@pulumi/aws 7.17.0-alpha.1770139809 → 7.17.0

package/types/output.d.ts

@@ -1157,6 +1157,7 @@ export declare namespace alb {
          * The HTTP or gRPC codes to use when checking for a successful response from a target.
          * The `health_check.protocol` must be one of `HTTP` or `HTTPS` or the `targetType` must be `lambda`.
          * Values can be comma-separated individual values (e.g., "200,202") or a range of values (e.g., "200-299").
+         * Once the value has been set, removing it has no effect. To unset it, set it to an empty string `""`.
          * * For gRPC-based target groups (i.e., the `protocol` is one of `HTTP` or `HTTPS` and the `protocolVersion` is `GRPC`), values can be between `0` and `99`. The default is `12`.
          * * When used with an Application Load Balancer (i.e., the `protocol` is one of `HTTP` or `HTTPS` and the `protocolVersion` is not `GRPC`), values can be between `200` and `499`. The default is `200`.
          * * When used with a Network Load Balancer (i.e., the `protocol` is one of `TCP`, `TCP_UDP`, `UDP`, or `TLS`), values can be between `200` and `599`. The default is `200-399`.
@@ -1165,6 +1166,7 @@ export declare namespace alb {
         matcher: string;
         /**
          * Destination for the health check request. Required for HTTP/HTTPS ALB and HTTP NLB. Only applies to HTTP/HTTPS.
+         * Once the value has been set, removing it has no effect. To unset it, set it to an empty string `""`.
          * * For HTTP and HTTPS health checks, the default is `/`.
          * * For gRPC health checks, the default is `/AWS.ALB/healthcheck`.
          */
@@ -1921,6 +1923,58 @@ export declare namespace apigatewayv2 {
          */
         required: boolean;
     }
+    interface RoutingRuleAction {
+        /**
+         * Configuration to invoke a stage of a target API. Only REST APIs are supported. See below.
+         */
+        invokeApi?: outputs.apigatewayv2.RoutingRuleActionInvokeApi;
+    }
+    interface RoutingRuleActionInvokeApi {
+        /**
+         * Action to invoke a stage of a target API. Only REST APIs are supported.
+         */
+        apiId: string;
+        /**
+         * Action to invoke a stage of a target API. Only REST APIs are supported.
+         */
+        stage: string;
+        /**
+         * Action to invoke a stage of a target API. Only REST APIs are supported.
+         */
+        stripBasePath?: boolean;
+    }
+    interface RoutingRuleCondition {
+        /**
+         * The base path to be matched. See below.
+         */
+        matchBasePaths?: outputs.apigatewayv2.RoutingRuleConditionMatchBasePaths;
+        /**
+         * The headers to be matched. See below.
+         */
+        matchHeaders?: outputs.apigatewayv2.RoutingRuleConditionMatchHeaders;
+    }
+    interface RoutingRuleConditionMatchBasePaths {
+        /**
+         * List of strings of the case sensitive base path to be matched.
+         */
+        anyOfs: string[];
+    }
+    interface RoutingRuleConditionMatchHeaders {
+        /**
+         * Configuration of the headers to be matched. There is a match if any of the header name and header value globs are matched. See below.
+         */
+        anyOf?: outputs.apigatewayv2.RoutingRuleConditionMatchHeadersAnyOf;
+    }
+    interface RoutingRuleConditionMatchHeadersAnyOf {
+        /**
+         * The case insensitive header name to be matched. The header name must be less than 40 characters and the only allowed characters are a-z, A-Z, 0-9, and the following special characters: *?-!#$%&'.^_`|~.
+         */
+        header: string;
+        /**
+         * The case sensitive header glob value to be matched against entire header value. The header glob value must be less than 128 characters and the only allowed characters are a-z, A-Z, 0-9, and the following special characters: \*?-!#$%&'.^_`|~. Wildcard matching is supported for header glob values but must be for \*prefix-match, suffix-match*, or \*infix*-match.
+         */
+        valueGlob: string;
+    }
     interface StageAccessLogSettings {
         /**
          * ARN of the CloudWatch Logs log group to receive access logs. Any trailing `:*` is trimmed from the ARN.
@@ -8154,6 +8208,932 @@ export declare namespace appsync {
         update?: string;
     }
 }
+export declare namespace arcregionswitch {
+    interface GetRoute53HealthChecksHealthCheck {
+        /**
+         * ID of the Route53 health check.
+         */
+        healthCheckId: string;
+        /**
+         * Hosted zone ID for the health check.
+         */
+        hostedZoneId: string;
+        /**
+         * Record name for the health check.
+         */
+        recordName: string;
+        /**
+         * Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
+         */
+        region: string;
+        /**
+         * Status of the health check. Valid values: `healthy`, `unhealthy`, `unknown`.
+         */
+        status: string;
+    }
+    interface PlanAssociatedAlarm {
+        /**
+         * Type of alarm. Valid values: `applicationHealth`, `trigger`.
+         */
+        alarmType: string;
+        /**
+         * ARN of the cross-account role to assume.
+         */
+        crossAccountRole?: string;
+        /**
+         * External ID for cross-account role assumption.
+         */
+        externalId?: string;
+        /**
+         * Name of the alarm.
+         */
+        mapBlockKey: string;
+        /**
+         * Resource identifier (ARN) of the CloudWatch alarm.
+         */
+        resourceIdentifier: string;
+    }
+    interface PlanTimeouts {
+        /**
+         * A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
+         */
+        create?: string;
+        /**
+         * A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
+         */
+        delete?: string;
+        /**
+         * A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
+         */
+        update?: string;
+    }
+    interface PlanTrigger {
+        /**
+         * Action to trigger. Valid values: `activate`, `deactivate`.
+         */
+        action: string;
+        /**
+         * List of conditions that must be met. See Conditions below.
+         */
+        conditions?: outputs.arcregionswitch.PlanTriggerCondition[];
+        /**
+         * Description of the plan.
+         */
+        description?: string;
+        /**
+         * Minimum delay in minutes between executions.
+         */
+        minDelayMinutesBetweenExecutions: number;
+        /**
+         * Target region for the trigger.
+         */
+        targetRegion: string;
+    }
+    interface PlanTriggerCondition {
+        /**
+         * Name of the associated alarm.
+         */
+        associatedAlarmName: string;
+        /**
+         * Condition to check. Valid values: `red`, `green`.
+         */
+        condition: string;
+    }
+    interface PlanWorkflow {
+        /**
+         * List of steps in the workflow. See Step below.
+         */
+        steps?: outputs.arcregionswitch.PlanWorkflowStep[];
+        /**
+         * Description of the workflow.
+         */
+        workflowDescription?: string;
+        /**
+         * Action to perform. Valid values: `activate`, `deactivate`.
+         */
+        workflowTargetAction: string;
+        /**
+         * Target region for the workflow.
+         */
+        workflowTargetRegion?: string;
+    }
+    interface PlanWorkflowStep {
+        /**
+         * Configuration for ARC routing control. See ARC Routing Control Config below.
+         */
+        arcRoutingControlConfigs?: outputs.arcregionswitch.PlanWorkflowStepArcRoutingControlConfig[];
+        /**
+         * Configuration for Lambda function execution. See Custom Action Lambda Config below.
+         */
+        customActionLambdaConfigs?: outputs.arcregionswitch.PlanWorkflowStepCustomActionLambdaConfig[];
+        /**
+         * Description of the step.
+         */
+        description?: string;
+        /**
+         * Configuration for DocumentDB global cluster operations. See DocumentDB Config below.
+         */
+        documentDbConfigs?: outputs.arcregionswitch.PlanWorkflowStepDocumentDbConfig[];
+        /**
+         * Configuration for EC2 Auto Scaling group capacity increase. See EC2 ASG Capacity Increase Config below.
+         */
+        ec2AsgCapacityIncreaseConfigs?: outputs.arcregionswitch.PlanWorkflowStepEc2AsgCapacityIncreaseConfig[];
+        /**
+         * Configuration for ECS service capacity increase. See ECS Capacity Increase Config below.
+         */
+        ecsCapacityIncreaseConfigs?: outputs.arcregionswitch.PlanWorkflowStepEcsCapacityIncreaseConfig[];
+        /**
+         * Configuration for EKS resource scaling. See EKS Resource Scaling Config below.
+         */
+        eksResourceScalingConfigs?: outputs.arcregionswitch.PlanWorkflowStepEksResourceScalingConfig[];
+        /**
+         * Configuration for manual approval steps. See Execution Approval Config below.
+         */
+        executionApprovalConfigs?: outputs.arcregionswitch.PlanWorkflowStepExecutionApprovalConfig[];
+        /**
+         * Type of execution block. Valid values: `ARCRegionSwitchPlan`, `ARCRoutingControl`, `AuroraGlobalDatabase`, `CustomActionLambda`, `DocumentDb`, `EC2AutoScaling`, `ECSServiceScaling`, `EKSResourceScaling`, `ManualApproval`, `Parallel`, `Route53HealthCheck`.
+         */
+        executionBlockType: string;
+        /**
+         * Configuration for Aurora Global Database operations. See Global Aurora Config below.
+         */
+        globalAuroraConfigs?: outputs.arcregionswitch.PlanWorkflowStepGlobalAuroraConfig[];
+        /**
+         * Name of the step.
+         */
+        name: string;
+        /**
+         * Configuration for parallel execution of multiple steps. See Parallel Config below.
+         */
+        parallelConfigs?: outputs.arcregionswitch.PlanWorkflowStepParallelConfig[];
+        regionSwitchPlanConfigs?: outputs.arcregionswitch.PlanWorkflowStepRegionSwitchPlanConfig[];
+        /**
+         * Configuration for Route53 health check operations. See Route53 Health Check Config below.
+         */
+        route53HealthCheckConfigs?: outputs.arcregionswitch.PlanWorkflowStepRoute53HealthCheckConfig[];
+    }
+    interface PlanWorkflowStepArcRoutingControlConfig {
+        /**
+         * ARN of the cross-account role to assume.
+         */
+        crossAccountRole?: string;
+        /**
+         * External ID for cross-account role assumption.
+         */
+        externalId?: string;
+        /**
+         * List of regions and their routing controls. See Region and Routing Controls below.
+         */
+        regionAndRoutingControls?: outputs.arcregionswitch.PlanWorkflowStepArcRoutingControlConfigRegionAndRoutingControl[];
+        /**
+         * Timeout in minutes.
+         */
+        timeoutMinutes?: number;
+    }
+    interface PlanWorkflowStepArcRoutingControlConfigRegionAndRoutingControl {
+        /**
+         * AWS region.
+         */
+        region: string;
+        /**
+         * List of routing controls. See Routing Control below.
+         */
+        routingControls?: outputs.arcregionswitch.PlanWorkflowStepArcRoutingControlConfigRegionAndRoutingControlRoutingControl[];
+    }
+    interface PlanWorkflowStepArcRoutingControlConfigRegionAndRoutingControlRoutingControl {
+        /**
+         * ARN of the routing control.
+         */
+        routingControlArn: string;
+        /**
+         * State of the routing control. Valid values: `On`, `Off`.
+         */
+        state: string;
+    }
+    interface PlanWorkflowStepCustomActionLambdaConfig {
+        /**
+         * Lambda function configuration. See Lambda below.
+         */
+        lambdas?: outputs.arcregionswitch.PlanWorkflowStepCustomActionLambdaConfigLambda[];
+        /**
+         * Region where the Lambda function should run. Valid values: `activatingRegion`, `deactivatingRegion`.
+         */
+        regionToRun: string;
+        /**
+         * Retry interval in minutes.
+         */
+        retryIntervalMinutes: number;
+        /**
+         * Timeout in minutes.
+         */
+        timeoutMinutes?: number;
+        /**
+         * Ungraceful behavior configuration. See Ungraceful below.
+         */
+        ungracefuls?: outputs.arcregionswitch.PlanWorkflowStepCustomActionLambdaConfigUngraceful[];
+    }
+    interface PlanWorkflowStepCustomActionLambdaConfigLambda {
+        /**
+         * ARN of the Lambda function.
+         */
+        arn: string;
+        /**
+         * ARN of the cross-account role to assume.
+         */
+        crossAccountRole?: string;
+        /**
+         * External ID for cross-account role assumption.
+         */
+        externalId?: string;
+    }
+    interface PlanWorkflowStepCustomActionLambdaConfigUngraceful {
+        /**
+         * Behavior when ungraceful. Valid values: `skip`.
