@pulumi/aws 7.10.0-alpha.1761243490 → 7.10.0

package/transfer/hostKey.d.ts

@@ -4,6 +4,17 @@ import * as pulumi from "@pulumi/pulumi";
  *
  * ## Example Usage
  *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as aws from "@pulumi/aws";
+ *
+ * const example = new aws.transfer.HostKey("example", {
+ *     serverId: exampleAwsTransferServer.id,
+ *     description: "example additional host key",
+ *     hostKeyBodyWo: "# Private key PEM.\n",
+ * });
+ * ```
+ *
  * ## Import
  *
  * Using `pulumi import`, import host keys using the `server_id` and `host_key_id` separated by `,`. For example:
@@ -40,6 +51,11 @@ export declare class HostKey extends pulumi.CustomResource {
      * Private key portion of an SSH key pair.
      */
     readonly hostKeyBody: pulumi.Output<string | undefined>;
+    /**
+     * **NOTE:** This field is write-only and its value will not be updated in state as part of read operations.
+     * Write-only private key portion of an SSH key pair, guaranteed not to be written to plan or state artifacts. One of `hostKeyBody` or `hostKeyBodyWo` must be configured.
+     */
+    readonly hostKeyBodyWo: pulumi.Output<string | undefined>;
     /**
      * Public key fingerprint.
      */
@@ -93,6 +109,11 @@ export interface HostKeyState {
      * Private key portion of an SSH key pair.
      */
     hostKeyBody?: pulumi.Input<string>;
+    /**
+     * **NOTE:** This field is write-only and its value will not be updated in state as part of read operations.
+     * Write-only private key portion of an SSH key pair, guaranteed not to be written to plan or state artifacts. One of `hostKeyBody` or `hostKeyBodyWo` must be configured.
+     */
+    hostKeyBodyWo?: pulumi.Input<string>;
     /**
      * Public key fingerprint.
      */
@@ -134,6 +155,11 @@ export interface HostKeyArgs {
      * Private key portion of an SSH key pair.
      */
     hostKeyBody?: pulumi.Input<string>;
+    /**
+     * **NOTE:** This field is write-only and its value will not be updated in state as part of read operations.
+     * Write-only private key portion of an SSH key pair, guaranteed not to be written to plan or state artifacts. One of `hostKeyBody` or `hostKeyBodyWo` must be configured.
+     */
+    hostKeyBodyWo?: pulumi.Input<string>;
     /**
      * Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
      */

package/transfer/hostKey.js

@@ -10,6 +10,17 @@ const utilities = require("../utilities");
  *
  * ## Example Usage
  *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as aws from "@pulumi/aws";
+ *
+ * const example = new aws.transfer.HostKey("example", {
+ *     serverId: exampleAwsTransferServer.id,
+ *     description: "example additional host key",
+ *     hostKeyBodyWo: "# Private key PEM.\n",
+ * });
+ * ```
+ *
  * ## Import
  *
  * Using `pulumi import`, import host keys using the `server_id` and `host_key_id` separated by `,`. For example:
@@ -49,6 +60,7 @@ class HostKey extends pulumi.CustomResource {
             resourceInputs["arn"] = state?.arn;
             resourceInputs["description"] = state?.description;
             resourceInputs["hostKeyBody"] = state?.hostKeyBody;
+            resourceInputs["hostKeyBodyWo"] = state?.hostKeyBodyWo;
             resourceInputs["hostKeyFingerprint"] = state?.hostKeyFingerprint;
             resourceInputs["hostKeyId"] = state?.hostKeyId;
             resourceInputs["region"] = state?.region;
@@ -63,6 +75,7 @@ class HostKey extends pulumi.CustomResource {
             }
             resourceInputs["description"] = args?.description;
             resourceInputs["hostKeyBody"] = args?.hostKeyBody ? pulumi.secret(args.hostKeyBody) : undefined;
+            resourceInputs["hostKeyBodyWo"] = args?.hostKeyBodyWo ? pulumi.secret(args.hostKeyBodyWo) : undefined;
             resourceInputs["region"] = args?.region;
             resourceInputs["serverId"] = args?.serverId;
             resourceInputs["tags"] = args?.tags;
@@ -72,7 +85,7 @@ class HostKey extends pulumi.CustomResource {
             resourceInputs["tagsAll"] = undefined /*out*/;
         }
         opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
-        const secretOpts = { additionalSecretOutputs: ["hostKeyBody"] };
+        const secretOpts = { additionalSecretOutputs: ["hostKeyBody", "hostKeyBodyWo"] };
         opts = pulumi.mergeOptions(opts, secretOpts);
         super(HostKey.__pulumiType, name, resourceInputs, opts);
     }

package/transfer/hostKey.js.map

@@ -1 +1 @@
