@pulumi/aws 7.14.0 → 7.15.0-alpha.1766069560

package/types/input.d.ts

@@ -11693,14 +11693,198 @@ export declare namespace bedrock {
     }
     interface AgentKnowledgeBaseKnowledgeBaseConfiguration {
         /**
-         * Type of data that the data source is converted into for the knowledge base. Valid Values: `VECTOR`.
+         * Settings for an Amazon Kendra knowledge base. See `kendraKnowledgeBaseConfiguration` block for details.
+         */
+        kendraKnowledgeBaseConfiguration?: pulumi.Input<inputs.bedrock.AgentKnowledgeBaseKnowledgeBaseConfigurationKendraKnowledgeBaseConfiguration>;
+        /**
+         * Configurations for a knowledge base connected to an SQL database. See `sqlKnowledgeBaseConfiguration` block for details.
+         */
+        sqlKnowledgeBaseConfiguration?: pulumi.Input<inputs.bedrock.AgentKnowledgeBaseKnowledgeBaseConfigurationSqlKnowledgeBaseConfiguration>;
+        /**
+         * Type of data that the data source is converted into for the knowledge base. Valid Values: `VECTOR`, `KENDRA`, `SQL`.
          */
         type: pulumi.Input<string>;
         /**
-         * Details about the embeddings model that'sused to convert the data source. See `vectorKnowledgeBaseConfiguration` block for details.
+         * Details about the model that's used to convert the data source into vector embeddings. See `vectorKnowledgeBaseConfiguration` block for details.
          */
         vectorKnowledgeBaseConfiguration?: pulumi.Input<inputs.bedrock.AgentKnowledgeBaseKnowledgeBaseConfigurationVectorKnowledgeBaseConfiguration>;
     }
+    interface AgentKnowledgeBaseKnowledgeBaseConfigurationKendraKnowledgeBaseConfiguration {
+        /**
+         * ARN of the Amazon Kendra index.
+         */
+        kendraIndexArn: pulumi.Input<string>;
+    }
+    interface AgentKnowledgeBaseKnowledgeBaseConfigurationSqlKnowledgeBaseConfiguration {
+        /**
+         * Configurations for a knowledge base connected to an Amazon Redshift database. See `redshiftConfiguration` block for details.
+         */
+        redshiftConfiguration?: pulumi.Input<inputs.bedrock.AgentKnowledgeBaseKnowledgeBaseConfigurationSqlKnowledgeBaseConfigurationRedshiftConfiguration>;
+        /**
+         * Type of SQL database to connect to the knowledge base. Valid values: `REDSHIFT`.
+         */
+        type: pulumi.Input<string>;
+    }
+    interface AgentKnowledgeBaseKnowledgeBaseConfigurationSqlKnowledgeBaseConfigurationRedshiftConfiguration {
+        /**
+         * Configurations for an Amazon Redshift query engine. See `queryEngineConfiguration` block for details.
+         */
+        queryEngineConfiguration?: pulumi.Input<inputs.bedrock.AgentKnowledgeBaseKnowledgeBaseConfigurationSqlKnowledgeBaseConfigurationRedshiftConfigurationQueryEngineConfiguration>;
+        /**
+         * Configurations for generating queries. See `queryGenerationConfiguration` block for details.
+         */
+        queryGenerationConfiguration?: pulumi.Input<inputs.bedrock.AgentKnowledgeBaseKnowledgeBaseConfigurationSqlKnowledgeBaseConfigurationRedshiftConfigurationQueryGenerationConfiguration>;
+        /**
+         * Configurations for Amazon Redshift database storage. See `storageConfiguration` block for details.
+         */
+        storageConfiguration?: pulumi.Input<inputs.bedrock.AgentKnowledgeBaseKnowledgeBaseConfigurationSqlKnowledgeBaseConfigurationRedshiftConfigurationStorageConfiguration>;
+    }
+    interface AgentKnowledgeBaseKnowledgeBaseConfigurationSqlKnowledgeBaseConfigurationRedshiftConfigurationQueryEngineConfiguration {
+        /**
+         * Configurations for a provisioned Amazon Redshift query engine. See `provisionedConfiguration` block for details.
+         */
+        provisionedConfiguration?: pulumi.Input<inputs.bedrock.AgentKnowledgeBaseKnowledgeBaseConfigurationSqlKnowledgeBaseConfigurationRedshiftConfigurationQueryEngineConfigurationProvisionedConfiguration>;
+        /**
+         * Configurations for a serverless Amazon Redshift query engine. See `serverlessConfiguration` block for details.
+         */
+        serverlessConfiguration?: pulumi.Input<inputs.bedrock.AgentKnowledgeBaseKnowledgeBaseConfigurationSqlKnowledgeBaseConfigurationRedshiftConfigurationQueryEngineConfigurationServerlessConfiguration>;
+        /**
+         * Type of query engine. Valid values: `SERVERLESS`, `PROVISIONED`.
+         */
+        type: pulumi.Input<string>;
+    }
+    interface AgentKnowledgeBaseKnowledgeBaseConfigurationSqlKnowledgeBaseConfigurationRedshiftConfigurationQueryEngineConfigurationProvisionedConfiguration {
+        /**
+         * Configurations for authentication to Amazon Redshift. See `authConfiguration` block for details.
+         */
+        authConfiguration?: pulumi.Input<inputs.bedrock.AgentKnowledgeBaseKnowledgeBaseConfigurationSqlKnowledgeBaseConfigurationRedshiftConfigurationQueryEngineConfigurationProvisionedConfigurationAuthConfiguration>;
+        /**
+         * ID of the Amazon Redshift cluster.
