@ export declare namespace glue {
          */
         name: string;
         /**
-         * Region of the target table.
+         * Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
          */
         region: string;
     }
@@ -39978,16 +39677,6 @@ export declare namespace identitystore {
          */
         issuer: string;
     }
-    interface GetGroupFilter {
-        /**
-         * Attribute path that is used to specify which attribute name to search. Currently, `DisplayName` is the only valid attribute path.
-         */
-        attributePath: string;
-        /**
-         * Value for an attribute.
-         */
-        attributeValue: string;
-    }
     interface GetGroupMembershipsGroupMembership {
         /**
          * The identifier for a group in the Identity Store.
@@ -40063,7 +39752,7 @@ export declare namespace identitystore {
          */
         primary: boolean;
         /**
-         * The region of the address.
+         * Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
          */
         region: string;
         /**
@@ -40131,16 +39820,6 @@ export declare namespace identitystore {
          */
         issuer: string;
     }
-    interface GetUserFilter {
-        /**
-         * Attribute path that is used to specify which attribute name to search. Currently, `UserName` is the only valid attribute path.
-         */
-        attributePath: string;
-        /**
-         * Value for an attribute.
-         */
-        attributeValue: string;
-    }
     interface GetUserName {
         /**
          * The family name of the user.
@@ -40269,7 +39948,7 @@ export declare namespace identitystore {
          */
         primary: boolean;
         /**
-         * Region of the address.
+         * Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
          */
         region: string;
         /**
@@ -40571,9 +40250,7 @@ export declare namespace imagebuilder {
          */
         licenseConfigurationArns?: string[];
         /**
-         * AWS Region for the distribution.
-         *
-         * The following arguments are optional:
+         * Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
          */
         region: string;
         /**
@@ -40877,7 +40554,7 @@ export declare namespace imagebuilder {
          */
         licenseConfigurationArns: string[];
         /**
-         * AWS Region of distribution.
+         * Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
          */
         region: string;
         /**
@@ -41115,7 +40792,7 @@ export declare namespace imagebuilder {
          */
         name: string;
         /**
-         * Region of the container image.
+         * Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
          */
         region: string;
     }
@@ -41125,7 +40802,7 @@ export declare namespace imagebuilder {
          */
         imageUris: string[];
         /**
-         * Region of the container image.
+         * Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
          */
         region: string;
     }
@@ -41373,7 +41050,7 @@ export declare namespace imagebuilder {
          */
         name: string;
         /**
-         * Region of the container image.
+         * Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
          */
         region: string;
     }
@@ -41383,7 +41060,7 @@ export declare namespace imagebuilder {
          */
         imageUris: string[];
         /**
-         * Region of the container image.
+         * Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
          */
         region: string;
     }
@@ -43620,7 +43297,7 @@ export declare namespace kendra {
          */
         authenticationConfiguration?: outputs.kendra.DataSourceConfigurationWebCrawlerConfigurationAuthenticationConfiguration;
         /**
-         * Specifies the number of levels in a website that you want to crawl. The first level begins from the website seed or starting point URL. For example, if a website has 3 levels – index level (i.e. seed in this example), sections level, and subsections level – and you are only interested in crawling information up to the sections level (i.e. levels 0-1), you can set your depth to 1. The default crawl depth is set to `2`. Minimum value of `0`. Maximum value of `10`.
+         * Specifies the number of levels in a website that you want to crawl. The first level begins from the website seed or starting point URL. For example, if a website has 3 levels - index level (i.e. seed in this example), sections level, and subsections level - and you are only interested in crawling information up to the sections level (i.e. levels 0-1), you can set your depth to 1. The default crawl depth is set to `2`. Minimum value of `0`. Maximum value of `10`.
          */
         crawlDepth?: number;
         /**
@@ -43703,9 +43380,9 @@ export declare namespace kendra {
         seedUrls: string[];
         /**
          * The default mode is set to `HOST_ONLY`. You can choose one of the following modes:
-         * * `HOST_ONLY` – crawl only the website host names. For example, if the seed URL is `"abc.example.com"`, then only URLs with host name `"abc.example.com"` are crawled.
-         * * `SUBDOMAINS` – crawl the website host names with subdomains. For example, if the seed URL is `"abc.example.com"`, then `"a.abc.example.com"` and `"b.abc.example.com"` are also crawled.
-         * * `EVERYTHING` – crawl the website host names with subdomains and other domains that the webpages link to.
+         * * `HOST_ONLY` - crawl only the website host names. For example, if the seed URL is `"abc.example.com"`, then only URLs with host name `"abc.example.com"` are crawled.
+         * * `SUBDOMAINS` - crawl the website host names with subdomains. For example, if the seed URL is `"abc.example.com"`, then `"a.abc.example.com"` and `"b.abc.example.com"` are also crawled.
+         * * `EVERYTHING` - crawl the website host names with subdomains and other domains that the webpages link to.
          */
         webCrawlerMode?: string;
     }
@@ -47153,7 +46830,7 @@ export declare namespace kms {
          */
         arn: string;
         /**
-         * The AWS Region of a primary or replica key in a multi-Region key.
+         * Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
          */
         region: string;
     }
@@ -47163,7 +46840,7 @@ export declare namespace kms {
          */
         arn: string;
         /**
-         * The AWS Region of a primary or replica key in a multi-Region key.
+         * Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
          */
         region: string;
     }
@@ -47925,7 +47602,7 @@ export declare namespace lakeformation {
 export declare namespace lambda {
     interface AliasRoutingConfig {
         /**
-         * A map that defines the proportion of events that should be sent to different versions of a lambda function.
+         * Map that defines the proportion of events that should be sent to different versions of a Lambda function.
          */
         additionalVersionWeights?: {
             [key: string]: number;
@@ -47933,41 +47610,41 @@ export declare namespace lambda {
     }
     interface CodeSigningConfigAllowedPublishers {
         /**
-         * The Amazon Resource Name (ARN) for each of the signing profiles. A signing profile defines a trusted user who can sign a code package.
+         * Set of ARNs for each of the signing profiles. A signing profile defines a trusted user who can sign a code package. Maximum of 20 signing profiles.
          */
         signingProfileVersionArns: string[];
     }
     interface CodeSigningConfigPolicies {
         /**
-         * Code signing configuration policy for deployment validation failure. If you set the policy to Enforce, Lambda blocks the deployment request if code-signing validation checks fail. If you set the policy to Warn, Lambda allows the deployment and creates a CloudWatch log. Valid values: `Warn`, `Enforce`. Default value: `Warn`.
+         * Code signing configuration policy for deployment validation failure. If you set the policy to `Enforce`, Lambda blocks the deployment request if code-signing validation checks fail. If you set the policy to `Warn`, Lambda allows the deployment and creates a CloudWatch log. Valid values: `Warn`, `Enforce`. Default value: `Warn`.
          */
         untrustedArtifactOnDeployment: string;
     }
     interface EventSourceMappingAmazonManagedKafkaEventSourceConfig {
         /**
-         * A Kafka consumer group ID between 1 and 200 characters for use when creating this event source mapping. If one is not specified, this value will be automatically generated. See [AmazonManagedKafkaEventSourceConfig Syntax](https://docs.aws.amazon.com/lambda/latest/dg/API_AmazonManagedKafkaEventSourceConfig.html).
+         * Kafka consumer group ID between 1 and 200 characters for use when creating this event source mapping. If one is not specified, this value will be automatically generated. See [AmazonManagedKafkaEventSourceConfig Syntax](https://docs.aws.amazon.com/lambda/latest/dg/API_AmazonManagedKafkaEventSourceConfig.html).
          */
         consumerGroupId: string;
     }
     interface EventSourceMappingDestinationConfig {
         /**
-         * The destination configuration for failed invocations. Detailed below.
+         * Destination configuration for failed invocations. See below.
          */
         onFailure?: outputs.lambda.EventSourceMappingDestinationConfigOnFailure;
     }
     interface EventSourceMappingDestinationConfigOnFailure {
         /**
-         * The Amazon Resource Name (ARN) of the destination resource.
+         * ARN of the destination resource.
          */
         destinationArn: string;
     }
     interface EventSourceMappingDocumentDbEventSourceConfig {
         /**
-         * The name of the collection to consume within the database. If you do not specify a collection, Lambda consumes all collections.
+         * Name of the collection to consume within the database. If you do not specify a collection, Lambda consumes all collections.
          */
         collectionName?: string;
         /**
-         * The name of the database to consume within the DocumentDB cluster.
+         * Name of the database to consume within the DocumentDB cluster.
          */
         databaseName: string;
         /**
@@ -47977,41 +47654,41 @@ export declare namespace lambda {
     }
     interface EventSourceMappingFilterCriteria {
         /**
-         * A set of up to 5 filter. If an event satisfies at least one, Lambda sends the event to the function or adds it to the next batch. Detailed below.
+         * Set of up to 5 filter. If an event satisfies at least one, Lambda sends the event to the function or adds it to the next batch. See below.
          */
         filters?: outputs.lambda.EventSourceMappingFilterCriteriaFilter[];
     }
     interface EventSourceMappingFilterCriteriaFilter {
         /**
-         * A filter pattern up to 4096 characters. See [Filter Rule Syntax](https://docs.aws.amazon.com/lambda/latest/dg/invocation-eventfiltering.html#filtering-syntax).
+         * Filter pattern up to 4096 characters. See [Filter Rule Syntax](https://docs.aws.amazon.com/lambda/latest/dg/invocation-eventfiltering.html#filtering-syntax).
          */
         pattern?: string;
     }
     interface EventSourceMappingMetricsConfig {
         /**
-         * A list containing the metrics to be produced by the event source mapping. Valid values: `EventCount`.
+         * List containing the metrics to be produced by the event source mapping. Valid values: `EventCount`.
          */
         metrics: string[];
     }
     interface EventSourceMappingProvisionedPollerConfig {
         /**
-         * The maximum number of event pollers this event source can scale up to. The range is between 1 and 2000.
+         * Maximum number of event pollers this event source can scale up to. The range is between 1 and 2000.
          */
         maximumPollers: number;
         /**
-         * The minimum number of event pollers this event source can scale down to. The range is between 1 and 200.
+         * Minimum number of event pollers this event source can scale down to. The range is between 1 and 200.
          */
         minimumPollers: number;
     }
     interface EventSourceMappingScalingConfig {
         /**
-         * Limits the number of concurrent instances that the Amazon SQS event source can invoke. Must be greater than or equal to `2`. See [Configuring maximum concurrency for Amazon SQS event sources](https://docs.aws.amazon.com/lambda/latest/dg/with-sqs.html#events-sqs-max-concurrency). You need to raise a [Service Quota Ticket](https://docs.aws.amazon.com/general/latest/gr/aws_service_limits.html) to increase the concurrency beyond 1000.
+         * Limits the number of concurrent instances that the Amazon SQS event source can invoke. Must be greater than or equal to 2. See [Configuring maximum concurrency for Amazon SQS event sources](https://docs.aws.amazon.com/lambda/latest/dg/with-sqs.html#events-sqs-max-concurrency). You need to raise a [Service Quota Ticket](https://docs.aws.amazon.com/general/latest/gr/aws_service_limits.html) to increase the concurrency beyond 1000.
          */
         maximumConcurrency?: number;
     }
     interface EventSourceMappingSelfManagedEventSource {
         /**
-         * A map of endpoints for the self managed source.  For Kafka self-managed sources, the key should be `KAFKA_BOOTSTRAP_SERVERS` and the value should be a string with a comma separated list of broker endpoints.
+         * Map of endpoints for the self managed source. For Kafka self-managed sources, the key should be `KAFKA_BOOTSTRAP_SERVERS` and the value should be a string with a comma separated list of broker endpoints.
          */
         endpoints: {
             [key: string]: string;
@@ -48019,29 +47696,29 @@ export declare namespace lambda {
     }
     interface EventSourceMappingSelfManagedKafkaEventSourceConfig {
         /**
-         * A Kafka consumer group ID between 1 and 200 characters for use when creating this event source mapping. If one is not specified, this value will be automatically generated. See [SelfManagedKafkaEventSourceConfig Syntax](https://docs.aws.amazon.com/lambda/latest/dg/API_SelfManagedKafkaEventSourceConfig.html).
+         * Kafka consumer group ID between 1 and 200 characters for use when creating this event source mapping. If one is not specified, this value will be automatically generated. See [SelfManagedKafkaEventSourceConfig Syntax](https://docs.aws.amazon.com/lambda/latest/dg/API_SelfManagedKafkaEventSourceConfig.html).
          */
         consumerGroupId: string;
     }
     interface EventSourceMappingSourceAccessConfiguration {
         /**
-         * The type of authentication protocol, VPC components, or virtual host for your event source. For valid values, refer to the [AWS documentation](https://docs.aws.amazon.com/lambda/latest/api/API_SourceAccessConfiguration.html).
+         * Type of authentication protocol, VPC components, or virtual host for your event source. For valid values, refer to the [AWS documentation](https://docs.aws.amazon.com/lambda/latest/api/API_SourceAccessConfiguration.html).
          */
         type: string;
         /**
-         * The URI for this configuration.  For type `VPC_SUBNET` the value should be `subnet:subnet_id` where `subnetId` is the value you would find in an aws.ec2.Subnet resource's id attribute.  For type `VPC_SECURITY_GROUP` the value should be `security_group:security_group_id` where `securityGroupId` is the value you would find in an aws.ec2.SecurityGroup resource's id attribute.
+         * URI for this configuration. For type `VPC_SUBNET` the value should be `subnet:subnet_id` where `subnetId` is the value you would find in an aws.ec2.Subnet resource's id attribute. For type `VPC_SECURITY_GROUP` the value should be `security_group:security_group_id` where `securityGroupId` is the value you would find in an aws.ec2.SecurityGroup resource's id attribute.
          */
         uri: string;
     }
     interface FunctionDeadLetterConfig {
         /**
-         * ARN of an SNS topic or SQS queue to notify when an invocation fails. If this option is used, the function's IAM role must be granted suitable access to write to the target object, which means allowing either the `sns:Publish` or `sqs:SendMessage` action on this ARN, depending on which service is targeted.
+         * ARN of an SNS topic or SQS queue to notify when an invocation fails.
          */
         targetArn: string;
     }
     interface FunctionEnvironment {
         /**
-         * Map of environment variables that are accessible from the function code during execution. If provided at least one key must be present.
+         * Map of environment variables available to your Lambda function during execution.
          */
         variables?: {
             [key: string]: string;
@@ -48049,77 +47726,77 @@ export declare namespace lambda {
     }
     interface FunctionEphemeralStorage {
         /**
-         * The size of the Lambda function Ephemeral storage(`/tmp`) represented in MB. The minimum supported `ephemeralStorage` value defaults to `512`MB and the maximum supported value is `10240`MB.
+         * Amount of ephemeral storage (`/tmp`) in MB. Valid between 512 MB and 10,240 MB (10 GB).
          */
         size: number;
     }
     interface FunctionEventInvokeConfigDestinationConfig {
         /**
-         * Configuration block with destination configuration for failed asynchronous invocations. See below for details.
+         * Configuration block with destination configuration for failed asynchronous invocations. See below.
          */
         onFailure?: outputs.lambda.FunctionEventInvokeConfigDestinationConfigOnFailure;
         /**
-         * Configuration block with destination configuration for successful asynchronous invocations. See below for details.
+         * Configuration block with destination configuration for successful asynchronous invocations. See below.
          */
         onSuccess?: outputs.lambda.FunctionEventInvokeConfigDestinationConfigOnSuccess;
     }
     interface FunctionEventInvokeConfigDestinationConfigOnFailure {
         /**
-         * Amazon Resource Name (ARN) of the destination resource. See the [Lambda Developer Guide](https://docs.aws.amazon.com/lambda/latest/dg/invocation-async.html#invocation-async-destinations) for acceptable resource types and associated IAM permissions.
+         * ARN of the destination resource. See the [Lambda Developer Guide](https://docs.aws.amazon.com/lambda/latest/dg/invocation-async.html#invocation-async-destinations) for acceptable resource types and associated IAM permissions.
          */
         destination: string;
     }
     interface FunctionEventInvokeConfigDestinationConfigOnSuccess {
         /**
-         * Amazon Resource Name (ARN) of the destination resource. See the [Lambda Developer Guide](https://docs.aws.amazon.com/lambda/latest/dg/invocation-async.html#invocation-async-destinations) for acceptable resource types and associated IAM permissions.
+         * ARN of the destination resource. See the [Lambda Developer Guide](https://docs.aws.amazon.com/lambda/latest/dg/invocation-async.html#invocation-async-destinations) for acceptable resource types and associated IAM permissions.
          */
         destination: string;
     }
     interface FunctionFileSystemConfig {
         /**
-         * Amazon Resource Name (ARN) of the Amazon EFS Access Point that provides access to the file system.
+         * ARN of the Amazon EFS Access Point.
          */
         arn: string;
         /**
-         * Path where the function can access the file system, starting with /mnt/.
+         * Path where the function can access the file system. Must start with `/mnt/`.
          */
         localMountPath: string;
     }
     interface FunctionImageConfig {
         /**
-         * Parameters that you want to pass in with `entryPoint`.
+         * Parameters to pass to the container image.
          */
         commands?: string[];
         /**
-         * Entry point to your application, which is typically the location of the runtime executable.
+         * Entry point to your application.
          */
         entryPoints?: string[];
         /**
-         * Working directory.
+         * Working directory for the container image.
          */
         workingDirectory?: string;
     }
     interface FunctionLoggingConfig {
         /**
-         * for JSON structured logs, choose the detail level of the logs your application sends to CloudWatch when using supported logging libraries.
+         * Detail level of application logs. Valid values: `TRACE`, `DEBUG`, `INFO`, `WARN`, `ERROR`, `FATAL`.
          */
         applicationLogLevel?: string;
         /**
-         * select between `Text` and structured `JSON` format for your function's logs.
+         * Log format. Valid values: `Text`, `JSON`.
          */
         logFormat: string;
         /**
-         * the CloudWatch log group your function sends logs to.