+         */
+        behavior: string;
+    }
+    interface PlanWorkflowStepDocumentDbConfig {
+        behavior: string;
+        crossAccountRole?: string;
+        databaseClusterArns: string[];
+        externalId?: string;
+        globalClusterIdentifier: string;
+        timeoutMinutes?: number;
+        ungracefuls?: outputs.arcregionswitch.PlanWorkflowStepDocumentDbConfigUngraceful[];
+    }
+    interface PlanWorkflowStepDocumentDbConfigUngraceful {
+        ungraceful: string;
+    }
+    interface PlanWorkflowStepEc2AsgCapacityIncreaseConfig {
+        /**
+         * Auto Scaling group configuration. See ASG below.
+         */
+        asgs?: outputs.arcregionswitch.PlanWorkflowStepEc2AsgCapacityIncreaseConfigAsg[];
+        /**
+         * Capacity monitoring approach. Valid values: `sampledMaxInLast24Hours`, `autoscalingMaxInLast24Hours`.
+         */
+        capacityMonitoringApproach: string;
+        /**
+         * Target capacity percentage.
+         */
+        targetPercent?: number;
+        /**
+         * Timeout in minutes.
+         */
+        timeoutMinutes?: number;
+        /**
+         * Ungraceful behavior configuration. See Ungraceful below.
+         */
+        ungraceful?: outputs.arcregionswitch.PlanWorkflowStepEc2AsgCapacityIncreaseConfigUngraceful;
+    }
+    interface PlanWorkflowStepEc2AsgCapacityIncreaseConfigAsg {
+        /**
+         * ARN of the Auto Scaling group.
+         */
+        arn: string;
+        /**
+         * ARN of the cross-account role to assume.
+         */
+        crossAccountRole?: string;
+        /**
+         * External ID for cross-account role assumption.
+         */
+        externalId?: string;
+    }
+    interface PlanWorkflowStepEc2AsgCapacityIncreaseConfigUngraceful {
+        /**
+         * Minimum success percentage required.
+         */
+        minimumSuccessPercentage: number;
+    }
+    interface PlanWorkflowStepEcsCapacityIncreaseConfig {
+        /**
+         * Capacity monitoring approach. Valid values: `sampledMaxInLast24Hours`, `containerInsightsMaxInLast24Hours`.
+         */
+        capacityMonitoringApproach: string;
+        /**
+         * ECS service configuration. See ECS Service below.
+         */
+        services?: outputs.arcregionswitch.PlanWorkflowStepEcsCapacityIncreaseConfigService[];
+        /**
+         * Target capacity percentage.
+         */
+        targetPercent?: number;
+        /**
+         * Timeout in minutes.
+         */
+        timeoutMinutes?: number;
+        /**
+         * Ungraceful behavior configuration. See Ungraceful Capacity below.
+         */
+        ungraceful?: outputs.arcregionswitch.PlanWorkflowStepEcsCapacityIncreaseConfigUngraceful;
+    }
+    interface PlanWorkflowStepEcsCapacityIncreaseConfigService {
+        clusterArn: string;
+        crossAccountRole?: string;
+        externalId?: string;
+        /**
+         * ARN of the ECS service.
+         */
+        serviceArn: string;
+    }
+    interface PlanWorkflowStepEcsCapacityIncreaseConfigUngraceful {
+        /**
+         * Minimum success percentage required.
+         */
+        minimumSuccessPercentage: number;
+    }
+    interface PlanWorkflowStepEksResourceScalingConfig {
+        /**
+         * Capacity monitoring approach. Valid values: `sampledMaxInLast24Hours`, `autoscalingMaxInLast24Hours`.
+         */
+        capacityMonitoringApproach: string;
+        /**
+         * List of EKS clusters. See EKS Clusters below.
+         */
+        eksClusters?: outputs.arcregionswitch.PlanWorkflowStepEksResourceScalingConfigEksCluster[];
+        /**
+         * Kubernetes resource type. See Kubernetes Resource Type below.
+         */
+        kubernetesResourceTypes?: outputs.arcregionswitch.PlanWorkflowStepEksResourceScalingConfigKubernetesResourceType[];
+        /**
+         * List of scaling resources. See Scaling Resources below.
+         */
+        scalingResources?: outputs.arcregionswitch.PlanWorkflowStepEksResourceScalingConfigScalingResource[];
+        /**
+         * Target capacity percentage.
+         */
+        targetPercent: number;
+        /**
+         * Timeout in minutes.
+         */
+        timeoutMinutes?: number;
+        /**
+         * Ungraceful behavior configuration. See Ungraceful Capacity below.
+         */
+        ungracefuls?: outputs.arcregionswitch.PlanWorkflowStepEksResourceScalingConfigUngraceful[];
+    }
+    interface PlanWorkflowStepEksResourceScalingConfigEksCluster {
+        /**
+         * ARN of the EKS cluster.
+         */
+        clusterArn: string;
+        /**
+         * ARN of the cross-account role to assume.
+         */
+        crossAccountRole?: string;
+        /**
+         * External ID for cross-account role assumption.
+         */
+        externalId?: string;
+    }
+    interface PlanWorkflowStepEksResourceScalingConfigKubernetesResourceType {
+        /**
+         * Kubernetes API version.
+         */
+        apiVersion: string;
+        /**
+         * Kubernetes resource kind.
+         */
+        kind: string;
+    }
+    interface PlanWorkflowStepEksResourceScalingConfigScalingResource {
+        /**
+         * Kubernetes namespace.
+         */
+        namespace: string;
+        /**
+         * Set of resources to scale. See Resources below.
+         */
+        resources?: outputs.arcregionswitch.PlanWorkflowStepEksResourceScalingConfigScalingResourceResource[];
+    }
+    interface PlanWorkflowStepEksResourceScalingConfigScalingResourceResource {
+        /**
+         * Name of the Horizontal Pod Autoscaler.
+         */
+        hpaName?: string;
+        /**
+         * Name of the Kubernetes object.
+         */
+        name: string;
+        /**
+         * Kubernetes namespace.
+         */
+        namespace: string;
+        /**
+         * Name of the resource.
+         */
+        resourceName: string;
+    }
+    interface PlanWorkflowStepEksResourceScalingConfigUngraceful {
+        /**
+         * Minimum success percentage required.
+         */
+        minimumSuccessPercentage: number;
+    }
+    interface PlanWorkflowStepExecutionApprovalConfig {
+        /**
+         * ARN of the IAM role for approval.
+         */
+        approvalRole: string;
+        /**
+         * Timeout in minutes for the approval.
+         */
+        timeoutMinutes?: number;
+    }
+    interface PlanWorkflowStepGlobalAuroraConfig {
+        /**
+         * Behavior for Aurora operations. Valid values: `switchoverOnly`, `failover`.
+         */
+        behavior: string;
+        /**
+         * ARN of the cross-account role to assume.
+         */
+        crossAccountRole?: string;
+        /**
+         * List of database cluster ARNs.
+         */
+        databaseClusterArns: string[];
+        /**
+         * External ID for cross-account role assumption.
+         */
+        externalId?: string;
+        /**
+         * Global cluster identifier.
+         */
+        globalClusterIdentifier: string;
+        /**
+         * Timeout in minutes.
+         */
+        timeoutMinutes?: number;
+        /**
+         * Ungraceful behavior configuration. See Ungraceful Aurora below.
+         */
+        ungracefuls?: outputs.arcregionswitch.PlanWorkflowStepGlobalAuroraConfigUngraceful[];
+    }
+    interface PlanWorkflowStepGlobalAuroraConfigUngraceful {
+        ungraceful: string;
+    }
+    interface PlanWorkflowStepParallelConfig {
+        /**
+         * List of steps to execute in parallel. Uses the same schema as Step but without `parallelConfig` to prevent infinite nesting.
+         */
+        steps?: outputs.arcregionswitch.PlanWorkflowStepParallelConfigStep[];
+    }
+    interface PlanWorkflowStepParallelConfigStep {
+        /**
+         * Configuration for ARC routing control. See ARC Routing Control Config below.
+         */
+        arcRoutingControlConfigs?: outputs.arcregionswitch.PlanWorkflowStepParallelConfigStepArcRoutingControlConfig[];
+        /**
+         * Configuration for Lambda function execution. See Custom Action Lambda Config below.
+         */
+        customActionLambdaConfigs?: outputs.arcregionswitch.PlanWorkflowStepParallelConfigStepCustomActionLambdaConfig[];
+        /**
+         * Description of the step.
+         */
+        description?: string;
+        /**
+         * Configuration for DocumentDB global cluster operations. See DocumentDB Config below.
+         */
+        documentDbConfigs?: outputs.arcregionswitch.PlanWorkflowStepParallelConfigStepDocumentDbConfig[];
+        /**
+         * Configuration for EC2 Auto Scaling group capacity increase. See EC2 ASG Capacity Increase Config below.
+         */
+        ec2AsgCapacityIncreaseConfigs?: outputs.arcregionswitch.PlanWorkflowStepParallelConfigStepEc2AsgCapacityIncreaseConfig[];
+        /**
+         * Configuration for ECS service capacity increase. See ECS Capacity Increase Config below.
+         */
+        ecsCapacityIncreaseConfigs?: outputs.arcregionswitch.PlanWorkflowStepParallelConfigStepEcsCapacityIncreaseConfig[];
+        /**
+         * Configuration for EKS resource scaling. See EKS Resource Scaling Config below.
+         */
+        eksResourceScalingConfigs?: outputs.arcregionswitch.PlanWorkflowStepParallelConfigStepEksResourceScalingConfig[];
+        /**
+         * Configuration for manual approval steps. See Execution Approval Config below.
+         */
+        executionApprovalConfigs?: outputs.arcregionswitch.PlanWorkflowStepParallelConfigStepExecutionApprovalConfig[];
+        /**
+         * Type of execution block. Valid values: `ARCRegionSwitchPlan`, `ARCRoutingControl`, `AuroraGlobalDatabase`, `CustomActionLambda`, `DocumentDb`, `EC2AutoScaling`, `ECSServiceScaling`, `EKSResourceScaling`, `ManualApproval`, `Parallel`, `Route53HealthCheck`.
+         */
+        executionBlockType: string;
+        /**
+         * Configuration for Aurora Global Database operations. See Global Aurora Config below.
+         */
+        globalAuroraConfigs?: outputs.arcregionswitch.PlanWorkflowStepParallelConfigStepGlobalAuroraConfig[];
+        /**
+         * Name of the step.
+         */
+        name: string;
+        regionSwitchPlanConfigs?: outputs.arcregionswitch.PlanWorkflowStepParallelConfigStepRegionSwitchPlanConfig[];
+        /**
+         * Configuration for Route53 health check operations. See Route53 Health Check Config below.
+         */
+        route53HealthCheckConfigs?: outputs.arcregionswitch.PlanWorkflowStepParallelConfigStepRoute53HealthCheckConfig[];
+    }
+    interface PlanWorkflowStepParallelConfigStepArcRoutingControlConfig {
+        /**
+         * ARN of the cross-account role to assume.
+         */
+        crossAccountRole?: string;
+        /**
+         * External ID for cross-account role assumption.
+         */
+        externalId?: string;
+        /**
+         * List of regions and their routing controls. See Region and Routing Controls below.
+         */
+        regionAndRoutingControls?: outputs.arcregionswitch.PlanWorkflowStepParallelConfigStepArcRoutingControlConfigRegionAndRoutingControl[];
+        /**
+         * Timeout in minutes.
+         */
+        timeoutMinutes?: number;
+    }
+    interface PlanWorkflowStepParallelConfigStepArcRoutingControlConfigRegionAndRoutingControl {
+        /**
+         * AWS region.
+         */
+        region: string;
+        /**
+         * List of routing controls. See Routing Control below.
+         */
+        routingControls?: outputs.arcregionswitch.PlanWorkflowStepParallelConfigStepArcRoutingControlConfigRegionAndRoutingControlRoutingControl[];
+    }
+    interface PlanWorkflowStepParallelConfigStepArcRoutingControlConfigRegionAndRoutingControlRoutingControl {
+        /**
+         * ARN of the routing control.
+         */
+        routingControlArn: string;
+        /**
+         * State of the routing control. Valid values: `On`, `Off`.
+         */
+        state: string;
+    }
+    interface PlanWorkflowStepParallelConfigStepCustomActionLambdaConfig {
+        /**
+         * Lambda function configuration. See Lambda below.
+         */
+        lambdas?: outputs.arcregionswitch.PlanWorkflowStepParallelConfigStepCustomActionLambdaConfigLambda[];
+        /**
+         * Region where the Lambda function should run. Valid values: `activatingRegion`, `deactivatingRegion`.