+         */
+        clusterIdentifier: pulumi.Input<string>;
+    }
+    interface AgentKnowledgeBaseKnowledgeBaseConfigurationSqlKnowledgeBaseConfigurationRedshiftConfigurationQueryEngineConfigurationProvisionedConfigurationAuthConfiguration {
+        /**
+         * Database username for authentication to an Amazon Redshift provisioned data warehouse.
+         */
+        databaseUser?: pulumi.Input<string>;
+        /**
+         * Type of authentication to use. Valid values: `IAM`, `USERNAME_PASSWORD`.
+         */
+        type: pulumi.Input<string>;
+        /**
+         * ARN of a Secrets Manager secret for authentication.
+         */
+        usernamePasswordSecretArn?: pulumi.Input<string>;
+    }
+    interface AgentKnowledgeBaseKnowledgeBaseConfigurationSqlKnowledgeBaseConfigurationRedshiftConfigurationQueryEngineConfigurationServerlessConfiguration {
+        /**
+         * Configurations for authentication to a Redshift Serverless. See `authConfiguration` block for details.
+         */
+        authConfiguration?: pulumi.Input<inputs.bedrock.AgentKnowledgeBaseKnowledgeBaseConfigurationSqlKnowledgeBaseConfigurationRedshiftConfigurationQueryEngineConfigurationServerlessConfigurationAuthConfiguration>;
+        /**
+         * ARN of the Amazon Redshift workgroup.
+         */
+        workgroupArn: pulumi.Input<string>;
+    }
+    interface AgentKnowledgeBaseKnowledgeBaseConfigurationSqlKnowledgeBaseConfigurationRedshiftConfigurationQueryEngineConfigurationServerlessConfigurationAuthConfiguration {
+        /**
+         * Type of authentication to use. Valid values: `IAM`, `USERNAME_PASSWORD`.
+         */
+        type: pulumi.Input<string>;
+        /**
+         * ARN of a Secrets Manager secret for authentication.
+         */
+        usernamePasswordSecretArn?: pulumi.Input<string>;
+    }
+    interface AgentKnowledgeBaseKnowledgeBaseConfigurationSqlKnowledgeBaseConfigurationRedshiftConfigurationQueryGenerationConfiguration {
+        /**
+         * Time after which query generation will time out.
+         */
+        executionTimeoutSeconds?: pulumi.Input<number>;
+        /**
+         * Configurations for context to use during query generation. See `generationContext` block for details.
+         */
+        generationContext?: pulumi.Input<inputs.bedrock.AgentKnowledgeBaseKnowledgeBaseConfigurationSqlKnowledgeBaseConfigurationRedshiftConfigurationQueryGenerationConfigurationGenerationContext>;
+    }
+    interface AgentKnowledgeBaseKnowledgeBaseConfigurationSqlKnowledgeBaseConfigurationRedshiftConfigurationQueryGenerationConfigurationGenerationContext {
+        /**
+         * Information about example queries to help the query engine generate appropriate SQL queries. See `curatedQuery` block for details.
+         */
+        curatedQueries?: pulumi.Input<pulumi.Input<inputs.bedrock.AgentKnowledgeBaseKnowledgeBaseConfigurationSqlKnowledgeBaseConfigurationRedshiftConfigurationQueryGenerationConfigurationGenerationContextCuratedQuery>[]>;
+        /**
+         * Information about a table in the database. See `table` block for details.
+         */
+        tables?: pulumi.Input<pulumi.Input<inputs.bedrock.AgentKnowledgeBaseKnowledgeBaseConfigurationSqlKnowledgeBaseConfigurationRedshiftConfigurationQueryGenerationConfigurationGenerationContextTable>[]>;
+    }
+    interface AgentKnowledgeBaseKnowledgeBaseConfigurationSqlKnowledgeBaseConfigurationRedshiftConfigurationQueryGenerationConfigurationGenerationContextCuratedQuery {
+        /**
+         * Example natural language query.
+         */
+        naturalLanguage: pulumi.Input<string>;
+        /**
+         * SQL equivalent of `naturalLanguage`.
+         */
+        sql: pulumi.Input<string>;
+    }
+    interface AgentKnowledgeBaseKnowledgeBaseConfigurationSqlKnowledgeBaseConfigurationRedshiftConfigurationQueryGenerationConfigurationGenerationContextTable {
+        /**
+         * Information about a column in the table. See `column` block for details.
+         */
+        columns?: pulumi.Input<pulumi.Input<inputs.bedrock.AgentKnowledgeBaseKnowledgeBaseConfigurationSqlKnowledgeBaseConfigurationRedshiftConfigurationQueryGenerationConfigurationGenerationContextTableColumn>[]>;
+        /**
+         * Description of the table that helps the query engine understand the contents of the table.
+         */
+        description?: pulumi.Input<string>;
+        /**
+         * Whether to include or exclude the table during query generation. Valid values `INCLUDE`, `EXCLUDE`.
+         */
+        inclusion?: pulumi.Input<string>;
+        /**
+         * Name of the table for which the other fields in this object apply.
+         */
+        name: pulumi.Input<string>;
+    }
+    interface AgentKnowledgeBaseKnowledgeBaseConfigurationSqlKnowledgeBaseConfigurationRedshiftConfigurationQueryGenerationConfigurationGenerationContextTableColumn {
+        /**
+         * Description of the column that helps the query engine understand the contents of the column.
+         */
+        description?: pulumi.Input<string>;
+        /**
+         * Whether to include or exclude the column during query generation. Valid values `INCLUDE`, `EXCLUDE`.
