@pulumi/aws 7.12.0-alpha.1763161567 → 7.12.0-alpha.1763660660

package/types/output.d.ts

@@ -3874,6 +3874,17 @@ export declare namespace appflow {
         scheduleStartTime?: string;
         /**
          * Time zone used when referring to the date and time of a scheduled-triggered flow, such as `America/New_York`.
+         *
+         * ```typescript
+         * import * as pulumi from "@pulumi/pulumi";
+         * import * as aws from "@pulumi/aws";
+         *
+         * const example = new aws.appflow.Flow("example", {triggerConfig: {
+         *     scheduled: [{
+         *         scheduleExpression: "rate(1minutes)",
+         *     }],
+         * }});
+         * ```
          */
         timezone?: string;
     }
@@ -13162,13 +13173,22 @@ export declare namespace bedrock {
     }
     interface AgentcoreBrowserNetworkConfiguration {
         /**
-         * Network mode for the browser. Valid values: `PUBLIC`, `SANDBOX`.
+         * Network mode for the browser. Valid values: `PUBLIC`, `VPC`.
          */
         networkMode: string;
-        networkModeConfig?: outputs.bedrock.AgentcoreBrowserNetworkConfigurationNetworkModeConfig;
+        /**
+         * VPC configuration when `networkMode` is `VPC`. See `vpcConfig` below.
+         */
+        vpcConfig?: outputs.bedrock.AgentcoreBrowserNetworkConfigurationVpcConfig;
     }
-    interface AgentcoreBrowserNetworkConfigurationNetworkModeConfig {
+    interface AgentcoreBrowserNetworkConfigurationVpcConfig {
+        /**
+         * Set of security group IDs for the VPC configuration.
+         */
         securityGroups: string[];
+        /**
+         * Set of subnet IDs for the VPC configuration.
+         */
         subnets: string[];
     }
     interface AgentcoreBrowserRecording {
@@ -13263,7 +13283,7 @@ export declare namespace bedrock {
          */
         instructions?: string;
         /**
-         * Search type for MCP. Valid values: `SEMANTIC`, `HYBRID`.
+         * Search type for MCP. Valid values: `SEMANTIC`.
          */
         searchType?: string;
         /**
@@ -13332,6 +13352,10 @@ export declare namespace bedrock {
          * Lambda function target configuration. See `lambda` below.
          */
         lambda?: outputs.bedrock.AgentcoreGatewayTargetTargetConfigurationMcpLambda;
+        /**
+         * MCP server target configuration. See `mcpServer` below.
+         */
+        mcpServer?: outputs.bedrock.AgentcoreGatewayTargetTargetConfigurationMcpMcpServer;
         /**
          * OpenAPI schema-based target configuration. See `apiSchemaConfiguration` below.
          */
@@ -13759,6 +13783,12 @@ export declare namespace bedrock {
          */
         uri?: string;
     }
+    interface AgentcoreGatewayTargetTargetConfigurationMcpMcpServer {
+        /**
+         * Endpoint for the MCP server target configuration.
+         */
+        endpoint: string;
+    }
     interface AgentcoreGatewayTargetTargetConfigurationMcpOpenApiSchema {
         inlinePayload?: outputs.bedrock.AgentcoreGatewayTargetTargetConfigurationMcpOpenApiSchemaInlinePayload;
         s3?: outputs.bedrock.AgentcoreGatewayTargetTargetConfigurationMcpOpenApiSchemaS3;
@@ -16287,15 +16317,15 @@ export declare namespace cloudfront {
     }
     interface DistributionLoggingConfig {
         /**
-         * Amazon S3 bucket to store the access logs in, for example, `myawslogbucket.s3.amazonaws.com`. The bucket must have correct ACL attached with "FULL_CONTROL" permission for "awslogsdelivery" account (Canonical ID: "c4c1ede66af53448b93c283ce9448c4ba468c9432aa01d700d3878632f77d2d0") for log transfer to work.
+         * Amazon S3 bucket for V1 logging where access logs are stored, for example, `myawslogbucket.s3.amazonaws.com`. V1 logging is enabled when this argument is specified. The bucket must have correct ACL attached with "FULL_CONTROL" permission for "awslogsdelivery" account (Canonical ID: "c4c1ede66af53448b93c283ce9448c4ba468c9432aa01d700d3878632f77d2d0") for log transfer to work.
          */
-        bucket: string;
+        bucket?: string;
         /**
-         * Whether to include cookies in access logs (default: `false`).
+         * Whether to include cookies in access logs (default: `false`). This argument applies to both V1 and V2 logging.
          */
         includeCookies?: boolean;
         /**
-         * Prefix to the access log filenames for this distribution, for example, `myprefix/`.
+         * Prefix added to the access log file names for V1 logging, for example, `myprefix/`. This argument is effective only when V1 logging is enabled.
          */
         prefix?: string;
     }
@@ -18192,9 +18222,9 @@ export declare namespace cloudwatch {
     }
     interface LogDeliveryDestinationDeliveryDestinationConfiguration {
         /**
-         * The ARN of the AWS destination that this delivery destination represents.
+         * The ARN of the AWS destination that this delivery destination represents. Required when `deliveryDestinationConfiguration` is specified.
          */
-        destinationResourceArn: string;
+        destinationResourceArn?: string;
     }
     interface LogDeliveryS3DeliveryConfiguration {
         /**
@@ -22972,6 +23002,16 @@ export declare namespace connect {
          * Number of contacts an agent can have on a channel simultaneously. Valid Range for `VOICE`: Minimum value of 1. Maximum value of 1. Valid Range for `CHAT`: Minimum value of 1. Maximum value of 10. Valid Range for `TASK`: Minimum value of 1. Maximum value of 10.
          */
         concurrency: number;
+        /**
+         * Configuration block for cross-channel behavior. Documented below.
+         */
+        crossChannelBehaviors: outputs.connect.GetRoutingProfileMediaConcurrencyCrossChannelBehavior[];
+    }
+    interface GetRoutingProfileMediaConcurrencyCrossChannelBehavior {
+        /**
+         * Cross-channel behavior for routing contacts across multiple channels. Valid values are `ROUTE_CURRENT_CHANNEL_ONLY`, `ROUTE_ANY_CHANNEL`.
+         */
+        behaviorType: string;
     }
     interface GetRoutingProfileQueueConfig {
         /**
@@ -23419,9 +23459,16 @@ export declare namespace connect {
          */
         channel: string;
         /**
-         * Specifies the number of contacts an agent can have on a channel simultaneously. Valid Range for `VOICE`: Minimum value of 1. Maximum value of 1. Valid Range for `CHAT`: Minimum value of 1. Maximum value of 10. Valid Range for `TASK`: Minimum value of 1. Maximum value of 10.
+         * Specifies the number of contacts an agent can have on a channel simultaneously. Valid Range for `VOICE`: Minimum value of `1`. Maximum value of `1`. Valid Range for `CHAT`: Minimum value of `1`. Maximum value of `10`. Valid Range for `TASK`: Minimum value of `1`. Maximum value of `10`.