+         */
+        regionToRun: string;
+        /**
+         * Retry interval in minutes.
+         */
+        retryIntervalMinutes: number;
+        /**
+         * Timeout in minutes.
+         */
+        timeoutMinutes?: number;
+        /**
+         * Ungraceful behavior configuration. See Ungraceful below.
+         */
+        ungracefuls?: outputs.arcregionswitch.PlanWorkflowStepParallelConfigStepCustomActionLambdaConfigUngraceful[];
+    }
+    interface PlanWorkflowStepParallelConfigStepCustomActionLambdaConfigLambda {
+        /**
+         * ARN of the Lambda function.
+         */
+        arn: string;
+        /**
+         * ARN of the cross-account role to assume.
+         */
+        crossAccountRole?: string;
+        /**
+         * External ID for cross-account role assumption.
+         */
+        externalId?: string;
+    }
+    interface PlanWorkflowStepParallelConfigStepCustomActionLambdaConfigUngraceful {
+        /**
+         * Behavior when ungraceful. Valid values: `skip`.
+         */
+        behavior: string;
+    }
+    interface PlanWorkflowStepParallelConfigStepDocumentDbConfig {
+        behavior: string;
+        crossAccountRole?: string;
+        databaseClusterArns: string[];
+        externalId?: string;
+        globalClusterIdentifier: string;
+        timeoutMinutes?: number;
+        ungracefuls?: outputs.arcregionswitch.PlanWorkflowStepParallelConfigStepDocumentDbConfigUngraceful[];
+    }
+    interface PlanWorkflowStepParallelConfigStepDocumentDbConfigUngraceful {
+        ungraceful: string;
+    }
+    interface PlanWorkflowStepParallelConfigStepEc2AsgCapacityIncreaseConfig {
+        /**
+         * Auto Scaling group configuration. See ASG below.
+         */
+        asgs?: outputs.arcregionswitch.PlanWorkflowStepParallelConfigStepEc2AsgCapacityIncreaseConfigAsg[];
+        /**
+         * Capacity monitoring approach. Valid values: `sampledMaxInLast24Hours`, `autoscalingMaxInLast24Hours`.
+         */
+        capacityMonitoringApproach: string;
+        /**
+         * Target capacity percentage.
+         */
+        targetPercent?: number;
+        /**
+         * Timeout in minutes.
+         */
+        timeoutMinutes?: number;
+        /**
+         * Ungraceful behavior configuration. See Ungraceful below.
+         */
+        ungraceful?: outputs.arcregionswitch.PlanWorkflowStepParallelConfigStepEc2AsgCapacityIncreaseConfigUngraceful;
+    }
+    interface PlanWorkflowStepParallelConfigStepEc2AsgCapacityIncreaseConfigAsg {
+        /**
+         * ARN of the Auto Scaling group.
+         */
+        arn: string;
+        /**
+         * ARN of the cross-account role to assume.
+         */
+        crossAccountRole?: string;
+        /**
+         * External ID for cross-account role assumption.
+         */
+        externalId?: string;
+    }
+    interface PlanWorkflowStepParallelConfigStepEc2AsgCapacityIncreaseConfigUngraceful {
+        /**
+         * Minimum success percentage required.
+         */
+        minimumSuccessPercentage: number;
+    }
+    interface PlanWorkflowStepParallelConfigStepEcsCapacityIncreaseConfig {
+        /**
+         * Capacity monitoring approach. Valid values: `sampledMaxInLast24Hours`, `containerInsightsMaxInLast24Hours`.
+         */
+        capacityMonitoringApproach: string;
+        /**
+         * ECS service configuration. See ECS Service below.
+         */
+        services?: outputs.arcregionswitch.PlanWorkflowStepParallelConfigStepEcsCapacityIncreaseConfigService[];
+        /**
+         * Target capacity percentage.
+         */
+        targetPercent?: number;
+        /**
+         * Timeout in minutes.
+         */
+        timeoutMinutes?: number;
+        /**
+         * Ungraceful behavior configuration. See Ungraceful Capacity below.
+         */
+        ungraceful?: outputs.arcregionswitch.PlanWorkflowStepParallelConfigStepEcsCapacityIncreaseConfigUngraceful;
+    }
+    interface PlanWorkflowStepParallelConfigStepEcsCapacityIncreaseConfigService {
+        clusterArn: string;
+        crossAccountRole?: string;
+        externalId?: string;
+        /**
+         * ARN of the ECS service.
+         */
+        serviceArn: string;
+    }
+    interface PlanWorkflowStepParallelConfigStepEcsCapacityIncreaseConfigUngraceful {
+        /**
+         * Minimum success percentage required.
+         */
+        minimumSuccessPercentage: number;
+    }
+    interface PlanWorkflowStepParallelConfigStepEksResourceScalingConfig {
+        /**
+         * Capacity monitoring approach. Valid values: `sampledMaxInLast24Hours`, `autoscalingMaxInLast24Hours`.
+         */
+        capacityMonitoringApproach: string;
+        /**
+         * List of EKS clusters. See EKS Clusters below.
+         */
+        eksClusters?: outputs.arcregionswitch.PlanWorkflowStepParallelConfigStepEksResourceScalingConfigEksCluster[];
+        /**
+         * Kubernetes resource type. See Kubernetes Resource Type below.
+         */
+        kubernetesResourceTypes?: outputs.arcregionswitch.PlanWorkflowStepParallelConfigStepEksResourceScalingConfigKubernetesResourceType[];
+        /**
+         * List of scaling resources. See Scaling Resources below.
+         */
+        scalingResources?: outputs.arcregionswitch.PlanWorkflowStepParallelConfigStepEksResourceScalingConfigScalingResource[];
+        /**
+         * Target capacity percentage.
+         */
+        targetPercent: number;
+        /**
+         * Timeout in minutes.
+         */
+        timeoutMinutes?: number;
+        /**
+         * Ungraceful behavior configuration. See Ungraceful Capacity below.
+         */
+        ungracefuls?: outputs.arcregionswitch.PlanWorkflowStepParallelConfigStepEksResourceScalingConfigUngraceful[];
+    }
+    interface PlanWorkflowStepParallelConfigStepEksResourceScalingConfigEksCluster {
+        /**
+         * ARN of the EKS cluster.
+         */
+        clusterArn: string;
+        /**
+         * ARN of the cross-account role to assume.
+         */
+        crossAccountRole?: string;
+        /**
+         * External ID for cross-account role assumption.
+         */
+        externalId?: string;
+    }
+    interface PlanWorkflowStepParallelConfigStepEksResourceScalingConfigKubernetesResourceType {
+        /**
+         * Kubernetes API version.
+         */
+        apiVersion: string;
+        /**
+         * Kubernetes resource kind.
+         */
+        kind: string;
+    }
+    interface PlanWorkflowStepParallelConfigStepEksResourceScalingConfigScalingResource {
+        /**
+         * Kubernetes namespace.
+         */
+        namespace: string;
+        /**
+         * Set of resources to scale. See Resources below.
+         */
+        resources?: outputs.arcregionswitch.PlanWorkflowStepParallelConfigStepEksResourceScalingConfigScalingResourceResource[];
+    }
+    interface PlanWorkflowStepParallelConfigStepEksResourceScalingConfigScalingResourceResource {
+        /**
+         * Name of the Horizontal Pod Autoscaler.
+         */
+        hpaName?: string;
+        /**
+         * Name of the Kubernetes object.
+         */
+        name: string;
+        /**
+         * Kubernetes namespace.
+         */
+        namespace: string;
+        /**
+         * Name of the resource.
+         */
+        resourceName: string;
+    }
+    interface PlanWorkflowStepParallelConfigStepEksResourceScalingConfigUngraceful {
+        /**
+         * Minimum success percentage required.
+         */
+        minimumSuccessPercentage: number;
+    }
+    interface PlanWorkflowStepParallelConfigStepExecutionApprovalConfig {
+        /**
+         * ARN of the IAM role for approval.
+         */
+        approvalRole: string;
+        /**
+         * Timeout in minutes for the approval.
+         */
+        timeoutMinutes?: number;
+    }
+    interface PlanWorkflowStepParallelConfigStepGlobalAuroraConfig {
+        /**
+         * Behavior for Aurora operations. Valid values: `switchoverOnly`, `failover`.
+         */
+        behavior: string;
+        /**
+         * ARN of the cross-account role to assume.
+         */
+        crossAccountRole?: string;
+        /**
+         * List of database cluster ARNs.
+         */
+        databaseClusterArns: string[];
+        /**
+         * External ID for cross-account role assumption.
+         */
+        externalId?: string;
+        /**
+         * Global cluster identifier.
+         */
+        globalClusterIdentifier: string;
+        /**
+         * Timeout in minutes.
+         */
+        timeoutMinutes?: number;
+        /**
+         * Ungraceful behavior configuration. See Ungraceful Aurora below.
+         */
+        ungracefuls?: outputs.arcregionswitch.PlanWorkflowStepParallelConfigStepGlobalAuroraConfigUngraceful[];
+    }
+    interface PlanWorkflowStepParallelConfigStepGlobalAuroraConfigUngraceful {
+        ungraceful: string;
+    }
+    interface PlanWorkflowStepParallelConfigStepRegionSwitchPlanConfig {
+        /**
+         * ARN of the nested region switch plan.
+         */
+        arn: string;
+        /**
+         * ARN of the cross-account role to assume.
+         */
+        crossAccountRole?: string;
+        /**
+         * External ID for cross-account role assumption.
+         */
+        externalId?: string;
+    }
+    interface PlanWorkflowStepParallelConfigStepRoute53HealthCheckConfig {
+        /**
+         * ARN of the cross-account role to assume.
+         */
+        crossAccountRole?: string;
+        /**
+         * External ID for cross-account role assumption.
+         */
+        externalId?: string;
+        /**
+         * Route53 hosted zone ID.
+         */
+        hostedZoneId: string;
+        /**
+         * DNS record name.
+         */
+        recordName: string;
+        /**
+         * Configuration block for record sets. See Record Set below.
+         */
+        recordSets?: outputs.arcregionswitch.PlanWorkflowStepParallelConfigStepRoute53HealthCheckConfigRecordSet[];
+        /**
+         * Timeout in minutes.
+         */
+        timeoutMinutes?: number;
+    }
+    interface PlanWorkflowStepParallelConfigStepRoute53HealthCheckConfigRecordSet {
+        /**
+         * Record set identifier.
+         */
+        recordSetIdentifier: string;
+        /**
+         * AWS region.
+         */
+        region: string;
+    }
+    interface PlanWorkflowStepRegionSwitchPlanConfig {
+        /**
+         * ARN of the nested region switch plan.
+         */
+        arn: string;
+        /**
+         * ARN of the cross-account role to assume.
+         */
+        crossAccountRole?: string;
+        /**
+         * External ID for cross-account role assumption.
+         */
+        externalId?: string;
+    }
+    interface PlanWorkflowStepRoute53HealthCheckConfig {
+        /**
+         * ARN of the cross-account role to assume.
+         */
+        crossAccountRole?: string;
+        /**
+         * External ID for cross-account role assumption.
+         */
+        externalId?: string;
+        /**
+         * Route53 hosted zone ID.
+         */
+        hostedZoneId: string;
+        /**
+         * DNS record name.
+         */
+        recordName: string;
+        /**
+         * Configuration block for record sets. See Record Set below.
+         */
+        recordSets?: outputs.arcregionswitch.PlanWorkflowStepRoute53HealthCheckConfigRecordSet[];
+        /**
+         * Timeout in minutes.
+         */
+        timeoutMinutes?: number;
+    }
+    interface PlanWorkflowStepRoute53HealthCheckConfigRecordSet {
+        /**
+         * Record set identifier.
+         */
+        recordSetIdentifier: string;
+        /**
+         * AWS region.
+         */
+        region: string;
+    }
+}
 export declare namespace athena {
     interface CapacityReservationTimeouts {
         /**
@@ -10668,6 +11648,10 @@ export declare namespace batch {
         };
     }
     interface GetJobDefinitionEksPropertyPodPropertyContainerSecurityContext {
+        /**
+         * Whether or not a container or a Kubernetes pod is allowed to gain more privileges than its parent process. The default value is `false`.
+         */
+        allowPrivilegeEscalation: boolean;
         /**
          * When this parameter is true, the container is given elevated permissions on the host container instance (similar to the root user).