+         * CloudWatch log group where logs are sent.
          */
         logGroup: string;
         /**
-         * for JSON structured logs, choose the detail level of the Lambda platform event logs sent to CloudWatch, such as `WARN`, `DEBUG`, or `INFO`.
+         * Detail level of Lambda platform logs. Valid values: `DEBUG`, `INFO`, `WARN`.
          */
         systemLogLevel?: string;
     }
     interface FunctionSnapStart {
         /**
-         * Conditions where snap start is enabled. Valid values are `PublishedVersions`.
+         * When to apply snap start optimization. Valid value: `PublishedVersions`.
          */
         applyOn: string;
         /**
@@ -48129,39 +47806,39 @@ export declare namespace lambda {
     }
     interface FunctionTracingConfig {
         /**
-         * Whether to sample and trace a subset of incoming requests with AWS X-Ray. Valid values are `PassThrough` and `Active`. If `PassThrough`, Lambda will only trace the request from an upstream service if it contains a tracing header with "sampled=1". If `Active`, Lambda will respect any tracing header it receives from an upstream service. If no tracing header is received, Lambda will call X-Ray for a tracing decision.
+         * X-Ray tracing mode. Valid values: `Active`, `PassThrough`.
          */
         mode: string;
     }
     interface FunctionUrlCors {
         /**
-         * Whether to allow cookies or other credentials in requests to the function URL. The default is `false`.
+         * Whether to allow cookies or other credentials in requests to the function URL.
          */
         allowCredentials?: boolean;
         /**
-         * The HTTP headers that origins can include in requests to the function URL. For example: `["date", "keep-alive", "x-custom-header"]`.
+         * HTTP headers that origins can include in requests to the function URL.
          */
         allowHeaders?: string[];
         /**
-         * The HTTP methods that are allowed when calling the function URL. For example: `["GET", "POST", "DELETE"]`, or the wildcard character (`["*"]`).
+         * HTTP methods that are allowed when calling the function URL.
          */
         allowMethods?: string[];
         /**
-         * The origins that can access the function URL. You can list any number of specific origins (or the wildcard character (`"*"`)), separated by a comma. For example: `["https://www.example.com", "http://localhost:60905"]`.
+         * Origins that can access the function URL.
          */
         allowOrigins?: string[];
         /**
-         * The HTTP headers in your function response that you want to expose to origins that call the function URL.
+         * HTTP headers in your function response that you want to expose to origins that call the function URL.
          */
         exposeHeaders?: string[];
         /**
-         * The maximum amount of time, in seconds, that web browsers can cache results of a preflight request. By default, this is set to `0`, which means that the browser doesn't cache results. The maximum value is `86400`.
+         * Maximum amount of time, in seconds, that web browsers can cache results of a preflight request. Maximum value is `86400`.
          */
         maxAge?: number;
     }
     interface FunctionVpcConfig {
         /**
-         * Allows outbound IPv6 traffic on VPC functions that are connected to dual-stack subnets. Default is `false`.
+         * Whether to allow outbound IPv6 traffic on VPC functions connected to dual-stack subnets. Default: `false`.
          */
         ipv6AllowedForDualStack?: boolean;
         /**
@@ -48179,55 +47856,109 @@ export declare namespace lambda {
     }
     interface GetCodeSigningConfigAllowedPublisher {
         /**
-         * The ARN for each of the signing profiles. A signing profile defines a trusted user who can sign a code package.
+         * Set of ARNs for each of the signing profiles. A signing profile defines a trusted user who can sign a code package.
          */
         signingProfileVersionArns: string[];
     }
     interface GetCodeSigningConfigPolicy {
         /**
-         * Code signing configuration policy for deployment validation failure.
+         * Code signing configuration policy for deployment validation failure. Valid values: `Warn`, `Enforce`.
          */
         untrustedArtifactOnDeployment: string;
     }
     interface GetFunctionDeadLetterConfig {
+        /**
+         * ARN of an SNS topic or SQS queue to notify when an invocation fails.
+         */
         targetArn: string;
     }
     interface GetFunctionEnvironment {
+        /**
+         * Map of environment variables that are accessible from the function code during execution.
+         */
         variables: {
             [key: string]: string;
         };
     }
     interface GetFunctionEphemeralStorage {
+        /**
+         * Size of the Lambda function ephemeral storage (`/tmp`) in MB.
+         */
         size: number;
     }
     interface GetFunctionFileSystemConfig {
         /**
-         * Unqualified (no `:QUALIFIER` or `:VERSION` suffix) ARN identifying your Lambda Function. See also `qualifiedArn`.
+         * ARN of the Amazon EFS Access Point that provides access to the file system.
          */
         arn: string;
+        /**
+         * Path where the function can access the file system, starting with `/mnt/`.
+         */
         localMountPath: string;
     }
     interface GetFunctionLoggingConfig {
+        /**
+         * Detail level of the logs your application sends to CloudWatch when using supported logging libraries.
+         */
         applicationLogLevel: string;
+        /**
+         * Format for your function's logs. Valid values: `Text`, `JSON`.
+         */
         logFormat: string;
+        /**
+         * CloudWatch log group your function sends logs to.
+         */
         logGroup: string;
+        /**
+         * Detail level of the Lambda platform event logs sent to CloudWatch.
+         */
         systemLogLevel: string;
     }
     interface GetFunctionTracingConfig {
+        /**
+         * Tracing mode. Valid values: `Active`, `PassThrough`.
+         */
         mode: string;
     }
     interface GetFunctionUrlCor {
+        /**
+         * Whether credentials are included in the CORS request.
+         */
         allowCredentials: boolean;
+        /**
+         * List of headers that are specified in the Access-Control-Request-Headers header.
+         */
         allowHeaders: string[];
+        /**
+         * List of HTTP methods that are allowed when calling the function URL.
+         */
         allowMethods: string[];
+        /**
+         * List of origins that are allowed to make requests to the function URL.
+         */
         allowOrigins: string[];
+        /**
+         * List of headers in the response that you want to expose to the origin that called the function URL.
+         */
         exposeHeaders: string[];
+        /**
+         * Maximum amount of time, in seconds, that web browsers can cache results of a preflight request.
+         */
         maxAge: number;
     }
     interface GetFunctionVpcConfig {
         ipv6AllowedForDualStack: boolean;
+        /**
+         * List of security group IDs associated with the Lambda function.
+         */
         securityGroupIds: string[];
+        /**
+         * List of subnet IDs associated with the Lambda function.
+         */
         subnetIds: string[];
+        /**
+         * ID of the VPC.
+         */
         vpcId: string;
     }
 }
@@ -48311,22 +48042,22 @@ export declare namespace lb {
          * An action to authenticate using Amazon Cognito.
          * Detailed below.
          */
-        authenticateCognito?: outputs.lb.GetListenerRuleActionAuthenticateCognito;
+        authenticateCognitos?: outputs.lb.GetListenerRuleActionAuthenticateCognito[];
         /**
          * An action to authenticate using OIDC.
          * Detailed below.
          */
-        authenticateOidc?: outputs.lb.GetListenerRuleActionAuthenticateOidc;
+        authenticateOidcs?: outputs.lb.GetListenerRuleActionAuthenticateOidc[];
         /**
          * An action to return a fixed response.
          * Detailed below.
          */
-        fixedResponse?: outputs.lb.GetListenerRuleActionFixedResponse;
+        fixedResponses?: outputs.lb.GetListenerRuleActionFixedResponse[];
         /**
          * An action to forward the request.
          * Detailed below.
          */
-        forward?: outputs.lb.GetListenerRuleActionForward;
+        forwards?: outputs.lb.GetListenerRuleActionForward[];
         /**
          * The evaluation order of the action.
          */
@@ -48335,7 +48066,7 @@ export declare namespace lb {
          * An action to redirect the request.
          * Detailed below.
          */
-        redirect?: outputs.lb.GetListenerRuleActionRedirect;
+        redirects?: outputs.lb.GetListenerRuleActionRedirect[];
         /**
          * The type of the action, indicates which sub-block will be populated.
          */
@@ -48442,7 +48173,7 @@ export declare namespace lb {
          * Target group stickiness for the rule.
          * Detailed below.
          */
-        stickiness?: outputs.lb.GetListenerRuleActionForwardStickiness;
+        stickinesses?: outputs.lb.GetListenerRuleActionForwardStickiness[];
         /**
          * Set of target groups for the action.
          * Detailed below.
@@ -48500,29 +48231,29 @@ export declare namespace lb {
         /**
          * Contains a single attribute `values`, which contains a set of host names.
          */
-        hostHeader?: outputs.lb.GetListenerRuleConditionHostHeader;
+        hostHeaders?: outputs.lb.GetListenerRuleConditionHostHeader[];
         /**
          * HTTP header and values to match.
          * Detailed below.
          */
-        httpHeader?: outputs.lb.GetListenerRuleConditionHttpHeader;
+        httpHeaders?: outputs.lb.GetListenerRuleConditionHttpHeader[];
         /**
          * Contains a single attribute `values`, which contains a set of HTTP request methods.
          */
-        httpRequestMethod?: outputs.lb.GetListenerRuleConditionHttpRequestMethod;
+        httpRequestMethods?: outputs.lb.GetListenerRuleConditionHttpRequestMethod[];
         /**
          * Contains a single attribute `values`, which contains a set of path patterns to compare against the request URL.
          */
-        pathPattern?: outputs.lb.GetListenerRuleConditionPathPattern;
+        pathPatterns?: outputs.lb.GetListenerRuleConditionPathPattern[];
         /**
          * Query string parameters to match.
          * Detailed below.
          */
-        queryString?: outputs.lb.GetListenerRuleConditionQueryString;
+        queryStrings?: outputs.lb.GetListenerRuleConditionQueryString[];
         /**
          * Contains a single attribute `values`, which contains a set of source IPs in CIDR notation.
          */
-        sourceIp?: outputs.lb.GetListenerRuleConditionSourceIp;
+        sourceIps?: outputs.lb.GetListenerRuleConditionSourceIp[];
     }
     interface GetListenerRuleConditionHostHeader {
         /**
@@ -48821,11 +48552,12 @@ export declare namespace lb {
          */
         advertiseTrustStoreCaNames: string;
         /**
-         * Whether client certificate expiry is ignored. Default is `false`.
+         * Whether client certificate expiry is ignored.
+         * Default is `false`.
          */
         ignoreClientCertificateExpiry?: boolean;
         /**
-         * Valid values are `off`, `verify` and `passthrough`.
+         * Valid values are `off`, `passthrough`, and `verify`.
          */
         mode: string;
         /**
@@ -60446,14 +60178,14 @@ export declare namespace lex {
          * Settings required for a slot type based on a grammar that you provide.
          * See `grammarSlotTypeSetting` argument reference below.
          */
-        grammarSlotTypeSetting?: outputs.lex.V2modelsSlotTypeExternalSourceSettingGrammarSlotTypeSetting;
+        grammarSlotTypeSettings?: outputs.lex.V2modelsSlotTypeExternalSourceSettingGrammarSlotTypeSetting[];
     }
     interface V2modelsSlotTypeExternalSourceSettingGrammarSlotTypeSetting {
         /**
          * Source of the grammar used to create the slot type.
          * See `source` argument reference below.
          */
-        source?: outputs.lex.V2modelsSlotTypeExternalSourceSettingGrammarSlotTypeSettingSource;
+        sources?: outputs.lex.V2modelsSlotTypeExternalSourceSettingGrammarSlotTypeSettingSource[];
     }
     interface V2modelsSlotTypeExternalSourceSettingGrammarSlotTypeSettingSource {
         /**
@@ -60469,25 +60201,25 @@ export declare namespace lex {
          */
         s3ObjectKey: string;
     }
-    interface V2modelsSlotTypeSlotTypeValues {
+    interface V2modelsSlotTypeSlotTypeValue {
         /**
          * Value of the slot type entry.
          * See `sampleValue` argument reference below.
          */
-        sampleValues?: outputs.lex.V2modelsSlotTypeSlotTypeValuesSampleValue[];
+        sampleValues?: outputs.lex.V2modelsSlotTypeSlotTypeValueSampleValue[];
         /**
          * A list of additional values related to the slot type entry.
          * See `synonyms` argument reference below.
          */
-        synonyms?: outputs.lex.V2modelsSlotTypeSlotTypeValuesSynonym[];
+        synonyms?: outputs.lex.V2modelsSlotTypeSlotTypeValueSynonym[];
     }
-    interface V2modelsSlotTypeSlotTypeValuesSampleValue {
+    interface V2modelsSlotTypeSlotTypeValueSampleValue {
         /**
          * Value that can be used for a slot type.
          */
         value: string;
     }
-    interface V2modelsSlotTypeSlotTypeValuesSynonym {
+    interface V2modelsSlotTypeSlotTypeValueSynonym {
         /**
          * Value that can be used for a slot type.
          */
@@ -60600,7 +60332,7 @@ export declare namespace lex {
         variations?: outputs.lex.V2modelsSlotValueElicitationSettingPromptSpecificationMessageGroupVariation[];
     }
     interface V2modelsSlotValueElicitationSettingPromptSpecificationMessageGroupMessage {
-        customPayloads?: outputs.lex.V2modelsSlotValueElicitationSettingPromptSpecificationMessageGroupMessageCustomPayload[];
+        customPayload?: outputs.lex.V2modelsSlotValueElicitationSettingPromptSpecificationMessageGroupMessageCustomPayload;
         imageResponseCard?: outputs.lex.V2modelsSlotValueElicitationSettingPromptSpecificationMessageGroupMessageImageResponseCard;
         plainTextMessage?: outputs.lex.V2modelsSlotValueElicitationSettingPromptSpecificationMessageGroupMessagePlainTextMessage;
         ssmlMessage?: outputs.lex.V2modelsSlotValueElicitationSettingPromptSpecificationMessageGroupMessageSsmlMessage;
@@ -60625,7 +60357,7 @@ export declare namespace lex {
         value: string;
     }
     interface V2modelsSlotValueElicitationSettingPromptSpecificationMessageGroupVariation {
-        customPayloads?: outputs.lex.V2modelsSlotValueElicitationSettingPromptSpecificationMessageGroupVariationCustomPayload[];
+        customPayload?: outputs.lex.V2modelsSlotValueElicitationSettingPromptSpecificationMessageGroupVariationCustomPayload;
         imageResponseCard?: outputs.lex.V2modelsSlotValueElicitationSettingPromptSpecificationMessageGroupVariationImageResponseCard;
         plainTextMessage?: outputs.lex.V2modelsSlotValueElicitationSettingPromptSpecificationMessageGroupVariationPlainTextMessage;
         ssmlMessage?: outputs.lex.V2modelsSlotValueElicitationSettingPromptSpecificationMessageGroupVariationSsmlMessage;
@@ -60742,7 +60474,7 @@ export declare namespace lex {
         variations?: outputs.lex.V2modelsSlotValueElicitationSettingWaitAndContinueSpecificationContinueResponseMessageGroupVariation[];
     }
     interface V2modelsSlotValueElicitationSettingWaitAndContinueSpecificationContinueResponseMessageGroupMessage {
-        customPayloads?: outputs.lex.V2modelsSlotValueElicitationSettingWaitAndContinueSpecificationContinueResponseMessageGroupMessageCustomPayload[];
+        customPayload?: outputs.lex.V2modelsSlotValueElicitationSettingWaitAndContinueSpecificationContinueResponseMessageGroupMessageCustomPayload;
         imageResponseCard?: outputs.lex.V2modelsSlotValueElicitationSettingWaitAndContinueSpecificationContinueResponseMessageGroupMessageImageResponseCard;
         plainTextMessage?: outputs.lex.V2modelsSlotValueElicitationSettingWaitAndContinueSpecificationContinueResponseMessageGroupMessagePlainTextMessage;
         ssmlMessage?: outputs.lex.V2modelsSlotValueElicitationSettingWaitAndContinueSpecificationContinueResponseMessageGroupMessageSsmlMessage;
@@ -60767,7 +60499,7 @@ export declare namespace lex {
         value: string;
     }
     interface V2modelsSlotValueElicitationSettingWaitAndContinueSpecificationContinueResponseMessageGroupVariation {
-        customPayloads?: outputs.lex.V2modelsSlotValueElicitationSettingWaitAndContinueSpecificationContinueResponseMessageGroupVariationCustomPayload[];
+        customPayload?: outputs.lex.V2modelsSlotValueElicitationSettingWaitAndContinueSpecificationContinueResponseMessageGroupVariationCustomPayload;
         imageResponseCard?: outputs.lex.V2modelsSlotValueElicitationSettingWaitAndContinueSpecificationContinueResponseMessageGroupVariationImageResponseCard;
         plainTextMessage?: outputs.lex.V2modelsSlotValueElicitationSettingWaitAndContinueSpecificationContinueResponseMessageGroupVariationPlainTextMessage;
         ssmlMessage?: outputs.lex.V2modelsSlotValueElicitationSettingWaitAndContinueSpecificationContinueResponseMessageGroupVariationSsmlMessage;
@@ -60820,7 +60552,7 @@ export declare namespace lex {
         variations?: outputs.lex.V2modelsSlotValueElicitationSettingWaitAndContinueSpecificationStillWaitingResponseMessageGroupVariation[];
     }
     interface V2modelsSlotValueElicitationSettingWaitAndContinueSpecificationStillWaitingResponseMessageGroupMessage {
-        customPayloads?: outputs.lex.V2modelsSlotValueElicitationSettingWaitAndContinueSpecificationStillWaitingResponseMessageGroupMessageCustomPayload[];
+        customPayload?: outputs.lex.V2modelsSlotValueElicitationSettingWaitAndContinueSpecificationStillWaitingResponseMessageGroupMessageCustomPayload;
         imageResponseCard?: outputs.lex.V2modelsSlotValueElicitationSettingWaitAndContinueSpecificationStillWaitingResponseMessageGroupMessageImageResponseCard;
         plainTextMessage?: outputs.lex.V2modelsSlotValueElicitationSettingWaitAndContinueSpecificationStillWaitingResponseMessageGroupMessagePlainTextMessage;
         ssmlMessage?: outputs.lex.V2modelsSlotValueElicitationSettingWaitAndContinueSpecificationStillWaitingResponseMessageGroupMessageSsmlMessage;
@@ -60845,7 +60577,7 @@ export declare namespace lex {
         value: string;
     }
     interface V2modelsSlotValueElicitationSettingWaitAndContinueSpecificationStillWaitingResponseMessageGroupVariation {
-        customPayloads?: outputs.lex.V2modelsSlotValueElicitationSettingWaitAndContinueSpecificationStillWaitingResponseMessageGroupVariationCustomPayload[];
+        customPayload?: outputs.lex.V2modelsSlotValueElicitationSettingWaitAndContinueSpecificationStillWaitingResponseMessageGroupVariationCustomPayload;
         imageResponseCard?: outputs.lex.V2modelsSlotValueElicitationSettingWaitAndContinueSpecificationStillWaitingResponseMessageGroupVariationImageResponseCard;
         plainTextMessage?: outputs.lex.V2modelsSlotValueElicitationSettingWaitAndContinueSpecificationStillWaitingResponseMessageGroupVariationPlainTextMessage;
         ssmlMessage?: outputs.lex.V2modelsSlotValueElicitationSettingWaitAndContinueSpecificationStillWaitingResponseMessageGroupVariationSsmlMessage;
@@ -60895,7 +60627,7 @@ export declare namespace lex {
         variations?: outputs.lex.V2modelsSlotValueElicitationSettingWaitAndContinueSpecificationWaitingResponseMessageGroupVariation[];
     }
     interface V2modelsSlotValueElicitationSettingWaitAndContinueSpecificationWaitingResponseMessageGroupMessage {
-        customPayloads?: outputs.lex.V2modelsSlotValueElicitationSettingWaitAndContinueSpecificationWaitingResponseMessageGroupMessageCustomPayload[];
+        customPayload?: outputs.lex.V2modelsSlotValueElicitationSettingWaitAndContinueSpecificationWaitingResponseMessageGroupMessageCustomPayload;
         imageResponseCard?: outputs.lex.V2modelsSlotValueElicitationSettingWaitAndContinueSpecificationWaitingResponseMessageGroupMessageImageResponseCard;
         plainTextMessage?: outputs.lex.V2modelsSlotValueElicitationSettingWaitAndContinueSpecificationWaitingResponseMessageGroupMessagePlainTextMessage;
         ssmlMessage?: outputs.lex.V2modelsSlotValueElicitationSettingWaitAndContinueSpecificationWaitingResponseMessageGroupMessageSsmlMessage;
@@ -60920,7 +60652,7 @@ export declare namespace lex {
         value: string;
     }
     interface V2modelsSlotValueElicitationSettingWaitAndContinueSpecificationWaitingResponseMessageGroupVariation {
-        customPayloads?: outputs.lex.V2modelsSlotValueElicitationSettingWaitAndContinueSpecificationWaitingResponseMessageGroupVariationCustomPayload[];
+        customPayload?: outputs.lex.V2modelsSlotValueElicitationSettingWaitAndContinueSpecificationWaitingResponseMessageGroupVariationCustomPayload;
         imageResponseCard?: outputs.lex.V2modelsSlotValueElicitationSettingWaitAndContinueSpecificationWaitingResponseMessageGroupVariationImageResponseCard;
         plainTextMessage?: outputs.lex.V2modelsSlotValueElicitationSettingWaitAndContinueSpecificationWaitingResponseMessageGroupVariationPlainTextMessage;
         ssmlMessage?: outputs.lex.V2modelsSlotValueElicitationSettingWaitAndContinueSpecificationWaitingResponseMessageGroupVariationSsmlMessage;
@@ -61341,25 +61073,23 @@ export declare namespace lightsail {
          */
         cidrListAliases: string[];
         /**
-         * Set of CIDR blocks.