          */
         concurrency: number;
+        crossChannelBehavior?: outputs.connect.RoutingProfileMediaConcurrencyCrossChannelBehavior;
+    }
+    interface RoutingProfileMediaConcurrencyCrossChannelBehavior {
+        /**
+         * Specifies the cross-channel behavior for routing contacts across multiple channels. Valid values are `ROUTE_CURRENT_CHANNEL_ONLY` and `ROUTE_ANY_CHANNEL`. `ROUTE_CURRENT_CHANNEL_ONLY` restricts agents to receive contacts only from the channel they are currently handling. `ROUTE_ANY_CHANNEL` allows agents to receive contacts from any channel regardless of what they are currently handling.
+         */
+        behaviorType: string;
     }
     interface RoutingProfileQueueConfig {
         /**
@@ -27738,7 +27785,7 @@ export declare namespace dms {
          */
         maxFileSize?: number;
         /**
-         * Specifies the plugin to use to create a replication slot. Valid values: `pglogical`, `testDecoding`.
+         * Specifies the plugin to use to create a replication slot. Valid values: `pglogical`, `test-decoding`.
          */
         pluginName?: string;
         /**
@@ -28563,6 +28610,40 @@ export declare namespace ebs {
     }
 }
 export declare namespace ec2 {
+    interface AllowedImagesSettingsImageCriterion {
+        /**
+         * Condition based on AMI creation date. See `creationDateCondition` below.
+         */
+        creationDateCondition?: outputs.ec2.AllowedImagesSettingsImageCriterionCreationDateCondition;
+        /**
+         * Condition based on AMI deprecation time. See `deprecationTimeCondition` below.
+         */
+        deprecationTimeCondition?: outputs.ec2.AllowedImagesSettingsImageCriterionDeprecationTimeCondition;
+        /**
+         * Set of AMI name patterns to allow. Maximum of 50 names.
+         */
+        imageNames?: string[];
+        /**
+         * Set of image providers to allow. Maximum of 200 providers. Valid values include `amazon`, `aws-marketplace`, `aws-backup-vault`, `none`, or a 12-digit AWS account ID.
+         */
+        imageProviders?: string[];
+        /**
+         * Set of AWS Marketplace product codes to allow. Maximum of 50 product codes.
+         */
+        marketplaceProductCodes?: string[];
+    }
+    interface AllowedImagesSettingsImageCriterionCreationDateCondition {
+        /**
+         * Maximum number of days since the AMI was created.
+         */
+        maximumDaysSinceCreated?: number;
+    }
+    interface AllowedImagesSettingsImageCriterionDeprecationTimeCondition {
+        /**
+         * Maximum number of days since the AMI was deprecated. Setting this to `0` means no deprecated images are allowed.
+         */
+        maximumDaysSinceDeprecated?: number;
+    }
     interface AmiCopyEbsBlockDevice {
         /**
          * Boolean controlling whether the EBS volumes created to
@@ -35511,6 +35592,174 @@ export declare namespace ecs {
         name: string;
         value: string;
     }
+    interface GetServiceCapacityProviderStrategy {
+        /**
+         * Number of tasks using the specified capacity provider
+         */
+        base: number;
+        /**
+         * Name of the capacity provider
+         */
+        capacityProvider: string;
+        /**
+         * Relative percentage of total tasks to launch
+         */
+        weight: number;
+    }
+    interface GetServiceDeployment {
+        /**
+         * Time when task set was created (RFC3339 format)
+         */
+        createdAt: string;
+        /**
+         * Desired number of tasks
+         */
+        desiredCount: number;
+        /**
+         * Task set ID
+         */
+        id: string;
+        /**
+         * Number of pending tasks
+         */
+        pendingCount: number;
+        /**
+         * Number of running tasks
+         */
+        runningCount: number;
+        /**
+         * Task set status
+         */
+        status: string;
+        /**
+         * Task definition ARN
+         */
+        taskDefinition: string;
+        /**
+         * Time when task set was last updated (RFC3339 format)
+         */
+        updatedAt: string;
+    }
+    interface GetServiceDeploymentConfiguration {
+        /**
+         * CloudWatch alarms configuration. See `alarms` Block for details.
+         */
+        alarms: outputs.ecs.GetServiceDeploymentConfigurationAlarm[];
+        /**
+         * Time to wait after deployment before terminating old tasks
+         */
+        bakeTimeInMinutes: string;
+        /**
+         * Canary deployment configuration. See `canaryConfiguration` Block for details.
+         */
+        canaryConfigurations: outputs.ecs.GetServiceDeploymentConfigurationCanaryConfiguration[];
+        /**
+         * Circuit breaker configuration. See `deploymentCircuitBreaker` Block for details.
+         */
+        deploymentCircuitBreakers: outputs.ecs.GetServiceDeploymentConfigurationDeploymentCircuitBreaker[];
+        /**
+         * Lifecycle hooks for deployments. See `lifecycleHook` Block for details.
+         */
+        lifecycleHooks: outputs.ecs.GetServiceDeploymentConfigurationLifecycleHook[];
+        /**
+         * Linear deployment configuration. See `linearConfiguration` Block for details.
+         */
+        linearConfigurations: outputs.ecs.GetServiceDeploymentConfigurationLinearConfiguration[];
+        /**
+         * Upper limit on tasks during deployment
+         */
+        maximumPercent: number;
+        /**
+         * Lower limit on healthy tasks during deployment
+         */
+        minimumHealthyPercent: number;
+        /**
+         * Deployment strategy (ROLLING, BLUE_GREEN, LINEAR, or CANARY)
+         */
+        strategy: string;
+    }
+    interface GetServiceDeploymentConfigurationAlarm {
+        /**
+         * List of CloudWatch alarm names
+         */
+        alarmNames: string[];
+        /**
+         * Whether circuit breaker is enabled
+         */
+        enable: boolean;
+        /**
+         * Whether to rollback on failure
+         */
+        rollback: boolean;
+    }
+    interface GetServiceDeploymentConfigurationCanaryConfiguration {
+        /**
+         * Time to wait before shifting remaining traffic
+         */
+        canaryBakeTimeInMinutes: string;
+        /**
+         * Percentage of traffic to route to canary deployment
+         */
+        canaryPercent: number;
+    }
+    interface GetServiceDeploymentConfigurationDeploymentCircuitBreaker {
+        /**
+         * Whether circuit breaker is enabled
+         */
+        enable: boolean;
+        /**
+         * Whether to rollback on failure
+         */
+        rollback: boolean;
+    }
+    interface GetServiceDeploymentConfigurationLifecycleHook {
+        /**
+         * Additional details for the hook
+         */
+        hookDetails: string;
+        /**
+         * ARN of the Lambda function to invoke
+         */
+        hookTargetArn: string;
+        /**
+         * Deployment stages when hook is invoked
+         */
+        lifecycleStages: string[];
+        /**
+         * ARN of the IAM role that allows ECS to manage the target groups.
+         */
+        roleArn: string;
+    }
+    interface GetServiceDeploymentConfigurationLinearConfiguration {
+        /**
+         * Time to wait between deployment steps
+         */
+        stepBakeTimeInMinutes: string;
+        /**
+         * Percentage of traffic to shift in each step
+         */
+        stepPercent: number;
+    }
+    interface GetServiceDeploymentController {
+        /**
+         * Constraint type
+         */
+        type: string;
+    }
+    interface GetServiceEvent {
+        /**
+         * Time when task set was created (RFC3339 format)
+         */
+        createdAt: string;
+        /**
+         * Task set ID
+         */
+        id: string;
+        /**
+         * Event message
+         */
+        message: string;
+    }
     interface GetServiceLoadBalancer {
         /**
          * Settings for Blue/Green deployment. See `advancedConfiguration` Block for details.