          */
@@ -10769,6 +11753,10 @@ export declare namespace batch {
         };
     }
     interface GetJobDefinitionEksPropertyPodPropertyInitContainerSecurityContext {
+        /**
+         * Whether or not a container or a Kubernetes pod is allowed to gain more privileges than its parent process. The default value is `false`.
+         */
+        allowPrivilegeEscalation: boolean;
         /**
          * When this parameter is true, the container is given elevated permissions on the host container instance (similar to the root user).
          */
@@ -11316,7 +12304,7 @@ export declare namespace batch {
          */
         resources?: outputs.batch.JobDefinitionEksPropertiesPodPropertiesContainerResources;
         /**
-         * Security context for a job.
+         * Security context for a job. See `securityContext` below.
          */
         securityContext?: outputs.batch.JobDefinitionEksPropertiesPodPropertiesContainerSecurityContext;
         /**
@@ -11343,10 +12331,26 @@ export declare namespace batch {
         };
     }
     interface JobDefinitionEksPropertiesPodPropertiesContainerSecurityContext {
+        /**
+         * Whether or not a container or a Kubernetes pod is allowed to gain more privileges than its parent process. The default value is `false`.
+         */
+        allowPrivilegeEscalation?: boolean;
+        /**
+         * When this parameter is `true`, the container is given elevated permissions on the host container instance. The level of permissions are similar to the root user permissions. The default value is `false`.
+         */
         privileged?: boolean;
         readOnlyRootFileSystem?: boolean;
+        /**
+         * When this parameter is specified, the container is run as the specified group ID (gid). If this parameter isn't specified, the default is the group that's specified in the image metadata.
+         */
         runAsGroup?: number;
+        /**
+         * When this parameter is specified, the container is run as a user with a uid other than 0. If this parameter isn't specified, so such rule is enforced.
+         */
         runAsNonRoot?: boolean;
+        /**
+         * When this parameter is specified, the container is run as the specified user ID (uid). If this parameter isn't specified, the default is the user that's specified in the image metadata.
+         */
         runAsUser?: number;
     }
     interface JobDefinitionEksPropertiesPodPropertiesContainerVolumeMount {
@@ -11393,7 +12397,7 @@ export declare namespace batch {
          */
         resources?: outputs.batch.JobDefinitionEksPropertiesPodPropertiesInitContainerResources;
         /**
-         * Security context for a job.
+         * Security context for a job. See `securityContext` below.
          */
         securityContext?: outputs.batch.JobDefinitionEksPropertiesPodPropertiesInitContainerSecurityContext;
         /**
@@ -11420,10 +12424,26 @@ export declare namespace batch {
         };
     }
     interface JobDefinitionEksPropertiesPodPropertiesInitContainerSecurityContext {
+        /**
+         * Whether or not a container or a Kubernetes pod is allowed to gain more privileges than its parent process. The default value is `false`.
+         */
+        allowPrivilegeEscalation?: boolean;
+        /**
+         * When this parameter is `true`, the container is given elevated permissions on the host container instance. The level of permissions are similar to the root user permissions. The default value is `false`.
+         */
         privileged?: boolean;
         readOnlyRootFileSystem?: boolean;
+        /**
+         * When this parameter is specified, the container is run as the specified group ID (gid). If this parameter isn't specified, the default is the group that's specified in the image metadata.
+         */
         runAsGroup?: number;
+        /**
+         * When this parameter is specified, the container is run as a user with a uid other than 0. If this parameter isn't specified, so such rule is enforced.
+         */
         runAsNonRoot?: boolean;
+        /**
+         * When this parameter is specified, the container is run as the specified user ID (uid). If this parameter isn't specified, the default is the user that's specified in the image metadata.
+         */
         runAsUser?: number;
     }
     interface JobDefinitionEksPropertiesPodPropertiesInitContainerVolumeMount {
@@ -11607,7 +12627,7 @@ export declare namespace bcmdata {
         /**
          * Table configuration. See the [AWS documentation](https://docs.aws.amazon.com/cur/latest/userguide/table-dictionary-cur2.html#cur2-table-configurations) for the available configurations. In addition to those listed in the documentation, `BILLING_VIEW_ARN` must also be included, as shown in the example above.
          */
-        tableConfigurations?: {
+        tableConfigurations: {
             [key: string]: {
                 [key: string]: string;
             };
@@ -12315,20 +13335,34 @@ export declare namespace bedrock {
         lambdaArn: string;
     }
     interface AgentDataSourceVectorIngestionConfigurationParsingConfiguration {
+        /**
+         * Settings for using Amazon Bedrock Data Automation to parse documents. See `bedrockDataAutomationConfiguration` block for details.
+         */
+        bedrockDataAutomationConfiguration?: outputs.bedrock.AgentDataSourceVectorIngestionConfigurationParsingConfigurationBedrockDataAutomationConfiguration;
         /**
          * Settings for a foundation model used to parse documents in a data source. See `bedrockFoundationModelConfiguration` block for details.
          */
         bedrockFoundationModelConfiguration?: outputs.bedrock.AgentDataSourceVectorIngestionConfigurationParsingConfigurationBedrockFoundationModelConfiguration;
         /**
-         * Currently only `BEDROCK_FOUNDATION_MODEL` is supported
+         * The parsing strategy to use. Valid values: `BEDROCK_FOUNDATION_MODEL`, `BEDROCK_DATA_AUTOMATION`.
          */
         parsingStrategy: string;
     }
+    interface AgentDataSourceVectorIngestionConfigurationParsingConfigurationBedrockDataAutomationConfiguration {
+        /**
+         * Specifies whether to enable parsing of multimodal data, including both text and images. Valid value: `MULTIMODAL`.
+         */
+        parsingModality?: string;
+    }
     interface AgentDataSourceVectorIngestionConfigurationParsingConfigurationBedrockFoundationModelConfiguration {
         /**
          * The ARN of the model used to parse documents
          */
         modelArn: string;
+        /**
+         * Specifies whether to enable parsing of multimodal data, including both text and images. Valid values: `MULTIMODAL`.
+         */
+        parsingModality?: string;
         /**
          * Instructions for interpreting the contents of the document. See `parsingPrompt` block for details.
          */
@@ -16485,15 +17519,39 @@ export declare namespace chimesdkmediapipelines {
 }
 export declare namespace cleanrooms {
     interface CollaborationDataEncryptionMetadata {
+        /**
+         * Whether encrypted tables can contain cleartext data. This is a boolean field.
+         */
         allowClearText: boolean;
+        /**
+         * Whether Fingerprint columns can contain duplicate entries. This is a boolean field.
+         */
         allowDuplicates: boolean;
+        /**
+         * Whether Fingerprint columns can be joined on any other Fingerprint column with a different name. This is a boolean field.
+         */
         allowJoinsOnColumnsWithDifferentNames: boolean;
+        /**
+         * Whether NULL values are to be copied as NULL to encrypted tables (true) or cryptographically processed (false).
+         */
         preserveNulls: boolean;
     }
     interface CollaborationMember {
+        /**
+         * Account ID for the invited member.
+         */
         accountId: string;
+        /**
+         * Display name for the invited member.
+         */
         displayName: string;
+        /**
+         * List of abilities for the invited member. Valid values [may be found here](https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_CreateCollaboration.html#API-CreateCollaboration-request-creatorMemberAbilities).
+         */
         memberAbilities: string[];
+        /**
+         * For each member included in the collaboration an additional computed attribute of status is added. These values [may be found here](https://docs.aws.amazon.com/clean-rooms/latest/apireference/API_MemberSummary.html#API-Type-MemberSummary-status).
+         */
         status: string;
     }
     interface ConfiguredTableTableReference {
@@ -16741,6 +17799,12 @@ export declare namespace cloudformation {
     }
 }
 export declare namespace cloudfront {
+    interface AnycastIpListTimeouts {
+        /**
+         * A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
+         */
+        create?: string;
+    }
     interface CachePolicyParametersInCacheKeyAndForwardedToOrigin {
         /**
          * Whether any cookies in viewer requests are included in the cache key and automatically included in requests that CloudFront sends to the origin. See Cookies Config for more information.
@@ -18261,13 +19325,13 @@ export declare namespace cloudfront {
          */
         failoverCriteria?: outputs.cloudfront.MultitenantDistributionOriginGroupFailoverCriteria;
         /**
-         * List of origins in this origin group. Must contain exactly 2 members. See Origin Group Member below.
+         * Identifier for the distribution.
          */
-        members?: outputs.cloudfront.MultitenantDistributionOriginGroupMember[];
+        id: string;
         /**
-         * Unique identifier for the origin group.
+         * List of origins in this origin group. Must contain exactly 2 members. See Origin Group Member below.
          */
-        originId: string;
+        members?: outputs.cloudfront.MultitenantDistributionOriginGroupMember[];
     }
     interface MultitenantDistributionOriginGroupFailoverCriteria {
         /**
@@ -24142,6 +25206,10 @@ export declare namespace config {
          * Use this to override the default service endpoint URL
          */
         mgn?: string;
+        /**
+         * Use this to override the default service endpoint URL
+         */
+        mpa?: string;
         /**
          * Use this to override the default service endpoint URL
          */
@@ -24406,6 +25474,10 @@ export declare namespace config {
          * Use this to override the default service endpoint URL
          */
         sagemaker?: string;
+        /**
+         * Use this to override the default service endpoint URL
+         */
+        savingsplans?: string;
         /**
          * Use this to override the default service endpoint URL
          */
@@ -30021,6 +31093,7 @@ export declare namespace dynamodb {
     }
     interface GetTableGlobalSecondaryIndex {
         hashKey: string;
+        keySchemas: outputs.dynamodb.GetTableGlobalSecondaryIndexKeySchema[];
         /**
          * Name of the DynamoDB table.
          */
@@ -30033,6 +31106,10 @@ export declare namespace dynamodb {
         warmThroughputs: outputs.dynamodb.GetTableGlobalSecondaryIndexWarmThroughput[];
         writeCapacity: number;
     }
+    interface GetTableGlobalSecondaryIndexKeySchema {
+        attributeName: string;
+        keyType: string;
+    }
     interface GetTableGlobalSecondaryIndexOnDemandThroughput {
         maxReadRequestUnits: number;
         maxWriteRequestUnits: number;
@@ -30169,9 +31246,12 @@ export declare namespace dynamodb {
     }
     interface TableGlobalSecondaryIndex {
         /**
-         * Name of the hash key in the index; must be defined as an attribute in the resource.
+         * and `hashKeys` are `mutually exclusive`, but one is `required`. Refer to [AWS SDK Documentation](https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/GSI.DesignPattern.MultiAttributeKeys.html)
+         *
+         * @deprecated hash_key is deprecated. Use keySchema instead.
          */
         hashKey: string;
+        keySchemas: outputs.dynamodb.TableGlobalSecondaryIndexKeySchema[];
         /**
          * Name of the index.
          */
@@ -30189,7 +31269,9 @@ export declare namespace dynamodb {
          */
         projectionType: string;
         /**
-         * Name of the range key; must be defined
+         * and `rangeKeys` are `mutually exclusive`, but are both `optional`. Refer to [AWS SDK Documentation](https://docs.aws.amazon.com/amazondynamodb/latest/developerguide/GSI.DesignPattern.MultiAttributeKeys.html)
+         *
+         * @deprecated range_key is deprecated. Use keySchema instead.
          */
         rangeKey?: string;
         /**
@@ -30205,6 +31287,14 @@ export declare namespace dynamodb {
          */
         writeCapacity: number;
     }
+    interface TableGlobalSecondaryIndexKeySchema {
+        /**
+         * Name of the table attribute to store the TTL timestamp in.
+         * Required if `enabled` is `true`, must not be set otherwise.
+         */
+        attributeName: string;
+        keyType: string;
+    }
     interface TableGlobalSecondaryIndexOnDemandThroughput {
         /**
          * Maximum number of read request units for the specified table. To specify set the value greater than or equal to 1. To remove set the value to -1.
@@ -33508,6 +34598,24 @@ export declare namespace ec2 {
          */
         values: string[];
     }
+    interface GetVpcIpamPoolSourceResource {
+        /**
+         * (Required) ID of the resource.
+         */
+        resourceId: string;
+        /**
+         * (Required) Owner of the resource.
+         */
+        resourceOwner: string;
+        /**
+         * (Required) Region where the resource exists. Must match the `locale` of the parent IPAM Pool.
+         */
+        resourceRegion: string;
+        /**
+         * (Required) Type of the resource. (`vpc`)
+         */
+        resourceType: string;
+    }
     interface GetVpcIpamPoolsFilter {
         /**
          * The name of the filter. Filter names are case-sensitive.