-{"version":3,"file":"hostKey.js","sourceRoot":"","sources":["../../transfer/hostKey.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C;;;;;;;;;;;;GAYG;AACH,MAAa,OAAQ,SAAQ,MAAM,CAAC,cAAc;IAC9C;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAoB,EAAE,IAAmC;QAClH,OAAO,IAAI,OAAO,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAC9D,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,OAAO,CAAC,YAAY,CAAC;IACxD,CAAC;IA+CD,YAAY,IAAY,EAAE,WAAwC,EAAE,IAAmC;QACnG,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAuC,CAAC;YACtD,cAAc,CAAC,KAAK,CAAC,GAAG,KAAK,EAAE,GAAG,CAAC;YACnC,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,EAAE,WAAW,CAAC;YACnD,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,EAAE,WAAW,CAAC;YACnD,cAAc,CAAC,oBAAoB,CAAC,GAAG,KAAK,EAAE,kBAAkB,CAAC;YACjE,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,EAAE,SAAS,CAAC;YAC/C,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC;YAC7C,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,EAAE,OAAO,CAAC;SAC9C;aAAM;YACH,MAAM,IAAI,GAAG,WAAsC,CAAC;YACpD,IAAI,IAAI,EAAE,QAAQ,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC3C,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;aAC3D;YACD,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,EAAE,WAAW,CAAC;YAClD,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAChG,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC;YACxC,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC;YAC5C,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC;YACpC,cAAc,CAAC,KAAK,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC1C,cAAc,CAAC,oBAAoB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACzD,cAAc,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAChD,cAAc,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACjD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,MAAM,UAAU,GAAG,EAAE,uBAAuB,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC;QAChE,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC7C,KAAK,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC5D,CAAC;;AA1GL,0BA2GC;AA7FG,gBAAgB;AACO,oBAAY,GAAG,8BAA8B,CAAC"}
+{"version":3,"file":"hostKey.js","sourceRoot":"","sources":["../../transfer/hostKey.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AACzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;GAuBG;AACH,MAAa,OAAQ,SAAQ,MAAM,CAAC,cAAc;IAC9C;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAoB,EAAE,IAAmC;QAClH,OAAO,IAAI,OAAO,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAC9D,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,OAAO,CAAC,YAAY,CAAC;IACxD,CAAC;IAoDD,YAAY,IAAY,EAAE,WAAwC,EAAE,IAAmC;QACnG,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAuC,CAAC;YACtD,cAAc,CAAC,KAAK,CAAC,GAAG,KAAK,EAAE,GAAG,CAAC;YACnC,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,EAAE,WAAW,CAAC;YACnD,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,EAAE,WAAW,CAAC;YACnD,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,EAAE,aAAa,CAAC;YACvD,cAAc,CAAC,oBAAoB,CAAC,GAAG,KAAK,EAAE,kBAAkB,CAAC;YACjE,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,EAAE,SAAS,CAAC;YAC/C,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC;YAC7C,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,EAAE,OAAO,CAAC;SAC9C;aAAM;YACH,MAAM,IAAI,GAAG,WAAsC,CAAC;YACpD,IAAI,IAAI,EAAE,QAAQ,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC3C,MAAM,IAAI,KAAK,CAAC,sCAAsC,CAAC,CAAC;aAC3D;YACD,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,EAAE,WAAW,CAAC;YAClD,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YAChG,cAAc,CAAC,eAAe,CAAC,GAAG,IAAI,EAAE,aAAa,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;YACtG,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC;YACxC,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC;YAC5C,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC;YACpC,cAAc,CAAC,KAAK,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC1C,cAAc,CAAC,oBAAoB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACzD,cAAc,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAChD,cAAc,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACjD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,MAAM,UAAU,GAAG,EAAE,uBAAuB,EAAE,CAAC,aAAa,EAAE,eAAe,CAAC,EAAE,CAAC;QACjF,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,IAAI,EAAE,UAAU,CAAC,CAAC;QAC7C,KAAK,CAAC,OAAO,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC5D,CAAC;;AAjHL,0BAkHC;AApGG,gBAAgB;AACO,oBAAY,GAAG,8BAA8B,CAAC"}

package/types/input.d.ts

@@ -930,6 +930,10 @@ export interface ProviderEndpoint {
      * Use this to override the default service endpoint URL
      */
     networkfirewall?: pulumi.Input<string>;
+    /**
+     * Use this to override the default service endpoint URL
+     */
+    networkflowmonitor?: pulumi.Input<string>;
     /**
      * Use this to override the default service endpoint URL
      */
@@ -950,6 +954,10 @@ export interface ProviderEndpoint {
      * Use this to override the default service endpoint URL
      */
     oam?: pulumi.Input<string>;
+    /**
+     * Use this to override the default service endpoint URL
+     */
+    observabilityadmin?: pulumi.Input<string>;
     /**
      * Use this to override the default service endpoint URL
      */
@@ -7360,6 +7368,16 @@ export declare namespace apprunner {
     }
 }
 export declare namespace appstream {
+    interface DirectoryConfigCertificateBasedAuthProperties {
+        /**
+         * The ARN of the AWS Certificate Manager Private CA resource.