@@ -35551,6 +35800,96 @@ export declare namespace ecs {
          */
         testListenerRule: string;
     }
+    interface GetServiceNetworkConfiguration {
+        /**
+         * Whether tasks receive public IP addresses
+         */
+        assignPublicIp: boolean;
+        /**
+         * Security groups associated with tasks
+         */
+        securityGroups: string[];
+        /**
+         * Subnets associated with tasks
+         */
+        subnets: string[];
+    }
+    interface GetServiceOrderedPlacementStrategy {
+        /**
+         * Field to apply placement strategy against
+         */
+        field: string;
+        /**
+         * Constraint type
+         */
+        type: string;
+    }
+    interface GetServicePlacementConstraint {
+        /**
+         * Cluster query language expression
+         */
+        expression: string;
+        /**
+         * Constraint type
+         */
+        type: string;
+    }
+    interface GetServiceServiceRegistry {
+        /**
+         * Name of the container to associate with the load balancer.
+         */
+        containerName: string;
+        /**
+         * Port on the container to associate with the load balancer.
+         */
+        containerPort: number;
+        /**
+         * Port value for service discovery
+         */
+        port: number;
+        /**
+         * ARN of the service registry
+         */
+        registryArn: string;
+    }
+    interface GetServiceTaskSet {
+        /**
+         * ARN of the task set
+         */
+        arn: string;
+        /**
+         * Time when task set was created (RFC3339 format)
+         */
+        createdAt: string;
+        /**
+         * Task set ID
+         */
+        id: string;
+        /**
+         * Number of pending tasks
+         */
+        pendingCount: number;
+        /**
+         * Number of running tasks
+         */
+        runningCount: number;
+        /**
+         * Stability status of the task set
+         */
+        stabilityStatus: string;
+        /**
+         * Task set status
+         */
+        status: string;
+        /**
+         * Task definition ARN
+         */
+        taskDefinition: string;
+        /**
+         * Time when task set was last updated (RFC3339 format)
+         */
+        updatedAt: string;
+    }
     interface GetTaskDefinitionEphemeralStorage {
         /**
          * The total amount, in GiB, of ephemeral storage to set for the task. The minimum supported value is `21` GiB and the maximum supported value is `200` GiB.
@@ -35866,18 +36205,36 @@ export declare namespace ecs {
     }
     interface ServiceDeploymentConfiguration {
         /**
-         * Number of minutes to wait after a new deployment is fully provisioned before terminating the old deployment. Only used when `strategy` is set to `BLUE_GREEN`.
+         * Number of minutes to wait after a new deployment is fully provisioned before terminating the old deployment. Valid range: 0-1440 minutes. Used with `BLUE_GREEN`, `LINEAR`, and `CANARY` strategies.
          */
         bakeTimeInMinutes: string;
+        /**
+         * Configuration block for canary deployment strategy. Required when `strategy` is set to `CANARY`. See below.
+         */
+        canaryConfiguration: outputs.ecs.ServiceDeploymentConfigurationCanaryConfiguration;
         /**
          * Configuration block for lifecycle hooks that are invoked during deployments. See below.
          */
         lifecycleHooks?: outputs.ecs.ServiceDeploymentConfigurationLifecycleHook[];
         /**
-         * Type of deployment strategy. Valid values: `ROLLING`, `BLUE_GREEN`. Default: `ROLLING`.
+         * Configuration block for linear deployment strategy. Required when `strategy` is set to `LINEAR`. See below.
+         */
+        linearConfiguration: outputs.ecs.ServiceDeploymentConfigurationLinearConfiguration;
+        /**
+         * Type of deployment strategy. Valid values: `ROLLING`, `BLUE_GREEN`, `LINEAR`, `CANARY`. Default: `ROLLING`.
          */
         strategy: string;
     }
+    interface ServiceDeploymentConfigurationCanaryConfiguration {
+        /**
+         * Number of minutes to wait before shifting all traffic to the new deployment. Valid range: 0-1440 minutes.
+         */
+        canaryBakeTimeInMinutes: string;
+        /**
+         * Percentage of traffic to route to the canary deployment. Valid range: 0.1-100.0.
+         */
+        canaryPercent: number;
+    }
     interface ServiceDeploymentConfigurationLifecycleHook {
         /**
          * Custom parameters that Amazon ECS will pass to the hook target invocations (such as a Lambda function).
@@ -35896,6 +36253,16 @@ export declare namespace ecs {
          */
         roleArn: string;
     }
+    interface ServiceDeploymentConfigurationLinearConfiguration {
+        /**
+         * Number of minutes to wait between each step during a linear deployment. Valid range: 0-1440 minutes.
+         */
+        stepBakeTimeInMinutes: string;
+        /**
+         * Percentage of traffic to shift in each step during a linear deployment. Valid range: 3.0-100.0.
+         */
+        stepPercent: number;
+    }
     interface ServiceDeploymentController {
         /**
          * Type of deployment controller. Valid values: `CODE_DEPLOY`, `ECS`, `EXTERNAL`. Default: `ECS`.
@@ -35905,8 +36272,6 @@ export declare namespace ecs {
     interface ServiceLoadBalancer {
         /**
          * Configuration block for Blue/Green deployment settings. Required when using `BLUE_GREEN` deployment strategy. See below.
-         *
-         * > **Version note:** Multiple `loadBalancer` configuration block support was added in version 2.22.0 of the provider. This allows configuration of [ECS service support for multiple target groups](https://aws.amazon.com/about-aws/whats-new/2019/07/amazon-ecs-services-now-support-multiple-load-balancer-target-groups/).
          */
         advancedConfiguration?: outputs.ecs.ServiceLoadBalancerAdvancedConfiguration;
         /**
@@ -35923,6 +36288,8 @@ export declare namespace ecs {
         elbName?: string;
         /**
          * ARN of the Load Balancer target group to associate with the service.
+         *
+         * > **Version note:** Multiple `loadBalancer` configuration block support was added in version 2.22.0 of the provider. This allows configuration of [ECS service support for multiple target groups](https://aws.amazon.com/about-aws/whats-new/2019/07/amazon-ecs-services-now-support-multiple-load-balancer-target-groups/).
          */
         targetGroupArn?: string;
     }
@@ -35947,8 +36314,6 @@ export declare namespace ecs {
     interface ServiceNetworkConfiguration {
         /**
          * Assign a public IP address to the ENI (Fargate launch type only). Valid values are `true` or `false`. Default `false`.
-         *
-         * For more information, see [Task Networking](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task-networking.html)
          */
         assignPublicIp?: boolean;
         /**
@@ -35957,21 +36322,20 @@ export declare namespace ecs {
         securityGroups?: string[];
         /**
          * Subnets associated with the task or service.
+         *
+         * For more information, see [Task Networking](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task-networking.html)
          */
         subnets: string[];
     }
     interface ServiceOrderedPlacementStrategy {
         /**
-         * For the `spread` placement strategy, valid values are `instanceId` (or `host`,
-         * which has the same effect), or any platform or custom attribute that is applied to a container instance.
-         * For the `binpack` type, valid values are `memory` and `cpu`. For the `random` type, this attribute is not
-         * needed. For more information, see [Placement Strategy](https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_PlacementStrategy.html).