@@ -34662,6 +35770,12 @@ export declare namespace ec2 {
          */
         enaSrdUdpEnabled?: boolean;
     }
+    interface LaunchTemplateNetworkPerformanceOptions {
+        /**
+         * Specify the bandwidth weighting option to boost the associated type of baseline bandwidth. Valid values: `default`, `vpc-1`, `ebs-1`. Default value is `default`. Setting `vpc-1` boosts networking baseline bandwidth and reduces EBS baseline bandwidth. Setting `ebs-1` boosts EBS baseline bandwidth and reduces networking baseline bandwidth. Only supported on select instance types. See [AWS Documentation](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/configure-bandwidth-weighting.html) for more information.
+         */
+        bandwidthWeighting?: string;
+    }
     interface LaunchTemplatePlacement {
         /**
          * The affinity setting for an instance on a Dedicated Host.
@@ -36776,12 +37890,36 @@ export declare namespace ec2 {
          */
         signature?: string;
     }
+    interface VpcIpamPoolSourceResource {
+        /**
+         * ID of the resource.
+         */
+        resourceId: string;
+        /**
+         * Owner of the resource.
+         */
+        resourceOwner: string;
+        /**
+         * Region where the resource exists. Must match the `locale` of the parent IPAM Pool.
+         */
+        resourceRegion: string;
+        /**
+         * Type of the resource. (`vpc`)
+         */
+        resourceType: string;
+    }
     interface VpcIpamResourceDiscoveryOperatingRegion {
         /**
          * The name of the Region you want to add to the IPAM.
          */
         regionName: string;
     }
+    interface VpcIpamResourceDiscoveryOrganizationalUnitExclusion {
+        /**
+         * AWS Organizations entity path. Build the path for the OU(s) using AWS Organizations IDs separated by a `/`. Include all child OUs by ending the path with `/*`.
+         */
+        organizationsEntityPath: string;
+    }
     interface VpcPeeringConnectionAccepter {
         /**
          * Allow a local VPC to resolve public DNS hostnames to
@@ -43937,6 +45075,10 @@ export declare namespace fsx {
          * A list of up to two IP addresses of DNS servers or domain controllers in the self-managed AD directory. The IP addresses need to be either in the same VPC CIDR range as the file system or in the private IP version 4 (IPv4) address ranges as specified in [RFC 1918](https://tools.ietf.org/html/rfc1918).
          */
         dnsIps: string[];
+        /**
+         * The Amazon Resource Name (ARN) for the AWS Secrets Manager secret that contains the credentials for the service account on your self-managed AD domain. Conflicts with `username` and `password`.
+         */
+        domainJoinServiceAccountSecret?: string;
         /**
          * The fully qualified domain name of the self-managed AD directory. For example, `corp.example.com`.
          */
@@ -43950,11 +45092,11 @@ export declare namespace fsx {
          */
         organizationalUnitDistinguishedName?: string;
         /**
-         * The password for the service account on your self-managed AD domain that Amazon FSx will use to join to your AD domain.
+         * The password for the service account on your self-managed AD domain that Amazon FSx will use to join to your AD domain. Conflicts with `domainJoinServiceAccountSecret`.
          */
-        password: string;
+        password?: string;
         /**
-         * The user name for the service account on your self-managed AD domain that Amazon FSx will use to join to your AD domain.
+         * The user name for the service account on your self-managed AD domain that Amazon FSx will use to join to your AD domain. Conflicts with `domainJoinServiceAccountSecret`.
          */
         username: string;
     }
@@ -55873,6 +57015,7 @@ export declare namespace lb {
          * The HTTP or gRPC codes to use when checking for a successful response from a target.
          * The `health_check.protocol` must be one of `HTTP` or `HTTPS` or the `targetType` must be `lambda`.
          * Values can be comma-separated individual values (e.g., "200,202") or a range of values (e.g., "200-299").
+         * Once the value has been set, removing it has no effect. To unset it, set it to an empty string `""`.
          * * For gRPC-based target groups (i.e., the `protocol` is one of `HTTP` or `HTTPS` and the `protocolVersion` is `GRPC`), values can be between `0` and `99`. The default is `12`.
          * * When used with an Application Load Balancer (i.e., the `protocol` is one of `HTTP` or `HTTPS` and the `protocolVersion` is not `GRPC`), values can be between `200` and `499`. The default is `200`.
          * * When used with a Network Load Balancer (i.e., the `protocol` is one of `TCP`, `TCP_UDP`, `UDP`, or `TLS`), values can be between `200` and `599`. The default is `200-399`.
@@ -55881,6 +57024,7 @@ export declare namespace lb {
         matcher: string;
         /**
          * Destination for the health check request. Required for HTTP/HTTPS ALB and HTTP NLB. Only applies to HTTP/HTTPS.
+         * Once the value has been set, removing it has no effect. To unset it, set it to an empty string `""`.
          * * For HTTP and HTTPS health checks, the default is `/`.
          * * For gRPC health checks, the default is `/AWS.ALB/healthcheck`.
          */
@@ -73732,6 +74876,10 @@ export declare namespace networkmanager {
          * String. When `action` is `share`, a `mode` value of `attachment-route` places the attachment and return routes in each of the `shareWith` segments. When `action` is `send-via`, indicates the mode used for packets. Valid values: `attachment-route`, `single-hop`, `dual-hop`.
          */
         mode?: string;
+        /**
+         * A list of routing policy names to apply to segment sharing. The routing policies control how routes are propagated between the shared segments. Only applicable when `action` is `share`. Available in policy version `2025.11` and later.
+         */
+        routingPolicyNames?: string[];
         /**
          * Name of the segment.
          */
@@ -73901,6 +75049,20 @@ export declare namespace notifications {
          */
         delete?: string;
     }
+    interface OrganizationsAccessTimeouts {
+        /**
+         * A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
+         */
+        create?: string;
+        /**
+         * A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
+         */
+        delete?: string;
+        /**
+         * A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
+         */
+        update?: string;
+    }
 }
 export declare namespace oam {
     interface GetLinkLinkConfiguration {
@@ -74600,14 +75762,25 @@ export declare namespace odb {
         version: string;
     }
     interface GetNetworkManagedService {
+        kmsAccesses: outputs.odb.GetNetworkManagedServiceKmsAccess[];
         managedS3BackupAccesses: outputs.odb.GetNetworkManagedServiceManagedS3BackupAccess[];
         managedServiceIpv4Cidrs: string[];
         resourceGatewayArn: string;
         s3Accesses: outputs.odb.GetNetworkManagedServiceS3Access[];
         serviceNetworkArn: string;
         serviceNetworkEndpoints: outputs.odb.GetNetworkManagedServiceServiceNetworkEndpoint[];
+        stsAccesses: outputs.odb.GetNetworkManagedServiceStsAccess[];
         zeroTlAccesses: outputs.odb.GetNetworkManagedServiceZeroTlAccess[];
     }
+    interface GetNetworkManagedServiceKmsAccess {
+        domainName: string;
+        ipv4Addresses: string[];
+        kmsPolicyDocument: string;
+        /**
+         * The status of the network resource.
+         */
+        status: string;
+    }
     interface GetNetworkManagedServiceManagedS3BackupAccess {
         ipv4Addresses: string[];
         /**
@@ -74628,6 +75801,15 @@ export declare namespace odb {
         vpcEndpointId: string;
         vpcEndpointType: string;
     }
+    interface GetNetworkManagedServiceStsAccess {
+        domainName: string;
+        ipv4Addresses: string[];
+        /**
+         * The status of the network resource.
+         */
+        status: string;
+        stsPolicyDocument: string;
+    }
     interface GetNetworkManagedServiceZeroTlAccess {
         cidr: string;
         /**
@@ -74688,6 +75870,10 @@ export declare namespace odb {
         ociVcnUrl: string;
     }
     interface NetworkManagedService {
+        /**
+         * Specifies the configuration for KMS access from the ODB network.
+         */
+        kmsAccesses: outputs.odb.NetworkManagedServiceKmsAccess[];
         managedS3BackupAccesses: outputs.odb.NetworkManagedServiceManagedS3BackupAccess[];
         managedServiceIpv4Cidrs: string[];
         resourceGatewayArn: string;
@@ -74697,6 +75883,10 @@ export declare namespace odb {
         s3Accesses: outputs.odb.NetworkManagedServiceS3Access[];
         serviceNetworkArn: string;
         serviceNetworkEndpoints: outputs.odb.NetworkManagedServiceServiceNetworkEndpoint[];
+        /**
+         * Specifies the configuration for STS access from the ODB network.
+         */
+        stsAccesses: outputs.odb.NetworkManagedServiceStsAccess[];
         /**
          * Specifies the configuration for Zero-ETL access from the ODB network.
          *
@@ -74704,6 +75894,18 @@ export declare namespace odb {
          */
         zeroEtlAccesses: outputs.odb.NetworkManagedServiceZeroEtlAccess[];
     }
+    interface NetworkManagedServiceKmsAccess {
+        domainName: string;
+        ipv4Addresses: string[];
+        /**
+         * Specifies the endpoint policy for KMS access from the ODB network.
+         */
+        kmsPolicyDocument: string;
+        /**
+         * The status of the network resource.
+         */
+        status: string;
+    }
     interface NetworkManagedServiceManagedS3BackupAccess {
         ipv4Addresses: string[];
         /**
@@ -74727,6 +75929,18 @@ export declare namespace odb {
         vpcEndpointId: string;
         vpcEndpointType: string;
     }
+    interface NetworkManagedServiceStsAccess {
+        domainName: string;
+        ipv4Addresses: string[];
+        /**
+         * The status of the network resource.
+         */
+        status: string;
+        /**
+         * Specifies the endpoint policy for STS access from the ODB network.
+         */
+        stsPolicyDocument: string;
+    }
     interface NetworkManagedServiceZeroEtlAccess {
         cidr: string;
         /**
@@ -74768,6 +75982,55 @@ export declare namespace odb {
     }
 }
 export declare namespace opensearch {
+    interface ApplicationAppConfig {
+        /**
+         * The configuration item to set. Valid values are `opensearchDashboards.dashboardAdmin.users` and `opensearchDashboards.dashboardAdmin.groups`.
+         */
+        key?: string;
+        /**
+         * The value assigned to the configuration key, such as an IAM user ARN or group name. Must be between 1 and 4096 characters.
+         */
+        value?: string;
+    }
+    interface ApplicationDataSource {
+        /**
+         * The Amazon Resource Name (ARN) of the OpenSearch domain or collection. Must be between 20 and 2048 characters.
+         */
+        dataSourceArn?: string;
+        /**
+         * A detailed description of the data source. Must be at most 1000 characters and contain only alphanumeric characters, underscores, spaces, and the following special characters: `@#%*+=:?./!-`.
+         */
+        dataSourceDescription?: string;
+    }
+    interface ApplicationIamIdentityCenterOptions {
+        /**
+         * Specifies whether IAM Identity Center is enabled or disabled.
+         */
+        enabled?: boolean;
+        iamIdentityCenterApplicationArn: string;
+        /**
+         * The Amazon Resource Name (ARN) of the IAM Identity Center instance. Must be between 20 and 2048 characters.
+         */
+        iamIdentityCenterInstanceArn?: string;
+        /**
+         * The ARN of the IAM role associated with the IAM Identity Center application. Must be between 20 and 2048 characters and match the pattern for IAM role ARNs.
+         */
+        iamRoleForIdentityCenterApplicationArn?: string;
+    }
+    interface ApplicationTimeouts {
+        /**
+         * A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
+         */
+        create?: string;
+        /**
+         * A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
+         */
+        delete?: string;
+        /**
+         * A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
+         */
+        update?: string;
+    }
     interface AuthorizeVpcEndpointAccessAuthorizedPrincipal {
         /**
          * IAM principal that is allowed to access to the domain.
@@ -78953,6 +80216,12 @@ export declare namespace ram {
          */
         values: string[];
     }
+    interface PermissionTimeouts {
+        /**
+         * A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
+         */
+        delete?: string;
+    }
 }
 export declare namespace rbin {
     interface RuleExcludeResourceTag {
@@ -80160,6 +81429,20 @@ export declare namespace resourcegroups {
     }
 }
 export declare namespace resourcegroupstaggingapi {
+    interface GetRequiredTagsRequiredTag {
+        /**
+         * CloudFormation resource types assigned the required tag keys.