+         */
+        inclusion?: pulumi.Input<string>;
+        /**
+         * Name of the column for which the other fields in this object apply.
+         */
+        name?: pulumi.Input<string>;
+    }
+    interface AgentKnowledgeBaseKnowledgeBaseConfigurationSqlKnowledgeBaseConfigurationRedshiftConfigurationStorageConfiguration {
+        /**
+         * Configurations for storage in AWS Glue Data Catalog. See `awsDataCatalogConfiguration` block for details.
+         */
+        awsDataCatalogConfiguration?: pulumi.Input<inputs.bedrock.AgentKnowledgeBaseKnowledgeBaseConfigurationSqlKnowledgeBaseConfigurationRedshiftConfigurationStorageConfigurationAwsDataCatalogConfiguration>;
+        /**
+         * Configurations for storage in Amazon Redshift. See `redshiftConfiguration` block for details.
+         */
+        redshiftConfiguration?: pulumi.Input<inputs.bedrock.AgentKnowledgeBaseKnowledgeBaseConfigurationSqlKnowledgeBaseConfigurationRedshiftConfigurationStorageConfigurationRedshiftConfiguration>;
+        /**
+         * Vector store service in which the knowledge base is stored. Valid Values: `MONGO_DB_ATLAS`, `OPENSEARCH_SERVERLESS`, `OPENSEARCH_MANAGED_CLUSTER`, `PINECONE`, `REDIS_ENTERPRISE_CLOUD`, `RDS`, `S3_VECTORS`, `NEPTUNE_ANALYTICS`.
+         */
+        type: pulumi.Input<string>;
+    }
+    interface AgentKnowledgeBaseKnowledgeBaseConfigurationSqlKnowledgeBaseConfigurationRedshiftConfigurationStorageConfigurationAwsDataCatalogConfiguration {
+        /**
+         * List of names of the tables to use.
+         */
+        tableNames: pulumi.Input<pulumi.Input<string>[]>;
+    }
+    interface AgentKnowledgeBaseKnowledgeBaseConfigurationSqlKnowledgeBaseConfigurationRedshiftConfigurationStorageConfigurationRedshiftConfiguration {
+        /**
+         * Name of the Amazon Redshift database.
+         */
+        databaseName: pulumi.Input<string>;
+    }
     interface AgentKnowledgeBaseKnowledgeBaseConfigurationVectorKnowledgeBaseConfiguration {
         /**
          * ARN of the model used to create vector embeddings for the knowledge base.
@@ -11755,7 +11939,19 @@ export declare namespace bedrock {
     }
     interface AgentKnowledgeBaseStorageConfiguration {
         /**
-         * The storage configuration of the knowledge base in Amazon OpenSearch Service. See `opensearchServerlessConfiguration` block for details.
+         * The storage configuration of the knowledge base in MongoDB Atlas. See `mongoDbAtlasConfiguration` block for details.
+         */
+        mongoDbAtlasConfiguration?: pulumi.Input<inputs.bedrock.AgentKnowledgeBaseStorageConfigurationMongoDbAtlasConfiguration>;
+        /**
+         * The storage configuration of the knowledge base in Amazon Neptune Analytics. See `neptuneAnalyticsConfiguration` block for details.
+         */
+        neptuneAnalyticsConfiguration?: pulumi.Input<inputs.bedrock.AgentKnowledgeBaseStorageConfigurationNeptuneAnalyticsConfiguration>;
+        /**
+         * The storage configuration of the knowledge base in Amazon OpenSearch Service Managed Cluster. See `opensearchManagedClusterConfiguration` block for details.
+         */
+        opensearchManagedClusterConfiguration?: pulumi.Input<inputs.bedrock.AgentKnowledgeBaseStorageConfigurationOpensearchManagedClusterConfiguration>;
+        /**
+         * The storage configuration of the knowledge base in Amazon OpenSearch Service Serverless. See `opensearchServerlessConfiguration` block for details.
          */
         opensearchServerlessConfiguration?: pulumi.Input<inputs.bedrock.AgentKnowledgeBaseStorageConfigurationOpensearchServerlessConfiguration>;
         /**
@@ -11771,10 +11967,114 @@ export declare namespace bedrock {
          */
         redisEnterpriseCloudConfiguration?: pulumi.Input<inputs.bedrock.AgentKnowledgeBaseStorageConfigurationRedisEnterpriseCloudConfiguration>;
         /**
-         * Vector store service in which the knowledge base is stored. Valid Values: `OPENSEARCH_SERVERLESS`, `PINECONE`, `REDIS_ENTERPRISE_CLOUD`, `RDS`.
+         * The storage configuration of the knowledge base in Amazon S3 Vectors. See `s3VectorsConfiguration` block for details.
+         */
+        s3VectorsConfiguration?: pulumi.Input<inputs.bedrock.AgentKnowledgeBaseStorageConfigurationS3VectorsConfiguration>;
+        /**
+         * Vector store service in which the knowledge base is stored. Valid Values: `MONGO_DB_ATLAS`, `OPENSEARCH_SERVERLESS`, `OPENSEARCH_MANAGED_CLUSTER`, `PINECONE`, `REDIS_ENTERPRISE_CLOUD`, `RDS`, `S3_VECTORS`, `NEPTUNE_ANALYTICS`.
          */
         type: pulumi.Input<string>;
     }
+    interface AgentKnowledgeBaseStorageConfigurationMongoDbAtlasConfiguration {
+        /**
+         * The name of the collection in the MongoDB Atlas database.
+         */
+        collectionName: pulumi.Input<string>;
+        /**
+         * The ARN of the secret that you created in AWS Secrets Manager that is linked to your MongoDB Atlas database.