+         * Set of IPv4 addresses or ranges of IPv4 addresses (in CIDR notation) that are allowed to connect to an instance through the ports, and the protocol.
          */
         cidrs: string[];
         /**
-         * First port in a range of open ports on an instance.
+         * First port in a range of open ports on an instance. See [PortInfo](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_PortInfo.html) for details.
          */
         fromPort: number;
         /**
-         * Set of IPv6 CIDR blocks.
+         * Set of IPv6 addresses or ranges of IPv6 addresses (in CIDR notation) that are allowed to connect to an instance through the ports, and the protocol.
          */
         ipv6Cidrs: string[];
         /**
-         * IP protocol name. Valid values: `tcp`, `all`, `udp`, `icmp`.
+         * IP protocol name. Valid values: `tcp`, `all`, `udp`, `icmp`, `icmpv6`. See [PortInfo](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_PortInfo.html) for details.
          */
         protocol: string;
         /**
-         * Last port in a range of open ports on an instance.
-         *
-         * The following arguments are optional:
+         * Last port in a range of open ports on an instance. See [PortInfo](https://docs.aws.amazon.com/lightsail/2016-11-28/api-reference/API_PortInfo.html) for details.
          */
         toPort: number;
     }
@@ -64549,7 +64279,7 @@ export declare namespace memorydb {
 export declare namespace mq {
     interface BrokerConfiguration {
         /**
-         * The Configuration ID.
+         * Configuration ID.
          */
         id: string;
         /**
@@ -64559,17 +64289,17 @@ export declare namespace mq {
     }
     interface BrokerEncryptionOptions {
         /**
-         * Amazon Resource Name (ARN) of Key Management Service (KMS) Customer Master Key (CMK) to use for encryption at rest. Requires setting `useAwsOwnedKey` to `false`. To perform drift detection when AWS-managed CMKs or customer-managed CMKs are in use, this value must be configured.
+         * ARN of KMS CMK to use for encryption at rest. Requires setting `useAwsOwnedKey` to `false`. To perform drift detection when AWS-managed CMKs or customer-managed CMKs are in use, this value must be configured.
          */
         kmsKeyId: string;
         /**
-         * Whether to enable an AWS-owned KMS CMK that is not in your account. Defaults to `true`. Setting to `false` without configuring `kmsKeyId` will create an AWS-managed CMK aliased to `aws/mq` in your account.
+         * Whether to enable an AWS-owned KMS CMK not in your account. Defaults to `true`. Setting to `false` without configuring `kmsKeyId` creates an AWS-managed CMK aliased to `aws/mq` in your account.
          */
         useAwsOwnedKey?: boolean;
     }
     interface BrokerInstance {
         /**
-         * The URL of the [ActiveMQ Web Console](http://activemq.apache.org/web-console.html) or the [RabbitMQ Management UI](https://www.rabbitmq.com/management.html#external-monitoring) depending on `engineType`.
+         * URL of the [ActiveMQ Web Console](http://activemq.apache.org/web-console.html) or the [RabbitMQ Management UI](https://www.rabbitmq.com/management.html#external-monitoring) depending on `engineType`.
          */
         consoleUrl: string;
         /**
@@ -64591,15 +64321,15 @@ export declare namespace mq {
     }
     interface BrokerLdapServerMetadata {
         /**
-         * List of a fully qualified domain name of the LDAP server and an optional failover server.
+         * List of fully qualified domain names of the LDAP server and optional failover server.
          */
         hosts?: string[];
         /**
-         * Fully qualified name of the directory to search for a user’s groups.
+         * Fully qualified name of the directory to search for a user's groups.
          */
         roleBase?: string;
         /**
-         * Specifies the LDAP attribute that identifies the group name attribute in the object returned from the group membership query.
+         * LDAP attribute that identifies the group name attribute in the object returned from the group membership query.
          */
         roleName?: string;
         /**
@@ -64623,7 +64353,7 @@ export declare namespace mq {
          */
         userBase?: string;
         /**
-         * Specifies the name of the LDAP attribute for the user group membership.
+         * Name of the LDAP attribute for the user group membership.
          */
         userRoleName?: string;
         /**
@@ -64637,11 +64367,11 @@ export declare namespace mq {
     }
     interface BrokerLogs {
         /**
-         * Enables audit logging. Auditing is only possible for `engineType` of `ActiveMQ`. User management action made using JMX or the ActiveMQ Web Console is logged. Defaults to `false`.
+         * Whether to enable audit logging. Only possible for `engineType` of `ActiveMQ`. Logs user management actions via JMX or ActiveMQ Web Console. Defaults to `false`.
          */
         audit?: boolean;
         /**
-         * Enables general logging via CloudWatch. Defaults to `false`.
+         * Whether to enable general logging via CloudWatch. Defaults to `false`.
          */
         general?: boolean;
     }
@@ -64669,77 +64399,163 @@ export declare namespace mq {
          */
         groups?: string[];
         /**
-         * Password of the user. It must be 12 to 250 characters long, at least 4 unique characters, and must not contain commas.
+         * Password of the user. Must be 12 to 250 characters long, contain at least 4 unique characters, and must not contain commas.
          */
         password: string;
         /**
-         * Whether to set set replication user. Defaults to `false`.
+         * Whether to set replication user. Defaults to `false`.
+         *
+         * > **NOTE:** AWS currently does not support updating RabbitMQ users. Updates to users can only be in the RabbitMQ UI.
          */
         replicationUser?: boolean;
         /**
          * Username of the user.
          *
-         * > **NOTE:** AWS currently does not support updating RabbitMQ users. Updates to users can only be in the RabbitMQ UI.
+         * The following arguments are optional:
          */
         username: string;
     }
     interface GetBrokerConfiguration {
+        /**
+         * Configuration ID.
+         */
         id: string;
+        /**
+         * Revision of the Configuration.
+         */
         revision: number;
     }
     interface GetBrokerEncryptionOption {
+        /**
+         * Amazon Resource Name (ARN) of Key Management Service (KMS) Customer Master Key (CMK) to use for encryption at rest.
+         */
         kmsKeyId: string;
+        /**
+         * Whether to enable an AWS-owned KMS CMK that is not in your account.
+         */
         useAwsOwnedKey: boolean;
     }
     interface GetBrokerEngineTypesBrokerEngineType {
         /**
-         * The MQ engine type to return version details for.
+         * MQ engine type to return version details for.
          */
         engineType: string;
         /**
-         * The list of engine versions.
+         * List of engine versions. See Engine Versions.
          */
         engineVersions: outputs.mq.GetBrokerEngineTypesBrokerEngineTypeEngineVersion[];
     }
     interface GetBrokerEngineTypesBrokerEngineTypeEngineVersion {
+        /**
+         * Name of the engine version.
+         */
         name: string;
     }
     interface GetBrokerInstance {
+        /**
+         * URL of the ActiveMQ Web Console or the RabbitMQ Management UI depending on `engineType`.
+         */
         consoleUrl: string;
+        /**
+         * Broker's wire-level protocol endpoints.
+         */
         endpoints: string[];
+        /**
+         * IP Address of the broker.
+         */
         ipAddress: string;
     }
     interface GetBrokerLdapServerMetadata {
+        /**
+         * List of a fully qualified domain name of the LDAP server and an optional failover server.
+         */
         hosts: string[];
+        /**
+         * Fully qualified name of the directory to search for a user's groups.
+         */
         roleBase: string;
+        /**
+         * LDAP attribute that identifies the group name attribute in the object returned from the group membership query.
+         */
         roleName: string;
+        /**
+         * Search criteria for groups.
+         */
         roleSearchMatching: string;
+        /**
+         * Whether the directory search scope is the entire sub-tree.
+         */
         roleSearchSubtree: boolean;
+        /**
+         * Service account password.
+         */
         serviceAccountPassword: string;
+        /**
+         * Service account username.
+         */
         serviceAccountUsername: string;
+        /**
+         * Fully qualified name of the directory where you want to search for users.
+         */
         userBase: string;
+        /**
+         * Name of the LDAP attribute for the user group membership.
+         */
         userRoleName: string;
+        /**
+         * Search criteria for users.
+         */
         userSearchMatching: string;
+        /**
+         * Whether the directory search scope is the entire sub-tree.
+         */
         userSearchSubtree: boolean;
     }
     interface GetBrokerLogs {
+        /**
+         * Whether audit logging is enabled.
+         */
         audit: boolean;
+        /**
+         * Whether general logging is enabled.
+         */
         general: boolean;
     }
     interface GetBrokerMaintenanceWindowStartTime {
+        /**
+         * Day of the week.
+         */
         dayOfWeek: string;
+        /**
+         * Time, in 24-hour format.
+         */
         timeOfDay: string;
+        /**
+         * Time zone in either the Country/City format or the UTC offset format.
+         */
         timeZone: string;
     }
     interface GetBrokerUser {
+        /**
+         * Whether to enable access to the ActiveMQ Web Console for the user.
+         */
         consoleAccess: boolean;
+        /**
+         * List of groups to which the ActiveMQ user belongs.
+         */
         groups: string[];
+        /**
+         * Whether to set replication user.
+         */
         replicationUser: boolean;
+        /**
+         * Username of the user.
+         */
         username: string;
     }
     interface GetInstanceTypeOfferingsBrokerInstanceOption {
         /**
-         * List of available AZs. See Availability Zones. below
+         * List of available Availability Zones. See Availability Zones below.
          */
         availabilityZones: outputs.mq.GetInstanceTypeOfferingsBrokerInstanceOptionAvailabilityZone[];
         /**
@@ -64755,11 +64571,11 @@ export declare namespace mq {
          */
         storageType: string;
         /**
-         * The list of supported deployment modes.
+         * List of supported deployment modes.
          */
         supportedDeploymentModes: string[];
         /**
-         * The list of supported engine versions.
+         * List of supported engine versions.
          */
         supportedEngineVersions: string[];
     }
@@ -65673,6 +65489,12 @@ export declare namespace networkfirewall {
         tcpIdleTimeoutSeconds?: number;
     }
     interface FirewallPolicyFirewallPolicyStatefulRuleGroupReference {
+        /**
+         * Whether to enable deep threat inspection, which allows AWS to analyze service logs of network traffic processed by these rule groups to identify threat indicators across customers. AWS will use these threat indicators to improve the active threat defense managed rule groups and protect the security of AWS customers and services. This only applies to active threat defense maanaged rule groups.
+         *
+         * For details, refer to [AWS active threat defense for AWS Network Firewall](https://docs.aws.amazon.com/network-firewall/latest/developerguide/aws-managed-rule-groups-atd.html) in the AWS Network Firewall Developer Guide.
+         */
+        deepThreatInspection: string;
         /**
          * Configuration block for override values
          */
@@ -65838,6 +65660,7 @@ export declare namespace networkfirewall {
         streamExceptionPolicy: string;
     }
     interface GetFirewallPolicyFirewallPolicyStatefulRuleGroupReference {
+        deepThreatInspection: string;
         overrides?: outputs.networkfirewall.GetFirewallPolicyFirewallPolicyStatefulRuleGroupReferenceOverride[];
         priority: number;
         resourceArn: string;
@@ -66348,25 +66171,28 @@ export declare namespace networkfirewall {
 export declare namespace networkmanager {
     interface ConnectAttachmentOptions {
         /**
-         * The protocol used for the attachment connection. Possible values are `GRE` and `NO_ENCAP`.
+         * Protocol used for the attachment connection. Valid values: `GRE`, `NO_ENCAP`.
          */
         protocol?: string;
     }
     interface ConnectPeerBgpOptions {
+        /**
+         * Peer ASN.
+         */
         peerAsn?: number;
     }
     interface ConnectPeerConfiguration {
         bgpConfigurations: outputs.networkmanager.ConnectPeerConfigurationBgpConfiguration[];
         /**
-         * A Connect peer core network address.
+         * Connect peer core network address.
          */
         coreNetworkAddress: string;
         /**
-         * The inside IP addresses used for BGP peering. Required when the Connect attachment protocol is `GRE`. See `aws.networkmanager.ConnectAttachment` for details.
+         * Inside IP addresses used for BGP peering. Required when the Connect attachment protocol is `GRE`. See `aws.networkmanager.ConnectAttachment` for details.
          */
         insideCidrBlocks: string[];
         /**
-         * The Connect peer address.
+         * Connect peer address.
          *
          * The following arguments are optional:
          */
@@ -66375,16 +66201,19 @@ export declare namespace networkmanager {
     }
     interface ConnectPeerConfigurationBgpConfiguration {
         /**
-         * A Connect peer core network address.
+         * Connect peer core network address.
          */
         coreNetworkAddress: string;
         coreNetworkAsn: number;
         /**
-         * The Connect peer address.
+         * Connect peer address.
          *
          * The following arguments are optional:
          */
         peerAddress: string;
+        /**
+         * Peer ASN.
+         */
         peerAsn: number;
     }
     interface CoreNetworkEdge {
@@ -66417,25 +66246,25 @@ export declare namespace networkmanager {
     }
     interface DeviceAwsLocation {
         /**
-         * The Amazon Resource Name (ARN) of the subnet that the device is located in.
+         * ARN of the subnet that the device is located in.
          */
         subnetArn?: string;
         /**
-         * The Zone that the device is located in. Specify the ID of an Availability Zone, Local Zone, Wavelength Zone, or an Outpost.
+         * Zone that the device is located in. Specify the ID of an Availability Zone, Local Zone, Wavelength Zone, or an Outpost.
          */
         zone?: string;
     }
     interface DeviceLocation {
         /**
-         * The physical address.
+         * Physical address.
          */
         address?: string;
         /**
-         * The latitude.
+         * Latitude.
          */
         latitude?: string;
         /**
-         * The longitude.
+         * Longitude.
          */
         longitude?: string;
     }
@@ -66520,6 +66349,10 @@ export declare namespace networkmanager {
          * List of strings containing Autonomous System Numbers (ASNs) to assign to Core Network Edges. By default, the core network automatically assigns an ASN for each Core Network Edge but you can optionally define the ASN in the edge-locations for each Region. The ASN uses an array of integer ranges only from `64512` to `65534` and `4200000000` to `4294967294` expressed as a string like `"64512-65534"`. No other ASN ranges can be used.