+         */
+        cloudFormationResourceTypes: string[];
+        /**
+         * Tag keys marked as required in the `reportRequiredTagFor` block of the effective tag policy.
+         */
+        reportingTagKeys: string[];
+        /**
+         * Resource type for the required tag keys.
+         */
+        resourceType: string;
+    }
     interface GetResourcesResourceTagMappingList {
         /**
          * List of objects with information that shows whether a resource is compliant with the effective tag policy, including details on any noncompliant tag keys.
@@ -83697,6 +84980,129 @@ export declare namespace s3 {
          */
         vpcId: string;
     }
+    interface GetBucketObjectLockConfigurationRule {
+        /**
+         * Default object lock retention settings for new objects placed in the bucket. See Default Retention below.
+         */
+        defaultRetentions: outputs.s3.GetBucketObjectLockConfigurationRuleDefaultRetention[];
+    }
+    interface GetBucketObjectLockConfigurationRuleDefaultRetention {
+        /**
+         * Default retention period in days.
+         */
+        days: number;
+        /**
+         * Default object lock retention mode. Valid values are `GOVERNANCE` and `COMPLIANCE`.
+         */
+        mode: string;
+        /**
+         * Default retention period in years.
+         */
+        years: number;
+    }
+    interface GetBucketReplicationConfigurationRule {
+        deleteMarkerReplications: outputs.s3.GetBucketReplicationConfigurationRuleDeleteMarkerReplication[];
+        destinations: outputs.s3.GetBucketReplicationConfigurationRuleDestination[];
+        existingObjectReplications: outputs.s3.GetBucketReplicationConfigurationRuleExistingObjectReplication[];
+        filters: outputs.s3.GetBucketReplicationConfigurationRuleFilter[];
+        id: string;
+        /**
+         * The object key name prefix that identifies the subset of objects to which the rule applies.
+         */
+        prefix: string;
+        priority: number;
+        sourceSelectionCriterias: outputs.s3.GetBucketReplicationConfigurationRuleSourceSelectionCriteria[];
+        status: string;
+    }
+    interface GetBucketReplicationConfigurationRuleDeleteMarkerReplication {
+        status: string;
+    }
+    interface GetBucketReplicationConfigurationRuleDestination {
+        accessControlTranslations: outputs.s3.GetBucketReplicationConfigurationRuleDestinationAccessControlTranslation[];
+        account: string;
+        /**
+         * The name of the bucket to get the replication configuration for.
+         */
+        bucket: string;
+        encryptionConfigurations: outputs.s3.GetBucketReplicationConfigurationRuleDestinationEncryptionConfiguration[];
+        metrics: outputs.s3.GetBucketReplicationConfigurationRuleDestinationMetric[];
+        replicationTimes: outputs.s3.GetBucketReplicationConfigurationRuleDestinationReplicationTime[];
+        storageClass: string;
+    }
+    interface GetBucketReplicationConfigurationRuleDestinationAccessControlTranslation {
+        owner: string;
+    }
+    interface GetBucketReplicationConfigurationRuleDestinationEncryptionConfiguration {
+        replicaKmsKeyId: string;
+    }
+    interface GetBucketReplicationConfigurationRuleDestinationMetric {
+        eventThresholds: outputs.s3.GetBucketReplicationConfigurationRuleDestinationMetricEventThreshold[];
+        status: string;
+    }
+    interface GetBucketReplicationConfigurationRuleDestinationMetricEventThreshold {
+        minutes: number;
+    }
+    interface GetBucketReplicationConfigurationRuleDestinationReplicationTime {
+        status: string;
+        times: outputs.s3.GetBucketReplicationConfigurationRuleDestinationReplicationTimeTime[];
+    }
+    interface GetBucketReplicationConfigurationRuleDestinationReplicationTimeTime {
+        minutes: number;
+    }
+    interface GetBucketReplicationConfigurationRuleExistingObjectReplication {
+        status: string;
+    }
+    interface GetBucketReplicationConfigurationRuleFilter {
+        ands: outputs.s3.GetBucketReplicationConfigurationRuleFilterAnd[];
+        /**
+         * The object key name prefix that identifies the subset of objects to which the rule applies.
+         */
+        prefix: string;
+        /**
+         * An unordered list of tags that identify a subset of objects to which the rule applies.
+         */
+        tags: outputs.s3.GetBucketReplicationConfigurationRuleFilterTag[];
+    }
+    interface GetBucketReplicationConfigurationRuleFilterAnd {
+        /**
+         * The object key name prefix that identifies the subset of objects to which the rule applies.
+         */
+        prefix: string;
+        /**
+         * An unordered list of tags that identify a subset of objects to which the rule applies.
+         */
+        tags: outputs.s3.GetBucketReplicationConfigurationRuleFilterAndTag[];
+    }
+    interface GetBucketReplicationConfigurationRuleFilterAndTag {
+        /**
+         * The key of the tag.
+         */
+        key: string;
+        /**
+         * The value of the tag.
+         */
+        value: string;
+    }
+    interface GetBucketReplicationConfigurationRuleFilterTag {
+        /**
+         * The key of the tag.
+         */
+        key: string;
+        /**
+         * The value of the tag.
+         */
+        value: string;
+    }
+    interface GetBucketReplicationConfigurationRuleSourceSelectionCriteria {
+        replicaModifications: outputs.s3.GetBucketReplicationConfigurationRuleSourceSelectionCriteriaReplicaModification[];
+        sseKmsEncryptedObjects: outputs.s3.GetBucketReplicationConfigurationRuleSourceSelectionCriteriaSseKmsEncryptedObject[];
+    }
+    interface GetBucketReplicationConfigurationRuleSourceSelectionCriteriaReplicaModification {
+        status: string;
+    }
+    interface GetBucketReplicationConfigurationRuleSourceSelectionCriteriaSseKmsEncryptedObject {
+        status: string;
+    }
     interface InventoryDestination {
         /**
          * S3 bucket configuration where inventory results are published (documented below).
@@ -83903,6 +85309,50 @@ export declare namespace s3control {
          */
         prefixes?: string[];
     }
+    interface GetAccessPointsAccessPoint {
+        /**
+         * Access point ARN.
+         */
+        accessPointArn: string;
+        /**
+         * Access point alias.
+         */
+        alias: string;
+        /**
+         * Name of the bucket associated with the access points.
+         */
+        bucket: string;
+        /**
+         * AWS account ID associated with the S3 bucket associated with the access point.
+         */
+        bucketAccountId: string;
+        /**
+         * Unique identifier for the access points data source.
+         */
+        dataSourceId: string;
+        /**
+         * Type of the data source that the access points are attached to. To return all access points set this argument to `ALL`.
+         */
+        dataSourceType: string;
+        /**
+         * Name of the access point.
+         */
+        name: string;
+        /**
+         * Indicates whether the access point allows access from the public Internet.
+         */
+        networkOrigin: string;
+        /**
+         * VPC configuration for the access point. See `vpcConfiguration` below.
+         */
+        vpcConfigurations: outputs.s3control.GetAccessPointsAccessPointVpcConfiguration[];
+    }
+    interface GetAccessPointsAccessPointVpcConfiguration {
+        /**
+         * Access point will only allow connections from this VPC.
+         */
+        vpcId: string;
+    }
     interface GetMultiRegionAccessPointPublicAccessBlock {
         /**
          * Specifies whether Amazon S3 should block public access control lists (ACLs). When set to `true` causes the following behavior:
@@ -83941,6 +85391,64 @@ export declare namespace s3control {
          */
         region: string;
     }
+    interface GetMultiRegionAccessPointsAccessPoint {
+        /**
+         * Alias for the multi-region access point.
+         */
+        alias: string;
+        /**
+         * Time the multi-region access point was created.
+         */
+        createdAt: string;
+        /**
+         * Name of the multi-region access point.
+         */
+        name: string;
+        /**
+         * Public access block configuration for this multi-region access point. See `publicAccessBlock` below.
+         */
+        publicAccessBlocks: outputs.s3control.GetMultiRegionAccessPointsAccessPointPublicAccessBlock[];
+        /**
+         * List of AWS Regions where the multi-region access point has data support. See `regions` below.
+         */
+        regions: outputs.s3control.GetMultiRegionAccessPointsAccessPointRegion[];
+        /**
+         * Current status of the multi-region access point.
+         */
+        status: string;
+    }
+    interface GetMultiRegionAccessPointsAccessPointPublicAccessBlock {
+        /**
+         * Whether Amazon S3 should block public ACLs for buckets in this account.
+         */
+        blockPublicAcls: boolean;
+        /**
+         * Whether Amazon S3 should block public bucket policies for buckets in this account.
+         */
+        blockPublicPolicy: boolean;
+        /**
+         * Whether Amazon S3 should ignore public ACLs for buckets in this account.
+         */
+        ignorePublicAcls: boolean;
+        /**
+         * Whether Amazon S3 should restrict public bucket policies for buckets in this account.
+         */
+        restrictPublicBuckets: boolean;
+    }
+    interface GetMultiRegionAccessPointsAccessPointRegion {
+        /**
+         * Name of the associated bucket for the Region.
+         */
+        bucket: string;
+        /**
+         * AWS account ID that owns the Amazon S3 bucket associated with this multi-region access point.
+         */
+        bucketAccountId: string;
+        /**
+         * Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
+         */
+        region: string;
+    }
     interface MultiRegionAccessPointDetails {
         name: string;
         publicAccessBlock?: outputs.s3control.MultiRegionAccessPointDetailsPublicAccessBlock;
@@ -86388,6 +87896,240 @@ export declare namespace sagemaker {
          */
         url: string;
     }
+    interface LabelingJobHumanTaskConfig {
+        /**
+         * How labels are consolidated across human workers. Fields are documented below.
+         */
+        annotationConsolidationConfig?: outputs.sagemaker.LabelingJobHumanTaskConfigAnnotationConsolidationConfig;
+        /**
+         * Maximum number of data objects that can be labeled by human workers at the same time.
+         */
+        maxConcurrentTaskCount: number;
+        /**
+         * Number of human workers that will label an object.
+         */
+        numberOfHumanWorkersPerDataObject: number;
+        /**
+         * ARN of a Lambda function that is run before a data object is sent to a human worker.
+         */
+        preHumanTaskLambdaArn?: string;
+        /**
+         * Price to pay for each task performed by an Amazon Mechanical Turk worker. Fields are documented below.
+         */
+        publicWorkforceTaskPrice?: outputs.sagemaker.LabelingJobHumanTaskConfigPublicWorkforceTaskPrice;
+        /**
+         * length of time that a task remains available for labeling by human workers.
+         */
+        taskAvailabilityLifetimeInSeconds: number;
+        /**
+         * Description of the task.
+         */
+        taskDescription: string;
+        /**
+         * Keywords used to describe the task.
+         */
+        taskKeywords?: string[];
+        /**
+         * Amount of time that a worker has to complete a task.
+         */
+        taskTimeLimitInSeconds: number;
+        /**
+         * Title for the task.
+         */
+        taskTitle: string;
+        /**
+         * Information about the user interface that workers use to complete the labeling task. Fields are documented below.
+         */
+        uiConfig?: outputs.sagemaker.LabelingJobHumanTaskConfigUiConfig;
+        /**
+         * ARN of the work team assigned to complete the tasks.
+         */
+        workteamArn: string;
+    }
+    interface LabelingJobHumanTaskConfigAnnotationConsolidationConfig {
+        /**
+         * ARN of a Lambda function that implements the logic for annotation consolidation and to process output data.
+         */
+        annotationConsolidationLambdaArn: string;
+    }
+    interface LabelingJobHumanTaskConfigPublicWorkforceTaskPrice {
+        /**
+         * Amount of money paid to an Amazon Mechanical Turk worker in United States dollars. Fields are documented below.
+         */
+        amountInUsd?: outputs.sagemaker.LabelingJobHumanTaskConfigPublicWorkforceTaskPriceAmountInUsd;
+    }
+    interface LabelingJobHumanTaskConfigPublicWorkforceTaskPriceAmountInUsd {
+        /**
+         * Fractional portion, in cents, of the amount.
+         */
+        cents?: number;
+        /**
+         * Whole number of dollars in the amount.
+         */
+        dollars?: number;
+        /**
+         * Fractions of a cent, in tenths.
+         */
+        tenthFractionsOfACent?: number;
+    }
+    interface LabelingJobHumanTaskConfigUiConfig {
+        /**
+         * ARN of the worker task template used to render the worker UI and tools for labeling job tasks.
+         */
+        humanTaskUiArn?: string;
+        /**
+         * S3 bucket location of the UI template, or worker task template.