+         */
+        credentialsSecretArn: pulumi.Input<string>;
+        /**
+         * The name of the database in the MongoDB Atlas database.
+         */
+        databaseName: pulumi.Input<string>;
+        /**
+         * The endpoint URL of the MongoDB Atlas database.
+         */
+        endpoint: pulumi.Input<string>;
+        /**
+         * The name of the service that hosts the MongoDB Atlas database.
+         */
+        endpointServiceName?: pulumi.Input<string>;
+        /**
+         * Contains the names of the fields to which to map information about the vector store.
+         */
+        fieldMapping?: pulumi.Input<inputs.bedrock.AgentKnowledgeBaseStorageConfigurationMongoDbAtlasConfigurationFieldMapping>;
+        /**
+         * The name of the vector index.
+         */
+        textIndexName?: pulumi.Input<string>;
+        /**
+         * The name of the vector index.
+         */
+        vectorIndexName: pulumi.Input<string>;
+    }
+    interface AgentKnowledgeBaseStorageConfigurationMongoDbAtlasConfigurationFieldMapping {
+        /**
+         * The name of the field in which Amazon Bedrock stores metadata about the vector store.
+         */
+        metadataField: pulumi.Input<string>;
+        /**
+         * The name of the field in which Amazon Bedrock stores the raw text from your data. The text is split according to the chunking strategy you choose.
+         */
+        textField: pulumi.Input<string>;
+        /**
+         * The name of the field in which Amazon Bedrock stores the vector embeddings for your data sources.
+         */
+        vectorField: pulumi.Input<string>;
+    }
+    interface AgentKnowledgeBaseStorageConfigurationNeptuneAnalyticsConfiguration {
+        /**
+         * The names of the fields to which to map information about the vector store. This block supports the following arguments:
+         */
+        fieldMapping?: pulumi.Input<inputs.bedrock.AgentKnowledgeBaseStorageConfigurationNeptuneAnalyticsConfigurationFieldMapping>;
+        /**
+         * ARN of the Neptune Analytics vector store.
+         */
+        graphArn: pulumi.Input<string>;
+    }
+    interface AgentKnowledgeBaseStorageConfigurationNeptuneAnalyticsConfigurationFieldMapping {
+        /**
+         * Name of the field in which Amazon Bedrock stores metadata about the vector store.
+         */
+        metadataField: pulumi.Input<string>;
+        /**
+         * Name of the field in which Amazon Bedrock stores the raw text from your data. The text is split according to the chunking strategy you choose.
+         */
+        textField: pulumi.Input<string>;
+    }
+    interface AgentKnowledgeBaseStorageConfigurationOpensearchManagedClusterConfiguration {
+        /**
+         * ARN of the OpenSearch domain.
+         */
+        domainArn: pulumi.Input<string>;
+        /**
+         * Endpoint URL of the OpenSearch domain.
+         */
+        domainEndpoint: pulumi.Input<string>;
+        /**
+         * The names of the fields to which to map information about the vector store. This block supports the following arguments:
+         */
+        fieldMapping?: pulumi.Input<inputs.bedrock.AgentKnowledgeBaseStorageConfigurationOpensearchManagedClusterConfigurationFieldMapping>;
+        /**
+         * Name of the vector store.
+         */
+        vectorIndexName: pulumi.Input<string>;
+    }
+    interface AgentKnowledgeBaseStorageConfigurationOpensearchManagedClusterConfigurationFieldMapping {
+        /**
+         * Name of the field in which Amazon Bedrock stores metadata about the vector store.
+         */
+        metadataField: pulumi.Input<string>;
+        /**
+         * Name of the field in which Amazon Bedrock stores the raw text from your data. The text is split according to the chunking strategy you choose.
+         */
+        textField: pulumi.Input<string>;
+        /**
+         * Name of the field in which Amazon Bedrock stores the vector embeddings for your data sources.
+         */
+        vectorField: pulumi.Input<string>;
+    }
     interface AgentKnowledgeBaseStorageConfigurationOpensearchServerlessConfiguration {
         /**
          * ARN of the OpenSearch Service vector store.
@@ -11793,15 +12093,15 @@ export declare namespace bedrock {
         /**
          * Name of the field in which Amazon Bedrock stores metadata about the vector store.
          */
-        metadataField?: pulumi.Input<string>;
+        metadataField: pulumi.Input<string>;
         /**
          * Name of the field in which Amazon Bedrock stores the raw text from your data. The text is split according to the chunking strategy you choose.
          */
-        textField?: pulumi.Input<string>;
+        textField: pulumi.Input<string>;
         /**
          * Name of the field in which Amazon Bedrock stores the vector embeddings for your data sources.
          */
-        vectorField?: pulumi.Input<string>;
+        vectorField: pulumi.Input<string>;
     }
     interface AgentKnowledgeBaseStorageConfigurationPineconeConfiguration {
         /**
@@ -11825,11 +12125,11 @@ export declare namespace bedrock {
         /**
          * Name of the field in which Amazon Bedrock stores metadata about the vector store.
          */
-        metadataField?: pulumi.Input<string>;
+        metadataField: pulumi.Input<string>;
         /**
          * Name of the field in which Amazon Bedrock stores the raw text from your data. The text is split according to the chunking strategy you choose.