          */
         asnRanges: string[];
+        /**
+         * Indicates whether DNS resolution is enabled for the core network. The value can be either `true` or `false`. When set to `true`, DNS resolution is enabled for VPCs attached to the core network, allowing resources in different VPCs to resolve each other's domain names. The default is `true`.
+         */
+        dnsSupport?: boolean;
         /**
          * A block value of AWS Region locations where you're creating Core Network Edges. Detailed below.
          */
@@ -66528,6 +66361,10 @@ export declare namespace networkmanager {
          * The Classless Inter-Domain Routing (CIDR) block range used to create tunnels for AWS Transit Gateway Connect. The format is standard AWS CIDR range (for example, `10.0.1.0/24`). You can optionally define the inside CIDR in the Core Network Edges section per Region. The minimum is a `/24` for IPv4 or `/64` for IPv6. You can provide multiple `/24` subnets or a larger CIDR range. If you define a larger CIDR range, new Core Network Edges will be automatically assigned `/24` and `/64` subnets from the larger CIDR. an Inside CIDR block is required for attaching Connect attachments to a Core Network Edge.
          */
         insideCidrBlocks?: string[];
+        /**
+         * — (Optional) Indicates whether security group referencing is enabled for the core network. The value can be either `true` or `false`. When set to `true`, security groups in one VPC can reference security groups in another VPC attached to the core network, enabling more flexible security configurations across your network. The default is `false`.
+         */
+        securityGroupReferencingSupport?: boolean;
         /**
          * Indicates whether the core network forwards traffic over multiple equal-cost routes using VPN. The value can be either `true` or `false`. The default is `true`.
          */
@@ -66736,14 +66573,11 @@ export declare namespace networkmanager {
     }
     interface VpcAttachmentOptions {
         /**
-         * Indicates whether appliance mode is supported.
-         * If enabled, traffic flow between a source and destination use the same Availability Zone for the VPC attachment for the lifetime of that flow.
-         * If the VPC attachment is pending acceptance, changing this value will recreate the resource.
+         * Whether to enable appliance mode support. If enabled, traffic flow between a source and destination use the same Availability Zone for the VPC attachment for the lifetime of that flow. If the VPC attachment is pending acceptance, changing this value will recreate the resource.
          */
         applianceModeSupport?: boolean;
         /**
-         * Indicates whether IPv6 is supported.
-         * If the VPC attachment is pending acceptance, changing this value will recreate the resource.
+         * Whether to enable IPv6 support. If the VPC attachment is pending acceptance, changing this value will recreate the resource.
          */
         ipv6Support?: boolean;
     }
@@ -67434,7 +67268,7 @@ export declare namespace opensearch {
          */
         vpcId: string;
     }
-    interface GetServerlessSecurityConfigSamlOptions {
+    interface GetServerlessSecurityConfigSamlOption {
         /**
          * Group attribute for this SAML integration.
          */
@@ -67619,933 +67453,6 @@ export declare namespace opensearchingest {
         vpcEndpointManagement?: string;
     }
 }
-export declare namespace opsworks {
-    interface ApplicationAppSource {
-        /**
-         * Password to use when authenticating to the source. This provider cannot perform drift detection of this configuration.
-         */
-        password?: string;
-        /**
-         * For sources that are version-aware, the revision to use.
-         */
-        revision?: string;
-        /**
-         * SSH key to use when authenticating to the source. This provider cannot perform drift detection of this configuration.
-         */
-        sshKey?: string;
-        /**
-         * The type of source to use. For example, "archive".
-         */
-        type: string;
-        /**
-         * The URL where the app resource can be found.
-         */
-        url?: string;
-        /**
-         * Username to use when authenticating to the source.
-         */
-        username?: string;
-    }
-    interface ApplicationEnvironment {
-        /**
-         * Variable name.
-         */
-        key: string;
-        /**
-         * Set visibility of the variable value to `true` or `false`.
-         */
-        secure?: boolean;
-        /**
-         * Variable value.
-         */
-        value: string;
-    }
-    interface ApplicationSslConfiguration {
-        /**
-         * The contents of the certificate's domain.crt file.
-         */
-        certificate: string;
-        /**
-         * Can be used to specify an intermediate certificate authority key or client authentication.
-         */
-        chain?: string;
-        /**
-         * The private key; the contents of the certificate's domain.key file.
-         */
-        privateKey: string;
-    }
-    interface CustomLayerCloudwatchConfiguration {
-        enabled?: boolean;
-        /**
-         * A block the specifies how an opsworks logs look like. See Log Streams.
-         */
-        logStreams?: outputs.opsworks.CustomLayerCloudwatchConfigurationLogStream[];
-    }
-    interface CustomLayerCloudwatchConfigurationLogStream {
-        /**
-         * Specifies the max number of log events in a batch, up to `10000`. The default value is `1000`.
-         */
-        batchCount?: number;
-        /**
-         * Specifies the maximum size of log events in a batch, in bytes, up to `1048576` bytes. The default value is `32768` bytes.
-         */
-        batchSize?: number;
-        /**
-         * Specifies the time duration for the batching of log events. The minimum value is `5000` and default value is `5000`.
-         */
-        bufferDuration?: number;
-        /**
-         * Specifies how the timestamp is extracted from logs. For more information, see the CloudWatch Logs Agent Reference (https://docs.aws.amazon.com/AmazonCloudWatch/latest/logs/AgentReference.html).
-         */
-        datetimeFormat?: string;
-        /**
-         * Specifies the encoding of the log file so that the file can be read correctly. The default is `utf8`.
-         */
-        encoding?: string;
-        /**
-         * Specifies log files that you want to push to CloudWatch Logs. File can point to a specific file or multiple files (by using wild card characters such as /var/log/system.log*).
-         */
-        file: string;
-        /**
-         * Specifies the range of lines for identifying a file. The valid values are one number, or two dash-delimited numbers, such as `1`, `2-5`. The default value is `1`.
-         */
-        fileFingerprintLines?: string;
-        /**
-         * Specifies where to start to read data (`startOfFile` or `endOfFile`). The default is `startOfFile`.
-         */
-        initialPosition?: string;
-        /**
-         * Specifies the destination log group. A log group is created automatically if it doesn't already exist.
-         */
-        logGroupName: string;
-        /**
-         * Specifies the pattern for identifying the start of a log message.
-         */
-        multilineStartPattern?: string;
-        /**
-         * Specifies the time zone of log event time stamps.
-         */
-        timeZone?: string;
-    }
-    interface CustomLayerEbsVolume {
-        /**
-         * Encrypt the volume.
-         */
-        encrypted?: boolean;
-        /**
-         * For PIOPS volumes, the IOPS per disk.
-         */
-        iops?: number;
-        /**
-         * The path to mount the EBS volume on the layer's instances.
-         */
-        mountPoint: string;
-        /**
-         * The number of disks to use for the EBS volume.
-         */
-        numberOfDisks: number;
-        /**
-         * The RAID level to use for the volume.
-         */
-        raidLevel?: string;
-        /**
-         * The size of the volume in gigabytes.
-         */
-        size: number;
-        /**
-         * The type of volume to create. This may be `standard` (the default), `io1` or `gp2`.
-         */
-        type?: string;
-    }
-    interface CustomLayerLoadBasedAutoScaling {
-        /**
-         * The downscaling settings, as defined below, used for load-based autoscaling
-         */
-        downscaling: outputs.opsworks.CustomLayerLoadBasedAutoScalingDownscaling;
-        /**
-         * Whether load-based auto scaling is enabled for the layer.
-         */
-        enable?: boolean;
-        /**
-         * The upscaling settings, as defined below, used for load-based autoscaling
-         */
-        upscaling: outputs.opsworks.CustomLayerLoadBasedAutoScalingUpscaling;
-    }
-    interface CustomLayerLoadBasedAutoScalingDownscaling {
-        /**
-         * Custom Cloudwatch auto scaling alarms, to be used as thresholds. This parameter takes a list of up to five alarm names, which are case sensitive and must be in the same region as the stack.
-         */
-        alarms?: string[];
-        /**
-         * The CPU utilization threshold, as a percent of the available CPU. A value of -1 disables the threshold.
-         */
-        cpuThreshold?: number;
-        /**
-         * The amount of time (in minutes) after a scaling event occurs that AWS OpsWorks Stacks should ignore metrics and suppress additional scaling events.
-         */
-        ignoreMetricsTime?: number;
-        /**
-         * The number of instances to add or remove when the load exceeds a threshold.
-         */
-        instanceCount?: number;
-        /**
-         * The load threshold. A value of -1 disables the threshold.
-         */
-        loadThreshold?: number;
-        /**
-         * The memory utilization threshold, as a percent of the available memory. A value of -1 disables the threshold.
-         */
-        memoryThreshold?: number;
-        /**
-         * The amount of time, in minutes, that the load must exceed a threshold before more instances are added or removed.
-         */
-        thresholdsWaitTime?: number;
-    }
-    interface CustomLayerLoadBasedAutoScalingUpscaling {
-        /**
-         * Custom Cloudwatch auto scaling alarms, to be used as thresholds. This parameter takes a list of up to five alarm names, which are case sensitive and must be in the same region as the stack.
-         */
-        alarms?: string[];
-        /**
-         * The CPU utilization threshold, as a percent of the available CPU. A value of -1 disables the threshold.
-         */
-        cpuThreshold?: number;
-        /**
-         * The amount of time (in minutes) after a scaling event occurs that AWS OpsWorks Stacks should ignore metrics and suppress additional scaling events.
-         */
-        ignoreMetricsTime?: number;
-        /**
-         * The number of instances to add or remove when the load exceeds a threshold.
-         */
-        instanceCount?: number;
-        /**
-         * The load threshold. A value of -1 disables the threshold.
-         */
-        loadThreshold?: number;
-        /**
-         * The memory utilization threshold, as a percent of the available memory. A value of -1 disables the threshold.
-         */
-        memoryThreshold?: number;
-        /**
-         * The amount of time, in minutes, that the load must exceed a threshold before more instances are added or removed.
-         */
-        thresholdsWaitTime?: number;
-    }
-    interface EcsClusterLayerCloudwatchConfiguration {
-        enabled?: boolean;
-        logStreams?: outputs.opsworks.EcsClusterLayerCloudwatchConfigurationLogStream[];
-    }
-    interface EcsClusterLayerCloudwatchConfigurationLogStream {
-        batchCount?: number;
-        batchSize?: number;
-        bufferDuration?: number;
-        datetimeFormat?: string;
-        encoding?: string;
-        file: string;
-        fileFingerprintLines?: string;
-        initialPosition?: string;
-        logGroupName: string;
-        multilineStartPattern?: string;
-        timeZone?: string;
-    }
-    interface EcsClusterLayerEbsVolume {
-        encrypted?: boolean;
-        /**
-         * For PIOPS volumes, the IOPS per disk.
-         */
-        iops?: number;
-        /**
-         * The path to mount the EBS volume on the layer's instances.
-         */
-        mountPoint: string;
-        /**
-         * The number of disks to use for the EBS volume.
-         */
-        numberOfDisks: number;
-        /**
-         * The RAID level to use for the volume.
-         */
-        raidLevel?: string;
-        /**
-         * The size of the volume in gigabytes.
-         */
-        size: number;
-        /**
-         * The type of volume to create. This may be `standard` (the default), `io1` or `gp2`.
-         */
-        type?: string;
-    }
-    interface EcsClusterLayerLoadBasedAutoScaling {
-        downscaling: outputs.opsworks.EcsClusterLayerLoadBasedAutoScalingDownscaling;
-        enable?: boolean;
-        upscaling: outputs.opsworks.EcsClusterLayerLoadBasedAutoScalingUpscaling;
-    }
-    interface EcsClusterLayerLoadBasedAutoScalingDownscaling {
-        alarms?: string[];
-        cpuThreshold?: number;
-        ignoreMetricsTime?: number;
-        instanceCount?: number;
-        loadThreshold?: number;
-        memoryThreshold?: number;
-        thresholdsWaitTime?: number;
-    }
-    interface EcsClusterLayerLoadBasedAutoScalingUpscaling {
-        alarms?: string[];
-        cpuThreshold?: number;
-        ignoreMetricsTime?: number;
-        instanceCount?: number;
-        loadThreshold?: number;
-        memoryThreshold?: number;
-        thresholdsWaitTime?: number;
-    }
-    interface GangliaLayerCloudwatchConfiguration {
-        enabled?: boolean;
-        logStreams?: outputs.opsworks.GangliaLayerCloudwatchConfigurationLogStream[];
-    }
-    interface GangliaLayerCloudwatchConfigurationLogStream {
-        batchCount?: number;
-        batchSize?: number;
-        bufferDuration?: number;
-        datetimeFormat?: string;
-        encoding?: string;
-        file: string;
-        fileFingerprintLines?: string;
-        initialPosition?: string;
-        logGroupName: string;
-        multilineStartPattern?: string;
-        timeZone?: string;
-    }
-    interface GangliaLayerEbsVolume {
-        encrypted?: boolean;
-        /**
-         * For PIOPS volumes, the IOPS per disk.
-         */
-        iops?: number;
-        /**
-         * The path to mount the EBS volume on the layer's instances.
-         */
-        mountPoint: string;
-        /**
-         * The number of disks to use for the EBS volume.
-         */
-        numberOfDisks: number;
-        /**
-         * The RAID level to use for the volume.
-         */
-        raidLevel?: string;
-        /**
-         * The size of the volume in gigabytes.
-         */
-        size: number;
-        /**
-         * The type of volume to create. This may be `standard` (the default), `io1` or `gp2`.
-         */
-        type?: string;
-    }
-    interface GangliaLayerLoadBasedAutoScaling {
-        downscaling: outputs.opsworks.GangliaLayerLoadBasedAutoScalingDownscaling;
-        enable?: boolean;
-        upscaling: outputs.opsworks.GangliaLayerLoadBasedAutoScalingUpscaling;
-    }
-    interface GangliaLayerLoadBasedAutoScalingDownscaling {
-        alarms?: string[];
-        cpuThreshold?: number;
-        ignoreMetricsTime?: number;
-        instanceCount?: number;
-        loadThreshold?: number;
-        memoryThreshold?: number;
-        thresholdsWaitTime?: number;
-    }
-    interface GangliaLayerLoadBasedAutoScalingUpscaling {
-        alarms?: string[];
-        cpuThreshold?: number;
-        ignoreMetricsTime?: number;
-        instanceCount?: number;
-        loadThreshold?: number;
-        memoryThreshold?: number;
-        thresholdsWaitTime?: number;
-    }
-    interface HaproxyLayerCloudwatchConfiguration {
-        enabled?: boolean;
-        logStreams?: outputs.opsworks.HaproxyLayerCloudwatchConfigurationLogStream[];
-    }
-    interface HaproxyLayerCloudwatchConfigurationLogStream {
-        batchCount?: number;
-        batchSize?: number;
-        bufferDuration?: number;
-        datetimeFormat?: string;
-        encoding?: string;
-        file: string;
-        fileFingerprintLines?: string;
-        initialPosition?: string;
-        logGroupName: string;
-        multilineStartPattern?: string;
-        timeZone?: string;
-    }
-    interface HaproxyLayerEbsVolume {
-        encrypted?: boolean;
-        /**
-         * For PIOPS volumes, the IOPS per disk.
-         */
-        iops?: number;
-        /**
-         * The path to mount the EBS volume on the layer's instances.
-         */
-        mountPoint: string;
-        /**
-         * The number of disks to use for the EBS volume.
-         */
-        numberOfDisks: number;
-        /**
-         * The RAID level to use for the volume.
-         */
-        raidLevel?: string;
-        /**
-         * The size of the volume in gigabytes.
-         */
-        size: number;
-        /**
-         * The type of volume to create. This may be `standard` (the default), `io1` or `gp2`.
-         */
-        type?: string;
-    }
-    interface HaproxyLayerLoadBasedAutoScaling {
-        downscaling: outputs.opsworks.HaproxyLayerLoadBasedAutoScalingDownscaling;
-        enable?: boolean;
-        upscaling: outputs.opsworks.HaproxyLayerLoadBasedAutoScalingUpscaling;
-    }
-    interface HaproxyLayerLoadBasedAutoScalingDownscaling {
-        alarms?: string[];
-        cpuThreshold?: number;
-        ignoreMetricsTime?: number;
-        instanceCount?: number;
-        loadThreshold?: number;
-        memoryThreshold?: number;
-        thresholdsWaitTime?: number;
-    }
-    interface HaproxyLayerLoadBasedAutoScalingUpscaling {
-        alarms?: string[];
-        cpuThreshold?: number;
-        ignoreMetricsTime?: number;
-        instanceCount?: number;
-        loadThreshold?: number;
-        memoryThreshold?: number;
-        thresholdsWaitTime?: number;
-    }
-    interface InstanceEbsBlockDevice {
-        deleteOnTermination?: boolean;
-        deviceName: string;
-        iops: number;
-        snapshotId: string;
-        volumeSize: number;
-        volumeType: string;
-    }
-    interface InstanceEphemeralBlockDevice {
-        deviceName: string;
-        virtualName: string;
-    }
-    interface InstanceRootBlockDevice {
-        deleteOnTermination?: boolean;
-        iops: number;
-        volumeSize: number;
-        volumeType: string;
-    }
-    interface JavaAppLayerCloudwatchConfiguration {
-        enabled?: boolean;
-        logStreams?: outputs.opsworks.JavaAppLayerCloudwatchConfigurationLogStream[];
-    }
-    interface JavaAppLayerCloudwatchConfigurationLogStream {
-        batchCount?: number;
-        batchSize?: number;
-        bufferDuration?: number;
-        datetimeFormat?: string;
-        encoding?: string;
-        file: string;
-        fileFingerprintLines?: string;
-        initialPosition?: string;
-        logGroupName: string;
-        multilineStartPattern?: string;
-        timeZone?: string;
-    }
-    interface JavaAppLayerEbsVolume {
-        encrypted?: boolean;
-        /**
-         * For PIOPS volumes, the IOPS per disk.
-         */
-        iops?: number;
-        /**
-         * The path to mount the EBS volume on the layer's instances.