+         */
+        certificateAuthorityArn?: pulumi.Input<string>;
+        /**
+         * The status of the certificate-based authentication properties. Valid values - ["DISABLED", "ENABLED", "ENABLED_NO_DIRECTORY_LOGIN_FALLBACK"].
+         */
+        status?: pulumi.Input<string>;
+    }
     interface DirectoryConfigServiceAccountCredentials {
         /**
          * User name of the account. This account must have the following privileges: create computer objects, join computers to the domain, and change/reset the password on descendant computer objects for the organizational units specified.
@@ -12695,6 +12713,391 @@ export declare namespace bedrock {
          */
         workloadIdentityArn: pulumi.Input<string>;
     }
+    interface AgentcoreMemoryStrategyConfiguration {
+        /**
+         * Consolidation configuration for processing and organizing memory content. See `consolidation` below. Once added, this block cannot be removed without recreating the resource.
+         */
+        consolidation?: pulumi.Input<inputs.bedrock.AgentcoreMemoryStrategyConfigurationConsolidation>;
+        /**
+         * Extraction configuration for identifying and extracting relevant information. See `extraction` below. Cannot be used with `type` set to `SUMMARY_OVERRIDE`. Once added, this block cannot be removed without recreating the resource.
+         */
+        extraction?: pulumi.Input<inputs.bedrock.AgentcoreMemoryStrategyConfigurationExtraction>;
+        /**
+         * Type of custom override. Valid values: `SEMANTIC_OVERRIDE`, `SUMMARY_OVERRIDE`, `USER_PREFERENCE_OVERRIDE`. Changing this forces a new resource.
+         */
+        type: pulumi.Input<string>;
+    }
+    interface AgentcoreMemoryStrategyConfigurationConsolidation {
+        /**
+         * Additional text to append to the model prompt for consolidation processing.
+         */
+        appendToPrompt: pulumi.Input<string>;
+        /**
+         * ID of the foundation model to use for consolidation processing.
+         */
+        modelId: pulumi.Input<string>;
+    }
+    interface AgentcoreMemoryStrategyConfigurationExtraction {
+        /**
+         * Additional text to append to the model prompt for extraction processing.
+         */
+        appendToPrompt: pulumi.Input<string>;
+        /**
+         * ID of the foundation model to use for extraction processing.
+         */
+        modelId: pulumi.Input<string>;
+    }
+    interface AgentcoreMemoryStrategyTimeouts {
+        /**
+         * A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
+         */
+        create?: pulumi.Input<string>;
+        /**
+         * A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
+         */
+        delete?: pulumi.Input<string>;
+        /**
+         * A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
+         */
+        update?: pulumi.Input<string>;
+    }
+    interface AgentcoreMemoryTimeouts {
+        /**
+         * A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
+         */
+        create?: pulumi.Input<string>;
+        /**
+         * A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
+         */
+        delete?: pulumi.Input<string>;
+    }
+    interface AgentcoreOauth2CredentialProviderClientSecretArn {
+        /**
+         * ARN of the secret in AWS Secrets Manager.
+         */
+        secretArn: pulumi.Input<string>;
+    }
+    interface AgentcoreOauth2CredentialProviderOauth2ProviderConfig {
+        /**
+         * Custom OAuth2 provider configuration. See `custom` below.
+         */
+        customOauth2ProviderConfig?: pulumi.Input<inputs.bedrock.AgentcoreOauth2CredentialProviderOauth2ProviderConfigCustomOauth2ProviderConfig>;
+        /**
+         * GitHub OAuth provider configuration. See `github` below.
+         */
+        githubOauth2ProviderConfig?: pulumi.Input<inputs.bedrock.AgentcoreOauth2CredentialProviderOauth2ProviderConfigGithubOauth2ProviderConfig>;
+        /**
+         * Google OAuth provider configuration. See `google` below.
+         */
+        googleOauth2ProviderConfig?: pulumi.Input<inputs.bedrock.AgentcoreOauth2CredentialProviderOauth2ProviderConfigGoogleOauth2ProviderConfig>;
+        /**
+         * Microsoft OAuth provider configuration. See `microsoft` below.