          */
-        textField?: pulumi.Input<string>;
+        textField: pulumi.Input<string>;
     }
     interface AgentKnowledgeBaseStorageConfigurationRdsConfiguration {
         /**
@@ -11907,6 +12207,20 @@ export declare namespace bedrock {
          */
         vectorField?: pulumi.Input<string>;
     }
+    interface AgentKnowledgeBaseStorageConfigurationS3VectorsConfiguration {
+        /**
+         * ARN of the S3 Vectors index. Conflicts with `indexName` and `vectorBucketArn`.
+         */
+        indexArn?: pulumi.Input<string>;
+        /**
+         * Name of the S3 Vectors index. Must be specified with `vectorBucketArn`. Conflicts with `indexArn`.
+         */
+        indexName?: pulumi.Input<string>;
+        /**
+         * ARN of the S3 Vectors vector bucket. Must be specified with `indexName`. Conflicts with `indexArn`.
+         */
+        vectorBucketArn?: pulumi.Input<string>;
+    }
     interface AgentKnowledgeBaseTimeouts {
         /**
          * A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
@@ -15948,6 +16262,44 @@ export declare namespace cloudfront {
          */
         samplingRate: pulumi.Input<number>;
     }
+    interface TrustStoreCaCertificatesBundleSource {
+        /**
+         * Configuration block for the S3 location of the CA certificates bundle. See `caCertificatesBundleS3Location` below.
+         */
+        caCertificatesBundleS3Location?: pulumi.Input<inputs.cloudfront.TrustStoreCaCertificatesBundleSourceCaCertificatesBundleS3Location>;
+    }
+    interface TrustStoreCaCertificatesBundleSourceCaCertificatesBundleS3Location {
+        /**
+         * S3 bucket name containing the CA certificates bundle.
+         */
+        bucket: pulumi.Input<string>;
+        /**
+         * S3 object key for the CA certificates bundle.
+         */
+        key: pulumi.Input<string>;
+        /**
+         * AWS region of the S3 bucket.
+         */
+        region: pulumi.Input<string>;
+        /**
+         * S3 object version ID for the CA certificates bundle.
+         */
+        version?: pulumi.Input<string>;
+    }
+    interface TrustStoreTimeouts {
+        /**
+         * A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
+         */
+        create?: pulumi.Input<string>;
+        /**
+         * A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
+         */
+        delete?: pulumi.Input<string>;
+        /**
+         * A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
+         */
+        update?: pulumi.Input<string>;
+    }
     interface VpcOriginTimeouts {
         /**
          * A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
@@ -17666,6 +18018,10 @@ export declare namespace codebuild {
         maximumBuildsAllowed?: pulumi.Input<number>;
     }
     interface ProjectCache {
+        /**
+         * Namespace that determines the scope in which a cache is shared across multiple projects.
+         */
+        cacheNamespace?: pulumi.Input<string>;
         /**
          * Location where the AWS CodeBuild project stores cached resources. For
          * type `S3`, the value must be a valid S3 bucket name/prefix.
@@ -31082,11 +31438,11 @@ export declare namespace ecs {
     }
     interface ClusterConfigurationManagedStorageConfiguration {
         /**
-         * AWS Key Management Service key ID for the Fargate ephemeral storage.
+         * AWS Key Management Service key ARN for the Fargate ephemeral storage.
          */
         fargateEphemeralStorageKmsKeyId?: pulumi.Input<string>;
         /**
-         * AWS Key Management Service key ID to encrypt the managed storage.
+         * AWS Key Management Service key ARN to encrypt the managed storage.
          */
         kmsKeyId?: pulumi.Input<string>;
     }
@@ -63887,9 +64243,9 @@ export declare namespace networkmanager {
     }
     interface ConnectPeerBgpOptions {
         /**
-         * Peer ASN.
+         * Peer ASN. Supports 2-byte and 4-byte ASNs (1 to 4294967295).
          */
-        peerAsn?: pulumi.Input<number>;
+        peerAsn?: pulumi.Input<string>;
     }
     interface ConnectPeerConfiguration {
         bgpConfigurations?: pulumi.Input<pulumi.Input<inputs.networkmanager.ConnectPeerConfigurationBgpConfiguration>[]>;
@@ -63922,9 +64278,9 @@ export declare namespace networkmanager {
          */
         peerAddress?: pulumi.Input<string>;
         /**
-         * Peer ASN.
+         * Peer ASN. Supports 2-byte and 4-byte ASNs (1 to 4294967295).
          */
-        peerAsn?: pulumi.Input<number>;
+        peerAsn?: pulumi.Input<string>;
     }
     interface CoreNetworkEdge {
         /**
@@ -64090,11 +64446,11 @@ export declare namespace networkmanager {
          */
         operator?: string;
         /**
-         * Valid values include: `account-id`, `any`, `tag-value`, `tag-exists`, `resource-id`, `region`, `attachment-type`.
+         * Must be `routing-policy-label`.
          */
         type: string;
         /**
-         * string value
+         * Routing policy label to match.
          */
         value?: string;
     }
@@ -64108,14 +64464,90 @@ export declare namespace networkmanager {
          */
         operator?: pulumi.Input<string>;
         /**
-         * Valid values include: `account-id`, `any`, `tag-value`, `tag-exists`, `resource-id`, `region`, `attachment-type`.
+         * Must be `routing-policy-label`.
          */
         type: pulumi.Input<string>;
         /**
-         * string value
+         * Routing policy label to match.
          */
         value?: pulumi.Input<string>;
     }
+    interface GetCoreNetworkPolicyDocumentAttachmentRoutingPolicyRule {
+        /**
+         * Block defining the action to take when conditions match. Detailed below.
+         */
+        action: inputs.networkmanager.GetCoreNetworkPolicyDocumentAttachmentRoutingPolicyRuleAction;
+        /**
+         * A block argument. Detailed below.