-         */
-        mountPoint: string;
-        /**
-         * The number of disks to use for the EBS volume.
-         */
-        numberOfDisks: number;
-        /**
-         * The RAID level to use for the volume.
-         */
-        raidLevel?: string;
-        /**
-         * The size of the volume in gigabytes.
-         */
-        size: number;
-        /**
-         * The type of volume to create. This may be `standard` (the default), `io1` or `gp2`.
-         */
-        type?: string;
-    }
-    interface JavaAppLayerLoadBasedAutoScaling {
-        downscaling: outputs.opsworks.JavaAppLayerLoadBasedAutoScalingDownscaling;
-        enable?: boolean;
-        upscaling: outputs.opsworks.JavaAppLayerLoadBasedAutoScalingUpscaling;
-    }
-    interface JavaAppLayerLoadBasedAutoScalingDownscaling {
-        alarms?: string[];
-        cpuThreshold?: number;
-        ignoreMetricsTime?: number;
-        instanceCount?: number;
-        loadThreshold?: number;
-        memoryThreshold?: number;
-        thresholdsWaitTime?: number;
-    }
-    interface JavaAppLayerLoadBasedAutoScalingUpscaling {
-        alarms?: string[];
-        cpuThreshold?: number;
-        ignoreMetricsTime?: number;
-        instanceCount?: number;
-        loadThreshold?: number;
-        memoryThreshold?: number;
-        thresholdsWaitTime?: number;
-    }
-    interface MemcachedLayerCloudwatchConfiguration {
-        enabled?: boolean;
-        logStreams?: outputs.opsworks.MemcachedLayerCloudwatchConfigurationLogStream[];
-    }
-    interface MemcachedLayerCloudwatchConfigurationLogStream {
-        batchCount?: number;
-        batchSize?: number;
-        bufferDuration?: number;
-        datetimeFormat?: string;
-        encoding?: string;
-        file: string;
-        fileFingerprintLines?: string;
-        initialPosition?: string;
-        logGroupName: string;
-        multilineStartPattern?: string;
-        timeZone?: string;
-    }
-    interface MemcachedLayerEbsVolume {
-        encrypted?: boolean;
-        /**
-         * For PIOPS volumes, the IOPS per disk.
-         */
-        iops?: number;
-        /**
-         * The path to mount the EBS volume on the layer's instances.
-         */
-        mountPoint: string;
-        /**
-         * The number of disks to use for the EBS volume.
-         */
-        numberOfDisks: number;
-        /**
-         * The RAID level to use for the volume.
-         */
-        raidLevel?: string;
-        /**
-         * The size of the volume in gigabytes.
-         */
-        size: number;
-        /**
-         * The type of volume to create. This may be `standard` (the default), `io1` or `gp2`.
-         */
-        type?: string;
-    }
-    interface MemcachedLayerLoadBasedAutoScaling {
-        downscaling: outputs.opsworks.MemcachedLayerLoadBasedAutoScalingDownscaling;
-        enable?: boolean;
-        upscaling: outputs.opsworks.MemcachedLayerLoadBasedAutoScalingUpscaling;
-    }
-    interface MemcachedLayerLoadBasedAutoScalingDownscaling {
-        alarms?: string[];
-        cpuThreshold?: number;
-        ignoreMetricsTime?: number;
-        instanceCount?: number;
-        loadThreshold?: number;
-        memoryThreshold?: number;
-        thresholdsWaitTime?: number;
-    }
-    interface MemcachedLayerLoadBasedAutoScalingUpscaling {
-        alarms?: string[];
-        cpuThreshold?: number;
-        ignoreMetricsTime?: number;
-        instanceCount?: number;
-        loadThreshold?: number;
-        memoryThreshold?: number;
-        thresholdsWaitTime?: number;
-    }
-    interface MysqlLayerCloudwatchConfiguration {
-        enabled?: boolean;
-        logStreams?: outputs.opsworks.MysqlLayerCloudwatchConfigurationLogStream[];
-    }
-    interface MysqlLayerCloudwatchConfigurationLogStream {
-        batchCount?: number;
-        batchSize?: number;
-        bufferDuration?: number;
-        datetimeFormat?: string;
-        encoding?: string;
-        file: string;
-        fileFingerprintLines?: string;
-        initialPosition?: string;
-        logGroupName: string;
-        multilineStartPattern?: string;
-        timeZone?: string;
-    }
-    interface MysqlLayerEbsVolume {
-        encrypted?: boolean;
-        /**
-         * For PIOPS volumes, the IOPS per disk.
-         */
-        iops?: number;
-        /**
-         * The path to mount the EBS volume on the layer's instances.
-         */
-        mountPoint: string;
-        /**
-         * The number of disks to use for the EBS volume.
-         */
-        numberOfDisks: number;
-        /**
-         * The RAID level to use for the volume.
-         */
-        raidLevel?: string;
-        /**
-         * The size of the volume in gigabytes.
-         */
-        size: number;
-        /**
-         * The type of volume to create. This may be `standard` (the default), `io1` or `gp2`.
-         */
-        type?: string;
-    }
-    interface MysqlLayerLoadBasedAutoScaling {
-        downscaling: outputs.opsworks.MysqlLayerLoadBasedAutoScalingDownscaling;
-        enable?: boolean;
-        upscaling: outputs.opsworks.MysqlLayerLoadBasedAutoScalingUpscaling;
-    }
-    interface MysqlLayerLoadBasedAutoScalingDownscaling {
-        alarms?: string[];
-        cpuThreshold?: number;
-        ignoreMetricsTime?: number;
-        instanceCount?: number;
-        loadThreshold?: number;
-        memoryThreshold?: number;
-        thresholdsWaitTime?: number;
-    }
-    interface MysqlLayerLoadBasedAutoScalingUpscaling {
-        alarms?: string[];
-        cpuThreshold?: number;
-        ignoreMetricsTime?: number;
-        instanceCount?: number;
-        loadThreshold?: number;
-        memoryThreshold?: number;
-        thresholdsWaitTime?: number;
-    }
-    interface NodejsAppLayerCloudwatchConfiguration {
-        enabled?: boolean;
-        logStreams?: outputs.opsworks.NodejsAppLayerCloudwatchConfigurationLogStream[];
-    }
-    interface NodejsAppLayerCloudwatchConfigurationLogStream {
-        batchCount?: number;
-        batchSize?: number;
-        bufferDuration?: number;
-        datetimeFormat?: string;
-        encoding?: string;
-        file: string;
-        fileFingerprintLines?: string;
-        initialPosition?: string;
-        logGroupName: string;
-        multilineStartPattern?: string;
-        timeZone?: string;
-    }
-    interface NodejsAppLayerEbsVolume {
-        encrypted?: boolean;
-        /**
-         * For PIOPS volumes, the IOPS per disk.
-         */
-        iops?: number;
-        /**
-         * The path to mount the EBS volume on the layer's instances.
-         */
-        mountPoint: string;
-        /**
-         * The number of disks to use for the EBS volume.
-         */
-        numberOfDisks: number;
-        /**
-         * The RAID level to use for the volume.
-         */
-        raidLevel?: string;
-        /**
-         * The size of the volume in gigabytes.
-         */
-        size: number;
-        /**
-         * The type of volume to create. This may be `standard` (the default), `io1` or `gp2`.
-         */
-        type?: string;
-    }
-    interface NodejsAppLayerLoadBasedAutoScaling {
-        downscaling: outputs.opsworks.NodejsAppLayerLoadBasedAutoScalingDownscaling;
-        enable?: boolean;
-        upscaling: outputs.opsworks.NodejsAppLayerLoadBasedAutoScalingUpscaling;
-    }
-    interface NodejsAppLayerLoadBasedAutoScalingDownscaling {
-        alarms?: string[];
-        cpuThreshold?: number;
-        ignoreMetricsTime?: number;
-        instanceCount?: number;
-        loadThreshold?: number;
-        memoryThreshold?: number;
-        thresholdsWaitTime?: number;
-    }
-    interface NodejsAppLayerLoadBasedAutoScalingUpscaling {
-        alarms?: string[];
-        cpuThreshold?: number;
-        ignoreMetricsTime?: number;
-        instanceCount?: number;
-        loadThreshold?: number;
-        memoryThreshold?: number;
-        thresholdsWaitTime?: number;
-    }
-    interface PhpAppLayerCloudwatchConfiguration {
-        enabled?: boolean;
-        logStreams?: outputs.opsworks.PhpAppLayerCloudwatchConfigurationLogStream[];
-    }
-    interface PhpAppLayerCloudwatchConfigurationLogStream {
-        batchCount?: number;
-        batchSize?: number;
-        bufferDuration?: number;
-        datetimeFormat?: string;
-        encoding?: string;
-        file: string;
-        fileFingerprintLines?: string;
-        initialPosition?: string;
-        logGroupName: string;
-        multilineStartPattern?: string;
-        timeZone?: string;
-    }
-    interface PhpAppLayerEbsVolume {
-        encrypted?: boolean;
-        /**
-         * For PIOPS volumes, the IOPS per disk.
-         */
-        iops?: number;
-        /**
-         * The path to mount the EBS volume on the layer's instances.
-         */
-        mountPoint: string;
-        /**
-         * The number of disks to use for the EBS volume.
-         */
-        numberOfDisks: number;
-        /**
-         * The RAID level to use for the volume.
-         */
-        raidLevel?: string;
-        /**
-         * The size of the volume in gigabytes.
-         */
-        size: number;
-        /**
-         * The type of volume to create. This may be `standard` (the default), `io1` or `gp2`.
-         */
-        type?: string;
-    }
-    interface PhpAppLayerLoadBasedAutoScaling {
-        downscaling: outputs.opsworks.PhpAppLayerLoadBasedAutoScalingDownscaling;
-        enable?: boolean;
-        upscaling: outputs.opsworks.PhpAppLayerLoadBasedAutoScalingUpscaling;
-    }
-    interface PhpAppLayerLoadBasedAutoScalingDownscaling {
-        alarms?: string[];
-        cpuThreshold?: number;
-        ignoreMetricsTime?: number;
-        instanceCount?: number;
-        loadThreshold?: number;
-        memoryThreshold?: number;
-        thresholdsWaitTime?: number;
-    }
-    interface PhpAppLayerLoadBasedAutoScalingUpscaling {
-        alarms?: string[];
-        cpuThreshold?: number;
-        ignoreMetricsTime?: number;
-        instanceCount?: number;
-        loadThreshold?: number;
-        memoryThreshold?: number;
-        thresholdsWaitTime?: number;
-    }
-    interface RailsAppLayerCloudwatchConfiguration {
-        enabled?: boolean;
-        logStreams?: outputs.opsworks.RailsAppLayerCloudwatchConfigurationLogStream[];
-    }
-    interface RailsAppLayerCloudwatchConfigurationLogStream {
-        batchCount?: number;
-        batchSize?: number;
-        bufferDuration?: number;
-        datetimeFormat?: string;
-        encoding?: string;
-        file: string;
-        fileFingerprintLines?: string;
-        initialPosition?: string;
-        logGroupName: string;
-        multilineStartPattern?: string;
-        timeZone?: string;
-    }
-    interface RailsAppLayerEbsVolume {
-        encrypted?: boolean;
-        /**
-         * For PIOPS volumes, the IOPS per disk.
-         */
-        iops?: number;
-        /**
-         * The path to mount the EBS volume on the layer's instances.
-         */
-        mountPoint: string;
-        /**
-         * The number of disks to use for the EBS volume.
-         */
-        numberOfDisks: number;
-        /**
-         * The RAID level to use for the volume.
-         */
-        raidLevel?: string;
-        /**
-         * The size of the volume in gigabytes.
-         */
-        size: number;
-        /**
-         * The type of volume to create. This may be `standard` (the default), `io1` or `gp2`.
-         */
-        type?: string;
-    }
-    interface RailsAppLayerLoadBasedAutoScaling {
-        downscaling: outputs.opsworks.RailsAppLayerLoadBasedAutoScalingDownscaling;
-        enable?: boolean;
-        upscaling: outputs.opsworks.RailsAppLayerLoadBasedAutoScalingUpscaling;
-    }
-    interface RailsAppLayerLoadBasedAutoScalingDownscaling {
-        alarms?: string[];
-        cpuThreshold?: number;
-        ignoreMetricsTime?: number;
-        instanceCount?: number;
-        loadThreshold?: number;
-        memoryThreshold?: number;
-        thresholdsWaitTime?: number;
-    }
-    interface RailsAppLayerLoadBasedAutoScalingUpscaling {
-        alarms?: string[];
-        cpuThreshold?: number;
-        ignoreMetricsTime?: number;
-        instanceCount?: number;
-        loadThreshold?: number;
-        memoryThreshold?: number;
-        thresholdsWaitTime?: number;
-    }
-    interface StackCustomCookbooksSource {
-        /**
-         * Password to use when authenticating to the source. The provider cannot perform drift detection of this configuration.
-         */
-        password?: string;
-        /**
-         * For sources that are version-aware, the revision to use.
-         */
-        revision?: string;
-        /**
-         * SSH key to use when authenticating to the source. This provider cannot perform drift detection of this configuration.
-         */
-        sshKey?: string;
-        /**
-         * The type of source to use. For example, "archive".
-         */
-        type: string;
-        /**
-         * The URL where the cookbooks resource can be found.
-         */
-        url: string;
-        /**
-         * Username to use when authenticating to the source.
-         */
-        username?: string;
-    }
-    interface StaticWebLayerCloudwatchConfiguration {
-        enabled?: boolean;
-        logStreams?: outputs.opsworks.StaticWebLayerCloudwatchConfigurationLogStream[];
-    }
-    interface StaticWebLayerCloudwatchConfigurationLogStream {
-        batchCount?: number;
-        batchSize?: number;
-        bufferDuration?: number;
-        datetimeFormat?: string;
-        encoding?: string;
-        file: string;
-        fileFingerprintLines?: string;
-        initialPosition?: string;
-        logGroupName: string;
-        multilineStartPattern?: string;
-        timeZone?: string;
-    }
-    interface StaticWebLayerEbsVolume {
-        encrypted?: boolean;
-        /**
-         * For PIOPS volumes, the IOPS per disk.
-         */
-        iops?: number;
-        /**
-         * The path to mount the EBS volume on the layer's instances.
-         */
-        mountPoint: string;
-        /**
-         * The number of disks to use for the EBS volume.
-         */
-        numberOfDisks: number;
-        /**
-         * The RAID level to use for the volume.
-         */
-        raidLevel?: string;
-        /**
-         * The size of the volume in gigabytes.
-         */
-        size: number;
-        /**
-         * The type of volume to create. This may be `standard` (the default), `io1` or `gp2`.
-         */
-        type?: string;
-    }
-    interface StaticWebLayerLoadBasedAutoScaling {
-        downscaling: outputs.opsworks.StaticWebLayerLoadBasedAutoScalingDownscaling;
-        enable?: boolean;
-        upscaling: outputs.opsworks.StaticWebLayerLoadBasedAutoScalingUpscaling;
-    }
-    interface StaticWebLayerLoadBasedAutoScalingDownscaling {
-        alarms?: string[];
-        cpuThreshold?: number;
-        ignoreMetricsTime?: number;
-        instanceCount?: number;
-        loadThreshold?: number;
-        memoryThreshold?: number;
-        thresholdsWaitTime?: number;
-    }
-    interface StaticWebLayerLoadBasedAutoScalingUpscaling {
-        alarms?: string[];
-        cpuThreshold?: number;
-        ignoreMetricsTime?: number;
-        instanceCount?: number;
-        loadThreshold?: number;
-        memoryThreshold?: number;
-        thresholdsWaitTime?: number;
-    }
-}
 export declare namespace organizations {
     interface GetDelegatedAdministratorsDelegatedAdministrator {
         /**
@@ -68821,7 +67728,7 @@ export declare namespace organizations {
     }
 }
 export declare namespace paymentcryptography {
-    interface KeyKeyAttributes {
+    interface KeyKeyAttribute {
         /**
          * Key algorithm to be use during creation of an AWS Payment Cryptography key.
          */
@@ -68833,13 +67740,13 @@ export declare namespace paymentcryptography {
         /**
          * List of cryptographic operations that you can perform using the key.
          */
-        keyModesOfUse?: outputs.paymentcryptography.KeyKeyAttributesKeyModesOfUse;
+        keyModesOfUses?: outputs.paymentcryptography.KeyKeyAttributeKeyModesOfUse[];
         /**
          * Cryptographic usage of an AWS Payment Cryptography key as defined in section A.5.2 of the TR-31 spec.
          */
         keyUsage: string;
     }
-    interface KeyKeyAttributesKeyModesOfUse {
+    interface KeyKeyAttributeKeyModesOfUse {
         /**
          * Whether an AWS Payment Cryptography key can be used to decrypt data.
          */
@@ -71059,10 +69966,6 @@ export declare namespace quicksight {
          */
         principal: string;
     }
-    interface GetAnalysisPermission {
-        actions: string[];
-        principal: string;
-    }
     interface GetDataSetColumnGroup {
         geoSpatialColumnGroups: outputs.quicksight.GetDataSetColumnGroupGeoSpatialColumnGroup[];
     }
@@ -71688,6 +70591,18 @@ export declare namespace ram {
     }
 }
 export declare namespace rbin {
+    interface RuleExcludeResourceTag {
+        /**
+         * Tag key.
+         *
+         * The following argument is optional:
+         */
+        resourceTagKey: string;
+        /**
+         * Tag value.
+         */
+        resourceTagValue?: string;
+    }
     interface RuleLockConfiguration {
         /**
          * Information about the retention rule unlock delay. See `unlockDelay` below.
@@ -71696,33 +70611,33 @@ export declare namespace rbin {
     }
     interface RuleLockConfigurationUnlockDelay {
         /**
-         * The unit of time in which to measure the unlock delay. Currently, the unlock delay can be measure only in days.
+         * Unit of time in which to measure the unlock delay. Currently, the unlock delay can be measure only in days.