+         */
+        uiTemplateS3Uri?: string;
+    }
+    interface LabelingJobInputConfig {
+        /**
+         * Attributes of the data. Fields are documented below.
+         */
+        dataAttributes?: outputs.sagemaker.LabelingJobInputConfigDataAttributes;
+        /**
+         * Location of the input data.. Fields are documented below.
+         */
+        dataSource?: outputs.sagemaker.LabelingJobInputConfigDataSource;
+    }
+    interface LabelingJobInputConfigDataAttributes {
+        /**
+         * Declares that your content is free of personally identifiable information or adult content. Valid values: `FreeOfPersonallyIdentifiableInformation`, `FreeOfAdultContent`.
+         */
+        contentClassifiers?: string[];
+    }
+    interface LabelingJobInputConfigDataSource {
+        /**
+         * S3 location of the input data objects.. Fields are documented below.
+         */
+        s3DataSource?: outputs.sagemaker.LabelingJobInputConfigDataSourceS3DataSource;
+        /**
+         * SNS data source used for streaming labeling jobs. Fields are documented below.
+         */
+        snsDataSource?: outputs.sagemaker.LabelingJobInputConfigDataSourceSnsDataSource;
+    }
+    interface LabelingJobInputConfigDataSourceS3DataSource {
+        /**
+         * S3 location of the manifest file that describes the input data objects.
+         */
+        manifestS3Uri: string;
+    }
+    interface LabelingJobInputConfigDataSourceSnsDataSource {
+        /**
+         * SNS input topic ARN.
+         */
+        snsTopicArn: string;
+    }
+    interface LabelingJobLabelCounter {
+        /**
+         * Total number of objects that could not be labeled due to an error.
+         */
+        failedNonRetryableError: number;
+        /**
+         * Total number of objects labeled by a human worker.
+         */
+        humanLabeled: number;
+        /**
+         * Total number of objects labeled by automated data labeling.
+         */
+        machineLabeled: number;
+        /**
+         * Total number of objects labeled.
+         */
+        totalLabeled: number;
+        /**
+         * Total number of objects not yet labeled.
+         */
+        unlabeled: number;
+    }
+    interface LabelingJobLabelingJobAlgorithmsConfig {
+        /**
+         * ARN of the final model used for auto-labeling.
+         */
+        initialActiveLearningModelArn?: string;
+        /**
+         * ARN of the algorithm used for auto-labeling.
+         */
+        labelingJobAlgorithmSpecificationArn: string;
+        /**
+         * Configuration information for the labeling job. Fields are documented below.
+         */
+        labelingJobResourceConfig?: outputs.sagemaker.LabelingJobLabelingJobAlgorithmsConfigLabelingJobResourceConfig;
+    }
+    interface LabelingJobLabelingJobAlgorithmsConfigLabelingJobResourceConfig {
+        /**
+         * ID of the key that Amazon SageMaker uses to encrypt data on the storage volume attached to the ML compute instance(s) that run the training and inference jobs used for automated data labeling.
+         */
+        volumeKmsKeyId?: string;
+        /**
+         * VPC that SageMaker jobs, hosted models, and compute resources have access to. Fields are documented below.
+         */
+        vpcConfig?: outputs.sagemaker.LabelingJobLabelingJobAlgorithmsConfigLabelingJobResourceConfigVpcConfig;
+    }
+    interface LabelingJobLabelingJobAlgorithmsConfigLabelingJobResourceConfigVpcConfig {
+        /**
+         * VPC security group IDs.
+         */
+        securityGroupIds: string[];
+        /**
+         * IDs of the subnets in the VPC to which to connect the training job. Fields are documented below.
+         */
+        subnets: string[];
+    }
+    interface LabelingJobOutputConfig {
+        /**
+         * ID of the key used to encrypt the output data.
+         */
+        kmsKeyId: string;
+        /**
+         * S3 location to write output data.
+         */
+        s3OutputPath: string;
+        /**
+         * SNS output topic ARN.
+         */
+        snsTopicArn?: string;
+    }
+    interface LabelingJobStoppingCondition {
+        /**
+         * Maximum number of objects that can be labeled by human workers.
+         */
+        maxHumanLabeledObjectCount: number;
+        /**
+         * Maximum number of input data objects that should be labeled.
+         */
+        maxPercentageOfInputDatasetLabeled: number;
+    }
+    interface ModelCardExportJobExportArtifact {
+        /**
+         * Amazon S3 URI of the exported model artifacts.
+         */
+        s3ExportArtifacts: string;
+    }
+    interface ModelCardExportJobOutputConfig {
+        /**
+         * Amazon S3 output path.
+         */
+        s3OutputPath: string;
+    }
+    interface ModelCardExportJobTimeouts {
+        /**
+         * A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
+         */
+        create?: string;
+    }
+    interface ModelCardSecurityConfig {
+        /**
+         * KMS key ARN.
+         */
+        kmsKeyId: string;
+    }
+    interface ModelCardTimeouts {
+        /**
+         * A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
+         */
+        delete?: string;
+    }
     interface ModelContainer {
         /**
          * Additional data sources that are available to the model in addition to those specified in `modelDataSource`. See Additional Model Data Source.
@@ -86672,10 +88414,14 @@ export declare namespace sagemaker {
         subnets: string[];
     }
     interface MonitoringScheduleMonitoringScheduleConfig {
+        /**
+         * Defines the monitoring job. Fields are documented below.
+         */
+        monitoringJobDefinition?: outputs.sagemaker.MonitoringScheduleMonitoringScheduleConfigMonitoringJobDefinition;
         /**
          * The name of the monitoring job definition to schedule.
          */
-        monitoringJobDefinitionName: string;
+        monitoringJobDefinitionName?: string;
         /**
          * The type of the monitoring job definition to schedule. Valid values are `DataQuality`, `ModelQuality`, `ModelBias` or `ModelExplainability`
          */
@@ -86685,6 +88431,297 @@ export declare namespace sagemaker {
          */
         scheduleConfig: outputs.sagemaker.MonitoringScheduleMonitoringScheduleConfigScheduleConfig;
     }
+    interface MonitoringScheduleMonitoringScheduleConfigMonitoringJobDefinition {
+        /**
+         * Baseline configuration used to validate that the data conforms to the specified constraints and statistics. Fields are documented below.
+         */
+        baseline?: outputs.sagemaker.MonitoringScheduleMonitoringScheduleConfigMonitoringJobDefinitionBaseline;
+        /**
+         * Map of environment variables in the Docker container.
+         */
+        environment?: {
+            [key: string]: string;
+        };
+        /**
+         * Configures the monitoring job to run a specified Docker container image. Fields are documented below.
+         */
+        monitoringAppSpecification: outputs.sagemaker.MonitoringScheduleMonitoringScheduleConfigMonitoringJobDefinitionMonitoringAppSpecification;
+        /**
+         * Inputs for the monitoring job. Fields are documented below.
+         */
+        monitoringInputs: outputs.sagemaker.MonitoringScheduleMonitoringScheduleConfigMonitoringJobDefinitionMonitoringInputs;
+        /**
+         * Outputs from the monitoring job to be uploaded to Amazon S3. Fields are documented below.
+         */
+        monitoringOutputConfig: outputs.sagemaker.MonitoringScheduleMonitoringScheduleConfigMonitoringJobDefinitionMonitoringOutputConfig;
+        /**
+         * Identifies the resources, ML compute instances, and ML storage volumes to deploy for a monitoring job. Fields are documented below.
+         */
+        monitoringResources: outputs.sagemaker.MonitoringScheduleMonitoringScheduleConfigMonitoringJobDefinitionMonitoringResources;
+        /**
+         * Networking options for the monitoring job. Fields are documented below.
+         */
+        networkConfig?: outputs.sagemaker.MonitoringScheduleMonitoringScheduleConfigMonitoringJobDefinitionNetworkConfig;
+        /**
+         * ARN of an IAM role that Amazon SageMaker AI can assume to perform tasks on your behalf.
+         */
+        roleArn: string;
+        /**
+         * How long the monitoring job is allowed to run. Fields are documented below.
+         */
+        stoppingConditions: outputs.sagemaker.MonitoringScheduleMonitoringScheduleConfigMonitoringJobDefinitionStoppingCondition[];
+    }
+    interface MonitoringScheduleMonitoringScheduleConfigMonitoringJobDefinitionBaseline {
+        baseliningJobName?: string;
+        constraintsResource?: outputs.sagemaker.MonitoringScheduleMonitoringScheduleConfigMonitoringJobDefinitionBaselineConstraintsResource;
+        statisticsResource?: outputs.sagemaker.MonitoringScheduleMonitoringScheduleConfigMonitoringJobDefinitionBaselineStatisticsResource;
+    }
+    interface MonitoringScheduleMonitoringScheduleConfigMonitoringJobDefinitionBaselineConstraintsResource {
+        /**
+         * URI that identifies the Amazon S3 storage location where Amazon SageMaker AI saves the results of a monitoring job.
+         */
+        s3Uri?: string;
+    }
+    interface MonitoringScheduleMonitoringScheduleConfigMonitoringJobDefinitionBaselineStatisticsResource {
+        /**
+         * URI that identifies the Amazon S3 storage location where Amazon SageMaker AI saves the results of a monitoring job.
+         */
+        s3Uri?: string;
+    }
+    interface MonitoringScheduleMonitoringScheduleConfigMonitoringJobDefinitionMonitoringAppSpecification {
+        /**
+         * List of arguments for the container used to run the monitoring job.
+         */
+        containerArguments?: string[];
+        /**
+         * Entrypoint for the container used to run the monitoring job.
+         */
+        containerEntrypoints?: string[];
+        /**
+         * Container image to be run by the monitoring job.
+         */
+        imageUri: string;
+        /**
+         * Script that is called after analysis has been performed.
+         */
+        postAnalyticsProcessorSourceUri?: string;
+        /**
+         * Script that is called per row prior to running analysis.
+         */
+        recordPreprocessorSourceUri?: string;
+    }
+    interface MonitoringScheduleMonitoringScheduleConfigMonitoringJobDefinitionMonitoringInputs {
+        /**
+         * Input object for the batch transform job. Fields are documented below.
+         */
+        batchTransformInput?: outputs.sagemaker.MonitoringScheduleMonitoringScheduleConfigMonitoringJobDefinitionMonitoringInputsBatchTransformInput;
+        /**
+         * Endpoint for a monitoring job. Fields are documented below.
+         */
+        endpointInput?: outputs.sagemaker.MonitoringScheduleMonitoringScheduleConfigMonitoringJobDefinitionMonitoringInputsEndpointInput;
+    }
+    interface MonitoringScheduleMonitoringScheduleConfigMonitoringJobDefinitionMonitoringInputsBatchTransformInput {
+        /**
+         * Amazon S3 location being used to capture the data.
+         */
+        dataCapturedDestinationS3Uri: string;
+        /**
+         * Dataset format for the batch transform job. Fields are documented below.
+         */
+        datasetFormat: outputs.sagemaker.MonitoringScheduleMonitoringScheduleConfigMonitoringJobDefinitionMonitoringInputsBatchTransformInputDatasetFormat;
+        /**
+         * Monitoring jobs subtract this time from the end time.
+         */
+        endTimeOffset?: string;
+        /**
+         * Attributes of the input data to exclude from the analysis.
+         */
+        excludeFeaturesAttribute?: string;
+        /**
+         * Attributes of the input data that are the input features.
+         */
+        featuresAttribute?: string;
+        /**
+         * Attribute of the input data that represents the ground truth label.
+         */
+        inferenceAttribute?: string;
+        /**
+         * Path to the filesystem where the batch transform data is available to the container.
+         */
+        localPath: string;
+        /**
+         * In a classification problem, the attribute that represents the class probability.
+         */
+        probabilityAttribute?: string;
+        /**
+         * Threshold for the class probability to be evaluated as a positive result.
+         */
+        probabilityThresholdAttribute?: number;
+        /**
+         * Whether input data distributed in Amazon S3 is fully replicated or sharded by an S3 key. Valid values: `FullyReplicated`, `ShardedByS3Key`.
+         */
+        s3DataDistributionType: string;
+        /**
+         * Input mode for transferring data for the monitoring job. Valid values: `Pipe`, `File`.
+         */
+        s3InputMode: string;
+        /**
+         * Monitoring jobs subtract this time from the start time.
+         */
+        startTimeOffset?: string;
+    }
+    interface MonitoringScheduleMonitoringScheduleConfigMonitoringJobDefinitionMonitoringInputsBatchTransformInputDatasetFormat {
+        /**
+         * CSV dataset used in the monitoring job. Fields are documented below.