+         */
+        conditions: inputs.networkmanager.GetCoreNetworkPolicyDocumentAttachmentRoutingPolicyRuleCondition[];
+        /**
+         * A user-defined description that further helps identify the rule.
+         */
+        description?: string;
+        /**
+         * A set of AWS Region codes where this rule applies.
+         */
+        edgeLocations?: string[];
+        /**
+         * An integer from `1` to `65535` indicating the rule's order number. Rules are processed in order from the lowest numbered rule to the highest. Rules stop processing when a rule is matched.
+         */
+        ruleNumber: number;
+    }
+    interface GetCoreNetworkPolicyDocumentAttachmentRoutingPolicyRuleArgs {
+        /**
+         * Block defining the action to take when conditions match. Detailed below.
+         */
+        action: pulumi.Input<inputs.networkmanager.GetCoreNetworkPolicyDocumentAttachmentRoutingPolicyRuleActionArgs>;
+        /**
+         * A block argument. Detailed below.
+         */
+        conditions: pulumi.Input<pulumi.Input<inputs.networkmanager.GetCoreNetworkPolicyDocumentAttachmentRoutingPolicyRuleConditionArgs>[]>;
+        /**
+         * A user-defined description that further helps identify the rule.
+         */
+        description?: pulumi.Input<string>;
+        /**
+         * A set of AWS Region codes where this rule applies.
+         */
+        edgeLocations?: pulumi.Input<pulumi.Input<string>[]>;
+        /**
+         * An integer from `1` to `65535` indicating the rule's order number. Rules are processed in order from the lowest numbered rule to the highest. Rules stop processing when a rule is matched.
+         */
+        ruleNumber: pulumi.Input<number>;
+    }
+    interface GetCoreNetworkPolicyDocumentAttachmentRoutingPolicyRuleAction {
+        /**
+         * Set of routing policy names to associate when the conditions match.
+         */
+        associateRoutingPolicies: string[];
+    }
+    interface GetCoreNetworkPolicyDocumentAttachmentRoutingPolicyRuleActionArgs {
+        /**
+         * Set of routing policy names to associate when the conditions match.
+         */
+        associateRoutingPolicies: pulumi.Input<pulumi.Input<string>[]>;
+    }
+    interface GetCoreNetworkPolicyDocumentAttachmentRoutingPolicyRuleCondition {
+        /**
+         * Must be `routing-policy-label`.
+         */
+        type: string;
+        /**
+         * Routing policy label to match.
+         */
+        value: string;
+    }
+    interface GetCoreNetworkPolicyDocumentAttachmentRoutingPolicyRuleConditionArgs {
+        /**
+         * Must be `routing-policy-label`.
+         */
+        type: pulumi.Input<string>;
+        /**
+         * Routing policy label to match.
+         */
+        value: pulumi.Input<string>;
+    }
     interface GetCoreNetworkPolicyDocumentCoreNetworkConfiguration {
         /**
          * List of strings containing Autonomous System Numbers (ASNs) to assign to Core Network Edges. By default, the core network automatically assigns an ASN for each Core Network Edge but you can optionally define the ASN in the edge-locations for each Region. The ASN uses an array of integer ranges only from `64512` to `65534` and `4200000000` to `4294967294` expressed as a string like `"64512-65534"`. No other ASN ranges can be used.
@@ -64218,6 +64650,138 @@ export declare namespace networkmanager {
          */
         requireAttachmentAcceptance: pulumi.Input<boolean>;
     }
+    interface GetCoreNetworkPolicyDocumentRoutingPolicy {
+        /**
+         * Description of the routing policy.
+         */
+        routingPolicyDescription?: string;
+        /**
+         * Direction of the routing policy. Valid values: `inbound`, `outbound`.
+         */
+        routingPolicyDirection: string;
+        /**
+         * Name of the routing policy. Must be 1-100 alphanumeric characters.
+         */
+        routingPolicyName: string;
+        /**
+         * Priority number for the routing policy. Must be between 1 and 9999. Lower numbers are evaluated first.
+         */
+        routingPolicyNumber: number;
+        /**
+         * List of routing policy rules. Each rule defines match conditions and actions. Detailed below.
+         */
+        routingPolicyRules: inputs.networkmanager.GetCoreNetworkPolicyDocumentRoutingPolicyRoutingPolicyRule[];
+    }
+    interface GetCoreNetworkPolicyDocumentRoutingPolicyArgs {
+        /**
+         * Description of the routing policy.
+         */
+        routingPolicyDescription?: pulumi.Input<string>;
+        /**
+         * Direction of the routing policy. Valid values: `inbound`, `outbound`.
+         */
+        routingPolicyDirection: pulumi.Input<string>;
+        /**
+         * Name of the routing policy. Must be 1-100 alphanumeric characters.
+         */
+        routingPolicyName: pulumi.Input<string>;
+        /**
+         * Priority number for the routing policy. Must be between 1 and 9999. Lower numbers are evaluated first.
+         */
+        routingPolicyNumber: pulumi.Input<number>;
+        /**
+         * List of routing policy rules. Each rule defines match conditions and actions. Detailed below.
+         */
+        routingPolicyRules: pulumi.Input<pulumi.Input<inputs.networkmanager.GetCoreNetworkPolicyDocumentRoutingPolicyRoutingPolicyRuleArgs>[]>;
+    }
+    interface GetCoreNetworkPolicyDocumentRoutingPolicyRoutingPolicyRule {
+        /**
+         * Defines the match conditions and actions for the rule. Detailed below.