-         *
-         * > **Note:** for `spread`, `host` and `instanceId` will be normalized, by AWS, to be `instanceId`. This means the statefile will show `instanceId` but your config will differ if you use `host`.
+         * For the `spread` placement strategy, valid values are `instanceId` (or `host`, which has the same effect), or any platform or custom attribute that is applied to a container instance. For the `binpack` type, valid values are `memory` and `cpu`. For the `random` type, this attribute is not needed. For more information, see [Placement Strategy](https://docs.aws.amazon.com/AmazonECS/latest/APIReference/API_PlacementStrategy.html).
          */
         field?: string;
         /**
          * Type of placement strategy. Must be one of: `binpack`, `random`, or `spread`
+         *
+         * > **Note:** for `spread`, `host` and `instanceId` will be normalized, by AWS, to be `instanceId`. This means the statefile will show `instanceId` but your config will differ if you use `host`.
          */
         type: string;
     }
@@ -37160,9 +37524,47 @@ export declare namespace eks {
     }
     interface NodeGroupNodeRepairConfig {
         /**
-         * Specifies whether to enable node auto repair for the node group. Node auto repair is disabled by default.
+         * Specifies whether to enable node auto repair for the node group. Node auto repair is disabled by default. Defaults to `false`.
          */
         enabled?: boolean;
+        /**
+         * Maximum number of nodes that can be repaired concurrently or in parallel, expressed as a count of unhealthy nodes. Conflicts with `maxParallelNodesRepairedPercentage`.
+         */
+        maxParallelNodesRepairedCount?: number;
+        /**
+         * Maximum number of nodes that can be repaired concurrently or in parallel, expressed as a percentage of unhealthy nodes. Conflicts with `maxParallelNodesRepairedCount`.
+         */
+        maxParallelNodesRepairedPercentage?: number;
+        /**
+         * Count threshold of unhealthy nodes, above which node auto repair actions will stop. Conflicts with `maxUnhealthyNodeThresholdPercentage`.
+         */
+        maxUnhealthyNodeThresholdCount?: number;
+        /**
+         * Percentage threshold of unhealthy nodes, above which node auto repair actions will stop. Conflicts with `maxUnhealthyNodeThresholdCount`.
+         */
+        maxUnhealthyNodeThresholdPercentage?: number;
+        /**
+         * Granular overrides for specific repair actions. See `nodeRepairConfigOverrides` below for details.
+         */
+        nodeRepairConfigOverrides?: outputs.eks.NodeGroupNodeRepairConfigNodeRepairConfigOverride[];
+    }
+    interface NodeGroupNodeRepairConfigNodeRepairConfigOverride {
+        /**
+         * Minimum time in minutes to wait before attempting to repair a node with the specified `nodeMonitoringCondition` and `nodeUnhealthyReason`.
+         */
+        minRepairWaitTimeMins: number;
+        /**
+         * Unhealthy condition reported by the node monitoring agent that this override applies to.
+         */
+        nodeMonitoringCondition: string;
+        /**
+         * Reason reported by the node monitoring agent that this override applies to.
+         */
+        nodeUnhealthyReason: string;
+        /**
+         * Repair action to take for nodes when all of the specified conditions are met. Valid values are defined by the EKS API.
+         */
+        repairAction: string;
     }
     interface NodeGroupRemoteAccess {
         /**
@@ -37287,6 +37689,36 @@ export declare namespace elasticache {
         logFormat: string;
         logType: string;
     }
+    interface GetReplicationGroupNodeGroupConfiguration {
+        /**
+         * ID of the node group.
+         */
+        nodeGroupId: string;
+        /**
+         * Availability Zone for the primary node.
+         */
+        primaryAvailabilityZone: string;
+        /**
+         * Outpost ARN of the primary node.
+         */
+        primaryOutpostArn: string;
+        /**
+         * List of Availability Zones for the replica nodes.
+         */
+        replicaAvailabilityZones: string[];
+        /**
+         * Number of replica nodes in this node group.
+         */
+        replicaCount: number;
+        /**
+         * List of outpost ARNs for the replica nodes.
+         */
+        replicaOutpostArns: string[];
+        /**
+         * Keyspace for this node group (shard).
+         */
+        slots: string;
+    }
     interface GetServerlessCacheCacheUsageLimits {
         /**
          * The maximum data storage limit in the cache, expressed in Gigabytes. See `dataStorage` Block for details.
@@ -37383,6 +37815,36 @@ export declare namespace elasticache {
          */
         logType: string;
     }
+    interface ReplicationGroupNodeGroupConfiguration {
+        /**
+         * ID for the node group. Redis (cluster mode disabled) replication groups don't have node group IDs, so this value is ignored. For Redis (cluster mode enabled) replication groups, the node group ID is a 1 to 4 character alphanumeric string.
+         */
+        nodeGroupId?: string;
+        /**
+         * Availability zone for the primary node.
+         */
+        primaryAvailabilityZone: string;
+        /**
+         * ARN of the Outpost for the primary node.
+         */
+        primaryOutpostArn: string;
+        /**
+         * List of availability zones for the replica nodes.
+         */
+        replicaAvailabilityZones: string[];
+        /**
+         * Number of replica nodes in this node group.
+         */
+        replicaCount?: number;
+        /**
+         * List of ARNs of the Outposts for the replica nodes.
+         */
+        replicaOutpostArns: string[];
+        /**
+         * Keyspace for this node group. Format is `start-end` (e.g., `0-5460`). For Redis (cluster mode disabled) replication groups, this value is ignored.
+         */
+        slots?: string;
+    }
     interface ReservedCacheNodeRecurringCharge {
         recurringChargeAmount: number;
         recurringChargeFrequency: string;
@@ -39151,7 +39613,7 @@ export declare namespace emrcontainers {
         /**
          * Monitoring configurations for the persistent application UI.
          */
-        persistentAppUi?: string;
+        persistentAppUi: string;
         /**
          * Amazon S3 configuration for monitoring log publishing.
          */
@@ -45622,6 +46084,28 @@ export declare namespace inspector2 {
         lambdaCode?: boolean;
     }
 }
+export declare namespace invoicing {
+    interface InvoiceUnitRule {
+        /**
+         * Set of AWS account IDs included in this invoice unit.
+         */
+        linkedAccounts: string[];
+    }
+    interface InvoiceUnitTimeouts {
+        /**
+         * A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
+         */
+        create?: string;
+        /**
+         * A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
+         */
+        delete?: string;
+        /**
+         * A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
+         */
+        update?: string;
+    }
+}
 export declare namespace iot {
     interface BillingGroupMetadata {
         creationDate: string;
@@ -69967,6 +70451,82 @@ export declare namespace networkfirewall {
         subnetId: string;
     }
 }
+export declare namespace networkflowmonitor {
+    interface MonitorLocalResource {
+        /**
+         * The identifier of the resource. For VPC resources, this is the VPC ARN.
+         */
+        identifier: string;
+        /**
+         * The type of the resource. Valid values are `AWS::EC2::VPC`, `AWS::EC2::Subnet`, `AWS::EC2::AvailabilityZone`, `AWS::EC2::Region`.
+         */
+        type: string;
+    }
+    interface MonitorRemoteResource {
+        /**
+         * The identifier of the resource. For VPC resources, this is the VPC ARN.