+         */
+        microsoftOauth2ProviderConfig?: pulumi.Input<inputs.bedrock.AgentcoreOauth2CredentialProviderOauth2ProviderConfigMicrosoftOauth2ProviderConfig>;
+        /**
+         * Salesforce OAuth provider configuration. See `salesforce` below.
+         */
+        salesforceOauth2ProviderConfig?: pulumi.Input<inputs.bedrock.AgentcoreOauth2CredentialProviderOauth2ProviderConfigSalesforceOauth2ProviderConfig>;
+        /**
+         * Slack OAuth provider configuration. See `slack` below.
+         */
+        slackOauth2ProviderConfig?: pulumi.Input<inputs.bedrock.AgentcoreOauth2CredentialProviderOauth2ProviderConfigSlackOauth2ProviderConfig>;
+    }
+    interface AgentcoreOauth2CredentialProviderOauth2ProviderConfigCustomOauth2ProviderConfig {
+        /**
+         * Used together with write-only credentials to trigger an update. Increment this value when an update to `clientIdWo` or `clientSecretWo` is required.
+         *
+         * **OAuth Discovery Configuration:**
+         */
+        clientCredentialsWoVersion?: pulumi.Input<number>;
+        /**
+         * OAuth2 client ID. Cannot be used with `clientIdWo`. Must be used together with `clientSecret`.
+         */
+        clientId?: pulumi.Input<string>;
+        /**
+         * **NOTE:** This field is write-only and its value will not be updated in state as part of read operations.
+         * Write-only OAuth2 client ID. Cannot be used with `clientId`. Must be used together with `clientSecretWo` and `clientCredentialsWoVersion`.
+         */
+        clientIdWo?: pulumi.Input<string>;
+        /**
+         * OAuth2 client secret. Cannot be used with `clientSecretWo`. Must be used together with `clientId`.
+         *
+         * **Write-Only Credentials (choose one pair):**
+         */
+        clientSecret?: pulumi.Input<string>;
+        /**
+         * **NOTE:** This field is write-only and its value will not be updated in state as part of read operations.
+         * Write-only OAuth2 client secret. Cannot be used with `clientSecret`. Must be used together with `clientIdWo` and `clientCredentialsWoVersion`.
+         */
+        clientSecretWo?: pulumi.Input<string>;
+        /**
+         * OAuth discovery configuration. See `oauthDiscovery` below.
+         */
+        oauthDiscovery?: pulumi.Input<inputs.bedrock.AgentcoreOauth2CredentialProviderOauth2ProviderConfigCustomOauth2ProviderConfigOauthDiscovery>;
+    }
+    interface AgentcoreOauth2CredentialProviderOauth2ProviderConfigCustomOauth2ProviderConfigOauthDiscovery {
+        /**
+         * Manual OAuth2 authorization server metadata configuration. Cannot be used together with `discoveryUrl`. See `authorizationServerMetadata` below.
+         */
+        authorizationServerMetadata?: pulumi.Input<inputs.bedrock.AgentcoreOauth2CredentialProviderOauth2ProviderConfigCustomOauth2ProviderConfigOauthDiscoveryAuthorizationServerMetadata>;
+        /**
+         * OpenID Connect discovery URL (e.g., `https://provider.com/.well-known/openid-configuration`). Cannot be used together with `authorizationServerMetadata`.
+         */
+        discoveryUrl?: pulumi.Input<string>;
+    }
+    interface AgentcoreOauth2CredentialProviderOauth2ProviderConfigCustomOauth2ProviderConfigOauthDiscoveryAuthorizationServerMetadata {
+        /**
+         * OAuth2 authorization endpoint URL.
+         */
+        authorizationEndpoint: pulumi.Input<string>;
+        /**
+         * OAuth2 authorization server issuer identifier.
+         */
+        issuer: pulumi.Input<string>;
+        /**
+         * Set of OAuth2 response types supported by the authorization server.
+         */
+        responseTypes?: pulumi.Input<pulumi.Input<string>[]>;
+        /**
+         * OAuth2 token endpoint URL.
+         */
+        tokenEndpoint: pulumi.Input<string>;
+    }
+    interface AgentcoreOauth2CredentialProviderOauth2ProviderConfigGithubOauth2ProviderConfig {
+        clientCredentialsWoVersion?: pulumi.Input<number>;
+        clientId?: pulumi.Input<string>;
+        /**
+         * **NOTE:** This field is write-only and its value will not be updated in state as part of read operations.
+         */
+        clientIdWo?: pulumi.Input<string>;
+        clientSecret?: pulumi.Input<string>;
+        /**
+         * **NOTE:** This field is write-only and its value will not be updated in state as part of read operations.
+         */
+        clientSecretWo?: pulumi.Input<string>;
+        /**
+         * OAuth discovery configuration. See `oauthDiscovery` below.