+         */
+        ruleDefinition: inputs.networkmanager.GetCoreNetworkPolicyDocumentRoutingPolicyRoutingPolicyRuleRuleDefinition;
+        /**
+         * Priority number for the rule within the routing policy. Must be between 1 and 9999. Lower numbers are evaluated first.
+         */
+        ruleNumber: number;
+    }
+    interface GetCoreNetworkPolicyDocumentRoutingPolicyRoutingPolicyRuleArgs {
+        /**
+         * Defines the match conditions and actions for the rule. Detailed below.
+         */
+        ruleDefinition: pulumi.Input<inputs.networkmanager.GetCoreNetworkPolicyDocumentRoutingPolicyRoutingPolicyRuleRuleDefinitionArgs>;
+        /**
+         * Priority number for the rule within the routing policy. Must be between 1 and 9999. Lower numbers are evaluated first.
+         */
+        ruleNumber: pulumi.Input<number>;
+    }
+    interface GetCoreNetworkPolicyDocumentRoutingPolicyRoutingPolicyRuleRuleDefinition {
+        /**
+         * Block defining the action to take when conditions match. Detailed below.
+         */
+        action: inputs.networkmanager.GetCoreNetworkPolicyDocumentRoutingPolicyRoutingPolicyRuleRuleDefinitionAction;
+        /**
+         * Logic to apply when multiple match conditions are present. Valid values: `and`, `or`.
+         */
+        conditionLogic?: string;
+        /**
+         * List of conditions to match against routes. Detailed below.
+         */
+        matchConditions?: inputs.networkmanager.GetCoreNetworkPolicyDocumentRoutingPolicyRoutingPolicyRuleRuleDefinitionMatchCondition[];
+    }
+    interface GetCoreNetworkPolicyDocumentRoutingPolicyRoutingPolicyRuleRuleDefinitionArgs {
+        /**
+         * Block defining the action to take when conditions match. Detailed below.
+         */
+        action: pulumi.Input<inputs.networkmanager.GetCoreNetworkPolicyDocumentRoutingPolicyRoutingPolicyRuleRuleDefinitionActionArgs>;
+        /**
+         * Logic to apply when multiple match conditions are present. Valid values: `and`, `or`.
+         */
+        conditionLogic?: pulumi.Input<string>;
+        /**
+         * List of conditions to match against routes. Detailed below.
+         */
+        matchConditions?: pulumi.Input<pulumi.Input<inputs.networkmanager.GetCoreNetworkPolicyDocumentRoutingPolicyRoutingPolicyRuleRuleDefinitionMatchConditionArgs>[]>;
+    }
+    interface GetCoreNetworkPolicyDocumentRoutingPolicyRoutingPolicyRuleRuleDefinitionAction {
+        /**
+         * Type of action to perform. Valid values: `drop`, `allow`, `summarize`, `prepend-asn-list`, `remove-asn-list`, `replace-asn-list`, `add-community`, `remove-community`, `set-med`, `set-local-preference`.
+         */
+        type: string;
+        /**
+         * Value for the action, required for certain action types.
+         */
+        value?: string;
+    }
+    interface GetCoreNetworkPolicyDocumentRoutingPolicyRoutingPolicyRuleRuleDefinitionActionArgs {
+        /**
+         * Type of action to perform. Valid values: `drop`, `allow`, `summarize`, `prepend-asn-list`, `remove-asn-list`, `replace-asn-list`, `add-community`, `remove-community`, `set-med`, `set-local-preference`.
+         */
+        type: pulumi.Input<string>;
+        /**
+         * Value for the action, required for certain action types.
+         */
+        value?: pulumi.Input<string>;
+    }
+    interface GetCoreNetworkPolicyDocumentRoutingPolicyRoutingPolicyRuleRuleDefinitionMatchCondition {
+        /**
+         * Type of condition to match. Valid values: `prefix-equals`, `prefix-in-cidr`, `prefix-in-prefix-list`, `asn-in-as-path`, `community-in-list`, `med-equals`.
+         */
+        type: string;
+        /**
+         * Value to match against, depending on the condition type.
+         */
+        value: string;
+    }
+    interface GetCoreNetworkPolicyDocumentRoutingPolicyRoutingPolicyRuleRuleDefinitionMatchConditionArgs {
+        /**
+         * Type of condition to match. Valid values: `prefix-equals`, `prefix-in-cidr`, `prefix-in-prefix-list`, `asn-in-as-path`, `community-in-list`, `med-equals`.
+         */
+        type: pulumi.Input<string>;
+        /**
+         * Value to match against, depending on the condition type.
+         */
+        value: pulumi.Input<string>;
+    }
     interface GetCoreNetworkPolicyDocumentSegment {
         /**
          * List of strings of segment names that explicitly allows only routes from the segments that are listed in the array. Use the `allowFilter` setting if a segment has a well-defined group of other segments that connectivity should be restricted to. It is applied after routes have been shared in `segmentActions`. If a segment is listed in `allowFilter`, attachments between the two segments will have routes if they are also shared in the segment-actions area. For example, you might have a segment named "video-producer" that should only ever share routes with a "video-distributor" segment, no matter how many other share statements are created.
@@ -64280,7 +64844,7 @@ export declare namespace networkmanager {
     }
     interface GetCoreNetworkPolicyDocumentSegmentAction {
         /**
-         * Action to take for the chosen segment. Valid values: `create-route`, `share`, `send-via` and `send-to`.
+         * Action to take for the chosen segment. Valid values: `create-route`, `share`, `send-via`, `send-to`, and `associate-routing-policy` (available in policy version `2025.11` and later).