+         */
+        csv?: outputs.sagemaker.MonitoringScheduleMonitoringScheduleConfigMonitoringJobDefinitionMonitoringInputsBatchTransformInputDatasetFormatCsv;
+        /**
+         * JSON dataset used in the monitoring job. Fields are documented below.
+         */
+        json?: outputs.sagemaker.MonitoringScheduleMonitoringScheduleConfigMonitoringJobDefinitionMonitoringInputsBatchTransformInputDatasetFormatJson;
+    }
+    interface MonitoringScheduleMonitoringScheduleConfigMonitoringJobDefinitionMonitoringInputsBatchTransformInputDatasetFormatCsv {
+        /**
+         * Indicates if the CSV data has a header.
+         */
+        header?: boolean;
+    }
+    interface MonitoringScheduleMonitoringScheduleConfigMonitoringJobDefinitionMonitoringInputsBatchTransformInputDatasetFormatJson {
+        /**
+         * Indicates if the file should be read as a JSON object per line.
+         */
+        line?: boolean;
+    }
+    interface MonitoringScheduleMonitoringScheduleConfigMonitoringJobDefinitionMonitoringInputsEndpointInput {
+        /**
+         * Monitoring jobs subtract this time from the end time.
+         */
+        endTimeOffset?: string;
+        /**
+         * Endpoint in customer's account which has enabled `DataCaptureConfig`.
+         */
+        endpointName: string;
+        /**
+         * Attributes of the input data to exclude from the analysis.
+         */
+        excludeFeaturesAttribute?: string;
+        /**
+         * Attributes of the input data that are the input features.
+         */
+        featuresAttribute?: string;
+        /**
+         * Attribute of the input data that represents the ground truth label.
+         */
+        inferenceAttribute?: string;
+        /**
+         * Path to the filesystem where the endpoint data is available to the container.
+         */
+        localPath: string;
+        /**
+         * In a classification problem, the attribute that represents the class probability.
+         */
+        probabilityAttribute?: string;
+        /**
+         * Threshold for the class probability to be evaluated as a positive result.
+         */
+        probabilityThresholdAttribute?: number;
+        /**
+         * Whether input data distributed in Amazon S3 is fully replicated or sharded by an S3 key. Valid values: `FullyReplicated`, `ShardedByS3Key`.
+         */
+        s3DataDistributionType: string;
+        /**
+         * Input mode for transferring data for the monitoring job. Valid values: `Pipe`, `File`.
+         */
+        s3InputMode: string;
+        /**
+         * Monitoring jobs subtract this time from the start time.
+         */
+        startTimeOffset?: string;
+    }
+    interface MonitoringScheduleMonitoringScheduleConfigMonitoringJobDefinitionMonitoringOutputConfig {
+        /**
+         * AWS KMS key that Amazon SageMaker AI uses to encrypt the model artifacts at rest using Amazon S3 server-side encryption.
+         */
+        kmsKeyId?: string;
+        /**
+         * Monitoring outputs for monitoring jobs. Fields are documented below.
+         */
+        monitoringOutputs: outputs.sagemaker.MonitoringScheduleMonitoringScheduleConfigMonitoringJobDefinitionMonitoringOutputConfigMonitoringOutputs;
+    }
+    interface MonitoringScheduleMonitoringScheduleConfigMonitoringJobDefinitionMonitoringOutputConfigMonitoringOutputs {
+        /**
+         * Amazon S3 storage location where the results of a monitoring job are saved. Fields are documented below.
+         */
+        s3Output: outputs.sagemaker.MonitoringScheduleMonitoringScheduleConfigMonitoringJobDefinitionMonitoringOutputConfigMonitoringOutputsS3Output;
+    }
+    interface MonitoringScheduleMonitoringScheduleConfigMonitoringJobDefinitionMonitoringOutputConfigMonitoringOutputsS3Output {
+        /**
+         * Local path to the Amazon S3 storage location where Amazon SageMaker AI saves the results of a monitoring job.
+         */
+        localPath: string;
+        /**
+         * Whether to upload the results of the monitoring job continuously or after the job completes. Valid values: `Continuous`, `EndOfJob`.
+         */
+        s3UploadMode: string;
+        /**
+         * URI that identifies the Amazon S3 storage location where Amazon SageMaker AI saves the results of a monitoring job.
+         */
+        s3Uri: string;
+    }
+    interface MonitoringScheduleMonitoringScheduleConfigMonitoringJobDefinitionMonitoringResources {
+        /**
+         * Configuration for the cluster resources used to run the processing job. Fields are documented below.
+         */
+        clusterConfig: outputs.sagemaker.MonitoringScheduleMonitoringScheduleConfigMonitoringJobDefinitionMonitoringResourcesClusterConfig;
+    }
+    interface MonitoringScheduleMonitoringScheduleConfigMonitoringJobDefinitionMonitoringResourcesClusterConfig {
+        /**
+         * Number of ML compute instances to use in the model monitoring job.
+         */
+        instanceCount: number;
+        /**
+         * ML compute instance type for the processing job.
+         */
+        instanceType: string;
+        /**
+         * AWS KMS key that Amazon SageMaker AI uses to encrypt data on the storage volume attached to the ML compute instance(s) that run the model monitoring job.
+         */
+        volumeKmsKeyId?: string;
+        /**
+         * size of the ML storage volume, in gigabytes, to provision.
+         */
+        volumeSizeInGb: number;
+    }
+    interface MonitoringScheduleMonitoringScheduleConfigMonitoringJobDefinitionNetworkConfig {
+        /**
+         * Whether to encrypt all communications between distributed processing jobs.
+         */
+        enableInterContainerTrafficEncryption?: boolean;
+        /**
+         * Whether to allow inbound and outbound network calls to and from the containers used for the processing job.
+         */
+        enableNetworkIsolation?: boolean;
+        /**
+         * VPC that SageMaker jobs, hosted models, and compute resources have access to. Fields are documented below.
+         */
+        vpcConfig?: outputs.sagemaker.MonitoringScheduleMonitoringScheduleConfigMonitoringJobDefinitionNetworkConfigVpcConfig;
+    }
+    interface MonitoringScheduleMonitoringScheduleConfigMonitoringJobDefinitionNetworkConfigVpcConfig {
+        /**
+         * VPC security group IDs.
+         */
+        securityGroupIds: string[];
+        /**
+         * Subnet IDs.
+         */
+        subnets: string[];
+    }
+    interface MonitoringScheduleMonitoringScheduleConfigMonitoringJobDefinitionStoppingCondition {
+        /**
+         * Maximum runtime allowed in seconds.
+         */
+        maxRuntimeInSeconds: number;
+    }
     interface MonitoringScheduleMonitoringScheduleConfigScheduleConfig {
         /**
          * A cron expression that describes details about the monitoring schedule. For example, and hourly schedule would be `cron(0 * ? * * *)`.
@@ -87743,6 +89780,18 @@ export declare namespace sagemaker {
         vpcSourceIp: string;
     }
 }
+export declare namespace savingsplans {
+    interface SavingsPlanTimeouts {
+        /**
+         * A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
+         */
+        create?: string;
+        /**
+         * A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
+         */
+        delete?: string;
+    }
+}
 export declare namespace scheduler {
     interface ScheduleFlexibleTimeWindow {
         /**
@@ -92133,6 +94182,16 @@ export declare namespace ssoadmin {
          */
         sources: string[];
     }
+    interface ManagedPolicyAttachmentsExclusiveTimeouts {
+        /**
+         * A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
+         */
+        create?: string;
+        /**
+         * A string that can be [parsed as a duration](https://pkg.go.dev/time#ParseDuration) consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
+         */
+        update?: string;
+    }
     interface PermissionsBoundaryAttachmentPermissionsBoundary {
         /**
          * Specifies the name and path of a customer managed policy. See below.
@@ -95117,6 +97176,102 @@ export declare namespace wafregional {
     }
 }
 export declare namespace wafv2 {
+    interface GetManagedRuleGroupAvailableLabel {
+        /**
+         * Managed rule group name.
+         */
+        name: string;
+    }
+    interface GetManagedRuleGroupConsumedLabel {
+        /**
+         * Managed rule group name.
+         */
+        name: string;
+    }
+    interface GetManagedRuleGroupRule {
+        /**
+         * Action taken on a web request when it matches a rule's statement. See `actionToUse` for details.
+         */
+        actions: outputs.wafv2.GetManagedRuleGroupRuleAction[];
+        /**
+         * Managed rule group name.
+         */
+        name: string;
+    }
+    interface GetManagedRuleGroupRuleAction {
+        allows: outputs.wafv2.GetManagedRuleGroupRuleActionAllow[];
+        blocks: outputs.wafv2.GetManagedRuleGroupRuleActionBlock[];
+        captchas: outputs.wafv2.GetManagedRuleGroupRuleActionCaptcha[];
+        challenges: outputs.wafv2.GetManagedRuleGroupRuleActionChallenge[];
+        counts: outputs.wafv2.GetManagedRuleGroupRuleActionCount[];
+    }
+    interface GetManagedRuleGroupRuleActionAllow {
+        customRequestHandlings: outputs.wafv2.GetManagedRuleGroupRuleActionAllowCustomRequestHandling[];
+    }
+    interface GetManagedRuleGroupRuleActionAllowCustomRequestHandling {
+        insertHeaders: outputs.wafv2.GetManagedRuleGroupRuleActionAllowCustomRequestHandlingInsertHeader[];
+    }
+    interface GetManagedRuleGroupRuleActionAllowCustomRequestHandlingInsertHeader {
+        /**
+         * Managed rule group name.
+         */
+        name: string;
+        value: string;
+    }
+    interface GetManagedRuleGroupRuleActionBlock {
+        customResponses: outputs.wafv2.GetManagedRuleGroupRuleActionBlockCustomResponse[];
+    }
+    interface GetManagedRuleGroupRuleActionBlockCustomResponse {
+        customResponseBodyKey: string;
+        responseCode: number;
+        responseHeaders: outputs.wafv2.GetManagedRuleGroupRuleActionBlockCustomResponseResponseHeader[];
+    }
+    interface GetManagedRuleGroupRuleActionBlockCustomResponseResponseHeader {
+        /**
+         * Managed rule group name.
+         */
+        name: string;
+        value: string;
+    }
+    interface GetManagedRuleGroupRuleActionCaptcha {
+        customRequestHandlings: outputs.wafv2.GetManagedRuleGroupRuleActionCaptchaCustomRequestHandling[];
+    }
+    interface GetManagedRuleGroupRuleActionCaptchaCustomRequestHandling {
+        insertHeaders: outputs.wafv2.GetManagedRuleGroupRuleActionCaptchaCustomRequestHandlingInsertHeader[];
+    }
+    interface GetManagedRuleGroupRuleActionCaptchaCustomRequestHandlingInsertHeader {
+        /**
+         * Managed rule group name.
+         */
+        name: string;
+        value: string;
+    }
+    interface GetManagedRuleGroupRuleActionChallenge {
+        customRequestHandlings: outputs.wafv2.GetManagedRuleGroupRuleActionChallengeCustomRequestHandling[];
+    }
+    interface GetManagedRuleGroupRuleActionChallengeCustomRequestHandling {
+        insertHeaders: outputs.wafv2.GetManagedRuleGroupRuleActionChallengeCustomRequestHandlingInsertHeader[];
+    }
+    interface GetManagedRuleGroupRuleActionChallengeCustomRequestHandlingInsertHeader {
+        /**
+         * Managed rule group name.
+         */
+        name: string;
+        value: string;
+    }
+    interface GetManagedRuleGroupRuleActionCount {
+        customRequestHandlings: outputs.wafv2.GetManagedRuleGroupRuleActionCountCustomRequestHandling[];
+    }
+    interface GetManagedRuleGroupRuleActionCountCustomRequestHandling {
+        insertHeaders: outputs.wafv2.GetManagedRuleGroupRuleActionCountCustomRequestHandlingInsertHeader[];
+    }
+    interface GetManagedRuleGroupRuleActionCountCustomRequestHandlingInsertHeader {
+        /**
+         * Managed rule group name.
+         */
+        name: string;
+        value: string;
+    }
     interface GetRegexPatternSetRegularExpression {
         /**
          * (Required) String representing the regular expression, see the AWS WAF [documentation](https://docs.aws.amazon.com/waf/latest/developerguide/waf-regex-pattern-set-creating.html) for more information.