          */
         unlockDelayUnit: string;
         /**
-         * The unlock delay period, measured in the unit specified for UnlockDelayUnit.
+         * Unlock delay period, measured in the unit specified for UnlockDelayUnit.
          */
         unlockDelayValue: number;
     }
     interface RuleResourceTag {
         /**
-         * The tag key.
+         * Tag key.
          *
          * The following argument is optional:
          */
         resourceTagKey: string;
         /**
-         * The tag value.
+         * Tag value.
          */
         resourceTagValue?: string;
     }
     interface RuleRetentionPeriod {
         /**
-         * The unit of time in which the retention period is measured. Currently, only DAYS is supported.
+         * Unit of time in which the retention period is measured. Currently, only DAYS is supported.
          */
         retentionPeriodUnit: string;
         /**
-         * The period value for which the retention rule is to retain resources. The period is measured using the unit specified for RetentionPeriodUnit.
+         * Period value for which the retention rule is to retain resources. The period is measured using the unit specified for RetentionPeriodUnit.
          */
         retentionPeriodValue: number;
     }
@@ -72169,43 +71084,6 @@ export declare namespace redshift {
          */
         publicIpAddress: string;
     }
-    interface ClusterLogging {
-        /**
-         * The name of an existing S3 bucket where the log files are to be stored. Must be in the same region as the cluster and the cluster must have read bucket and put object permissions.
-         * For more information on the permissions required for the bucket, please read the AWS [documentation](http://docs.aws.amazon.com/redshift/latest/mgmt/db-auditing.html#db-auditing-enable-logging)
-         */
-        bucketName: string;
-        /**
-         * Enables logging information such as queries and connection attempts, for the specified Amazon Redshift cluster.
-         */
-        enable: boolean;
-        /**
-         * The log destination type. An enum with possible values of `s3` and `cloudwatch`.
-         */
-        logDestinationType?: string;
-        /**
-         * The collection of exported log types. Log types include the connection log, user log and user activity log. Required when `logDestinationType` is `cloudwatch`. Valid log types are `connectionlog`, `userlog`, and `useractivitylog`.
-         */
-        logExports?: string[];
-        /**
-         * The prefix applied to the log file names.
-         */
-        s3KeyPrefix: string;
-    }
-    interface ClusterSnapshotCopy {
-        /**
-         * The destination region that you want to copy snapshots to.
-         */
-        destinationRegion: string;
-        /**
-         * The name of the snapshot copy grant to use when snapshots of an AWS KMS-encrypted cluster are copied to the destination region.
-         */
-        grantName?: string;
-        /**
-         * The number of days to retain automated snapshots in the destination region after they are copied from the source region. Defaults to `7`.
-         */
-        retentionPeriod?: number;
-    }
     interface EndpointAccessVpcEndpoint {
         /**
          * One or more network interfaces of the endpoint. Also known as an interface endpoint. See details below.
@@ -72578,7 +71456,7 @@ export declare namespace rekognition {
         /**
          * Box representing a region of interest on screen. Only 1 per region is allowed. See `boundingBox`.
          */
-        boundingBox?: outputs.rekognition.StreamProcessorRegionsOfInterestBoundingBox;
+        boundingBox: outputs.rekognition.StreamProcessorRegionsOfInterestBoundingBox;
         /**
          * Shape made up of up to 10 Point objects to define a region of interest. See `polygon`.
          */
@@ -72766,7 +71644,7 @@ export declare namespace resourceexplorer {
          */
         properties: outputs.resourceexplorer.SearchResourceProperty[];
         /**
-         * Amazon Web Services Region in which the resource was created and exists.
+         * Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
          */
         region: string;
         /**
@@ -74400,6 +73278,58 @@ export declare namespace s3 {
          */
         prefix?: string;
     }
+    interface BucketAclAccessControlPolicy {
+        /**
+         * Set of `grant` configuration blocks. See below.
+         */
+        grants?: outputs.s3.BucketAclAccessControlPolicyGrant[];
+        /**
+         * Configuration block for the bucket owner's display name and ID. See below.
+         */
+        owner: outputs.s3.BucketAclAccessControlPolicyOwner;
+    }
+    interface BucketAclAccessControlPolicyGrant {
+        /**
+         * Configuration block for the person being granted permissions. See below.
+         */
+        grantee?: outputs.s3.BucketAclAccessControlPolicyGrantGrantee;
+        /**
+         * Logging permissions assigned to the grantee for the bucket. Valid values: `FULL_CONTROL`, `WRITE`, `WRITE_ACP`, `READ`, `READ_ACP`. See [What permissions can I grant?](https://docs.aws.amazon.com/AmazonS3/latest/userguide/acl-overview.html#permissions) for more details about what each permission means in the context of buckets.
+         */
+        permission: string;
+    }
+    interface BucketAclAccessControlPolicyGrantGrantee {
+        /**
+         * Display name of the owner.
+         */
+        displayName: string;
+        /**
+         * Email address of the grantee. See [Regions and Endpoints](https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_region) for supported AWS regions where this argument can be specified.
+         */
+        emailAddress?: string;
+        /**
+         * Canonical user ID of the grantee.
+         */
+        id?: string;
+        /**
+         * Type of grantee. Valid values: `CanonicalUser`, `AmazonCustomerByEmail`, `Group`.
+         */
+        type: string;
+        /**
+         * URI of the grantee group.
+         */
+        uri?: string;
+    }
+    interface BucketAclAccessControlPolicyOwner {
+        /**
+         * Display name of the owner.
+         */
+        displayName: string;
+        /**
+         * ID of the owner.
+         */
+        id: string;
+    }
     interface BucketAclV2AccessControlPolicy {
         /**
          * Set of `grant` configuration blocks. See below.
@@ -74452,6 +73382,32 @@ export declare namespace s3 {
          */
         id: string;
     }
+    interface BucketCorsConfigurationCorsRule {
+        /**
+         * Set of Headers that are specified in the `Access-Control-Request-Headers` header.
+         */
+        allowedHeaders?: string[];
+        /**
+         * Set of HTTP methods that you allow the origin to execute. Valid values are `GET`, `PUT`, `HEAD`, `POST`, and `DELETE`.
+         */
+        allowedMethods: string[];
+        /**
+         * Set of origins you want customers to be able to access the bucket from.
+         */
+        allowedOrigins: string[];
+        /**
+         * Set of headers in the response that you want customers to be able to access from their applications (for example, from a JavaScript `XMLHttpRequest` object).
+         */
+        exposeHeaders?: string[];
+        /**
+         * Unique identifier for the rule. The value cannot be longer than 255 characters.
+         */
+        id?: string;
+        /**
+         * Time in seconds that your browser is to cache the preflight response for the specified resource.
+         */
+        maxAgeSeconds?: number;
+    }
     interface BucketCorsConfigurationV2CorsRule {
         /**
          * Set of Headers that are specified in the `Access-Control-Request-Headers` header.
@@ -74480,19 +73436,19 @@ export declare namespace s3 {
     }
     interface BucketCorsRule {
         /**
-         * Specifies which headers are allowed.
+         * List of headers allowed.
          */
         allowedHeaders?: string[];
         /**
-         * Specifies which methods are allowed. Can be `GET`, `PUT`, `POST`, `DELETE` or `HEAD`.
+         * One or more HTTP methods that you allow the origin to execute. Can be `GET`, `PUT`, `POST`, `DELETE` or `HEAD`.
          */
         allowedMethods: string[];
         /**
-         * Specifies which origins are allowed.
+         * One or more origins you want customers to be able to access the bucket from.
          */
         allowedOrigins: string[];
         /**
-         * Specifies expose header in the response.
+         * One or more headers in the response that you want customers to be able to access from their applications (for example, from a JavaScript `XMLHttpRequest` object).
          */
         exposeHeaders?: string[];
         /**
@@ -74540,6 +73496,175 @@ export declare namespace s3 {
          */
         days: number;
     }
+    interface BucketLifecycleConfigurationRule {
+        /**
+         * Configuration block that specifies the days since the initiation of an incomplete multipart upload that Amazon S3 will wait before permanently removing all parts of the upload. See below.
+         */
+        abortIncompleteMultipartUpload?: outputs.s3.BucketLifecycleConfigurationRuleAbortIncompleteMultipartUpload;
+        /**
+         * Configuration block that specifies the expiration for the lifecycle of the object in the form of date, days and, whether the object has a delete marker. See below.
+         */
+        expiration?: outputs.s3.BucketLifecycleConfigurationRuleExpiration;
+        /**
+         * Configuration block used to identify objects that a Lifecycle Rule applies to.
+         * See below.
+         * If not specified, the `rule` will default to using `prefix`.
+         * One of `filter` or `prefix` should be specified.
+         */
+        filter?: outputs.s3.BucketLifecycleConfigurationRuleFilter;
+        /**
+         * Unique identifier for the rule. The value cannot be longer than 255 characters.
+         */
+        id: string;
+        /**
+         * Configuration block that specifies when noncurrent object versions expire. See below.
+         */
+        noncurrentVersionExpiration?: outputs.s3.BucketLifecycleConfigurationRuleNoncurrentVersionExpiration;
+        /**
+         * Set of configuration blocks that specify the transition rule for the lifecycle rule that describes when noncurrent objects transition to a specific storage class. See below.
+         */
+        noncurrentVersionTransitions?: outputs.s3.BucketLifecycleConfigurationRuleNoncurrentVersionTransition[];
+        /**
+         * **DEPRECATED** Use `filter` instead.
+         * This has been deprecated by Amazon S3.
+         * Prefix identifying one or more objects to which the rule applies.
+         * Defaults to an empty string (`""`) if `filter` is not specified.
+         * One of `prefix` or `filter` should be specified.
+         *
+         * @deprecated Specify a prefix using 'filter' instead
+         */
+        prefix: string;
+        /**
+         * Whether the rule is currently being applied. Valid values: `Enabled` or `Disabled`.
+         */
+        status: string;
+        /**
+         * Set of configuration blocks that specify when an Amazon S3 object transitions to a specified storage class. See below.
+         */
+        transitions?: outputs.s3.BucketLifecycleConfigurationRuleTransition[];
+    }
+    interface BucketLifecycleConfigurationRuleAbortIncompleteMultipartUpload {
+        /**
+         * Number of days after which Amazon S3 aborts an incomplete multipart upload.
+         */
+        daysAfterInitiation?: number;
+    }
+    interface BucketLifecycleConfigurationRuleExpiration {
+        /**
+         * Date the object is to be moved or deleted. The date value must be in [RFC3339 full-date format](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) e.g. `2023-08-22`.
+         */
+        date?: string;
+        /**
+         * Lifetime, in days, of the objects that are subject to the rule. The value must be a non-zero positive integer.
+         */
+        days: number;
+        /**
+         * Indicates whether Amazon S3 will remove a delete marker with no noncurrent versions. If set to `true`, the delete marker will be expired; if set to `false` the policy takes no action.
+         */
+        expiredObjectDeleteMarker: boolean;
+    }
+    interface BucketLifecycleConfigurationRuleFilter {
+        /**
+         * Configuration block used to apply a logical `AND` to two or more predicates. See below. The Lifecycle Rule will apply to any object matching all the predicates configured inside the `and` block.
+         */
+        and?: outputs.s3.BucketLifecycleConfigurationRuleFilterAnd;
+        /**
+         * Minimum object size (in bytes) to which the rule applies.
+         */
+        objectSizeGreaterThan: number;
+        /**
+         * Maximum object size (in bytes) to which the rule applies.
+         */
+        objectSizeLessThan: number;
+        /**
+         * Prefix identifying one or more objects to which the rule applies. Defaults to an empty string (`""`) if not specified.
+         */
+        prefix: string;
+        /**
+         * Configuration block for specifying a tag key and value. See below.
+         */
+        tag?: outputs.s3.BucketLifecycleConfigurationRuleFilterTag;
+    }
+    interface BucketLifecycleConfigurationRuleFilterAnd {
+        /**
+         * Minimum object size to which the rule applies. Value must be at least `0` if specified. Defaults to 128000 (128 KB) for all `storageClass` values unless `transitionDefaultMinimumObjectSize` specifies otherwise.
+         */
+        objectSizeGreaterThan: number;
+        /**
+         * Maximum object size to which the rule applies. Value must be at least `1` if specified.
+         */
+        objectSizeLessThan: number;
+        /**
+         * Prefix identifying one or more objects to which the rule applies.
+         */
+        prefix: string;
+        /**
+         * Key-value map of resource tags.
+         * All of these tags must exist in the object's tag set in order for the rule to apply.
+         * If set, must contain at least one key-value pair.
+         */
+        tags?: {
+            [key: string]: string;
+        };
+    }
+    interface BucketLifecycleConfigurationRuleFilterTag {
+        /**
+         * Name of the object key.
+         */
+        key: string;
+        /**
+         * Value of the tag.
+         */
+        value: string;
+    }
+    interface BucketLifecycleConfigurationRuleNoncurrentVersionExpiration {
+        /**
+         * Number of noncurrent versions Amazon S3 will retain. Must be a non-zero positive integer.
+         */
+        newerNoncurrentVersions: number;
+        /**
+         * Number of days an object is noncurrent before Amazon S3 can perform the associated action. Must be a positive integer.
+         */
+        noncurrentDays: number;
+    }
+    interface BucketLifecycleConfigurationRuleNoncurrentVersionTransition {
+        /**
+         * Number of noncurrent versions Amazon S3 will retain. Must be a non-zero positive integer.
+         */
+        newerNoncurrentVersions: number;
+        /**
+         * Number of days an object is noncurrent before Amazon S3 can perform the associated action.
+         */
+        noncurrentDays: number;
+        /**
+         * Class of storage used to store the object. Valid Values: `GLACIER`, `STANDARD_IA`, `ONEZONE_IA`, `INTELLIGENT_TIERING`, `DEEP_ARCHIVE`, `GLACIER_IR`.
+         */
+        storageClass: string;
+    }
+    interface BucketLifecycleConfigurationRuleTransition {
+        /**
+         * Date objects are transitioned to the specified storage class. The date value must be in [RFC3339 full-date format](https://datatracker.ietf.org/doc/html/rfc3339#section-5.6) e.g. `2023-08-22`.
+         */
+        date?: string;
+        /**
+         * Number of days after creation when objects are transitioned to the specified storage class. The value must be a positive integer. If both `days` and `date` are not specified, defaults to `0`. Valid values depend on `storageClass`, see [Transition objects using Amazon S3 Lifecycle](https://docs.aws.amazon.com/AmazonS3/latest/userguide/lifecycle-transition-general-considerations.html) for more details.
+         */
+        days: number;
+        /**
+         * Class of storage used to store the object. Valid Values: `GLACIER`, `STANDARD_IA`, `ONEZONE_IA`, `INTELLIGENT_TIERING`, `DEEP_ARCHIVE`, `GLACIER_IR`.
+         */
+        storageClass: string;
+    }
+    interface BucketLifecycleConfigurationTimeouts {
+        /**
+         * A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
+         */
+        create?: string;
+        /**
+         * A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
+         */
+        update?: string;
+    }
     interface BucketLifecycleConfigurationV2Rule {
         /**
          * Configuration block that specifies the days since the initiation of an incomplete multipart upload that Amazon S3 will wait before permanently removing all parts of the upload. See below.
@@ -74719,7 +73844,7 @@ export declare namespace s3 {
          */
         enabled: boolean;
         /**
-         * Specifies a period in the object's expire (documented below).
+         * Specifies a period in the object's expire. See Expiration below for details.
          */
         expiration?: outputs.s3.BucketLifecycleRuleExpiration;
         /**
@@ -74727,13 +73852,11 @@ export declare namespace s3 {
          */
         id: string;
         /**
-         * Specifies when noncurrent object versions expire (documented below).
+         * Specifies when noncurrent object versions expire. See Noncurrent Version Expiration below for details.
          */
         noncurrentVersionExpiration?: outputs.s3.BucketLifecycleRuleNoncurrentVersionExpiration;
         /**
-         * Specifies when noncurrent object versions transitions (documented below).
-         *
-         * At least one of `abortIncompleteMultipartUploadDays`, `expiration`, `transition`, `noncurrentVersionExpiration`, `noncurrentVersionTransition` must be specified.
+         * Specifies when noncurrent object versions transitions. See Noncurrent Version Transition below for details.
          */
         noncurrentVersionTransitions?: outputs.s3.BucketLifecycleRuleNoncurrentVersionTransition[];
         /**
@@ -74747,7 +73870,7 @@ export declare namespace s3 {
             [key: string]: string;
         };
         /**
-         * Specifies a period in the object's transitions (documented below).
+         * Specifies a period in the object's transitions. See Transition below for details.
          */
         transitions?: outputs.s3.BucketLifecycleRuleTransition[];
     }
@@ -74797,7 +73920,7 @@ export declare namespace s3 {
     }
     interface BucketLogging {
         /**
-         * The name of the bucket that will receive the log objects.
+         * Name of the bucket that will receive the log objects.
          */
         targetBucket: string;
         /**
@@ -74805,6 +73928,53 @@ export declare namespace s3 {
          */
         targetPrefix?: string;
     }
+    interface BucketLoggingTargetGrant {
+        /**
+         * Configuration block for the person being granted permissions. See below.
+         */
+        grantee: outputs.s3.BucketLoggingTargetGrantGrantee;
+        /**
+         * Logging permissions assigned to the grantee for the bucket. Valid values: `FULL_CONTROL`, `READ`, `WRITE`.
+         */
+        permission: string;
+    }
+    interface BucketLoggingTargetGrantGrantee {
+        displayName: string;
+        /**
+         * Email address of the grantee. See [Regions and Endpoints](https://docs.aws.amazon.com/general/latest/gr/rande.html#s3_region) for supported AWS regions where this argument can be specified.
+         */
+        emailAddress?: string;
+        /**
+         * Canonical user ID of the grantee.
+         */
+        id?: string;
+        /**
+         * Type of grantee. Valid values: `CanonicalUser`, `AmazonCustomerByEmail`, `Group`.
+         */
+        type: string;
+        /**
+         * URI of the grantee group.