          */
         action: string;
         /**
@@ -64295,6 +64859,10 @@ export declare namespace networkmanager {
          * A list of strings. Valid values include `["blackhole"]` or a list of attachment ids.
          */
         destinations?: string[];
+        /**
+         * Associates routing policies with specific edge location pairs. Available in policy version `2025.11` and later. Detailed below.
+         */
+        edgeLocationAssociation?: inputs.networkmanager.GetCoreNetworkPolicyDocumentSegmentActionEdgeLocationAssociation;
         /**
          * String. When `action` is `share`, a `mode` value of `attachment-route` places the attachment and return routes in each of the `shareWith` segments. When `action` is `send-via`, indicates the mode used for packets. Valid values: `attachment-route`, `single-hop`, `dual-hop`.
          */
@@ -64322,7 +64890,7 @@ export declare namespace networkmanager {
     }
     interface GetCoreNetworkPolicyDocumentSegmentActionArgs {
         /**
-         * Action to take for the chosen segment. Valid values: `create-route`, `share`, `send-via` and `send-to`.
+         * Action to take for the chosen segment. Valid values: `create-route`, `share`, `send-via`, `send-to`, and `associate-routing-policy` (available in policy version `2025.11` and later).
          */
         action: pulumi.Input<string>;
         /**
@@ -64337,6 +64905,10 @@ export declare namespace networkmanager {
          * A list of strings. Valid values include `["blackhole"]` or a list of attachment ids.
          */
         destinations?: pulumi.Input<pulumi.Input<string>[]>;
+        /**
+         * Associates routing policies with specific edge location pairs. Available in policy version `2025.11` and later. Detailed below.
+         */
+        edgeLocationAssociation?: pulumi.Input<inputs.networkmanager.GetCoreNetworkPolicyDocumentSegmentActionEdgeLocationAssociationArgs>;
         /**
          * String. When `action` is `share`, a `mode` value of `attachment-route` places the attachment and return routes in each of the `shareWith` segments. When `action` is `send-via`, indicates the mode used for packets. Valid values: `attachment-route`, `single-hop`, `dual-hop`.
          */
@@ -64362,6 +64934,34 @@ export declare namespace networkmanager {
          */
         whenSentTo?: pulumi.Input<inputs.networkmanager.GetCoreNetworkPolicyDocumentSegmentActionWhenSentToArgs>;
     }
+    interface GetCoreNetworkPolicyDocumentSegmentActionEdgeLocationAssociation {
+        /**
+         * The AWS Region code for the first edge location in the association (e.g., `us-east-1`).
+         */
+        edgeLocation: string;
+        /**
+         * The AWS Region code for the second edge location in the association (e.g., `us-west-2`).
+         */
+        peerEdgeLocation: string;
+        /**
+         * A set of routing policy names to apply to this edge location pair.
+         */
+        routingPolicyNames: string[];
+    }
+    interface GetCoreNetworkPolicyDocumentSegmentActionEdgeLocationAssociationArgs {
+        /**
+         * The AWS Region code for the first edge location in the association (e.g., `us-east-1`).
+         */
+        edgeLocation: pulumi.Input<string>;
+        /**
+         * The AWS Region code for the second edge location in the association (e.g., `us-west-2`).
+         */
+        peerEdgeLocation: pulumi.Input<string>;
+        /**
+         * A set of routing policy names to apply to this edge location pair.
+         */
+        routingPolicyNames: pulumi.Input<pulumi.Input<string>[]>;
+    }
     interface GetCoreNetworkPolicyDocumentSegmentActionVia {
         /**
          * A list of strings. The network function group to use for the service insertion action.
@@ -72795,6 +73395,9 @@ export declare namespace s3 {
         Version: pulumi.Input<enums.iam.PolicyDocumentVersion>;
     }
     interface VectorsIndexEncryptionConfiguration {
+        /**
+         * AWS Key Management Service (KMS) customer managed key ID to use for the encryption configuration. This parameter is allowed if and only if `sseType` is set to `aws:kms`. To specify the KMS key, you must use the format of the KMS key Amazon Resource Name (ARN).
+         */
         kmsKeyArn: pulumi.Input<string>;
         /**
          * Type of encryption to use. Valid values: `AES256`, `aws:kms`. Defaults to `AES256`.
@@ -82506,6 +83109,16 @@ export declare namespace vpclattice {
          */
         hostedZoneId?: pulumi.Input<string>;
     }
+    interface ServiceNetworkVpcAssociationDnsOptions {
+        /**
+         * Preference for which private domains have a private hosted zone created for and associated with the specified VPC. Only supported when `privateDnsEnabled` is `true`. Valid Values are `VERIFIED_DOMAINS_ONLY`, `ALL_DOMAINS`, `VERIFIED_DOMAINS_AND_SPECIFIED_DOMAINS` and `SPECIFIED_DOMAINS_ONLY`.
+         */
+        privateDnsPreference?: pulumi.Input<string>;
+        /**
+         * Private domains to create private hosted zones for and associate with the specified VPC. Only supported when `privateDnsEnabled` is `true` and `privateDnsPreference` is `VERIFIED_DOMAINS_AND_SPECIFIED_DOMAINS` or `SPECIFIED_DOMAINS_ONLY`.
+         */
+        privateDnsSpecifiedDomains?: pulumi.Input<pulumi.Input<string>[]>;
+    }
     interface TargetGroupAttachmentTarget {
         /**
          * The ID of the target. If the target type of the target group is INSTANCE, this is an instance ID. If the target type is IP , this is an IP address. If the target type is LAMBDA, this is the ARN of the Lambda function. If the target type is ALB, this is the ARN of the Application Load Balancer.