+         */
+        identifier: string;
+        /**
+         * The type of the resource. Valid values are `AWS::EC2::VPC`, `AWS::EC2::Subnet`, `AWS::EC2::AvailabilityZone`, `AWS::EC2::Region`.
+         */
+        type: string;
+    }
+    interface MonitorTimeouts {
+        /**
+         * A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
+         */
+        create?: string;
+        /**
+         * A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
+         */
+        delete?: string;
+        /**
+         * A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
+         */
+        update?: string;
+    }
+    interface ScopeTarget {
+        /**
+         * Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
+         */
+        region: string;
+        /**
+         * A target identifier is a pair of identifying information for a scope.
+         */
+        targetIdentifier?: outputs.networkflowmonitor.ScopeTargetTargetIdentifier;
+    }
+    interface ScopeTargetTargetIdentifier {
+        /**
+         * The identifier for a target, which is currently always an account ID.
+         */
+        targetId?: outputs.networkflowmonitor.ScopeTargetTargetIdentifierTargetId;
+        /**
+         * The type of a target. A target type is currently always `ACCOUNT`.
+         */
+        targetType: string;
+    }
+    interface ScopeTargetTargetIdentifierTargetId {
+        /**
+         * AWS account ID.
+         */
+        accountId: string;
+    }
+    interface ScopeTimeouts {
+        /**
+         * A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
+         */
+        create?: string;
+        /**
+         * A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
+         */
+        delete?: string;
+        /**
+         * A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
+         */
+        update?: string;
+    }
+}
 export declare namespace networkmanager {
     interface ConnectAttachmentOptions {
         /**
@@ -70447,6 +71007,100 @@ export declare namespace oam {
         filter: string;
     }
 }
+export declare namespace observabilityadmin {
+    interface CentralizationRuleForOrganizationRule {
+        /**
+         * Configuration block for the destination where logs will be centralized. See `destination` below.
+         */
+        destination?: outputs.observabilityadmin.CentralizationRuleForOrganizationRuleDestination;
+        /**
+         * Configuration block for the source of logs to be centralized. See `source` below.
+         */
+        source?: outputs.observabilityadmin.CentralizationRuleForOrganizationRuleSource;
+    }
+    interface CentralizationRuleForOrganizationRuleDestination {
+        /**
+         * AWS account ID where logs will be centralized.
+         */
+        account: string;
+        /**
+         * Configuration block for destination logs settings. See `destinationLogsConfiguration` below.
+         */
+        destinationLogsConfiguration?: outputs.observabilityadmin.CentralizationRuleForOrganizationRuleDestinationDestinationLogsConfiguration;
+        /**
+         * AWS region where logs will be centralized.
+         */
+        region: string;
+    }
+    interface CentralizationRuleForOrganizationRuleDestinationDestinationLogsConfiguration {
+        /**
+         * Configuration block for backup settings. See `backupConfiguration` below.
+         */
+        backupConfiguration?: outputs.observabilityadmin.CentralizationRuleForOrganizationRuleDestinationDestinationLogsConfigurationBackupConfiguration;
+        /**
+         * Configuration block for logs encryption settings. See `logsEncryptionConfiguration` below.
+         */
+        logsEncryptionConfiguration?: outputs.observabilityadmin.CentralizationRuleForOrganizationRuleDestinationDestinationLogsConfigurationLogsEncryptionConfiguration;
+    }
+    interface CentralizationRuleForOrganizationRuleDestinationDestinationLogsConfigurationBackupConfiguration {
+        /**
+         * ARN of the KMS key to use for backup encryption.
+         */
+        kmsKeyArn?: string;
+        /**
+         * AWS region for backup storage.
+         */
+        region?: string;
+    }
+    interface CentralizationRuleForOrganizationRuleDestinationDestinationLogsConfigurationLogsEncryptionConfiguration {
+        /**
+         * Strategy for resolving encryption conflicts. Valid values: `ALLOW`, `SKIP`.
+         */
+        encryptionConflictResolutionStrategy?: string;
+        /**
+         * Encryption strategy for logs. Valid values: `AWS_OWNED`, `CUSTOMER_MANAGED`.
+         */
+        encryptionStrategy: string;
+        /**
+         * ARN of the KMS key to use for encryption when `encryptionStrategy` is `CUSTOMER_MANAGED`.
+         */
+        kmsKeyArn?: string;
+    }
+    interface CentralizationRuleForOrganizationRuleSource {
+        /**
+         * Set of AWS regions from which to centralize logs. Must contain at least one region.
+         */
+        regions: string[];
+        /**
+         * Scope defining which resources to include. Use organization ID format: `OrganizationId = 'o-example123456'`.
+         */
+        scope: string;
+        /**
+         * Configuration block for source logs settings. See `sourceLogsConfiguration` below.
+         */
+        sourceLogsConfiguration?: outputs.observabilityadmin.CentralizationRuleForOrganizationRuleSourceSourceLogsConfiguration;
+    }
+    interface CentralizationRuleForOrganizationRuleSourceSourceLogsConfiguration {
+        /**
+         * Strategy for handling encrypted log groups. Valid values: `ALLOW`, `SKIP`.
+         */
+        encryptedLogGroupStrategy: string;
+        /**
+         * Criteria for selecting log groups. Use `*` for all log groups or OAM filter syntax like `LogGroupName LIKE '/aws/lambda%'`. Must be between 1 and 2000 characters.
+         */
+        logGroupSelectionCriteria: string;
+    }
+    interface CentralizationRuleForOrganizationTimeouts {
+        /**
+         * A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
+         */
+        create?: string;
+        /**
+         * A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
+         */
+        update?: string;
+    }
+}
 export declare namespace odb {
     interface CloudAutonomousVmClusterMaintenanceWindow {
         /**
@@ -71213,16 +71867,25 @@ export declare namespace opensearch {
         masterUserPassword?: string;
     }
     interface DomainAimlOptions {
+        /**
+         * Configuration block for parameters required for natural language query generation on the specified domain.
+         */
         naturalLanguageQueryGenerationOptions: outputs.opensearch.DomainAimlOptionsNaturalLanguageQueryGenerationOptions;
+        /**
+         * Configuration block for parameters required to enable S3 vectors engine features on the specified domain.
+         */
         s3VectorsEngine: outputs.opensearch.DomainAimlOptionsS3VectorsEngine;
     }
     interface DomainAimlOptionsNaturalLanguageQueryGenerationOptions {
         /**
-         * Auto-Tune desired state for the domain. Valid values: `ENABLED` or `DISABLED`.
+         * The desired state of the natural language query generation feature. Valid values are `ENABLED` and `DISABLED`.
          */
         desiredState: string;
     }
     interface DomainAimlOptionsS3VectorsEngine {
+        /**
+         * Enables S3 vectors engine features.
+         */
         enabled: boolean;
     }
     interface DomainAutoTuneOptions {
@@ -71431,6 +72094,12 @@ export declare namespace opensearch {
          */
         kmsKeyId: string;
     }
+    interface DomainIdentityCenterOptions {
+        enabledApiAccess?: boolean;
+        identityCenterInstanceArn?: string;
+        rolesKey: string;
+        subjectKey: string;
+    }
     interface DomainLogPublishingOption {
         /**
          * ARN of the Cloudwatch log group to which log needs to be published.
@@ -71737,6 +72406,24 @@ export declare namespace opensearch {
          */
         kmsKeyId: string;
     }
+    interface GetDomainIdentityCenterOption {
+        /**
+         * Boolean whether IAM Identity Center is enabled for API access.