+         */
+        oauthDiscoveries?: pulumi.Input<pulumi.Input<inputs.bedrock.AgentcoreOauth2CredentialProviderOauth2ProviderConfigGithubOauth2ProviderConfigOauthDiscovery>[]>;
+    }
+    interface AgentcoreOauth2CredentialProviderOauth2ProviderConfigGithubOauth2ProviderConfigOauthDiscovery {
+        /**
+         * Manual OAuth2 authorization server metadata configuration. Cannot be used together with `discoveryUrl`. See `authorizationServerMetadata` below.
+         */
+        authorizationServerMetadatas: pulumi.Input<pulumi.Input<inputs.bedrock.AgentcoreOauth2CredentialProviderOauth2ProviderConfigGithubOauth2ProviderConfigOauthDiscoveryAuthorizationServerMetadata>[]>;
+        /**
+         * OpenID Connect discovery URL (e.g., `https://provider.com/.well-known/openid-configuration`). Cannot be used together with `authorizationServerMetadata`.
+         */
+        discoveryUrl: pulumi.Input<string>;
+    }
+    interface AgentcoreOauth2CredentialProviderOauth2ProviderConfigGithubOauth2ProviderConfigOauthDiscoveryAuthorizationServerMetadata {
+        /**
+         * OAuth2 authorization endpoint URL.
+         */
+        authorizationEndpoint: pulumi.Input<string>;
+        /**
+         * OAuth2 authorization server issuer identifier.
+         */
+        issuer: pulumi.Input<string>;
+        /**
+         * Set of OAuth2 response types supported by the authorization server.
+         */
+        responseTypes: pulumi.Input<pulumi.Input<string>[]>;
+        /**
+         * OAuth2 token endpoint URL.
+         */
+        tokenEndpoint: pulumi.Input<string>;
+    }
+    interface AgentcoreOauth2CredentialProviderOauth2ProviderConfigGoogleOauth2ProviderConfig {
+        clientCredentialsWoVersion?: pulumi.Input<number>;
+        clientId?: pulumi.Input<string>;
+        /**
+         * **NOTE:** This field is write-only and its value will not be updated in state as part of read operations.
+         */
+        clientIdWo?: pulumi.Input<string>;
+        clientSecret?: pulumi.Input<string>;
+        /**
+         * **NOTE:** This field is write-only and its value will not be updated in state as part of read operations.
+         */
+        clientSecretWo?: pulumi.Input<string>;
+        /**
+         * OAuth discovery configuration. See `oauthDiscovery` below.
+         */
+        oauthDiscoveries?: pulumi.Input<pulumi.Input<inputs.bedrock.AgentcoreOauth2CredentialProviderOauth2ProviderConfigGoogleOauth2ProviderConfigOauthDiscovery>[]>;
+    }
+    interface AgentcoreOauth2CredentialProviderOauth2ProviderConfigGoogleOauth2ProviderConfigOauthDiscovery {
+        /**
+         * Manual OAuth2 authorization server metadata configuration. Cannot be used together with `discoveryUrl`. See `authorizationServerMetadata` below.
+         */
+        authorizationServerMetadatas: pulumi.Input<pulumi.Input<inputs.bedrock.AgentcoreOauth2CredentialProviderOauth2ProviderConfigGoogleOauth2ProviderConfigOauthDiscoveryAuthorizationServerMetadata>[]>;
+        /**
+         * OpenID Connect discovery URL (e.g., `https://provider.com/.well-known/openid-configuration`). Cannot be used together with `authorizationServerMetadata`.
+         */
+        discoveryUrl: pulumi.Input<string>;
+    }
+    interface AgentcoreOauth2CredentialProviderOauth2ProviderConfigGoogleOauth2ProviderConfigOauthDiscoveryAuthorizationServerMetadata {
+        /**
+         * OAuth2 authorization endpoint URL.
+         */
+        authorizationEndpoint: pulumi.Input<string>;
+        /**
+         * OAuth2 authorization server issuer identifier.
+         */
+        issuer: pulumi.Input<string>;
+        /**
+         * Set of OAuth2 response types supported by the authorization server.
+         */
+        responseTypes: pulumi.Input<pulumi.Input<string>[]>;
+        /**
+         * OAuth2 token endpoint URL.
+         */
+        tokenEndpoint: pulumi.Input<string>;
+    }
+    interface AgentcoreOauth2CredentialProviderOauth2ProviderConfigMicrosoftOauth2ProviderConfig {
+        clientCredentialsWoVersion?: pulumi.Input<number>;
+        clientId?: pulumi.Input<string>;
+        /**
+         * **NOTE:** This field is write-only and its value will not be updated in state as part of read operations.