+         */
+        uri?: string;
+    }
+    interface BucketLoggingTargetObjectKeyFormat {
+        /**
+         * Partitioned S3 key for log objects. See below.
+         */
+        partitionedPrefix?: outputs.s3.BucketLoggingTargetObjectKeyFormatPartitionedPrefix;
+        /**
+         * Use the simple format for S3 keys for log objects. To use, set `simplePrefix {}`.
+         */
+        simplePrefix?: outputs.s3.BucketLoggingTargetObjectKeyFormatSimplePrefix;
+    }
+    interface BucketLoggingTargetObjectKeyFormatPartitionedPrefix {
+        /**
+         * Specifies the partition date source for the partitioned prefix. Valid values: `EventTime`, `DeliveryTime`.
+         */
+        partitionDateSource: string;
+    }
+    interface BucketLoggingTargetObjectKeyFormatSimplePrefix {
+    }
     interface BucketLoggingV2TargetGrant {
         /**
          * Configuration block for the person being granted permissions. See below.
@@ -74936,37 +74106,35 @@ export declare namespace s3 {
     }
     interface BucketObjectLockConfiguration {
         /**
-         * Indicates whether this bucket has an Object Lock configuration enabled. Valid value is `Enabled`.
+         * Indicates whether this bucket has an Object Lock configuration enabled. Valid values are `true` or `false`. This argument is not supported in all regions or partitions.
+         *
+         * @deprecated object_lock_enabled is deprecated. Use the top-level parameter objectLockEnabled instead.
          */
-        objectLockEnabled: string;
+        objectLockEnabled?: string;
         /**
-         * The Object Lock rule in place for this bucket.
+         * Object Lock rule in place for this bucket (documented below).
+         *
+         * @deprecated rule is deprecated. Use the aws.s3.BucketObjectLockConfiguration resource instead.
          */
         rule?: outputs.s3.BucketObjectLockConfigurationRule;
     }
     interface BucketObjectLockConfigurationRule {
         /**
-         * The default retention period that you want to apply to new objects placed in this bucket.
+         * Configuration block for specifying the default Object Lock retention settings for new objects placed in the specified bucket. See below.
          */
         defaultRetention: outputs.s3.BucketObjectLockConfigurationRuleDefaultRetention;
     }
     interface BucketObjectLockConfigurationRuleDefaultRetention {
         /**
-         * The number of days that you want to specify for the default retention period.
+         * Number of days that you want to specify for the default retention period.
          */
         days?: number;
         /**
-         * The default Object Lock retention mode you want to apply to new objects placed in this bucket. Valid values are `GOVERNANCE` and `COMPLIANCE`.
+         * Default Object Lock retention mode you want to apply to new objects placed in the specified bucket. Valid values: `COMPLIANCE`, `GOVERNANCE`.
          */
-        mode: string;
+        mode?: string;
         /**
-         * The number of years that you want to specify for the default retention period.
-         *
-         * Either `days` or `years` must be specified, but not both.
-         *
-         * > **NOTE on `objectLockConfiguration`:** You can only enable S3 Object Lock for new buckets. If you need to turn on S3 Object Lock for an existing bucket, please contact AWS Support.
-         * When you create a bucket with S3 Object Lock enabled, Amazon S3 automatically enables versioning for the bucket.
-         * Once you create a bucket with S3 Object Lock enabled, you can't disable Object Lock or suspend versioning for the bucket.
+         * Number of years that you want to specify for the default retention period.
          */
         years?: number;
     }
@@ -75199,7 +74367,7 @@ export declare namespace s3 {
     }
     interface BucketReplicationConfiguration {
         /**
-         * The ARN of the IAM role for Amazon S3 to assume when replicating the objects.
+         * ARN of the IAM role for Amazon S3 to assume when replicating the objects.
          */
         role: string;
         /**
@@ -75229,7 +74397,7 @@ export declare namespace s3 {
          */
         prefix?: string;
         /**
-         * The priority associated with the rule. Priority should only be set if `filter` is configured. If not provided, defaults to `0`. Priority must be unique between multiple rules.
+         * Priority associated with the rule. Priority should only be set if `filter` is configured. If not provided, defaults to `0`. Priority must be unique between multiple rules.
          */
         priority?: number;
         /**
@@ -75237,23 +74405,21 @@ export declare namespace s3 {
          */
         sourceSelectionCriteria?: outputs.s3.BucketReplicationConfigurationRuleSourceSelectionCriteria;
         /**
-         * The status of the rule. Either `Enabled` or `Disabled`. The rule is ignored if status is not Enabled.
-         *
-         * > **NOTE:** Replication to multiple destination buckets requires that `priority` is specified in the `rules` object. If the corresponding rule requires no filter, an empty configuration block `filter {}` must be specified.
+         * Status of the rule. Either `Enabled` or `Disabled`. The rule is ignored if status is not Enabled.
          */
         status: string;
     }
     interface BucketReplicationConfigurationRuleDestination {
         /**
-         * Specifies the overrides to use for object owners on replication. Must be used in conjunction with `accountId` owner override configuration.
+         * Specifies the overrides to use for object owners on replication (documented below). Must be used in conjunction with `accountId` owner override configuration.
          */
         accessControlTranslation?: outputs.s3.BucketReplicationConfigurationRuleDestinationAccessControlTranslation;
         /**
-         * The Account ID to use for overriding the object owner on replication. Must be used in conjunction with `accessControlTranslation` override configuration.
+         * Account ID to use for overriding the object owner on replication. Must be used in conjunction with `accessControlTranslation` override configuration.
          */
         accountId?: string;
         /**
-         * The ARN of the S3 bucket where you want Amazon S3 to store replicas of the object identified by the rule.
+         * ARN of the S3 bucket where you want Amazon S3 to store replicas of the object identified by the rule.
          */
         bucket: string;
         /**
@@ -75276,7 +74442,7 @@ export declare namespace s3 {
     }
     interface BucketReplicationConfigurationRuleDestinationAccessControlTranslation {
         /**
-         * The override value for the owner on replicated objects. Currently only `Destination` is supported.
+         * Specifies the replica ownership. For default and valid values, see [PUT bucket replication](https://docs.aws.amazon.com/AmazonS3/latest/API/API_PutBucketReplication.html) in the Amazon S3 API Reference. The only valid value is `Destination`.
          */
         owner: string;
     }
@@ -75286,7 +74452,7 @@ export declare namespace s3 {
          */
         minutes?: number;
         /**
-         * The status of replication metrics. Either `Enabled` or `Disabled`.
+         * Status of replication metrics. Either `Enabled` or `Disabled`.
          */
         status?: string;
     }
@@ -75296,7 +74462,7 @@ export declare namespace s3 {
          */
         minutes?: number;
         /**
-         * The status of RTC. Either `Enabled` or `Disabled`.
+         * Status of RTC. Either `Enabled` or `Disabled`.
          */
         status?: string;
     }
@@ -75328,15 +74494,15 @@ export declare namespace s3 {
     }
     interface BucketServerSideEncryptionConfiguration {
         /**
-         * A single object for server-side encryption by default configuration. (documented below)
+         * Single object for server-side encryption by default configuration. (documented below)
          */
         rule: outputs.s3.BucketServerSideEncryptionConfigurationRule;
     }
     interface BucketServerSideEncryptionConfigurationRule {
         /**
-         * A single object for setting server-side encryption by default. (documented below)
+         * Single object for setting server-side encryption by default. See below.
          */
-        applyServerSideEncryptionByDefault: outputs.s3.BucketServerSideEncryptionConfigurationRuleApplyServerSideEncryptionByDefault;
+        applyServerSideEncryptionByDefault?: outputs.s3.BucketServerSideEncryptionConfigurationRuleApplyServerSideEncryptionByDefault;
         /**
          * Whether or not to use [Amazon S3 Bucket Keys](https://docs.aws.amazon.com/AmazonS3/latest/dev/bucket-key.html) for SSE-KMS.
          */
@@ -75344,11 +74510,11 @@ export declare namespace s3 {
     }
     interface BucketServerSideEncryptionConfigurationRuleApplyServerSideEncryptionByDefault {
         /**
-         * The AWS KMS master key ID used for the SSE-KMS encryption. This can only be used when you set the value of `sseAlgorithm` as `aws:kms`. The default `aws/s3` AWS KMS master key is used if this element is absent while the `sseAlgorithm` is `aws:kms`.
+         * AWS KMS master key ID used for the SSE-KMS encryption. This can only be used when you set the value of `sseAlgorithm` as `aws:kms`. The default `aws/s3` AWS KMS master key is used if this element is absent while the `sseAlgorithm` is `aws:kms`.
          */
         kmsMasterKeyId?: string;
         /**
-         * The server-side encryption algorithm to use. Valid values are `AES256` and `aws:kms`
+         * Server-side encryption algorithm to use. Valid values are `AES256`, `aws:kms`, and `aws:kms:dsse`
          */
         sseAlgorithm: string;
     }
@@ -75516,7 +74682,7 @@ export declare namespace s3 {
         /**
          * Object Lock rule in place for this bucket (documented below).
          *
-         * @deprecated rule is deprecated. Use the aws.s3.BucketObjectLockConfigurationV2 resource instead.
+         * @deprecated rule is deprecated. Use the aws.s3.BucketObjectLockConfiguration resource instead.
          */
         rules?: outputs.s3.BucketV2ObjectLockConfigurationRule[];
     }
@@ -75742,9 +74908,19 @@ export declare namespace s3 {
          */
         status: string;
     }
+    interface BucketVersioningVersioningConfiguration {
+        /**
+         * Specifies whether MFA delete is enabled in the bucket versioning configuration. Valid values: `Enabled` or `Disabled`.
+         */
+        mfaDelete: string;
+        /**
+         * Versioning state of the bucket. Valid values: `Enabled`, `Suspended`, or `Disabled`. `Disabled` should only be used when creating or importing resources that correspond to unversioned S3 buckets.
+         */
+        status: string;
+    }
     interface BucketWebsite {
         /**
-         * An absolute path to the document to return in case of a 4XX error.
+         * Absolute path to the document to return in case of a 4XX error.
          */
         errorDocument?: string;
         /**
@@ -75752,17 +74928,81 @@ export declare namespace s3 {
          */
         indexDocument?: string;
         /**
-         * A hostname to redirect all website requests for this bucket to. Hostname can optionally be prefixed with a protocol (`http://` or `https://`) to use when redirecting requests. The default is the protocol that is used in the original request.
+         * Hostname to redirect all website requests for this bucket to. Hostname can optionally be prefixed with a protocol (`http://` or `https://`) to use when redirecting requests. The default is the protocol that is used in the original request.
          */
         redirectAllRequestsTo?: string;
         /**
-         * A json array containing [routing rules](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-s3-websiteconfiguration-routingrules.html)
+         * JSON array containing [routing rules](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-s3-websiteconfiguration-routingrules.html)
          * describing redirect behavior and when redirects are applied.
-         *
-         * The `CORS` object supports the following:
          */
         routingRules?: string;
     }
+    interface BucketWebsiteConfigurationErrorDocument {
+        /**
+         * Object key name to use when a 4XX class error occurs.
+         */
+        key: string;
+    }
+    interface BucketWebsiteConfigurationIndexDocument {
+        /**
+         * Suffix that is appended to a request that is for a directory on the website endpoint.
+         * For example, if the suffix is `index.html` and you make a request to `samplebucket/images/`, the data that is returned will be for the object with the key name `images/index.html`.
+         * The suffix must not be empty and must not include a slash character.
+         */
+        suffix: string;
+    }
+    interface BucketWebsiteConfigurationRedirectAllRequestsTo {
+        /**
+         * Name of the host where requests are redirected.
+         */
+        hostName: string;
+        /**
+         * Protocol to use when redirecting requests. The default is the protocol that is used in the original request. Valid values: `http`, `https`.
+         */
+        protocol?: string;
+    }
+    interface BucketWebsiteConfigurationRoutingRule {
+        /**
+         * Configuration block for describing a condition that must be met for the specified redirect to apply. See below.
+         */
+        condition?: outputs.s3.BucketWebsiteConfigurationRoutingRuleCondition;
+        /**
+         * Configuration block for redirect information. See below.
+         */
+        redirect: outputs.s3.BucketWebsiteConfigurationRoutingRuleRedirect;
+    }
+    interface BucketWebsiteConfigurationRoutingRuleCondition {
+        /**
+         * HTTP error code when the redirect is applied. If specified with `keyPrefixEquals`, then both must be true for the redirect to be applied.
+         */
+        httpErrorCodeReturnedEquals?: string;
+        /**
+         * Object key name prefix when the redirect is applied. If specified with `httpErrorCodeReturnedEquals`, then both must be true for the redirect to be applied.
+         */
+        keyPrefixEquals?: string;
+    }
+    interface BucketWebsiteConfigurationRoutingRuleRedirect {
+        /**
+         * Host name to use in the redirect request.
+         */
+        hostName?: string;
+        /**
+         * HTTP redirect code to use on the response.
+         */
+        httpRedirectCode?: string;
+        /**
+         * Protocol to use when redirecting requests. The default is the protocol that is used in the original request. Valid values: `http`, `https`.
+         */
+        protocol?: string;
+        /**
+         * Object key prefix to use in the redirect request. For example, to redirect requests for all pages with prefix `docs/` (objects in the `docs/` folder) to `documents/`, you can set a `condition` block with `keyPrefixEquals` set to `docs/` and in the `redirect` set `replaceKeyPrefixWith` to `/documents`.
+         */
+        replaceKeyPrefixWith?: string;
+        /**
+         * Specific object key to use in the redirect request. For example, redirect request to `error.html`.
+         */
+        replaceKeyWith?: string;
+    }
     interface BucketWebsiteConfigurationV2ErrorDocument {
         /**
          * Object key name to use when a 4XX class error occurs.
@@ -76053,13 +75293,16 @@ export declare namespace s3control {
          */
         bucketAccountId: string;
         /**
-         * The name of the region.
+         * Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
          */
         region: string;
     }
     interface MultiRegionAccessPointDetails {
         name: string;
         publicAccessBlock?: outputs.s3control.MultiRegionAccessPointDetailsPublicAccessBlock;
+        /**
+         * Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
+         */
         regions: outputs.s3control.MultiRegionAccessPointDetailsRegion[];
     }
     interface MultiRegionAccessPointDetailsPublicAccessBlock {
@@ -76071,6 +75314,9 @@ export declare namespace s3control {
     interface MultiRegionAccessPointDetailsRegion {
         bucket: string;
         bucketAccountId: string;
+        /**
+         * Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
+         */
         region: string;
     }
     interface MultiRegionAccessPointPolicyDetails {
@@ -76479,6 +75725,41 @@ export declare namespace s3tables {
          */
         minSnapshotsToKeep: number;
     }
+    interface TableMetadata {
+        /**
+         * Contains details about the metadata for an Iceberg table. This block defines the schema structure for the Apache Iceberg table format.
+         * See `iceberg` below.
+         */
+        iceberg: outputs.s3tables.TableMetadataIceberg;
+    }
+    interface TableMetadataIceberg {
+        /**
+         * Schema configuration for the Iceberg table.
+         * See `schema` below.
+         */
+        schema: outputs.s3tables.TableMetadataIcebergSchema;
+    }
+    interface TableMetadataIcebergSchema {
+        /**
+         * List of schema fields for the Iceberg table. Each field defines a column in the table schema.
+         * See `field` below.
+         */
+        fields?: outputs.s3tables.TableMetadataIcebergSchemaField[];
+    }
+    interface TableMetadataIcebergSchemaField {
+        /**
+         * The name of the field.
+         */
+        name: string;
+        /**
+         * A Boolean value that specifies whether values are required for each row in this field. Defaults to `false`.
+         */
+        required: boolean;
+        /**
+         * The field type. S3 Tables supports all Apache Iceberg primitive types including: `boolean`, `int`, `long`, `float`, `double`, `decimal(precision,scale)`, `date`, `time`, `timestamp`, `timestamptz`, `string`, `uuid`, `fixed(length)`, `binary`.
+         */
+        type: string;
+    }
 }
 export declare namespace sagemaker {
     interface AppImageConfigCodeEditorAppImageConfig {
@@ -76573,7 +75854,7 @@ export declare namespace sagemaker {
         /**
          * The default branch for the Git repository. See Kernel Spec details below.
          */
-        kernelSpec: outputs.sagemaker.AppImageConfigKernelGatewayImageConfigKernelSpec;
+        kernelSpecs: outputs.sagemaker.AppImageConfigKernelGatewayImageConfigKernelSpec[];
     }
     interface AppImageConfigKernelGatewayImageConfigFileSystemConfig {
         /**
@@ -82268,7 +81549,9 @@ export declare namespace servicediscovery {
     }
     interface ServiceHealthCheckCustomConfig {
         /**
-         * The number of 30-second intervals that you want service discovery to wait before it changes the health status of a service instance.  Maximum value of 10.
+         * The number of 30-second intervals that you want service discovery to wait before it changes the health status of a service instance.  Value is always set to 1.
+         *
+         * @deprecated failure_threshold is deprecated. The argument is no longer supported by AWS and the value is always set to 1. The attribute will be removed in a future major version.
          */
         failureThreshold?: number;
     }
@@ -82312,11 +81595,11 @@ export declare namespace servicequotas {
          */
         quotaName: string;
         /**
-         * AWS Region to which the quota increases apply.
+         * AWS Region to which the quota increases apply. Use `aws.getRegion` instead.
          */
         region: string;
         /**
-         * (Required) Service identifier.
+         * Service identifier.
          */
         serviceCode: string;
         /**
@@ -82328,7 +81611,7 @@ export declare namespace servicequotas {
          */
         unit: string;
         /**
-         * (Required) The new, increased value for the quota.
+         * The new, increased value for the quota.