+         */
+        enabledApiAccess: boolean;
+        /**
+         * ARN of the IAM Identity Center instance to create an OpenSearch UI application that uses IAM Identity Center for authentication.
+         */
+        identityCenterInstanceArn: string;
+        /**
+         * Attribute that contains the backend role identifier (such as group name or group ID) in IAM Identity Center.
+         */
+        rolesKey: string;
+        /**
+         * Attribute that contains the subject identifier (such as username, user ID, or email) in IAM Identity Center.
+         */
+        subjectKey: string;
+    }
     interface GetDomainLogPublishingOption {
         /**
          * CloudWatch Log Group where the logs are published.
@@ -81971,64 +82658,63 @@ export declare namespace sagemaker {
     }
     interface EndpointConfigurationAsyncInferenceConfig {
         /**
-         * Configures the behavior of the client used by Amazon SageMaker AI to interact with the model container during asynchronous inference.
+         * Configures the behavior of the client used by SageMaker AI to interact with the model container during asynchronous inference.
          */
         clientConfig?: outputs.sagemaker.EndpointConfigurationAsyncInferenceConfigClientConfig;
         /**
-         * Specifies the configuration for asynchronous inference invocation outputs.
+         * Configuration for asynchronous inference invocation outputs.
          */
         outputConfig: outputs.sagemaker.EndpointConfigurationAsyncInferenceConfigOutputConfig;
     }
     interface EndpointConfigurationAsyncInferenceConfigClientConfig {
         /**
-         * The maximum number of concurrent requests sent by the SageMaker AI client to the model container. If no value is provided, Amazon SageMaker AI will choose an optimal value for you.
+         * Maximum number of concurrent requests sent by the SageMaker AI client to the model container. If no value is provided, SageMaker AI will choose an optimal value for you.
          */
         maxConcurrentInvocationsPerInstance?: number;
     }
     interface EndpointConfigurationAsyncInferenceConfigOutputConfig {
         /**
-         * The Amazon Web Services Key Management Service (Amazon Web Services KMS) key that Amazon SageMaker AI uses to encrypt the asynchronous inference output in Amazon S3.
+         * KMS key that SageMaker AI uses to encrypt the asynchronous inference output in S3.
          */
         kmsKeyId?: string;
         /**
-         * Specifies the configuration for notifications of inference results for asynchronous inference.
+         * Configuration for notifications of inference results for asynchronous inference.
          */
         notificationConfig?: outputs.sagemaker.EndpointConfigurationAsyncInferenceConfigOutputConfigNotificationConfig;
         /**
-         * The Amazon S3 location to upload failure inference responses to.
+         * S3 location to upload failure inference responses to.
          */
         s3FailurePath?: string;
         /**
-         * The Amazon S3 location to upload inference responses to.
+         * S3 location to upload inference responses to.
          */
         s3OutputPath: string;
     }
     interface EndpointConfigurationAsyncInferenceConfigOutputConfigNotificationConfig {
         /**
-         * Amazon SNS topic to post a notification to when inference fails. If no topic is provided, no notification is sent on failure.
+         * SNS topic to post a notification to when inference fails. If no topic is provided, no notification is sent on failure.
          */
         errorTopic?: string;
         /**
-         * The Amazon SNS topics where you want the inference response to be included. Valid values are `SUCCESS_NOTIFICATION_TOPIC` and `ERROR_NOTIFICATION_TOPIC`.
+         * SNS topics where you want the inference response to be included. Valid values are `SUCCESS_NOTIFICATION_TOPIC` and `ERROR_NOTIFICATION_TOPIC`.
          */
         includeInferenceResponseIns?: string[];
         /**
-         * Amazon SNS topic to post a notification to when inference completes successfully. If no topic is provided, no notification is sent on success.
+         * SNS topic to post a notification to when inference completes successfully. If no topic is provided, no notification is sent on success.
          */
         successTopic?: string;
     }
     interface EndpointConfigurationDataCaptureConfig {
         /**
-         * The content type headers to capture.
-         * See `captureContentTypeHeader` below.
+         * Content type headers to capture. See `captureContentTypeHeader` below.
          */
         captureContentTypeHeader?: outputs.sagemaker.EndpointConfigurationDataCaptureConfigCaptureContentTypeHeader;
         /**
-         * Specifies what data to capture. Fields are documented below.
+         * What data to capture. Fields are documented below.
          */
         captureOptions: outputs.sagemaker.EndpointConfigurationDataCaptureConfigCaptureOption[];
         /**
-         * The URL for S3 location where the captured data is stored.
+         * URL for S3 location where the captured data is stored.
          */
         destinationS3Uri: string;
         /**
@@ -82040,47 +82726,45 @@ export declare namespace sagemaker {
          */
         initialSamplingPercentage: number;
         /**
-         * Amazon Resource Name (ARN) of a AWS Key Management Service key that Amazon SageMaker AI uses to encrypt the captured data on Amazon S3.
+         * ARN of a KMS key that SageMaker AI uses to encrypt the captured data on S3.
          */
         kmsKeyId?: string;
     }
     interface EndpointConfigurationDataCaptureConfigCaptureContentTypeHeader {
         /**
-         * The CSV content type headers to capture.
-         * One of `csvContentTypes` or `jsonContentTypes` is required.
+         * CSV content type headers to capture. One of `csvContentTypes` or `jsonContentTypes` is required.
          */
         csvContentTypes?: string[];
         /**
-         * The JSON content type headers to capture.
-         * One of `jsonContentTypes` or `csvContentTypes` is required.
+         * The JSON content type headers to capture. One of `jsonContentTypes` or `csvContentTypes` is required.
          */
         jsonContentTypes?: string[];
     }
     interface EndpointConfigurationDataCaptureConfigCaptureOption {
         /**
-         * Specifies the data to be captured. Should be one of `Input`, `Output` or `InputAndOutput`.
+         * Data to be captured. Should be one of `Input`, `Output` or `InputAndOutput`.
          */
         captureMode: string;
     }
     interface EndpointConfigurationProductionVariant {
         /**
-         * The size of the Elastic Inference (EI) instance to use for the production variant.
+         * Size of the Elastic Inference (EI) instance to use for the production variant.
          */
         acceleratorType?: string;
         /**
-         * The timeout value, in seconds, for your inference container to pass health check by SageMaker AI Hosting. For more information about health check, see [How Your Container Should Respond to Health Check (Ping) Requests](https://docs.aws.amazon.com/sagemaker/latest/dg/your-algorithms-inference-code.html#your-algorithms-inference-algo-ping-requests). Valid values between `60` and `3600`.
+         * Timeout value, in seconds, for your inference container to pass health check by SageMaker AI Hosting. For more information about health check, see [How Your Container Should Respond to Health Check (Ping) Requests](https://docs.aws.amazon.com/sagemaker/latest/dg/your-algorithms-inference-code.html#your-algorithms-inference-algo-ping-requests). Valid values between `60` and `3600`.
          */
         containerStartupHealthCheckTimeoutInSeconds?: number;
         /**
-         * Specifies configuration for a core dump from the model container when the process crashes. Fields are documented below.
+         * Core dump configuration from the model container when the process crashes. Fields are documented below.