+         */
+        clientIdWo?: pulumi.Input<string>;
+        clientSecret?: pulumi.Input<string>;
+        /**
+         * **NOTE:** This field is write-only and its value will not be updated in state as part of read operations.
+         */
+        clientSecretWo?: pulumi.Input<string>;
+        /**
+         * OAuth discovery configuration. See `oauthDiscovery` below.
+         */
+        oauthDiscoveries?: pulumi.Input<pulumi.Input<inputs.bedrock.AgentcoreOauth2CredentialProviderOauth2ProviderConfigMicrosoftOauth2ProviderConfigOauthDiscovery>[]>;
+    }
+    interface AgentcoreOauth2CredentialProviderOauth2ProviderConfigMicrosoftOauth2ProviderConfigOauthDiscovery {
+        /**
+         * Manual OAuth2 authorization server metadata configuration. Cannot be used together with `discoveryUrl`. See `authorizationServerMetadata` below.
+         */
+        authorizationServerMetadatas: pulumi.Input<pulumi.Input<inputs.bedrock.AgentcoreOauth2CredentialProviderOauth2ProviderConfigMicrosoftOauth2ProviderConfigOauthDiscoveryAuthorizationServerMetadata>[]>;
+        /**
+         * OpenID Connect discovery URL (e.g., `https://provider.com/.well-known/openid-configuration`). Cannot be used together with `authorizationServerMetadata`.
+         */
+        discoveryUrl: pulumi.Input<string>;
+    }
+    interface AgentcoreOauth2CredentialProviderOauth2ProviderConfigMicrosoftOauth2ProviderConfigOauthDiscoveryAuthorizationServerMetadata {
+        /**
+         * OAuth2 authorization endpoint URL.
+         */
+        authorizationEndpoint: pulumi.Input<string>;
+        /**
+         * OAuth2 authorization server issuer identifier.
+         */
+        issuer: pulumi.Input<string>;
+        /**
+         * Set of OAuth2 response types supported by the authorization server.
+         */
+        responseTypes: pulumi.Input<pulumi.Input<string>[]>;
+        /**
+         * OAuth2 token endpoint URL.
+         */
+        tokenEndpoint: pulumi.Input<string>;
+    }
+    interface AgentcoreOauth2CredentialProviderOauth2ProviderConfigSalesforceOauth2ProviderConfig {
+        clientCredentialsWoVersion?: pulumi.Input<number>;
+        clientId?: pulumi.Input<string>;
+        /**
+         * **NOTE:** This field is write-only and its value will not be updated in state as part of read operations.
+         */
+        clientIdWo?: pulumi.Input<string>;
+        clientSecret?: pulumi.Input<string>;
+        /**
+         * **NOTE:** This field is write-only and its value will not be updated in state as part of read operations.
+         */
+        clientSecretWo?: pulumi.Input<string>;
+        /**
+         * OAuth discovery configuration. See `oauthDiscovery` below.
+         */
+        oauthDiscoveries?: pulumi.Input<pulumi.Input<inputs.bedrock.AgentcoreOauth2CredentialProviderOauth2ProviderConfigSalesforceOauth2ProviderConfigOauthDiscovery>[]>;
+    }
+    interface AgentcoreOauth2CredentialProviderOauth2ProviderConfigSalesforceOauth2ProviderConfigOauthDiscovery {
+        /**
+         * Manual OAuth2 authorization server metadata configuration. Cannot be used together with `discoveryUrl`. See `authorizationServerMetadata` below.
+         */
+        authorizationServerMetadatas: pulumi.Input<pulumi.Input<inputs.bedrock.AgentcoreOauth2CredentialProviderOauth2ProviderConfigSalesforceOauth2ProviderConfigOauthDiscoveryAuthorizationServerMetadata>[]>;
+        /**
+         * OpenID Connect discovery URL (e.g., `https://provider.com/.well-known/openid-configuration`). Cannot be used together with `authorizationServerMetadata`.
+         */
+        discoveryUrl: pulumi.Input<string>;
+    }
+    interface AgentcoreOauth2CredentialProviderOauth2ProviderConfigSalesforceOauth2ProviderConfigOauthDiscoveryAuthorizationServerMetadata {
+        /**
+         * OAuth2 authorization endpoint URL.
+         */
+        authorizationEndpoint: pulumi.Input<string>;
+        /**
+         * OAuth2 authorization server issuer identifier.
+         */
+        issuer: pulumi.Input<string>;
+        /**
+         * Set of OAuth2 response types supported by the authorization server.
+         */
+        responseTypes: pulumi.Input<pulumi.Input<string>[]>;
+        /**
+         * OAuth2 token endpoint URL.