          */
         value: number;
     }
@@ -83071,6 +82354,10 @@ export declare namespace signer {
         certificateArn: string;
     }
 }
+export declare namespace sns {
+}
+export declare namespace sqs {
+}
 export declare namespace ssm {
     interface AssociationOutputLocation {
         /**
@@ -84019,7 +83306,7 @@ export declare namespace ssoadmin {
         principalType: string;
     }
     interface GetApplicationPortalOption {
-        signInOptions?: outputs.ssoadmin.GetApplicationPortalOptionSignInOption[];
+        signInOptions: outputs.ssoadmin.GetApplicationPortalOptionSignInOption[];
         visibility: string;
     }
     interface GetApplicationPortalOptionSignInOption {
@@ -84034,7 +83321,7 @@ export declare namespace ssoadmin {
         /**
          * An object describing how IAM Identity Center represents the application provider in the portal. See `displayData` below.
          */
-        displayDatas?: outputs.ssoadmin.GetApplicationProvidersApplicationProviderDisplayData[];
+        displayDatas: outputs.ssoadmin.GetApplicationProvidersApplicationProviderDisplayData[];
         /**
          * Protocol that the application provider uses to perform federation. Valid values are `SAML` and `OAUTH`.
          */
@@ -85820,30 +85107,7 @@ export declare namespace vpc {
          */
         create?: string;
     }
-    interface GetSecurityGroupRuleFilter {
-        /**
-         * Name of the filter field. Valid values can be found in the EC2 [`DescribeSecurityGroupRules`](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeSecurityGroupRules.html) API Reference.
-         */
-        name: string;
-        /**
-         * Set of values that are accepted for the given filter field. Results will be selected if any given value matches.
-         */
-        values: string[];
-    }
-    interface GetSecurityGroupRulesFilter {
-        /**
-         * Name of the field to filter by, as defined by
-         * [the underlying AWS API](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeSecurityGroupRules.html).
-         */
-        name: string;
-        /**
-         * Set of values that are accepted for the given field.
-         *
-         * Security group rule IDs will be selected if any one of the given values match.
-         */
-        values: string[];
-    }
-    interface GetVpcEndpointAssociationsAssociation {
+    interface GetEndpointAssociationsAssociation {
         /**
          * Accessibility of the resource.
          */
@@ -85855,12 +85119,12 @@ export declare namespace vpc {
         /**
          * DNS entries for the Association. DNS entry blocks are documented below.
          */
-        dnsEntries: outputs.vpc.GetVpcEndpointAssociationsAssociationDnsEntry[];
+        dnsEntries: outputs.vpc.GetEndpointAssociationsAssociationDnsEntry[];
         id: string;
         /**
          * DNS entries for the Association. Private DNS entry blocks are documented below.
          */
-        privateDnsEntries: outputs.vpc.GetVpcEndpointAssociationsAssociationPrivateDnsEntry[];
+        privateDnsEntries: outputs.vpc.GetEndpointAssociationsAssociationPrivateDnsEntry[];
         /**
          * ARN of the Resource Group if the Resource is a member of a group.
          */
@@ -85880,7 +85144,7 @@ export declare namespace vpc {
             [key: string]: string;
         };
     }
-    interface GetVpcEndpointAssociationsAssociationDnsEntry {
+    interface GetEndpointAssociationsAssociationDnsEntry {
         /**
          * DNS name.
          */
@@ -85890,7 +85154,7 @@ export declare namespace vpc {
          */
         hostedZoneId: string;
     }
-    interface GetVpcEndpointAssociationsAssociationPrivateDnsEntry {
+    interface GetEndpointAssociationsAssociationPrivateDnsEntry {
         /**
          * DNS name.
          */
@@ -85900,6 +85164,29 @@ export declare namespace vpc {
          */
         hostedZoneId: string;
     }
+    interface GetSecurityGroupRuleFilter {
+        /**
+         * Name of the filter field. Valid values can be found in the EC2 [`DescribeSecurityGroupRules`](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeSecurityGroupRules.html) API Reference.
+         */
+        name: string;
+        /**
+         * Set of values that are accepted for the given filter field. Results will be selected if any given value matches.
+         */
+        values: string[];
+    }
+    interface GetSecurityGroupRulesFilter {
+        /**
+         * Name of the field to filter by, as defined by
+         * [the underlying AWS API](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/API_DescribeSecurityGroupRules.html).
+         */
+        name: string;
+        /**
+         * Set of values that are accepted for the given field.
+         *
+         * Security group rule IDs will be selected if any one of the given values match.
+         */
+        values: string[];
+    }
     interface RouteServerEndpointTimeouts {
         /**
          * A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
@@ -85917,8 +85204,6 @@ export declare namespace vpc {
         peerAsn: number;
         /**
          * The requested liveness detection protocol for the BGP peer. Valid values are `bgp-keepalive` and `bfd`. Default value is `bgp-keepalive`.
-         *
-         * The following arguments are optional:
          */
         peerLivenessDetection: string;
     }
@@ -90207,23 +89492,23 @@ export declare namespace wafv2 {
         /**
          * Customizes the request body that your protected Amazon API Gateway REST APIs forward to AWS WAF for inspection. Applicable only when `scope` is set to `CLOUDFRONT`. See `apiGateway` below for details.
          */
-        apiGateways?: outputs.wafv2.WebAclAssociationConfigRequestBodyApiGateway[];
+        apiGateway?: outputs.wafv2.WebAclAssociationConfigRequestBodyApiGateway;
         /**
          * Customizes the request body that your protected Amazon App Runner services forward to AWS WAF for inspection. Applicable only when `scope` is set to `REGIONAL`. See `appRunnerService` below for details.
          */
-        appRunnerServices?: outputs.wafv2.WebAclAssociationConfigRequestBodyAppRunnerService[];
+        appRunnerService?: outputs.wafv2.WebAclAssociationConfigRequestBodyAppRunnerService;
         /**
          * Customizes the request body that your protected Amazon CloudFront distributions forward to AWS WAF for inspection. Applicable only when `scope` is set to `REGIONAL`. See `cloudfront` below for details.
          */
-        cloudfronts?: outputs.wafv2.WebAclAssociationConfigRequestBodyCloudfront[];
+        cloudfront?: outputs.wafv2.WebAclAssociationConfigRequestBodyCloudfront;
         /**
          * Customizes the request body that your protected Amazon Cognito user pools forward to AWS WAF for inspection. Applicable only when `scope` is set to `REGIONAL`. See `cognitoUserPool` below for details.
          */
-        cognitoUserPools?: outputs.wafv2.WebAclAssociationConfigRequestBodyCognitoUserPool[];
+        cognitoUserPool?: outputs.wafv2.WebAclAssociationConfigRequestBodyCognitoUserPool;
         /**
          * Customizes the request body that your protected AWS Verfied Access instances forward to AWS WAF for inspection. Applicable only when `scope` is set to `REGIONAL`. See `verifiedAccessInstance` below for details.
          */
-        verifiedAccessInstances?: outputs.wafv2.WebAclAssociationConfigRequestBodyVerifiedAccessInstance[];
+        verifiedAccessInstance?: outputs.wafv2.WebAclAssociationConfigRequestBodyVerifiedAccessInstance;
     }
     interface WebAclAssociationConfigRequestBodyApiGateway {
         /**
@@ -91081,6 +90366,10 @@ export declare namespace wafv2 {
          * Additional configuration for using the Account Creation Fraud Prevention managed rule group. Use this to specify information such as the registration page of your application and the type of content to accept or reject from the client.
          */
         awsManagedRulesAcfpRuleSet?: outputs.wafv2.WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAcfpRuleSet;
+        /**
+         * Configuration for using the anti-DDoS managed rule group. See `awsManagedRulesAntiDdosRuleSet` for more details.
+         */
+        awsManagedRulesAntiDdosRuleSet?: outputs.wafv2.WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAntiDdosRuleSet;
         /**
          * Additional configuration for using the Account Takeover Protection managed rule group. Use this to specify information such as the sign-in page of your application and the type of content to accept or reject from the client.
          */
@@ -91250,6 +90539,42 @@ export declare namespace wafv2 {
          */
         successCodes: number[];
     }
+    interface WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAntiDdosRuleSet {
+        /**
+         * Configuration for the request handling that's applied by the managed rule group rules `ChallengeAllDuringEvent` and `ChallengeDDoSRequests` during a distributed denial of service (DDoS) attack. See `clientSideActionConfig` for more details.
+         */
+        clientSideActionConfig: outputs.wafv2.WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAntiDdosRuleSetClientSideActionConfig;
+        /**
+         * Sensitivity that the rule group rule DDoSRequests uses when matching against the DDoS suspicion labeling on a request. Valid values are `LOW` (Default), `MEDIUM`, and `HIGH`.
+         */
+        sensitivityToBlock?: string;
+    }
+    interface WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAntiDdosRuleSetClientSideActionConfig {
+        /**
+         * Configuration for the use of the `AWSManagedRulesAntiDDoSRuleSet` rules `ChallengeAllDuringEvent` and `ChallengeDDoSRequests`.
+         */
+        challenge: outputs.wafv2.WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAntiDdosRuleSetClientSideActionConfigChallenge;
+    }
+    interface WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAntiDdosRuleSetClientSideActionConfigChallenge {
+        /**
+         * Block for the list of the regular expressions to match against the web request URI, used to identify requests that can't handle a silent browser challenge.
+         */
+        exemptUriRegularExpressions?: outputs.wafv2.WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAntiDdosRuleSetClientSideActionConfigChallengeExemptUriRegularExpression[];
+        /**
+         * Sensitivity that the rule group rule ChallengeDDoSRequests uses when matching against the DDoS suspicion labeling on a request. Valid values are `LOW`, `MEDIUM` and `HIGH` (Default).
+         */
+        sensitivity?: string;
+        /**
+         * Configuration whether to use the `AWSManagedRulesAntiDDoSRuleSet` rules `ChallengeAllDuringEvent` and `ChallengeDDoSRequests` in the rule group evaluation. Valid values are `ENABLED` and `DISABLED`.
+         */
+        usageOfAction: string;
+    }
+    interface WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAntiDdosRuleSetClientSideActionConfigChallengeExemptUriRegularExpression {
+        /**
+         * Regular expression string.
+         */
+        regexString?: string;
+    }
     interface WebAclRuleStatementManagedRuleGroupStatementManagedRuleGroupConfigAwsManagedRulesAtpRuleSet {
         /**
          * Whether or not to allow the use of regular expressions in the login page path.
@@ -91399,9 +90724,6 @@ export declare namespace wafv2 {
          * Instructs AWS WAF to run a Captcha check against the web request. See `captcha` below for details.
          */
         captcha?: outputs.wafv2.WebAclRuleStatementManagedRuleGroupStatementRuleActionOverrideActionToUseCaptcha;
-        /**
-         * Instructs AWS WAF to run a check against the request to verify that the request is coming from a legitimate client session. See `challenge` below for details.
-         */
         challenge?: outputs.wafv2.WebAclRuleStatementManagedRuleGroupStatementRuleActionOverrideActionToUseChallenge;
         count?: outputs.wafv2.WebAclRuleStatementManagedRuleGroupStatementRuleActionOverrideActionToUseCount;
     }
@@ -95044,9 +94366,6 @@ export declare namespace wafv2 {
          * Instructs AWS WAF to run a Captcha check against the web request. See `captcha` below for details.
          */
         captcha?: outputs.wafv2.WebAclRuleStatementRuleGroupReferenceStatementRuleActionOverrideActionToUseCaptcha;
-        /**
-         * Instructs AWS WAF to run a check against the request to verify that the request is coming from a legitimate client session. See `challenge` below for details.
-         */
         challenge?: outputs.wafv2.WebAclRuleStatementRuleGroupReferenceStatementRuleActionOverrideActionToUseChallenge;
         count?: outputs.wafv2.WebAclRuleStatementRuleGroupReferenceStatementRuleActionOverrideActionToUseCount;
     }
@@ -95836,36 +95155,6 @@ export declare namespace wafv2 {
         sampledRequestsEnabled: boolean;
     }
 }
-export declare namespace worklink {
-    interface FleetIdentityProvider {
-        /**
-         * The SAML metadata document provided by the customer’s identity provider.
-         */
-        samlMetadata: string;
-        /**
-         * The type of identity provider.
-         */
-        type: string;
-    }
-    interface FleetNetwork {
-        /**
-         * A list of security group IDs associated with access to the provided subnets.
-         *
-         * **identity_provider** requires the following:
-         *
-         * > **NOTE:** `identityProvider` cannot be removed without force recreating.
-         */
-        securityGroupIds: string[];
-        /**
-         * A list of subnet IDs used for X-ENI connections from Amazon WorkLink rendering containers.
-         */
-        subnetIds: string[];
-        /**
-         * The VPC ID with connectivity to associated websites.
-         */
-        vpcId: string;
-    }
-}
 export declare namespace workspaces {
     interface ConnectionAliasTimeouts {
         /**
@@ -96136,144 +95425,6 @@ export declare namespace workspaces {
          */
         source: string;
     }
-    interface WebDataProtectionSettingsInlineRedactionConfiguration {
-        /**
-         * The global confidence level for the inline redaction configuration. This indicates the certainty of data type matches in the redaction process. Values range from 1 (low confidence) to 3 (high confidence).
-         */
-        globalConfidenceLevel?: number;
-        /**
-         * The global enforced URL configuration for the inline redaction configuration.
-         */
-        globalEnforcedUrls?: string[];
-        /**
-         * The global exempt URL configuration for the inline redaction configuration.
-         */
-        globalExemptUrls?: string[];
-        /**
-         * The inline redaction patterns to be enabled for the inline redaction configuration. Detailed below.
-         */
-        inlineRedactionPatterns?: outputs.workspaces.WebDataProtectionSettingsInlineRedactionConfigurationInlineRedactionPattern[];
-    }
-    interface WebDataProtectionSettingsInlineRedactionConfigurationInlineRedactionPattern {
-        /**
-         * The built-in pattern from the list of preconfigured patterns. Either a `customPattern` or `builtInPatternId` is required.
-         */
-        builtInPatternId?: string;
-        /**
-         * The confidence level for inline redaction pattern. This indicates the certainty of data type matches in the redaction process. Values range from 1 (low confidence) to 3 (high confidence).
-         */
-        confidenceLevel?: number;
-        /**
-         * The configuration for a custom pattern. Either a `customPattern` or `builtInPatternId` is required. Detailed below.
-         */
-        customPattern?: outputs.workspaces.WebDataProtectionSettingsInlineRedactionConfigurationInlineRedactionPatternCustomPattern;
-        /**
-         * The enforced URL configuration for the inline redaction pattern.
-         */
-        enforcedUrls?: string[];
-        /**
-         * The exempt URL configuration for the inline redaction pattern.
-         */
-        exemptUrls?: string[];
-        /**
-         * The redaction placeholder that will replace the redacted text in session. Detailed below.
-         */
-        redactionPlaceHolders?: outputs.workspaces.WebDataProtectionSettingsInlineRedactionConfigurationInlineRedactionPatternRedactionPlaceHolder[];
-    }
-    interface WebDataProtectionSettingsInlineRedactionConfigurationInlineRedactionPatternCustomPattern {
-        /**
-         * The keyword regex for the customer pattern.
-         */
-        keywordRegex?: string;
-        /**
-         * The pattern description for the customer pattern.
-         */
-        patternDescription?: string;
-        /**
-         * The pattern name for the custom pattern.
-         */
-        patternName: string;
-        /**
-         * The pattern regex for the customer pattern. The format must follow JavaScript regex format.
-         */
-        patternRegex: string;
-    }
-    interface WebDataProtectionSettingsInlineRedactionConfigurationInlineRedactionPatternRedactionPlaceHolder {
-        /**
-         * The redaction placeholder text that will replace the redacted text in session for the custom text redaction placeholder type.
-         */
-        redactionPlaceHolderText?: string;
-        /**
-         * The redaction placeholder type that will replace the redacted text in session. Currently, only `CustomText` is supported.
-         */
-        redactionPlaceHolderType: string;
-    }
-    interface WebIpAccessSettingsIpRule {
-        /**
-         * The description of the IP access settings.
-         */
-        description?: string;
-        /**
-         * The IP range of the IP rule.
-         */
-        ipRange: string;
-    }
-    interface WebUserSettingsCookieSynchronizationConfiguration {
-        /**
-         * List of cookie specifications that are allowed to be synchronized to the remote browser.
-         */
-        allowlists?: outputs.workspaces.WebUserSettingsCookieSynchronizationConfigurationAllowlist[];
-        /**
-         * List of cookie specifications that are blocked from being synchronized to the remote browser.
-         */
-        blocklists?: outputs.workspaces.WebUserSettingsCookieSynchronizationConfigurationBlocklist[];
-    }
-    interface WebUserSettingsCookieSynchronizationConfigurationAllowlist {
-        /**
-         * Domain of the cookie.
-         */
-        domain: string;
-        /**
-         * Name of the cookie.
-         */
-        name?: string;
-        /**
-         * Path of the cookie.
-         */
-        path?: string;
-    }
-    interface WebUserSettingsCookieSynchronizationConfigurationBlocklist {
-        /**
-         * Domain of the cookie.
-         */
-        domain: string;
-        /**
-         * Name of the cookie.
-         */
-        name?: string;
-        /**
-         * Path of the cookie.
-         */
-        path?: string;
-    }
-    interface WebUserSettingsToolbarConfiguration {
-        /**
-         * List of toolbar items to be hidden.
-         */
-        hiddenToolbarItems?: string[];
-        /**
-         * Maximum display resolution that is allowed for the session.
-         */
-        maxDisplayResolution?: string;
-        /**
-         * Type of toolbar displayed during the session.
-         */
-        toolbarType?: string;
-        /**
-         * Visual mode of the toolbar.
-         */
-        visualMode?: string;
-    }
     interface WorkspaceWorkspaceProperties {
         /**
          * The compute type. For more information, see [Amazon WorkSpaces Bundles](http://aws.amazon.com/workspaces/details/#Amazon_WorkSpaces_Bundles). Valid values are `VALUE`, `STANDARD`, `PERFORMANCE`, `POWER`, `GRAPHICS`, `POWERPRO`, `GRAPHICSPRO`, `GRAPHICS_G4DN`, and `GRAPHICSPRO_G4DN`.