          */
         coreDumpConfig?: outputs.sagemaker.EndpointConfigurationProductionVariantCoreDumpConfig;
         /**
-         * You can use this parameter to turn on native Amazon Web Services Systems Manager (SSM) access for a production variant behind an endpoint. By default, SSM access is disabled for all production variants behind an endpoints.
+         * Whether to turn on native AWS SSM access for a production variant behind an endpoint. By default, SSM access is disabled for all production variants behind endpoints. Ignored if `modelName` is not set (Inference Components endpoint).
          */
         enableSsmAccess?: boolean;
         /**
-         * Specifies an option from a collection of preconfigured Amazon Machine Image (AMI) images. Each image is configured by Amazon Web Services with a set of software and driver versions. Amazon Web Services optimizes these configurations for different machine learning workloads.
+         * Option from a collection of preconfigured AMI images. Each image is configured by AWS with a set of software and driver versions. AWS optimizes these configurations for different machine learning workloads.
          */
         inferenceAmiVersion?: string;
         /**
@@ -82088,105 +82772,105 @@ export declare namespace sagemaker {
          */
         initialInstanceCount?: number;
         /**
-         * Determines initial traffic distribution among all of the models that you specify in the endpoint configuration. If unspecified, it defaults to `1.0`.
+         * Initial traffic distribution among all of the models that you specify in the endpoint configuration. If unspecified, defaults to `1.0`. Ignored if `modelName` is not set (Inference Components endpoint).
          */
         initialVariantWeight?: number;
         /**
-         * The type of instance to start.
+         * Type of instance to start.
          */
         instanceType?: string;
         /**
-         * Settings that control the range in the number of instances that the endpoint provisions as it scales up or down to accommodate traffic.
+         * Control the range in the number of instances that the endpoint provisions as it scales up or down to accommodate traffic.
          */
         managedInstanceScaling?: outputs.sagemaker.EndpointConfigurationProductionVariantManagedInstanceScaling;
         /**
-         * The timeout value, in seconds, to download and extract the model that you want to host from Amazon S3 to the individual inference instance associated with this production variant. Valid values between `60` and `3600`.
+         * Timeout value, in seconds, to download and extract the model that you want to host from S3 to the individual inference instance associated with this production variant. Valid values between `60` and `3600`.
          */
         modelDataDownloadTimeoutInSeconds?: number;
         /**
-         * The name of the model to use.
+         * Name of the model to use. Required unless using Inference Components (in which case `executionRoleArn` must be specified at the endpoint configuration level).
          */
-        modelName: string;
+        modelName?: string;
         /**
-         * Sets how the endpoint routes incoming traffic. See routingConfig below.
+         * How the endpoint routes incoming traffic. See routingConfig below.
          */
         routingConfigs?: outputs.sagemaker.EndpointConfigurationProductionVariantRoutingConfig[];
         /**
-         * Specifies configuration for how an endpoint performs asynchronous inference.
+         * How an endpoint performs asynchronous inference.
          */
         serverlessConfig?: outputs.sagemaker.EndpointConfigurationProductionVariantServerlessConfig;
         /**
-         * The name of the variant. If omitted, this provider will assign a random, unique name.
+         * Name of the variant. If omitted, the provider will assign a random, unique name.
          */
         variantName: string;
         /**
-         * The size, in GB, of the ML storage volume attached to individual inference instance associated with the production variant. Valid values between `1` and `512`.
+         * Size, in GB, of the ML storage volume attached to individual inference instance associated with the production variant. Valid values between `1` and `512`.
          */
         volumeSizeInGb: number;
     }
     interface EndpointConfigurationProductionVariantCoreDumpConfig {
         /**
-         * The Amazon S3 bucket to send the core dump to.
+         * S3 bucket to send the core dump to.
          */
         destinationS3Uri: string;
         /**
-         * The Amazon Web Services Key Management Service (Amazon Web Services KMS) key that SageMaker AI uses to encrypt the core dump data at rest using Amazon S3 server-side encryption.
+         * KMS key that SageMaker AI uses to encrypt the core dump data at rest using S3 server-side encryption.
          */
         kmsKeyId?: string;
     }
     interface EndpointConfigurationProductionVariantManagedInstanceScaling {
         /**
-         * The maximum number of instances that the endpoint can provision when it scales up to accommodate an increase in traffic.
+         * Maximum number of instances that the endpoint can provision when it scales up to accommodate an increase in traffic.
          */
         maxInstanceCount?: number;
         /**
-         * The minimum number of instances that the endpoint must retain when it scales down to accommodate a decrease in traffic.
+         * Minimum number of instances that the endpoint must retain when it scales down to accommodate a decrease in traffic.
          */
         minInstanceCount?: number;
         /**
-         * Indicates whether managed instance scaling is enabled. Valid values are `ENABLED` and `DISABLED`.
+         * Whether managed instance scaling is enabled. Valid values are `ENABLED` and `DISABLED`.
          */
         status?: string;
     }
     interface EndpointConfigurationProductionVariantRoutingConfig {
         /**
-         * Sets how the endpoint routes incoming traffic. Valid values are `LEAST_OUTSTANDING_REQUESTS` and `RANDOM`. `LEAST_OUTSTANDING_REQUESTS` routes requests to the specific instances that have more capacity to process them. `RANDOM` routes each request to a randomly chosen instance.
+         * How the endpoint routes incoming traffic. Valid values are `LEAST_OUTSTANDING_REQUESTS` and `RANDOM`. `LEAST_OUTSTANDING_REQUESTS` routes requests to the specific instances that have more capacity to process them. `RANDOM` routes each request to a randomly chosen instance.
          */
         routingStrategy: string;
     }
     interface EndpointConfigurationProductionVariantServerlessConfig {
         /**
-         * The maximum number of concurrent invocations your serverless endpoint can process. Valid values are between `1` and `200`.
+         * Maximum number of concurrent invocations your serverless endpoint can process. Valid values are between `1` and `200`.
          */
         maxConcurrency: number;
         /**
-         * The memory size of your serverless endpoint. Valid values are in 1 GB increments: `1024` MB, `2048` MB, `3072` MB, `4096` MB, `5120` MB, or `6144` MB.
+         * Memory size of your serverless endpoint. Valid values are in 1 GB increments: `1024` MB, `2048` MB, `3072` MB, `4096` MB, `5120` MB, or `6144` MB.
          */
         memorySizeInMb: number;
         /**
-         * The amount of provisioned concurrency to allocate for the serverless endpoint. Should be less than or equal to `maxConcurrency`. Valid values are between `1` and `200`.
+         * Amount of provisioned concurrency to allocate for the serverless endpoint. Should be less than or equal to `maxConcurrency`. Valid values are between `1` and `200`.
          */
         provisionedConcurrency?: number;
     }
     interface EndpointConfigurationShadowProductionVariant {
         /**
-         * The size of the Elastic Inference (EI) instance to use for the production variant.
+         * Size of the Elastic Inference (EI) instance to use for the production variant.
          */
         acceleratorType?: string;
         /**
-         * The timeout value, in seconds, for your inference container to pass health check by SageMaker AI Hosting. For more information about health check, see [How Your Container Should Respond to Health Check (Ping) Requests](https://docs.aws.amazon.com/sagemaker/latest/dg/your-algorithms-inference-code.html#your-algorithms-inference-algo-ping-requests). Valid values between `60` and `3600`.