+         */
+        tokenEndpoint: pulumi.Input<string>;
+    }
+    interface AgentcoreOauth2CredentialProviderOauth2ProviderConfigSlackOauth2ProviderConfig {
+        clientCredentialsWoVersion?: pulumi.Input<number>;
+        clientId?: pulumi.Input<string>;
+        /**
+         * **NOTE:** This field is write-only and its value will not be updated in state as part of read operations.
+         */
+        clientIdWo?: pulumi.Input<string>;
+        clientSecret?: pulumi.Input<string>;
+        /**
+         * **NOTE:** This field is write-only and its value will not be updated in state as part of read operations.
+         */
+        clientSecretWo?: pulumi.Input<string>;
+        /**
+         * OAuth discovery configuration. See `oauthDiscovery` below.
+         */
+        oauthDiscoveries?: pulumi.Input<pulumi.Input<inputs.bedrock.AgentcoreOauth2CredentialProviderOauth2ProviderConfigSlackOauth2ProviderConfigOauthDiscovery>[]>;
+    }
+    interface AgentcoreOauth2CredentialProviderOauth2ProviderConfigSlackOauth2ProviderConfigOauthDiscovery {
+        /**
+         * Manual OAuth2 authorization server metadata configuration. Cannot be used together with `discoveryUrl`. See `authorizationServerMetadata` below.
+         */
+        authorizationServerMetadatas: pulumi.Input<pulumi.Input<inputs.bedrock.AgentcoreOauth2CredentialProviderOauth2ProviderConfigSlackOauth2ProviderConfigOauthDiscoveryAuthorizationServerMetadata>[]>;
+        /**
+         * OpenID Connect discovery URL (e.g., `https://provider.com/.well-known/openid-configuration`). Cannot be used together with `authorizationServerMetadata`.
+         */
+        discoveryUrl: pulumi.Input<string>;
+    }
+    interface AgentcoreOauth2CredentialProviderOauth2ProviderConfigSlackOauth2ProviderConfigOauthDiscoveryAuthorizationServerMetadata {
+        /**
+         * OAuth2 authorization endpoint URL.
+         */
+        authorizationEndpoint: pulumi.Input<string>;
+        /**
+         * OAuth2 authorization server issuer identifier.
+         */
+        issuer: pulumi.Input<string>;
+        /**
+         * Set of OAuth2 response types supported by the authorization server.
+         */
+        responseTypes: pulumi.Input<pulumi.Input<string>[]>;
+        /**
+         * OAuth2 token endpoint URL.
+         */
+        tokenEndpoint: pulumi.Input<string>;
+    }
+    interface AgentcoreTokenVaultCmkKmsConfiguration {
+        /**
+         * Type of KMS key. Valid values: `CustomerManagedKey`, `ServiceManagedKey`.
+         */
+        keyType: pulumi.Input<string>;
+        /**
+         * ARN of the KMS key.
+         */
+        kmsKeyArn?: pulumi.Input<string>;
+    }
     interface CustomModelOutputDataConfig {
         /**
          * The S3 URI where the output data is stored.
@@ -33004,7 +33407,7 @@ export declare namespace fis {
     }
     interface ExperimentTemplateActionTarget {
         /**
-         * Target type. Valid values are `AutoScalingGroups` (EC2 Auto Scaling groups), `Buckets` (S3 Buckets), `Cluster` (EKS Cluster), `Clusters` (ECS Clusters), `DBInstances` (RDS DB Instances), `Instances` (EC2 Instances), `ManagedResources` (EKS clusters, Application and Network Load Balancers, and EC2 Auto Scaling groups that are enabled for ARC zonal shift), `Nodegroups` (EKS Node groups), `Pods` (EKS Pods), `ReplicationGroups`(ElastiCache Redis Replication Groups), `Roles` (IAM Roles), `SpotInstances` (EC2 Spot Instances), `Subnets` (VPC Subnets), `Tables` (DynamoDB encrypted global tables), `Tasks` (ECS Tasks), `TransitGateways` (Transit gateways), `Volumes` (EBS Volumes). See the [documentation](https://docs.aws.amazon.com/fis/latest/userguide/actions.html#action-targets) for more details.
+         * Target type. Valid values are `AutoScalingGroups` (EC2 Auto Scaling groups), `Buckets` (S3 Buckets), `Cluster` (EKS Cluster), `Clusters` (ECS Clusters), `DBInstances` (RDS DB Instances), `Instances` (EC2 Instances), `ManagedResources` (EKS clusters, Application and Network Load Balancers, and EC2 Auto Scaling groups that are enabled for ARC zonal shift), `Nodegroups` (EKS Node groups), `Pods` (EKS Pods), `ReplicationGroups`(ElastiCache Redis Replication Groups), `Roles` (IAM Roles), `SpotInstances` (EC2 Spot Instances), `Subnets` (VPC Subnets), `Tables` (DynamoDB encrypted global tables), `Tasks` (ECS Tasks), `TransitGateways` (Transit gateways), `Volumes` (EBS Volumes). See the [documentation](https://docs.aws.amazon.com/fis/latest/userguide/action-sequence.html#action-targets) for more details.