+         * Timeout value, in seconds, for your inference container to pass health check by SageMaker AI Hosting. For more information about health check, see [How Your Container Should Respond to Health Check (Ping) Requests](https://docs.aws.amazon.com/sagemaker/latest/dg/your-algorithms-inference-code.html#your-algorithms-inference-algo-ping-requests). Valid values between `60` and `3600`.
          */
         containerStartupHealthCheckTimeoutInSeconds?: number;
         /**
-         * Specifies configuration for a core dump from the model container when the process crashes. Fields are documented below.
+         * Core dump configuration from the model container when the process crashes. Fields are documented below.
          */
         coreDumpConfig?: outputs.sagemaker.EndpointConfigurationShadowProductionVariantCoreDumpConfig;
         /**
-         * You can use this parameter to turn on native Amazon Web Services Systems Manager (SSM) access for a production variant behind an endpoint. By default, SSM access is disabled for all production variants behind an endpoints.
+         * Whether to turn on native AWS SSM access for a production variant behind an endpoint. By default, SSM access is disabled for all production variants behind endpoints. Ignored if `modelName` is not set (Inference Components endpoint).
          */
         enableSsmAccess?: boolean;
         /**
-         * Specifies an option from a collection of preconfigured Amazon Machine Image (AMI) images. Each image is configured by Amazon Web Services with a set of software and driver versions. Amazon Web Services optimizes these configurations for different machine learning workloads.
+         * Option from a collection of preconfigured AMI images. Each image is configured by AWS with a set of software and driver versions. AWS optimizes these configurations for different machine learning workloads.
          */
         inferenceAmiVersion?: string;
         /**
@@ -82194,83 +82878,83 @@ export declare namespace sagemaker {
          */
         initialInstanceCount?: number;
         /**
-         * Determines initial traffic distribution among all of the models that you specify in the endpoint configuration. If unspecified, it defaults to `1.0`.
+         * Initial traffic distribution among all of the models that you specify in the endpoint configuration. If unspecified, defaults to `1.0`. Ignored if `modelName` is not set (Inference Components endpoint).
          */
         initialVariantWeight?: number;
         /**
-         * The type of instance to start.
+         * Type of instance to start.
          */
         instanceType?: string;
         /**
-         * Settings that control the range in the number of instances that the endpoint provisions as it scales up or down to accommodate traffic.
+         * Control the range in the number of instances that the endpoint provisions as it scales up or down to accommodate traffic.
          */
         managedInstanceScaling?: outputs.sagemaker.EndpointConfigurationShadowProductionVariantManagedInstanceScaling;
         /**
-         * The timeout value, in seconds, to download and extract the model that you want to host from Amazon S3 to the individual inference instance associated with this production variant. Valid values between `60` and `3600`.
+         * Timeout value, in seconds, to download and extract the model that you want to host from S3 to the individual inference instance associated with this production variant. Valid values between `60` and `3600`.
          */
         modelDataDownloadTimeoutInSeconds?: number;
         /**
-         * The name of the model to use.
+         * Name of the model to use. Required unless using Inference Components (in which case `executionRoleArn` must be specified at the endpoint configuration level).
          */
-        modelName: string;
+        modelName?: string;
         /**
-         * Sets how the endpoint routes incoming traffic. See routingConfig below.
+         * How the endpoint routes incoming traffic. See routingConfig below.
          */
         routingConfigs?: outputs.sagemaker.EndpointConfigurationShadowProductionVariantRoutingConfig[];
         /**
-         * Specifies configuration for how an endpoint performs asynchronous inference.
+         * How an endpoint performs asynchronous inference.
          */
         serverlessConfig?: outputs.sagemaker.EndpointConfigurationShadowProductionVariantServerlessConfig;
         /**
-         * The name of the variant. If omitted, this provider will assign a random, unique name.
+         * Name of the variant. If omitted, the provider will assign a random, unique name.
          */
         variantName: string;
         /**
-         * The size, in GB, of the ML storage volume attached to individual inference instance associated with the production variant. Valid values between `1` and `512`.
+         * Size, in GB, of the ML storage volume attached to individual inference instance associated with the production variant. Valid values between `1` and `512`.
          */
         volumeSizeInGb?: number;
     }
     interface EndpointConfigurationShadowProductionVariantCoreDumpConfig {
         /**
-         * The Amazon S3 bucket to send the core dump to.
+         * S3 bucket to send the core dump to.
          */
         destinationS3Uri: string;
         /**
-         * The Amazon Web Services Key Management Service (Amazon Web Services KMS) key that SageMaker AI uses to encrypt the core dump data at rest using Amazon S3 server-side encryption.
+         * KMS key that SageMaker AI uses to encrypt the core dump data at rest using S3 server-side encryption.
          */
         kmsKeyId: string;
     }
     interface EndpointConfigurationShadowProductionVariantManagedInstanceScaling {
         /**
-         * The maximum number of instances that the endpoint can provision when it scales up to accommodate an increase in traffic.
+         * Maximum number of instances that the endpoint can provision when it scales up to accommodate an increase in traffic.
          */
         maxInstanceCount?: number;
         /**
-         * The minimum number of instances that the endpoint must retain when it scales down to accommodate a decrease in traffic.
+         * Minimum number of instances that the endpoint must retain when it scales down to accommodate a decrease in traffic.
          */
         minInstanceCount?: number;
         /**
-         * Indicates whether managed instance scaling is enabled. Valid values are `ENABLED` and `DISABLED`.
+         * Whether managed instance scaling is enabled. Valid values are `ENABLED` and `DISABLED`.
          */
         status?: string;
     }
     interface EndpointConfigurationShadowProductionVariantRoutingConfig {
         /**
-         * Sets how the endpoint routes incoming traffic. Valid values are `LEAST_OUTSTANDING_REQUESTS` and `RANDOM`. `LEAST_OUTSTANDING_REQUESTS` routes requests to the specific instances that have more capacity to process them. `RANDOM` routes each request to a randomly chosen instance.
+         * How the endpoint routes incoming traffic. Valid values are `LEAST_OUTSTANDING_REQUESTS` and `RANDOM`. `LEAST_OUTSTANDING_REQUESTS` routes requests to the specific instances that have more capacity to process them. `RANDOM` routes each request to a randomly chosen instance.
          */
         routingStrategy: string;
     }
     interface EndpointConfigurationShadowProductionVariantServerlessConfig {
         /**
-         * The maximum number of concurrent invocations your serverless endpoint can process. Valid values are between `1` and `200`.
+         * Maximum number of concurrent invocations your serverless endpoint can process. Valid values are between `1` and `200`.
          */
         maxConcurrency: number;
         /**
-         * The memory size of your serverless endpoint. Valid values are in 1 GB increments: `1024` MB, `2048` MB, `3072` MB, `4096` MB, `5120` MB, or `6144` MB.
+         * Memory size of your serverless endpoint. Valid values are in 1 GB increments: `1024` MB, `2048` MB, `3072` MB, `4096` MB, `5120` MB, or `6144` MB.
          */
         memorySizeInMb: number;
         /**
-         * The amount of provisioned concurrency to allocate for the serverless endpoint. Should be less than or equal to `maxConcurrency`. Valid values are between `1` and `200`.
+         * Amount of provisioned concurrency to allocate for the serverless endpoint. Should be less than or equal to `maxConcurrency`. Valid values are between `1` and `200`.
          */
         provisionedConcurrency?: number;
     }