          */
         key: pulumi.Input<string>;
         /**
@@ -62843,59 +63246,87 @@ export declare namespace opensearchingest {
 export declare namespace organizations {
     interface OrganizationAccount {
         /**
-         * ARN of the root
+         * ARN of the root.
          */
         arn?: pulumi.Input<string>;
         /**
-         * Email of the account
+         * Email of the account.
          */
         email?: pulumi.Input<string>;
         /**
-         * Identifier of the root
+         * Identifier of the root.
          */
         id?: pulumi.Input<string>;
         /**
-         * The name of the policy type
+         * Method by which the account joined the organization.
+         */
+        joinedMethod?: pulumi.Input<string>;
+        /**
+         * Date the account became a part of the organization.
+         */
+        joinedTimestamp?: pulumi.Input<string>;
+        /**
+         * Name of the policy type.
          */
         name?: pulumi.Input<string>;
         /**
-         * The status of the policy type as it relates to the associated root
+         * State of the account.
+         */
+        state?: pulumi.Input<string>;
+        /**
+         * Status of the policy type as it relates to the associated root.
+         *
+         * @deprecated status is deprecated. Use state instead.
          */
         status?: pulumi.Input<string>;
     }
     interface OrganizationNonMasterAccount {
         /**
-         * ARN of the root
+         * ARN of the root.
          */
         arn?: pulumi.Input<string>;
         /**
-         * Email of the account
+         * Email of the account.
          */
         email?: pulumi.Input<string>;
         /**
-         * Identifier of the root
+         * Identifier of the root.
          */
         id?: pulumi.Input<string>;
         /**
-         * The name of the policy type
+         * Method by which the account joined the organization.
+         */
+        joinedMethod?: pulumi.Input<string>;
+        /**
+         * Date the account became a part of the organization.
+         */
+        joinedTimestamp?: pulumi.Input<string>;
+        /**
+         * Name of the policy type.
          */
         name?: pulumi.Input<string>;
         /**
-         * The status of the policy type as it relates to the associated root
+         * State of the account.
+         */
+        state?: pulumi.Input<string>;
+        /**
+         * Status of the policy type as it relates to the associated root.
+         *
+         * @deprecated status is deprecated. Use state instead.
          */
         status?: pulumi.Input<string>;
     }
     interface OrganizationRoot {
         /**
-         * ARN of the root
+         * ARN of the root.
          */
         arn?: pulumi.Input<string>;
         /**
-         * Identifier of the root
+         * Identifier of the root.
          */
         id?: pulumi.Input<string>;
         /**
-         * The name of the policy type
+         * Name of the policy type.
          */
         name?: pulumi.Input<string>;
         /**
@@ -62905,7 +63336,7 @@ export declare namespace organizations {
     }
     interface OrganizationRootPolicyType {
         /**
-         * The status of the policy type as it relates to the associated root
+         * Status of the policy type as it relates to the associated root.
          */
         status?: pulumi.Input<string>;
         type?: pulumi.Input<string>;

package/types/input.js.map

@@ -1 +1 @@
-{"version":3,"file":"input.js","sourceRoot":"","sources":["../../types/input.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AA+wpEjF,IAAiB,GAAG,CAwcnB;AAxcD,WAAiB,GAAG;IAyXhB;;OAEG;IACH,SAAgB,sCAAsC,CAAC,GAA4B;QAC/E,OAAO;YACH,GAAG,GAAG;YACN,WAAW,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,WAAW;SAChD,CAAC;IACN,CAAC;IALe,0CAAsC,yCAKrD,CAAA;AAuEL,CAAC,EAxcgB,GAAG,GAAH,WAAG,KAAH,WAAG,QAwcnB"}
+{"version":3,"file":"input.js","sourceRoot":"","sources":["../../types/input.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAytqEjF,IAAiB,GAAG,CAwcnB;AAxcD,WAAiB,GAAG;IAyXhB;;OAEG;IACH,SAAgB,sCAAsC,CAAC,GAA4B;QAC/E,OAAO;YACH,GAAG,GAAG;YACN,WAAW,EAAE,CAAC,GAAG,CAAC,WAAW,CAAC,IAAI,WAAW;SAChD,CAAC;IACN,CAAC;IALe,0CAAsC,yCAKrD,CAAA;AAuEL,CAAC,EAxcgB,GAAG,GAAH,WAAG,KAAH,WAAG,QAwcnB"}